, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:32 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) (async) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x30, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x3ffed5d3, 0x0) 20:59:32 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000023008100000080a99f25e832877198b0a200c250193cd26fade87b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='jbd2_write_superblock\x00', r0}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) 20:59:32 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) (async) r1 = inotify_init() (async) mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x6) inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfa) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r0, 0x0, 0x0) 20:59:32 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000023008100000080a99f25e832877198b0a200c250193cd26fade87b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='jbd2_write_superblock\x00', r0}, 0x10) (async) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) 20:59:32 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bind(r0, &(0x7f0000000200)=@ethernet={0x1, @broadcast}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000024000bc6ccba90000000000000000000", @ANYRES32=r1, @ANYBLOB="0000005852ffffff0600000008000500647272"], 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x8000200) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000dcd9a9eea4fb5bf968d7db4d9df04b00df0b6e335f595f667d72c9e483f4c52a2ce27d7ce3c5e7268b26b4550c4ee813adbddba530b9a2ad80e07218f4083efea5369daa3c2cbb13bac5fbb293798c46eb3247142455f2bac4f626c68ebe4910ced71fb5a8b62ea15d7baf51d95b31c2061f5d1c30ca08184443bf5683ff466771cea791464c7eb27a788e68e77798370b41fdfc6d7c135759d98de8126300d19849138d98e90800"/182, @ANYRES32=r5, @ANYBLOB="00000000000000001000000009000100666c6f77000000001000020006000a"], 0x40}}, 0x0) 20:59:32 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) r1 = inotify_init() mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x6) inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfa) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) (async) inotify_init() (async) mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x6) (async) inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfa) (async) pipe(&(0x7f0000000080)) (async) sendfile(r2, r0, 0x0, 0x0) (async) 20:59:32 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000800), 0x0, 0x880) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) write(r2, &(0x7f0000000100)="270000001400ff07030e000012030ae311000100f5fe0012fe400000078a151f75080039000500", 0x27) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000000)) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 174.636482][ T5906] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 174.658829][ T5906] __nla_validate_parse: 13 callbacks suppressed [ 174.658843][ T5906] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 20:59:33 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = gettid() sendmmsg$unix(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, r4}}}], 0x20}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:33 executing program 4: sched_getaffinity(0x0, 0x8, &(0x7f0000000000)) syz_clone(0x0, &(0x7f0000000040)="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", 0x1000, &(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0)="160255d3cb977563980f7349cf51b027dd467c098cecdacc0979563b6b589000206a6f85bb50260c70409c9d09b6bd1535d2c3707b4124fd6afbcca8577721954044d329d7c972bb578dd70286411a8b8923d47f5787ada9f7dd2c72c7a767212bb1fa390a012386f757767b0374873c38a639523179ceef89ab01ee88f10811c673ea0d06caec19111ff47037951f3689a37196404dbc8c995d7ba10adda9869544253ee4da1bbe5293c4d4cfe6d2873fa7ca17aa1ca82d1f73eda7733299dc3ffac43cfbefe0f5332790ae70a593cb922078e60365c4591ec4") 20:59:33 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:33 executing program 3: unshare(0x40000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x38000, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0xb}, 0xfffffff9}}, 0x0, 0x0, 0x29, 0x0, "664879b5de3eedc8b3a39ab0d697eba08aafc2f6a36faad6cb7d9da04dbecfdd6ad6fc11129f3029750f8515f22a3203762f826736d1a0344ec4b189cb22a9f01e9bfdc9d04785abff038660fc048c15"}, 0xd8) openat$cgroup_freezer_state(r4, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "697ae09ce11ae74e", "d6f81efb33857449dbb9586800caeea7", "c1fb25af", "c31d9d860fb0cf5b"}, 0x28) unshare(0x40000000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000200)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x38000, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0xb}, 0xfffffff9}}, 0x0, 0x0, 0x29, 0x0, "664879b5de3eedc8b3a39ab0d697eba08aafc2f6a36faad6cb7d9da04dbecfdd6ad6fc11129f3029750f8515f22a3203762f826736d1a0344ec4b189cb22a9f01e9bfdc9d04785abff038660fc048c15"}, 0xd8) (async) openat$cgroup_freezer_state(r4, 0x0, 0x2, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "697ae09ce11ae74e", "d6f81efb33857449dbb9586800caeea7", "c1fb25af", "c31d9d860fb0cf5b"}, 0x28) (async) 20:59:33 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000800), 0x0, 0x880) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) write(r2, &(0x7f0000000100)="270000001400ff07030e000012030ae311000100f5fe0012fe400000078a151f75080039000500", 0x27) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000000)) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) syz_open_dev$loop(&(0x7f0000000800), 0x0, 0x880) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x15) (async) write(r2, &(0x7f0000000100)="270000001400ff07030e000012030ae311000100f5fe0012fe400000078a151f75080039000500", 0x27) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000000)) (async) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) (async) 20:59:33 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bind(r0, &(0x7f0000000200)=@ethernet={0x1, @broadcast}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000024000bc6ccba90000000000000000000", @ANYRES32=r1, @ANYBLOB="0000005852ffffff0600000008000500647272"], 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x8000200) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000dcd9a9eea4fb5bf968d7db4d9df04b00df0b6e335f595f667d72c9e483f4c52a2ce27d7ce3c5e7268b26b4550c4ee813adbddba530b9a2ad80e07218f4083efea5369daa3c2cbb13bac5fbb293798c46eb3247142455f2bac4f626c68ebe4910ced71fb5a8b62ea15d7baf51d95b31c2061f5d1c30ca08184443bf5683ff466771cea791464c7eb27a788e68e77798370b41fdfc6d7c135759d98de8126300d19849138d98e90800"/182, @ANYRES32=r5, @ANYBLOB="00000000000000001000000009000100666c6f77000000001000020006000a"], 0x40}}, 0x0) unshare(0x6c060000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket(0x11, 0x800000003, 0x0) (async) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) bind(r0, &(0x7f0000000200)=@ethernet={0x1, @broadcast}, 0x80) (async) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000024000bc6ccba90000000000000000000", @ANYRES32=r1, @ANYBLOB="0000005852ffffff0600000008000500647272"], 0x2c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x8000200) (async) socket(0x11, 0x800000003, 0x0) (async) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000dcd9a9eea4fb5bf968d7db4d9df04b00df0b6e335f595f667d72c9e483f4c52a2ce27d7ce3c5e7268b26b4550c4ee813adbddba530b9a2ad80e07218f4083efea5369daa3c2cbb13bac5fbb293798c46eb3247142455f2bac4f626c68ebe4910ced71fb5a8b62ea15d7baf51d95b31c2061f5d1c30ca08184443bf5683ff466771cea791464c7eb27a788e68e77798370b41fdfc6d7c135759d98de8126300d19849138d98e90800"/182, @ANYRES32=r5, @ANYBLOB="00000000000000001000000009000100666c6f77000000001000020006000a"], 0x40}}, 0x0) (async) 20:59:33 executing program 4: sched_getaffinity(0x0, 0x8, &(0x7f0000000000)) syz_clone(0x0, &(0x7f0000000040)="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", 0x1000, &(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0)="160255d3cb977563980f7349cf51b027dd467c098cecdacc0979563b6b589000206a6f85bb50260c70409c9d09b6bd1535d2c3707b4124fd6afbcca8577721954044d329d7c972bb578dd70286411a8b8923d47f5787ada9f7dd2c72c7a767212bb1fa390a012386f757767b0374873c38a639523179ceef89ab01ee88f10811c673ea0d06caec19111ff47037951f3689a37196404dbc8c995d7ba10adda9869544253ee4da1bbe5293c4d4cfe6d2873fa7ca17aa1ca82d1f73eda7733299dc3ffac43cfbefe0f5332790ae70a593cb922078e60365c4591ec4") [ 174.918862][ T5915] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 174.926972][ T5915] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 20:59:33 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000800), 0x0, 0x880) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) write(r2, &(0x7f0000000100)="270000001400ff07030e000012030ae311000100f5fe0012fe400000078a151f75080039000500", 0x27) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000000)) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) syz_open_dev$loop(&(0x7f0000000800), 0x0, 0x880) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x15) (async) write(r2, &(0x7f0000000100)="270000001400ff07030e000012030ae311000100f5fe0012fe400000078a151f75080039000500", 0x27) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000000)) (async) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) (async) 20:59:33 executing program 4: sched_getaffinity(0x0, 0x8, &(0x7f0000000000)) syz_clone(0x0, &(0x7f0000000040)="2cd47797e681179a6471f14cfb88662bfdd28d24e0f68eb99258a51fb821b81c0a2e02df038fcf6e6c608a078ea27c3e22e47112b015e018c67d24240a45a3a72d2d3f602a7864426754f7faf41e0f6841ccf2f106a94cfd1856da2b807a28148dddbbaf91f7264dc08444cfdbc0a59c888ec74ad58fb674ad92c2997711c09dbad2d47448fe9031a4d4aa8165bfb8942ca129a6bc455ec9d012e764293e7a0a11a82bb762cbd286d97ba76f2d6477eb6ea484bc106b6121b9f19d5088703b09516c0ad395c37241c96eb46b6212ca583b380b0df2a26f23cb6cd302af9cac3cf073f65ba6844253218f2bbd870f32d49b78ac78f63d0a9784028844a54c8fc7905cd0bceb37a46c0dcbf6ae5f0f2ea0313361946878ff37735f00fb9e6429ef4b2c9df8d36853b1d9c53b4f19c60de7bcdd35834bf02343481a48dbc0671d28a434d17beef1f72ce20fc030b124f17a1f2dc04eacd550acdf0ed3a030f1bd22d726385784260628c38f865f55554adcdb8b068637736cac6869d57e75da307032305d642f690c3cfb2d3c43a20937f34bd73fb2cf19ce5c0a574df8de7d908edc9f4cb84eff542de46da5a7a7872daef71aaebca7e211479ca894756cd8c8cb95bff11d9f43a8c1ae913e230f9ee9fded02e40e8e48e30e6365b63cde1b18d25a82777168085878325ecd4e6d8196ab8e6c8f63dc0c19d61714aa32a4c036e82546a62bb61e94438a658b7611b4018663a846bffab3e31e4533343c971fcb3b13e74bc482fc99799259431f764779a0a4dfaf293ca5aae96b4446e5ef3eae406e2d75e626eece81a80a247fc35a07da3053ca660447a21302defd9e38eeec1d4e96c4a6d0c370b41ed15ace29971dbaf5644b184d12df998169af3f810e72540bdd6b0a1507e1d80cf3706420f1185354a4430e7a0f82d2ba1f51468946b165218a386a2b335b35b102514116eee6d15bce9152619afc6d83be982521cf9cba8bb3c940b4cd30d1cce1776f361275515a5c09c7ad56b75554712bb535d03ba3cfc1762c0d1e7a87e30ee61bfb96af4574842833b6c6d1288b1ac2f68de78ca754b924f12faf93f251bf83d7961caca48ca903b79618404d3528b514e74cbd52f36e7bdb826cf4ad8cf99e964f617807731ef43e67f12064e6655bf2bb228369139b3a55ad7ff9cb789602cdf522134ab81ba56b2430865383304fc9cb53219737010fb59da9b3b0dff88c5dae668f1d50b02a2c1fcffbe4141eccf832528669e6925d1e80a1c3b85ebdb9c8058ef52e324161b6fa394a2af254ce30cb3d1abd88261f32ff713c64e27a50036b7ac0d092e1d9e4407be03b4484a28133d310bdf89325157968c2c0fd091eee7b6bac7846923900b3207a993aa25fec4a6682a881b8c13931b992b28390b4cebe6cc3867a0f744546db7b85df3007c4998b248ce5c03d76330af4b59531c16a7eba9584c10276ccd341f7309ae535f0b05fe841637ec7a2fa3ed9eedf734cc5b2d04aaa54d77d0a24667a581243357cb26834d389eb8f5d46bf6a52c2b4b3c87451ce12d6a3ff1762c65611e022c9a78d2b0a38905f465c8ab97411b90fa7607dccd9843f7dc0096981c7f8e31335247c7aa1a3049c74ac29b8498d3d573e4340abf32b4896bc99c42a8a2ffda5a2a807b4ce645ba72887a5c9baf33517d3918ad3184b10528c2479a2853e43e01888f257970f665787a9a7b130ff0c9f53cc18518e052243ab732758024329ac499ffcedc0b855b29d4f0895f9868caa0680dd62bad64cc4c63b49b38c4cd2d4d73d146fd2e411b27a9f79a1112c8730721db37f5c7f5a76139f11307777742e56e23a1a7521378b422a990412c31111556b0225b0429e6d4674f8b2942d5f0a288195ed741a6bcb048a289eee5e67f85f301362aea858b21f462418e7f66d85ab40b001f922cbfa942fc7f5b8a7d064f960c33ad097e19417dd74ca07a93a6e238eac3a1fcdf3bb5943755e2e54f181aa8586f58115c1f9dadb9e491d2ff3994af965c41507c682eb6a19bdf603c6ff7298ca1afe877f01134cb72c1c3d2384e09fe4ac6b504c1f082acd2c526537d03dc7ee8174e8bf9184a679a395441ed998851f9fba75987f612c14eb116000e2754f2ef11cf2fab769978852bfebdb5adbd2bef72042fd6cf6c6ac86186ec622d842b8d54065c5ea96bb1b5add55b12ab2a5f1c43d54137f8b8c08d3f07481921cd24ee792bcb3718cf64a149d4d6571fd9fd284cd32fa5fa7772e8b6417be14d8e6ee5974ee2ae0114a66a423cd8e6ebdf8bc37ee93699529525018cd7d272eef29fb4585bb2541c66870be25538d0554aabfac7b3415a937121c4eb9e61c8634d55ef7e574a470c67da9f0b6409727fe5dedbac80b005156219b089cdfe3a762bf4b34d6ebabc59a4e306fced62590a600c3d4528ee7c65d9e062c3dd64dcae45e6bbe31aace0c2971ab952435796cf5ba4190247985343dad5fc230d39c5c1cd83112ca020b551925569e1b0e06a38a7c03fd56789a223e0e614245f503afec65a5d74230948990706832c55c4fdfaaca9a50e4a6bc4d933e6c4b5aeaf404f6cbf680c95f97bef2b3e50a171a21ca3218c00ea0e86e50c0948b449a29f86cf2db028c5b1af6c19af12bbbd837ec9552ed56c13d85a1a47f8aec77d1aafd008c707819b7480a7d343a82c88f42ac7e102a447067bd47676c606c83823764e37056cf6fee1aa15b1d30c4b07b19f04408cac3d311503fa9faef1b974f1e39f65811bf9b6321bd20977a3983fe09648fe812c04556a2e640f56144e9179f3a1ff06a3a946c3423ffa3d1690dd57745705991998b8c2466274f9ecfdae916b724f17bafc3a6e6726010dcf77cf2236de756829c471a9085f7bf32e34da1e10d783c55960185d679ae6ff63b7e806979e34ed11210278f509db35e9cba98fd2c8ca7994c0f39a43740f40ce1028f78c38d8a156ab0f562def9ea079ff66b18fc9619610adc019aa0d7e848e74a307584d33eb1d322ce5886ed87477743299f59c4d80bc29726037038609ae5c9cd82d4b0a67e34b56dcac8960a3c0e733d10d4c8505f11d72c1a2fd35db77409d0e8a9628243db9da1e97a49d34cbb29c83a2ec92bf62338c13c3151f360933f64dd8cf6ef1449ae2fccb6e672e8920701253854b8e35846017be4ada86520693ca5a58ec9af16b6c882dd5a11c01f22f4f1fe7946b8887eff30942ca5f88f861a813eb581df3678cea738c982abe4935cd6cbcfa6a2b77333c5561f45f0a1b123c772b378002ae9906d9cd64c76227854cd345e42ba8f43bbf59b790e5ff4c1f012692246e92a7188bed875ed53cf12d62cd5e065bc2734b301b7f71f41a5ba0471bc87121c5e60549bbddfe6498a2d4033247039e488165363e2175eef7a3da0797e048f725ba63ee2500377cce63fb3c287ca7c9dfefe140589bb49ef47258d5fdb06e1106db1c09b6bf067e8fb0f33c9549c3e85cf37b798aa153afe079460b4cf80b682b761be63e0b0dbdfd864e962de1967682d00f6394aeb20f5b12249ada3497efc54bf0448e3500e15e8a2a1a18816e5991f04d169defb8ad5709b3ce5360643098b9acf3fd98e1bc090dea4547796c6417b99998cc7d044bb2ee39dc065b3e267e70d1519054b8189d9b9515de6621db394961eb36c40a8b583f8f0993d8defdc451b67221dea18de39ded8a7365b9df5acd057fb1fe851e4d0c13643132b63020342c538f8772a028e479c11e9f8dda91ee437ce492dd521c80a96b91773414bf4afa5a3009676faaa123acd05269ddb81944b7623441059cf75b7774f11dfe64ef461f3ff74c2e9e5b23e8af5f568ebed6e4c607254384f332b85b79c934d11a79d903e86315cb2423133ba79a88c7819de652e9c414bc1a9a5e7be1284979b1d9bcbbfcf54282e69ef321e75f4a88fd481da331b4107831fb98b4b030b59c136c1ed4bb2b14746ff39d56aae62fc67414dd60090cdefaffff5bc314a67ab10efaa6650723ab9d6c32f08d5141d973baee989f9c7aeb1a1f3155ef6ecb01233695c18fc0e7d00c8d877eaee138345785b454cfb4ec2e3a865545f165cb73ad46e7b778fc5a19436782c980113bace1a7536071c583e67ccb4b20f0ec562f90792ae51d4a595a3f8991cd8ca17592dd18eb0a5401d0ff56abc9a24a4ef4b0fc84c0a5323eb1098e06ca5a28d57b4cd071b01f519eb1eb668a3ea23fb120811c74c420a093f599ec37c735eaa28d677d528fb007255e420d6efe2aab2be091ae71f57c0b632130d31005c686e888f22969a32a1557a19436f54f74e0e2456051541941c4624832a03925282e0e7419028f8ee5a9760edaf4eda5feea5eb65e4b4c8ffb0b7b16cacc814e9579a4bb1cfd910e6e3b03c932f6af90cdcac1e931aebfbb2316d49d5c3994495b7e60cd24a31383ac6f7f799537163145d20f4568dd0132a84268a6a8374870aa8d7ad23f9b66d08073e5f095dc21915ecfdb5f621b6288a4f0d68d9c840850510f571e3158d9db162be154d4b27f18ab61558073672edf6d2c32b35ed2e4894415bff8c41bb98a406720c3df568a2a2e9b5b9bab7d04ae13aee90152145b040fc0df4efb130ab83105336157a66ce132d751d69226c85cd9e0008ccdfcbe92aafafd85ce49c7b6bcde3fa436ddda7b8d3b7806876708bfb26a0c93d022922938144038d42f2848df48f9a5cd25d2e170a1f73345337c5892ce1c9bd9ff27f0e19674e77defe922e2e4cf8fd2d556dfca76a1fe34ded75dca5b30565c2995a2b2a52a1c623ee6cd6e64cae5159e353cfe0baf1659380f3268679a83ee052aa397e0b82f1becf1de92b15f37a1a8369433cf33e5933e860d4597a7918e020f222ea011b4c31cf9fb28417bb197bbc56e3fcfca683177fe9b6ad703b1615239fdb78c9999d7f91b83af121850fde5383a8ab9e133a60b0371034cb14a0746d943aa4fd6f87d42c0751fd932df7e2d5f7bf4ec170edf744defd57b5e9da0e1483a6dd45cf4a3bb11c2b0ebc0ffe369c650ecf9efae72431a7cf8eb9f49323d9834a452b6c4e709172811411bf80a6a514458e944c15548e358e9733e838204fd18dc232f5ea0a7b32c6fb82c5e9938fd429c0d771695efe5653e46060062f2db2d66b30f9417ae71f163120cc49d41690a83a4fa9a6dc6483891c0ad0d854ec36d5afc8fb818d8c6f4dbde666588dbbb298df6a7067a587cecea1dd81a0422e6cc1de87a50e3244ce4485950da983d92dcecf089536372d82d01fcded7fb3bf510dc908cef0b54fbab0ada40a8f877937fcfc6c20266d92bb3c607c8b0883655d2b7f59c20cf0ceb83e4e93d572628d83813759f3913dfdb7575f656cf53867db07b5c0a5867a95f541bc6c033401ff9e39bc364c05bd29a7eeee3af1fd2d7f31a769cf2b3ca3bcd5ad419af7eafbc57c6cfffee6231eba73ac6fa527e0c556e610538284fd45001245e2ce49629eef62ff03df9c18568f49d1c7044fa5b47dba84d998335505da692437dfa3cde4d7e6868deb996fb105e346b7fb5dce73f6a912ed3ddceb9960f27718b667a236830440f423fc4fb953159c2e86a3064a0cc9cb002de14f6638b5fc1b9adaaff6b02a142bfd6af2fba72073f78afacf42de05572170ceb825a403681dce1f4662068f32c8bb6d6271a875402956e3eae132b3b5077f5ddef58b7ce75254f6a68beca89a1fbdb2f5f451a312b8c8acb59254b06d8353a62560ddaf3c6e1a7fe8b18f4bd7045b43bc05644ba2b2f7", 0x1000, &(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0)="160255d3cb977563980f7349cf51b027dd467c098cecdacc0979563b6b589000206a6f85bb50260c70409c9d09b6bd1535d2c3707b4124fd6afbcca8577721954044d329d7c972bb578dd70286411a8b8923d47f5787ada9f7dd2c72c7a767212bb1fa390a012386f757767b0374873c38a639523179ceef89ab01ee88f10811c673ea0d06caec19111ff47037951f3689a37196404dbc8c995d7ba10adda9869544253ee4da1bbe5293c4d4cfe6d2873fa7ca17aa1ca82d1f73eda7733299dc3ffac43cfbefe0f5332790ae70a593cb922078e60365c4591ec4") 20:59:33 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:33 executing program 3: unshare(0x40000000) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) (async, rerun: 64) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000200)) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x38000, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0xb}, 0xfffffff9}}, 0x0, 0x0, 0x29, 0x0, "664879b5de3eedc8b3a39ab0d697eba08aafc2f6a36faad6cb7d9da04dbecfdd6ad6fc11129f3029750f8515f22a3203762f826736d1a0344ec4b189cb22a9f01e9bfdc9d04785abff038660fc048c15"}, 0xd8) openat$cgroup_freezer_state(r4, 0x0, 0x2, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "697ae09ce11ae74e", "d6f81efb33857449dbb9586800caeea7", "c1fb25af", "c31d9d860fb0cf5b"}, 0x28) [ 175.059927][ T5947] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 20:59:33 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x9, {[@main=@item_4={0x3, 0x0, 0xa, "eb651d24"}, @global=@item_012={0x1, 0x1, 0x0, '\x00'}, @global=@item_012={0x1, 0x1, 0x1, '6'}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "ff97624b"}, @global=@item_4={0x3, 0x1, 0xa, "2c46ec25"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) [ 175.120105][ T5947] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 20:59:33 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:33 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:33 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000280), &(0x7f00000002c0)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x198) connect(0xffffffffffffffff, &(0x7f0000000580)=@caif=@dgm={0x25, 0x0, 0xfb}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000006f40)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000006d00)=[{{&(0x7f00000006c0)=@nfc, 0x80, &(0x7f0000000a40)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000880)=""/213, 0xd5}, {&(0x7f0000000480)=""/46, 0x2e}, {&(0x7f0000000980)=""/152, 0x98}], 0x4, &(0x7f0000000a80)=""/223, 0xdf}}, {{&(0x7f0000000b80)=@sco={0x1f, @none}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c00)=""/215, 0xd7}], 0x1, &(0x7f0000000d40)=""/1, 0x1}, 0x7}, {{&(0x7f0000000d80)=@nfc, 0x80, &(0x7f0000003080)=[{&(0x7f0000000e00)=""/10, 0xa}, {&(0x7f0000000e40)=""/119, 0x77}, {&(0x7f0000000ec0)=""/95, 0x5f}, {&(0x7f0000000f40)=""/69, 0x45}, {&(0x7f0000002fc0)=""/173, 0xad}], 0x5, &(0x7f0000003100)=""/110, 0x6e}, 0x60e}, {{&(0x7f0000003180)=@phonet, 0x80, &(0x7f00000032c0)=[{&(0x7f0000003200)=""/142, 0x8e}], 0x1, &(0x7f0000003300)=""/250, 0xfa}, 0x4}, {{&(0x7f0000003400)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003480)=""/101, 0x65}, {&(0x7f0000003500)=""/230, 0xe6}, {&(0x7f0000003600)=""/67, 0x43}, {&(0x7f0000003800)=""/244, 0xf4}, {&(0x7f0000003680)=""/12, 0xc}, {&(0x7f0000003900)=""/216, 0xd8}, {&(0x7f0000003a00)=""/160, 0xa0}, {&(0x7f0000003740)=""/92, 0x5c}, {&(0x7f0000003ac0)=""/89, 0x59}], 0x9, &(0x7f0000003c00)=""/72, 0x48}, 0x59948003}, {{&(0x7f0000003c80)=@isdn, 0x80, &(0x7f0000004240)=[{&(0x7f0000003d00)=""/247, 0xf7}, {&(0x7f0000003e00)=""/192, 0xc0}, {&(0x7f0000003ec0)=""/173, 0xad}, {&(0x7f0000003f80)=""/236, 0xec}, {&(0x7f0000004080)=""/193, 0xc1}, {&(0x7f0000004180)=""/133, 0x85}], 0x6, &(0x7f00000036c0)=""/38, 0x26}, 0x76}, {{&(0x7f00000042c0)=@generic, 0x80, &(0x7f0000005600)=[{&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000005340)=""/120, 0x78}, {&(0x7f00000053c0)=""/209, 0xd1}, {&(0x7f00000054c0)=""/198, 0xc6}, {&(0x7f00000055c0)=""/30, 0x1e}], 0x5, &(0x7f0000005680)=""/113, 0x71}, 0xa125000}, {{&(0x7f0000005700)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000005900)=[{&(0x7f0000005780)=""/74, 0x4a}, {&(0x7f0000005800)=""/21, 0x15}, {&(0x7f0000005840)=""/131, 0x83}], 0x3}, 0x4bd}, {{&(0x7f0000005940)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000006c80)=[{&(0x7f00000059c0)=""/133, 0x85}, {&(0x7f0000005a80)=""/82, 0x52}, {&(0x7f0000005b00)=""/50, 0x32}, {&(0x7f0000005b40)=""/136, 0x88}, {&(0x7f0000005c00)=""/4096, 0x1000}, {&(0x7f0000006c00)=""/110, 0x6e}], 0x6}, 0x7}], 0x9, 0x10100, &(0x7f0000006f80)={r3, r4+10000000}) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x308}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x42d}, {&(0x7f0000000400)=""/106, 0x298}, {&(0x7f0000000740)=""/73, 0x8d}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r5 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000300)=0x10, 0x4) 20:59:33 executing program 3: getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 20:59:33 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:33 executing program 1: unshare(0x6c060000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) bind(r0, &(0x7f0000000200)=@ethernet={0x1, @broadcast}, 0x80) (async) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000024000bc6ccba90000000000000000000", @ANYRES32=r1, @ANYBLOB="0000005852ffffff0600000008000500647272"], 0x2c}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x8000200) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000dcd9a9eea4fb5bf968d7db4d9df04b00df0b6e335f595f667d72c9e483f4c52a2ce27d7ce3c5e7268b26b4550c4ee813adbddba530b9a2ad80e07218f4083efea5369daa3c2cbb13bac5fbb293798c46eb3247142455f2bac4f626c68ebe4910ced71fb5a8b62ea15d7baf51d95b31c2061f5d1c30ca08184443bf5683ff466771cea791464c7eb27a788e68e77798370b41fdfc6d7c135759d98de8126300d19849138d98e90800"/182, @ANYRES32=r5, @ANYBLOB="00000000000000001000000009000100666c6f77000000001000020006000a"], 0x40}}, 0x0) 20:59:33 executing program 3: getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 20:59:33 executing program 3: getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 20:59:33 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) shmat(0x0, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(0x0, &(0x7f00000e5000/0x2000)=nil, 0x3000) r1 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:33 executing program 3: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:33 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) shmat(0x0, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(0x0, &(0x7f00000e5000/0x2000)=nil, 0x3000) r1 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:36 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x9, {[@main=@item_4={0x3, 0x0, 0xa, "eb651d24"}, @global=@item_012={0x1, 0x1, 0x0, '\x00'}, @global=@item_012={0x1, 0x1, 0x1, '6'}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "ff97624b"}, @global=@item_4={0x3, 0x1, 0xa, "2c46ec25"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x9, {[@main=@item_4={0x3, 0x0, 0xa, "eb651d24"}, @global=@item_012={0x1, 0x1, 0x0, '\x00'}, @global=@item_012={0x1, 0x1, 0x1, '6'}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "ff97624b"}, @global=@item_4={0x3, 0x1, 0xa, "2c46ec25"}]}}, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) 20:59:36 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) shmat(0x0, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(0x0, &(0x7f00000e5000/0x2000)=nil, 0x3000) r1 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:36 executing program 3: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) shmat(0x0, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(0x0, &(0x7f00000e5000/0x2000)=nil, 0x3000) r1 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:36 executing program 1: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) shmat(0x0, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(0x0, &(0x7f00000e5000/0x2000)=nil, 0x3000) r1 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:36 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:36 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000280), &(0x7f00000002c0)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x198) connect(0xffffffffffffffff, &(0x7f0000000580)=@caif=@dgm={0x25, 0x0, 0xfb}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000006f40)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000006d00)=[{{&(0x7f00000006c0)=@nfc, 0x80, &(0x7f0000000a40)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000880)=""/213, 0xd5}, {&(0x7f0000000480)=""/46, 0x2e}, {&(0x7f0000000980)=""/152, 0x98}], 0x4, &(0x7f0000000a80)=""/223, 0xdf}}, {{&(0x7f0000000b80)=@sco={0x1f, @none}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c00)=""/215, 0xd7}], 0x1, &(0x7f0000000d40)=""/1, 0x1}, 0x7}, {{&(0x7f0000000d80)=@nfc, 0x80, &(0x7f0000003080)=[{&(0x7f0000000e00)=""/10, 0xa}, {&(0x7f0000000e40)=""/119, 0x77}, {&(0x7f0000000ec0)=""/95, 0x5f}, {&(0x7f0000000f40)=""/69, 0x45}, {&(0x7f0000002fc0)=""/173, 0xad}], 0x5, &(0x7f0000003100)=""/110, 0x6e}, 0x60e}, {{&(0x7f0000003180)=@phonet, 0x80, &(0x7f00000032c0)=[{&(0x7f0000003200)=""/142, 0x8e}], 0x1, &(0x7f0000003300)=""/250, 0xfa}, 0x4}, {{&(0x7f0000003400)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003480)=""/101, 0x65}, {&(0x7f0000003500)=""/230, 0xe6}, {&(0x7f0000003600)=""/67, 0x43}, {&(0x7f0000003800)=""/244, 0xf4}, {&(0x7f0000003680)=""/12, 0xc}, {&(0x7f0000003900)=""/216, 0xd8}, {&(0x7f0000003a00)=""/160, 0xa0}, {&(0x7f0000003740)=""/92, 0x5c}, {&(0x7f0000003ac0)=""/89, 0x59}], 0x9, &(0x7f0000003c00)=""/72, 0x48}, 0x59948003}, {{&(0x7f0000003c80)=@isdn, 0x80, &(0x7f0000004240)=[{&(0x7f0000003d00)=""/247, 0xf7}, {&(0x7f0000003e00)=""/192, 0xc0}, {&(0x7f0000003ec0)=""/173, 0xad}, {&(0x7f0000003f80)=""/236, 0xec}, {&(0x7f0000004080)=""/193, 0xc1}, {&(0x7f0000004180)=""/133, 0x85}], 0x6, &(0x7f00000036c0)=""/38, 0x26}, 0x76}, {{&(0x7f00000042c0)=@generic, 0x80, &(0x7f0000005600)=[{&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000005340)=""/120, 0x78}, {&(0x7f00000053c0)=""/209, 0xd1}, {&(0x7f00000054c0)=""/198, 0xc6}, {&(0x7f00000055c0)=""/30, 0x1e}], 0x5, &(0x7f0000005680)=""/113, 0x71}, 0xa125000}, {{&(0x7f0000005700)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000005900)=[{&(0x7f0000005780)=""/74, 0x4a}, {&(0x7f0000005800)=""/21, 0x15}, {&(0x7f0000005840)=""/131, 0x83}], 0x3}, 0x4bd}, {{&(0x7f0000005940)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000006c80)=[{&(0x7f00000059c0)=""/133, 0x85}, {&(0x7f0000005a80)=""/82, 0x52}, {&(0x7f0000005b00)=""/50, 0x32}, {&(0x7f0000005b40)=""/136, 0x88}, {&(0x7f0000005c00)=""/4096, 0x1000}, {&(0x7f0000006c00)=""/110, 0x6e}], 0x6}, 0x7}], 0x9, 0x10100, &(0x7f0000006f80)={r3, r4+10000000}) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x308}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x42d}, {&(0x7f0000000400)=""/106, 0x298}, {&(0x7f0000000740)=""/73, 0x8d}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r5 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000300)=0x10, 0x4) socket(0x10, 0x803, 0x0) (async) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000280), &(0x7f00000002c0)=0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x198) (async) connect(0xffffffffffffffff, &(0x7f0000000580)=@caif=@dgm={0x25, 0x0, 0xfb}, 0x80) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) (async) clock_gettime(0x0, &(0x7f0000006f40)) (async) recvmmsg(r2, &(0x7f0000006d00)=[{{&(0x7f00000006c0)=@nfc, 0x80, &(0x7f0000000a40)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000880)=""/213, 0xd5}, {&(0x7f0000000480)=""/46, 0x2e}, {&(0x7f0000000980)=""/152, 0x98}], 0x4, &(0x7f0000000a80)=""/223, 0xdf}}, {{&(0x7f0000000b80)=@sco={0x1f, @none}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c00)=""/215, 0xd7}], 0x1, &(0x7f0000000d40)=""/1, 0x1}, 0x7}, {{&(0x7f0000000d80)=@nfc, 0x80, &(0x7f0000003080)=[{&(0x7f0000000e00)=""/10, 0xa}, {&(0x7f0000000e40)=""/119, 0x77}, {&(0x7f0000000ec0)=""/95, 0x5f}, {&(0x7f0000000f40)=""/69, 0x45}, {&(0x7f0000002fc0)=""/173, 0xad}], 0x5, &(0x7f0000003100)=""/110, 0x6e}, 0x60e}, {{&(0x7f0000003180)=@phonet, 0x80, &(0x7f00000032c0)=[{&(0x7f0000003200)=""/142, 0x8e}], 0x1, &(0x7f0000003300)=""/250, 0xfa}, 0x4}, {{&(0x7f0000003400)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003480)=""/101, 0x65}, {&(0x7f0000003500)=""/230, 0xe6}, {&(0x7f0000003600)=""/67, 0x43}, {&(0x7f0000003800)=""/244, 0xf4}, {&(0x7f0000003680)=""/12, 0xc}, {&(0x7f0000003900)=""/216, 0xd8}, {&(0x7f0000003a00)=""/160, 0xa0}, {&(0x7f0000003740)=""/92, 0x5c}, {&(0x7f0000003ac0)=""/89, 0x59}], 0x9, &(0x7f0000003c00)=""/72, 0x48}, 0x59948003}, {{&(0x7f0000003c80)=@isdn, 0x80, &(0x7f0000004240)=[{&(0x7f0000003d00)=""/247, 0xf7}, {&(0x7f0000003e00)=""/192, 0xc0}, {&(0x7f0000003ec0)=""/173, 0xad}, {&(0x7f0000003f80)=""/236, 0xec}, {&(0x7f0000004080)=""/193, 0xc1}, {&(0x7f0000004180)=""/133, 0x85}], 0x6, &(0x7f00000036c0)=""/38, 0x26}, 0x76}, {{&(0x7f00000042c0)=@generic, 0x80, &(0x7f0000005600)=[{&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000005340)=""/120, 0x78}, {&(0x7f00000053c0)=""/209, 0xd1}, {&(0x7f00000054c0)=""/198, 0xc6}, {&(0x7f00000055c0)=""/30, 0x1e}], 0x5, &(0x7f0000005680)=""/113, 0x71}, 0xa125000}, {{&(0x7f0000005700)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000005900)=[{&(0x7f0000005780)=""/74, 0x4a}, {&(0x7f0000005800)=""/21, 0x15}, {&(0x7f0000005840)=""/131, 0x83}], 0x3}, 0x4bd}, {{&(0x7f0000005940)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000006c80)=[{&(0x7f00000059c0)=""/133, 0x85}, {&(0x7f0000005a80)=""/82, 0x52}, {&(0x7f0000005b00)=""/50, 0x32}, {&(0x7f0000005b40)=""/136, 0x88}, {&(0x7f0000005c00)=""/4096, 0x1000}, {&(0x7f0000006c00)=""/110, 0x6e}], 0x6}, 0x7}], 0x9, 0x10100, &(0x7f0000006f80)={r3, r4+10000000}) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x308}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x42d}, {&(0x7f0000000400)=""/106, 0x298}, {&(0x7f0000000740)=""/73, 0x8d}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000300)=0x10, 0x4) (async) 20:59:36 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) r0 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r0, &(0x7f00000e5000/0x2000)=nil, 0x3000) r1 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:36 executing program 3: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) shmat(0x0, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(0x0, &(0x7f00000e5000/0x2000)=nil, 0x3000) r1 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:36 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:36 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000280), &(0x7f00000002c0)=0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x198) connect(0xffffffffffffffff, &(0x7f0000000580)=@caif=@dgm={0x25, 0x0, 0xfb}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000006f40)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000006d00)=[{{&(0x7f00000006c0)=@nfc, 0x80, &(0x7f0000000a40)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000880)=""/213, 0xd5}, {&(0x7f0000000480)=""/46, 0x2e}, {&(0x7f0000000980)=""/152, 0x98}], 0x4, &(0x7f0000000a80)=""/223, 0xdf}}, {{&(0x7f0000000b80)=@sco={0x1f, @none}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c00)=""/215, 0xd7}], 0x1, &(0x7f0000000d40)=""/1, 0x1}, 0x7}, {{&(0x7f0000000d80)=@nfc, 0x80, &(0x7f0000003080)=[{&(0x7f0000000e00)=""/10, 0xa}, {&(0x7f0000000e40)=""/119, 0x77}, {&(0x7f0000000ec0)=""/95, 0x5f}, {&(0x7f0000000f40)=""/69, 0x45}, {&(0x7f0000002fc0)=""/173, 0xad}], 0x5, &(0x7f0000003100)=""/110, 0x6e}, 0x60e}, {{&(0x7f0000003180)=@phonet, 0x80, &(0x7f00000032c0)=[{&(0x7f0000003200)=""/142, 0x8e}], 0x1, &(0x7f0000003300)=""/250, 0xfa}, 0x4}, {{&(0x7f0000003400)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003480)=""/101, 0x65}, {&(0x7f0000003500)=""/230, 0xe6}, {&(0x7f0000003600)=""/67, 0x43}, {&(0x7f0000003800)=""/244, 0xf4}, {&(0x7f0000003680)=""/12, 0xc}, {&(0x7f0000003900)=""/216, 0xd8}, {&(0x7f0000003a00)=""/160, 0xa0}, {&(0x7f0000003740)=""/92, 0x5c}, {&(0x7f0000003ac0)=""/89, 0x59}], 0x9, &(0x7f0000003c00)=""/72, 0x48}, 0x59948003}, {{&(0x7f0000003c80)=@isdn, 0x80, &(0x7f0000004240)=[{&(0x7f0000003d00)=""/247, 0xf7}, {&(0x7f0000003e00)=""/192, 0xc0}, {&(0x7f0000003ec0)=""/173, 0xad}, {&(0x7f0000003f80)=""/236, 0xec}, {&(0x7f0000004080)=""/193, 0xc1}, {&(0x7f0000004180)=""/133, 0x85}], 0x6, &(0x7f00000036c0)=""/38, 0x26}, 0x76}, {{&(0x7f00000042c0)=@generic, 0x80, &(0x7f0000005600)=[{&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000005340)=""/120, 0x78}, {&(0x7f00000053c0)=""/209, 0xd1}, {&(0x7f00000054c0)=""/198, 0xc6}, {&(0x7f00000055c0)=""/30, 0x1e}], 0x5, &(0x7f0000005680)=""/113, 0x71}, 0xa125000}, {{&(0x7f0000005700)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000005900)=[{&(0x7f0000005780)=""/74, 0x4a}, {&(0x7f0000005800)=""/21, 0x15}, {&(0x7f0000005840)=""/131, 0x83}], 0x3}, 0x4bd}, {{&(0x7f0000005940)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000006c80)=[{&(0x7f00000059c0)=""/133, 0x85}, {&(0x7f0000005a80)=""/82, 0x52}, {&(0x7f0000005b00)=""/50, 0x32}, {&(0x7f0000005b40)=""/136, 0x88}, {&(0x7f0000005c00)=""/4096, 0x1000}, {&(0x7f0000006c00)=""/110, 0x6e}], 0x6}, 0x7}], 0x9, 0x10100, &(0x7f0000006f80)={r3, r4+10000000}) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x308}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x42d}, {&(0x7f0000000400)=""/106, 0x298}, {&(0x7f0000000740)=""/73, 0x8d}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) r5 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000300)=0x10, 0x4) 20:59:36 executing program 3: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) shmat(0x0, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(0x0, &(0x7f00000e5000/0x2000)=nil, 0x3000) r1 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0001e300", @ANYRES32=0x0, @ANYBLOB="0800010001000000"], 0x20}}, 0x0) 20:59:39 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x9, {[@main=@item_4={0x3, 0x0, 0xa, "eb651d24"}, @global=@item_012={0x1, 0x1, 0x0, '\x00'}, @global=@item_012={0x1, 0x1, 0x1, '6'}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "ff97624b"}, @global=@item_4={0x3, 0x1, 0xa, "2c46ec25"}]}}, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) 20:59:39 executing program 3: syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000000140)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) getdents64(r0, &(0x7f00000022c0)=""/4088, 0x18) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.dequeue\x00', 0x0, 0x0) 20:59:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0001e300", @ANYRES32=0x0, @ANYBLOB="0800010001000000"], 0x20}}, 0x0) 20:59:39 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) r0 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r0, &(0x7f00000e5000/0x2000)=nil, 0x3000) r1 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:39 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:39 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0001e300", @ANYRES32=0x0, @ANYBLOB="0800010001000000"], 0x20}}, 0x0) 20:59:39 executing program 3: syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000000140)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) (async) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) (async) getdents64(r0, &(0x7f00000022c0)=""/4088, 0x18) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.dequeue\x00', 0x0, 0x0) 20:59:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:39 executing program 3: syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000000140)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) getdents64(r0, &(0x7f00000022c0)=""/4088, 0x18) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.dequeue\x00', 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000000140)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) (async) getdents64(r0, &(0x7f00000022c0)=""/4088, 0x18) (async) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.dequeue\x00', 0x0, 0x0) (async) 20:59:39 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) openat$cgroup_freezer_state(r2, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='oom_score_adj\x00') getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000ff010000ccba90000000000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100647272adf043139090218ec31dd2fd3e07c65e2d87fa1a6f4ff2b5586fce62a99b09c53273efe3f2219a7d8810a43cb3d8bddbc9cb1ce60ea90db7b26fba92ebb0195d2853d742852a9c8d2599eb488ba82754485f54d612d01f11356c4b79a6766b0a4e5b3cfed0d8ec9aeb2628e3bcdcd8ffc912d0566b1cd1bfbe21b6f4c16ed95350127b78c5"], 0x2c}}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000002c0)=0xc) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=@newqdisc={0x298, 0x24, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x9, 0xfffd}, {0x1, 0xf}, {0xb, 0x4}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1c62}, @TCA_STAB={0x120, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x6a, 0x5, 0x2, 0x2, 0xfffffffa, 0x9, 0x2}}, {0x8, 0x2, [0x8, 0x8]}}, {{0x1c, 0x1, {0x4, 0xef, 0x1, 0x10001, 0x1, 0x8, 0x2, 0x6}}, {0x10, 0x2, [0x3, 0x3, 0x8, 0xfff7, 0xfff, 0x85]}}, {{0x1c, 0x1, {0x37, 0x0, 0x8, 0x6, 0x1, 0x9, 0x200, 0x1}}, {0x6, 0x2, [0x20]}}, {{0x1c, 0x1, {0xff, 0x2, 0x101, 0x4, 0x1, 0x40, 0x7, 0x3}}, {0xa, 0x2, [0x4, 0xb1a2, 0x5]}}, {{0x1c, 0x1, {0x8b, 0x3, 0x4a22, 0x200, 0x0, 0xca17, 0x2, 0x2}}, {0x8, 0x2, [0x6, 0x5]}}, {{0x1c, 0x1, {0x5d, 0x7, 0x3, 0xfffffffb, 0x1, 0x6, 0x4, 0xa}}, {0x18, 0x2, [0x3f, 0x40, 0x0, 0x4800, 0x1, 0x6, 0x150, 0xff6f, 0x9, 0x6a33]}}, {{0x1c, 0x1, {0xfb, 0x76, 0x8, 0x9, 0x0, 0x0, 0xffff, 0x3}}, {0xa, 0x2, [0xffff, 0x9, 0x4]}}]}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x1d, 0x4, 0x7f, 0x2, 0x3f, 0x7, 0x2}}, {0x8, 0x2, [0x401, 0x3437]}}, {{0x1c, 0x1, {0x0, 0x44, 0x5, 0x1ff, 0x1, 0x3ff, 0x7ff, 0x5}}, {0xe, 0x2, [0x6, 0xfc8, 0x2, 0x6, 0x8]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x9, 0xb6ab}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4b16e7b7}, @qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1}}}, @TCA_STAB={0xbc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf2, 0x47, 0x1, 0x1, 0x1, 0x4, 0x81, 0x3}}, {0xa, 0x2, [0x1, 0x8000, 0x4]}}, {{0x1c, 0x1, {0x6, 0x5, 0x1, 0x3ff, 0x0, 0x4, 0x3a2, 0x8}}, {0x14, 0x2, [0x1, 0x26a, 0x5, 0x7, 0x9, 0x200, 0x6, 0x2596]}}, {{0x1c, 0x1, {0x8, 0xf7, 0x7, 0x1b52, 0x1, 0xf2, 0xfff, 0xa}}, {0x18, 0x2, [0xfff7, 0x2000, 0x5, 0xfffe, 0x7f, 0x7, 0x4, 0xffce, 0x2, 0x2]}}, {{0x1c, 0x1, {0x6, 0x3f, 0xff, 0x1, 0x0, 0x1, 0x4, 0x5}}, {0xe, 0x2, [0x1000, 0x80, 0x3f, 0x9e, 0x2]}}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x40000}, 0x14) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x0, 0x0, 0x0, {{0x0, 0xe01}}}]}]}]}}]}, 0x54}, 0x1, 0x100000000000000}, 0x0) 20:59:39 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) r0 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r0, &(0x7f00000e5000/0x2000)=nil, 0x3000) r1 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:42 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) openat$cgroup_freezer_state(r2, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='oom_score_adj\x00') getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000ff010000ccba90000000000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100647272adf043139090218ec31dd2fd3e07c65e2d87fa1a6f4ff2b5586fce62a99b09c53273efe3f2219a7d8810a43cb3d8bddbc9cb1ce60ea90db7b26fba92ebb0195d2853d742852a9c8d2599eb488ba82754485f54d612d01f11356c4b79a6766b0a4e5b3cfed0d8ec9aeb2628e3bcdcd8ffc912d0566b1cd1bfbe21b6f4c16ed95350127b78c5"], 0x2c}}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000002c0)=0xc) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=@newqdisc={0x298, 0x24, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x9, 0xfffd}, {0x1, 0xf}, {0xb, 0x4}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1c62}, @TCA_STAB={0x120, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x6a, 0x5, 0x2, 0x2, 0xfffffffa, 0x9, 0x2}}, {0x8, 0x2, [0x8, 0x8]}}, {{0x1c, 0x1, {0x4, 0xef, 0x1, 0x10001, 0x1, 0x8, 0x2, 0x6}}, {0x10, 0x2, [0x3, 0x3, 0x8, 0xfff7, 0xfff, 0x85]}}, {{0x1c, 0x1, {0x37, 0x0, 0x8, 0x6, 0x1, 0x9, 0x200, 0x1}}, {0x6, 0x2, [0x20]}}, {{0x1c, 0x1, {0xff, 0x2, 0x101, 0x4, 0x1, 0x40, 0x7, 0x3}}, {0xa, 0x2, [0x4, 0xb1a2, 0x5]}}, {{0x1c, 0x1, {0x8b, 0x3, 0x4a22, 0x200, 0x0, 0xca17, 0x2, 0x2}}, {0x8, 0x2, [0x6, 0x5]}}, {{0x1c, 0x1, {0x5d, 0x7, 0x3, 0xfffffffb, 0x1, 0x6, 0x4, 0xa}}, {0x18, 0x2, [0x3f, 0x40, 0x0, 0x4800, 0x1, 0x6, 0x150, 0xff6f, 0x9, 0x6a33]}}, {{0x1c, 0x1, {0xfb, 0x76, 0x8, 0x9, 0x0, 0x0, 0xffff, 0x3}}, {0xa, 0x2, [0xffff, 0x9, 0x4]}}]}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x1d, 0x4, 0x7f, 0x2, 0x3f, 0x7, 0x2}}, {0x8, 0x2, [0x401, 0x3437]}}, {{0x1c, 0x1, {0x0, 0x44, 0x5, 0x1ff, 0x1, 0x3ff, 0x7ff, 0x5}}, {0xe, 0x2, [0x6, 0xfc8, 0x2, 0x6, 0x8]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x9, 0xb6ab}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4b16e7b7}, @qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1}}}, @TCA_STAB={0xbc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf2, 0x47, 0x1, 0x1, 0x1, 0x4, 0x81, 0x3}}, {0xa, 0x2, [0x1, 0x8000, 0x4]}}, {{0x1c, 0x1, {0x6, 0x5, 0x1, 0x3ff, 0x0, 0x4, 0x3a2, 0x8}}, {0x14, 0x2, [0x1, 0x26a, 0x5, 0x7, 0x9, 0x200, 0x6, 0x2596]}}, {{0x1c, 0x1, {0x8, 0xf7, 0x7, 0x1b52, 0x1, 0xf2, 0xfff, 0xa}}, {0x18, 0x2, [0xfff7, 0x2000, 0x5, 0xfffe, 0x7f, 0x7, 0x4, 0xffce, 0x2, 0x2]}}, {{0x1c, 0x1, {0x6, 0x3f, 0xff, 0x1, 0x0, 0x1, 0x4, 0x5}}, {0xe, 0x2, [0x1000, 0x80, 0x3f, 0x9e, 0x2]}}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x40000}, 0x14) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x0, 0x0, 0x0, {{0x0, 0xe01}}}]}]}]}}]}, 0x54}, 0x1, 0x100000000000000}, 0x0) 20:59:42 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:42 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:42 executing program 3: unshare(0x6c060000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) openat$cgroup_freezer_state(r2, 0x0, 0x2, 0x0) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='oom_score_adj\x00') getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000ff010000ccba90000000000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100647272adf043139090218ec31dd2fd3e07c65e2d87fa1a6f4ff2b5586fce62a99b09c53273efe3f2219a7d8810a43cb3d8bddbc9cb1ce60ea90db7b26fba92ebb0195d2853d742852a9c8d2599eb488ba82754485f54d612d01f11356c4b79a6766b0a4e5b3cfed0d8ec9aeb2628e3bcdcd8ffc912d0566b1cd1bfbe21b6f4c16ed95350127b78c5"], 0x2c}}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000002c0)=0xc) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=@newqdisc={0x298, 0x24, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x9, 0xfffd}, {0x1, 0xf}, {0xb, 0x4}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1c62}, @TCA_STAB={0x120, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x6a, 0x5, 0x2, 0x2, 0xfffffffa, 0x9, 0x2}}, {0x8, 0x2, [0x8, 0x8]}}, {{0x1c, 0x1, {0x4, 0xef, 0x1, 0x10001, 0x1, 0x8, 0x2, 0x6}}, {0x10, 0x2, [0x3, 0x3, 0x8, 0xfff7, 0xfff, 0x85]}}, {{0x1c, 0x1, {0x37, 0x0, 0x8, 0x6, 0x1, 0x9, 0x200, 0x1}}, {0x6, 0x2, [0x20]}}, {{0x1c, 0x1, {0xff, 0x2, 0x101, 0x4, 0x1, 0x40, 0x7, 0x3}}, {0xa, 0x2, [0x4, 0xb1a2, 0x5]}}, {{0x1c, 0x1, {0x8b, 0x3, 0x4a22, 0x200, 0x0, 0xca17, 0x2, 0x2}}, {0x8, 0x2, [0x6, 0x5]}}, {{0x1c, 0x1, {0x5d, 0x7, 0x3, 0xfffffffb, 0x1, 0x6, 0x4, 0xa}}, {0x18, 0x2, [0x3f, 0x40, 0x0, 0x4800, 0x1, 0x6, 0x150, 0xff6f, 0x9, 0x6a33]}}, {{0x1c, 0x1, {0xfb, 0x76, 0x8, 0x9, 0x0, 0x0, 0xffff, 0x3}}, {0xa, 0x2, [0xffff, 0x9, 0x4]}}]}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x1d, 0x4, 0x7f, 0x2, 0x3f, 0x7, 0x2}}, {0x8, 0x2, [0x401, 0x3437]}}, {{0x1c, 0x1, {0x0, 0x44, 0x5, 0x1ff, 0x1, 0x3ff, 0x7ff, 0x5}}, {0xe, 0x2, [0x6, 0xfc8, 0x2, 0x6, 0x8]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x9, 0xb6ab}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4b16e7b7}, @qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1}}}, @TCA_STAB={0xbc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf2, 0x47, 0x1, 0x1, 0x1, 0x4, 0x81, 0x3}}, {0xa, 0x2, [0x1, 0x8000, 0x4]}}, {{0x1c, 0x1, {0x6, 0x5, 0x1, 0x3ff, 0x0, 0x4, 0x3a2, 0x8}}, {0x14, 0x2, [0x1, 0x26a, 0x5, 0x7, 0x9, 0x200, 0x6, 0x2596]}}, {{0x1c, 0x1, {0x8, 0xf7, 0x7, 0x1b52, 0x1, 0xf2, 0xfff, 0xa}}, {0x18, 0x2, [0xfff7, 0x2000, 0x5, 0xfffe, 0x7f, 0x7, 0x4, 0xffce, 0x2, 0x2]}}, {{0x1c, 0x1, {0x6, 0x3f, 0xff, 0x1, 0x0, 0x1, 0x4, 0x5}}, {0xe, 0x2, [0x1000, 0x80, 0x3f, 0x9e, 0x2]}}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x40000}, 0x14) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x0, 0x0, 0x0, {{0x0, 0xe01}}}]}]}]}}]}, 0x54}, 0x1, 0x100000000000000}, 0x0) 20:59:42 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:43 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:43 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:43 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r0, &(0x7f00000e5000/0x2000)=nil, 0x3000) r1 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:43 executing program 4: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r0, &(0x7f00000e5000/0x2000)=nil, 0x3000) r1 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:43 executing program 3: unshare(0x6c060000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async, rerun: 32) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 32) r2 = dup(r1) openat$cgroup_freezer_state(r2, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='oom_score_adj\x00') getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000ff010000ccba90000000000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100647272adf043139090218ec31dd2fd3e07c65e2d87fa1a6f4ff2b5586fce62a99b09c53273efe3f2219a7d8810a43cb3d8bddbc9cb1ce60ea90db7b26fba92ebb0195d2853d742852a9c8d2599eb488ba82754485f54d612d01f11356c4b79a6766b0a4e5b3cfed0d8ec9aeb2628e3bcdcd8ffc912d0566b1cd1bfbe21b6f4c16ed95350127b78c5"], 0x2c}}, 0x0) (async) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socket$packet(0x11, 0x2, 0x300) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000002c0)=0xc) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=@newqdisc={0x298, 0x24, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x9, 0xfffd}, {0x1, 0xf}, {0xb, 0x4}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1c62}, @TCA_STAB={0x120, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x6a, 0x5, 0x2, 0x2, 0xfffffffa, 0x9, 0x2}}, {0x8, 0x2, [0x8, 0x8]}}, {{0x1c, 0x1, {0x4, 0xef, 0x1, 0x10001, 0x1, 0x8, 0x2, 0x6}}, {0x10, 0x2, [0x3, 0x3, 0x8, 0xfff7, 0xfff, 0x85]}}, {{0x1c, 0x1, {0x37, 0x0, 0x8, 0x6, 0x1, 0x9, 0x200, 0x1}}, {0x6, 0x2, [0x20]}}, {{0x1c, 0x1, {0xff, 0x2, 0x101, 0x4, 0x1, 0x40, 0x7, 0x3}}, {0xa, 0x2, [0x4, 0xb1a2, 0x5]}}, {{0x1c, 0x1, {0x8b, 0x3, 0x4a22, 0x200, 0x0, 0xca17, 0x2, 0x2}}, {0x8, 0x2, [0x6, 0x5]}}, {{0x1c, 0x1, {0x5d, 0x7, 0x3, 0xfffffffb, 0x1, 0x6, 0x4, 0xa}}, {0x18, 0x2, [0x3f, 0x40, 0x0, 0x4800, 0x1, 0x6, 0x150, 0xff6f, 0x9, 0x6a33]}}, {{0x1c, 0x1, {0xfb, 0x76, 0x8, 0x9, 0x0, 0x0, 0xffff, 0x3}}, {0xa, 0x2, [0xffff, 0x9, 0x4]}}]}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x1d, 0x4, 0x7f, 0x2, 0x3f, 0x7, 0x2}}, {0x8, 0x2, [0x401, 0x3437]}}, {{0x1c, 0x1, {0x0, 0x44, 0x5, 0x1ff, 0x1, 0x3ff, 0x7ff, 0x5}}, {0xe, 0x2, [0x6, 0xfc8, 0x2, 0x6, 0x8]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x9, 0xb6ab}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4b16e7b7}, @qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1}}}, @TCA_STAB={0xbc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf2, 0x47, 0x1, 0x1, 0x1, 0x4, 0x81, 0x3}}, {0xa, 0x2, [0x1, 0x8000, 0x4]}}, {{0x1c, 0x1, {0x6, 0x5, 0x1, 0x3ff, 0x0, 0x4, 0x3a2, 0x8}}, {0x14, 0x2, [0x1, 0x26a, 0x5, 0x7, 0x9, 0x200, 0x6, 0x2596]}}, {{0x1c, 0x1, {0x8, 0xf7, 0x7, 0x1b52, 0x1, 0xf2, 0xfff, 0xa}}, {0x18, 0x2, [0xfff7, 0x2000, 0x5, 0xfffe, 0x7f, 0x7, 0x4, 0xffce, 0x2, 0x2]}}, {{0x1c, 0x1, {0x6, 0x3f, 0xff, 0x1, 0x0, 0x1, 0x4, 0x5}}, {0xe, 0x2, [0x1000, 0x80, 0x3f, 0x9e, 0x2]}}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x40000}, 0x14) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x0, 0x0, 0x0, {{0x0, 0xe01}}}]}]}]}}]}, 0x54}, 0x1, 0x100000000000000}, 0x0) 20:59:43 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r0, &(0x7f00000e5000/0x2000)=nil, 0x3000) r1 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:44 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r0, &(0x7f00000e5000/0x2000)=nil, 0x3000) r1 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:44 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:44 executing program 4: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:44 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:44 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:44 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:45 executing program 3: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:45 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:45 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:45 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:45 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:46 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:46 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:46 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:46 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udplite(0x2, 0x2, 0x88) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:47 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:47 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:47 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:47 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:48 executing program 2: mlockall(0x2) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udplite(0x2, 0x2, 0x88) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udplite(0x2, 0x2, 0x88) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:48 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:48 executing program 2: mlockall(0x2) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:48 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:49 executing program 2: mlockall(0x2) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:49 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udplite(0x2, 0x2, 0x88) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:49 executing program 2: shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:49 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:49 executing program 2: shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:49 executing program 2: shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:49 executing program 2: mlockall(0x0) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:50 executing program 2: mlockall(0x0) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:50 executing program 2: mlockall(0x0) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:50 executing program 4: mlockall(0x2) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:50 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:50 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:50 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:50 executing program 4: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:50 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:51 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x0, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:51 executing program 4: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:51 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:51 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x0, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:51 executing program 4: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x0, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:51 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x0, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 193.979757][ T1222] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.986084][ T1222] ieee802154 phy1 wpan1: encryption failed: -22 20:59:52 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, 0x0) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:52 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:52 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, 0x0) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:53 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, 0x0) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:53 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:53 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:53 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x0, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:54 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x0, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:54 executing program 3: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x0, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:54 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:54 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x0, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:54 executing program 3: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, 0x0) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:54 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x0, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:55 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x0, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:55 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:55 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x0, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:56 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:56 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r0, &(0x7f00000e5000/0x2000)=nil, 0x3000) r1 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:56 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r0, &(0x7f00000e5000/0x2000)=nil, 0x3000) r1 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:56 executing program 3: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x0, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:57 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r0, &(0x7f00000e5000/0x2000)=nil, 0x3000) r1 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:57 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:57 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:58 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:58 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:58 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:58 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:58 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:59 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:59 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:59 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:59 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x0) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:59 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:59 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x0) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:59 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 20:59:59 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x0) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 20:59:59 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x0) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:00:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:00 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x0) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:00:00 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:00 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:00 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x0) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:00:00 executing program 3: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x0) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) [ 202.930332][ T6412] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 202.990104][ T6412] CPU: 0 PID: 6412 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 203.001603][ T6412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 203.011661][ T6412] Call Trace: [ 203.014944][ T6412] [ 203.017874][ T6412] dump_stack_lvl+0x201/0x2d8 [ 203.022556][ T6412] ? show_regs_print_info+0x12/0x12 [ 203.027757][ T6412] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 203.033479][ T6412] ? do_raw_spin_lock+0x151/0x8e0 [ 203.038510][ T6412] ? asan.module_dtor+0x20/0x20 [ 203.043363][ T6412] dump_header+0xdb/0x970 [ 203.047699][ T6412] oom_kill_process+0xf5/0x4d0 [ 203.052549][ T6412] out_of_memory+0x711/0xa70 [ 203.057138][ T6412] ? unregister_oom_notifier+0x20/0x20 [ 203.062607][ T6412] ? trace_lock_release+0x4f/0x150 [ 203.067721][ T6412] ? mem_cgroup_oom+0x47d/0x5f0 [ 203.072572][ T6412] ? lock_release+0x82/0x810 [ 203.077156][ T6412] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 203.082690][ T6412] ? __lock_acquire+0x2b00/0x2b00 [ 203.087693][ T6412] ? mem_cgroup_oom_trylock+0x220/0x220 [ 203.093221][ T6412] ? do_raw_spin_unlock+0x134/0x8a0 [ 203.098400][ T6412] ? mem_cgroup_iter+0x3c9/0x530 [ 203.103319][ T6412] mem_cgroup_oom+0x48d/0x5f0 [ 203.107978][ T6412] try_charge_memcg+0xdab/0x1110 [ 203.112893][ T6412] ? finish_lock_switch+0x1c0/0x350 [ 203.118074][ T6412] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 203.124035][ T6412] ? rcu_read_lock_sched_held+0x5f/0x130 [ 203.129652][ T6412] ? alloc_pages_vma+0x9aa/0x1150 [ 203.134659][ T6412] ? __folio_memcg+0x170/0x170 [ 203.139408][ T6412] ? rcu_lock_acquire+0x30/0x30 [ 203.144241][ T6412] ? trace_lock_release+0x4f/0x150 [ 203.149332][ T6412] ? rcu_lock_acquire+0x30/0x30 [ 203.154161][ T6412] ? lock_release+0x82/0x810 [ 203.158734][ T6412] ? shmem_alloc_and_acct_page+0x971/0x1230 [ 203.164613][ T6412] ? __lock_acquire+0x2b00/0x2b00 [ 203.169617][ T6412] ? lock_release+0x82/0x810 [ 203.174190][ T6412] charge_memcg+0x119/0x5d0 [ 203.178675][ T6412] ? __mem_cgroup_charge+0x80/0x80 [ 203.183771][ T6412] __mem_cgroup_charge+0x23/0x80 [ 203.188700][ T6412] shmem_add_to_page_cache+0x124a/0x1f30 [ 203.194320][ T6412] ? put_page+0x230/0x230 [ 203.198635][ T6412] ? PageTransHuge+0xd9/0x2b0 [ 203.203300][ T6412] shmem_getpage_gfp+0x1884/0x30e0 [ 203.208391][ T6412] ? read_lock_is_recursive+0x10/0x10 [ 203.213749][ T6412] ? shmem_getpage+0xa0/0xa0 [ 203.218325][ T6412] ? __lock_acquire+0x2b00/0x2b00 [ 203.223328][ T6412] shmem_fault+0x1df/0x810 [ 203.227729][ T6412] ? shmem_fallocate+0xea0/0xea0 [ 203.232734][ T6412] ? count_memcg_event_mm+0x342/0x390 [ 203.238087][ T6412] ? follow_page_pte+0x343/0xc50 [ 203.243026][ T6412] ? pfn_swap_entry_to_page+0x310/0x310 [ 203.248559][ T6412] ? read_lock_is_recursive+0x10/0x10 [ 203.253912][ T6412] __do_fault+0x137/0x4e0 [ 203.258223][ T6412] handle_mm_fault+0x2c53/0x39e0 [ 203.263150][ T6412] ? numa_migrate_prep+0x250/0x250 [ 203.268248][ T6412] ? follow_page_mask+0xbac/0x1580 [ 203.273343][ T6412] ? __get_user_pages+0x4a3/0x1190 [ 203.278434][ T6412] __get_user_pages+0x4ed/0x1190 [ 203.283357][ T6412] ? populate_vma_page_range+0x2b0/0x2b0 [ 203.288970][ T6412] ? __down_read_common+0x1b0/0x450 [ 203.294149][ T6412] ? memset+0x1f/0x40 [ 203.298119][ T6412] populate_vma_page_range+0x217/0x2b0 [ 203.303561][ T6412] __mm_populate+0x2ea/0x4d0 [ 203.308133][ T6412] ? check_vma_flags+0x480/0x480 [ 203.313054][ T6412] do_shmat+0xab3/0xda0 [ 203.317208][ T6412] ? __ia32_compat_sys_old_shmctl+0x90/0x90 [ 203.323083][ T6412] ? rcu_read_lock_sched_held+0x5f/0x130 [ 203.328712][ T6412] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 203.334681][ T6412] ? rcu_read_lock_sched_held+0x5f/0x130 [ 203.340296][ T6412] __x64_sys_shmat+0x102/0x190 [ 203.345050][ T6412] ? shm_lock+0x190/0x190 [ 203.349359][ T6412] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 203.355318][ T6412] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 203.361368][ T6412] do_syscall_64+0x2b/0x50 [ 203.365769][ T6412] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 203.371647][ T6412] RIP: 0033:0x7fcbff289049 [ 203.376043][ T6412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 203.395628][ T6412] RSP: 002b:00007fcc003d1168 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 203.404024][ T6412] RAX: ffffffffffffffda RBX: 00007fcbff39bf60 RCX: 00007fcbff289049 [ 203.411976][ T6412] RDX: 0000000000004000 RSI: 0000000020005000 RDI: 000000000000005b [ 203.419928][ T6412] RBP: 00007fcbff2e308d R08: 0000000000000000 R09: 0000000000000000 [ 203.427879][ T6412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.435830][ T6412] R13: 00007ffc341911ff R14: 00007fcc003d1300 R15: 0000000000022000 [ 203.443788][ T6412] 21:00:01 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 203.621922][ T6412] memory: usage 307116kB, limit 307200kB, failcnt 44 [ 203.630110][ T6412] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 203.659481][ T6412] Memory cgroup stats for /syz2: [ 203.659654][ T6412] anon 139264 [ 203.659654][ T6412] file 311308288 21:00:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 203.659654][ T6412] kernel 3039232 [ 203.659654][ T6412] kernel_stack 65536 [ 203.659654][ T6412] pagetables 81920 [ 203.659654][ T6412] percpu 0 [ 203.659654][ T6412] sock 0 [ 203.659654][ T6412] vmalloc 0 [ 203.659654][ T6412] shmem 311267328 [ 203.659654][ T6412] file_mapped 888832 [ 203.659654][ T6412] file_dirty 20480 [ 203.659654][ T6412] file_writeback 0 [ 203.659654][ T6412] swapcached 0 [ 203.659654][ T6412] anon_thp 0 [ 203.659654][ T6412] file_thp 0 [ 203.659654][ T6412] shmem_thp 0 [ 203.659654][ T6412] inactive_anon 310538240 21:00:01 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 203.659654][ T6412] active_anon 20480 [ 203.659654][ T6412] inactive_file 12288 [ 203.659654][ T6412] active_file 28672 [ 203.659654][ T6412] unevictable 847872 [ 203.659654][ T6412] slab_reclaimable 1490752 [ 203.659654][ T6412] slab_unreclaimable 1375328 [ 203.659654][ T6412] slab 2866080 [ 203.659654][ T6412] workingset_refault_anon 0 21:00:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 204.515095][ T6412] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=6409,uid=0 [ 204.610927][ T6412] Memory cgroup out of memory: Killed process 6409 (syz-executor.2) total-vm:54504kB, anon-rss:388kB, file-rss:8192kB, shmem-rss:784kB, UID:0 pgtables:84kB oom_score_adj:1000 21:00:02 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x0, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:00:02 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:02 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 204.712665][ T29] oom_reaper: reaped process 6409 (syz-executor.2), now anon-rss:0kB, file-rss:8192kB, shmem-rss:788kB 21:00:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:02 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:03 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 205.004179][ T6440] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 205.097232][ T6440] CPU: 0 PID: 6440 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 205.108728][ T6440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.118796][ T6440] Call Trace: [ 205.122080][ T6440] [ 205.125017][ T6440] dump_stack_lvl+0x201/0x2d8 [ 205.129706][ T6440] ? show_regs_print_info+0x12/0x12 [ 205.134910][ T6440] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 205.140633][ T6440] ? do_raw_spin_lock+0x151/0x8e0 [ 205.145662][ T6440] ? asan.module_dtor+0x20/0x20 [ 205.150520][ T6440] dump_header+0xdb/0x970 [ 205.154898][ T6440] oom_kill_process+0xf5/0x4d0 [ 205.159646][ T6440] out_of_memory+0x711/0xa70 [ 205.164221][ T6440] ? unregister_oom_notifier+0x20/0x20 [ 205.169657][ T6440] ? trace_lock_release+0x4f/0x150 [ 205.174750][ T6440] ? mem_cgroup_oom+0x47d/0x5f0 [ 205.179587][ T6440] ? lock_release+0x82/0x810 [ 205.184160][ T6440] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 205.189700][ T6440] ? __lock_acquire+0x2b00/0x2b00 [ 205.194723][ T6440] ? mem_cgroup_oom_trylock+0x220/0x220 [ 205.200269][ T6440] ? do_raw_spin_unlock+0x134/0x8a0 [ 205.205461][ T6440] ? mem_cgroup_iter+0x3c9/0x530 [ 205.210384][ T6440] mem_cgroup_oom+0x48d/0x5f0 [ 205.215050][ T6440] try_charge_memcg+0xdab/0x1110 [ 205.219970][ T6440] ? read_lock_is_recursive+0x10/0x10 [ 205.225331][ T6440] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 205.231299][ T6440] ? rcu_read_lock_sched_held+0x5f/0x130 [ 205.236913][ T6440] ? alloc_pages_vma+0x9aa/0x1150 [ 205.241917][ T6440] ? __folio_memcg+0x170/0x170 [ 205.246675][ T6440] ? rcu_lock_acquire+0x30/0x30 [ 205.251506][ T6440] ? trace_lock_release+0x4f/0x150 [ 205.256597][ T6440] ? rcu_lock_acquire+0x30/0x30 [ 205.261426][ T6440] ? lock_release+0x82/0x810 [ 205.265995][ T6440] ? shmem_alloc_and_acct_page+0x971/0x1230 [ 205.271875][ T6440] ? __lock_acquire+0x2b00/0x2b00 [ 205.276875][ T6440] ? lock_release+0x82/0x810 [ 205.281443][ T6440] charge_memcg+0x119/0x5d0 [ 205.285925][ T6440] ? __mem_cgroup_charge+0x80/0x80 [ 205.291019][ T6440] __mem_cgroup_charge+0x23/0x80 [ 205.296024][ T6440] shmem_add_to_page_cache+0x124a/0x1f30 [ 205.301642][ T6440] ? put_page+0x230/0x230 [ 205.305957][ T6440] ? mem_cgroup_swap_full+0x300/0x300 [ 205.311310][ T6440] ? PageTransHuge+0xd9/0x2b0 [ 205.315974][ T6440] shmem_getpage_gfp+0x1884/0x30e0 [ 205.321078][ T6440] ? shmem_getpage+0xa0/0xa0 [ 205.325653][ T6440] ? __lock_acquire+0x2b00/0x2b00 [ 205.330657][ T6440] shmem_fault+0x1df/0x810 [ 205.335057][ T6440] ? shmem_fallocate+0xea0/0xea0 [ 205.339973][ T6440] ? count_memcg_event_mm+0x342/0x390 [ 205.345343][ T6440] ? follow_page_pte+0x343/0xc50 [ 205.350262][ T6440] ? pfn_swap_entry_to_page+0x310/0x310 [ 205.355833][ T6440] ? read_lock_is_recursive+0x10/0x10 [ 205.361198][ T6440] __do_fault+0x137/0x4e0 [ 205.365509][ T6440] handle_mm_fault+0x2c53/0x39e0 [ 205.370439][ T6440] ? numa_migrate_prep+0x250/0x250 [ 205.375532][ T6440] ? follow_page_mask+0xbac/0x1580 [ 205.380630][ T6440] ? find_vma+0xd2/0x230 [ 205.384860][ T6440] ? check_vma_flags+0x401/0x480 [ 205.389782][ T6440] __get_user_pages+0x4ed/0x1190 [ 205.394705][ T6440] ? populate_vma_page_range+0x2b0/0x2b0 [ 205.400318][ T6440] ? __down_read_common+0x1b0/0x450 [ 205.405504][ T6440] ? memset+0x1f/0x40 [ 205.409468][ T6440] populate_vma_page_range+0x217/0x2b0 [ 205.414908][ T6440] __mm_populate+0x2ea/0x4d0 [ 205.419480][ T6440] ? check_vma_flags+0x480/0x480 [ 205.424402][ T6440] do_shmat+0xab3/0xda0 [ 205.428558][ T6440] ? __ia32_compat_sys_old_shmctl+0x90/0x90 [ 205.434435][ T6440] ? rcu_read_lock_sched_held+0x5f/0x130 [ 205.440050][ T6440] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 205.446012][ T6440] ? rcu_read_lock_sched_held+0x5f/0x130 [ 205.451625][ T6440] __x64_sys_shmat+0x102/0x190 [ 205.456371][ T6440] ? shm_lock+0x190/0x190 [ 205.460682][ T6440] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 205.466645][ T6440] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 205.472605][ T6440] do_syscall_64+0x2b/0x50 [ 205.477018][ T6440] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 205.482892][ T6440] RIP: 0033:0x7fcbff289049 [ 205.487291][ T6440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 205.506878][ T6440] RSP: 002b:00007fcc003d1168 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 205.515270][ T6440] RAX: ffffffffffffffda RBX: 00007fcbff39bf60 RCX: 00007fcbff289049 [ 205.523222][ T6440] RDX: 0000000000004000 RSI: 0000000020005000 RDI: 000000000000005c [ 205.531176][ T6440] RBP: 00007fcbff2e308d R08: 0000000000000000 R09: 0000000000000000 [ 205.539134][ T6440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 21:00:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 205.547083][ T6440] R13: 00007ffc341911ff R14: 00007fcc003d1300 R15: 0000000000022000 [ 205.555043][ T6440] 21:00:04 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 205.871454][ T6440] memory: usage 307112kB, limit 307200kB, failcnt 130 [ 205.878332][ T6440] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 205.886401][ T6440] Memory cgroup stats for /syz2: [ 205.886724][ T6440] anon 139264 [ 205.886724][ T6440] file 311611392 [ 205.886724][ T6440] kernel 2732032 [ 205.886724][ T6440] kernel_stack 65536 [ 205.886724][ T6440] pagetables 81920 [ 205.886724][ T6440] percpu 0 [ 205.886724][ T6440] sock 0 [ 205.886724][ T6440] vmalloc 0 [ 205.886724][ T6440] shmem 311586816 [ 205.886724][ T6440] file_mapped 356352 [ 205.886724][ T6440] file_dirty 20480 [ 205.886724][ T6440] file_writeback 0 [ 205.886724][ T6440] swapcached 0 [ 205.886724][ T6440] anon_thp 0 [ 205.886724][ T6440] file_thp 0 [ 205.886724][ T6440] shmem_thp 0 [ 205.886724][ T6440] inactive_anon 311390208 [ 205.886724][ T6440] active_anon 20480 [ 205.886724][ T6440] inactive_file 8192 [ 205.886724][ T6440] active_file 16384 [ 205.886724][ T6440] unevictable 315392 [ 205.886724][ T6440] slab_reclaimable 1409208 [ 205.886724][ T6440] slab_unreclaimable 1147856 [ 205.886724][ T6440] slab 2557064 [ 205.886724][ T6440] workingset_refault_anon 0 [ 206.017269][ T6440] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=6439,uid=0 [ 206.041840][ T6440] Memory cgroup out of memory: Killed process 6439 (syz-executor.2) total-vm:54504kB, anon-rss:388kB, file-rss:8192kB, shmem-rss:256kB, UID:0 pgtables:84kB oom_score_adj:1000 21:00:04 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x0, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:00:04 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 206.164125][ T29] oom_reaper: reaped process 6439 (syz-executor.2), now anon-rss:0kB, file-rss:8192kB, shmem-rss:260kB 21:00:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:04 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 206.374860][ T6467] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 206.450924][ T6467] CPU: 1 PID: 6467 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 206.462420][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.472467][ T6467] Call Trace: [ 206.475739][ T6467] [ 206.478659][ T6467] dump_stack_lvl+0x201/0x2d8 [ 206.483328][ T6467] ? show_regs_print_info+0x12/0x12 [ 206.488513][ T6467] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 206.494220][ T6467] ? do_raw_spin_lock+0x151/0x8e0 [ 206.499234][ T6467] ? asan.module_dtor+0x20/0x20 [ 206.504069][ T6467] dump_header+0xdb/0x970 [ 206.508383][ T6467] oom_kill_process+0xf5/0x4d0 [ 206.513128][ T6467] out_of_memory+0x711/0xa70 [ 206.517705][ T6467] ? unregister_oom_notifier+0x20/0x20 [ 206.523143][ T6467] ? trace_lock_release+0x4f/0x150 [ 206.528231][ T6467] ? mem_cgroup_oom+0x47d/0x5f0 [ 206.533100][ T6467] ? lock_release+0x82/0x810 [ 206.537677][ T6467] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 206.543206][ T6467] ? __lock_acquire+0x2b00/0x2b00 [ 206.548212][ T6467] ? mem_cgroup_oom_trylock+0x220/0x220 [ 206.553740][ T6467] ? do_raw_spin_unlock+0x134/0x8a0 [ 206.558927][ T6467] ? mem_cgroup_iter+0x3c9/0x530 [ 206.563847][ T6467] mem_cgroup_oom+0x48d/0x5f0 [ 206.568510][ T6467] try_charge_memcg+0xdab/0x1110 [ 206.573433][ T6467] ? read_lock_is_recursive+0x10/0x10 [ 206.578807][ T6467] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 206.584779][ T6467] ? rcu_read_lock_sched_held+0x5f/0x130 [ 206.590412][ T6467] ? alloc_pages_vma+0x9aa/0x1150 [ 206.595426][ T6467] ? __folio_memcg+0x170/0x170 [ 206.600175][ T6467] ? rcu_lock_acquire+0x30/0x30 [ 206.605272][ T6467] ? trace_lock_release+0x4f/0x150 [ 206.610368][ T6467] ? rcu_lock_acquire+0x30/0x30 [ 206.615213][ T6467] ? lock_release+0x82/0x810 [ 206.619788][ T6467] ? shmem_alloc_and_acct_page+0x971/0x1230 [ 206.625669][ T6467] ? __lock_acquire+0x2b00/0x2b00 [ 206.630675][ T6467] ? lock_release+0x82/0x810 [ 206.635248][ T6467] charge_memcg+0x119/0x5d0 [ 206.639734][ T6467] ? __mem_cgroup_charge+0x80/0x80 [ 206.644843][ T6467] __mem_cgroup_charge+0x23/0x80 [ 206.649801][ T6467] shmem_add_to_page_cache+0x124a/0x1f30 [ 206.655437][ T6467] ? put_page+0x230/0x230 [ 206.659760][ T6467] ? mem_cgroup_swap_full+0x300/0x300 [ 206.665125][ T6467] ? do_raw_spin_unlock+0x134/0x8a0 [ 206.670321][ T6467] ? PageTransHuge+0xd9/0x2b0 [ 206.674995][ T6467] shmem_getpage_gfp+0x1884/0x30e0 [ 206.680106][ T6467] ? shmem_getpage+0xa0/0xa0 [ 206.684687][ T6467] ? __lock_acquire+0x2b00/0x2b00 [ 206.689698][ T6467] shmem_fault+0x1df/0x810 [ 206.694107][ T6467] ? shmem_fallocate+0xea0/0xea0 [ 206.699027][ T6467] ? count_memcg_event_mm+0x342/0x390 [ 206.704381][ T6467] ? follow_page_pte+0x343/0xc50 [ 206.709306][ T6467] ? pfn_swap_entry_to_page+0x310/0x310 [ 206.714848][ T6467] ? read_lock_is_recursive+0x10/0x10 [ 206.720212][ T6467] __do_fault+0x137/0x4e0 [ 206.724537][ T6467] handle_mm_fault+0x2c53/0x39e0 [ 206.729478][ T6467] ? numa_migrate_prep+0x250/0x250 [ 206.734580][ T6467] ? follow_page_mask+0xbac/0x1580 [ 206.739692][ T6467] ? find_vma+0xd2/0x230 [ 206.743934][ T6467] ? check_vma_flags+0x401/0x480 [ 206.748850][ T6467] __get_user_pages+0x4ed/0x1190 [ 206.753775][ T6467] ? populate_vma_page_range+0x2b0/0x2b0 [ 206.759386][ T6467] ? __down_read_common+0x1b0/0x450 [ 206.764566][ T6467] ? memset+0x1f/0x40 [ 206.768530][ T6467] populate_vma_page_range+0x217/0x2b0 [ 206.774000][ T6467] __mm_populate+0x2ea/0x4d0 [ 206.778610][ T6467] ? check_vma_flags+0x480/0x480 [ 206.783550][ T6467] do_shmat+0xab3/0xda0 [ 206.787730][ T6467] ? __ia32_compat_sys_old_shmctl+0x90/0x90 [ 206.793609][ T6467] ? rcu_read_lock_sched_held+0x5f/0x130 [ 206.799223][ T6467] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 206.805184][ T6467] ? rcu_read_lock_sched_held+0x5f/0x130 [ 206.810798][ T6467] __x64_sys_shmat+0x102/0x190 [ 206.815548][ T6467] ? shm_lock+0x190/0x190 [ 206.819860][ T6467] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 206.825821][ T6467] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 206.831780][ T6467] do_syscall_64+0x2b/0x50 [ 206.836179][ T6467] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 206.842078][ T6467] RIP: 0033:0x7fcbff289049 [ 206.846489][ T6467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 206.866076][ T6467] RSP: 002b:00007fcc003d1168 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 206.874479][ T6467] RAX: ffffffffffffffda RBX: 00007fcbff39bf60 RCX: 00007fcbff289049 [ 206.882436][ T6467] RDX: 0000000000004000 RSI: 0000000020005000 RDI: 000000000000005d [ 206.890390][ T6467] RBP: 00007fcbff2e308d R08: 0000000000000000 R09: 0000000000000000 21:00:05 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 206.898341][ T6467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.906292][ T6467] R13: 00007ffc341911ff R14: 00007fcc003d1300 R15: 0000000000022000 [ 206.914252][ T6467] 21:00:05 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 207.253368][ T6467] memory: usage 307132kB, limit 307200kB, failcnt 177 [ 207.262625][ T6467] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 207.302170][ T6467] Memory cgroup stats for /syz2: [ 207.302350][ T6467] anon 139264 [ 207.302350][ T6467] file 311697408 [ 207.302350][ T6467] kernel 2621440 [ 207.302350][ T6467] kernel_stack 65536 [ 207.302350][ T6467] pagetables 81920 [ 207.302350][ T6467] percpu 0 [ 207.302350][ T6467] sock 0 [ 207.302350][ T6467] vmalloc 0 [ 207.302350][ T6467] shmem 311676928 [ 207.302350][ T6467] file_mapped 126976 [ 207.302350][ T6467] file_dirty 20480 [ 207.302350][ T6467] file_writeback 0 [ 207.302350][ T6467] swapcached 0 [ 207.302350][ T6467] anon_thp 0 [ 207.302350][ T6467] file_thp 0 [ 207.302350][ T6467] shmem_thp 0 [ 207.302350][ T6467] inactive_anon 311709696 [ 207.302350][ T6467] active_anon 20480 [ 207.302350][ T6467] inactive_file 4096 [ 207.302350][ T6467] active_file 16384 [ 207.302350][ T6467] unevictable 86016 [ 207.302350][ T6467] slab_reclaimable 1384864 [ 207.302350][ T6467] slab_unreclaimable 1067744 [ 207.302350][ T6467] slab 2452608 [ 207.302350][ T6467] workingset_refault_anon 0 21:00:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 207.434994][ T6467] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=6464,uid=0 [ 207.462513][ T6467] Memory cgroup out of memory: Killed process 6464 (syz-executor.2) total-vm:54504kB, anon-rss:388kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 21:00:05 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:05 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x0, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) [ 207.492146][ T29] oom_reaper: reaped process 6464 (syz-executor.2), now anon-rss:0kB, file-rss:8192kB, shmem-rss:92kB 21:00:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 207.720656][ T6482] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 207.798092][ T6482] CPU: 1 PID: 6482 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 207.809599][ T6482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.819658][ T6482] Call Trace: [ 207.822938][ T6482] [ 207.825872][ T6482] dump_stack_lvl+0x201/0x2d8 [ 207.830559][ T6482] ? show_regs_print_info+0x12/0x12 [ 207.835766][ T6482] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 207.841494][ T6482] ? do_raw_spin_lock+0x151/0x8e0 [ 207.846522][ T6482] ? asan.module_dtor+0x20/0x20 [ 207.851376][ T6482] dump_header+0xdb/0x970 [ 207.855697][ T6482] oom_kill_process+0xf5/0x4d0 [ 207.860448][ T6482] out_of_memory+0x711/0xa70 [ 207.865033][ T6482] ? unregister_oom_notifier+0x20/0x20 [ 207.870483][ T6482] ? trace_lock_release+0x4f/0x150 [ 207.875582][ T6482] ? mem_cgroup_oom+0x47d/0x5f0 [ 207.880416][ T6482] ? lock_release+0x82/0x810 [ 207.884995][ T6482] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 207.890532][ T6482] ? __lock_acquire+0x2b00/0x2b00 [ 207.895558][ T6482] ? mem_cgroup_oom_trylock+0x220/0x220 [ 207.901096][ T6482] ? do_raw_spin_unlock+0x134/0x8a0 [ 207.906282][ T6482] ? mem_cgroup_iter+0x3c9/0x530 [ 207.911287][ T6482] mem_cgroup_oom+0x48d/0x5f0 [ 207.915948][ T6482] try_charge_memcg+0xdab/0x1110 [ 207.920867][ T6482] ? __lock_acquire+0x2b00/0x2b00 [ 207.925974][ T6482] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 207.931950][ T6482] ? rcu_read_lock_sched_held+0x5f/0x130 [ 207.937564][ T6482] ? alloc_pages_vma+0x9aa/0x1150 [ 207.942573][ T6482] ? __folio_memcg+0x170/0x170 [ 207.947328][ T6482] ? rcu_lock_acquire+0x30/0x30 [ 207.952157][ T6482] ? trace_lock_release+0x4f/0x150 [ 207.957245][ T6482] ? rcu_lock_acquire+0x30/0x30 [ 207.962079][ T6482] ? lock_release+0x82/0x810 [ 207.966733][ T6482] ? shmem_alloc_and_acct_page+0x971/0x1230 [ 207.972616][ T6482] ? __lock_acquire+0x2b00/0x2b00 [ 207.977618][ T6482] ? lock_release+0x82/0x810 [ 207.982190][ T6482] charge_memcg+0x119/0x5d0 [ 207.986675][ T6482] ? __mem_cgroup_charge+0x80/0x80 [ 207.991768][ T6482] __mem_cgroup_charge+0x23/0x80 [ 207.996684][ T6482] shmem_add_to_page_cache+0x124a/0x1f30 [ 208.002307][ T6482] ? put_page+0x230/0x230 [ 208.006629][ T6482] ? mem_cgroup_swap_full+0x300/0x300 [ 208.011981][ T6482] ? do_raw_spin_unlock+0x134/0x8a0 [ 208.017160][ T6482] ? PageTransHuge+0xd9/0x2b0 [ 208.021819][ T6482] shmem_getpage_gfp+0x1884/0x30e0 [ 208.026920][ T6482] ? shmem_getpage+0xa0/0xa0 [ 208.031493][ T6482] ? __lock_acquire+0x2b00/0x2b00 [ 208.036502][ T6482] shmem_fault+0x1df/0x810 [ 208.040939][ T6482] ? shmem_fallocate+0xea0/0xea0 [ 208.045860][ T6482] ? count_memcg_event_mm+0x342/0x390 [ 208.051251][ T6482] ? follow_page_pte+0x343/0xc50 [ 208.056180][ T6482] ? pfn_swap_entry_to_page+0x310/0x310 [ 208.061710][ T6482] ? read_lock_is_recursive+0x10/0x10 [ 208.067065][ T6482] __do_fault+0x137/0x4e0 [ 208.071377][ T6482] handle_mm_fault+0x2c53/0x39e0 [ 208.076308][ T6482] ? numa_migrate_prep+0x250/0x250 [ 208.081413][ T6482] ? follow_page_mask+0xbac/0x1580 [ 208.086507][ T6482] ? find_vma+0xd2/0x230 [ 208.090744][ T6482] ? check_vma_flags+0x401/0x480 [ 208.095664][ T6482] __get_user_pages+0x4ed/0x1190 [ 208.100584][ T6482] ? populate_vma_page_range+0x2b0/0x2b0 [ 208.106196][ T6482] ? __down_read_common+0x1b0/0x450 [ 208.111389][ T6482] ? memset+0x1f/0x40 [ 208.115352][ T6482] populate_vma_page_range+0x217/0x2b0 [ 208.120798][ T6482] __mm_populate+0x2ea/0x4d0 [ 208.125369][ T6482] ? check_vma_flags+0x480/0x480 [ 208.130289][ T6482] do_shmat+0xab3/0xda0 [ 208.134433][ T6482] ? __ia32_compat_sys_old_shmctl+0x90/0x90 [ 208.140307][ T6482] ? rcu_read_lock_sched_held+0x5f/0x130 [ 208.145926][ T6482] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 208.151884][ T6482] ? rcu_read_lock_sched_held+0x5f/0x130 [ 208.157504][ T6482] __x64_sys_shmat+0x102/0x190 [ 208.162253][ T6482] ? shm_lock+0x190/0x190 [ 208.166565][ T6482] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 208.172525][ T6482] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 208.178502][ T6482] do_syscall_64+0x2b/0x50 [ 208.182903][ T6482] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 208.188783][ T6482] RIP: 0033:0x7fcbff289049 [ 208.193179][ T6482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 208.212764][ T6482] RSP: 002b:00007fcc003d1168 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 208.221159][ T6482] RAX: ffffffffffffffda RBX: 00007fcbff39bf60 RCX: 00007fcbff289049 [ 208.229111][ T6482] RDX: 0000000000004000 RSI: 0000000020005000 RDI: 000000000000005e [ 208.237061][ T6482] RBP: 00007fcbff2e308d R08: 0000000000000000 R09: 0000000000000000 [ 208.245018][ T6482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.252967][ T6482] R13: 00007ffc341911ff R14: 00007fcc003d1300 R15: 0000000000022000 [ 208.260924][ T6482] [ 208.289088][ T6482] memory: usage 307168kB, limit 307200kB, failcnt 216 21:00:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 208.500864][ T6482] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 208.516752][ T6482] Memory cgroup stats for /syz2: [ 208.516924][ T6482] anon 139264 [ 208.516924][ T6482] file 311783424 [ 208.516924][ T6482] kernel 2600960 [ 208.516924][ T6482] kernel_stack 65536 [ 208.516924][ T6482] pagetables 81920 [ 208.516924][ T6482] percpu 0 [ 208.516924][ T6482] sock 0 [ 208.516924][ T6482] vmalloc 0 [ 208.516924][ T6482] shmem 311762944 [ 208.516924][ T6482] file_mapped 122880 [ 208.516924][ T6482] file_dirty 20480 [ 208.516924][ T6482] file_writeback 0 [ 208.516924][ T6482] swapcached 0 [ 208.516924][ T6482] anon_thp 0 [ 208.516924][ T6482] file_thp 0 [ 208.516924][ T6482] shmem_thp 0 [ 208.516924][ T6482] inactive_anon 311799808 [ 208.516924][ T6482] active_anon 20480 [ 208.516924][ T6482] inactive_file 12288 [ 208.516924][ T6482] active_file 8192 [ 208.516924][ T6482] unevictable 81920 [ 208.516924][ T6482] slab_reclaimable 1388280 [ 208.516924][ T6482] slab_unreclaimable 1039936 [ 208.516924][ T6482] slab 2428216 [ 208.516924][ T6482] workingset_refault_anon 0 21:00:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 208.675321][ T6482] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=6479,uid=0 [ 208.692278][ T6482] Memory cgroup out of memory: Killed process 6479 (syz-executor.2) total-vm:54504kB, anon-rss:388kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 208.757787][ T29] oom_reaper: reaped process 6479 (syz-executor.2), now anon-rss:0kB, file-rss:8192kB, shmem-rss:88kB 21:00:06 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(0x0, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:00:07 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 208.935817][ T6496] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 209.001789][ T6496] CPU: 0 PID: 6496 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 209.013281][ T6496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.023340][ T6496] Call Trace: [ 209.026624][ T6496] [ 209.029552][ T6496] dump_stack_lvl+0x201/0x2d8 [ 209.034237][ T6496] ? show_regs_print_info+0x12/0x12 [ 209.039438][ T6496] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 209.045157][ T6496] ? do_raw_spin_lock+0x151/0x8e0 [ 209.050181][ T6496] ? asan.module_dtor+0x20/0x20 [ 209.055033][ T6496] dump_header+0xdb/0x970 [ 209.059362][ T6496] oom_kill_process+0xf5/0x4d0 [ 209.064126][ T6496] out_of_memory+0x711/0xa70 [ 209.068716][ T6496] ? unregister_oom_notifier+0x20/0x20 [ 209.074169][ T6496] ? trace_lock_release+0x4f/0x150 [ 209.079278][ T6496] ? mem_cgroup_oom+0x47d/0x5f0 [ 209.084127][ T6496] ? lock_release+0x82/0x810 [ 209.088717][ T6496] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 209.094263][ T6496] ? __lock_acquire+0x2b00/0x2b00 [ 209.099287][ T6496] ? mem_cgroup_oom_trylock+0x220/0x220 [ 209.104834][ T6496] ? do_raw_spin_unlock+0x134/0x8a0 [ 209.110034][ T6496] ? mem_cgroup_iter+0x3c9/0x530 [ 209.114973][ T6496] mem_cgroup_oom+0x48d/0x5f0 [ 209.119651][ T6496] try_charge_memcg+0xdab/0x1110 [ 209.124585][ T6496] ? read_lock_is_recursive+0x10/0x10 [ 209.129960][ T6496] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 209.135938][ T6496] ? rcu_read_lock_sched_held+0x5f/0x130 [ 209.141571][ T6496] ? alloc_pages_vma+0x9aa/0x1150 [ 209.146596][ T6496] ? __folio_memcg+0x170/0x170 [ 209.151361][ T6496] ? rcu_lock_acquire+0x30/0x30 [ 209.156211][ T6496] ? trace_lock_release+0x4f/0x150 [ 209.161323][ T6496] ? rcu_lock_acquire+0x30/0x30 [ 209.166170][ T6496] ? lock_release+0x82/0x810 [ 209.170755][ T6496] ? shmem_alloc_and_acct_page+0x971/0x1230 [ 209.176655][ T6496] ? __lock_acquire+0x2b00/0x2b00 [ 209.181702][ T6496] ? lock_release+0x82/0x810 [ 209.186292][ T6496] charge_memcg+0x119/0x5d0 [ 209.190798][ T6496] ? __mem_cgroup_charge+0x80/0x80 [ 209.195909][ T6496] __mem_cgroup_charge+0x23/0x80 [ 209.200850][ T6496] shmem_add_to_page_cache+0x124a/0x1f30 [ 209.206493][ T6496] ? put_page+0x230/0x230 [ 209.210815][ T6496] ? mem_cgroup_swap_full+0x300/0x300 [ 209.216168][ T6496] ? do_raw_spin_unlock+0x134/0x8a0 [ 209.221349][ T6496] ? PageTransHuge+0xd9/0x2b0 [ 209.226009][ T6496] shmem_getpage_gfp+0x1884/0x30e0 [ 209.231118][ T6496] ? shmem_getpage+0xa0/0xa0 [ 209.235692][ T6496] ? __lock_acquire+0x2b00/0x2b00 [ 209.240696][ T6496] shmem_fault+0x1df/0x810 [ 209.245098][ T6496] ? shmem_fallocate+0xea0/0xea0 [ 209.250044][ T6496] ? count_memcg_event_mm+0x342/0x390 [ 209.255397][ T6496] ? follow_page_pte+0x343/0xc50 [ 209.260314][ T6496] ? pfn_swap_entry_to_page+0x310/0x310 [ 209.265839][ T6496] ? read_lock_is_recursive+0x10/0x10 [ 209.271193][ T6496] __do_fault+0x137/0x4e0 [ 209.275506][ T6496] handle_mm_fault+0x2c53/0x39e0 [ 209.280439][ T6496] ? numa_migrate_prep+0x250/0x250 [ 209.285535][ T6496] ? follow_page_mask+0xbac/0x1580 [ 209.290632][ T6496] ? find_vma+0xd2/0x230 [ 209.294853][ T6496] ? check_vma_flags+0x401/0x480 [ 209.299774][ T6496] __get_user_pages+0x4ed/0x1190 [ 209.304705][ T6496] ? populate_vma_page_range+0x2b0/0x2b0 [ 209.310318][ T6496] ? __down_read_common+0x1b0/0x450 [ 209.315510][ T6496] ? memset+0x1f/0x40 [ 209.319480][ T6496] populate_vma_page_range+0x217/0x2b0 [ 209.324923][ T6496] __mm_populate+0x2ea/0x4d0 [ 209.329494][ T6496] ? check_vma_flags+0x480/0x480 [ 209.334420][ T6496] do_shmat+0xab3/0xda0 [ 209.338562][ T6496] ? __ia32_compat_sys_old_shmctl+0x90/0x90 [ 209.344435][ T6496] ? rcu_read_lock_sched_held+0x5f/0x130 [ 209.350047][ T6496] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 209.356014][ T6496] ? rcu_read_lock_sched_held+0x5f/0x130 [ 209.361630][ T6496] __x64_sys_shmat+0x102/0x190 [ 209.366378][ T6496] ? shm_lock+0x190/0x190 [ 209.370688][ T6496] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 209.376661][ T6496] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 209.382620][ T6496] do_syscall_64+0x2b/0x50 [ 209.387016][ T6496] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 209.392889][ T6496] RIP: 0033:0x7fcbff289049 [ 209.397287][ T6496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 209.417216][ T6496] RSP: 002b:00007fcc003d1168 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 209.425782][ T6496] RAX: ffffffffffffffda RBX: 00007fcbff39bf60 RCX: 00007fcbff289049 [ 209.433733][ T6496] RDX: 0000000000004000 RSI: 0000000020005000 RDI: 000000000000005f [ 209.441682][ T6496] RBP: 00007fcbff2e308d R08: 0000000000000000 R09: 0000000000000000 21:00:07 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 209.449632][ T6496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.457588][ T6496] R13: 00007ffc341911ff R14: 00007fcc003d1300 R15: 0000000000022000 [ 209.465544][ T6496] 21:00:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 209.820590][ T6496] memory: usage 307012kB, limit 307200kB, failcnt 242 [ 209.853228][ T6496] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 209.891301][ T6496] Memory cgroup stats for /syz2: [ 209.892386][ T6496] anon 139264 [ 209.892386][ T6496] file 311803904 [ 209.892386][ T6496] kernel 2342912 [ 209.892386][ T6496] kernel_stack 65536 [ 209.892386][ T6496] pagetables 81920 [ 209.892386][ T6496] percpu 0 [ 209.892386][ T6496] sock 0 [ 209.892386][ T6496] vmalloc 0 [ 209.892386][ T6496] shmem 311783424 [ 209.892386][ T6496] file_mapped 57344 [ 209.892386][ T6496] file_dirty 20480 [ 209.892386][ T6496] file_writeback 0 [ 209.892386][ T6496] swapcached 0 [ 209.892386][ T6496] anon_thp 0 [ 209.892386][ T6496] file_thp 0 [ 209.892386][ T6496] shmem_thp 0 [ 209.892386][ T6496] inactive_anon 311885824 [ 209.892386][ T6496] active_anon 20480 [ 209.892386][ T6496] inactive_file 8192 [ 209.892386][ T6496] active_file 12288 [ 209.892386][ T6496] unevictable 16384 [ 209.892386][ T6496] slab_reclaimable 1300936 [ 209.892386][ T6496] slab_unreclaimable 872568 [ 209.892386][ T6496] slab 2173504 [ 209.892386][ T6496] workingset_refault_anon 0 21:00:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:08 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:08 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 210.354129][ T6496] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=6495,uid=0 21:00:08 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:08 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 210.772208][ T6496] Memory cgroup out of memory: Killed process 6495 (syz-executor.2) total-vm:54504kB, anon-rss:388kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 21:00:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 210.878365][ T29] oom_reaper: reaped process 6495 (syz-executor.2), now anon-rss:0kB, file-rss:8192kB, shmem-rss:8kB 21:00:09 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(0x0, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) [ 211.244429][ T6519] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 211.293434][ T6519] CPU: 1 PID: 6519 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 211.304926][ T6519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.314988][ T6519] Call Trace: [ 211.318281][ T6519] [ 211.321215][ T6519] dump_stack_lvl+0x201/0x2d8 [ 211.325908][ T6519] ? show_regs_print_info+0x12/0x12 [ 211.331111][ T6519] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 211.336839][ T6519] ? do_raw_spin_lock+0x151/0x8e0 [ 211.341867][ T6519] ? asan.module_dtor+0x20/0x20 [ 211.346708][ T6519] dump_header+0xdb/0x970 [ 211.351022][ T6519] oom_kill_process+0xf5/0x4d0 [ 211.355767][ T6519] out_of_memory+0x711/0xa70 [ 211.360340][ T6519] ? unregister_oom_notifier+0x20/0x20 [ 211.365779][ T6519] ? trace_lock_release+0x4f/0x150 [ 211.370872][ T6519] ? mem_cgroup_oom+0x47d/0x5f0 [ 211.375705][ T6519] ? lock_release+0x82/0x810 [ 211.380279][ T6519] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 211.385806][ T6519] ? __lock_acquire+0x2b00/0x2b00 [ 211.390812][ T6519] ? mem_cgroup_oom_trylock+0x220/0x220 [ 211.396337][ T6519] ? do_raw_spin_unlock+0x134/0x8a0 [ 211.401513][ T6519] ? mem_cgroup_iter+0x3c9/0x530 [ 211.406432][ T6519] mem_cgroup_oom+0x48d/0x5f0 [ 211.411089][ T6519] try_charge_memcg+0xdab/0x1110 [ 211.416004][ T6519] ? __lock_acquire+0x2b00/0x2b00 [ 211.421011][ T6519] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 211.426971][ T6519] ? rcu_read_lock_sched_held+0x5f/0x130 [ 211.432585][ T6519] ? alloc_pages_vma+0x9aa/0x1150 [ 211.437596][ T6519] ? __folio_memcg+0x170/0x170 [ 211.442342][ T6519] ? rcu_lock_acquire+0x30/0x30 [ 211.447173][ T6519] ? trace_lock_release+0x4f/0x150 [ 211.452268][ T6519] ? rcu_lock_acquire+0x30/0x30 [ 211.457098][ T6519] ? lock_release+0x82/0x810 [ 211.461669][ T6519] ? shmem_alloc_and_acct_page+0x971/0x1230 [ 211.467549][ T6519] ? __lock_acquire+0x2b00/0x2b00 [ 211.472553][ T6519] ? lock_release+0x82/0x810 [ 211.477123][ T6519] charge_memcg+0x119/0x5d0 [ 211.481611][ T6519] ? __mem_cgroup_charge+0x80/0x80 [ 211.486708][ T6519] __mem_cgroup_charge+0x23/0x80 [ 211.491625][ T6519] shmem_add_to_page_cache+0x124a/0x1f30 [ 211.497245][ T6519] ? put_page+0x230/0x230 [ 211.501563][ T6519] ? mem_cgroup_swap_full+0x300/0x300 [ 211.506918][ T6519] ? do_raw_spin_unlock+0x134/0x8a0 [ 211.512096][ T6519] ? PageTransHuge+0xd9/0x2b0 [ 211.516759][ T6519] shmem_getpage_gfp+0x1884/0x30e0 [ 211.521863][ T6519] ? shmem_getpage+0xa0/0xa0 [ 211.526437][ T6519] ? __lock_acquire+0x2b00/0x2b00 [ 211.531440][ T6519] shmem_fault+0x1df/0x810 [ 211.535842][ T6519] ? shmem_fallocate+0xea0/0xea0 [ 211.540760][ T6519] ? count_memcg_event_mm+0x342/0x390 [ 211.546112][ T6519] ? follow_page_pte+0x343/0xc50 [ 211.551028][ T6519] ? pfn_swap_entry_to_page+0x310/0x310 [ 211.556556][ T6519] ? read_lock_is_recursive+0x10/0x10 [ 211.561924][ T6519] __do_fault+0x137/0x4e0 [ 211.566235][ T6519] handle_mm_fault+0x2c53/0x39e0 [ 211.571165][ T6519] ? numa_migrate_prep+0x250/0x250 [ 211.576260][ T6519] ? follow_page_mask+0xbac/0x1580 [ 211.581355][ T6519] ? find_vma+0xd2/0x230 [ 211.585576][ T6519] ? check_vma_flags+0x401/0x480 [ 211.590496][ T6519] __get_user_pages+0x4ed/0x1190 [ 211.595417][ T6519] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 211.601035][ T6519] ? populate_vma_page_range+0x2b0/0x2b0 [ 211.606651][ T6519] ? kasan_check_range+0x80/0x2f0 [ 211.611656][ T6519] ? memset+0x1f/0x40 [ 211.615621][ T6519] populate_vma_page_range+0x217/0x2b0 [ 211.621060][ T6519] __mm_populate+0x2ea/0x4d0 [ 211.625632][ T6519] ? check_vma_flags+0x480/0x480 [ 211.630553][ T6519] do_shmat+0xab3/0xda0 [ 211.634694][ T6519] ? __ia32_compat_sys_old_shmctl+0x90/0x90 [ 211.640574][ T6519] ? rcu_read_lock_sched_held+0x5f/0x130 [ 211.646187][ T6519] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 211.652148][ T6519] ? rcu_read_lock_sched_held+0x5f/0x130 [ 211.657761][ T6519] __x64_sys_shmat+0x102/0x190 [ 211.662507][ T6519] ? shm_lock+0x190/0x190 [ 211.666820][ T6519] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 211.672783][ T6519] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 211.678756][ T6519] do_syscall_64+0x2b/0x50 [ 211.683154][ T6519] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 211.689027][ T6519] RIP: 0033:0x7fcbff289049 [ 211.693437][ T6519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 211.713034][ T6519] RSP: 002b:00007fcc003d1168 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 211.721430][ T6519] RAX: ffffffffffffffda RBX: 00007fcbff39bf60 RCX: 00007fcbff289049 [ 211.729384][ T6519] RDX: 0000000000004000 RSI: 0000000020005000 RDI: 0000000000000060 [ 211.737337][ T6519] RBP: 00007fcbff2e308d R08: 0000000000000000 R09: 0000000000000000 21:00:09 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 211.745289][ T6519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.753242][ T6519] R13: 00007ffc341911ff R14: 00007fcc003d1300 R15: 0000000000022000 [ 211.761201][ T6519] [ 211.786884][ T6519] memory: usage 307156kB, limit 307200kB, failcnt 308 [ 211.813006][ T6519] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 211.841426][ T6519] Memory cgroup stats for /syz2: [ 211.841583][ T6519] anon 139264 [ 211.841583][ T6519] file 312209408 [ 211.841583][ T6519] kernel 2170880 [ 211.841583][ T6519] kernel_stack 65536 [ 211.841583][ T6519] pagetables 81920 [ 211.841583][ T6519] percpu 0 [ 211.841583][ T6519] sock 0 [ 211.841583][ T6519] vmalloc 0 [ 211.841583][ T6519] shmem 312188928 [ 211.841583][ T6519] file_mapped 442368 [ 211.841583][ T6519] file_dirty 20480 [ 211.841583][ T6519] file_writeback 0 [ 211.841583][ T6519] swapcached 0 [ 211.841583][ T6519] anon_thp 0 [ 211.841583][ T6519] file_thp 0 [ 211.841583][ T6519] shmem_thp 0 [ 211.841583][ T6519] inactive_anon 311906304 [ 211.841583][ T6519] active_anon 20480 [ 211.841583][ T6519] inactive_file 8192 [ 211.841583][ T6519] active_file 12288 [ 211.841583][ T6519] unevictable 401408 [ 211.841583][ T6519] slab_reclaimable 1238672 [ 211.841583][ T6519] slab_unreclaimable 760864 [ 211.841583][ T6519] slab 1999536 [ 211.841583][ T6519] workingset_refault_anon 0 21:00:10 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:10 executing program 4: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(0x0, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:00:10 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 212.016293][ T6519] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=6518,uid=0 [ 212.078512][ T6519] Memory cgroup out of memory: Killed process 6518 (syz-executor.2) total-vm:54504kB, anon-rss:388kB, file-rss:8192kB, shmem-rss:256kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 212.113218][ T29] oom_reaper: reaped process 6518 (syz-executor.2), now anon-rss:0kB, file-rss:8192kB, shmem-rss:260kB 21:00:10 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:10 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:10 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(0x0, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:00:10 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:10 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:10 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:10 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 212.798733][ T6542] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 212.832527][ T6542] CPU: 0 PID: 6542 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 212.844019][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.854094][ T6542] Call Trace: [ 212.857442][ T6542] [ 212.860380][ T6542] dump_stack_lvl+0x201/0x2d8 [ 212.865064][ T6542] ? show_regs_print_info+0x12/0x12 [ 212.870277][ T6542] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 212.875998][ T6542] ? do_raw_spin_lock+0x151/0x8e0 [ 212.881027][ T6542] ? asan.module_dtor+0x20/0x20 [ 212.885887][ T6542] dump_header+0xdb/0x970 [ 212.890226][ T6542] oom_kill_process+0xf5/0x4d0 [ 212.895005][ T6542] out_of_memory+0x711/0xa70 [ 212.899602][ T6542] ? unregister_oom_notifier+0x20/0x20 [ 212.905075][ T6542] ? trace_lock_release+0x4f/0x150 [ 212.910186][ T6542] ? mem_cgroup_oom+0x47d/0x5f0 [ 212.915041][ T6542] ? lock_release+0x82/0x810 [ 212.919631][ T6542] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 212.925176][ T6542] ? __lock_acquire+0x2b00/0x2b00 [ 212.930206][ T6542] ? mem_cgroup_oom_trylock+0x220/0x220 [ 212.935761][ T6542] ? do_raw_spin_unlock+0x134/0x8a0 [ 212.940965][ T6542] ? mem_cgroup_iter+0x3c9/0x530 [ 212.945906][ T6542] mem_cgroup_oom+0x48d/0x5f0 [ 212.950645][ T6542] try_charge_memcg+0xdab/0x1110 [ 212.955590][ T6542] ? read_lock_is_recursive+0x10/0x10 [ 212.960964][ T6542] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 212.966945][ T6542] ? rcu_read_lock_sched_held+0x5f/0x130 [ 212.972583][ T6542] ? alloc_pages_vma+0x9aa/0x1150 [ 212.977611][ T6542] ? __folio_memcg+0x170/0x170 [ 212.982388][ T6542] ? rcu_lock_acquire+0x30/0x30 [ 212.987241][ T6542] ? trace_lock_release+0x4f/0x150 [ 212.992358][ T6542] ? rcu_lock_acquire+0x30/0x30 [ 212.997214][ T6542] ? lock_release+0x82/0x810 [ 213.001810][ T6542] ? shmem_alloc_and_acct_page+0x971/0x1230 [ 213.007710][ T6542] ? __lock_acquire+0x2b00/0x2b00 [ 213.013435][ T6542] ? lock_release+0x82/0x810 [ 213.018033][ T6542] charge_memcg+0x119/0x5d0 [ 213.022544][ T6542] ? __mem_cgroup_charge+0x80/0x80 [ 213.027662][ T6542] __mem_cgroup_charge+0x23/0x80 [ 213.032604][ T6542] shmem_add_to_page_cache+0x124a/0x1f30 [ 213.038248][ T6542] ? put_page+0x230/0x230 [ 213.042651][ T6542] ? mem_cgroup_swap_full+0x300/0x300 [ 213.048005][ T6542] ? do_raw_spin_unlock+0x134/0x8a0 [ 213.053187][ T6542] ? PageTransHuge+0xd9/0x2b0 [ 213.057846][ T6542] shmem_getpage_gfp+0x1884/0x30e0 [ 213.062956][ T6542] ? shmem_getpage+0xa0/0xa0 [ 213.067549][ T6542] ? __lock_acquire+0x2b00/0x2b00 [ 213.072555][ T6542] shmem_fault+0x1df/0x810 [ 213.076957][ T6542] ? shmem_fallocate+0xea0/0xea0 [ 213.081876][ T6542] ? count_memcg_event_mm+0x342/0x390 [ 213.087234][ T6542] ? follow_page_pte+0x343/0xc50 [ 213.092170][ T6542] ? pfn_swap_entry_to_page+0x310/0x310 [ 213.097700][ T6542] ? read_lock_is_recursive+0x10/0x10 [ 213.103052][ T6542] __do_fault+0x137/0x4e0 [ 213.107365][ T6542] handle_mm_fault+0x2c53/0x39e0 [ 213.112289][ T6542] ? numa_migrate_prep+0x250/0x250 [ 213.117380][ T6542] ? follow_page_mask+0xbac/0x1580 [ 213.122479][ T6542] ? find_vma+0xd2/0x230 [ 213.126727][ T6542] ? check_vma_flags+0x401/0x480 [ 213.131661][ T6542] __get_user_pages+0x4ed/0x1190 [ 213.136580][ T6542] ? populate_vma_page_range+0x2b0/0x2b0 [ 213.142215][ T6542] ? __down_read_common+0x1b0/0x450 [ 213.147447][ T6542] ? memset+0x1f/0x40 [ 213.151426][ T6542] populate_vma_page_range+0x217/0x2b0 [ 213.156865][ T6542] __mm_populate+0x2ea/0x4d0 [ 213.161434][ T6542] ? check_vma_flags+0x480/0x480 [ 213.166350][ T6542] do_shmat+0xab3/0xda0 [ 213.170495][ T6542] ? __ia32_compat_sys_old_shmctl+0x90/0x90 [ 213.176407][ T6542] ? rcu_read_lock_sched_held+0x5f/0x130 [ 213.182036][ T6542] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 213.188102][ T6542] ? rcu_read_lock_sched_held+0x5f/0x130 [ 213.193733][ T6542] __x64_sys_shmat+0x102/0x190 [ 213.198498][ T6542] ? shm_lock+0x190/0x190 [ 213.202813][ T6542] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 213.208776][ T6542] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 213.214756][ T6542] do_syscall_64+0x2b/0x50 [ 213.219155][ T6542] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 213.225031][ T6542] RIP: 0033:0x7fcbff289049 [ 213.229465][ T6542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 21:00:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 213.249075][ T6542] RSP: 002b:00007fcc003d1168 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 213.257517][ T6542] RAX: ffffffffffffffda RBX: 00007fcbff39bf60 RCX: 00007fcbff289049 [ 213.265475][ T6542] RDX: 0000000000004000 RSI: 0000000020005000 RDI: 0000000000000061 [ 213.273443][ T6542] RBP: 00007fcbff2e308d R08: 0000000000000000 R09: 0000000000000000 [ 213.281419][ T6542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.289397][ T6542] R13: 00007ffc341911ff R14: 00007fcc003d1300 R15: 0000000000022000 [ 213.297376][ T6542] 21:00:11 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:11 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 213.396950][ T6542] memory: usage 307200kB, limit 307200kB, failcnt 331 [ 213.421715][ T6542] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 213.447964][ T6542] Memory cgroup stats for /syz2: [ 213.448130][ T6542] anon 139264 [ 213.448130][ T6542] file 312254464 [ 213.448130][ T6542] kernel 2179072 [ 213.448130][ T6542] kernel_stack 65536 [ 213.448130][ T6542] pagetables 81920 [ 213.448130][ T6542] percpu 0 [ 213.448130][ T6542] sock 0 [ 213.448130][ T6542] vmalloc 0 [ 213.448130][ T6542] shmem 312233984 [ 213.448130][ T6542] file_mapped 81920 [ 213.448130][ T6542] file_dirty 20480 [ 213.448130][ T6542] file_writeback 0 [ 213.448130][ T6542] swapcached 0 21:00:11 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 213.448130][ T6542] anon_thp 0 [ 213.448130][ T6542] file_thp 0 [ 213.448130][ T6542] shmem_thp 0 [ 213.448130][ T6542] inactive_anon 312311808 [ 213.448130][ T6542] active_anon 20480 [ 213.448130][ T6542] inactive_file 4096 [ 213.448130][ T6542] active_file 16384 [ 213.448130][ T6542] unevictable 40960 [ 213.448130][ T6542] slab_reclaimable 1204304 [ 213.448130][ T6542] slab_unreclaimable 801408 [ 213.448130][ T6542] slab 2005712 [ 213.448130][ T6542] workingset_refault_anon 0 21:00:11 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:11 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 213.835583][ T6542] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=6536,uid=0 [ 213.934039][ T6542] Memory cgroup out of memory: Killed process 6536 (syz-executor.2) total-vm:54504kB, anon-rss:388kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 21:00:12 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x0) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:00:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 214.030100][ T29] oom_reaper: reaped process 6536 (syz-executor.2), now anon-rss:0kB, file-rss:8192kB, shmem-rss:4kB [ 214.347480][ T6562] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 214.442854][ T6562] CPU: 0 PID: 6562 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 214.454363][ T6562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 214.464425][ T6562] Call Trace: [ 214.467706][ T6562] [ 214.470635][ T6562] dump_stack_lvl+0x201/0x2d8 [ 214.475327][ T6562] ? show_regs_print_info+0x12/0x12 [ 214.480535][ T6562] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 214.486264][ T6562] ? do_raw_spin_lock+0x151/0x8e0 [ 214.491298][ T6562] ? asan.module_dtor+0x20/0x20 [ 214.496154][ T6562] dump_header+0xdb/0x970 [ 214.500513][ T6562] oom_kill_process+0xf5/0x4d0 [ 214.505291][ T6562] out_of_memory+0x711/0xa70 [ 214.509887][ T6562] ? unregister_oom_notifier+0x20/0x20 [ 214.515348][ T6562] ? trace_lock_release+0x4f/0x150 [ 214.520464][ T6562] ? mem_cgroup_oom+0x47d/0x5f0 [ 214.525331][ T6562] ? lock_release+0x82/0x810 [ 214.529934][ T6562] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 214.535482][ T6562] ? __lock_acquire+0x2b00/0x2b00 [ 214.540514][ T6562] ? mem_cgroup_oom_trylock+0x220/0x220 [ 214.546070][ T6562] ? do_raw_spin_unlock+0x134/0x8a0 [ 214.551306][ T6562] ? mem_cgroup_iter+0x3c9/0x530 [ 214.556259][ T6562] mem_cgroup_oom+0x48d/0x5f0 [ 214.560948][ T6562] try_charge_memcg+0xdab/0x1110 [ 214.565900][ T6562] ? __set_page_owner+0x3b4/0x3d0 [ 214.570938][ T6562] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 214.576922][ T6562] ? rcu_read_lock_sched_held+0x5f/0x130 [ 214.582572][ T6562] ? __folio_memcg+0x170/0x170 [ 214.587341][ T6562] ? rcu_lock_acquire+0x30/0x30 [ 214.592188][ T6562] ? trace_lock_release+0x4f/0x150 [ 214.597384][ T6562] ? rcu_lock_acquire+0x30/0x30 [ 214.602243][ T6562] ? lock_release+0x82/0x810 [ 214.606836][ T6562] ? rcu_read_lock_sched_held+0x5f/0x130 [ 214.612469][ T6562] ? rcu_read_lock_sched_held+0x5f/0x130 [ 214.618108][ T6562] ? __lock_acquire+0x2b00/0x2b00 [ 214.623134][ T6562] charge_memcg+0x119/0x5d0 [ 214.627640][ T6562] ? __mem_cgroup_charge+0x80/0x80 [ 214.632758][ T6562] __mem_cgroup_charge+0x23/0x80 [ 214.637698][ T6562] wp_page_copy+0x2fb/0x15a0 [ 214.642297][ T6562] ? __lock_acquire+0x2b00/0x2b00 [ 214.647357][ T6562] ? do_raw_spin_unlock+0x134/0x8a0 [ 214.652562][ T6562] ? rcu_lock_release+0x20/0x20 [ 214.657402][ T6562] ? __rwlock_init+0x140/0x140 [ 214.662168][ T6562] ? futex_wait+0x4c9/0x5d0 [ 214.666656][ T6562] handle_mm_fault+0x23f7/0x39e0 [ 214.671580][ T6562] ? numa_migrate_prep+0x250/0x250 [ 214.676670][ T6562] ? lock_release+0x82/0x810 [ 214.681240][ T6562] ? read_lock_is_recursive+0x10/0x10 [ 214.686590][ T6562] ? vmacache_find+0x228/0x5d0 [ 214.691339][ T6562] do_user_addr_fault+0x8c4/0x1060 [ 214.696436][ T6562] exc_page_fault+0xa1/0x1e0 [ 214.701008][ T6562] ? asm_exc_page_fault+0x8/0x30 [ 214.705943][ T6562] asm_exc_page_fault+0x1e/0x30 [ 214.710784][ T6562] RIP: 0033:0x7fcbff237280 [ 214.715275][ T6562] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 214.734864][ T6562] RSP: 002b:00007ffc34191190 EFLAGS: 00010246 [ 214.740930][ T6562] RAX: 000000004106bd1c RBX: 00007fcbff39c0c8 RCX: 0000001b2da20000 [ 214.748895][ T6562] RDX: 0000000000000000 RSI: 0000001b2da20014 RDI: 0000000000000022 [ 214.756869][ T6562] RBP: 000000004106bd1c R08: 0000000000001d1c R09: 000000004106bd20 [ 214.764828][ T6562] R10: 00007ffc34191360 R11: 0000000000000246 R12: 00007fcbff390000 [ 214.772798][ T6562] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff81aff476 [ 214.780758][ T6562] ? trace_user_exit+0x6/0x210 [ 214.785514][ T6562] 21:00:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:12 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:13 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 214.806679][ T6562] memory: usage 307200kB, limit 307200kB, failcnt 362 [ 214.842807][ T6562] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 214.896911][ T6562] Memory cgroup stats for /syz2: [ 214.897082][ T6562] anon 106496 [ 214.897082][ T6562] file 312258560 [ 214.897082][ T6562] kernel 2207744 [ 214.897082][ T6562] kernel_stack 98304 [ 214.897082][ T6562] pagetables 73728 [ 214.897082][ T6562] percpu 0 [ 214.897082][ T6562] sock 0 [ 214.897082][ T6562] vmalloc 0 [ 214.897082][ T6562] shmem 312238080 [ 214.897082][ T6562] file_mapped 40960 [ 214.897082][ T6562] file_dirty 20480 [ 214.897082][ T6562] file_writeback 0 [ 214.897082][ T6562] swapcached 0 21:00:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:13 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 214.897082][ T6562] anon_thp 0 [ 214.897082][ T6562] file_thp 0 [ 214.897082][ T6562] shmem_thp 0 [ 214.897082][ T6562] inactive_anon 312324096 [ 214.897082][ T6562] active_anon 20480 [ 214.897082][ T6562] inactive_file 8192 [ 214.897082][ T6562] active_file 12288 [ 214.897082][ T6562] unevictable 0 [ 214.897082][ T6562] slab_reclaimable 1197424 [ 214.897082][ T6562] slab_unreclaimable 809744 [ 214.897082][ T6562] slab 2007168 [ 214.897082][ T6562] workingset_refault_anon 0 21:00:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 215.383784][ T6562] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=6562,uid=0 [ 215.427106][ T6562] Memory cgroup out of memory: Killed process 6562 (syz-executor.2) total-vm:54636kB, anon-rss:388kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 21:00:13 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x0) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:00:13 executing program 0: bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 215.492625][ T29] oom_reaper: reaped process 6562 (syz-executor.2), now anon-rss:0kB, file-rss:8192kB, shmem-rss:4kB 21:00:13 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 215.647281][ T6590] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 215.684665][ T6590] CPU: 1 PID: 6590 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 215.696160][ T6590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 215.706222][ T6590] Call Trace: [ 215.709508][ T6590] [ 215.712442][ T6590] dump_stack_lvl+0x201/0x2d8 [ 215.717136][ T6590] ? show_regs_print_info+0x12/0x12 [ 215.722353][ T6590] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 215.728088][ T6590] ? do_raw_spin_lock+0x151/0x8e0 [ 215.733129][ T6590] ? asan.module_dtor+0x20/0x20 [ 215.737997][ T6590] dump_header+0xdb/0x970 [ 215.742338][ T6590] oom_kill_process+0xf5/0x4d0 [ 215.747116][ T6590] out_of_memory+0x711/0xa70 [ 215.751717][ T6590] ? unregister_oom_notifier+0x20/0x20 [ 215.757183][ T6590] ? trace_lock_release+0x4f/0x150 [ 215.762302][ T6590] ? mem_cgroup_oom+0x47d/0x5f0 [ 215.767202][ T6590] ? lock_release+0x82/0x810 [ 215.771802][ T6590] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 215.777356][ T6590] ? __lock_acquire+0x2b00/0x2b00 [ 215.782405][ T6590] ? mem_cgroup_oom_trylock+0x220/0x220 [ 215.787979][ T6590] ? do_raw_spin_unlock+0x134/0x8a0 [ 215.793171][ T6590] ? mem_cgroup_iter+0x3c9/0x530 [ 215.798096][ T6590] mem_cgroup_oom+0x48d/0x5f0 [ 215.802764][ T6590] try_charge_memcg+0xdab/0x1110 [ 215.807690][ T6590] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 215.813653][ T6590] ? trace_lock_acquire+0x59/0x190 [ 215.818749][ T6590] ? __folio_memcg+0x170/0x170 [ 215.823492][ T6590] ? lock_release+0x82/0x810 [ 215.828065][ T6590] ? read_lock_is_recursive+0x10/0x10 [ 215.833419][ T6590] ? read_lock_is_recursive+0x10/0x10 [ 215.838780][ T6590] ? rcu_read_lock_sched_held+0x5f/0x130 [ 215.844397][ T6590] ? __set_page_owner+0x3b4/0x3d0 [ 215.849447][ T6590] __memcg_kmem_charge_page+0x432/0x500 [ 215.855072][ T6590] __alloc_pages+0x28b/0x580 [ 215.859649][ T6590] ? __rmqueue_pcplist+0x1f20/0x1f20 [ 215.864936][ T6590] ? lock_release+0x82/0x810 [ 215.869507][ T6590] ? rcu_read_lock_sched_held+0x5f/0x130 [ 215.875127][ T6590] ? alloc_pages+0x3e7/0x640 [ 215.879700][ T6590] __pmd_alloc+0xbb/0x840 [ 215.884016][ T6590] ? __pud_alloc+0x220/0x220 [ 215.888590][ T6590] ? count_memcg_event_mm+0x342/0x390 [ 215.893946][ T6590] ? __lock_acquire+0x2b00/0x2b00 [ 215.898950][ T6590] ? pfn_swap_entry_to_page+0x310/0x310 [ 215.904475][ T6590] ? rcu_read_lock_sched_held+0x5f/0x130 [ 215.910088][ T6590] ? trace_lock_acquire+0x59/0x190 [ 215.915194][ T6590] ? rcu_read_lock_sched_held+0x5f/0x130 [ 215.920814][ T6590] handle_mm_fault+0xde8/0x39e0 [ 215.925656][ T6590] ? numa_migrate_prep+0x250/0x250 [ 215.930760][ T6590] ? follow_huge_addr+0x5/0x10 [ 215.935527][ T6590] ? follow_page_mask+0x313/0x1580 [ 215.940625][ T6590] ? find_vma+0xd2/0x230 [ 215.944854][ T6590] ? check_vma_flags+0x401/0x480 [ 215.949775][ T6590] __get_user_pages+0x4ed/0x1190 [ 215.954716][ T6590] ? populate_vma_page_range+0x2b0/0x2b0 [ 215.960332][ T6590] ? __down_read_common+0x1b0/0x450 [ 215.965515][ T6590] ? memset+0x1f/0x40 [ 215.969481][ T6590] populate_vma_page_range+0x217/0x2b0 [ 215.974926][ T6590] __mm_populate+0x2ea/0x4d0 [ 215.979502][ T6590] ? check_vma_flags+0x480/0x480 [ 215.984428][ T6590] do_shmat+0xab3/0xda0 [ 215.988572][ T6590] ? __ia32_compat_sys_old_shmctl+0x90/0x90 [ 215.994461][ T6590] ? rcu_read_lock_sched_held+0x5f/0x130 [ 216.000084][ T6590] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 216.006047][ T6590] ? rcu_read_lock_sched_held+0x5f/0x130 [ 216.011677][ T6590] __x64_sys_shmat+0x102/0x190 [ 216.016858][ T6590] ? shm_lock+0x190/0x190 [ 216.021185][ T6590] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 216.027260][ T6590] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 216.033220][ T6590] do_syscall_64+0x2b/0x50 [ 216.037621][ T6590] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 216.043498][ T6590] RIP: 0033:0x7fcbff289049 [ 216.047899][ T6590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 216.067484][ T6590] RSP: 002b:00007fcc003d1168 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 216.075879][ T6590] RAX: ffffffffffffffda RBX: 00007fcbff39bf60 RCX: 00007fcbff289049 [ 216.083847][ T6590] RDX: 0000000000004000 RSI: 0000000020005000 RDI: 0000000000000062 [ 216.091815][ T6590] RBP: 00007fcbff2e308d R08: 0000000000000000 R09: 0000000000000000 [ 216.099768][ T6590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.107723][ T6590] R13: 00007ffc341911ff R14: 00007fcc003d1300 R15: 0000000000022000 [ 216.115682][ T6590] 21:00:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:14 executing program 0: bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:14 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:14 executing program 0: bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 216.505497][ T6590] memory: usage 307112kB, limit 307200kB, failcnt 390 [ 216.525522][ T6590] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 216.533058][ T6590] Memory cgroup stats for /syz2: [ 216.533222][ T6590] anon 139264 [ 216.533222][ T6590] file 312258560 [ 216.533222][ T6590] kernel 2084864 [ 216.533222][ T6590] kernel_stack 65536 [ 216.533222][ T6590] pagetables 73728 [ 216.533222][ T6590] percpu 0 [ 216.533222][ T6590] sock 0 [ 216.533222][ T6590] vmalloc 0 [ 216.533222][ T6590] shmem 312238080 [ 216.533222][ T6590] file_mapped 40960 [ 216.533222][ T6590] file_dirty 20480 [ 216.533222][ T6590] file_writeback 0 [ 216.533222][ T6590] swapcached 0 [ 216.533222][ T6590] anon_thp 0 [ 216.533222][ T6590] file_thp 0 [ 216.533222][ T6590] shmem_thp 0 [ 216.533222][ T6590] inactive_anon 312356864 [ 216.533222][ T6590] active_anon 20480 [ 216.533222][ T6590] inactive_file 8192 [ 216.533222][ T6590] active_file 12288 [ 216.533222][ T6590] unevictable 0 [ 216.533222][ T6590] slab_reclaimable 1156352 [ 216.533222][ T6590] slab_unreclaimable 764096 [ 216.533222][ T6590] slab 1920448 [ 216.533222][ T6590] workingset_refault_anon 0 [ 216.630811][ T6590] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=6589,uid=0 [ 216.646904][ T6590] Memory cgroup out of memory: Killed process 6589 (syz-executor.2) total-vm:54504kB, anon-rss:388kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 21:00:14 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x0) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:00:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 216.705518][ T29] oom_reaper: reaped process 6589 (syz-executor.2), now anon-rss:0kB, file-rss:8192kB, shmem-rss:12kB 21:00:15 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:15 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 216.925514][ T6613] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 216.957817][ T6613] CPU: 1 PID: 6613 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 216.969318][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.979378][ T6613] Call Trace: [ 216.982664][ T6613] [ 216.985601][ T6613] dump_stack_lvl+0x201/0x2d8 [ 216.990296][ T6613] ? show_regs_print_info+0x12/0x12 [ 216.995505][ T6613] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 217.001230][ T6613] ? do_raw_spin_lock+0x151/0x8e0 [ 217.006262][ T6613] ? asan.module_dtor+0x20/0x20 [ 217.011123][ T6613] dump_header+0xdb/0x970 [ 217.015465][ T6613] oom_kill_process+0xf5/0x4d0 [ 217.020234][ T6613] out_of_memory+0x711/0xa70 [ 217.024820][ T6613] ? unregister_oom_notifier+0x20/0x20 [ 217.030283][ T6613] ? trace_lock_release+0x4f/0x150 [ 217.035393][ T6613] ? mem_cgroup_oom+0x47d/0x5f0 [ 217.040228][ T6613] ? lock_release+0x82/0x810 [ 217.044802][ T6613] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 217.050343][ T6613] ? __lock_acquire+0x2b00/0x2b00 [ 217.055350][ T6613] ? mem_cgroup_oom_trylock+0x220/0x220 [ 217.060877][ T6613] ? do_raw_spin_unlock+0x134/0x8a0 [ 217.066064][ T6613] ? mem_cgroup_iter+0x3c9/0x530 [ 217.070987][ T6613] mem_cgroup_oom+0x48d/0x5f0 [ 217.075648][ T6613] try_charge_memcg+0xdab/0x1110 [ 217.080567][ T6613] ? __set_page_owner+0x3b4/0x3d0 [ 217.085575][ T6613] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 217.091537][ T6613] ? rcu_read_lock_sched_held+0x5f/0x130 [ 217.097154][ T6613] ? __folio_memcg+0x170/0x170 [ 217.101904][ T6613] ? rcu_lock_acquire+0x30/0x30 [ 217.106751][ T6613] ? trace_lock_release+0x4f/0x150 [ 217.111843][ T6613] ? rcu_lock_acquire+0x30/0x30 [ 217.116685][ T6613] ? lock_release+0x82/0x810 [ 217.121258][ T6613] ? rcu_read_lock_sched_held+0x5f/0x130 [ 217.126878][ T6613] ? rcu_read_lock_sched_held+0x5f/0x130 [ 217.132510][ T6613] ? __lock_acquire+0x2b00/0x2b00 [ 217.137517][ T6613] charge_memcg+0x119/0x5d0 [ 217.142029][ T6613] ? __mem_cgroup_charge+0x80/0x80 [ 217.147125][ T6613] __mem_cgroup_charge+0x23/0x80 [ 217.152044][ T6613] wp_page_copy+0x2fb/0x15a0 [ 217.156615][ T6613] ? __lock_acquire+0x2b00/0x2b00 [ 217.161624][ T6613] ? do_raw_spin_unlock+0x134/0x8a0 [ 217.166806][ T6613] ? rcu_lock_release+0x20/0x20 [ 217.171639][ T6613] ? __rwlock_init+0x140/0x140 [ 217.176388][ T6613] handle_mm_fault+0x23f7/0x39e0 [ 217.181316][ T6613] ? numa_migrate_prep+0x250/0x250 [ 217.186409][ T6613] ? lock_release+0x82/0x810 [ 217.190980][ T6613] ? read_lock_is_recursive+0x10/0x10 [ 217.196335][ T6613] ? vmacache_find+0x228/0x5d0 [ 217.201084][ T6613] do_user_addr_fault+0x8c4/0x1060 [ 217.206181][ T6613] exc_page_fault+0xa1/0x1e0 [ 217.210752][ T6613] ? asm_exc_page_fault+0x8/0x30 [ 217.215668][ T6613] asm_exc_page_fault+0x1e/0x30 [ 217.220499][ T6613] RIP: 0033:0x7fcbff237280 [ 217.224899][ T6613] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 217.244492][ T6613] RSP: 002b:00007ffc34191190 EFLAGS: 00010246 [ 217.250542][ T6613] RAX: 00000000e25006fc RBX: 00007fcbff39bff8 RCX: 0000001b2da20000 [ 217.258509][ T6613] RDX: 0000000000000000 RSI: 0000001b2da20014 RDI: 0000000008ded597 [ 217.266466][ T6613] RBP: 00000000e25006fc R08: 00000000000006fc R09: 00000000e2500700 [ 217.274418][ T6613] R10: 00007ffc34191360 R11: 0000000000000246 R12: 00007fcbff390000 [ 217.282387][ T6613] R13: 0000000000000001 R14: 000000000000001e R15: ffffffff818ca838 [ 217.290339][ T6613] ? trace_irq_enable+0x98/0x220 [ 217.295266][ T6613] [ 217.349698][ T6613] memory: usage 307200kB, limit 307200kB, failcnt 440 [ 217.356656][ T6613] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 217.364672][ T6613] Memory cgroup stats for /syz2: [ 217.364830][ T6613] anon 131072 [ 217.364830][ T6613] file 312262656 [ 217.364830][ T6613] kernel 2179072 [ 217.364830][ T6613] kernel_stack 65536 [ 217.364830][ T6613] pagetables 73728 [ 217.364830][ T6613] percpu 0 [ 217.364830][ T6613] sock 0 [ 217.364830][ T6613] vmalloc 0 [ 217.364830][ T6613] shmem 312242176 [ 217.364830][ T6613] file_mapped 40960 [ 217.364830][ T6613] file_dirty 0 [ 217.364830][ T6613] file_writeback 0 [ 217.364830][ T6613] swapcached 0 [ 217.364830][ T6613] anon_thp 0 [ 217.364830][ T6613] file_thp 0 [ 217.364830][ T6613] shmem_thp 0 [ 217.364830][ T6613] inactive_anon 312352768 [ 217.364830][ T6613] active_anon 20480 [ 217.364830][ T6613] inactive_file 20480 [ 217.364830][ T6613] active_file 0 [ 217.364830][ T6613] unevictable 0 [ 217.364830][ T6613] slab_reclaimable 1200528 [ 217.364830][ T6613] slab_unreclaimable 813536 21:00:15 executing program 4: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x0) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:00:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 217.364830][ T6613] slab 2014064 [ 217.364830][ T6613] workingset_refault_anon 0 [ 217.364830][ T6613] workingset_refault_file 1 21:00:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:15 executing program 1: bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) [ 217.729562][ T6613] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=6613,uid=0 [ 217.749578][ T6613] Memory cgroup out of memory: Killed process 6613 (syz-executor.2) total-vm:54504kB, anon-rss:388kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 21:00:15 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x0, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:00:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:15 executing program 1: bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) [ 217.771707][ T29] oom_reaper: reaped process 6613 (syz-executor.2), now anon-rss:0kB, file-rss:8192kB, shmem-rss:4kB 21:00:16 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:16 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:16 executing program 1: bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 217.955930][ T6641] syz-executor.2 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=1000 [ 218.005598][ T6641] CPU: 0 PID: 6641 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 218.017098][ T6641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.027163][ T6641] Call Trace: [ 218.030456][ T6641] [ 218.033399][ T6641] dump_stack_lvl+0x201/0x2d8 [ 218.038101][ T6641] ? show_regs_print_info+0x12/0x12 [ 218.043331][ T6641] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 218.049075][ T6641] ? do_raw_spin_lock+0x151/0x8e0 [ 218.054115][ T6641] ? asan.module_dtor+0x20/0x20 [ 218.058982][ T6641] dump_header+0xdb/0x970 [ 218.063323][ T6641] oom_kill_process+0xf5/0x4d0 [ 218.068109][ T6641] out_of_memory+0x711/0xa70 [ 218.072688][ T6641] ? unregister_oom_notifier+0x20/0x20 [ 218.078134][ T6641] ? trace_lock_release+0x4f/0x150 [ 218.083246][ T6641] ? mem_cgroup_oom+0x47d/0x5f0 [ 218.088096][ T6641] ? lock_release+0x82/0x810 [ 218.092669][ T6641] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 218.098221][ T6641] ? __lock_acquire+0x2b00/0x2b00 [ 218.103229][ T6641] ? mem_cgroup_oom_trylock+0x220/0x220 [ 218.108757][ T6641] ? do_raw_spin_unlock+0x134/0x8a0 [ 218.113940][ T6641] ? mem_cgroup_iter+0x3c9/0x530 [ 218.118875][ T6641] mem_cgroup_oom+0x48d/0x5f0 [ 218.123535][ T6641] try_charge_memcg+0xdab/0x1110 [ 218.128453][ T6641] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 218.134432][ T6641] ? trace_lock_acquire+0x59/0x190 [ 218.139528][ T6641] ? __folio_memcg+0x170/0x170 [ 218.144272][ T6641] ? lock_release+0x82/0x810 [ 218.148855][ T6641] ? read_lock_is_recursive+0x10/0x10 [ 218.154289][ T6641] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 218.160267][ T6641] ? trace_lock_release+0x4f/0x150 [ 218.165381][ T6641] obj_cgroup_charge+0x3b2/0x520 [ 218.170299][ T6641] ? __lock_acquire+0x2b00/0x2b00 [ 218.175305][ T6641] ? local_lock_release+0x120/0x120 [ 218.180488][ T6641] kmem_cache_alloc+0xbd/0x310 [ 218.185335][ T6641] ? __alloc_file+0x27/0x2f0 [ 218.189925][ T6641] __alloc_file+0x27/0x2f0 [ 218.194329][ T6641] ? alloc_empty_file+0x49/0x1b0 [ 218.199260][ T6641] alloc_empty_file+0xa9/0x1b0 [ 218.204022][ T6641] alloc_file+0x58/0x4e0 [ 218.208248][ T6641] alloc_file_pseudo+0x272/0x300 [ 218.213187][ T6641] ? alloc_empty_file_noaccount+0x70/0x70 [ 218.218891][ T6641] ? shmem_fill_super+0xb50/0xb50 [ 218.223911][ T6641] __shmem_file_setup+0x194/0x270 [ 218.228922][ T6641] newseg+0x426/0xdd0 [ 218.232900][ T6641] ? ksys_shmget+0x1a0/0x1a0 [ 218.237487][ T6641] ? trace_lock_release+0x4f/0x150 [ 218.242594][ T6641] ipcget+0x183/0xb70 [ 218.246561][ T6641] ? read_lock_is_recursive+0x10/0x10 [ 218.251915][ T6641] ? __lock_acquire+0x2b00/0x2b00 [ 218.256920][ T6641] ? xfd_validate_state+0x6a/0x150 [ 218.262013][ T6641] ? ipc_obtain_object_check+0x1a0/0x1a0 [ 218.267631][ T6641] ? rcu_read_lock_sched_held+0x5f/0x130 [ 218.273262][ T6641] __x64_sys_shmget+0x184/0x200 [ 218.278111][ T6641] ? vtime_user_exit+0x2b2/0x3e0 [ 218.283060][ T6641] ? shm_more_checks+0x80/0x80 [ 218.287809][ T6641] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 218.293772][ T6641] do_syscall_64+0x2b/0x50 [ 218.298178][ T6641] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 218.304054][ T6641] RIP: 0033:0x7fcbff289049 [ 218.308455][ T6641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 218.328303][ T6641] RSP: 002b:00007fcc003d1168 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 218.336701][ T6641] RAX: ffffffffffffffda RBX: 00007fcbff39bf60 RCX: 00007fcbff289049 [ 218.344654][ T6641] RDX: 0000000078000000 RSI: 0000000000400000 RDI: 0000000000000000 [ 218.352606][ T6641] RBP: 00007fcbff2e308d R08: 0000000000000000 R09: 0000000000000000 [ 218.360576][ T6641] R10: 000000002000e000 R11: 0000000000000246 R12: 0000000000000000 [ 218.368530][ T6641] R13: 00007ffc341911ff R14: 00007fcc003d1300 R15: 0000000000022000 [ 218.376504][ T6641] 21:00:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 218.410194][ T6641] memory: usage 307200kB, limit 307200kB, failcnt 509 21:00:16 executing program 4: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) [ 218.468608][ T6641] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 218.493556][ T6641] Memory cgroup stats for /syz2: [ 218.493727][ T6641] anon 139264 [ 218.493727][ T6641] file 312246272 [ 218.493727][ T6641] kernel 2187264 [ 218.493727][ T6641] kernel_stack 65536 [ 218.493727][ T6641] pagetables 73728 [ 218.493727][ T6641] percpu 0 [ 218.493727][ T6641] sock 0 [ 218.493727][ T6641] vmalloc 0 [ 218.493727][ T6641] shmem 312242176 [ 218.493727][ T6641] file_mapped 40960 [ 218.493727][ T6641] file_dirty 0 [ 218.493727][ T6641] file_writeback 0 [ 218.493727][ T6641] swapcached 0 [ 218.493727][ T6641] anon_thp 0 [ 218.493727][ T6641] file_thp 0 [ 218.493727][ T6641] shmem_thp 0 [ 218.493727][ T6641] inactive_anon 312360960 [ 218.493727][ T6641] active_anon 20480 [ 218.493727][ T6641] inactive_file 0 [ 218.493727][ T6641] active_file 4096 [ 218.493727][ T6641] unevictable 0 [ 218.493727][ T6641] slab_reclaimable 1203872 [ 218.493727][ T6641] slab_unreclaimable 815832 [ 218.493727][ T6641] slab 2019704 [ 218.493727][ T6641] workingset_refault_anon 0 [ 218.493727][ T6641] workingset_refault_file 1 21:00:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 218.639888][ T6641] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=6640,uid=0 [ 218.661547][ T6641] Memory cgroup out of memory: Killed process 6640 (syz-executor.2) total-vm:54504kB, anon-rss:388kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 21:00:16 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x0, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) [ 218.735605][ T29] oom_reaper: reaped process 6640 (syz-executor.2), now anon-rss:0kB, file-rss:8192kB, shmem-rss:4kB 21:00:17 executing program 4: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x0, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:00:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 218.894571][ T6659] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 218.953038][ T6659] CPU: 1 PID: 6659 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 218.964535][ T6659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.974599][ T6659] Call Trace: [ 218.977877][ T6659] [ 218.980809][ T6659] dump_stack_lvl+0x201/0x2d8 [ 218.985496][ T6659] ? show_regs_print_info+0x12/0x12 [ 218.990705][ T6659] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 218.996468][ T6659] ? do_raw_spin_lock+0x151/0x8e0 [ 219.001478][ T6659] ? asan.module_dtor+0x20/0x20 [ 219.006317][ T6659] dump_header+0xdb/0x970 [ 219.010632][ T6659] oom_kill_process+0xf5/0x4d0 [ 219.015400][ T6659] out_of_memory+0x711/0xa70 [ 219.019974][ T6659] ? unregister_oom_notifier+0x20/0x20 [ 219.025418][ T6659] ? trace_lock_release+0x4f/0x150 [ 219.030514][ T6659] ? mem_cgroup_oom+0x47d/0x5f0 [ 219.035366][ T6659] ? lock_release+0x82/0x810 [ 219.039940][ T6659] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 219.045465][ T6659] ? __lock_acquire+0x2b00/0x2b00 [ 219.050469][ T6659] ? mem_cgroup_oom_trylock+0x220/0x220 [ 219.055996][ T6659] ? do_raw_spin_unlock+0x134/0x8a0 [ 219.061179][ T6659] ? mem_cgroup_iter+0x3c9/0x530 [ 219.066097][ T6659] mem_cgroup_oom+0x48d/0x5f0 [ 219.070756][ T6659] try_charge_memcg+0xdab/0x1110 [ 219.075676][ T6659] ? trace_lock_acquire+0x59/0x190 [ 219.080770][ T6659] ? __folio_memcg+0x170/0x170 [ 219.085527][ T6659] ? lock_release+0x82/0x810 [ 219.090100][ T6659] ? read_lock_is_recursive+0x10/0x10 [ 219.095453][ T6659] ? trace_lock_acquire+0x59/0x190 [ 219.100546][ T6659] ? trace_lock_release+0x4f/0x150 [ 219.105639][ T6659] ? rcu_lock_acquire+0x30/0x30 [ 219.110472][ T6659] ? lock_release+0x82/0x810 [ 219.115045][ T6659] obj_cgroup_charge+0x3b2/0x520 [ 219.119964][ T6659] ? __rcu_read_lock+0xb0/0xb0 [ 219.124714][ T6659] ? local_lock_release+0x120/0x120 [ 219.129894][ T6659] kmem_cache_alloc_node+0xc6/0x370 [ 219.135076][ T6659] ? copy_process+0x687/0x5ff0 [ 219.139825][ T6659] ? _raw_spin_unlock_irq+0x1f/0x40 [ 219.145006][ T6659] copy_process+0x687/0x5ff0 [ 219.149591][ T6659] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 219.155574][ T6659] ? psi_memstall_leave+0x233/0x2b0 [ 219.160755][ T6659] ? trace_lock_release+0x4f/0x150 [ 219.165846][ T6659] ? psi_memstall_leave+0x233/0x2b0 [ 219.171030][ T6659] ? rcu_read_lock_sched_held+0x5f/0x130 [ 219.176645][ T6659] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 219.182606][ T6659] ? psi_group_change+0xadc/0x1130 [ 219.187697][ T6659] ? pidfd_show_fdinfo+0x2e0/0x2e0 [ 219.192810][ T6659] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 219.198771][ T6659] ? rcu_read_lock_sched_held+0x5f/0x130 [ 219.204384][ T6659] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 219.210356][ T6659] kernel_clone+0x22a/0x7e0 [ 219.214860][ T6659] ? trace_lock_acquire+0x59/0x190 [ 219.219953][ T6659] ? create_io_thread+0x1d0/0x1d0 [ 219.224959][ T6659] ? trace_lock_release+0x4f/0x150 [ 219.230054][ T6659] ? xfd_validate_state+0x6a/0x150 [ 219.235154][ T6659] __x64_sys_clone+0x245/0x2b0 [ 219.239900][ T6659] ? __do_sys_vfork+0x130/0x130 [ 219.244732][ T6659] ? rcu_read_lock_sched_held+0x5f/0x130 [ 219.250351][ T6659] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 219.256315][ T6659] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 219.262277][ T6659] do_syscall_64+0x2b/0x50 [ 219.266764][ T6659] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 219.272649][ T6659] RIP: 0033:0x7fcbff28a471 [ 219.277046][ T6659] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 21:00:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 219.296633][ T6659] RSP: 002b:00007ffc34191148 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 219.305028][ T6659] RAX: ffffffffffffffda RBX: 00007fcc003d1700 RCX: 00007fcbff28a471 [ 219.312996][ T6659] RDX: 00007fcc003d19d0 RSI: 00007fcc003d12f0 RDI: 00000000003d0f00 [ 219.320953][ T6659] RBP: 00007ffc34191390 R08: 00007fcc003d1700 R09: 00007fcc003d1700 [ 219.328907][ T6659] R10: 00007fcc003d19d0 R11: 0000000000000206 R12: 00007ffc341911fe [ 219.336871][ T6659] R13: 00007ffc341911ff R14: 00007fcc003d1300 R15: 0000000000022000 [ 219.344832][ T6659] 21:00:17 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:17 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 219.477934][ T6659] memory: usage 307196kB, limit 307200kB, failcnt 562 [ 219.489569][ T6659] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 21:00:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 219.539523][ T6659] Memory cgroup stats for /syz2: [ 219.540107][ T6659] anon 94208 [ 219.540107][ T6659] file 312246272 [ 219.540107][ T6659] kernel 2220032 [ 219.540107][ T6659] kernel_stack 32768 [ 219.540107][ T6659] pagetables 69632 [ 219.540107][ T6659] percpu 0 [ 219.540107][ T6659] sock 0 [ 219.540107][ T6659] vmalloc 0 [ 219.540107][ T6659] shmem 312242176 [ 219.540107][ T6659] file_mapped 40960 [ 219.540107][ T6659] file_dirty 0 [ 219.540107][ T6659] file_writeback 0 [ 219.540107][ T6659] swapcached 0 21:00:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 219.540107][ T6659] anon_thp 0 [ 219.540107][ T6659] file_thp 0 [ 219.540107][ T6659] shmem_thp 0 [ 219.540107][ T6659] inactive_anon 312315904 [ 219.540107][ T6659] active_anon 20480 [ 219.540107][ T6659] inactive_file 0 [ 219.540107][ T6659] active_file 4096 [ 219.540107][ T6659] unevictable 0 [ 219.540107][ T6659] slab_reclaimable 1242128 [ 219.540107][ T6659] slab_unreclaimable 849992 [ 219.540107][ T6659] slab 2092120 [ 219.540107][ T6659] workingset_refault_anon 0 [ 219.540107][ T6659] workingset_refault_file 1 [ 219.936726][ T6659] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=6659,uid=0 [ 219.965310][ T6659] Memory cgroup out of memory: Killed process 6659 (syz-executor.2) total-vm:54504kB, anon-rss:388kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 21:00:18 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x0, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:00:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 219.996295][ T29] oom_reaper: reaped process 6659 (syz-executor.2), now anon-rss:0kB, file-rss:8192kB, shmem-rss:4kB 21:00:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 220.279111][ T6690] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 220.290076][ T6690] CPU: 0 PID: 6690 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 220.301551][ T6690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 220.311613][ T6690] Call Trace: [ 220.314901][ T6690] [ 220.317840][ T6690] dump_stack_lvl+0x201/0x2d8 [ 220.322534][ T6690] ? show_regs_print_info+0x12/0x12 [ 220.327744][ T6690] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 220.333475][ T6690] ? do_raw_spin_lock+0x151/0x8e0 [ 220.338515][ T6690] ? asan.module_dtor+0x20/0x20 [ 220.343375][ T6690] dump_header+0xdb/0x970 [ 220.347711][ T6690] oom_kill_process+0xf5/0x4d0 [ 220.352483][ T6690] out_of_memory+0x711/0xa70 [ 220.357081][ T6690] ? unregister_oom_notifier+0x20/0x20 [ 220.362544][ T6690] ? trace_lock_release+0x4f/0x150 [ 220.367656][ T6690] ? mem_cgroup_oom+0x47d/0x5f0 [ 220.372510][ T6690] ? lock_release+0x82/0x810 [ 220.377102][ T6690] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 220.382650][ T6690] ? __lock_acquire+0x2b00/0x2b00 [ 220.387679][ T6690] ? mem_cgroup_oom_trylock+0x220/0x220 [ 220.393229][ T6690] ? do_raw_spin_unlock+0x134/0x8a0 [ 220.398431][ T6690] ? mem_cgroup_iter+0x3c9/0x530 [ 220.403378][ T6690] mem_cgroup_oom+0x48d/0x5f0 [ 220.408064][ T6690] try_charge_memcg+0xdab/0x1110 [ 220.413007][ T6690] ? trace_lock_acquire+0x59/0x190 [ 220.418125][ T6690] ? __folio_memcg+0x170/0x170 [ 220.422892][ T6690] ? lock_release+0x82/0x810 21:00:18 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 220.427487][ T6690] ? read_lock_is_recursive+0x10/0x10 [ 220.432865][ T6690] ? rcu_read_lock_sched_held+0x5f/0x130 [ 220.438514][ T6690] __memcg_kmem_charge_page+0x432/0x500 [ 220.444076][ T6690] alloc_thread_stack_node+0x16c/0x4e0 [ 220.449567][ T6690] copy_process+0x6d5/0x5ff0 [ 220.454163][ T6690] ? psi_memstall_leave+0x233/0x2b0 [ 220.459366][ T6690] ? trace_lock_release+0x4f/0x150 [ 220.464482][ T6690] ? psi_memstall_leave+0x233/0x2b0 [ 220.469699][ T6690] ? rcu_read_lock_sched_held+0x5f/0x130 [ 220.475343][ T6690] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 220.481338][ T6690] ? psi_group_change+0xadc/0x1130 [ 220.486460][ T6690] ? pidfd_show_fdinfo+0x2e0/0x2e0 [ 220.491671][ T6690] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 220.497660][ T6690] ? rcu_read_lock_sched_held+0x5f/0x130 [ 220.503303][ T6690] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 220.509296][ T6690] kernel_clone+0x22a/0x7e0 [ 220.513817][ T6690] ? trace_lock_acquire+0x59/0x190 [ 220.519046][ T6690] ? create_io_thread+0x1d0/0x1d0 [ 220.524089][ T6690] ? trace_lock_release+0x4f/0x150 [ 220.529214][ T6690] __x64_sys_clone+0x245/0x2b0 [ 220.533991][ T6690] ? __do_sys_vfork+0x130/0x130 [ 220.538851][ T6690] ? rcu_read_lock_sched_held+0x5f/0x130 [ 220.544503][ T6690] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 220.550491][ T6690] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 220.556486][ T6690] do_syscall_64+0x2b/0x50 [ 220.560913][ T6690] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 220.566816][ T6690] RIP: 0033:0x7fcbff28a471 [ 220.571233][ T6690] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 220.590840][ T6690] RSP: 002b:00007ffc34191148 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 220.599874][ T6690] RAX: ffffffffffffffda RBX: 00007fcc003d1700 RCX: 00007fcbff28a471 [ 220.607853][ T6690] RDX: 00007fcc003d19d0 RSI: 00007fcc003d12f0 RDI: 00000000003d0f00 [ 220.615830][ T6690] RBP: 00007ffc34191390 R08: 00007fcc003d1700 R09: 00007fcc003d1700 [ 220.623809][ T6690] R10: 00007fcc003d19d0 R11: 0000000000000206 R12: 00007ffc341911fe [ 220.631785][ T6690] R13: 00007ffc341911ff R14: 00007fcc003d1300 R15: 0000000000022000 [ 220.639765][ T6690] 21:00:18 executing program 3: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:00:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 220.686828][ T6690] memory: usage 307192kB, limit 307200kB, failcnt 638 [ 220.695155][ T6690] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 220.704948][ T6690] Memory cgroup stats for /syz2: [ 220.705092][ T6690] anon 94208 [ 220.705092][ T6690] file 312246272 [ 220.705092][ T6690] kernel 2224128 [ 220.705092][ T6690] kernel_stack 32768 [ 220.705092][ T6690] pagetables 69632 [ 220.705092][ T6690] percpu 0 [ 220.705092][ T6690] sock 0 [ 220.705092][ T6690] vmalloc 0 21:00:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 220.705092][ T6690] shmem 312242176 [ 220.705092][ T6690] file_mapped 40960 [ 220.705092][ T6690] file_dirty 0 [ 220.705092][ T6690] file_writeback 0 [ 220.705092][ T6690] swapcached 0 [ 220.705092][ T6690] anon_thp 0 [ 220.705092][ T6690] file_thp 0 [ 220.705092][ T6690] shmem_thp 0 [ 220.705092][ T6690] inactive_anon 312315904 [ 220.705092][ T6690] active_anon 20480 [ 220.705092][ T6690] inactive_file 0 [ 220.705092][ T6690] active_file 4096 [ 220.705092][ T6690] unevictable 0 [ 220.705092][ T6690] slab_reclaimable 1239168 21:00:18 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udplite(0x2, 0x2, 0x88) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 220.705092][ T6690] slab_unreclaimable 839032 [ 220.705092][ T6690] slab 2078200 [ 220.705092][ T6690] workingset_refault_anon 0 [ 220.705092][ T6690] workingset_refault_file 1 21:00:19 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 221.049037][ T6690] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=6690,uid=0 21:00:19 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:00:19 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:19 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:19 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 221.157293][ T6690] Memory cgroup out of memory: Killed process 6690 (syz-executor.2) total-vm:54504kB, anon-rss:388kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 221.190447][ T29] oom_reaper: reaped process 6690 (syz-executor.2), now anon-rss:0kB, file-rss:8192kB, shmem-rss:4kB 21:00:19 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:19 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 221.360917][ T6715] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 221.425265][ T6715] CPU: 0 PID: 6715 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 221.436762][ T6715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 221.446825][ T6715] Call Trace: [ 221.450108][ T6715] [ 221.453042][ T6715] dump_stack_lvl+0x201/0x2d8 [ 221.457730][ T6715] ? show_regs_print_info+0x12/0x12 [ 221.462932][ T6715] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 221.469160][ T6715] ? do_raw_spin_lock+0x151/0x8e0 [ 221.474194][ T6715] ? asan.module_dtor+0x20/0x20 [ 221.479050][ T6715] dump_header+0xdb/0x970 [ 221.483390][ T6715] oom_kill_process+0xf5/0x4d0 [ 221.488167][ T6715] out_of_memory+0x711/0xa70 [ 221.492776][ T6715] ? unregister_oom_notifier+0x20/0x20 [ 221.498242][ T6715] ? trace_lock_release+0x4f/0x150 [ 221.503373][ T6715] ? mem_cgroup_oom+0x47d/0x5f0 [ 221.508227][ T6715] ? lock_release+0x82/0x810 [ 221.512913][ T6715] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 221.518468][ T6715] ? __lock_acquire+0x2b00/0x2b00 [ 221.523508][ T6715] ? mem_cgroup_oom_trylock+0x220/0x220 [ 221.529063][ T6715] ? do_raw_spin_unlock+0x134/0x8a0 [ 221.534269][ T6715] ? mem_cgroup_iter+0x3c9/0x530 [ 221.539196][ T6715] mem_cgroup_oom+0x48d/0x5f0 [ 221.543861][ T6715] try_charge_memcg+0xdab/0x1110 [ 221.548783][ T6715] ? trace_lock_acquire+0x59/0x190 [ 221.553897][ T6715] ? __folio_memcg+0x170/0x170 [ 221.558657][ T6715] ? lock_release+0x82/0x810 [ 221.563272][ T6715] ? read_lock_is_recursive+0x10/0x10 [ 221.568644][ T6715] ? rcu_lock_acquire+0x30/0x30 [ 221.573491][ T6715] ? lock_release+0x82/0x810 [ 221.578077][ T6715] ? rcu_read_lock_sched_held+0x5f/0x130 [ 221.583705][ T6715] __memcg_kmem_charge_page+0x432/0x500 [ 221.589250][ T6715] alloc_thread_stack_node+0x16c/0x4e0 [ 221.594697][ T6715] copy_process+0x6d5/0x5ff0 [ 221.599278][ T6715] ? psi_memstall_leave+0x233/0x2b0 [ 221.604462][ T6715] ? trace_lock_release+0x4f/0x150 [ 221.609558][ T6715] ? psi_memstall_leave+0x233/0x2b0 [ 221.614743][ T6715] ? rcu_read_lock_sched_held+0x5f/0x130 [ 221.620361][ T6715] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 221.626328][ T6715] ? psi_group_change+0xadc/0x1130 [ 221.631449][ T6715] ? pidfd_show_fdinfo+0x2e0/0x2e0 [ 221.636547][ T6715] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 221.642511][ T6715] ? rcu_read_lock_sched_held+0x5f/0x130 [ 221.648127][ T6715] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 221.654090][ T6715] kernel_clone+0x22a/0x7e0 [ 221.658576][ T6715] ? trace_lock_acquire+0x59/0x190 [ 221.663672][ T6715] ? create_io_thread+0x1d0/0x1d0 [ 221.668677][ T6715] ? trace_lock_release+0x4f/0x150 [ 221.673774][ T6715] ? xfd_validate_state+0x6a/0x150 [ 221.678874][ T6715] __x64_sys_clone+0x245/0x2b0 [ 221.683621][ T6715] ? __do_sys_vfork+0x130/0x130 [ 221.688468][ T6715] ? rcu_read_lock_sched_held+0x5f/0x130 [ 221.694089][ T6715] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 221.700053][ T6715] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 221.706015][ T6715] do_syscall_64+0x2b/0x50 [ 221.710414][ T6715] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 221.716725][ T6715] RIP: 0033:0x7fcbff28a471 [ 221.721124][ T6715] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 221.740711][ T6715] RSP: 002b:00007ffc34191148 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 221.749113][ T6715] RAX: ffffffffffffffda RBX: 00007fcc003d1700 RCX: 00007fcbff28a471 [ 221.757083][ T6715] RDX: 00007fcc003d19d0 RSI: 00007fcc003d12f0 RDI: 00000000003d0f00 [ 221.765049][ T6715] RBP: 00007ffc34191390 R08: 00007fcc003d1700 R09: 00007fcc003d1700 21:00:19 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 221.773009][ T6715] R10: 00007fcc003d19d0 R11: 0000000000000206 R12: 00007ffc341911fe [ 221.780969][ T6715] R13: 00007ffc341911ff R14: 00007fcc003d1300 R15: 0000000000022000 [ 221.788933][ T6715] [ 221.800303][ T6715] memory: usage 307200kB, limit 307200kB, failcnt 685 21:00:20 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 221.842038][ T6715] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 221.905203][ T6715] Memory cgroup stats for /syz2: [ 221.905899][ T6715] anon 94208 [ 221.905899][ T6715] file 312246272 [ 221.905899][ T6715] kernel 2232320 [ 221.905899][ T6715] kernel_stack 32768 [ 221.905899][ T6715] pagetables 69632 [ 221.905899][ T6715] percpu 0 [ 221.905899][ T6715] sock 0 [ 221.905899][ T6715] vmalloc 0 [ 221.905899][ T6715] shmem 312242176 [ 221.905899][ T6715] file_mapped 40960 [ 221.905899][ T6715] file_dirty 0 [ 221.905899][ T6715] file_writeback 0 [ 221.905899][ T6715] swapcached 0 [ 221.905899][ T6715] anon_thp 0 [ 221.905899][ T6715] file_thp 0 [ 221.905899][ T6715] shmem_thp 0 [ 221.905899][ T6715] inactive_anon 312315904 [ 221.905899][ T6715] active_anon 20480 [ 221.905899][ T6715] inactive_file 0 [ 221.905899][ T6715] active_file 4096 [ 221.905899][ T6715] unevictable 0 [ 221.905899][ T6715] slab_reclaimable 1239168 [ 221.905899][ T6715] slab_unreclaimable 864480 [ 221.905899][ T6715] slab 2103648 [ 221.905899][ T6715] workingset_refault_anon 0 [ 221.905899][ T6715] workingset_refault_file 1 21:00:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:20 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 222.456611][ T6715] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=6715,uid=0 21:00:20 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:00:20 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:20 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 222.514576][ T6715] Memory cgroup out of memory: Killed process 6715 (syz-executor.2) total-vm:54504kB, anon-rss:388kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 222.646676][ T6741] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 222.686859][ T6741] CPU: 1 PID: 6741 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 222.698359][ T6741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 222.708429][ T6741] Call Trace: [ 222.711720][ T6741] [ 222.714656][ T6741] dump_stack_lvl+0x201/0x2d8 [ 222.719342][ T6741] ? show_regs_print_info+0x12/0x12 [ 222.724544][ T6741] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 222.730269][ T6741] ? do_raw_spin_lock+0x151/0x8e0 [ 222.735311][ T6741] ? asan.module_dtor+0x20/0x20 [ 222.740168][ T6741] dump_header+0xdb/0x970 [ 222.744501][ T6741] oom_kill_process+0xf5/0x4d0 [ 222.749271][ T6741] out_of_memory+0x711/0xa70 [ 222.753878][ T6741] ? unregister_oom_notifier+0x20/0x20 [ 222.759346][ T6741] ? trace_lock_release+0x4f/0x150 [ 222.764461][ T6741] ? mem_cgroup_oom+0x47d/0x5f0 [ 222.769318][ T6741] ? lock_release+0x82/0x810 [ 222.774036][ T6741] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 222.779591][ T6741] ? __lock_acquire+0x2b00/0x2b00 [ 222.784630][ T6741] ? mem_cgroup_oom_trylock+0x220/0x220 [ 222.790184][ T6741] ? do_raw_spin_unlock+0x134/0x8a0 [ 222.795395][ T6741] ? mem_cgroup_iter+0x3c9/0x530 [ 222.800357][ T6741] mem_cgroup_oom+0x48d/0x5f0 [ 222.805044][ T6741] try_charge_memcg+0xdab/0x1110 [ 222.809990][ T6741] ? __set_page_owner+0x3b4/0x3d0 [ 222.815025][ T6741] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 222.821014][ T6741] ? rcu_read_lock_sched_held+0x5f/0x130 [ 222.826659][ T6741] ? __folio_memcg+0x170/0x170 [ 222.831428][ T6741] ? rcu_lock_acquire+0x30/0x30 [ 222.836283][ T6741] ? trace_lock_release+0x4f/0x150 [ 222.841402][ T6741] ? rcu_lock_acquire+0x30/0x30 [ 222.846261][ T6741] ? lock_release+0x82/0x810 [ 222.850863][ T6741] ? rcu_read_lock_sched_held+0x5f/0x130 [ 222.856510][ T6741] ? __lock_acquire+0x2b00/0x2b00 [ 222.861546][ T6741] charge_memcg+0x119/0x5d0 [ 222.866063][ T6741] ? __mem_cgroup_charge+0x80/0x80 [ 222.871186][ T6741] __mem_cgroup_charge+0x23/0x80 [ 222.876140][ T6741] wp_page_copy+0x2fb/0x15a0 [ 222.880846][ T6741] ? __lock_acquire+0x2b00/0x2b00 [ 222.885880][ T6741] ? do_raw_spin_unlock+0x134/0x8a0 [ 222.891103][ T6741] ? rcu_lock_release+0x20/0x20 [ 222.895970][ T6741] handle_mm_fault+0x23f7/0x39e0 [ 222.900930][ T6741] ? numa_migrate_prep+0x250/0x250 [ 222.906049][ T6741] ? lock_release+0x82/0x810 [ 222.910652][ T6741] ? read_lock_is_recursive+0x10/0x10 [ 222.916034][ T6741] ? vmacache_find+0x4e3/0x5d0 [ 222.920822][ T6741] ? vmacache_update+0x9f/0xf0 [ 222.925603][ T6741] do_user_addr_fault+0x8c4/0x1060 [ 222.930722][ T6741] exc_page_fault+0xa1/0x1e0 [ 222.935316][ T6741] ? asm_exc_page_fault+0x8/0x30 [ 222.940259][ T6741] asm_exc_page_fault+0x1e/0x30 [ 222.945224][ T6741] RIP: 0033:0x7fcbff258011 [ 222.949653][ T6741] Code: 11 00 4c 29 e8 4b 8d 0c 2f 48 8b 6c 24 18 48 39 d3 48 89 4b 60 0f 95 c2 48 83 c8 01 0f b6 d2 48 c1 e2 02 4c 09 ea 48 83 ca 01 <49> 89 57 08 48 89 41 08 49 83 c7 10 eb b3 48 8d 3d 8a dc 09 00 e8 [ 222.969267][ T6741] RSP: 002b:00007ffc341910a0 EFLAGS: 00010206 [ 222.975343][ T6741] RAX: 00000000000206e1 RBX: 00007fcbff36f5e0 RCX: 0000555555b39920 [ 222.983327][ T6741] RDX: 0000000000000121 RSI: 0000000000000000 RDI: 0000000000000004 [ 222.991310][ T6741] RBP: 0000000000000110 R08: 0000000000000003 R09: 00007fcbff36f640 [ 222.999289][ T6741] R10: 0000000000020022 R11: 0000000000000120 R12: 0000000000000010 [ 223.007265][ T6741] R13: 0000000000000120 R14: 0000000000000012 R15: 0000555555b39800 [ 223.015251][ T6741] [ 223.114732][ T6741] memory: usage 307196kB, limit 307200kB, failcnt 733 [ 223.126927][ T6741] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 223.138181][ T6741] Memory cgroup stats for /syz2: [ 223.138346][ T6741] anon 90112 [ 223.138346][ T6741] file 312246272 [ 223.138346][ T6741] kernel 2232320 [ 223.138346][ T6741] kernel_stack 32768 [ 223.138346][ T6741] pagetables 69632 [ 223.138346][ T6741] percpu 0 [ 223.138346][ T6741] sock 0 [ 223.138346][ T6741] vmalloc 0 [ 223.138346][ T6741] shmem 312242176 [ 223.138346][ T6741] file_mapped 40960 [ 223.138346][ T6741] file_dirty 0 [ 223.138346][ T6741] file_writeback 0 [ 223.138346][ T6741] swapcached 0 [ 223.138346][ T6741] anon_thp 0 [ 223.138346][ T6741] file_thp 0 [ 223.138346][ T6741] shmem_thp 0 [ 223.138346][ T6741] inactive_anon 312311808 [ 223.138346][ T6741] active_anon 20480 [ 223.138346][ T6741] inactive_file 4096 [ 223.138346][ T6741] active_file 0 [ 223.138346][ T6741] unevictable 0 21:00:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 223.138346][ T6741] slab_reclaimable 1242128 [ 223.138346][ T6741] slab_unreclaimable 856968 [ 223.138346][ T6741] slab 2099096 [ 223.138346][ T6741] workingset_refault_anon 0 [ 223.138346][ T6741] workingset_refault_file 1 21:00:21 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 223.280115][ T6741] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=6741,uid=0 [ 223.324090][ T6741] Memory cgroup out of memory: Killed process 6741 (syz-executor.2) total-vm:54504kB, anon-rss:388kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 21:00:21 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) [ 223.395333][ T29] oom_reaper: reaped process 6741 (syz-executor.2), now anon-rss:0kB, file-rss:8192kB, shmem-rss:4kB [ 223.506314][ T3620] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 223.561249][ T3620] CPU: 1 PID: 3620 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 223.572750][ T3620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.582815][ T3620] Call Trace: [ 223.586101][ T3620] [ 223.589038][ T3620] dump_stack_lvl+0x201/0x2d8 [ 223.593738][ T3620] ? show_regs_print_info+0x12/0x12 [ 223.598946][ T3620] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 223.604686][ T3620] ? do_raw_spin_lock+0x151/0x8e0 [ 223.609699][ T3620] ? asan.module_dtor+0x20/0x20 [ 223.614537][ T3620] dump_header+0xdb/0x970 [ 223.619114][ T3620] oom_kill_process+0xf5/0x4d0 [ 223.623863][ T3620] out_of_memory+0x711/0xa70 [ 223.628438][ T3620] ? unregister_oom_notifier+0x20/0x20 [ 223.633877][ T3620] ? trace_lock_release+0x4f/0x150 [ 223.638971][ T3620] ? mem_cgroup_oom+0x47d/0x5f0 [ 223.643805][ T3620] ? lock_release+0x82/0x810 [ 223.648392][ T3620] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 223.653917][ T3620] ? __lock_acquire+0x2b00/0x2b00 [ 223.658923][ T3620] ? mem_cgroup_oom_trylock+0x220/0x220 [ 223.664464][ T3620] ? do_raw_spin_unlock+0x134/0x8a0 [ 223.669644][ T3620] ? mem_cgroup_iter+0x3c9/0x530 [ 223.674565][ T3620] mem_cgroup_oom+0x48d/0x5f0 [ 223.679223][ T3620] try_charge_memcg+0xdab/0x1110 [ 223.684158][ T3620] ? trace_lock_acquire+0x59/0x190 [ 223.689270][ T3620] ? __folio_memcg+0x170/0x170 [ 223.694025][ T3620] ? lock_release+0x82/0x810 [ 223.698599][ T3620] ? read_lock_is_recursive+0x10/0x10 [ 223.703950][ T3620] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 223.709935][ T3620] ? trace_lock_release+0x4f/0x150 [ 223.715028][ T3620] obj_cgroup_charge+0x3b2/0x520 [ 223.719945][ T3620] ? __lock_acquire+0x2b00/0x2b00 [ 223.724950][ T3620] ? local_lock_release+0x120/0x120 [ 223.730131][ T3620] kmem_cache_alloc+0xbd/0x310 [ 223.734886][ T3620] ? vm_area_dup+0x23/0x1c0 [ 223.739395][ T3620] vm_area_dup+0x23/0x1c0 [ 223.743722][ T3620] dup_mmap+0x6c9/0xfb0 [ 223.747889][ T3620] ? lockdep_softirqs_off+0x420/0x420 [ 223.753253][ T3620] ? __delayed_free_task+0x20/0x20 [ 223.758360][ T3620] ? mm_init+0x671/0x7b0 [ 223.762595][ T3620] dup_mm+0x8c/0x310 [ 223.766479][ T3620] copy_process+0x2a1e/0x5ff0 [ 223.771165][ T3620] ? pidfd_show_fdinfo+0x2e0/0x2e0 [ 223.776261][ T3620] ? rcu_read_lock_sched_held+0x5f/0x130 [ 223.781876][ T3620] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 223.787834][ T3620] ? rcu_read_lock_sched_held+0x5f/0x130 [ 223.793447][ T3620] kernel_clone+0x22a/0x7e0 [ 223.797939][ T3620] ? trace_lock_acquire+0x59/0x190 [ 223.803051][ T3620] ? create_io_thread+0x1d0/0x1d0 [ 223.808068][ T3620] ? trace_lock_release+0x4f/0x150 [ 223.813160][ T3620] ? __lock_acquire+0x2b00/0x2b00 [ 223.818172][ T3620] __x64_sys_clone+0x245/0x2b0 [ 223.822919][ T3620] ? __do_sys_vfork+0x130/0x130 [ 223.827753][ T3620] ? rcu_read_lock_sched_held+0x5f/0x130 [ 223.833389][ T3620] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 223.839352][ T3620] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 223.845313][ T3620] do_syscall_64+0x2b/0x50 [ 223.849711][ T3620] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 223.855585][ T3620] RIP: 0033:0x7fcbff28763b [ 223.860013][ T3620] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 223.879610][ T3620] RSP: 002b:00007ffc34191440 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 223.888027][ T3620] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcbff28763b [ 223.895982][ T3620] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 223.903959][ T3620] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555b38400 21:00:21 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:22 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 223.911923][ T3620] R10: 0000555555b386d0 R11: 0000000000000246 R12: 0000000000000001 [ 223.919908][ T3620] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc34191520 [ 223.927986][ T3620] 21:00:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:22 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:23 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 225.600687][ T3620] memory: usage 307016kB, limit 307200kB, failcnt 793 [ 225.607488][ T3620] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 225.617292][ T3620] Memory cgroup stats for /syz2: [ 225.617463][ T3620] anon 49152 [ 225.617463][ T3620] file 312246272 [ 225.617463][ T3620] kernel 2088960 [ 225.617463][ T3620] kernel_stack 32768 [ 225.617463][ T3620] pagetables 61440 [ 225.617463][ T3620] percpu 0 [ 225.617463][ T3620] sock 0 [ 225.617463][ T3620] vmalloc 0 [ 225.617463][ T3620] shmem 312242176 [ 225.617463][ T3620] file_mapped 40960 [ 225.617463][ T3620] file_dirty 0 [ 225.617463][ T3620] file_writeback 0 [ 225.617463][ T3620] swapcached 0 [ 225.617463][ T3620] anon_thp 0 [ 225.617463][ T3620] file_thp 0 [ 225.617463][ T3620] shmem_thp 0 [ 225.617463][ T3620] inactive_anon 312270848 [ 225.617463][ T3620] active_anon 20480 [ 225.617463][ T3620] inactive_file 0 [ 225.617463][ T3620] active_file 4096 [ 225.617463][ T3620] unevictable 0 [ 225.617463][ T3620] slab_reclaimable 1182208 [ 225.617463][ T3620] slab_unreclaimable 788408 [ 225.617463][ T3620] slab 1970616 [ 225.617463][ T3620] workingset_refault_anon 0 [ 225.617463][ T3620] workingset_refault_file 1 [ 225.718805][ T3620] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=3620,uid=0 [ 225.737406][ T3620] Memory cgroup out of memory: Killed process 3620 (syz-executor.2) total-vm:50532kB, anon-rss:388kB, file-rss:9072kB, shmem-rss:4kB, UID:0 pgtables:72kB oom_score_adj:0 21:00:24 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:00:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:24 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:24 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:25 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:25 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udplite(0x2, 0x2, 0x88) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 227.274466][ T45] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.407566][ T45] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.503298][ T45] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.616617][ T45] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 21:00:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 228.505708][ T45] device hsr_slave_0 left promiscuous mode [ 228.542248][ T45] device hsr_slave_1 left promiscuous mode [ 228.588428][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.623785][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.649562][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.659944][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.667977][ T45] device bridge_slave_1 left promiscuous mode [ 228.675838][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.691830][ T45] device bridge_slave_0 left promiscuous mode [ 228.698064][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.708462][ T45] device veth1_macvtap left promiscuous mode [ 228.714606][ T45] device veth0_macvtap left promiscuous mode [ 228.724307][ T45] device veth1_vlan left promiscuous mode [ 228.730347][ T45] device veth0_vlan left promiscuous mode [ 228.908038][ T45] team0 (unregistering): Port device team_slave_1 removed [ 228.922187][ T45] team0 (unregistering): Port device team_slave_0 removed [ 228.934482][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.955080][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.005918][ T45] bond0 (unregistering): Released all slaves [ 231.898640][ T3672] Bluetooth: hci0: command 0x0406 tx timeout [ 231.904704][ T3672] Bluetooth: hci2: command 0x0406 tx timeout [ 231.912300][ T3672] Bluetooth: hci4: command 0x0406 tx timeout [ 231.918306][ T3672] Bluetooth: hci5: command 0x0406 tx timeout [ 231.924616][ T3672] Bluetooth: hci3: command 0x0406 tx timeout [ 233.578640][ T3634] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 238.138591][ T3634] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 240.624592][ T3639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.632119][ T3639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.639464][ T3639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.646926][ T3639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.654423][ T3639] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 240.661564][ T3639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.881974][ T6989] chnl_net:caif_netlink_parms(): no params data found [ 240.973437][ T6989] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.995754][ T6989] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.007943][ T6989] device bridge_slave_0 entered promiscuous mode [ 241.016862][ T6989] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.024042][ T6989] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.033753][ T6989] device bridge_slave_1 entered promiscuous mode [ 241.113487][ T6989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.123011][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 241.153874][ T6989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.238027][ T6989] team0: Port device team_slave_0 added [ 241.264155][ T6989] team0: Port device team_slave_1 added [ 241.325850][ T6989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.333488][ T6989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.361283][ T6989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.375714][ T6989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.382678][ T6989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.408593][ T6989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.457009][ T6989] device hsr_slave_0 entered promiscuous mode [ 241.465262][ T6989] device hsr_slave_1 entered promiscuous mode [ 241.611214][ T6989] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.618316][ T6989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.625676][ T6989] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.632746][ T6989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.727275][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.735768][ T2927] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.746257][ T2927] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.764895][ T6989] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.781759][ T3671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.790116][ T3671] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.797153][ T3671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.815208][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.823829][ T3673] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.830908][ T3673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.868841][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.886014][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.894470][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.919152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.927310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.940627][ T6989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.955694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.963433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.980970][ T6989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.179497][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 242.188070][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 242.236250][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 242.244650][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 242.253594][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 242.261581][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.270963][ T6989] device veth0_vlan entered promiscuous mode [ 242.281453][ T6989] device veth1_vlan entered promiscuous mode [ 242.325879][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 242.334738][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 242.342999][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 242.351510][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 242.363359][ T6989] device veth0_macvtap entered promiscuous mode [ 242.376339][ T6989] device veth1_macvtap entered promiscuous mode [ 242.416592][ T6989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 242.428435][ T6989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.438400][ T6989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 242.448961][ T6989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.459318][ T6989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 242.470552][ T6989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.491337][ T6989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.500559][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 242.508359][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 242.516477][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 242.524967][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 242.534443][ T6989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 242.545086][ T6989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.556292][ T6989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 242.566829][ T6989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.579535][ T6989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 242.590144][ T6989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.600081][ T6989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 242.610586][ T6989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.620629][ T6989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 242.631142][ T6989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.645218][ T6989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.654139][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 242.662552][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 242.676340][ T6989] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.684742][ T6989] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.693255][ T6989] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.701668][ T6989] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.711095][ T5642] Bluetooth: hci1: command 0x0409 tx timeout [ 242.765919][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.781518][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.791862][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 242.817065][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.826126][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.836857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 21:00:41 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:00:41 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:41 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:41 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:00:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:41 executing program 3: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:00:41 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:00:42 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:42 executing program 3: mlockall(0x2) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:00:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 244.779021][ T5639] Bluetooth: hci1: command 0x041b tx timeout 21:00:43 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:43 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:00:43 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:43 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:43 executing program 3: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:00:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:44 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:44 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:44 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:44 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:00:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 246.868777][ T5642] Bluetooth: hci1: command 0x040f tx timeout 21:00:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:45 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:46 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) r0 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r0, &(0x7f00000e5000/0x2000)=nil, 0x3000) r1 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:00:46 executing program 4: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) r0 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r0, &(0x7f00000e5000/0x2000)=nil, 0x3000) r1 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x1000) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:00:46 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:46 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 248.938651][ T5639] Bluetooth: hci1: command 0x0419 tx timeout 21:00:47 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:47 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:47 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:47 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:48 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) (fail_nth: 1) 21:00:48 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:49 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x8001}}, './file0\x00'}) connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) sendmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x10, 0x110}, {0x18, 0x110, 0xa, "9b"}], 0x28}}], 0x2, 0x0) 21:00:49 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x8001}}, './file0\x00'}) (async, rerun: 32) connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) (async, rerun: 32) sendmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x10, 0x110}, {0x18, 0x110, 0xa, "9b"}], 0x28}}], 0x2, 0x0) 21:00:49 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x8001}}, './file0\x00'}) connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) sendmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x10, 0x110}, {0x18, 0x110, 0xa, "9b"}], 0x28}}], 0x2, 0x0) 21:00:49 executing program 4: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x8001}}, './file0\x00'}) connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) sendmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x10, 0x110}, {0x18, 0x110, 0xa, "9b"}], 0x28}}], 0x2, 0x0) [ 251.063044][ T7333] FAULT_INJECTION: forcing a failure. [ 251.063044][ T7333] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 251.148890][ T7333] CPU: 0 PID: 7333 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 251.160384][ T7333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.170454][ T7333] Call Trace: [ 251.173742][ T7333] [ 251.176676][ T7333] dump_stack_lvl+0x201/0x2d8 [ 251.181454][ T7333] ? show_regs_print_info+0x12/0x12 [ 251.186667][ T7333] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 251.192458][ T7333] ? lock_release+0x82/0x810 21:00:49 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x71, 0x11, 0x13}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) 21:00:49 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:49 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x71, 0x11, 0x13}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) [ 251.197079][ T7333] ? snprintf+0xd6/0x120 [ 251.201378][ T7333] should_fail+0x384/0x4b0 [ 251.205848][ T7333] _copy_to_user+0x2b/0x130 [ 251.210409][ T7333] simple_read_from_buffer+0xd9/0x160 [ 251.215847][ T7333] proc_fail_nth_read+0x1af/0x220 [ 251.220912][ T7333] ? proc_fault_inject_write+0x3a0/0x3a0 [ 251.226555][ T7333] ? security_file_permission+0x462/0x5c0 [ 251.232361][ T7333] ? proc_fault_inject_write+0x3a0/0x3a0 [ 251.238091][ T7333] vfs_read+0x2f8/0xd30 [ 251.242332][ T7333] ? __lock_acquire+0x2b00/0x2b00 [ 251.247365][ T7333] ? __rcu_read_lock+0xb0/0xb0 [ 251.252209][ T7333] ? kernel_read+0x200/0x200 [ 251.256806][ T7333] ? lock_release+0x82/0x810 [ 251.261403][ T7333] ? mutex_lock_nested+0x1a/0x20 [ 251.266393][ T7333] ? __fdget_pos+0x23f/0x2e0 [ 251.270970][ T7333] ? ksys_read+0x77/0x2b0 [ 251.275306][ T7333] ksys_read+0x189/0x2b0 [ 251.279547][ T7333] ? print_irqtrace_events+0x220/0x220 [ 251.285005][ T7333] ? vfs_write+0xd40/0xd40 [ 251.289407][ T7333] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 251.295388][ T7333] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 251.301356][ T7333] do_syscall_64+0x2b/0x50 [ 251.305826][ T7333] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 251.311708][ T7333] RIP: 0033:0x7efc03e3bbfc [ 251.316123][ T7333] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 251.335714][ T7333] RSP: 002b:00007efc04f78160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 21:00:49 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000308500003000000006000000000000000000000300000000050000000300000000000000040000000000000803000000040000000000000700000000002e00005f00"], &(0x7f0000000100)=""/208, 0x4e, 0xd0, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x50, r0, 0x32854000) [ 251.344180][ T7333] RAX: ffffffffffffffda RBX: 00007efc03f9bf60 RCX: 00007efc03e3bbfc [ 251.352137][ T7333] RDX: 000000000000000f RSI: 00007efc04f781e0 RDI: 0000000000000003 [ 251.360092][ T7333] RBP: 00007efc04f781d0 R08: 0000000000000000 R09: 0000000000000000 [ 251.368045][ T7333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.375998][ T7333] R13: 00007ffe96d26d2f R14: 00007efc04f78300 R15: 0000000000022000 [ 251.383959][ T7333] 21:00:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:49 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000308500003000000006000000000000000000000300000000050000000300000000000000040000000000000803000000040000000000000700000000002e00005f00"], &(0x7f0000000100)=""/208, 0x4e, 0xd0, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x50, r0, 0x32854000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000308500003000000006000000000000000000000300000000050000000300000000000000040000000000000803000000040000000000000700000000002e00005f00"], &(0x7f0000000100)=""/208, 0x4e, 0xd0, 0x1}, 0x20) (async) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x50, r0, 0x32854000) (async) 21:00:49 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:00:49 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:49 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000308500003000000006000000000000000000000300000000050000000300000000000000040000000000000803000000040000000000000700000000002e00005f00"], &(0x7f0000000100)=""/208, 0x4e, 0xd0, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x50, r0, 0x32854000) 21:00:49 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x71, 0x11, 0x13}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) 21:00:49 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:49 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:50 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000200)={0x2, 0x44f, 0x7, 0xfffffffa, 0x2, [{0x2, 0x2, 0x3, '\x00', 0x1000}, {0x0, 0x2, 0x8000000000000000, '\x00', 0x4}]}) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x28, 0x13, 0x0, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x3}]}]}, 0x28}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000003a00190100000000000000000200000004000000100001800c00100008000b"], 0x28}, 0x1, 0x2000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0xfffefffc) 21:00:50 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x2) 21:00:50 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000200)={0x2, 0x44f, 0x7, 0xfffffffa, 0x2, [{0x2, 0x2, 0x3, '\x00', 0x1000}, {0x0, 0x2, 0x8000000000000000, '\x00', 0x4}]}) (async, rerun: 64) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x28, 0x13, 0x0, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x3}]}]}, 0x28}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000003a00190100000000000000000200000004000000100001800c00100008000b"], 0x28}, 0x1, 0x2000}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0xfffefffc) 21:00:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:50 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000200)={0x2, 0x44f, 0x7, 0xfffffffa, 0x2, [{0x2, 0x2, 0x3, '\x00', 0x1000}, {0x0, 0x2, 0x8000000000000000, '\x00', 0x4}]}) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) (async, rerun: 32) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x28, 0x13, 0x0, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x3}]}]}, 0x28}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000003a00190100000000000000000200000004000000100001800c00100008000b"], 0x28}, 0x1, 0x2000}, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0xfffefffc) 21:00:50 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x3) 21:00:50 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) mmap(&(0x7f00001bd000/0x3000)=nil, 0x3000, 0x3, 0x8010, r1, 0x960f8000) write$binfmt_misc(r1, &(0x7f0000000280)={'syz0', "520cfa27dab23de6cd81262b0fbba3b83dd7d1def8fffb05b98ebcc30cd0ab81a3ded8a04f8ef6ab7b6a6cedc34ff1ec3ef78227b2a11a1ec4203e81fd2a2cbef4beb32297deaa57902c13e8ffc0baa725ead7ad28ee0958ff61319b66a778e0e5f8a4a63f7dea87ca572e64a34a7a7c41aa967a5ceacc534e90d505402f9938d56947a2d36fac47418cb3145bc8774edc4ebd5891985ca345353d56a9347c1f0352babe0d342f301f118c1d3b88703e3f42d39142fe95894545ea71c8982a9091"}, 0xc5) 21:00:50 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:50 executing program 4: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x2) 21:00:50 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x7) 21:00:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:51 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0xb) 21:00:51 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x50}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000140)={0x0, 0x8, 0x0, "d0950ae38f212995be8799e43932cd3307374a8256642aeb27915f5a6c17bb58"}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x50}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r8, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x5, 0x100, 0x5, 0x5}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x44000) openat$cgroup_freezer_state(r5, 0x0, 0x2, 0x0) r9 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x114) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000a4566d06ff54010000001c0012000c000100627269646725"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x84b2}]}, 0x2c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 253.164878][ T7451] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 21:00:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:51 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:51 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) mmap(&(0x7f00001bd000/0x3000)=nil, 0x3000, 0x3, 0x8010, r1, 0x960f8000) write$binfmt_misc(r1, &(0x7f0000000280)={'syz0', "520cfa27dab23de6cd81262b0fbba3b83dd7d1def8fffb05b98ebcc30cd0ab81a3ded8a04f8ef6ab7b6a6cedc34ff1ec3ef78227b2a11a1ec4203e81fd2a2cbef4beb32297deaa57902c13e8ffc0baa725ead7ad28ee0958ff61319b66a778e0e5f8a4a63f7dea87ca572e64a34a7a7c41aa967a5ceacc534e90d505402f9938d56947a2d36fac47418cb3145bc8774edc4ebd5891985ca345353d56a9347c1f0352babe0d342f301f118c1d3b88703e3f42d39142fe95894545ea71c8982a9091"}, 0xc5) unshare(0x40000000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r2) (async) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) (async) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) (async) mmap(&(0x7f00001bd000/0x3000)=nil, 0x3000, 0x3, 0x8010, r1, 0x960f8000) (async) write$binfmt_misc(r1, &(0x7f0000000280)={'syz0', "520cfa27dab23de6cd81262b0fbba3b83dd7d1def8fffb05b98ebcc30cd0ab81a3ded8a04f8ef6ab7b6a6cedc34ff1ec3ef78227b2a11a1ec4203e81fd2a2cbef4beb32297deaa57902c13e8ffc0baa725ead7ad28ee0958ff61319b66a778e0e5f8a4a63f7dea87ca572e64a34a7a7c41aa967a5ceacc534e90d505402f9938d56947a2d36fac47418cb3145bc8774edc4ebd5891985ca345353d56a9347c1f0352babe0d342f301f118c1d3b88703e3f42d39142fe95894545ea71c8982a9091"}, 0xc5) (async) 21:00:51 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0xc) 21:00:51 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x50}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000140)={0x0, 0x8, 0x0, "d0950ae38f212995be8799e43932cd3307374a8256642aeb27915f5a6c17bb58"}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x50}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r8, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x5, 0x100, 0x5, 0x5}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x44000) openat$cgroup_freezer_state(r5, 0x0, 0x2, 0x0) r9 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x114) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000a4566d06ff54010000001c0012000c000100627269646725"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x84b2}]}, 0x2c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x50}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r4) (async) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000140)={0x0, 0x8, 0x0, "d0950ae38f212995be8799e43932cd3307374a8256642aeb27915f5a6c17bb58"}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x50}}, './file0\x00'}) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r1) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r8, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x5, 0x100, 0x5, 0x5}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x44000) (async) openat$cgroup_freezer_state(r5, 0x0, 0x2, 0x0) (async) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) (async) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x114) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000a4566d06ff54010000001c0012000c000100627269646725"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x84b2}]}, 0x2c}}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 21:00:51 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 253.612254][ T7469] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 21:00:51 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x50}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000140)={0x0, 0x8, 0x0, "d0950ae38f212995be8799e43932cd3307374a8256642aeb27915f5a6c17bb58"}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x50}}, './file0\x00'}) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r8, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x5, 0x100, 0x5, 0x5}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x44000) (async) openat$cgroup_freezer_state(r5, 0x0, 0x2, 0x0) r9 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x114) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000a4566d06ff54010000001c0012000c000100627269646725"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x84b2}]}, 0x2c}}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:00:51 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0xd) 21:00:52 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) mmap(&(0x7f00001bd000/0x3000)=nil, 0x3000, 0x3, 0x8010, r1, 0x960f8000) write$binfmt_misc(r1, &(0x7f0000000280)={'syz0', "520cfa27dab23de6cd81262b0fbba3b83dd7d1def8fffb05b98ebcc30cd0ab81a3ded8a04f8ef6ab7b6a6cedc34ff1ec3ef78227b2a11a1ec4203e81fd2a2cbef4beb32297deaa57902c13e8ffc0baa725ead7ad28ee0958ff61319b66a778e0e5f8a4a63f7dea87ca572e64a34a7a7c41aa967a5ceacc534e90d505402f9938d56947a2d36fac47418cb3145bc8774edc4ebd5891985ca345353d56a9347c1f0352babe0d342f301f118c1d3b88703e3f42d39142fe95894545ea71c8982a9091"}, 0xc5) 21:00:52 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0xe) 21:00:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:52 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0xf) 21:00:52 executing program 3: unshare(0x40000000) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) (async, rerun: 32) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) (async) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) mmap(&(0x7f00001bd000/0x3000)=nil, 0x3000, 0x3, 0x8010, r1, 0x960f8000) write$binfmt_misc(r1, &(0x7f0000000280)={'syz0', "520cfa27dab23de6cd81262b0fbba3b83dd7d1def8fffb05b98ebcc30cd0ab81a3ded8a04f8ef6ab7b6a6cedc34ff1ec3ef78227b2a11a1ec4203e81fd2a2cbef4beb32297deaa57902c13e8ffc0baa725ead7ad28ee0958ff61319b66a778e0e5f8a4a63f7dea87ca572e64a34a7a7c41aa967a5ceacc534e90d505402f9938d56947a2d36fac47418cb3145bc8774edc4ebd5891985ca345353d56a9347c1f0352babe0d342f301f118c1d3b88703e3f42d39142fe95894545ea71c8982a9091"}, 0xc5) 21:00:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:52 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x300) 21:00:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:53 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x700) 21:00:53 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) mmap(&(0x7f00001bd000/0x3000)=nil, 0x3000, 0x3, 0x8010, r1, 0x960f8000) write$binfmt_misc(r1, &(0x7f0000000280)={'syz0', "520cfa27dab23de6cd81262b0fbba3b83dd7d1def8fffb05b98ebcc30cd0ab81a3ded8a04f8ef6ab7b6a6cedc34ff1ec3ef78227b2a11a1ec4203e81fd2a2cbef4beb32297deaa57902c13e8ffc0baa725ead7ad28ee0958ff61319b66a778e0e5f8a4a63f7dea87ca572e64a34a7a7c41aa967a5ceacc534e90d505402f9938d56947a2d36fac47418cb3145bc8774edc4ebd5891985ca345353d56a9347c1f0352babe0d342f301f118c1d3b88703e3f42d39142fe95894545ea71c8982a9091"}, 0xc5) 21:00:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:53 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0xb00) 21:00:53 executing program 3: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0xe) 21:00:53 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 255.424621][ T1222] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.434179][ T1222] ieee802154 phy1 wpan1: encryption failed: -22 21:00:53 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0xc00) 21:00:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:54 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0xd00) 21:00:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:54 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0xe00) 21:00:54 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) mmap(&(0x7f00001bd000/0x3000)=nil, 0x3000, 0x3, 0x8010, r1, 0x960f8000) write$binfmt_misc(r1, &(0x7f0000000280)={'syz0', "520cfa27dab23de6cd81262b0fbba3b83dd7d1def8fffb05b98ebcc30cd0ab81a3ded8a04f8ef6ab7b6a6cedc34ff1ec3ef78227b2a11a1ec4203e81fd2a2cbef4beb32297deaa57902c13e8ffc0baa725ead7ad28ee0958ff61319b66a778e0e5f8a4a63f7dea87ca572e64a34a7a7c41aa967a5ceacc534e90d505402f9938d56947a2d36fac47418cb3145bc8774edc4ebd5891985ca345353d56a9347c1f0352babe0d342f301f118c1d3b88703e3f42d39142fe95894545ea71c8982a9091"}, 0xc5) 21:00:54 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:54 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0xf00) 21:00:55 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x3f00) 21:00:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:55 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x4000) 21:00:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000043ca470e190f8fa8af5465dcd9c9b901ed206c716da91dae0f0c8d68c0c6e82cf1dfb94546ec0cea609cc791deb527a3cfc61acb265026d7b2ce6ad72d10acc88edd9446c0e35f9ef7ed8745e85b6c64b987e2555c5888c79f08d043c54c98", @ANYRES16=r2, @ANYBLOB="2fee28bd7000fddbdf250500000024000180060001000000000006000100000000000800060007000000050002001f0000000c0001800800030000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="3900000010001108680907070000000f0000ff3f13000000170a001700000000040037000a0003003a332564aa75b9a64411f6bbf44dc48f57", 0x39}], 0x1) 21:00:55 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 257.705354][ T7648] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. 21:00:56 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) mmap(&(0x7f00001bd000/0x3000)=nil, 0x3000, 0x3, 0x8010, r1, 0x960f8000) 21:00:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000043ca470e190f8fa8af5465dcd9c9b901ed206c716da91dae0f0c8d68c0c6e82cf1dfb94546ec0cea609cc791deb527a3cfc61acb265026d7b2ce6ad72d10acc88edd9446c0e35f9ef7ed8745e85b6c64b987e2555c5888c79f08d043c54c98", @ANYRES16=r2, @ANYBLOB="2fee28bd7000fddbdf250500000024000180060001000000000006000100000000000800060007000000050002001f0000000c0001800800030000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="3900000010001108680907070000000f0000ff3f13000000170a001700000000040037000a0003003a332564aa75b9a64411f6bbf44dc48f57", 0x39}], 0x1) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000043ca470e190f8fa8af5465dcd9c9b901ed206c716da91dae0f0c8d68c0c6e82cf1dfb94546ec0cea609cc791deb527a3cfc61acb265026d7b2ce6ad72d10acc88edd9446c0e35f9ef7ed8745e85b6c64b987e2555c5888c79f08d043c54c98", @ANYRES16=r2, @ANYBLOB="2fee28bd7000fddbdf250500000024000180060001000000000006000100000000000800060007000000050002001f0000000c0001800800030000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) (async) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="3900000010001108680907070000000f0000ff3f13000000170a001700000000040037000a0003003a332564aa75b9a64411f6bbf44dc48f57", 0x39}], 0x1) (async) 21:00:56 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x1000000) 21:00:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 258.063317][ T7665] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. 21:00:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000043ca470e190f8fa8af5465dcd9c9b901ed206c716da91dae0f0c8d68c0c6e82cf1dfb94546ec0cea609cc791deb527a3cfc61acb265026d7b2ce6ad72d10acc88edd9446c0e35f9ef7ed8745e85b6c64b987e2555c5888c79f08d043c54c98", @ANYRES16=r2, @ANYBLOB="2fee28bd7000fddbdf250500000024000180060001000000000006000100000000000800060007000000050002001f0000000c0001800800030000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="3900000010001108680907070000000f0000ff3f13000000170a001700000000040037000a0003003a332564aa75b9a64411f6bbf44dc48f57", 0x39}], 0x1) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000043ca470e190f8fa8af5465dcd9c9b901ed206c716da91dae0f0c8d68c0c6e82cf1dfb94546ec0cea609cc791deb527a3cfc61acb265026d7b2ce6ad72d10acc88edd9446c0e35f9ef7ed8745e85b6c64b987e2555c5888c79f08d043c54c98", @ANYRES16=r2, @ANYBLOB="2fee28bd7000fddbdf250500000024000180060001000000000006000100000000000800060007000000050002001f0000000c0001800800030000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) (async) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="3900000010001108680907070000000f0000ff3f13000000170a001700000000040037000a0003003a332564aa75b9a64411f6bbf44dc48f57", 0x39}], 0x1) (async) [ 258.174206][ T7680] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. 21:00:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:56 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x2000000) 21:00:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:56 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x3000000) 21:00:57 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) mmap(&(0x7f00001bd000/0x3000)=nil, 0x3000, 0x3, 0x8010, r1, 0x960f8000) 21:00:57 executing program 3: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x2000000) 21:00:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:57 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x7000000) 21:00:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:57 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0xb000000) 21:00:57 executing program 3: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x2000000) 21:00:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:57 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:57 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0xc000000) 21:00:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:58 executing program 3: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x2000000) 21:00:58 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) 21:00:58 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0xd000000) 21:00:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:58 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) mmap(&(0x7f00001bd000/0x3000)=nil, 0x3000, 0x3, 0x8010, r1, 0x960f8000) 21:00:58 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:58 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0xe000000) 21:00:59 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0xf000000) 21:00:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:59 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x3f000000) 21:00:59 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x40000000) 21:00:59 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 21:00:59 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x100000000000000) 21:00:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:59 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:00:59 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) mmap(&(0x7f00001bd000/0x3000)=nil, 0x3000, 0x3, 0x8010, r1, 0x960f8000) 21:00:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:00 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x200000000000000) 21:01:00 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:00 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x300000000000000) 21:01:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:00 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x700000000000000) 21:01:00 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:01 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0xb00000000000000) 21:01:01 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 21:01:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:01 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) mmap(&(0x7f00001bd000/0x3000)=nil, 0x3000, 0x3, 0x8010, r1, 0x960f8000) 21:01:01 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0xc00000000000000) 21:01:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:01 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0xd00000000000000) 21:01:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:01 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:01 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0xe00000000000000) 21:01:02 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0xf00000000000000) 21:01:02 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) 21:01:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:02 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) 21:01:02 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x3f00000000000000) 21:01:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:02 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x4000000000000000) 21:01:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 21:01:03 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) 21:01:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 21:01:03 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0xffffffff00000000) 21:01:03 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) 21:01:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 21:01:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x390, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:03 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) 21:01:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:03 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x21, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x1000, 0x2, &(0x7f000066a000/0x1000)=nil) shmat(r1, &(0x7f000052d000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:01:03 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x21, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x1000, 0x2, &(0x7f000066a000/0x1000)=nil) shmat(r1, &(0x7f000052d000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) mlockall(0x2) (async) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) (async) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async) shmget(0x0, 0x2000, 0x21, &(0x7f0000163000/0x2000)=nil) (async) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) (async) shmctl$SHM_UNLOCK(r0, 0xc) (async) shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) (async) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) (async) mlockall(0x7) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmget(0x2, 0x1000, 0x2, &(0x7f000066a000/0x1000)=nil) (async) shmat(r1, &(0x7f000052d000/0x2000)=nil, 0x3000) (async) shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) (async) shmctl$SHM_UNLOCK(0x0, 0xc) (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) (async) shmctl$SHM_UNLOCK(r2, 0xc) (async) shmctl$IPC_RMID(0x0, 0x0) (async) 21:01:04 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:04 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) 21:01:04 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) (async, rerun: 64) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) (async, rerun: 64) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async) r0 = shmget(0x0, 0x2000, 0x21, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) (async) shmctl$SHM_UNLOCK(r0, 0xc) (async) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) (async, rerun: 64) shmctl$SHM_LOCK(0x0, 0xb) (async, rerun: 64) shmget(0x2, 0x1000, 0x2, &(0x7f000066a000/0x1000)=nil) (async, rerun: 64) shmat(r1, &(0x7f000052d000/0x2000)=nil, 0x3000) (async, rerun: 64) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) (async, rerun: 64) shmctl$SHM_UNLOCK(r2, 0xc) (rerun: 64) shmctl$IPC_RMID(0x0, 0x0) 21:01:04 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 21:01:04 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) 21:01:04 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000b0a000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x3, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x2000, 0x8, &(0x7f0000134000/0x2000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:01:04 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:05 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) (async) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000b0a000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) (async) shmctl$SHM_UNLOCK(r0, 0xc) (async) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x3, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) (async) r2 = shmget(0x3, 0x2000, 0x8, &(0x7f0000134000/0x2000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) (async) shmctl$IPC_RMID(0x0, 0x0) 21:01:05 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) gettid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:05 executing program 2: mlockall(0x2) (async) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) (async) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000b0a000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) (async) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) (async) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) (async) shmget(0x3, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) (async) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x2000, 0x8, &(0x7f0000134000/0x2000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async, rerun: 32) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) (async, rerun: 32) shmctl$SHM_UNLOCK(r2, 0xc) (async, rerun: 64) shmctl$IPC_RMID(0x0, 0x0) (rerun: 64) 21:01:05 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 21:01:05 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) 21:01:05 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) 21:01:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) gettid() sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) gettid() sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) gettid() sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:06 executing program 2: mlockall(0x7) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) r0 = shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r1 = shmget(0x0, 0x1000, 0x6, &(0x7f0000a31000/0x1000)=nil) shmget(0x0, 0x4000, 0x78000000, &(0x7f00007e6000/0x4000)=nil) mlockall(0x0) shmctl$SHM_UNLOCK(r1, 0xc) r2 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x1, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) r3 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r3, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:01:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) gettid() sendmmsg(r0, 0x0, 0x0, 0x0) 21:01:06 executing program 2: mlockall(0x7) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) r0 = shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async, rerun: 64) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async, rerun: 64) r1 = shmget(0x0, 0x1000, 0x6, &(0x7f0000a31000/0x1000)=nil) shmget(0x0, 0x4000, 0x78000000, &(0x7f00007e6000/0x4000)=nil) mlockall(0x0) (async) shmctl$SHM_UNLOCK(r1, 0xc) (async) r2 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) (async, rerun: 32) shmctl$SHM_LOCK(0x0, 0xb) (rerun: 32) shmget(0x1, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) (async) r3 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) (async, rerun: 32) shmctl$SHM_UNLOCK(0x0, 0xc) (async, rerun: 32) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r3, 0xc) (async) shmctl$IPC_RMID(0x0, 0x0) 21:01:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) gettid() sendmmsg(r0, 0x0, 0x0, 0x0) 21:01:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) gettid() sendmmsg(r0, 0x0, 0x0, 0x0) 21:01:06 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) 21:01:06 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) 21:01:06 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 21:01:06 executing program 2: mlockall(0x7) (async) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) (async) r0 = shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async) r1 = shmget(0x0, 0x1000, 0x6, &(0x7f0000a31000/0x1000)=nil) shmget(0x0, 0x4000, 0x78000000, &(0x7f00007e6000/0x4000)=nil) (async) mlockall(0x0) (async) shmctl$SHM_UNLOCK(r1, 0xc) (async) r2 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000005000/0x1000)=nil, 0x4000) (async) mlockall(0x7) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmget(0x1, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) r3 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) (async) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) (async) shmctl$SHM_UNLOCK(r3, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:01:06 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) 21:01:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:06 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) r0 = shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r1 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) r2 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r2, &(0x7f00000e5000/0x2000)=nil, 0x3000) r3 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r3, 0xc) 21:01:07 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) r0 = shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) (async) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async) r1 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) (async) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) (async) r2 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000005000/0x1000)=nil, 0x4000) (async) mlockall(0x7) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r2, &(0x7f00000e5000/0x2000)=nil, 0x3000) (async) r3 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) (async) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r3, 0xc) 21:01:07 executing program 2: mlockall(0x2) (async) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) (async) r0 = shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async) r1 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) (async) shmctl$SHM_UNLOCK(r1, 0xc) (async, rerun: 32) r2 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) (rerun: 32) shmat(r2, &(0x7f0000005000/0x1000)=nil, 0x4000) (async, rerun: 64) mlockall(0x7) (async, rerun: 64) shmctl$SHM_LOCK(0x0, 0xb) (async) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) (async) shmat(r2, &(0x7f00000e5000/0x2000)=nil, 0x3000) (async) r3 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) (async) shmctl$SHM_UNLOCK(r3, 0xc) (async, rerun: 32) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async, rerun: 32) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) (async) shmctl$SHM_UNLOCK(r3, 0xc) 21:01:07 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00004e0000/0x2000)=nil, 0x2000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:01:07 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) 21:01:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:07 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 21:01:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:07 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 21:01:07 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) (async) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) (async) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) (async) mlockall(0x7) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00004e0000/0x2000)=nil, 0x2000) (async) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) (async) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) (async) shmctl$SHM_UNLOCK(r2, 0xc) (async) shmctl$IPC_RMID(0x0, 0x0) 21:01:08 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) 21:01:08 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:08 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00004e0000/0x2000)=nil, 0x2000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) mlockall(0x2) (async) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) (async) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async) shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) (async) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) (async) shmctl$SHM_UNLOCK(r0, 0xc) (async) shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) (async) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) (async) mlockall(0x7) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) (async) shmat(r1, &(0x7f00004e0000/0x2000)=nil, 0x2000) (async) shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) (async) shmctl$SHM_UNLOCK(0x0, 0xc) (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) (async) shmctl$SHM_UNLOCK(r2, 0xc) (async) shmctl$IPC_RMID(0x0, 0x0) (async) 21:01:08 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) 21:01:08 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 21:01:08 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 21:01:08 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 21:01:08 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 21:01:08 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) 21:01:08 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 21:01:08 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 21:01:08 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x200, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(r2, &(0x7f000014f000/0x2000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0xe000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:01:09 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) 21:01:09 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 21:01:09 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r2) 21:01:09 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x200, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(r2, &(0x7f000014f000/0x2000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0xe000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) mlockall(0x2) (async) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) (async) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async) shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) (async) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) (async) shmctl$SHM_UNLOCK(r0, 0xc) (async) shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) (async) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) (async) mlockall(0x7) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) (async) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) (async) shmget(0x3, 0x3000, 0x200, &(0x7f00003cc000/0x3000)=nil) (async) shmctl$SHM_UNLOCK(0x0, 0xc) (async) shmat(r2, &(0x7f000014f000/0x2000)=nil, 0xffffffffffff6fff) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0xe000) (async) shmctl$SHM_UNLOCK(r2, 0xc) (async) shmctl$IPC_RMID(0x0, 0x0) (async) 21:01:09 executing program 2: mlockall(0x2) (async) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) (async) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async, rerun: 64) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) (rerun: 64) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) (async) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) (async) r2 = shmget(0x3, 0x3000, 0x200, &(0x7f00003cc000/0x3000)=nil) (async) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(r2, &(0x7f000014f000/0x2000)=nil, 0xffffffffffff6fff) (async) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0xe000) (async) shmctl$SHM_UNLOCK(r2, 0xc) (async, rerun: 32) shmctl$IPC_RMID(0x0, 0x0) (rerun: 32) 21:01:09 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) 21:01:09 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x1, 0x2000, 0x100, &(0x7f0000b93000/0x2000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:01:09 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 21:01:09 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r2) 21:01:10 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) (async, rerun: 32) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) (rerun: 32) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) (async) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) (async) r2 = shmget(0x1, 0x2000, 0x100, &(0x7f0000b93000/0x2000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:01:10 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r2) 21:01:10 executing program 2: mlockall(0x2) (async) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) (async) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) (async) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) (async) shmctl$SHM_UNLOCK(r0, 0xc) (async) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) (async) mlockall(0x7) (async) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) (async) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) (async) r2 = shmget(0x1, 0x2000, 0x100, &(0x7f0000b93000/0x2000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) (async) shmctl$SHM_UNLOCK(r2, 0xc) (async) shmctl$IPC_RMID(0x0, 0x0) 21:01:10 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 21:01:10 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x2000, 0x78000000, &(0x7f00001c3000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(0x0, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:01:10 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) 21:01:10 executing program 2: mlockall(0x2) (async) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) (async) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x2000, 0x78000000, &(0x7f00001c3000/0x2000)=nil) (async) shmctl$SHM_UNLOCK(r0, 0xc) (async) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) (async) shmat(0x0, &(0x7f00000e5000/0x2000)=nil, 0x3000) (async) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) (async) shmctl$SHM_UNLOCK(r2, 0xc) (async) shmctl$IPC_RMID(0x0, 0x0) 21:01:10 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 21:01:10 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x2000, 0x78000000, &(0x7f00001c3000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(0x0, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) mlockall(0x2) (async) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) (async) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async) shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) (async) shmget(0x0, 0x2000, 0x78000000, &(0x7f00001c3000/0x2000)=nil) (async) shmctl$SHM_UNLOCK(r0, 0xc) (async) shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) (async) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) (async) mlockall(0x7) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) (async) shmat(0x0, &(0x7f00000e5000/0x2000)=nil, 0x3000) (async) shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) (async) shmctl$SHM_UNLOCK(0x0, 0xc) (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) (async) shmctl$SHM_UNLOCK(r2, 0xc) (async) shmctl$IPC_RMID(0x0, 0x0) (async) 21:01:10 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r2) 21:01:11 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r2) 21:01:11 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x4, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:01:11 executing program 2: mlockall(0x2) (async) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) (async) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) (async) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) (async) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x4, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) (async) shmctl$SHM_UNLOCK(r2, 0xc) (async) shmctl$IPC_RMID(0x0, 0x0) 21:01:11 executing program 2: mlockall(0x2) (async) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) (async) shmctl$SHM_UNLOCK(r0, 0xc) (async) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) (async) mlockall(0x7) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmget(0x2, 0x4000, 0x4, &(0x7f00002d8000/0x4000)=nil) (async) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) (async) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) (async) shmctl$SHM_UNLOCK(r2, 0xc) (async) shmctl$IPC_RMID(0x0, 0x0) 21:01:11 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) 21:01:11 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r2) 21:01:11 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/85) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) r0 = shmget(0x3, 0x2000, 0x400, &(0x7f000086a000/0x2000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x1000) shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$IPC_RMID(r0, 0x0) 21:01:11 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) 21:01:11 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 21:01:11 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) 21:01:12 executing program 2: mlockall(0x2) (async) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) (async, rerun: 32) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/85) (rerun: 32) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) (async) r0 = shmget(0x3, 0x2000, 0x400, &(0x7f000086a000/0x2000)=nil) (async, rerun: 64) shmctl$SHM_UNLOCK(0x0, 0xc) (async, rerun: 64) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) (async) mlockall(0x7) (async) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x1000) shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async, rerun: 32) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) (async, rerun: 32) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$IPC_RMID(r0, 0x0) 21:01:12 executing program 2: mlockall(0x2) (async) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) (async, rerun: 32) shmctl$SHM_LOCK(0x0, 0xb) (rerun: 32) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/85) (async) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) (async, rerun: 32) r0 = shmget(0x3, 0x2000, 0x400, &(0x7f000086a000/0x2000)=nil) (async, rerun: 32) shmctl$SHM_UNLOCK(0x0, 0xc) (async) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) (async) mlockall(0x7) (async) shmctl$SHM_LOCK(0x0, 0xb) (async, rerun: 64) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) (rerun: 64) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x1000) (async) shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) (async, rerun: 64) shmctl$SHM_UNLOCK(0x0, 0xc) (async, rerun: 64) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) (async) shmctl$SHM_UNLOCK(r1, 0xc) (async) shmctl$IPC_RMID(r0, 0x0) 21:01:12 executing program 2: mlockall(0x2) mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x3, 0x4000, 0x2, &(0x7f0000712000/0x4000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x100, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f00000a2000/0x1000)=nil, 0x0) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r0, &(0x7f00000e5000/0x2000)=nil, 0x8647a4fc48654174) shmget(0x2, 0x3000, 0x100, &(0x7f00002bc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000132000/0x3000)=nil, 0x1977023cf9ce2ab4) shmctl$IPC_RMID(0x0, 0x0) 21:01:12 executing program 2: mlockall(0x2) mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x3, 0x4000, 0x2, &(0x7f0000712000/0x4000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x100, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f00000a2000/0x1000)=nil, 0x0) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r0, &(0x7f00000e5000/0x2000)=nil, 0x8647a4fc48654174) shmget(0x2, 0x3000, 0x100, &(0x7f00002bc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000132000/0x3000)=nil, 0x1977023cf9ce2ab4) shmctl$IPC_RMID(0x0, 0x0) mlockall(0x2) (async) mlockall(0x2) (async) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) (async) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async) shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) (async) shmget(0x3, 0x4000, 0x2, &(0x7f0000712000/0x4000)=nil) (async) shmctl$SHM_UNLOCK(r0, 0xc) (async) shmget$private(0x0, 0x400000, 0x100, &(0x7f000000e000/0x400000)=nil) (async) shmat(r1, &(0x7f00000a2000/0x1000)=nil, 0x0) (async) mlockall(0x7) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) (async) shmat(r0, &(0x7f00000e5000/0x2000)=nil, 0x8647a4fc48654174) (async) shmget(0x2, 0x3000, 0x100, &(0x7f00002bc000/0x3000)=nil) (async) shmctl$SHM_UNLOCK(0x0, 0xc) (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async) shmat(0x0, &(0x7f0000132000/0x3000)=nil, 0x1977023cf9ce2ab4) (async) shmctl$IPC_RMID(0x0, 0x0) (async) 21:01:12 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) 21:01:12 executing program 2: mlockall(0x2) mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x3, 0x4000, 0x2, &(0x7f0000712000/0x4000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x100, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f00000a2000/0x1000)=nil, 0x0) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r0, &(0x7f00000e5000/0x2000)=nil, 0x8647a4fc48654174) shmget(0x2, 0x3000, 0x100, &(0x7f00002bc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000132000/0x3000)=nil, 0x1977023cf9ce2ab4) shmctl$IPC_RMID(0x0, 0x0) mlockall(0x2) (async) mlockall(0x2) (async) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) (async) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async) shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) (async) shmget(0x3, 0x4000, 0x2, &(0x7f0000712000/0x4000)=nil) (async) shmctl$SHM_UNLOCK(r0, 0xc) (async) shmget$private(0x0, 0x400000, 0x100, &(0x7f000000e000/0x400000)=nil) (async) shmat(r1, &(0x7f00000a2000/0x1000)=nil, 0x0) (async) mlockall(0x7) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) (async) shmat(r0, &(0x7f00000e5000/0x2000)=nil, 0x8647a4fc48654174) (async) shmget(0x2, 0x3000, 0x100, &(0x7f00002bc000/0x3000)=nil) (async) shmctl$SHM_UNLOCK(0x0, 0xc) (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async) shmat(0x0, &(0x7f0000132000/0x3000)=nil, 0x1977023cf9ce2ab4) (async) shmctl$IPC_RMID(0x0, 0x0) (async) 21:01:12 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) 21:01:12 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/96, 0x60, 0x40000143, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @private0, 0x400}, 0x80) mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x3, 0x2000, 0x400, &(0x7f00007be000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x3, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) 21:01:12 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 21:01:12 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) 21:01:12 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/96, 0x60, 0x40000143, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @private0, 0x400}, 0x80) mlockall(0x2) (async) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) (async) shmget(0x3, 0x2000, 0x400, &(0x7f00007be000/0x2000)=nil) (async) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x3, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) (async) shmctl$SHM_UNLOCK(r0, 0xc) (async) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) (async) mlockall(0x7) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) (async) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) (async) shmctl$SHM_UNLOCK(0x0, 0xc) (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) 21:01:12 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) 21:01:13 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/96, 0x60, 0x40000143, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @private0, 0x400}, 0x80) mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) (async) shmget(0x3, 0x2000, 0x400, &(0x7f00007be000/0x2000)=nil) (async) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async) r0 = shmget(0x3, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) (async, rerun: 64) shmctl$SHM_UNLOCK(r0, 0xc) (async, rerun: 64) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) (async) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) 21:01:13 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) 21:01:13 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(0xffffffffffffffff, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x2, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:01:13 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 21:01:13 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(0xffffffffffffffff, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x2, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) mlockall(0x2) (async) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) (async) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async) shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) (async) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) (async) shmctl$SHM_UNLOCK(r0, 0xc) (async) shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) (async) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) (async) mlockall(0x7) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) (async) shmat(0xffffffffffffffff, &(0x7f00000e5000/0x2000)=nil, 0x3000) (async) shmget(0x2, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) (async) shmctl$SHM_UNLOCK(0x0, 0xc) (async) shmctl$SHM_UNLOCK(r2, 0xc) (async) shmctl$IPC_RMID(0x0, 0x0) (async) 21:01:13 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) 21:01:13 executing program 2: mlockall(0x2) (async) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) (async) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) (async) mlockall(0x7) (async) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) (async) shmat(0xffffffffffffffff, &(0x7f00000e5000/0x2000)=nil, 0x3000) (async) r2 = shmget(0x2, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) (async) shmctl$SHM_UNLOCK(0x0, 0xc) (async) shmctl$SHM_UNLOCK(r2, 0xc) (async) shmctl$IPC_RMID(0x0, 0x0) 21:01:13 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) 21:01:13 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) 21:01:14 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x3000) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:01:14 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) 21:01:14 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 21:01:14 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 21:01:14 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) (async) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) (async) shmctl$SHM_UNLOCK(r0, 0xc) (async) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) (async, rerun: 64) shmctl$SHM_LOCK(0x0, 0xb) (async, rerun: 64) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) (async, rerun: 64) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) (rerun: 64) shmctl$SHM_UNLOCK(0x0, 0xc) (async, rerun: 64) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (rerun: 64) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x3000) (async) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:01:14 executing program 2: mlockall(0x2) (async, rerun: 64) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) (async, rerun: 64) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) (async) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) (async) shmctl$SHM_UNLOCK(r0, 0xc) (async) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) (async, rerun: 32) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) (rerun: 32) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) (async) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x3000) (async, rerun: 64) shmctl$SHM_UNLOCK(r2, 0xc) (async, rerun: 64) shmctl$IPC_RMID(0x0, 0x0) 21:01:14 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) 21:01:14 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x1, 0x4000, 0x200, &(0x7f0000551000/0x4000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x5000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:01:14 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 21:01:14 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 21:01:14 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x1, 0x4000, 0x200, &(0x7f0000551000/0x4000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x5000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) mlockall(0x2) (async) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) (async) shmget(0x1, 0x4000, 0x200, &(0x7f0000551000/0x4000)=nil) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async) shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) (async) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) (async) shmctl$SHM_UNLOCK(r0, 0xc) (async) shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) (async) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x5000) (async) mlockall(0x7) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) (async) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) (async) shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) (async) shmctl$SHM_UNLOCK(0x0, 0xc) (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) (async) shmctl$SHM_UNLOCK(r2, 0xc) (async) shmctl$IPC_RMID(0x0, 0x0) (async) 21:01:15 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) [ 276.944876][ T8655] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 276.985505][ T8655] CPU: 0 PID: 8655 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 276.996989][ T8655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.007048][ T8655] Call Trace: [ 277.010327][ T8655] [ 277.013256][ T8655] dump_stack_lvl+0x201/0x2d8 [ 277.017936][ T8655] ? show_regs_print_info+0x12/0x12 [ 277.023133][ T8655] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 277.028850][ T8655] ? do_raw_spin_lock+0x151/0x8e0 [ 277.033878][ T8655] ? asan.module_dtor+0x20/0x20 [ 277.039165][ T8655] dump_header+0xdb/0x970 [ 277.043591][ T8655] oom_kill_process+0xf5/0x4d0 [ 277.048359][ T8655] out_of_memory+0x711/0xa70 [ 277.052957][ T8655] ? unregister_oom_notifier+0x20/0x20 [ 277.058419][ T8655] ? trace_lock_release+0x4f/0x150 [ 277.063550][ T8655] ? mem_cgroup_oom+0x47d/0x5f0 [ 277.068458][ T8655] ? lock_release+0x82/0x810 [ 277.073050][ T8655] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 277.078600][ T8655] ? __lock_acquire+0x2b00/0x2b00 [ 277.083624][ T8655] ? mem_cgroup_oom_trylock+0x220/0x220 [ 277.089172][ T8655] ? do_raw_spin_unlock+0x134/0x8a0 [ 277.094374][ T8655] ? mem_cgroup_iter+0x3c9/0x530 [ 277.099314][ T8655] mem_cgroup_oom+0x48d/0x5f0 [ 277.103991][ T8655] try_charge_memcg+0xdab/0x1110 [ 277.108929][ T8655] ? finish_lock_switch+0x1c0/0x350 [ 277.114183][ T8655] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 277.120164][ T8655] ? rcu_read_lock_sched_held+0x5f/0x130 [ 277.125800][ T8655] ? alloc_pages_vma+0x9aa/0x1150 [ 277.130868][ T8655] ? __folio_memcg+0x170/0x170 [ 277.135656][ T8655] ? rcu_lock_acquire+0x30/0x30 [ 277.140505][ T8655] ? trace_lock_release+0x4f/0x150 [ 277.145616][ T8655] ? rcu_lock_acquire+0x30/0x30 [ 277.150466][ T8655] ? lock_release+0x82/0x810 [ 277.155063][ T8655] ? shmem_alloc_and_acct_page+0x971/0x1230 [ 277.161001][ T8655] ? __lock_acquire+0x2b00/0x2b00 [ 277.166023][ T8655] ? lock_release+0x82/0x810 [ 277.170619][ T8655] charge_memcg+0x119/0x5d0 [ 277.175122][ T8655] ? __mem_cgroup_charge+0x80/0x80 [ 277.180235][ T8655] __mem_cgroup_charge+0x23/0x80 [ 277.185177][ T8655] shmem_add_to_page_cache+0x124a/0x1f30 [ 277.190820][ T8655] ? put_page+0x230/0x230 [ 277.195152][ T8655] ? mem_cgroup_swap_full+0x300/0x300 [ 277.200526][ T8655] ? do_raw_spin_unlock+0x134/0x8a0 [ 277.205724][ T8655] ? PageTransHuge+0xd9/0x2b0 [ 277.210409][ T8655] shmem_getpage_gfp+0x1884/0x30e0 [ 277.215535][ T8655] ? shmem_getpage+0xa0/0xa0 [ 277.220129][ T8655] ? __lock_acquire+0x2b00/0x2b00 [ 277.225155][ T8655] shmem_fault+0x1df/0x810 [ 277.229576][ T8655] ? shmem_fallocate+0xea0/0xea0 [ 277.234514][ T8655] ? count_memcg_event_mm+0x342/0x390 [ 277.239938][ T8655] ? follow_page_pte+0x343/0xc50 [ 277.244879][ T8655] ? pfn_swap_entry_to_page+0x310/0x310 [ 277.250425][ T8655] ? read_lock_is_recursive+0x10/0x10 [ 277.255800][ T8655] __do_fault+0x137/0x4e0 [ 277.260135][ T8655] handle_mm_fault+0x2c53/0x39e0 [ 277.265083][ T8655] ? numa_migrate_prep+0x250/0x250 [ 277.270200][ T8655] ? follow_page_mask+0xbac/0x1580 [ 277.275317][ T8655] ? find_vma+0xd2/0x230 [ 277.279559][ T8655] ? check_vma_flags+0x401/0x480 [ 277.284497][ T8655] __get_user_pages+0x4ed/0x1190 [ 277.289443][ T8655] ? populate_vma_page_range+0x2b0/0x2b0 [ 277.295076][ T8655] ? __down_read_common+0x1b0/0x450 [ 277.300313][ T8655] ? memset+0x1f/0x40 [ 277.304352][ T8655] populate_vma_page_range+0x217/0x2b0 [ 277.310425][ T8655] __mm_populate+0x2ea/0x4d0 [ 277.315015][ T8655] ? check_vma_flags+0x480/0x480 [ 277.319954][ T8655] do_shmat+0xab3/0xda0 [ 277.324175][ T8655] ? __ia32_compat_sys_old_shmctl+0x90/0x90 [ 277.330109][ T8655] ? rcu_read_lock_sched_held+0x5f/0x130 [ 277.335742][ T8655] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 277.341728][ T8655] ? rcu_read_lock_sched_held+0x5f/0x130 [ 277.347359][ T8655] __x64_sys_shmat+0x102/0x190 [ 277.352132][ T8655] ? shm_lock+0x190/0x190 [ 277.356464][ T8655] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 277.362446][ T8655] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 277.368426][ T8655] do_syscall_64+0x2b/0x50 [ 277.372845][ T8655] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 277.378737][ T8655] RIP: 0033:0x7efc03e89049 21:01:15 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) [ 277.383149][ T8655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 277.402750][ T8655] RSP: 002b:00007efc04f78168 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 277.411162][ T8655] RAX: ffffffffffffffda RBX: 00007efc03f9bf60 RCX: 00007efc03e89049 [ 277.419134][ T8655] RDX: 0000000000005000 RSI: 0000000020005000 RDI: 0000000000000094 [ 277.427105][ T8655] RBP: 00007efc03ee308d R08: 0000000000000000 R09: 0000000000000000 [ 277.435075][ T8655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.443056][ T8655] R13: 00007ffe96d26d2f R14: 00007efc04f78300 R15: 0000000000022000 [ 277.451038][ T8655] [ 277.468811][ T8655] memory: usage 307080kB, limit 307200kB, failcnt 838 [ 277.484001][ T8655] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 277.495858][ T8655] Memory cgroup stats for /syz2: [ 277.496024][ T8655] anon 106496 [ 277.496024][ T8655] file 309358592 [ 277.496024][ T8655] kernel 4894720 [ 277.496024][ T8655] kernel_stack 65536 [ 277.496024][ T8655] pagetables 81920 [ 277.496024][ T8655] percpu 0 [ 277.496024][ T8655] sock 0 [ 277.496024][ T8655] vmalloc 0 [ 277.496024][ T8655] shmem 309354496 [ 277.496024][ T8655] file_mapped 3170304 [ 277.496024][ T8655] file_dirty 4096 [ 277.496024][ T8655] file_writeback 0 [ 277.496024][ T8655] swapcached 0 [ 277.496024][ T8655] anon_thp 0 [ 277.496024][ T8655] file_thp 0 [ 277.496024][ T8655] shmem_thp 0 [ 277.496024][ T8655] inactive_anon 306376704 [ 277.496024][ T8655] active_anon 8192 [ 277.496024][ T8655] inactive_file 0 [ 277.496024][ T8655] active_file 4096 [ 277.496024][ T8655] unevictable 3076096 [ 277.496024][ T8655] slab_reclaimable 1731096 [ 277.496024][ T8655] slab_unreclaimable 2982920 [ 277.496024][ T8655] slab 4714016 [ 277.496024][ T8655] workingset_refault_anon 0 21:01:15 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 277.661162][ T8655] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=8651,uid=0 21:01:15 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 21:01:15 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 21:01:15 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) [ 277.774797][ T8655] Memory cgroup out of memory: Killed process 8651 (syz-executor.2) total-vm:50664kB, anon-rss:380kB, file-rss:8192kB, shmem-rss:2896kB, UID:0 pgtables:88kB oom_score_adj:1000 21:01:16 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) (async) shmget(0x1, 0x4000, 0x200, &(0x7f0000551000/0x4000)=nil) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async, rerun: 32) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) (rerun: 32) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) (async) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x5000) mlockall(0x7) (async, rerun: 32) shmctl$SHM_LOCK(0x0, 0xb) (rerun: 32) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) (async, rerun: 64) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) (rerun: 64) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) (async) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) (async) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) [ 277.879407][ T29] oom_reaper: reaped process 8651 (syz-executor.2), now anon-rss:0kB, file-rss:8192kB, shmem-rss:0kB [ 278.026149][ T8700] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 278.058412][ T8700] CPU: 0 PID: 8700 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 278.069897][ T8700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.079940][ T8700] Call Trace: [ 278.083201][ T8700] [ 278.086119][ T8700] dump_stack_lvl+0x201/0x2d8 [ 278.090786][ T8700] ? show_regs_print_info+0x12/0x12 [ 278.095967][ T8700] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 278.101676][ T8700] ? do_raw_spin_lock+0x151/0x8e0 [ 278.106698][ T8700] ? asan.module_dtor+0x20/0x20 [ 278.111546][ T8700] dump_header+0xdb/0x970 [ 278.115886][ T8700] oom_kill_process+0xf5/0x4d0 [ 278.120643][ T8700] out_of_memory+0x711/0xa70 [ 278.125228][ T8700] ? unregister_oom_notifier+0x20/0x20 [ 278.130677][ T8700] ? trace_lock_release+0x4f/0x150 [ 278.135782][ T8700] ? mem_cgroup_oom+0x47d/0x5f0 [ 278.140622][ T8700] ? lock_release+0x82/0x810 [ 278.145223][ T8700] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 278.150754][ T8700] ? __lock_acquire+0x2b00/0x2b00 [ 278.155761][ T8700] ? mem_cgroup_oom_trylock+0x220/0x220 [ 278.161290][ T8700] ? do_raw_spin_unlock+0x134/0x8a0 [ 278.166479][ T8700] ? mem_cgroup_iter+0x3c9/0x530 [ 278.171401][ T8700] mem_cgroup_oom+0x48d/0x5f0 [ 278.176062][ T8700] try_charge_memcg+0xdab/0x1110 [ 278.180983][ T8700] ? __set_page_owner+0x3b4/0x3d0 [ 278.186001][ T8700] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 278.191964][ T8700] ? rcu_read_lock_sched_held+0x5f/0x130 [ 278.197585][ T8700] ? __folio_memcg+0x170/0x170 [ 278.202343][ T8700] ? rcu_lock_acquire+0x30/0x30 [ 278.207176][ T8700] ? trace_lock_release+0x4f/0x150 [ 278.212269][ T8700] ? rcu_lock_acquire+0x30/0x30 [ 278.217116][ T8700] ? lock_release+0x82/0x810 [ 278.221688][ T8700] ? trace_lock_release+0x4f/0x150 [ 278.226778][ T8700] ? __lock_acquire+0x2b00/0x2b00 [ 278.231798][ T8700] charge_memcg+0x119/0x5d0 [ 278.236284][ T8700] ? __mem_cgroup_charge+0x80/0x80 [ 278.241395][ T8700] __mem_cgroup_charge+0x23/0x80 [ 278.246313][ T8700] do_anonymous_page+0x393/0x10c0 [ 278.251338][ T8700] ? pfn_swap_entry_to_page+0x310/0x310 [ 278.256865][ T8700] ? fault_around_bytes_set+0xb0/0xb0 [ 278.262228][ T8700] handle_mm_fault+0x1dc9/0x39e0 [ 278.267158][ T8700] ? numa_migrate_prep+0x250/0x250 [ 278.272258][ T8700] ? follow_page_mask+0xbac/0x1580 [ 278.277353][ T8700] ? find_vma+0xd2/0x230 [ 278.281575][ T8700] ? check_vma_flags+0x433/0x480 [ 278.286495][ T8700] __get_user_pages+0x4ed/0x1190 [ 278.291417][ T8700] ? populate_vma_page_range+0x2b0/0x2b0 [ 278.297045][ T8700] ? asan.module_dtor+0x20/0x20 [ 278.301888][ T8700] ? vm_get_page_prot+0xb0/0xb0 [ 278.306723][ T8700] populate_vma_page_range+0x217/0x2b0 [ 278.312168][ T8700] mprotect_fixup+0x637/0x880 [ 278.316830][ T8700] ? change_protection+0xdd0/0xdd0 [ 278.321935][ T8700] ? vmacache_find+0x228/0x5d0 [ 278.326754][ T8700] ? bpf_lsm_file_mprotect+0x5/0x10 [ 278.331967][ T8700] ? security_file_mprotect+0xae/0xd0 [ 278.337324][ T8700] do_mprotect_pkey+0x79e/0xa20 [ 278.342164][ T8700] ? prot_none_test+0x10/0x10 [ 278.346824][ T8700] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 278.352789][ T8700] __x64_sys_mprotect+0x7c/0x90 [ 278.357621][ T8700] do_syscall_64+0x2b/0x50 [ 278.362020][ T8700] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 278.367895][ T8700] RIP: 0033:0x7efc03e89157 [ 278.372292][ T8700] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 278.391877][ T8700] RSP: 002b:00007ffe96d26cc8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 278.400270][ T8700] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007efc03e89157 [ 278.408223][ T8700] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007efc04f38000 [ 278.416177][ T8700] RBP: 00007ffe96d26da0 R08: 00000000ffffffff R09: 00007efc04f57700 [ 278.424128][ T8700] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffe96d26ec0 [ 278.432079][ T8700] R13: 00007efc04f57700 R14: 0000000000000000 R15: 0000000000022000 [ 278.440037][ T8700] [ 278.568398][ T8700] memory: usage 307108kB, limit 307200kB, failcnt 877 [ 278.603818][ T8700] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 278.614114][ T8700] Memory cgroup stats for /syz2: [ 278.614280][ T8700] anon 225280 [ 278.614280][ T8700] file 309362688 [ 278.614280][ T8700] kernel 4890624 [ 278.614280][ T8700] kernel_stack 65536 [ 278.614280][ T8700] pagetables 69632 [ 278.614280][ T8700] percpu 0 [ 278.614280][ T8700] sock 0 [ 278.614280][ T8700] vmalloc 0 [ 278.614280][ T8700] shmem 309358592 [ 278.614280][ T8700] file_mapped 94208 [ 278.614280][ T8700] file_dirty 0 [ 278.614280][ T8700] file_writeback 0 [ 278.614280][ T8700] swapcached 0 [ 278.614280][ T8700] anon_thp 0 [ 278.614280][ T8700] file_thp 0 [ 278.614280][ T8700] shmem_thp 0 [ 278.614280][ T8700] inactive_anon 309456896 [ 278.614280][ T8700] active_anon 8192 [ 278.614280][ T8700] inactive_file 0 [ 278.614280][ T8700] active_file 4096 [ 278.614280][ T8700] unevictable 118784 [ 278.614280][ T8700] slab_reclaimable 1746664 [ 278.614280][ T8700] slab_unreclaimable 2972960 [ 278.614280][ T8700] slab 4719624 [ 278.614280][ T8700] workingset_refault_anon 0 [ 278.614280][ T8700] workingset_refault_file 1 [ 278.728334][ T8700] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=8700,uid=0 21:01:16 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 278.777480][ T8700] Memory cgroup out of memory: Killed process 8700 (syz-executor.2) total-vm:50796kB, anon-rss:380kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 21:01:17 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(0x0, &(0x7f00000e5000/0x2000)=nil, 0x2000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:01:17 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) [ 278.952920][ T8722] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 278.985482][ T8722] CPU: 0 PID: 8722 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 21:01:17 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 278.996972][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.007033][ T8722] Call Trace: [ 279.010312][ T8722] [ 279.013243][ T8722] dump_stack_lvl+0x201/0x2d8 [ 279.017933][ T8722] ? show_regs_print_info+0x12/0x12 [ 279.023138][ T8722] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 279.028867][ T8722] ? do_raw_spin_lock+0x151/0x8e0 [ 279.033904][ T8722] ? asan.module_dtor+0x20/0x20 [ 279.038762][ T8722] dump_header+0xdb/0x970 [ 279.043095][ T8722] oom_kill_process+0xf5/0x4d0 [ 279.047861][ T8722] out_of_memory+0x711/0xa70 [ 279.052448][ T8722] ? unregister_oom_notifier+0x20/0x20 [ 279.057905][ T8722] ? trace_lock_release+0x4f/0x150 [ 279.063016][ T8722] ? mem_cgroup_oom+0x47d/0x5f0 [ 279.067864][ T8722] ? lock_release+0x82/0x810 [ 279.072458][ T8722] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 279.078003][ T8722] ? __lock_acquire+0x2b00/0x2b00 [ 279.083021][ T8722] ? mem_cgroup_oom_trylock+0x220/0x220 [ 279.088681][ T8722] ? do_raw_spin_unlock+0x134/0x8a0 [ 279.093883][ T8722] ? mem_cgroup_iter+0x3c9/0x530 [ 279.098816][ T8722] mem_cgroup_oom+0x48d/0x5f0 [ 279.103491][ T8722] try_charge_memcg+0xdab/0x1110 [ 279.108414][ T8722] ? read_lock_is_recursive+0x10/0x10 [ 279.113769][ T8722] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 279.119733][ T8722] ? rcu_read_lock_sched_held+0x5f/0x130 [ 279.125366][ T8722] ? alloc_pages_vma+0x9aa/0x1150 [ 279.130423][ T8722] ? __folio_memcg+0x170/0x170 [ 279.135178][ T8722] ? rcu_lock_acquire+0x30/0x30 [ 279.140011][ T8722] ? trace_lock_release+0x4f/0x150 [ 279.145104][ T8722] ? rcu_lock_acquire+0x30/0x30 [ 279.149936][ T8722] ? lock_release+0x82/0x810 [ 279.154508][ T8722] ? shmem_alloc_and_acct_page+0x971/0x1230 [ 279.160386][ T8722] ? __lock_acquire+0x2b00/0x2b00 [ 279.165392][ T8722] ? lock_release+0x82/0x810 [ 279.169964][ T8722] charge_memcg+0x119/0x5d0 [ 279.174451][ T8722] ? __mem_cgroup_charge+0x80/0x80 [ 279.179547][ T8722] __mem_cgroup_charge+0x23/0x80 [ 279.184469][ T8722] shmem_add_to_page_cache+0x124a/0x1f30 [ 279.190088][ T8722] ? put_page+0x230/0x230 [ 279.194402][ T8722] ? mem_cgroup_swap_full+0x300/0x300 [ 279.199754][ T8722] ? do_raw_spin_unlock+0x134/0x8a0 [ 279.204935][ T8722] ? PageTransHuge+0xd9/0x2b0 [ 279.209597][ T8722] shmem_getpage_gfp+0x1884/0x30e0 [ 279.214704][ T8722] ? shmem_getpage+0xa0/0xa0 [ 279.219289][ T8722] ? __lock_acquire+0x2b00/0x2b00 [ 279.224297][ T8722] shmem_fault+0x1df/0x810 [ 279.228702][ T8722] ? shmem_fallocate+0xea0/0xea0 [ 279.233638][ T8722] ? count_memcg_event_mm+0x342/0x390 [ 279.238997][ T8722] ? follow_page_pte+0x343/0xc50 [ 279.243917][ T8722] ? pfn_swap_entry_to_page+0x310/0x310 [ 279.249443][ T8722] ? read_lock_is_recursive+0x10/0x10 [ 279.254798][ T8722] __do_fault+0x137/0x4e0 [ 279.259115][ T8722] handle_mm_fault+0x2c53/0x39e0 [ 279.264043][ T8722] ? numa_migrate_prep+0x250/0x250 [ 279.269154][ T8722] ? follow_page_mask+0xbac/0x1580 [ 279.274256][ T8722] ? find_vma+0xd2/0x230 [ 279.278482][ T8722] ? check_vma_flags+0x401/0x480 [ 279.283426][ T8722] __get_user_pages+0x4ed/0x1190 [ 279.288348][ T8722] ? populate_vma_page_range+0x2b0/0x2b0 [ 279.293963][ T8722] ? __down_read_common+0x1b0/0x450 [ 279.299147][ T8722] ? memset+0x1f/0x40 [ 279.303117][ T8722] populate_vma_page_range+0x217/0x2b0 [ 279.308560][ T8722] __mm_populate+0x2ea/0x4d0 [ 279.313135][ T8722] ? check_vma_flags+0x480/0x480 [ 279.318055][ T8722] do_shmat+0xab3/0xda0 [ 279.322200][ T8722] ? __ia32_compat_sys_old_shmctl+0x90/0x90 [ 279.328076][ T8722] ? rcu_read_lock_sched_held+0x5f/0x130 [ 279.333691][ T8722] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 279.339657][ T8722] ? rcu_read_lock_sched_held+0x5f/0x130 [ 279.345288][ T8722] __x64_sys_shmat+0x102/0x190 [ 279.350039][ T8722] ? shm_lock+0x190/0x190 [ 279.354373][ T8722] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 279.360338][ T8722] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 279.366297][ T8722] do_syscall_64+0x2b/0x50 [ 279.370696][ T8722] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 279.376571][ T8722] RIP: 0033:0x7efc03e89049 [ 279.380967][ T8722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 21:01:17 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) [ 279.400551][ T8722] RSP: 002b:00007efc04f78168 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 279.408945][ T8722] RAX: ffffffffffffffda RBX: 00007efc03f9bf60 RCX: 00007efc03e89049 [ 279.416896][ T8722] RDX: 0000000000004000 RSI: 0000000020005000 RDI: 0000000000000095 [ 279.424856][ T8722] RBP: 00007efc03ee308d R08: 0000000000000000 R09: 0000000000000000 [ 279.432825][ T8722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.440783][ T8722] R13: 00007ffe96d26d2f R14: 00007efc04f78300 R15: 0000000000022000 [ 279.448778][ T8722] 21:01:17 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) dup(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 279.525930][ T8722] memory: usage 307084kB, limit 307200kB, failcnt 907 [ 279.542678][ T8722] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 279.564421][ T8722] Memory cgroup stats for /syz2: [ 279.564591][ T8722] anon 139264 [ 279.564591][ T8722] file 309653504 [ 279.564591][ T8722] kernel 4661248 [ 279.564591][ T8722] kernel_stack 65536 [ 279.564591][ T8722] pagetables 77824 [ 279.564591][ T8722] percpu 0 [ 279.564591][ T8722] sock 0 [ 279.564591][ T8722] vmalloc 0 [ 279.564591][ T8722] shmem 309649408 [ 279.564591][ T8722] file_mapped 385024 [ 279.564591][ T8722] file_dirty 0 [ 279.564591][ T8722] file_writeback 0 [ 279.564591][ T8722] swapcached 0 [ 279.564591][ T8722] anon_thp 0 [ 279.564591][ T8722] file_thp 0 [ 279.564591][ T8722] shmem_thp 0 [ 279.564591][ T8722] inactive_anon 309489664 [ 279.564591][ T8722] active_anon 8192 [ 279.564591][ T8722] inactive_file 0 [ 279.564591][ T8722] active_file 4096 [ 279.564591][ T8722] unevictable 290816 [ 279.564591][ T8722] slab_reclaimable 1739104 [ 279.564591][ T8722] slab_unreclaimable 2743608 [ 279.564591][ T8722] slab 4482712 [ 279.564591][ T8722] workingset_refault_anon 0 [ 279.680463][ T8722] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=8721,uid=0 [ 279.696246][ T8722] Memory cgroup out of memory: Killed process 8721 (syz-executor.2) total-vm:54504kB, anon-rss:380kB, file-rss:8192kB, shmem-rss:256kB, UID:0 pgtables:84kB oom_score_adj:1000 21:01:18 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(0x0, &(0x7f00000e5000/0x2000)=nil, 0x2000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) mlockall(0x2) (async) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) (async) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async) shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) (async) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) (async) shmctl$SHM_UNLOCK(r0, 0xc) (async) shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) (async) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) (async) mlockall(0x7) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) (async) shmat(0x0, &(0x7f00000e5000/0x2000)=nil, 0x2000) (async) shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) (async) shmctl$SHM_UNLOCK(0x0, 0xc) (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) (async) shmctl$SHM_UNLOCK(r2, 0xc) (async) shmctl$IPC_RMID(0x0, 0x0) (async) 21:01:18 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 279.954518][ T8745] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 279.985943][ T8745] CPU: 0 PID: 8745 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 279.997429][ T8745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.007494][ T8745] Call Trace: [ 280.010772][ T8745] [ 280.013701][ T8745] dump_stack_lvl+0x201/0x2d8 [ 280.018427][ T8745] ? show_regs_print_info+0x12/0x12 [ 280.023642][ T8745] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 280.029364][ T8745] ? do_raw_spin_lock+0x151/0x8e0 [ 280.034393][ T8745] ? asan.module_dtor+0x20/0x20 [ 280.039243][ T8745] dump_header+0xdb/0x970 [ 280.043576][ T8745] oom_kill_process+0xf5/0x4d0 [ 280.048351][ T8745] out_of_memory+0x711/0xa70 [ 280.052947][ T8745] ? unregister_oom_notifier+0x20/0x20 [ 280.058403][ T8745] ? trace_lock_release+0x4f/0x150 [ 280.063511][ T8745] ? mem_cgroup_oom+0x47d/0x5f0 [ 280.068366][ T8745] ? lock_release+0x82/0x810 [ 280.072957][ T8745] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 280.078504][ T8745] ? __lock_acquire+0x2b00/0x2b00 [ 280.083524][ T8745] ? mem_cgroup_oom_trylock+0x220/0x220 [ 280.089073][ T8745] ? do_raw_spin_unlock+0x134/0x8a0 [ 280.094270][ T8745] ? mem_cgroup_iter+0x3c9/0x530 [ 280.099209][ T8745] mem_cgroup_oom+0x48d/0x5f0 21:01:18 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) [ 280.103886][ T8745] try_charge_memcg+0xdab/0x1110 [ 280.108820][ T8745] ? read_lock_is_recursive+0x10/0x10 [ 280.114191][ T8745] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 280.120169][ T8745] ? rcu_read_lock_sched_held+0x5f/0x130 [ 280.125798][ T8745] ? alloc_pages_vma+0x9aa/0x1150 [ 280.130825][ T8745] ? __folio_memcg+0x170/0x170 [ 280.135598][ T8745] ? rcu_lock_acquire+0x30/0x30 [ 280.140448][ T8745] ? trace_lock_release+0x4f/0x150 [ 280.145564][ T8745] ? rcu_lock_acquire+0x30/0x30 [ 280.150422][ T8745] ? lock_release+0x82/0x810 [ 280.155017][ T8745] ? shmem_alloc_and_acct_page+0x971/0x1230 [ 280.160915][ T8745] ? __lock_acquire+0x2b00/0x2b00 [ 280.165970][ T8745] ? lock_release+0x82/0x810 [ 280.170559][ T8745] charge_memcg+0x119/0x5d0 [ 280.175070][ T8745] ? __mem_cgroup_charge+0x80/0x80 [ 280.180181][ T8745] __mem_cgroup_charge+0x23/0x80 [ 280.185118][ T8745] shmem_add_to_page_cache+0x124a/0x1f30 [ 280.190760][ T8745] ? put_page+0x230/0x230 [ 280.195090][ T8745] ? mem_cgroup_swap_full+0x300/0x300 [ 280.200466][ T8745] ? do_raw_spin_unlock+0x134/0x8a0 [ 280.205666][ T8745] ? PageTransHuge+0xd9/0x2b0 [ 280.210343][ T8745] shmem_getpage_gfp+0x1884/0x30e0 [ 280.215468][ T8745] ? shmem_getpage+0xa0/0xa0 [ 280.220057][ T8745] ? __lock_acquire+0x2b00/0x2b00 [ 280.225084][ T8745] shmem_fault+0x1df/0x810 [ 280.229503][ T8745] ? shmem_fallocate+0xea0/0xea0 [ 280.234441][ T8745] ? count_memcg_event_mm+0x342/0x390 [ 280.239815][ T8745] ? follow_page_pte+0x343/0xc50 [ 280.244749][ T8745] ? pfn_swap_entry_to_page+0x310/0x310 [ 280.250294][ T8745] ? read_lock_is_recursive+0x10/0x10 [ 280.255678][ T8745] __do_fault+0x137/0x4e0 [ 280.260006][ T8745] handle_mm_fault+0x2c53/0x39e0 [ 280.264955][ T8745] ? numa_migrate_prep+0x250/0x250 [ 280.270066][ T8745] ? follow_page_mask+0xbac/0x1580 [ 280.275177][ T8745] ? find_vma+0xd2/0x230 [ 280.279416][ T8745] ? check_vma_flags+0x401/0x480 [ 280.284348][ T8745] __get_user_pages+0x4ed/0x1190 [ 280.289286][ T8745] ? populate_vma_page_range+0x2b0/0x2b0 [ 280.294919][ T8745] ? __down_read_common+0x1b0/0x450 [ 280.300115][ T8745] ? memset+0x1f/0x40 21:01:18 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) dup(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 21:01:18 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) [ 280.304095][ T8745] populate_vma_page_range+0x217/0x2b0 [ 280.309553][ T8745] __mm_populate+0x2ea/0x4d0 [ 280.314147][ T8745] ? check_vma_flags+0x480/0x480 [ 280.319081][ T8745] do_shmat+0xab3/0xda0 [ 280.323240][ T8745] ? __ia32_compat_sys_old_shmctl+0x90/0x90 [ 280.329131][ T8745] ? rcu_read_lock_sched_held+0x5f/0x130 [ 280.334761][ T8745] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 280.340744][ T8745] ? rcu_read_lock_sched_held+0x5f/0x130 [ 280.346379][ T8745] __x64_sys_shmat+0x102/0x190 [ 280.351147][ T8745] ? shm_lock+0x190/0x190 21:01:18 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) [ 280.355478][ T8745] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 280.361460][ T8745] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 280.367440][ T8745] do_syscall_64+0x2b/0x50 [ 280.371860][ T8745] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 280.377752][ T8745] RIP: 0033:0x7efc03e89049 [ 280.382162][ T8745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 280.401765][ T8745] RSP: 002b:00007efc04f78168 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 280.410183][ T8745] RAX: ffffffffffffffda RBX: 00007efc03f9bf60 RCX: 00007efc03e89049 [ 280.418157][ T8745] RDX: 0000000000004000 RSI: 0000000020005000 RDI: 0000000000000096 [ 280.426130][ T8745] RBP: 00007efc03ee308d R08: 0000000000000000 R09: 0000000000000000 [ 280.434102][ T8745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.442071][ T8745] R13: 00007ffe96d26d2f R14: 00007efc04f78300 R15: 0000000000022000 [ 280.450050][ T8745] [ 280.933542][ T8745] memory: usage 306952kB, limit 307200kB, failcnt 945 [ 280.943352][ T8745] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 280.951038][ T8745] Memory cgroup stats for /syz2: [ 280.951194][ T8745] anon 106496 [ 280.951194][ T8745] file 309751808 [ 280.951194][ T8745] kernel 4460544 [ 280.951194][ T8745] kernel_stack 65536 [ 280.951194][ T8745] pagetables 77824 [ 280.951194][ T8745] percpu 0 [ 280.951194][ T8745] sock 0 [ 280.951194][ T8745] vmalloc 0 [ 280.951194][ T8745] shmem 309747712 [ 280.951194][ T8745] file_mapped 188416 [ 280.951194][ T8745] file_dirty 4096 [ 280.951194][ T8745] file_writeback 0 [ 280.951194][ T8745] swapcached 0 [ 280.951194][ T8745] anon_thp 0 [ 280.951194][ T8745] file_thp 0 [ 280.951194][ T8745] shmem_thp 0 [ 280.951194][ T8745] inactive_anon 309751808 [ 280.951194][ T8745] active_anon 8192 [ 280.951194][ T8745] inactive_file 0 [ 280.951194][ T8745] active_file 4096 [ 280.951194][ T8745] unevictable 94208 [ 280.951194][ T8745] slab_reclaimable 1701512 21:01:19 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) 21:01:19 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) 21:01:19 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) [ 280.951194][ T8745] slab_unreclaimable 2579672 [ 280.951194][ T8745] slab 4281184 [ 280.951194][ T8745] workingset_refault_anon 0 [ 281.057180][ T8745] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=8744,uid=0 21:01:19 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) dup(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 281.088616][ T8745] Memory cgroup out of memory: Killed process 8744 (syz-executor.2) total-vm:50664kB, anon-rss:380kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 21:01:19 executing program 2: mlockall(0x2) (async) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) (async) shmctl$SHM_UNLOCK(r0, 0xc) (async) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) (async) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(0x0, &(0x7f00000e5000/0x2000)=nil, 0x2000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) (async) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) [ 281.184057][ T29] oom_reaper: reaped process 8744 (syz-executor.2), now anon-rss:0kB, file-rss:8192kB, shmem-rss:100kB [ 281.317766][ T8795] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 281.365848][ T8795] CPU: 1 PID: 8795 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 281.377332][ T8795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.387378][ T8795] Call Trace: [ 281.390659][ T8795] [ 281.393577][ T8795] dump_stack_lvl+0x201/0x2d8 [ 281.398251][ T8795] ? show_regs_print_info+0x12/0x12 [ 281.403445][ T8795] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 281.409154][ T8795] ? do_raw_spin_lock+0x151/0x8e0 [ 281.414172][ T8795] ? asan.module_dtor+0x20/0x20 [ 281.419015][ T8795] dump_header+0xdb/0x970 [ 281.423328][ T8795] oom_kill_process+0xf5/0x4d0 [ 281.428074][ T8795] out_of_memory+0x711/0xa70 [ 281.432647][ T8795] ? unregister_oom_notifier+0x20/0x20 [ 281.438088][ T8795] ? trace_lock_release+0x4f/0x150 [ 281.443183][ T8795] ? mem_cgroup_oom+0x47d/0x5f0 [ 281.448016][ T8795] ? lock_release+0x82/0x810 [ 281.452619][ T8795] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 281.458163][ T8795] ? __lock_acquire+0x2b00/0x2b00 [ 281.463171][ T8795] ? mem_cgroup_oom_trylock+0x220/0x220 [ 281.468703][ T8795] ? do_raw_spin_unlock+0x134/0x8a0 [ 281.473890][ T8795] ? mem_cgroup_iter+0x3c9/0x530 [ 281.478820][ T8795] mem_cgroup_oom+0x48d/0x5f0 [ 281.483483][ T8795] try_charge_memcg+0xdab/0x1110 [ 281.488402][ T8795] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 281.494370][ T8795] ? trace_lock_acquire+0x59/0x190 [ 281.499466][ T8795] ? __folio_memcg+0x170/0x170 [ 281.504212][ T8795] ? lock_release+0x82/0x810 [ 281.508781][ T8795] ? read_lock_is_recursive+0x10/0x10 [ 281.514138][ T8795] ? rcu_read_lock_sched_held+0x5f/0x130 [ 281.519863][ T8795] __memcg_kmem_charge_page+0x432/0x500 [ 281.525405][ T8795] alloc_thread_stack_node+0x390/0x4e0 [ 281.530910][ T8795] ? memcpy+0x3c/0x60 [ 281.534881][ T8795] copy_process+0x6d5/0x5ff0 [ 281.539462][ T8795] ? psi_memstall_leave+0x233/0x2b0 [ 281.544667][ T8795] ? trace_lock_release+0x4f/0x150 [ 281.549769][ T8795] ? psi_memstall_leave+0x233/0x2b0 [ 281.554971][ T8795] ? lock_release+0x82/0x810 [ 281.559546][ T8795] ? pidfd_show_fdinfo+0x2e0/0x2e0 [ 281.564668][ T8795] ? print_irqtrace_events+0x220/0x220 [ 281.570137][ T8795] ? rcu_read_lock_sched_held+0x5f/0x130 [ 281.575781][ T8795] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 281.581744][ T8795] ? rcu_read_lock_sched_held+0x5f/0x130 [ 281.587383][ T8795] kernel_clone+0x22a/0x7e0 [ 281.591882][ T8795] ? trace_lock_acquire+0x59/0x190 [ 281.596976][ T8795] ? create_io_thread+0x1d0/0x1d0 [ 281.602014][ T8795] ? trace_lock_release+0x4f/0x150 [ 281.607113][ T8795] __x64_sys_clone+0x245/0x2b0 [ 281.611874][ T8795] ? __do_sys_vfork+0x130/0x130 [ 281.616707][ T8795] ? rcu_read_lock_sched_held+0x5f/0x130 [ 281.622328][ T8795] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 281.628300][ T8795] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 281.634269][ T8795] do_syscall_64+0x2b/0x50 [ 281.638669][ T8795] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 281.644546][ T8795] RIP: 0033:0x7efc03e8a471 [ 281.648968][ T8795] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 281.668551][ T8795] RSP: 002b:00007ffe96d26c78 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 281.676946][ T8795] RAX: ffffffffffffffda RBX: 00007efc04f15700 RCX: 00007efc03e8a471 [ 281.684898][ T8795] RDX: 00007efc04f159d0 RSI: 00007efc04f152f0 RDI: 00000000003d0f00 [ 281.692851][ T8795] RBP: 00007ffe96d26ec0 R08: 00007efc04f15700 R09: 00007efc04f15700 [ 281.700804][ T8795] R10: 00007efc04f159d0 R11: 0000000000000206 R12: 00007ffe96d26d2e [ 281.708755][ T8795] R13: 00007ffe96d26d2f R14: 00007efc04f15300 R15: 0000000000022000 [ 281.716724][ T8795] 21:01:19 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) [ 281.980328][ T8795] memory: usage 307080kB, limit 307200kB, failcnt 966 [ 281.987283][ T8795] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 281.994491][ T8795] Memory cgroup stats for /syz2: [ 281.994654][ T8795] anon 372736 [ 281.994654][ T8795] file 309755904 [ 281.994654][ T8795] kernel 4317184 [ 281.994654][ T8795] kernel_stack 131072 [ 281.994654][ T8795] pagetables 69632 [ 281.994654][ T8795] percpu 0 [ 281.994654][ T8795] sock 0 [ 281.994654][ T8795] vmalloc 0 [ 281.994654][ T8795] shmem 309751808 [ 281.994654][ T8795] file_mapped 94208 [ 281.994654][ T8795] file_dirty 4096 [ 281.994654][ T8795] file_writeback 0 [ 281.994654][ T8795] swapcached 0 [ 281.994654][ T8795] anon_thp 0 [ 281.994654][ T8795] file_thp 0 [ 281.994654][ T8795] shmem_thp 0 [ 281.994654][ T8795] inactive_anon 309854208 [ 281.994654][ T8795] active_anon 8192 [ 281.994654][ T8795] inactive_file 0 [ 281.994654][ T8795] active_file 4096 [ 281.994654][ T8795] unevictable 262144 [ 281.994654][ T8795] slab_reclaimable 1670160 [ 281.994654][ T8795] slab_unreclaimable 2406744 [ 281.994654][ T8795] slab 4076904 [ 281.994654][ T8795] workingset_refault_anon 0 [ 282.106522][ T8795] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=8795,uid=0 [ 282.124154][ T8795] Memory cgroup out of memory: Killed process 8795 (syz-executor.2) total-vm:51060kB, anon-rss:532kB, file-rss:8888kB, shmem-rss:28kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 282.195276][ T29] oom_reaper: reaped process 8795 (syz-executor.2), now anon-rss:0kB, file-rss:8192kB, shmem-rss:4kB 21:01:20 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 21:01:20 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) 21:01:20 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x5000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000545000/0x2000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) r2 = shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r3 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r3, 0xc) shmctl$IPC_RMID(r2, 0x0) 21:01:20 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 21:01:20 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x5000) (async) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) (async) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000545000/0x2000)=nil, 0x4000) (async) mlockall(0x7) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) r2 = shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) (async) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) (async) r3 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) (async) shmctl$SHM_UNLOCK(0x0, 0xc) (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r3, 0xc) shmctl$IPC_RMID(r2, 0x0) 21:01:20 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) [ 282.535046][ T8840] syz-executor.2 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=1000 21:01:20 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) [ 282.634748][ T8840] CPU: 1 PID: 8840 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 282.646241][ T8840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.656304][ T8840] Call Trace: [ 282.659568][ T8840] [ 282.662482][ T8840] dump_stack_lvl+0x201/0x2d8 [ 282.667148][ T8840] ? show_regs_print_info+0x12/0x12 [ 282.672333][ T8840] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 282.678039][ T8840] ? do_raw_spin_lock+0x151/0x8e0 [ 282.683049][ T8840] ? asan.module_dtor+0x20/0x20 [ 282.687882][ T8840] dump_header+0xdb/0x970 [ 282.692200][ T8840] oom_kill_process+0xf5/0x4d0 [ 282.696946][ T8840] out_of_memory+0x711/0xa70 [ 282.701516][ T8840] ? unregister_oom_notifier+0x20/0x20 [ 282.706957][ T8840] ? trace_lock_release+0x4f/0x150 [ 282.712047][ T8840] ? mem_cgroup_oom+0x47d/0x5f0 [ 282.716878][ T8840] ? lock_release+0x82/0x810 [ 282.721451][ T8840] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 282.727001][ T8840] ? __lock_acquire+0x2b00/0x2b00 [ 282.732010][ T8840] ? mem_cgroup_oom_trylock+0x220/0x220 [ 282.737547][ T8840] ? do_raw_spin_unlock+0x134/0x8a0 [ 282.742741][ T8840] ? mem_cgroup_iter+0x3c9/0x530 [ 282.747662][ T8840] mem_cgroup_oom+0x48d/0x5f0 [ 282.752345][ T8840] try_charge_memcg+0xdab/0x1110 [ 282.757288][ T8840] ? trace_lock_acquire+0x59/0x190 [ 282.762391][ T8840] ? __folio_memcg+0x170/0x170 [ 282.767138][ T8840] ? lock_release+0x82/0x810 [ 282.771731][ T8840] ? read_lock_is_recursive+0x10/0x10 [ 282.777091][ T8840] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 282.783061][ T8840] ? trace_lock_release+0x4f/0x150 [ 282.788164][ T8840] obj_cgroup_charge+0x3b2/0x520 [ 282.793102][ T8840] ? __lock_acquire+0x2b00/0x2b00 [ 282.798112][ T8840] ? local_lock_release+0x120/0x120 [ 282.803298][ T8840] kmem_cache_alloc+0xbd/0x310 [ 282.808047][ T8840] ? __alloc_file+0x27/0x2f0 [ 282.812623][ T8840] __alloc_file+0x27/0x2f0 [ 282.817020][ T8840] ? alloc_empty_file+0x49/0x1b0 [ 282.821939][ T8840] alloc_empty_file+0xa9/0x1b0 [ 282.826686][ T8840] alloc_file+0x58/0x4e0 [ 282.830914][ T8840] alloc_file_clone+0x23/0xa0 [ 282.835574][ T8840] do_shmat+0x6a5/0xda0 [ 282.839720][ T8840] ? __ia32_compat_sys_old_shmctl+0x90/0x90 [ 282.845597][ T8840] ? rcu_read_lock_sched_held+0x5f/0x130 [ 282.851212][ T8840] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 282.857176][ T8840] ? rcu_read_lock_sched_held+0x5f/0x130 [ 282.862795][ T8840] __x64_sys_shmat+0x102/0x190 [ 282.867540][ T8840] ? shm_lock+0x190/0x190 [ 282.871854][ T8840] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 282.877820][ T8840] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 282.883781][ T8840] do_syscall_64+0x2b/0x50 [ 282.888179][ T8840] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 282.894054][ T8840] RIP: 0033:0x7efc03e89049 [ 282.898450][ T8840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 282.918039][ T8840] RSP: 002b:00007efc04f78168 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 282.926448][ T8840] RAX: ffffffffffffffda RBX: 00007efc03f9bf60 RCX: 00007efc03e89049 [ 282.934400][ T8840] RDX: 0000000000003000 RSI: 00000000200e5000 RDI: 0000000000000098 [ 282.942351][ T8840] RBP: 00007efc03ee308d R08: 0000000000000000 R09: 0000000000000000 [ 282.950305][ T8840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.958261][ T8840] R13: 00007ffe96d26d2f R14: 00007efc04f78300 R15: 0000000000022000 [ 282.966224][ T8840] [ 283.180875][ T8840] memory: usage 306924kB, limit 307200kB, failcnt 1049 [ 283.189932][ T8840] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 283.212053][ T8840] Memory cgroup stats for /syz2: [ 283.212217][ T8840] anon 630784 [ 283.212217][ T8840] file 309755904 [ 283.212217][ T8840] kernel 3878912 [ 283.212217][ T8840] kernel_stack 32768 [ 283.212217][ T8840] pagetables 73728 [ 283.212217][ T8840] percpu 0 [ 283.212217][ T8840] sock 0 [ 283.212217][ T8840] vmalloc 0 [ 283.212217][ T8840] shmem 309751808 [ 283.212217][ T8840] file_mapped 94208 [ 283.212217][ T8840] file_dirty 4096 [ 283.212217][ T8840] file_writeback 0 [ 283.212217][ T8840] swapcached 0 [ 283.212217][ T8840] anon_thp 0 [ 283.212217][ T8840] file_thp 0 [ 283.212217][ T8840] shmem_thp 0 [ 283.212217][ T8840] inactive_anon 309768192 [ 283.212217][ T8840] active_anon 8192 [ 283.212217][ T8840] inactive_file 0 [ 283.212217][ T8840] active_file 4096 [ 283.212217][ T8840] unevictable 606208 [ 283.212217][ T8840] slab_reclaimable 1614528 [ 283.212217][ T8840] slab_unreclaimable 2122680 [ 283.212217][ T8840] slab 3737208 [ 283.212217][ T8840] workingset_refault_anon 0 21:01:21 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 21:01:21 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 21:01:21 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) 21:01:21 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) [ 283.553627][ T8840] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=8839,uid=0 [ 283.629763][ T8840] Memory cgroup out of memory: Killed process 8840 (syz-executor.2) total-vm:51192kB, anon-rss:900kB, file-rss:8888kB, shmem-rss:28kB, UID:0 pgtables:80kB oom_score_adj:1000 21:01:21 executing program 2: mlockall(0x2) (async) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x5000) (async) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) (async) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) (async) shmat(0x0, &(0x7f0000545000/0x2000)=nil, 0x4000) mlockall(0x7) (async) shmctl$SHM_LOCK(0x0, 0xb) r2 = shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) (async) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r3 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) (async) shmctl$SHM_UNLOCK(0x0, 0xc) (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r3, 0xc) (async) shmctl$IPC_RMID(r2, 0x0) [ 283.740499][ T29] oom_reaper: reaped process 8840 (syz-executor.2), now anon-rss:0kB, file-rss:8192kB, shmem-rss:4kB 21:01:21 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7ff) 21:01:22 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) r0 = shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/37) r1 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x3, 0x1000, 0x0, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) r2 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x4) shmctl$SHM_LOCK(0x0, 0xb) r3 = shmget(0x2, 0x4000, 0x400, &(0x7f000018d000/0x4000)=nil) shmat(r0, &(0x7f000002a000/0x2000)=nil, 0x3000) r4 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000364000/0x3000)=nil, 0x4000) shmat(r3, &(0x7f000022f000/0x3000)=nil, 0x3000) shmctl$SHM_UNLOCK(r4, 0xc) shmctl$IPC_RMID(0x0, 0x0) [ 284.149119][ T8899] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 284.198584][ T8899] CPU: 0 PID: 8899 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 284.210083][ T8899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.220148][ T8899] Call Trace: [ 284.223436][ T8899] [ 284.226376][ T8899] dump_stack_lvl+0x201/0x2d8 [ 284.231068][ T8899] ? show_regs_print_info+0x12/0x12 [ 284.236274][ T8899] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 284.242003][ T8899] ? do_raw_spin_lock+0x151/0x8e0 [ 284.247034][ T8899] ? asan.module_dtor+0x20/0x20 [ 284.251891][ T8899] dump_header+0xdb/0x970 [ 284.256226][ T8899] oom_kill_process+0xf5/0x4d0 [ 284.260999][ T8899] out_of_memory+0x711/0xa70 [ 284.265593][ T8899] ? unregister_oom_notifier+0x20/0x20 [ 284.271058][ T8899] ? trace_lock_release+0x4f/0x150 [ 284.276176][ T8899] ? mem_cgroup_oom+0x47d/0x5f0 [ 284.281061][ T8899] ? lock_release+0x82/0x810 [ 284.285661][ T8899] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 284.291218][ T8899] ? __lock_acquire+0x2b00/0x2b00 [ 284.296249][ T8899] ? mem_cgroup_oom_trylock+0x220/0x220 [ 284.301801][ T8899] ? do_raw_spin_unlock+0x134/0x8a0 [ 284.307003][ T8899] ? mem_cgroup_iter+0x3c9/0x530 [ 284.311952][ T8899] mem_cgroup_oom+0x48d/0x5f0 [ 284.316636][ T8899] try_charge_memcg+0xdab/0x1110 [ 284.321578][ T8899] ? read_lock_is_recursive+0x10/0x10 [ 284.326954][ T8899] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 284.332942][ T8899] ? rcu_read_lock_sched_held+0x5f/0x130 [ 284.338629][ T8899] ? alloc_pages_vma+0x9aa/0x1150 [ 284.343659][ T8899] ? __folio_memcg+0x170/0x170 21:01:22 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) [ 284.348431][ T8899] ? rcu_lock_acquire+0x30/0x30 [ 284.353285][ T8899] ? trace_lock_release+0x4f/0x150 [ 284.358400][ T8899] ? rcu_lock_acquire+0x30/0x30 [ 284.363257][ T8899] ? lock_release+0x82/0x810 [ 284.367848][ T8899] ? shmem_alloc_and_acct_page+0x971/0x1230 [ 284.373750][ T8899] ? __lock_acquire+0x2b00/0x2b00 [ 284.378777][ T8899] ? lock_release+0x82/0x810 [ 284.383376][ T8899] charge_memcg+0x119/0x5d0 [ 284.387888][ T8899] ? __mem_cgroup_charge+0x80/0x80 [ 284.393008][ T8899] __mem_cgroup_charge+0x23/0x80 21:01:22 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) [ 284.397956][ T8899] shmem_add_to_page_cache+0x124a/0x1f30 [ 284.403605][ T8899] ? put_page+0x230/0x230 [ 284.407945][ T8899] ? mem_cgroup_swap_full+0x300/0x300 [ 284.413323][ T8899] ? do_raw_spin_unlock+0x134/0x8a0 [ 284.418525][ T8899] ? PageTransHuge+0xd9/0x2b0 [ 284.423211][ T8899] shmem_getpage_gfp+0x1884/0x30e0 [ 284.428343][ T8899] ? shmem_getpage+0xa0/0xa0 [ 284.432940][ T8899] ? __lock_acquire+0x2b00/0x2b00 [ 284.437967][ T8899] shmem_fault+0x1df/0x810 [ 284.442394][ T8899] ? shmem_fallocate+0xea0/0xea0 [ 284.447339][ T8899] ? count_memcg_event_mm+0x342/0x390 [ 284.452717][ T8899] ? follow_page_pte+0x343/0xc50 [ 284.457658][ T8899] ? pfn_swap_entry_to_page+0x310/0x310 [ 284.463206][ T8899] ? read_lock_is_recursive+0x10/0x10 [ 284.468586][ T8899] __do_fault+0x137/0x4e0 [ 284.472925][ T8899] handle_mm_fault+0x2c53/0x39e0 [ 284.477877][ T8899] ? numa_migrate_prep+0x250/0x250 [ 284.483023][ T8899] ? follow_page_mask+0xbac/0x1580 [ 284.488144][ T8899] ? find_vma+0xd2/0x230 [ 284.492398][ T8899] ? check_vma_flags+0x401/0x480 21:01:22 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000000c0)=0x7ff) [ 284.497344][ T8899] __get_user_pages+0x4ed/0x1190 [ 284.502295][ T8899] ? populate_vma_page_range+0x2b0/0x2b0 [ 284.507930][ T8899] ? __down_read_common+0x1b0/0x450 [ 284.513132][ T8899] ? memset+0x1f/0x40 [ 284.517118][ T8899] populate_vma_page_range+0x217/0x2b0 [ 284.522580][ T8899] __mm_populate+0x2ea/0x4d0 [ 284.527172][ T8899] ? check_vma_flags+0x480/0x480 [ 284.532116][ T8899] do_shmat+0xab3/0xda0 [ 284.536283][ T8899] ? __ia32_compat_sys_old_shmctl+0x90/0x90 [ 284.542183][ T8899] ? rcu_read_lock_sched_held+0x5f/0x130 [ 284.547821][ T8899] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 284.553800][ T8899] ? rcu_read_lock_sched_held+0x5f/0x130 [ 284.559432][ T8899] __x64_sys_shmat+0x102/0x190 [ 284.564187][ T8899] ? shm_lock+0x190/0x190 [ 284.568517][ T8899] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 284.574481][ T8899] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 284.580463][ T8899] do_syscall_64+0x2b/0x50 [ 284.584870][ T8899] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 284.590753][ T8899] RIP: 0033:0x7efc03e89049 [ 284.595171][ T8899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 284.614757][ T8899] RSP: 002b:00007efc04f78168 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 284.623153][ T8899] RAX: ffffffffffffffda RBX: 00007efc03f9bf60 RCX: 00007efc03e89049 [ 284.631107][ T8899] RDX: 0000000000004000 RSI: 0000000020005000 RDI: 000000000000009a [ 284.639061][ T8899] RBP: 00007efc03ee308d R08: 0000000000000000 R09: 0000000000000000 21:01:22 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 284.647015][ T8899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.654966][ T8899] R13: 00007ffe96d26d2f R14: 00007efc04f78300 R15: 0000000000022000 [ 284.662942][ T8899] 21:01:22 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) [ 285.156392][ T8899] memory: usage 306824kB, limit 307200kB, failcnt 1076 [ 285.163905][ T8899] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 285.191737][ T8899] Memory cgroup stats for /syz2: [ 285.191918][ T8899] anon 143360 [ 285.191918][ T8899] file 310816768 [ 285.191918][ T8899] kernel 3203072 [ 285.191918][ T8899] kernel_stack 65536 [ 285.191918][ T8899] pagetables 77824 [ 285.191918][ T8899] percpu 0 [ 285.191918][ T8899] sock 0 [ 285.191918][ T8899] vmalloc 0 [ 285.191918][ T8899] shmem 310812672 [ 285.191918][ T8899] file_mapped 1155072 [ 285.191918][ T8899] file_dirty 4096 [ 285.191918][ T8899] file_writeback 0 [ 285.191918][ T8899] swapcached 0 [ 285.191918][ T8899] anon_thp 0 [ 285.191918][ T8899] file_thp 0 [ 285.191918][ T8899] shmem_thp 0 [ 285.191918][ T8899] inactive_anon 309886976 [ 285.191918][ T8899] active_anon 8192 [ 285.191918][ T8899] inactive_file 0 [ 285.191918][ T8899] active_file 4096 [ 285.191918][ T8899] unevictable 1060864 [ 285.191918][ T8899] slab_reclaimable 1475456 [ 285.191918][ T8899] slab_unreclaimable 1551464 [ 285.191918][ T8899] slab 3026920 [ 285.191918][ T8899] workingset_refault_anon 0 21:01:23 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) 21:01:23 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) 21:01:23 executing program 1: unshare(0x40000000) 21:01:23 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000000c0)=0x7ff) 21:01:23 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 285.451618][ T8899] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=8898,uid=0 [ 285.518947][ T8899] Memory cgroup out of memory: Killed process 8898 (syz-executor.2) total-vm:54504kB, anon-rss:384kB, file-rss:8192kB, shmem-rss:788kB, UID:0 pgtables:84kB oom_score_adj:1000 21:01:23 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) r0 = shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/37) r1 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x3, 0x1000, 0x0, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) r2 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x4) shmctl$SHM_LOCK(0x0, 0xb) r3 = shmget(0x2, 0x4000, 0x400, &(0x7f000018d000/0x4000)=nil) shmat(r0, &(0x7f000002a000/0x2000)=nil, 0x3000) r4 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000364000/0x3000)=nil, 0x4000) shmat(r3, &(0x7f000022f000/0x3000)=nil, 0x3000) shmctl$SHM_UNLOCK(r4, 0xc) shmctl$IPC_RMID(0x0, 0x0) mlockall(0x2) (async) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) (async) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/37) (async) shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) (async) shmget(0x3, 0x1000, 0x0, &(0x7f000003b000/0x1000)=nil) (async) shmctl$SHM_UNLOCK(r1, 0xc) (async) shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) (async) shmat(r2, &(0x7f0000005000/0x1000)=nil, 0x4000) (async) mlockall(0x4) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmget(0x2, 0x4000, 0x400, &(0x7f000018d000/0x4000)=nil) (async) shmat(r0, &(0x7f000002a000/0x2000)=nil, 0x3000) (async) shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) (async) shmctl$SHM_UNLOCK(0x0, 0xc) (async) shmat(0x0, &(0x7f0000364000/0x3000)=nil, 0x4000) (async) shmat(r3, &(0x7f000022f000/0x3000)=nil, 0x3000) (async) shmctl$SHM_UNLOCK(r4, 0xc) (async) shmctl$IPC_RMID(0x0, 0x0) (async) [ 285.574655][ T29] oom_reaper: reaped process 8898 (syz-executor.2), now anon-rss:0kB, file-rss:8192kB, shmem-rss:796kB [ 285.691940][ T8964] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 285.731687][ T8964] CPU: 1 PID: 8964 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 285.743177][ T8964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.753240][ T8964] Call Trace: [ 285.756526][ T8964] [ 285.759452][ T8964] dump_stack_lvl+0x201/0x2d8 [ 285.764134][ T8964] ? show_regs_print_info+0x12/0x12 [ 285.769339][ T8964] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 285.775058][ T8964] ? do_raw_spin_lock+0x151/0x8e0 [ 285.780095][ T8964] ? asan.module_dtor+0x20/0x20 [ 285.784946][ T8964] dump_header+0xdb/0x970 [ 285.789280][ T8964] oom_kill_process+0xf5/0x4d0 [ 285.794047][ T8964] out_of_memory+0x711/0xa70 [ 285.798645][ T8964] ? unregister_oom_notifier+0x20/0x20 [ 285.804107][ T8964] ? trace_lock_release+0x4f/0x150 [ 285.809218][ T8964] ? mem_cgroup_oom+0x47d/0x5f0 [ 285.814198][ T8964] ? lock_release+0x82/0x810 [ 285.818886][ T8964] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 285.824438][ T8964] ? __lock_acquire+0x2b00/0x2b00 [ 285.829464][ T8964] ? mem_cgroup_oom_trylock+0x220/0x220 [ 285.835012][ T8964] ? do_raw_spin_unlock+0x134/0x8a0 [ 285.840216][ T8964] ? mem_cgroup_iter+0x3c9/0x530 [ 285.845157][ T8964] mem_cgroup_oom+0x48d/0x5f0 [ 285.849834][ T8964] try_charge_memcg+0xdab/0x1110 [ 285.854771][ T8964] ? read_lock_is_recursive+0x10/0x10 [ 285.860143][ T8964] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 285.866123][ T8964] ? rcu_read_lock_sched_held+0x5f/0x130 [ 285.871758][ T8964] ? alloc_pages_vma+0x9aa/0x1150 [ 285.876788][ T8964] ? __folio_memcg+0x170/0x170 [ 285.881554][ T8964] ? rcu_lock_acquire+0x30/0x30 [ 285.886408][ T8964] ? trace_lock_release+0x4f/0x150 [ 285.891523][ T8964] ? rcu_lock_acquire+0x30/0x30 [ 285.896376][ T8964] ? lock_release+0x82/0x810 [ 285.900966][ T8964] ? shmem_alloc_and_acct_page+0x971/0x1230 [ 285.906865][ T8964] ? __lock_acquire+0x2b00/0x2b00 [ 285.911891][ T8964] ? lock_release+0x82/0x810 [ 285.916483][ T8964] charge_memcg+0x119/0x5d0 [ 285.920987][ T8964] ? __mem_cgroup_charge+0x80/0x80 [ 285.926107][ T8964] __mem_cgroup_charge+0x23/0x80 [ 285.931041][ T8964] shmem_add_to_page_cache+0x124a/0x1f30 [ 285.936686][ T8964] ? put_page+0x230/0x230 [ 285.941159][ T8964] ? mem_cgroup_swap_full+0x300/0x300 [ 285.946532][ T8964] ? do_raw_spin_unlock+0x134/0x8a0 [ 285.951749][ T8964] ? PageTransHuge+0xd9/0x2b0 [ 285.956429][ T8964] shmem_getpage_gfp+0x1884/0x30e0 [ 285.961557][ T8964] ? shmem_getpage+0xa0/0xa0 [ 285.966159][ T8964] ? __lock_acquire+0x2b00/0x2b00 [ 285.971185][ T8964] shmem_fault+0x1df/0x810 [ 285.975628][ T8964] ? shmem_fallocate+0xea0/0xea0 [ 285.980568][ T8964] ? count_memcg_event_mm+0x342/0x390 [ 285.985948][ T8964] ? follow_page_pte+0x343/0xc50 [ 285.990885][ T8964] ? pfn_swap_entry_to_page+0x310/0x310 [ 285.996432][ T8964] ? read_lock_is_recursive+0x10/0x10 [ 286.001802][ T8964] __do_fault+0x137/0x4e0 [ 286.006135][ T8964] handle_mm_fault+0x2c53/0x39e0 [ 286.011081][ T8964] ? numa_migrate_prep+0x250/0x250 [ 286.016201][ T8964] ? follow_page_mask+0xbac/0x1580 [ 286.021316][ T8964] ? find_vma+0xd2/0x230 [ 286.025560][ T8964] ? check_vma_flags+0x401/0x480 [ 286.030506][ T8964] __get_user_pages+0x4ed/0x1190 [ 286.035450][ T8964] ? populate_vma_page_range+0x2b0/0x2b0 [ 286.041084][ T8964] ? __down_read_common+0x1b0/0x450 [ 286.046283][ T8964] ? memset+0x1f/0x40 [ 286.050273][ T8964] populate_vma_page_range+0x217/0x2b0 [ 286.055735][ T8964] __mm_populate+0x2ea/0x4d0 [ 286.060331][ T8964] ? check_vma_flags+0x480/0x480 [ 286.065271][ T8964] do_shmat+0xab3/0xda0 [ 286.069436][ T8964] ? __ia32_compat_sys_old_shmctl+0x90/0x90 [ 286.075332][ T8964] ? rcu_read_lock_sched_held+0x5f/0x130 [ 286.080968][ T8964] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 286.086969][ T8964] ? rcu_read_lock_sched_held+0x5f/0x130 [ 286.092605][ T8964] __x64_sys_shmat+0x102/0x190 [ 286.097378][ T8964] ? shm_lock+0x190/0x190 [ 286.101716][ T8964] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 286.107701][ T8964] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 286.113683][ T8964] do_syscall_64+0x2b/0x50 [ 286.118102][ T8964] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 286.123999][ T8964] RIP: 0033:0x7efc03e89049 [ 286.128413][ T8964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 286.148017][ T8964] RSP: 002b:00007efc04f78168 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 286.156430][ T8964] RAX: ffffffffffffffda RBX: 00007efc03f9bf60 RCX: 00007efc03e89049 [ 286.164406][ T8964] RDX: 0000000000004000 RSI: 0000000020005000 RDI: 000000000000009b [ 286.172378][ T8964] RBP: 00007efc03ee308d R08: 0000000000000000 R09: 0000000000000000 [ 286.180352][ T8964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.188326][ T8964] R13: 00007ffe96d26d2f R14: 00007efc04f78300 R15: 0000000000022000 [ 286.196305][ T8964] [ 286.210038][ T8964] memory: usage 306948kB, limit 307200kB, failcnt 1107 [ 286.217021][ T8964] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 286.227230][ T8964] Memory cgroup stats for /syz2: [ 286.227393][ T8964] anon 110592 [ 286.227393][ T8964] file 311398400 [ 286.227393][ T8964] kernel 2805760 [ 286.227393][ T8964] kernel_stack 65536 [ 286.227393][ T8964] pagetables 77824 [ 286.227393][ T8964] percpu 0 [ 286.227393][ T8964] sock 0 [ 286.227393][ T8964] vmalloc 0 [ 286.227393][ T8964] shmem 311394304 [ 286.227393][ T8964] file_mapped 671744 [ 286.227393][ T8964] file_dirty 4096 [ 286.227393][ T8964] file_writeback 0 [ 286.227393][ T8964] swapcached 0 [ 286.227393][ T8964] anon_thp 0 [ 286.227393][ T8964] file_thp 0 [ 286.227393][ T8964] shmem_thp 0 [ 286.227393][ T8964] inactive_anon 310915072 [ 286.227393][ T8964] active_anon 12288 [ 286.227393][ T8964] inactive_file 4096 [ 286.227393][ T8964] active_file 0 [ 286.227393][ T8964] unevictable 577536 [ 286.227393][ T8964] slab_reclaimable 1351456 [ 286.227393][ T8964] slab_unreclaimable 1275992 [ 286.227393][ T8964] slab 2627448 [ 286.227393][ T8964] workingset_refault_anon 0 [ 286.322138][ T8964] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=8962,uid=0 21:01:24 executing program 1: unshare(0x40000000) 21:01:24 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) 21:01:24 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) (async, rerun: 64) r0 = shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) (rerun: 64) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/37) r1 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) (async) shmget(0x3, 0x1000, 0x0, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) r2 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000005000/0x1000)=nil, 0x4000) (async) mlockall(0x4) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) r3 = shmget(0x2, 0x4000, 0x400, &(0x7f000018d000/0x4000)=nil) shmat(r0, &(0x7f000002a000/0x2000)=nil, 0x3000) (async, rerun: 32) r4 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) (rerun: 32) shmctl$SHM_UNLOCK(0x0, 0xc) (async) shmat(0x0, &(0x7f0000364000/0x3000)=nil, 0x4000) (async) shmat(r3, &(0x7f000022f000/0x3000)=nil, 0x3000) (async) shmctl$SHM_UNLOCK(r4, 0xc) shmctl$IPC_RMID(0x0, 0x0) [ 286.337811][ T8964] Memory cgroup out of memory: Killed process 8962 (syz-executor.2) total-vm:50664kB, anon-rss:384kB, file-rss:8192kB, shmem-rss:524kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 286.358112][ T29] oom_reaper: reaped process 8962 (syz-executor.2), now anon-rss:0kB, file-rss:8192kB, shmem-rss:528kB [ 286.444501][ T8992] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 286.468118][ T8992] CPU: 0 PID: 8992 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 286.479595][ T8992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.489645][ T8992] Call Trace: [ 286.492927][ T8992] [ 286.495861][ T8992] dump_stack_lvl+0x201/0x2d8 [ 286.500539][ T8992] ? show_regs_print_info+0x12/0x12 [ 286.505735][ T8992] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 286.511452][ T8992] ? do_raw_spin_lock+0x151/0x8e0 [ 286.516478][ T8992] ? asan.module_dtor+0x20/0x20 [ 286.521329][ T8992] dump_header+0xdb/0x970 [ 286.525663][ T8992] oom_kill_process+0xf5/0x4d0 [ 286.530428][ T8992] out_of_memory+0x711/0xa70 [ 286.535020][ T8992] ? unregister_oom_notifier+0x20/0x20 21:01:24 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 286.540487][ T8992] ? trace_lock_release+0x4f/0x150 [ 286.545597][ T8992] ? mem_cgroup_oom+0x47d/0x5f0 [ 286.550443][ T8992] ? lock_release+0x82/0x810 [ 286.555045][ T8992] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 286.560606][ T8992] ? __lock_acquire+0x2b00/0x2b00 [ 286.565632][ T8992] ? mem_cgroup_oom_trylock+0x220/0x220 [ 286.571180][ T8992] ? do_raw_spin_unlock+0x134/0x8a0 [ 286.576383][ T8992] ? mem_cgroup_iter+0x3c9/0x530 [ 286.581329][ T8992] mem_cgroup_oom+0x48d/0x5f0 [ 286.586014][ T8992] try_charge_memcg+0xdab/0x1110 [ 286.590955][ T8992] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 286.596937][ T8992] ? trace_lock_acquire+0x59/0x190 [ 286.602053][ T8992] ? __folio_memcg+0x170/0x170 [ 286.606814][ T8992] ? lock_release+0x82/0x810 [ 286.611403][ T8992] ? read_lock_is_recursive+0x10/0x10 [ 286.616781][ T8992] ? rcu_read_lock_sched_held+0x5f/0x130 [ 286.622420][ T8992] __memcg_kmem_charge_page+0x432/0x500 [ 286.627966][ T8992] alloc_thread_stack_node+0x390/0x4e0 [ 286.633429][ T8992] ? memcpy+0x3c/0x60 [ 286.637428][ T8992] copy_process+0x6d5/0x5ff0 [ 286.642025][ T8992] ? psi_memstall_leave+0x233/0x2b0 [ 286.647226][ T8992] ? trace_lock_release+0x4f/0x150 [ 286.652336][ T8992] ? psi_memstall_leave+0x233/0x2b0 [ 286.657534][ T8992] ? lock_release+0x82/0x810 [ 286.662126][ T8992] ? pidfd_show_fdinfo+0x2e0/0x2e0 [ 286.667244][ T8992] ? print_irqtrace_events+0x220/0x220 [ 286.672700][ T8992] ? rcu_read_lock_sched_held+0x5f/0x130 [ 286.678357][ T8992] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 286.684334][ T8992] ? rcu_read_lock_sched_held+0x5f/0x130 [ 286.689966][ T8992] kernel_clone+0x22a/0x7e0 [ 286.694467][ T8992] ? trace_lock_acquire+0x59/0x190 [ 286.699577][ T8992] ? create_io_thread+0x1d0/0x1d0 [ 286.704621][ T8992] ? trace_lock_release+0x4f/0x150 [ 286.709761][ T8992] __x64_sys_clone+0x245/0x2b0 [ 286.714570][ T8992] ? __do_sys_vfork+0x130/0x130 [ 286.719421][ T8992] ? rcu_read_lock_sched_held+0x5f/0x130 [ 286.725054][ T8992] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 286.731022][ T8992] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 286.736983][ T8992] do_syscall_64+0x2b/0x50 [ 286.741389][ T8992] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 286.747261][ T8992] RIP: 0033:0x7efc03e8a471 [ 286.751653][ T8992] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 286.771361][ T8992] RSP: 002b:00007ffe96d26c78 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 286.779759][ T8992] RAX: ffffffffffffffda RBX: 00007efc04f57700 RCX: 00007efc03e8a471 [ 286.787724][ T8992] RDX: 00007efc04f579d0 RSI: 00007efc04f572f0 RDI: 00000000003d0f00 21:01:24 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000000c0)=0x7ff) [ 286.795676][ T8992] RBP: 00007ffe96d26ec0 R08: 00007efc04f57700 R09: 00007efc04f57700 [ 286.803652][ T8992] R10: 00007efc04f579d0 R11: 0000000000000206 R12: 00007ffe96d26d2e [ 286.811934][ T8992] R13: 00007ffe96d26d2f R14: 00007efc04f57300 R15: 0000000000022000 [ 286.819898][ T8992] [ 286.831825][ T8992] memory: usage 307200kB, limit 307200kB, failcnt 1138 [ 286.838832][ T8992] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 286.846081][ T8992] Memory cgroup stats for /syz2: [ 286.846234][ T8992] anon 237568 [ 286.846234][ T8992] file 311402496 [ 286.846234][ T8992] kernel 2932736 [ 286.846234][ T8992] kernel_stack 65536 [ 286.846234][ T8992] pagetables 69632 [ 286.846234][ T8992] percpu 0 [ 286.846234][ T8992] sock 0 [ 286.846234][ T8992] vmalloc 0 [ 286.846234][ T8992] shmem 311398400 [ 286.846234][ T8992] file_mapped 94208 [ 286.846234][ T8992] file_dirty 4096 [ 286.846234][ T8992] file_writeback 0 [ 286.846234][ T8992] swapcached 0 [ 286.846234][ T8992] anon_thp 0 [ 286.846234][ T8992] file_thp 0 [ 286.846234][ T8992] shmem_thp 0 [ 286.846234][ T8992] inactive_anon 311492608 [ 286.846234][ T8992] active_anon 12288 [ 286.846234][ T8992] inactive_file 0 [ 286.846234][ T8992] active_file 4096 [ 286.846234][ T8992] unevictable 131072 [ 286.846234][ T8992] slab_reclaimable 1392672 [ 286.846234][ T8992] slab_unreclaimable 1341752 [ 286.846234][ T8992] slab 2734424 [ 286.846234][ T8992] workingset_refault_anon 0 21:01:25 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) [ 286.948337][ T8992] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=8992,uid=0 [ 286.999924][ T8992] Memory cgroup out of memory: Killed process 8992 (syz-executor.2) total-vm:50796kB, anon-rss:380kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 287.061359][ T29] oom_reaper: reaped process 8992 (syz-executor.2), now anon-rss:0kB, file-rss:7496kB, shmem-rss:0kB 21:01:25 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:01:25 executing program 1: unshare(0x0) 21:01:25 executing program 1: unshare(0x0) 21:01:25 executing program 1: unshare(0x0) [ 287.332476][ T9022] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 287.383698][ T9022] CPU: 1 PID: 9022 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 287.395187][ T9022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.405247][ T9022] Call Trace: [ 287.408540][ T9022] [ 287.411484][ T9022] dump_stack_lvl+0x201/0x2d8 [ 287.416169][ T9022] ? show_regs_print_info+0x12/0x12 [ 287.421373][ T9022] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 287.427098][ T9022] ? do_raw_spin_lock+0x151/0x8e0 21:01:25 executing program 1: unshare(0x40000000) [ 287.432129][ T9022] ? asan.module_dtor+0x20/0x20 [ 287.437006][ T9022] dump_header+0xdb/0x970 [ 287.441336][ T9022] oom_kill_process+0xf5/0x4d0 [ 287.446109][ T9022] out_of_memory+0x711/0xa70 [ 287.450705][ T9022] ? unregister_oom_notifier+0x20/0x20 [ 287.456156][ T9022] ? trace_lock_release+0x4f/0x150 [ 287.461271][ T9022] ? mem_cgroup_oom+0x47d/0x5f0 [ 287.466125][ T9022] ? lock_release+0x82/0x810 [ 287.470720][ T9022] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 287.476271][ T9022] ? __lock_acquire+0x2b00/0x2b00 [ 287.481298][ T9022] ? mem_cgroup_oom_trylock+0x220/0x220 [ 287.486850][ T9022] ? do_raw_spin_unlock+0x134/0x8a0 [ 287.492050][ T9022] ? mem_cgroup_iter+0x3c9/0x530 [ 287.496988][ T9022] mem_cgroup_oom+0x48d/0x5f0 [ 287.501668][ T9022] try_charge_memcg+0xdab/0x1110 [ 287.506608][ T9022] ? read_lock_is_recursive+0x10/0x10 [ 287.511987][ T9022] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 287.517971][ T9022] ? rcu_read_lock_sched_held+0x5f/0x130 [ 287.523637][ T9022] ? alloc_pages_vma+0x9aa/0x1150 [ 287.528665][ T9022] ? __folio_memcg+0x170/0x170 [ 287.533429][ T9022] ? rcu_lock_acquire+0x30/0x30 [ 287.538280][ T9022] ? trace_lock_release+0x4f/0x150 [ 287.543391][ T9022] ? rcu_lock_acquire+0x30/0x30 [ 287.548243][ T9022] ? lock_release+0x82/0x810 [ 287.552834][ T9022] ? shmem_alloc_and_acct_page+0x971/0x1230 [ 287.558740][ T9022] ? __lock_acquire+0x2b00/0x2b00 [ 287.563767][ T9022] ? lock_release+0x82/0x810 [ 287.568360][ T9022] charge_memcg+0x119/0x5d0 [ 287.572865][ T9022] ? __mem_cgroup_charge+0x80/0x80 [ 287.577980][ T9022] __mem_cgroup_charge+0x23/0x80 [ 287.582914][ T9022] shmem_add_to_page_cache+0x124a/0x1f30 [ 287.588562][ T9022] ? put_page+0x230/0x230 [ 287.592896][ T9022] ? mem_cgroup_swap_full+0x300/0x300 [ 287.598279][ T9022] ? do_raw_spin_unlock+0x134/0x8a0 [ 287.603488][ T9022] ? PageTransHuge+0xd9/0x2b0 [ 287.608173][ T9022] shmem_getpage_gfp+0x1884/0x30e0 [ 287.613299][ T9022] ? shmem_getpage+0xa0/0xa0 [ 287.617895][ T9022] ? __lock_acquire+0x2b00/0x2b00 [ 287.622932][ T9022] shmem_fault+0x1df/0x810 [ 287.627361][ T9022] ? shmem_fallocate+0xea0/0xea0 [ 287.632311][ T9022] ? count_memcg_event_mm+0x342/0x390 [ 287.637690][ T9022] ? follow_page_pte+0x343/0xc50 [ 287.642627][ T9022] ? pfn_swap_entry_to_page+0x310/0x310 [ 287.648180][ T9022] ? read_lock_is_recursive+0x10/0x10 [ 287.653570][ T9022] __do_fault+0x137/0x4e0 [ 287.657906][ T9022] handle_mm_fault+0x2c53/0x39e0 [ 287.662862][ T9022] ? numa_migrate_prep+0x250/0x250 [ 287.667986][ T9022] ? follow_page_mask+0xbac/0x1580 [ 287.673105][ T9022] ? find_vma+0xd2/0x230 [ 287.677358][ T9022] ? check_vma_flags+0x401/0x480 [ 287.682302][ T9022] __get_user_pages+0x4ed/0x1190 [ 287.687251][ T9022] ? populate_vma_page_range+0x2b0/0x2b0 [ 287.692884][ T9022] ? __down_read_common+0x1b0/0x450 [ 287.698092][ T9022] ? memset+0x1f/0x40 [ 287.702102][ T9022] populate_vma_page_range+0x217/0x2b0 [ 287.707562][ T9022] __mm_populate+0x2ea/0x4d0 [ 287.712154][ T9022] ? check_vma_flags+0x480/0x480 [ 287.717096][ T9022] do_shmat+0xab3/0xda0 [ 287.721258][ T9022] ? __ia32_compat_sys_old_shmctl+0x90/0x90 [ 287.727177][ T9022] ? rcu_read_lock_sched_held+0x5f/0x130 21:01:25 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 21:01:25 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) [ 287.732822][ T9022] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 287.738806][ T9022] ? rcu_read_lock_sched_held+0x5f/0x130 [ 287.744443][ T9022] __x64_sys_shmat+0x102/0x190 [ 287.749214][ T9022] ? shm_lock+0x190/0x190 [ 287.753548][ T9022] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 287.759531][ T9022] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 287.765521][ T9022] do_syscall_64+0x2b/0x50 [ 287.769942][ T9022] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 287.775840][ T9022] RIP: 0033:0x7efc03e89049 [ 287.780254][ T9022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 287.799861][ T9022] RSP: 002b:00007efc04f78168 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 287.808283][ T9022] RAX: ffffffffffffffda RBX: 00007efc03f9bf60 RCX: 00007efc03e89049 [ 287.816262][ T9022] RDX: 0000000000004000 RSI: 0000000020005000 RDI: 000000000000009c [ 287.824237][ T9022] RBP: 00007efc03ee308d R08: 0000000000000000 R09: 0000000000000000 21:01:26 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) [ 287.832214][ T9022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.840203][ T9022] R13: 00007ffe96d26d2f R14: 00007efc04f78300 R15: 0000000000022000 [ 287.848185][ T9022] [ 287.868769][ T9022] memory: usage 307128kB, limit 307200kB, failcnt 1187 21:01:26 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(0xffffffffffffffff) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x7ff) [ 287.906459][ T9022] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 287.948558][ T9022] Memory cgroup stats for /syz2: [ 287.948781][ T9022] anon 139264 [ 287.948781][ T9022] file 311513088 [ 287.948781][ T9022] kernel 2818048 [ 287.948781][ T9022] kernel_stack 65536 [ 287.948781][ T9022] pagetables 77824 [ 287.948781][ T9022] percpu 0 [ 287.948781][ T9022] sock 0 [ 287.948781][ T9022] vmalloc 0 [ 287.948781][ T9022] shmem 311508992 [ 287.948781][ T9022] file_mapped 204800 [ 287.948781][ T9022] file_dirty 4096 [ 287.948781][ T9022] file_writeback 0 [ 287.948781][ T9022] swapcached 0 [ 287.948781][ T9022] anon_thp 0 [ 287.948781][ T9022] file_thp 0 [ 287.948781][ T9022] shmem_thp 0 [ 287.948781][ T9022] inactive_anon 311525376 [ 287.948781][ T9022] active_anon 12288 [ 287.948781][ T9022] inactive_file 0 [ 287.948781][ T9022] active_file 4096 [ 287.948781][ T9022] unevictable 110592 [ 287.948781][ T9022] slab_reclaimable 1352552 [ 287.948781][ T9022] slab_unreclaimable 1288680 [ 287.948781][ T9022] slab 2641232 [ 287.948781][ T9022] workingset_refault_anon 0 [ 288.191493][ T9022] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=9021,uid=0 [ 288.225904][ T9022] Memory cgroup out of memory: Killed process 9021 (syz-executor.2) total-vm:54504kB, anon-rss:380kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 21:01:26 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) (async) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) (async) shmctl$SHM_UNLOCK(r0, 0xc) (async) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) (async) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) (async) shmctl$SHM_UNLOCK(r2, 0xc) (async) shmctl$IPC_RMID(0x0, 0x0) 21:01:26 executing program 1: unshare(0x40000000) [ 288.360035][ T9069] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 288.391458][ T9069] CPU: 0 PID: 9069 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 288.402947][ T9069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.413013][ T9069] Call Trace: [ 288.416297][ T9069] [ 288.419239][ T9069] dump_stack_lvl+0x201/0x2d8 [ 288.423925][ T9069] ? show_regs_print_info+0x12/0x12 [ 288.429136][ T9069] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 288.434860][ T9069] ? do_raw_spin_lock+0x151/0x8e0 [ 288.439890][ T9069] ? asan.module_dtor+0x20/0x20 [ 288.444746][ T9069] dump_header+0xdb/0x970 [ 288.449082][ T9069] oom_kill_process+0xf5/0x4d0 [ 288.453855][ T9069] out_of_memory+0x711/0xa70 [ 288.458451][ T9069] ? unregister_oom_notifier+0x20/0x20 [ 288.463912][ T9069] ? trace_lock_release+0x4f/0x150 [ 288.469025][ T9069] ? mem_cgroup_oom+0x47d/0x5f0 [ 288.473885][ T9069] ? lock_release+0x82/0x810 [ 288.478483][ T9069] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 288.484032][ T9069] ? __lock_acquire+0x2b00/0x2b00 [ 288.489057][ T9069] ? mem_cgroup_oom_trylock+0x220/0x220 [ 288.494612][ T9069] ? do_raw_spin_unlock+0x134/0x8a0 [ 288.499818][ T9069] ? mem_cgroup_iter+0x3c9/0x530 [ 288.504761][ T9069] mem_cgroup_oom+0x48d/0x5f0 [ 288.509442][ T9069] try_charge_memcg+0xdab/0x1110 [ 288.514377][ T9069] ? mem_cgroup_iter+0x3c9/0x530 [ 288.519315][ T9069] ? trace_lock_acquire+0x59/0x190 [ 288.524427][ T9069] ? __folio_memcg+0x170/0x170 [ 288.529192][ T9069] ? lock_release+0x82/0x810 [ 288.533776][ T9069] ? read_lock_is_recursive+0x10/0x10 [ 288.539150][ T9069] ? trace_lock_acquire+0x59/0x190 [ 288.544262][ T9069] ? trace_lock_release+0x4f/0x150 [ 288.549369][ T9069] ? rcu_lock_acquire+0x30/0x30 [ 288.554218][ T9069] ? lock_release+0x82/0x810 [ 288.558810][ T9069] obj_cgroup_charge+0x3b2/0x520 [ 288.563743][ T9069] ? __rcu_read_lock+0xb0/0xb0 [ 288.568505][ T9069] ? local_lock_release+0x120/0x120 [ 288.573704][ T9069] kmem_cache_alloc_node+0xc6/0x370 [ 288.578903][ T9069] ? copy_process+0x687/0x5ff0 [ 288.583666][ T9069] ? _raw_spin_unlock_irq+0x1f/0x40 [ 288.588865][ T9069] copy_process+0x687/0x5ff0 [ 288.593448][ T9069] ? psi_memstall_leave+0x1e1/0x2b0 [ 288.598651][ T9069] ? psi_memstall_leave+0x233/0x2b0 [ 288.603849][ T9069] ? trace_lock_release+0x4f/0x150 21:01:26 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) 21:01:26 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) [ 288.608959][ T9069] ? psi_memstall_leave+0x233/0x2b0 [ 288.614168][ T9069] ? lock_release+0x82/0x810 [ 288.618762][ T9069] ? pidfd_show_fdinfo+0x2e0/0x2e0 [ 288.623880][ T9069] ? print_irqtrace_events+0x220/0x220 [ 288.629340][ T9069] ? rcu_read_lock_sched_held+0x5f/0x130 [ 288.634983][ T9069] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 288.640965][ T9069] ? rcu_read_lock_sched_held+0x5f/0x130 [ 288.646607][ T9069] kernel_clone+0x22a/0x7e0 [ 288.651109][ T9069] ? trace_lock_acquire+0x59/0x190 [ 288.656221][ T9069] ? create_io_thread+0x1d0/0x1d0 [ 288.661245][ T9069] ? trace_lock_release+0x4f/0x150 [ 288.666367][ T9069] __x64_sys_clone+0x245/0x2b0 [ 288.671137][ T9069] ? __do_sys_vfork+0x130/0x130 [ 288.675990][ T9069] ? rcu_read_lock_sched_held+0x5f/0x130 [ 288.681627][ T9069] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 288.687617][ T9069] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 288.693602][ T9069] do_syscall_64+0x2b/0x50 [ 288.698026][ T9069] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 288.703926][ T9069] RIP: 0033:0x7efc03e8a471 [ 288.708346][ T9069] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 288.728307][ T9069] RSP: 002b:00007ffe96d26c78 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 288.736803][ T9069] RAX: ffffffffffffffda RBX: 00007efc04f57700 RCX: 00007efc03e8a471 [ 288.744779][ T9069] RDX: 00007efc04f579d0 RSI: 00007efc04f572f0 RDI: 00000000003d0f00 [ 288.752759][ T9069] RBP: 00007ffe96d26ec0 R08: 00007efc04f57700 R09: 00007efc04f57700 21:01:26 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(0xffffffffffffffff) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x7ff) [ 288.760742][ T9069] R10: 00007efc04f579d0 R11: 0000000000000206 R12: 00007ffe96d26d2e [ 288.768712][ T9069] R13: 00007ffe96d26d2f R14: 00007efc04f57300 R15: 0000000000022000 [ 288.776692][ T9069] [ 288.818183][ T9069] memory: usage 307196kB, limit 307200kB, failcnt 1227 [ 288.825825][ T9069] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 288.833453][ T9069] Memory cgroup stats for /syz2: [ 288.833607][ T9069] anon 237568 [ 288.833607][ T9069] file 311517184 [ 288.833607][ T9069] kernel 2813952 [ 288.833607][ T9069] kernel_stack 65536 [ 288.833607][ T9069] pagetables 69632 [ 288.833607][ T9069] percpu 0 [ 288.833607][ T9069] sock 0 [ 288.833607][ T9069] vmalloc 0 [ 288.833607][ T9069] shmem 311513088 [ 288.833607][ T9069] file_mapped 94208 [ 288.833607][ T9069] file_dirty 0 [ 288.833607][ T9069] file_writeback 0 [ 288.833607][ T9069] swapcached 0 [ 288.833607][ T9069] anon_thp 0 [ 288.833607][ T9069] file_thp 0 [ 288.833607][ T9069] shmem_thp 0 [ 288.833607][ T9069] inactive_anon 311607296 [ 288.833607][ T9069] active_anon 12288 [ 288.833607][ T9069] inactive_file 0 [ 288.833607][ T9069] active_file 4096 [ 288.833607][ T9069] unevictable 131072 [ 288.833607][ T9069] slab_reclaimable 1355512 [ 288.833607][ T9069] slab_unreclaimable 1288472 [ 288.833607][ T9069] slab 2643984 [ 288.833607][ T9069] workingset_refault_anon 0 21:01:27 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 289.104962][ T9069] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=9069,uid=0 [ 289.177549][ T9069] Memory cgroup out of memory: Killed process 9069 (syz-executor.2) total-vm:50796kB, anon-rss:380kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 21:01:27 executing program 2: mlockall(0x2) (async, rerun: 32) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) (async, rerun: 32) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) (async) shmctl$SHM_LOCK(0x0, 0xb) (async, rerun: 64) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (rerun: 64) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) (async) mlockall(0x7) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) (async) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:01:27 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 289.229290][ T29] oom_reaper: reaped process 9069 (syz-executor.2), now anon-rss:0kB, file-rss:8192kB, shmem-rss:4kB [ 289.364482][ T9111] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 289.379642][ T9111] CPU: 1 PID: 9111 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 289.391138][ T9111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.401194][ T9111] Call Trace: [ 289.404472][ T9111] [ 289.407402][ T9111] dump_stack_lvl+0x201/0x2d8 [ 289.412083][ T9111] ? show_regs_print_info+0x12/0x12 [ 289.417285][ T9111] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 289.423007][ T9111] ? do_raw_spin_lock+0x151/0x8e0 [ 289.428039][ T9111] ? asan.module_dtor+0x20/0x20 [ 289.432889][ T9111] dump_header+0xdb/0x970 [ 289.437221][ T9111] oom_kill_process+0xf5/0x4d0 [ 289.441985][ T9111] out_of_memory+0x711/0xa70 [ 289.446573][ T9111] ? unregister_oom_notifier+0x20/0x20 [ 289.452024][ T9111] ? trace_lock_release+0x4f/0x150 [ 289.457136][ T9111] ? mem_cgroup_oom+0x47d/0x5f0 [ 289.461986][ T9111] ? lock_release+0x82/0x810 [ 289.466579][ T9111] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 289.472121][ T9111] ? __lock_acquire+0x2b00/0x2b00 [ 289.477141][ T9111] ? mem_cgroup_oom_trylock+0x220/0x220 [ 289.482688][ T9111] ? do_raw_spin_unlock+0x134/0x8a0 [ 289.487888][ T9111] ? mem_cgroup_iter+0x3c9/0x530 [ 289.492824][ T9111] mem_cgroup_oom+0x48d/0x5f0 [ 289.497503][ T9111] try_charge_memcg+0xdab/0x1110 [ 289.502437][ T9111] ? read_lock_is_recursive+0x10/0x10 [ 289.507797][ T9111] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 289.513774][ T9111] ? rcu_read_lock_sched_held+0x5f/0x130 [ 289.519391][ T9111] ? alloc_pages_vma+0x9aa/0x1150 [ 289.524402][ T9111] ? __folio_memcg+0x170/0x170 [ 289.529151][ T9111] ? rcu_lock_acquire+0x30/0x30 [ 289.533983][ T9111] ? trace_lock_release+0x4f/0x150 [ 289.539085][ T9111] ? rcu_lock_acquire+0x30/0x30 [ 289.543936][ T9111] ? lock_release+0x82/0x810 [ 289.548520][ T9111] ? shmem_alloc_and_acct_page+0x971/0x1230 [ 289.554415][ T9111] ? __lock_acquire+0x2b00/0x2b00 [ 289.559418][ T9111] ? lock_release+0x82/0x810 [ 289.564003][ T9111] charge_memcg+0x119/0x5d0 [ 289.568492][ T9111] ? __mem_cgroup_charge+0x80/0x80 [ 289.573593][ T9111] __mem_cgroup_charge+0x23/0x80 [ 289.578518][ T9111] shmem_add_to_page_cache+0x124a/0x1f30 [ 289.584153][ T9111] ? put_page+0x230/0x230 [ 289.588478][ T9111] ? mem_cgroup_swap_full+0x300/0x300 [ 289.593840][ T9111] ? do_raw_spin_unlock+0x134/0x8a0 [ 289.599046][ T9111] ? PageTransHuge+0xd9/0x2b0 [ 289.603714][ T9111] shmem_getpage_gfp+0x1884/0x30e0 [ 289.608823][ T9111] ? shmem_getpage+0xa0/0xa0 [ 289.613400][ T9111] ? __lock_acquire+0x2b00/0x2b00 [ 289.618415][ T9111] shmem_fault+0x1df/0x810 [ 289.622824][ T9111] ? shmem_fallocate+0xea0/0xea0 [ 289.627743][ T9111] ? count_memcg_event_mm+0x342/0x390 [ 289.633099][ T9111] ? follow_page_pte+0x343/0xc50 [ 289.638017][ T9111] ? pfn_swap_entry_to_page+0x310/0x310 [ 289.643548][ T9111] ? read_lock_is_recursive+0x10/0x10 [ 289.648900][ T9111] __do_fault+0x137/0x4e0 [ 289.653214][ T9111] handle_mm_fault+0x2c53/0x39e0 [ 289.658143][ T9111] ? numa_migrate_prep+0x250/0x250 [ 289.663237][ T9111] ? follow_page_mask+0xbac/0x1580 [ 289.668329][ T9111] ? find_vma+0xd2/0x230 [ 289.672551][ T9111] ? check_vma_flags+0x401/0x480 [ 289.677471][ T9111] __get_user_pages+0x4ed/0x1190 [ 289.682411][ T9111] ? populate_vma_page_range+0x2b0/0x2b0 [ 289.688026][ T9111] ? __down_read_common+0x1b0/0x450 [ 289.693209][ T9111] ? memset+0x1f/0x40 [ 289.697174][ T9111] populate_vma_page_range+0x217/0x2b0 [ 289.702614][ T9111] __mm_populate+0x2ea/0x4d0 [ 289.707184][ T9111] ? check_vma_flags+0x480/0x480 [ 289.712114][ T9111] do_shmat+0xab3/0xda0 [ 289.716270][ T9111] ? __ia32_compat_sys_old_shmctl+0x90/0x90 [ 289.722155][ T9111] ? rcu_read_lock_sched_held+0x5f/0x130 [ 289.727783][ T9111] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 289.733757][ T9111] ? rcu_read_lock_sched_held+0x5f/0x130 [ 289.739400][ T9111] __x64_sys_shmat+0x102/0x190 [ 289.744161][ T9111] ? shm_lock+0x190/0x190 [ 289.748489][ T9111] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 289.754472][ T9111] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 289.760446][ T9111] do_syscall_64+0x2b/0x50 [ 289.764853][ T9111] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 289.770751][ T9111] RIP: 0033:0x7efc03e89049 [ 289.775273][ T9111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 289.794874][ T9111] RSP: 002b:00007efc04f78168 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 289.803283][ T9111] RAX: ffffffffffffffda RBX: 00007efc03f9bf60 RCX: 00007efc03e89049 [ 289.811241][ T9111] RDX: 0000000000004000 RSI: 0000000020005000 RDI: 000000000000009d [ 289.819196][ T9111] RBP: 00007efc03ee308d R08: 0000000000000000 R09: 0000000000000000 [ 289.827155][ T9111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.835130][ T9111] R13: 00007ffe96d26d2f R14: 00007efc04f78300 R15: 0000000000022000 [ 289.843221][ T9111] 21:01:28 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) [ 289.898734][ T9111] memory: usage 307180kB, limit 307200kB, failcnt 1297 [ 289.906442][ T9111] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 289.927067][ T9111] Memory cgroup stats for /syz2: [ 289.927246][ T9111] anon 114688 [ 289.927246][ T9111] file 311537664 [ 289.927246][ T9111] kernel 2899968 [ 289.927246][ T9111] kernel_stack 131072 [ 289.927246][ T9111] pagetables 77824 [ 289.927246][ T9111] percpu 0 [ 289.927246][ T9111] sock 0 [ 289.927246][ T9111] vmalloc 0 [ 289.927246][ T9111] shmem 311533568 [ 289.927246][ T9111] file_mapped 114688 [ 289.927246][ T9111] file_dirty 0 [ 289.927246][ T9111] file_writeback 0 [ 289.927246][ T9111] swapcached 0 [ 289.927246][ T9111] anon_thp 0 [ 289.927246][ T9111] file_thp 0 [ 289.927246][ T9111] shmem_thp 0 [ 289.927246][ T9111] inactive_anon 311615488 [ 289.927246][ T9111] active_anon 12288 [ 289.927246][ T9111] inactive_file 0 [ 289.927246][ T9111] active_file 4096 [ 289.927246][ T9111] unevictable 20480 [ 289.927246][ T9111] slab_reclaimable 1349272 [ 289.927246][ T9111] slab_unreclaimable 1306776 [ 289.927246][ T9111] slab 2656048 [ 289.927246][ T9111] workingset_refault_anon 0 21:01:28 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(0xffffffffffffffff) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x7ff) 21:01:28 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) [ 290.124743][ T9111] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=9110,uid=0 [ 290.184336][ T9111] Memory cgroup out of memory: Killed process 9110 (syz-executor.2) total-vm:50928kB, anon-rss:380kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 21:01:28 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 21:01:28 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 21:01:28 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) 21:01:28 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x7ff) 21:01:29 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) 21:01:29 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 21:01:29 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 21:01:29 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x7ff) 21:01:29 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x1) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:01:29 executing program 0: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) [ 291.523489][ T9193] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 291.584237][ T9193] CPU: 0 PID: 9193 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 291.595738][ T9193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.605802][ T9193] Call Trace: [ 291.609083][ T9193] [ 291.612013][ T9193] dump_stack_lvl+0x201/0x2d8 [ 291.616694][ T9193] ? show_regs_print_info+0x12/0x12 [ 291.621893][ T9193] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 291.627619][ T9193] ? do_raw_spin_lock+0x151/0x8e0 [ 291.632657][ T9193] ? asan.module_dtor+0x20/0x20 [ 291.637518][ T9193] dump_header+0xdb/0x970 [ 291.641855][ T9193] oom_kill_process+0xf5/0x4d0 [ 291.646623][ T9193] out_of_memory+0x711/0xa70 [ 291.651222][ T9193] ? unregister_oom_notifier+0x20/0x20 [ 291.656681][ T9193] ? trace_lock_release+0x4f/0x150 [ 291.661795][ T9193] ? mem_cgroup_oom+0x47d/0x5f0 [ 291.666647][ T9193] ? lock_release+0x82/0x810 [ 291.671258][ T9193] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 291.676897][ T9193] ? __lock_acquire+0x2b00/0x2b00 21:01:29 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) [ 291.681924][ T9193] ? mem_cgroup_oom_trylock+0x220/0x220 [ 291.687473][ T9193] ? do_raw_spin_unlock+0x134/0x8a0 [ 291.692683][ T9193] ? mem_cgroup_iter+0x3c9/0x530 [ 291.697629][ T9193] mem_cgroup_oom+0x48d/0x5f0 [ 291.702321][ T9193] try_charge_memcg+0xdab/0x1110 [ 291.707276][ T9193] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 291.713258][ T9193] ? rcu_read_lock_sched_held+0x5f/0x130 [ 291.718898][ T9193] ? alloc_pages_vma+0x9aa/0x1150 [ 291.723926][ T9193] ? __folio_memcg+0x170/0x170 [ 291.728702][ T9193] ? rcu_lock_acquire+0x30/0x30 [ 291.733589][ T9193] ? trace_lock_release+0x4f/0x150 [ 291.738704][ T9193] ? rcu_lock_acquire+0x30/0x30 [ 291.743558][ T9193] ? lock_release+0x82/0x810 [ 291.748158][ T9193] ? shmem_alloc_and_acct_page+0x971/0x1230 [ 291.754060][ T9193] ? __lock_acquire+0x2b00/0x2b00 [ 291.759087][ T9193] ? lock_release+0x82/0x810 [ 291.763680][ T9193] charge_memcg+0x119/0x5d0 [ 291.768187][ T9193] ? __mem_cgroup_charge+0x80/0x80 [ 291.773308][ T9193] __mem_cgroup_charge+0x23/0x80 [ 291.778249][ T9193] shmem_add_to_page_cache+0x124a/0x1f30 [ 291.783893][ T9193] ? put_page+0x230/0x230 [ 291.788226][ T9193] ? mem_cgroup_swap_full+0x300/0x300 [ 291.793593][ T9193] ? do_raw_spin_unlock+0x134/0x8a0 [ 291.798797][ T9193] ? PageTransHuge+0xd9/0x2b0 [ 291.803482][ T9193] shmem_getpage_gfp+0x1884/0x30e0 [ 291.808613][ T9193] ? shmem_getpage+0xa0/0xa0 [ 291.813208][ T9193] ? __lock_acquire+0x2b00/0x2b00 [ 291.818263][ T9193] shmem_fault+0x1df/0x810 [ 291.822693][ T9193] ? shmem_fallocate+0xea0/0xea0 [ 291.827639][ T9193] ? count_memcg_event_mm+0x342/0x390 21:01:30 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 291.833017][ T9193] ? follow_page_pte+0x343/0xc50 [ 291.837962][ T9193] ? pfn_swap_entry_to_page+0x310/0x310 [ 291.843516][ T9193] ? read_lock_is_recursive+0x10/0x10 [ 291.848901][ T9193] __do_fault+0x137/0x4e0 [ 291.853242][ T9193] handle_mm_fault+0x2c53/0x39e0 [ 291.858194][ T9193] ? numa_migrate_prep+0x250/0x250 [ 291.863311][ T9193] ? follow_page_mask+0xbac/0x1580 [ 291.868434][ T9193] ? find_vma+0xd2/0x230 [ 291.872680][ T9193] ? check_vma_flags+0x401/0x480 [ 291.877627][ T9193] __get_user_pages+0x4ed/0x1190 [ 291.882579][ T9193] ? populate_vma_page_range+0x2b0/0x2b0 [ 291.888217][ T9193] ? __down_read_common+0x1b0/0x450 [ 291.893421][ T9193] ? memset+0x1f/0x40 [ 291.897409][ T9193] populate_vma_page_range+0x217/0x2b0 [ 291.902880][ T9193] __mm_populate+0x2ea/0x4d0 [ 291.907479][ T9193] ? check_vma_flags+0x480/0x480 [ 291.912425][ T9193] do_shmat+0xab3/0xda0 [ 291.916595][ T9193] ? __ia32_compat_sys_old_shmctl+0x90/0x90 [ 291.922500][ T9193] ? rcu_read_lock_sched_held+0x5f/0x130 [ 291.928134][ T9193] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 291.934110][ T9193] ? rcu_read_lock_sched_held+0x5f/0x130 [ 291.939755][ T9193] __x64_sys_shmat+0x102/0x190 [ 291.944525][ T9193] ? shm_lock+0x190/0x190 [ 291.948864][ T9193] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 291.954846][ T9193] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 291.960832][ T9193] do_syscall_64+0x2b/0x50 [ 291.965253][ T9193] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 291.971153][ T9193] RIP: 0033:0x7efc03e89049 [ 291.975574][ T9193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 291.995181][ T9193] RSP: 002b:00007efc04f78168 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 292.003604][ T9193] RAX: ffffffffffffffda RBX: 00007efc03f9bf60 RCX: 00007efc03e89049 [ 292.011591][ T9193] RDX: 0000000000004000 RSI: 0000000020005000 RDI: 000000000000009e [ 292.019574][ T9193] RBP: 00007efc03ee308d R08: 0000000000000000 R09: 0000000000000000 [ 292.027817][ T9193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.035797][ T9193] R13: 00007ffe96d26d2f R14: 00007efc04f78300 R15: 0000000000022000 [ 292.043787][ T9193] [ 292.057836][ T9193] memory: usage 307040kB, limit 307200kB, failcnt 1335 [ 292.072237][ T9193] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 292.079384][ T9193] Memory cgroup stats for /syz2: [ 292.079556][ T9193] anon 139264 [ 292.079556][ T9193] file 311779328 [ 292.079556][ T9193] kernel 2490368 [ 292.079556][ T9193] kernel_stack 65536 [ 292.079556][ T9193] pagetables 77824 [ 292.079556][ T9193] percpu 0 [ 292.079556][ T9193] sock 0 [ 292.079556][ T9193] vmalloc 0 [ 292.079556][ T9193] shmem 311775232 [ 292.079556][ T9193] file_mapped 331776 [ 292.079556][ T9193] file_dirty 4096 [ 292.079556][ T9193] file_writeback 0 [ 292.079556][ T9193] swapcached 0 [ 292.079556][ T9193] anon_thp 0 [ 292.079556][ T9193] file_thp 0 [ 292.079556][ T9193] shmem_thp 0 [ 292.079556][ T9193] inactive_anon 311664640 [ 292.079556][ T9193] active_anon 12288 [ 292.079556][ T9193] inactive_file 0 [ 292.079556][ T9193] active_file 4096 [ 292.079556][ T9193] unevictable 237568 [ 292.079556][ T9193] slab_reclaimable 1232640 [ 292.079556][ T9193] slab_unreclaimable 1080888 [ 292.079556][ T9193] slab 2313528 [ 292.079556][ T9193] workingset_refault_anon 0 [ 292.185916][ T9193] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=9192,uid=0 [ 292.221355][ T9193] Memory cgroup out of memory: Killed process 9192 (syz-executor.2) total-vm:54504kB, anon-rss:380kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 21:01:30 executing program 0: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) 21:01:30 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x7ff) 21:01:30 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) 21:01:30 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) (async) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) (async) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) (async, rerun: 64) shmctl$SHM_UNLOCK(r0, 0xc) (rerun: 64) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) (async) mlockall(0x1) shmctl$SHM_LOCK(0x0, 0xb) (async) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) (async) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) (async) shmctl$SHM_UNLOCK(r2, 0xc) (async) shmctl$IPC_RMID(0x0, 0x0) 21:01:30 executing program 0: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) [ 292.591094][ T9226] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 292.666657][ T9226] CPU: 0 PID: 9226 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 292.678143][ T9226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.688203][ T9226] Call Trace: [ 292.691489][ T9226] [ 292.694417][ T9226] dump_stack_lvl+0x201/0x2d8 [ 292.699098][ T9226] ? show_regs_print_info+0x12/0x12 [ 292.704302][ T9226] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 292.710024][ T9226] ? do_raw_spin_lock+0x151/0x8e0 [ 292.715055][ T9226] ? asan.module_dtor+0x20/0x20 [ 292.719907][ T9226] dump_header+0xdb/0x970 [ 292.724248][ T9226] oom_kill_process+0xf5/0x4d0 [ 292.729015][ T9226] out_of_memory+0x711/0xa70 [ 292.733604][ T9226] ? unregister_oom_notifier+0x20/0x20 [ 292.739061][ T9226] ? trace_lock_release+0x4f/0x150 [ 292.744169][ T9226] ? mem_cgroup_oom+0x47d/0x5f0 [ 292.749020][ T9226] ? lock_release+0x82/0x810 [ 292.753612][ T9226] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 292.759156][ T9226] ? __lock_acquire+0x2b00/0x2b00 [ 292.764177][ T9226] ? mem_cgroup_oom_trylock+0x220/0x220 [ 292.769743][ T9226] ? do_raw_spin_unlock+0x134/0x8a0 [ 292.774935][ T9226] ? mem_cgroup_iter+0x3c9/0x530 [ 292.779862][ T9226] mem_cgroup_oom+0x48d/0x5f0 [ 292.784534][ T9226] try_charge_memcg+0xdab/0x1110 [ 292.789468][ T9226] ? __set_page_owner+0x3b4/0x3d0 [ 292.794481][ T9226] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 292.800461][ T9226] ? rcu_read_lock_sched_held+0x5f/0x130 [ 292.806111][ T9226] ? __folio_memcg+0x170/0x170 [ 292.810880][ T9226] ? rcu_lock_acquire+0x30/0x30 [ 292.815714][ T9226] ? trace_lock_release+0x4f/0x150 [ 292.820825][ T9226] ? rcu_lock_acquire+0x30/0x30 [ 292.825661][ T9226] ? lock_release+0x82/0x810 [ 292.830237][ T9226] ? trace_lock_release+0x4f/0x150 [ 292.835331][ T9226] ? __lock_acquire+0x2b00/0x2b00 [ 292.840338][ T9226] charge_memcg+0x119/0x5d0 [ 292.844834][ T9226] ? __mem_cgroup_charge+0x80/0x80 [ 292.849950][ T9226] __mem_cgroup_charge+0x23/0x80 [ 292.854911][ T9226] do_anonymous_page+0x393/0x10c0 [ 292.859928][ T9226] ? pfn_swap_entry_to_page+0x310/0x310 [ 292.865464][ T9226] ? fault_around_bytes_set+0xb0/0xb0 [ 292.870824][ T9226] handle_mm_fault+0x1dc9/0x39e0 [ 292.875770][ T9226] ? numa_migrate_prep+0x250/0x250 [ 292.880879][ T9226] ? follow_page_mask+0xbac/0x1580 [ 292.885972][ T9226] ? find_vma+0xd2/0x230 [ 292.890195][ T9226] ? check_vma_flags+0x433/0x480 [ 292.895114][ T9226] __get_user_pages+0x4ed/0x1190 [ 292.900044][ T9226] ? populate_vma_page_range+0x2b0/0x2b0 [ 292.905658][ T9226] ? asan.module_dtor+0x20/0x20 [ 292.910491][ T9226] ? vm_get_page_prot+0xb0/0xb0 [ 292.915325][ T9226] populate_vma_page_range+0x217/0x2b0 [ 292.920763][ T9226] mprotect_fixup+0x637/0x880 [ 292.925426][ T9226] ? change_protection+0xdd0/0xdd0 [ 292.930519][ T9226] ? vmacache_find+0x228/0x5d0 [ 292.935267][ T9226] ? bpf_lsm_file_mprotect+0x5/0x10 [ 292.940449][ T9226] ? security_file_mprotect+0xae/0xd0 [ 292.945806][ T9226] do_mprotect_pkey+0x79e/0xa20 [ 292.950641][ T9226] ? prot_none_test+0x10/0x10 [ 292.955297][ T9226] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 292.961259][ T9226] __x64_sys_mprotect+0x7c/0x90 [ 292.966089][ T9226] do_syscall_64+0x2b/0x50 [ 292.970488][ T9226] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 292.976363][ T9226] RIP: 0033:0x7efc03e89157 [ 292.980760][ T9226] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 293.000347][ T9226] RSP: 002b:00007ffe96d26cc8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 293.008741][ T9226] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007efc03e89157 21:01:31 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 21:01:31 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) [ 293.016695][ T9226] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007efc04f38000 [ 293.024644][ T9226] RBP: 00007ffe96d26da0 R08: 00000000ffffffff R09: 00007efc04f57700 [ 293.032597][ T9226] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffe96d26ec0 [ 293.040547][ T9226] R13: 00007efc04f57700 R14: 0000000000000000 R15: 0000000000022000 [ 293.048514][ T9226] [ 293.116613][ T9226] memory: usage 307188kB, limit 307200kB, failcnt 1381 [ 293.137592][ T9226] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 293.145485][ T9226] Memory cgroup stats for /syz2: [ 293.146491][ T9226] anon 200704 [ 293.146491][ T9226] file 311783424 [ 293.146491][ T9226] kernel 2576384 [ 293.146491][ T9226] kernel_stack 65536 [ 293.146491][ T9226] pagetables 69632 [ 293.146491][ T9226] percpu 0 [ 293.146491][ T9226] sock 0 [ 293.146491][ T9226] vmalloc 0 [ 293.146491][ T9226] shmem 311779328 [ 293.146491][ T9226] file_mapped 94208 [ 293.146491][ T9226] file_dirty 4096 [ 293.146491][ T9226] file_writeback 0 [ 293.146491][ T9226] swapcached 0 [ 293.146491][ T9226] anon_thp 0 [ 293.146491][ T9226] file_thp 0 [ 293.146491][ T9226] shmem_thp 0 [ 293.146491][ T9226] inactive_anon 311873536 [ 293.146491][ T9226] active_anon 12288 [ 293.146491][ T9226] inactive_file 0 [ 293.146491][ T9226] active_file 4096 [ 293.146491][ T9226] unevictable 94208 [ 293.146491][ T9226] slab_reclaimable 1276816 [ 293.146491][ T9226] slab_unreclaimable 1128288 [ 293.146491][ T9226] slab 2405104 [ 293.146491][ T9226] workingset_refault_anon 0 [ 293.243814][ T9226] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=9226,uid=0 [ 293.260422][ T9226] Memory cgroup out of memory: Killed process 9226 (syz-executor.2) total-vm:50796kB, anon-rss:380kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 21:01:31 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) 21:01:31 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x1) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) mlockall(0x2) (async) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) (async) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async) shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) (async) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) (async) shmctl$SHM_UNLOCK(r0, 0xc) (async) shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) (async) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) (async) mlockall(0x1) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) (async) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) (async) shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) (async) shmctl$SHM_UNLOCK(0x0, 0xc) (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) (async) shmctl$SHM_UNLOCK(r2, 0xc) (async) shmctl$IPC_RMID(0x0, 0x0) (async) [ 293.373411][ T29] oom_reaper: reaped process 9226 (syz-executor.2), now anon-rss:0kB, file-rss:8192kB, shmem-rss:4kB 21:01:31 executing program 0: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) 21:01:31 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x7ff) [ 293.505615][ T9243] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 293.537171][ T9243] CPU: 1 PID: 9243 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 293.548654][ T9243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 293.558707][ T9243] Call Trace: [ 293.561983][ T9243] [ 293.564909][ T9243] dump_stack_lvl+0x201/0x2d8 [ 293.569598][ T9243] ? show_regs_print_info+0x12/0x12 [ 293.574788][ T9243] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 293.580490][ T9243] ? do_raw_spin_lock+0x151/0x8e0 [ 293.585498][ T9243] ? asan.module_dtor+0x20/0x20 [ 293.590332][ T9243] dump_header+0xdb/0x970 [ 293.594651][ T9243] oom_kill_process+0xf5/0x4d0 [ 293.599398][ T9243] out_of_memory+0x711/0xa70 [ 293.603974][ T9243] ? unregister_oom_notifier+0x20/0x20 [ 293.609413][ T9243] ? trace_lock_release+0x4f/0x150 [ 293.614508][ T9243] ? mem_cgroup_oom+0x47d/0x5f0 [ 293.619364][ T9243] ? lock_release+0x82/0x810 [ 293.623935][ T9243] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 293.629461][ T9243] ? __lock_acquire+0x2b00/0x2b00 [ 293.634466][ T9243] ? mem_cgroup_oom_trylock+0x220/0x220 [ 293.640003][ T9243] ? do_raw_spin_unlock+0x134/0x8a0 [ 293.645186][ T9243] ? mem_cgroup_iter+0x3c9/0x530 [ 293.650132][ T9243] mem_cgroup_oom+0x48d/0x5f0 [ 293.654793][ T9243] try_charge_memcg+0xdab/0x1110 [ 293.659716][ T9243] ? read_lock_is_recursive+0x10/0x10 [ 293.665073][ T9243] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 293.671035][ T9243] ? rcu_read_lock_sched_held+0x5f/0x130 [ 293.676654][ T9243] ? alloc_pages_vma+0x9aa/0x1150 [ 293.681664][ T9243] ? __folio_memcg+0x170/0x170 [ 293.686412][ T9243] ? rcu_lock_acquire+0x30/0x30 [ 293.691244][ T9243] ? trace_lock_release+0x4f/0x150 [ 293.696338][ T9243] ? rcu_lock_acquire+0x30/0x30 [ 293.701169][ T9243] ? lock_release+0x82/0x810 [ 293.705739][ T9243] ? shmem_alloc_and_acct_page+0x971/0x1230 [ 293.711617][ T9243] ? __lock_acquire+0x2b00/0x2b00 [ 293.716622][ T9243] ? lock_release+0x82/0x810 [ 293.721190][ T9243] charge_memcg+0x119/0x5d0 [ 293.725677][ T9243] ? __mem_cgroup_charge+0x80/0x80 [ 293.730774][ T9243] __mem_cgroup_charge+0x23/0x80 [ 293.735710][ T9243] shmem_add_to_page_cache+0x124a/0x1f30 [ 293.741341][ T9243] ? put_page+0x230/0x230 [ 293.745678][ T9243] ? mem_cgroup_swap_full+0x300/0x300 [ 293.751044][ T9243] ? do_raw_spin_unlock+0x134/0x8a0 [ 293.756252][ T9243] ? PageTransHuge+0xd9/0x2b0 [ 293.760931][ T9243] shmem_getpage_gfp+0x1884/0x30e0 [ 293.766057][ T9243] ? shmem_getpage+0xa0/0xa0 [ 293.770648][ T9243] ? __lock_acquire+0x2b00/0x2b00 [ 293.775662][ T9243] shmem_fault+0x1df/0x810 [ 293.780071][ T9243] ? shmem_fallocate+0xea0/0xea0 [ 293.785003][ T9243] ? count_memcg_event_mm+0x342/0x390 [ 293.790374][ T9243] ? follow_page_pte+0x343/0xc50 [ 293.795296][ T9243] ? pfn_swap_entry_to_page+0x310/0x310 [ 293.800821][ T9243] ? read_lock_is_recursive+0x10/0x10 [ 293.806365][ T9243] __do_fault+0x137/0x4e0 [ 293.810684][ T9243] handle_mm_fault+0x2c53/0x39e0 [ 293.815611][ T9243] ? numa_migrate_prep+0x250/0x250 [ 293.820720][ T9243] ? follow_page_mask+0xbac/0x1580 [ 293.825815][ T9243] ? find_vma+0xd2/0x230 [ 293.830040][ T9243] ? check_vma_flags+0x401/0x480 [ 293.834962][ T9243] __get_user_pages+0x4ed/0x1190 [ 293.839887][ T9243] ? populate_vma_page_range+0x2b0/0x2b0 [ 293.845502][ T9243] ? __down_read_common+0x1b0/0x450 [ 293.850686][ T9243] ? memset+0x1f/0x40 [ 293.854654][ T9243] populate_vma_page_range+0x217/0x2b0 [ 293.860099][ T9243] __mm_populate+0x2ea/0x4d0 [ 293.864671][ T9243] ? check_vma_flags+0x480/0x480 [ 293.869594][ T9243] do_shmat+0xab3/0xda0 [ 293.873758][ T9243] ? __ia32_compat_sys_old_shmctl+0x90/0x90 [ 293.879648][ T9243] ? rcu_read_lock_sched_held+0x5f/0x130 [ 293.885277][ T9243] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 293.891238][ T9243] ? rcu_read_lock_sched_held+0x5f/0x130 [ 293.896850][ T9243] __x64_sys_shmat+0x102/0x190 [ 293.901598][ T9243] ? shm_lock+0x190/0x190 [ 293.905911][ T9243] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 293.911888][ T9243] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 293.917850][ T9243] do_syscall_64+0x2b/0x50 [ 293.922248][ T9243] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 293.928123][ T9243] RIP: 0033:0x7efc03e89049 [ 293.932523][ T9243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 293.952108][ T9243] RSP: 002b:00007efc04f78168 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 293.960504][ T9243] RAX: ffffffffffffffda RBX: 00007efc03f9bf60 RCX: 00007efc03e89049 [ 293.968456][ T9243] RDX: 0000000000004000 RSI: 0000000020005000 RDI: 000000000000009f [ 293.976408][ T9243] RBP: 00007efc03ee308d R08: 0000000000000000 R09: 0000000000000000 [ 293.984366][ T9243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.992315][ T9243] R13: 00007ffe96d26d2f R14: 00007efc04f78300 R15: 0000000000022000 [ 294.000272][ T9243] 21:01:32 executing program 0: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) 21:01:32 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) 21:01:32 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 21:01:32 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) 21:01:32 executing program 0: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) 21:01:32 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x7ff) [ 294.830011][ T9243] memory: usage 307004kB, limit 307200kB, failcnt 1433 [ 294.857058][ T9243] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 294.876686][ T9243] Memory cgroup stats for /syz2: [ 294.876883][ T9243] anon 106496 [ 294.876883][ T9243] file 311873536 [ 294.876883][ T9243] kernel 2392064 [ 294.876883][ T9243] kernel_stack 65536 [ 294.876883][ T9243] pagetables 77824 [ 294.876883][ T9243] percpu 0 [ 294.876883][ T9243] sock 0 [ 294.876883][ T9243] vmalloc 0 [ 294.876883][ T9243] shmem 311869440 [ 294.876883][ T9243] file_mapped 184320 [ 294.876883][ T9243] file_dirty 4096 [ 294.876883][ T9243] file_writeback 0 [ 294.876883][ T9243] swapcached 0 [ 294.876883][ T9243] anon_thp 0 [ 294.876883][ T9243] file_thp 0 [ 294.876883][ T9243] shmem_thp 0 [ 294.876883][ T9243] inactive_anon 311873536 [ 294.876883][ T9243] active_anon 12288 [ 294.876883][ T9243] inactive_file 0 [ 294.876883][ T9243] active_file 4096 [ 294.876883][ T9243] unevictable 90112 [ 294.876883][ T9243] slab_reclaimable 1191752 [ 294.876883][ T9243] slab_unreclaimable 1023576 [ 294.876883][ T9243] slab 2215328 [ 294.876883][ T9243] workingset_refault_anon 0 21:01:33 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) 21:01:33 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) 21:01:33 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 295.270505][ T9243] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=9242,uid=0 [ 295.341576][ T9243] Memory cgroup out of memory: Killed process 9242 (syz-executor.2) total-vm:50664kB, anon-rss:380kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 21:01:33 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x1, 0x2000, 0x80, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) 21:01:33 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) [ 295.673207][ T9291] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 295.704579][ T9291] CPU: 0 PID: 9291 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 295.716076][ T9291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 295.726139][ T9291] Call Trace: [ 295.729430][ T9291] [ 295.732369][ T9291] dump_stack_lvl+0x201/0x2d8 [ 295.737062][ T9291] ? show_regs_print_info+0x12/0x12 [ 295.742278][ T9291] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 295.748018][ T9291] ? do_raw_spin_lock+0x151/0x8e0 [ 295.753056][ T9291] ? asan.module_dtor+0x20/0x20 [ 295.757912][ T9291] dump_header+0xdb/0x970 [ 295.762234][ T9291] oom_kill_process+0xf5/0x4d0 [ 295.767075][ T9291] out_of_memory+0x711/0xa70 [ 295.771652][ T9291] ? unregister_oom_notifier+0x20/0x20 [ 295.777090][ T9291] ? trace_lock_release+0x4f/0x150 [ 295.782183][ T9291] ? mem_cgroup_oom+0x47d/0x5f0 [ 295.787014][ T9291] ? lock_release+0x82/0x810 [ 295.791587][ T9291] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 295.797133][ T9291] ? __lock_acquire+0x2b00/0x2b00 [ 295.802151][ T9291] ? mem_cgroup_oom_trylock+0x220/0x220 [ 295.807695][ T9291] ? do_raw_spin_unlock+0x134/0x8a0 [ 295.812877][ T9291] ? mem_cgroup_iter+0x3c9/0x530 [ 295.817804][ T9291] mem_cgroup_oom+0x48d/0x5f0 [ 295.822470][ T9291] try_charge_memcg+0xdab/0x1110 [ 295.827392][ T9291] ? finish_lock_switch+0x1c0/0x350 [ 295.832575][ T9291] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 295.838542][ T9291] ? rcu_read_lock_sched_held+0x5f/0x130 [ 295.844158][ T9291] ? alloc_pages_vma+0x9aa/0x1150 [ 295.849169][ T9291] ? __folio_memcg+0x170/0x170 [ 295.853914][ T9291] ? rcu_lock_acquire+0x30/0x30 [ 295.858771][ T9291] ? trace_lock_release+0x4f/0x150 [ 295.863864][ T9291] ? rcu_lock_acquire+0x30/0x30 [ 295.868698][ T9291] ? lock_release+0x82/0x810 [ 295.873273][ T9291] ? shmem_alloc_and_acct_page+0x971/0x1230 [ 295.879154][ T9291] ? __lock_acquire+0x2b00/0x2b00 [ 295.884159][ T9291] ? lock_release+0x82/0x810 [ 295.888731][ T9291] charge_memcg+0x119/0x5d0 [ 295.893219][ T9291] ? __mem_cgroup_charge+0x80/0x80 [ 295.898324][ T9291] __mem_cgroup_charge+0x23/0x80 [ 295.903297][ T9291] shmem_add_to_page_cache+0x124a/0x1f30 [ 295.908937][ T9291] ? put_page+0x230/0x230 [ 295.913273][ T9291] ? mem_cgroup_swap_full+0x300/0x300 [ 295.918652][ T9291] ? do_raw_spin_unlock+0x134/0x8a0 [ 295.923879][ T9291] ? PageTransHuge+0xd9/0x2b0 [ 295.928552][ T9291] shmem_getpage_gfp+0x1884/0x30e0 [ 295.933757][ T9291] ? shmem_getpage+0xa0/0xa0 [ 295.938361][ T9291] ? __lock_acquire+0x2b00/0x2b00 [ 295.943394][ T9291] shmem_fault+0x1df/0x810 [ 295.947814][ T9291] ? shmem_fallocate+0xea0/0xea0 [ 295.952756][ T9291] ? count_memcg_event_mm+0x342/0x390 [ 295.958130][ T9291] ? follow_page_pte+0x343/0xc50 [ 295.963099][ T9291] ? pfn_swap_entry_to_page+0x310/0x310 [ 295.968648][ T9291] ? read_lock_is_recursive+0x10/0x10 [ 295.974036][ T9291] __do_fault+0x137/0x4e0 [ 295.978364][ T9291] handle_mm_fault+0x2c53/0x39e0 [ 295.983326][ T9291] ? numa_migrate_prep+0x250/0x250 [ 295.988446][ T9291] ? follow_page_mask+0xbac/0x1580 [ 295.993587][ T9291] ? find_vma+0xd2/0x230 [ 295.997842][ T9291] ? check_vma_flags+0x401/0x480 [ 296.002782][ T9291] __get_user_pages+0x4ed/0x1190 [ 296.007737][ T9291] ? populate_vma_page_range+0x2b0/0x2b0 [ 296.013388][ T9291] ? __down_read_common+0x1b0/0x450 [ 296.019804][ T9291] ? memset+0x1f/0x40 [ 296.023776][ T9291] populate_vma_page_range+0x217/0x2b0 [ 296.029398][ T9291] __mm_populate+0x2ea/0x4d0 [ 296.033974][ T9291] ? check_vma_flags+0x480/0x480 [ 296.038900][ T9291] do_shmat+0xab3/0xda0 [ 296.043045][ T9291] ? __ia32_compat_sys_old_shmctl+0x90/0x90 [ 296.048947][ T9291] ? rcu_read_lock_sched_held+0x5f/0x130 [ 296.054566][ T9291] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 296.060527][ T9291] ? rcu_read_lock_sched_held+0x5f/0x130 [ 296.066141][ T9291] __x64_sys_shmat+0x102/0x190 [ 296.070894][ T9291] ? shm_lock+0x190/0x190 [ 296.075207][ T9291] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 296.081172][ T9291] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 296.087137][ T9291] do_syscall_64+0x2b/0x50 [ 296.091538][ T9291] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 296.097416][ T9291] RIP: 0033:0x7efc03e89049 [ 296.101814][ T9291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 296.121407][ T9291] RSP: 002b:00007efc04f78168 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 296.129819][ T9291] RAX: ffffffffffffffda RBX: 00007efc03f9bf60 RCX: 00007efc03e89049 [ 296.137903][ T9291] RDX: 0000000000004000 RSI: 0000000020005000 RDI: 00000000000000a0 [ 296.145870][ T9291] RBP: 00007efc03ee308d R08: 0000000000000000 R09: 0000000000000000 [ 296.153828][ T9291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.161785][ T9291] R13: 00007ffe96d26d2f R14: 00007efc04f78300 R15: 0000000000022000 [ 296.169749][ T9291] 21:01:34 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x7ff) 21:01:34 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) 21:01:34 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) [ 296.188030][ T9291] memory: usage 307156kB, limit 307200kB, failcnt 1460 [ 296.195734][ T9291] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 296.254963][ T9291] Memory cgroup stats for /syz2: [ 296.255143][ T9291] anon 139264 [ 296.255143][ T9291] file 311988224 [ 296.255143][ T9291] kernel 2387968 [ 296.255143][ T9291] kernel_stack 65536 [ 296.255143][ T9291] pagetables 77824 [ 296.255143][ T9291] percpu 0 [ 296.255143][ T9291] sock 0 [ 296.255143][ T9291] vmalloc 0 [ 296.255143][ T9291] shmem 311984128 [ 296.255143][ T9291] file_mapped 204800 [ 296.255143][ T9291] file_dirty 4096 [ 296.255143][ T9291] file_writeback 0 [ 296.255143][ T9291] swapcached 0 21:01:34 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) 21:01:34 executing program 3: unshare(0x40000000) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 296.255143][ T9291] anon_thp 0 [ 296.255143][ T9291] file_thp 0 [ 296.255143][ T9291] shmem_thp 0 [ 296.255143][ T9291] inactive_anon 312000512 [ 296.255143][ T9291] active_anon 12288 [ 296.255143][ T9291] inactive_file 0 [ 296.255143][ T9291] active_file 4096 [ 296.255143][ T9291] unevictable 110592 [ 296.255143][ T9291] slab_reclaimable 1181776 [ 296.255143][ T9291] slab_unreclaimable 1030040 [ 296.255143][ T9291] slab 2211816 [ 296.255143][ T9291] workingset_refault_anon 0 21:01:34 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) 21:01:34 executing program 3: unshare(0x40000000) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 296.637787][ T9291] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=9289,uid=0 [ 296.713177][ T9291] Memory cgroup out of memory: Killed process 9289 (syz-executor.2) total-vm:54504kB, anon-rss:380kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 21:01:34 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget(0x1, 0x2000, 0x80, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) mlockall(0x2) (async) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) (async) shmget(0x1, 0x2000, 0x80, &(0x7f00003a3000/0x2000)=nil) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async) shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) (async) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) (async) shmctl$SHM_UNLOCK(r0, 0xc) (async) shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) (async) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) (async) mlockall(0x7) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) (async) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) (async) shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) (async) shmctl$SHM_UNLOCK(0x0, 0xc) (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) (async) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) (async) shmctl$SHM_UNLOCK(r2, 0xc) (async) shmctl$IPC_RMID(0x0, 0x0) (async) [ 296.786608][ T29] oom_reaper: reaped process 9289 (syz-executor.2), now anon-rss:0kB, file-rss:8192kB, shmem-rss:4kB 21:01:35 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 21:01:35 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x7ff) [ 296.915346][ T9330] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 296.925787][ T9330] CPU: 0 PID: 9330 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 296.937258][ T9330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.947321][ T9330] Call Trace: [ 296.950603][ T9330] [ 296.953538][ T9330] dump_stack_lvl+0x201/0x2d8 [ 296.958225][ T9330] ? show_regs_print_info+0x12/0x12 [ 296.963429][ T9330] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 296.969154][ T9330] ? do_raw_spin_lock+0x151/0x8e0 [ 296.974201][ T9330] ? asan.module_dtor+0x20/0x20 [ 296.979062][ T9330] dump_header+0xdb/0x970 [ 296.983401][ T9330] oom_kill_process+0xf5/0x4d0 [ 296.988171][ T9330] out_of_memory+0x711/0xa70 [ 296.992857][ T9330] ? unregister_oom_notifier+0x20/0x20 [ 296.998314][ T9330] ? trace_lock_release+0x4f/0x150 [ 297.003423][ T9330] ? mem_cgroup_oom+0x47d/0x5f0 [ 297.008271][ T9330] ? lock_release+0x82/0x810 [ 297.013216][ T9330] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 297.018760][ T9330] ? __lock_acquire+0x2b00/0x2b00 [ 297.023921][ T9330] ? mem_cgroup_oom_trylock+0x220/0x220 [ 297.029450][ T9330] ? do_raw_spin_unlock+0x134/0x8a0 [ 297.034762][ T9330] ? mem_cgroup_iter+0x3c9/0x530 [ 297.039744][ T9330] mem_cgroup_oom+0x48d/0x5f0 [ 297.044420][ T9330] try_charge_memcg+0xdab/0x1110 [ 297.049357][ T9330] ? read_lock_is_recursive+0x10/0x10 [ 297.054741][ T9330] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 297.060721][ T9330] ? rcu_read_lock_sched_held+0x5f/0x130 [ 297.066367][ T9330] ? alloc_pages_vma+0x9aa/0x1150 [ 297.071440][ T9330] ? __folio_memcg+0x170/0x170 [ 297.076224][ T9330] ? rcu_lock_acquire+0x30/0x30 [ 297.081076][ T9330] ? trace_lock_release+0x4f/0x150 [ 297.086193][ T9330] ? rcu_lock_acquire+0x30/0x30 [ 297.091044][ T9330] ? lock_release+0x82/0x810 [ 297.095643][ T9330] ? shmem_alloc_and_acct_page+0x971/0x1230 [ 297.101542][ T9330] ? __lock_acquire+0x2b00/0x2b00 [ 297.106563][ T9330] ? lock_release+0x82/0x810 [ 297.111156][ T9330] charge_memcg+0x119/0x5d0 [ 297.115663][ T9330] ? __mem_cgroup_charge+0x80/0x80 [ 297.120778][ T9330] __mem_cgroup_charge+0x23/0x80 [ 297.125718][ T9330] shmem_add_to_page_cache+0x124a/0x1f30 [ 297.131369][ T9330] ? put_page+0x230/0x230 [ 297.135709][ T9330] ? mem_cgroup_swap_full+0x300/0x300 [ 297.141081][ T9330] ? do_raw_spin_unlock+0x134/0x8a0 [ 297.146283][ T9330] ? PageTransHuge+0xd9/0x2b0 [ 297.150967][ T9330] shmem_getpage_gfp+0x1884/0x30e0 [ 297.156092][ T9330] ? shmem_getpage+0xa0/0xa0 [ 297.160674][ T9330] ? __lock_acquire+0x2b00/0x2b00 [ 297.165693][ T9330] shmem_fault+0x1df/0x810 [ 297.170094][ T9330] ? shmem_fallocate+0xea0/0xea0 [ 297.175014][ T9330] ? count_memcg_event_mm+0x342/0x390 [ 297.180385][ T9330] ? follow_page_pte+0x343/0xc50 [ 297.185304][ T9330] ? pfn_swap_entry_to_page+0x310/0x310 [ 297.190836][ T9330] ? read_lock_is_recursive+0x10/0x10 [ 297.196194][ T9330] __do_fault+0x137/0x4e0 [ 297.200525][ T9330] handle_mm_fault+0x2c53/0x39e0 [ 297.205448][ T9330] ? numa_migrate_prep+0x250/0x250 [ 297.210540][ T9330] ? follow_page_mask+0xbac/0x1580 [ 297.215639][ T9330] ? find_vma+0xd2/0x230 [ 297.219872][ T9330] ? check_vma_flags+0x401/0x480 [ 297.224796][ T9330] __get_user_pages+0x4ed/0x1190 [ 297.229715][ T9330] ? populate_vma_page_range+0x2b0/0x2b0 [ 297.235328][ T9330] ? __down_read_common+0x1b0/0x450 [ 297.240508][ T9330] ? memset+0x1f/0x40 [ 297.244470][ T9330] populate_vma_page_range+0x217/0x2b0 [ 297.249907][ T9330] __mm_populate+0x2ea/0x4d0 [ 297.254479][ T9330] ? check_vma_flags+0x480/0x480 [ 297.259399][ T9330] do_shmat+0xab3/0xda0 [ 297.263541][ T9330] ? __ia32_compat_sys_old_shmctl+0x90/0x90 [ 297.269415][ T9330] ? rcu_read_lock_sched_held+0x5f/0x130 [ 297.275036][ T9330] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 297.281007][ T9330] ? rcu_read_lock_sched_held+0x5f/0x130 [ 297.286642][ T9330] __x64_sys_shmat+0x102/0x190 [ 297.291399][ T9330] ? shm_lock+0x190/0x190 [ 297.295712][ T9330] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 297.301678][ T9330] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 297.307649][ T9330] do_syscall_64+0x2b/0x50 [ 297.312095][ T9330] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 297.318001][ T9330] RIP: 0033:0x7efc03e89049 [ 297.322398][ T9330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 297.341986][ T9330] RSP: 002b:00007efc04f78168 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 297.350384][ T9330] RAX: ffffffffffffffda RBX: 00007efc03f9bf60 RCX: 00007efc03e89049 [ 297.358344][ T9330] RDX: 0000000000004000 RSI: 0000000020005000 RDI: 00000000000000a1 21:01:35 executing program 4: unshare(0x40000000) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) 21:01:35 executing program 3: unshare(0x40000000) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 297.366315][ T9330] RBP: 00007efc03ee308d R08: 0000000000000000 R09: 0000000000000000 [ 297.374271][ T9330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.382233][ T9330] R13: 00007ffe96d26d2f R14: 00007efc04f78300 R15: 0000000000022000 [ 297.390204][ T9330] [ 297.406024][ T9330] memory: usage 307180kB, limit 307200kB, failcnt 1491 21:01:35 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) [ 297.443392][ T9330] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 297.475200][ T9330] Memory cgroup stats for /syz2: [ 297.475368][ T9330] anon 106496 [ 297.475368][ T9330] file 312045568 [ 297.475368][ T9330] kernel 2400256 [ 297.475368][ T9330] kernel_stack 65536 [ 297.475368][ T9330] pagetables 77824 [ 297.475368][ T9330] percpu 0 [ 297.475368][ T9330] sock 0 [ 297.475368][ T9330] vmalloc 0 [ 297.475368][ T9330] shmem 312041472 [ 297.475368][ T9330] file_mapped 147456 [ 297.475368][ T9330] file_dirty 4096 [ 297.475368][ T9330] file_writeback 0 [ 297.475368][ T9330] swapcached 0 [ 297.475368][ T9330] anon_thp 0 [ 297.475368][ T9330] file_thp 0 [ 297.475368][ T9330] shmem_thp 0 [ 297.475368][ T9330] inactive_anon 312082432 [ 297.475368][ T9330] active_anon 12288 [ 297.475368][ T9330] inactive_file 0 [ 297.475368][ T9330] active_file 4096 [ 297.475368][ T9330] unevictable 53248 [ 297.475368][ T9330] slab_reclaimable 1185832 [ 297.475368][ T9330] slab_unreclaimable 1037352 [ 297.475368][ T9330] slab 2223184 [ 297.475368][ T9330] workingset_refault_anon 0 [ 297.569217][ T9330] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=9327,uid=0 21:01:35 executing program 2: mlockall(0x2) (async) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) (async) shmget(0x1, 0x2000, 0x80, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) (async) r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000163000/0x2000)=nil) (async) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) (async) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) (async) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) (async) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) (async) shmctl$IPC_RMID(0x0, 0x0) [ 297.597394][ T9330] Memory cgroup out of memory: Killed process 9327 (syz-executor.2) total-vm:50664kB, anon-rss:380kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 297.617992][ T29] oom_reaper: reaped process 9327 (syz-executor.2), now anon-rss:0kB, file-rss:8192kB, shmem-rss:4kB 21:01:35 executing program 4: unshare(0x40000000) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) 21:01:35 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) 21:01:35 executing program 3: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 297.791082][ T9352] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 297.830373][ T9352] CPU: 0 PID: 9352 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 297.841864][ T9352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 297.851920][ T9352] Call Trace: [ 297.855204][ T9352] [ 297.858135][ T9352] dump_stack_lvl+0x201/0x2d8 [ 297.862822][ T9352] ? show_regs_print_info+0x12/0x12 [ 297.868028][ T9352] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 297.873748][ T9352] ? do_raw_spin_lock+0x151/0x8e0 [ 297.878781][ T9352] ? asan.module_dtor+0x20/0x20 [ 297.883639][ T9352] dump_header+0xdb/0x970 [ 297.888071][ T9352] oom_kill_process+0xf5/0x4d0 [ 297.892937][ T9352] out_of_memory+0x711/0xa70 [ 297.897548][ T9352] ? unregister_oom_notifier+0x20/0x20 [ 297.903007][ T9352] ? trace_lock_release+0x4f/0x150 [ 297.908122][ T9352] ? mem_cgroup_oom+0x47d/0x5f0 [ 297.912984][ T9352] ? lock_release+0x82/0x810 [ 297.917584][ T9352] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 297.923135][ T9352] ? __lock_acquire+0x2b00/0x2b00 [ 297.928172][ T9352] ? mem_cgroup_oom_trylock+0x220/0x220 [ 297.933730][ T9352] ? do_raw_spin_unlock+0x134/0x8a0 [ 297.938935][ T9352] ? mem_cgroup_iter+0x3c9/0x530 [ 297.943875][ T9352] mem_cgroup_oom+0x48d/0x5f0 [ 297.948544][ T9352] try_charge_memcg+0xdab/0x1110 [ 297.953468][ T9352] ? trace_lock_acquire+0x59/0x190 [ 297.958576][ T9352] ? __folio_memcg+0x170/0x170 [ 297.963318][ T9352] ? lock_release+0x82/0x810 [ 297.967886][ T9352] ? read_lock_is_recursive+0x10/0x10 [ 297.973237][ T9352] ? rcu_lock_acquire+0x30/0x30 [ 297.978073][ T9352] ? lock_release+0x82/0x810 [ 297.982644][ T9352] ? rcu_read_lock_sched_held+0x5f/0x130 [ 297.988262][ T9352] __memcg_kmem_charge_page+0x432/0x500 [ 297.993792][ T9352] alloc_thread_stack_node+0x16c/0x4e0 [ 297.999236][ T9352] copy_process+0x6d5/0x5ff0 [ 298.003810][ T9352] ? psi_memstall_leave+0x233/0x2b0 [ 298.008987][ T9352] ? trace_lock_release+0x4f/0x150 [ 298.014078][ T9352] ? psi_memstall_leave+0x233/0x2b0 [ 298.019261][ T9352] ? rcu_read_lock_sched_held+0x5f/0x130 [ 298.024873][ T9352] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 298.030832][ T9352] ? psi_group_change+0xadc/0x1130 [ 298.035925][ T9352] ? pidfd_show_fdinfo+0x2e0/0x2e0 [ 298.041017][ T9352] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 298.046977][ T9352] ? rcu_read_lock_sched_held+0x5f/0x130 [ 298.052588][ T9352] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 298.058559][ T9352] kernel_clone+0x22a/0x7e0 [ 298.063077][ T9352] ? trace_lock_acquire+0x59/0x190 [ 298.068167][ T9352] ? create_io_thread+0x1d0/0x1d0 [ 298.073170][ T9352] ? trace_lock_release+0x4f/0x150 [ 298.078263][ T9352] ? xfd_validate_state+0x6a/0x150 [ 298.083422][ T9352] __x64_sys_clone+0x245/0x2b0 [ 298.088168][ T9352] ? __do_sys_vfork+0x130/0x130 [ 298.092998][ T9352] ? rcu_read_lock_sched_held+0x5f/0x130 [ 298.098613][ T9352] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 298.104575][ T9352] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 298.110621][ T9352] do_syscall_64+0x2b/0x50 [ 298.115027][ T9352] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 298.120900][ T9352] RIP: 0033:0x7efc03e8a471 [ 298.125300][ T9352] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 298.144897][ T9352] RSP: 002b:00007ffe96d26c78 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 298.153291][ T9352] RAX: ffffffffffffffda RBX: 00007efc04f78700 RCX: 00007efc03e8a471 [ 298.161241][ T9352] RDX: 00007efc04f789d0 RSI: 00007efc04f782f0 RDI: 00000000003d0f00 [ 298.169199][ T9352] RBP: 00007ffe96d26ec0 R08: 00007efc04f78700 R09: 00007efc04f78700 [ 298.177238][ T9352] R10: 00007efc04f789d0 R11: 0000000000000206 R12: 00007ffe96d26d2e 21:01:36 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) [ 298.185189][ T9352] R13: 00007ffe96d26d2f R14: 00007efc04f78300 R15: 0000000000022000 [ 298.193154][ T9352] 21:01:36 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x7ff) [ 298.251046][ T9352] memory: usage 307184kB, limit 307200kB, failcnt 1555 [ 298.264909][ T9352] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 298.296538][ T9352] Memory cgroup stats for /syz2: [ 298.296710][ T9352] anon 94208 [ 298.296710][ T9352] file 312049664 [ 298.296710][ T9352] kernel 2412544 [ 298.296710][ T9352] kernel_stack 32768 [ 298.296710][ T9352] pagetables 65536 [ 298.296710][ T9352] percpu 0 [ 298.296710][ T9352] sock 0 [ 298.296710][ T9352] vmalloc 0 [ 298.296710][ T9352] shmem 312045568 [ 298.296710][ T9352] file_mapped 94208 [ 298.296710][ T9352] file_dirty 4096 [ 298.296710][ T9352] file_writeback 0 [ 298.296710][ T9352] swapcached 0 [ 298.296710][ T9352] anon_thp 0 [ 298.296710][ T9352] file_thp 0 [ 298.296710][ T9352] shmem_thp 0 [ 298.296710][ T9352] inactive_anon 312127488 [ 298.296710][ T9352] active_anon 12288 [ 298.296710][ T9352] inactive_file 0 [ 298.296710][ T9352] active_file 4096 [ 298.296710][ T9352] unevictable 0 [ 298.296710][ T9352] slab_reclaimable 1224088 [ 298.296710][ T9352] slab_unreclaimable 1053960 [ 298.296710][ T9352] slab 2278048 [ 298.296710][ T9352] workingset_refault_anon 0 [ 298.296710][ T9352] workingset_refault_file 1 21:01:36 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) 21:01:36 executing program 4: unshare(0x40000000) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) [ 298.489899][ T9352] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=9352,uid=0 21:01:36 executing program 3: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 21:01:36 executing program 2: mlockall(0x2) shmat(0x0, &(0x7f00007c4000/0x4000)=nil, 0x1000) shmget(0x0, 0x2000, 0x200, &(0x7f00003a3000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/45) r0 = shmget(0x1, 0x2000, 0x54000000, &(0x7f0000163000/0x2000)=nil) shmget(0x0, 0x1000, 0x78000000, &(0x7f000003b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x400000, 0x78000000, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000005000/0x1000)=nil, 0x4000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) shmget(0x2, 0x4000, 0x54000800, &(0x7f00002d8000/0x4000)=nil) shmat(r1, &(0x7f00000e5000/0x2000)=nil, 0x3000) r2 = shmget(0x3, 0x3000, 0x100, &(0x7f00003cc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) shmat(0x0, &(0x7f0000000000/0xc00000)=nil, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) [ 298.637393][ T9352] Memory cgroup out of memory: Killed process 9352 (syz-executor.2) total-vm:50664kB, anon-rss:380kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 298.658627][ T29] oom_reaper: reaped process 9352 (syz-executor.2), now anon-rss:0kB, file-rss:7496kB, shmem-rss:0kB 21:01:36 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) [ 298.771673][ T6989] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 298.809527][ T6989] CPU: 1 PID: 6989 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 298.821020][ T6989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.831078][ T6989] Call Trace: [ 298.834344][ T6989] [ 298.837257][ T6989] dump_stack_lvl+0x201/0x2d8 [ 298.841925][ T6989] ? show_regs_print_info+0x12/0x12 [ 298.847104][ T6989] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 298.852810][ T6989] ? do_raw_spin_lock+0x151/0x8e0 [ 298.857815][ T6989] ? asan.module_dtor+0x20/0x20 [ 298.862660][ T6989] dump_header+0xdb/0x970 [ 298.866971][ T6989] oom_kill_process+0xf5/0x4d0 [ 298.871716][ T6989] out_of_memory+0x711/0xa70 [ 298.876311][ T6989] ? unregister_oom_notifier+0x20/0x20 [ 298.881759][ T6989] ? trace_lock_release+0x4f/0x150 [ 298.886848][ T6989] ? mem_cgroup_oom+0x47d/0x5f0 [ 298.891678][ T6989] ? lock_release+0x82/0x810 [ 298.896249][ T6989] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 298.901778][ T6989] ? __lock_acquire+0x2b00/0x2b00 [ 298.906790][ T6989] ? mem_cgroup_oom_trylock+0x220/0x220 [ 298.912315][ T6989] ? do_raw_spin_unlock+0x134/0x8a0 [ 298.917495][ T6989] ? mem_cgroup_iter+0x3c9/0x530 [ 298.922410][ T6989] mem_cgroup_oom+0x48d/0x5f0 [ 298.927071][ T6989] try_charge_memcg+0xdab/0x1110 [ 298.931998][ T6989] ? __set_page_owner+0x3b4/0x3d0 [ 298.937009][ T6989] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 298.942968][ T6989] ? rcu_read_lock_sched_held+0x5f/0x130 [ 298.948593][ T6989] ? __folio_memcg+0x170/0x170 [ 298.953346][ T6989] ? rcu_lock_acquire+0x30/0x30 [ 298.958179][ T6989] ? trace_lock_release+0x4f/0x150 [ 298.963277][ T6989] ? rcu_lock_acquire+0x30/0x30 [ 298.968107][ T6989] ? lock_release+0x82/0x810 [ 298.972681][ T6989] ? rcu_read_lock_sched_held+0x5f/0x130 [ 298.978292][ T6989] ? __lock_acquire+0x2b00/0x2b00 [ 298.983296][ T6989] charge_memcg+0x119/0x5d0 [ 298.987780][ T6989] ? __mem_cgroup_charge+0x80/0x80 [ 298.992874][ T6989] __mem_cgroup_charge+0x23/0x80 [ 298.997794][ T6989] wp_page_copy+0x2fb/0x15a0 [ 299.002380][ T6989] ? __lock_acquire+0x2b00/0x2b00 [ 299.007385][ T6989] ? do_raw_spin_unlock+0x134/0x8a0 [ 299.012563][ T6989] ? rcu_lock_release+0x20/0x20 [ 299.017400][ T6989] handle_mm_fault+0x23f7/0x39e0 [ 299.022325][ T6989] ? numa_migrate_prep+0x250/0x250 [ 299.027419][ T6989] ? lock_release+0x82/0x810 [ 299.031991][ T6989] ? __context_tracking_enter+0xa5/0xf0 [ 299.037516][ T6989] ? lock_release+0x82/0x810 [ 299.042091][ T6989] ? vmacache_find+0x4ef/0x5d0 [ 299.046835][ T6989] ? vmacache_update+0x9f/0xf0 [ 299.051579][ T6989] do_user_addr_fault+0x8c4/0x1060 [ 299.056707][ T6989] exc_page_fault+0xa1/0x1e0 [ 299.061275][ T6989] ? asm_exc_page_fault+0x8/0x30 [ 299.066191][ T6989] asm_exc_page_fault+0x1e/0x30 [ 299.071019][ T6989] RIP: 0033:0x7efc03e876f0 [ 299.075419][ T6989] Code: 89 e8 5d 41 5c 41 5d c3 66 90 48 c7 c2 b8 ff ff ff f7 d8 41 bd ff ff ff ff 64 89 02 85 ed 74 14 48 83 3d fa 18 0e 00 00 74 05 5b 16 fd ff e8 16 bf fc ff 44 89 e6 bf 02 00 00 00 e8 99 cb fc [ 299.095003][ T6989] RSP: 002b:00007ffe96d26f70 EFLAGS: 00010206 [ 299.101053][ T6989] RAX: 00000000000001c0 RBX: 0000000000000000 RCX: 00007efc03e8763b [ 299.109006][ T6989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 21:01:37 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) [ 299.116959][ T6989] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556c8d400 [ 299.124911][ T6989] R10: 0000555556c8d6d0 R11: 0000000000000246 R12: 0000000000000001 [ 299.132859][ T6989] R13: 00000000000001c0 R14: 0000000000000001 R15: 00007ffe96d27050 [ 299.140813][ T6989] 21:01:37 executing program 4: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) 21:01:37 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000000c0)=0x7ff) 21:01:37 executing program 3: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 21:01:37 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 21:01:37 executing program 4: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) 21:01:38 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) 21:01:38 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xffffffff, 0x100, 0x10000, 0x5, 0x8, 0x8000}) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000000c0)=0x7ff) [ 300.084939][ T6989] memory: usage 307124kB, limit 307200kB, failcnt 1633 [ 300.111705][ T6989] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 300.130667][ T6989] Memory cgroup stats for /syz2: [ 300.130831][ T6989] anon 49152 [ 300.130831][ T6989] file 312049664 [ 300.130831][ T6989] kernel 2396160 [ 300.130831][ T6989] kernel_stack 32768 [ 300.130831][ T6989] pagetables 57344 [ 300.130831][ T6989] percpu 0 [ 300.130831][ T6989] sock 0 [ 300.130831][ T6989] vmalloc 0 [ 300.130831][ T6989] shmem 312045568 [ 300.130831][ T6989] file_mapped 94208 [ 300.130831][ T6989] file_dirty 4096 [ 300.130831][ T6989] file_writeback 0 [ 300.130831][ T6989] swapcached 0 [ 300.130831][ T6989] anon_thp 0 [ 300.130831][ T6989] file_thp 0 21:01:38 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 300.130831][ T6989] shmem_thp 0 [ 300.130831][ T6989] inactive_anon 312082432 [ 300.130831][ T6989] active_anon 12288 [ 300.130831][ T6989] inactive_file 0 [ 300.130831][ T6989] active_file 4096 [ 300.130831][ T6989] unevictable 0 [ 300.130831][ T6989] slab_reclaimable 1208344 [ 300.130831][ T6989] slab_unreclaimable 1068344 [ 300.130831][ T6989] slab 2276688 [ 300.130831][ T6989] workingset_refault_anon 0 [ 300.130831][ T6989] workingset_refault_file 1 [ 300.230792][ T28] INFO: task kworker/1:1:26 blocked for more than 143 seconds. [ 300.244475][ T28] Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 300.273170][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 300.296347][ T28] task:kworker/1:1 state:D stack:22072 pid: 26 ppid: 2 flags:0x00004000 [ 300.314658][ T28] Workqueue: usb_hub_wq hub_event [ 300.324287][ T28] Call Trace: [ 300.332322][ T28] [ 300.337570][ T28] __schedule+0x937/0x1090 [ 300.347998][ T28] ? __sched_text_start+0x8/0x8 [ 300.358988][ T28] schedule+0xeb/0x1b0 [ 300.367637][ T28] schedule_timeout+0xac/0x300 [ 300.378262][ T28] ? console_conditional_schedule+0x40/0x40 [ 300.394542][ T28] ? do_raw_spin_unlock+0x134/0x8a0 [ 300.405490][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 300.415027][ T28] do_wait_for_common+0x3ea/0x560 [ 300.420464][ T28] ? __rwlock_init+0x140/0x140 [ 300.425425][ T28] ? console_conditional_schedule+0x40/0x40 [ 300.432099][ T28] ? bit_wait_io_timeout+0x110/0x110 21:01:38 executing program 1: unshare(0x40000000) [ 300.437579][ T6989] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=6989,uid=0 [ 300.453887][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 300.461787][ T28] ? kthread_data+0x4d/0xc0 [ 300.466663][ T28] wait_for_completion+0x46/0x60 [ 300.473451][ T28] flush_workqueue+0x76a/0x16b0 [ 300.485984][ T6989] Memory cgroup out of memory: Killed process 6989 (syz-executor.2) total-vm:50532kB, anon-rss:380kB, file-rss:9072kB, shmem-rss:44kB, UID:0 pgtables:72kB oom_score_adj:0 [ 300.511303][ T28] ? __lock_acquire+0x2b00/0x2b00 [ 300.517368][ T28] ? print_irqtrace_events+0x220/0x220 [ 300.523586][ T28] ? rcu_work_rcufn+0x140/0x140 [ 300.532071][ T29] oom_reaper: reaped process 6989 (syz-executor.2), now anon-rss:0kB, file-rss:8192kB, shmem-rss:44kB [ 300.547188][ T28] ? _raw_spin_unlock_irq+0x2a/0x40 [ 300.554764][ T28] ? usb_kill_anchored_urbs+0x340/0x350 [ 300.563899][ T28] ath6kl_usb_power_off+0x34/0x40 [ 300.571364][ T28] ath6kl_core_init+0xab9/0x1100 [ 300.576474][ T28] ? ath6kl_core_rx_complete+0x70/0x70 [ 300.582696][ T28] ? memcpy+0x3c/0x60 [ 300.586856][ T28] ? ath6kl_core_create+0x7d1/0x940 [ 300.594469][ T28] ath6kl_usb_probe+0x11e8/0x12c0 [ 300.600172][ T28] usb_probe_interface+0x633/0xb40 [ 300.605528][ T28] ? usb_register_driver+0x3d0/0x3d0 [ 300.613025][ T28] call_driver_probe+0x96/0x250 [ 300.618085][ T28] really_probe+0x222/0x9f0 [ 300.623364][ T28] ? pm_runtime_barrier+0x138/0x1b0 [ 300.630827][ T28] __driver_probe_device+0x1f8/0x3e0 [ 300.637457][ T28] driver_probe_device+0x50/0x240 [ 300.643298][ T28] __device_attach_driver+0x1e1/0x3b0 [ 300.650929][ T28] ? deferred_probe_work_func+0x240/0x240 [ 300.656891][ T28] bus_for_each_drv+0x18a/0x210 [ 300.662544][ T28] ? kasan_quarantine_put+0xd4/0x230 [ 300.668043][ T28] ? subsys_find_device_by_id+0x330/0x330 [ 300.676446][ T28] __device_attach+0x310/0x560 [ 300.682134][ T28] ? kobject_uevent_env+0x104a/0x1590 [ 300.687678][ T28] ? kfree+0xc6/0x390 [ 300.694011][ T28] ? device_attach+0x20/0x20 [ 300.704956][ T28] ? kobject_uevent_env+0x104a/0x1590 [ 300.712636][ T28] bus_probe_device+0xb8/0x1f0 [ 300.717713][ T28] ? device_add+0x1001/0x16d0 [ 300.726871][ T28] device_add+0x11c8/0x16d0 [ 300.733590][ T28] ? virtual_device_parent+0x50/0x50 [ 300.740747][ T28] ? usb_enable_lpm+0x75/0x4c0 [ 300.745738][ T28] usb_set_configuration+0x1a86/0x2100 [ 300.753436][ T28] usb_generic_driver_probe+0x83/0x140 [ 300.759564][ T28] usb_probe_device+0x13a/0x260 [ 300.764558][ T28] ? usb_register_device_driver+0x240/0x240 [ 300.772639][ T28] call_driver_probe+0x96/0x250 [ 300.777642][ T28] really_probe+0x222/0x9f0 [ 300.787276][ T28] ? pm_runtime_barrier+0x138/0x1b0 [ 300.798467][ T28] __driver_probe_device+0x1f8/0x3e0 [ 300.804611][ T28] driver_probe_device+0x50/0x240 [ 300.810082][ T28] __device_attach_driver+0x1e1/0x3b0 [ 300.815547][ T28] ? deferred_probe_work_func+0x240/0x240 [ 300.821676][ T28] bus_for_each_drv+0x18a/0x210 [ 300.826660][ T28] ? kasan_quarantine_put+0xd4/0x230 [ 300.832389][ T28] ? subsys_find_device_by_id+0x330/0x330 [ 300.839062][ T28] __device_attach+0x310/0x560 [ 300.843963][ T28] ? kobject_uevent_env+0x104a/0x1590 [ 300.849918][ T28] ? kfree+0xc6/0x390 [ 300.854038][ T28] ? device_attach+0x20/0x20 [ 300.861268][ T28] ? kobject_uevent_env+0x104a/0x1590 [ 300.866951][ T28] bus_probe_device+0xb8/0x1f0 [ 300.872433][ T28] ? device_add+0x1001/0x16d0 [ 300.877345][ T28] device_add+0x11c8/0x16d0 [ 300.884082][ T28] ? virtual_device_parent+0x50/0x50 [ 300.890412][ T28] usb_new_device+0x108d/0x1940 [ 300.895401][ T28] ? usb_disconnect+0x8a0/0x8a0 [ 300.902980][ T28] ? do_raw_spin_unlock+0x134/0x8a0 [ 300.908304][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 300.914255][ T28] hub_port_connect+0x100b/0x2910 [ 300.921409][ T28] ? descriptors_changed+0x9f0/0x9f0 [ 300.926821][ T28] ? slab_free_freelist_hook+0x12e/0x1a0 [ 300.933133][ T28] hub_port_connect_change+0x5f9/0xc20 [ 300.941360][ T28] ? hub_port_reset+0x1220/0x1220 [ 300.946525][ T28] ? hub_handle_remote_wakeup+0x18d/0x3f0 [ 300.953018][ T28] port_event+0xca0/0x13e0 [ 300.957565][ T28] ? __rwlock_init+0x140/0x140 [ 300.964454][ T28] ? hub_quiesce+0x330/0x330 [ 300.969689][ T28] ? mutex_lock_io_nested+0x60/0x60 [ 300.975007][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 300.982298][ T28] ? do_raw_spin_trylock+0x41/0x1f0 [ 300.987669][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 300.993566][ T28] hub_event+0x4ed/0xe40 [ 300.997935][ T28] ? led_work+0x710/0x710 [ 301.004752][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 301.011326][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 301.016730][ T28] process_one_work+0x83c/0x11a0 [ 301.023925][ T28] ? worker_detach_from_pool+0x260/0x260 [ 301.030169][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 301.035846][ T28] ? kthread_data+0x4d/0xc0 [ 301.040814][ T28] ? wq_worker_running+0x95/0x190 [ 301.046597][ T28] worker_thread+0xa6c/0x1290 [ 301.051632][ T28] ? _raw_spin_unlock+0x40/0x40 [ 301.056600][ T28] kthread+0x2a3/0x2d0 [ 301.061035][ T28] ? rcu_lock_release+0x20/0x20 [ 301.066000][ T28] ? kthread_blkcg+0xd0/0xd0 [ 301.071038][ T28] ret_from_fork+0x1f/0x30 [ 301.075612][ T28] [ 301.079086][ T28] INFO: task kworker/0:3:3667 blocked for more than 144 seconds. [ 301.086917][ T28] Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 301.095693][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 301.104569][ T28] task:kworker/0:3 state:D stack:19896 pid: 3667 ppid: 2 flags:0x00004000 [ 301.114080][ T28] Workqueue: events request_firmware_work_func [ 301.120581][ T28] Call Trace: [ 301.123920][ T28] [ 301.126887][ T28] __schedule+0x937/0x1090 [ 301.131389][ T28] ? __sched_text_start+0x8/0x8 [ 301.136326][ T28] ? __mutex_trylock_common+0xb3/0x300 [ 301.141986][ T28] ? do_raw_spin_unlock+0x134/0x8a0 [ 301.147544][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 301.152811][ T28] schedule+0xeb/0x1b0 [ 301.156878][ T28] schedule_preempt_disabled+0xf/0x20 [ 301.162344][ T28] __mutex_lock_common+0xd1f/0x2590 [ 301.167547][ T28] ? ath9k_hif_usb_firmware_cb+0x36b/0x4e0 [ 301.173453][ T28] ? mutex_lock_io_nested+0x60/0x60 [ 301.178772][ T28] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 301.184662][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 301.190568][ T28] ? _raw_spin_unlock+0x40/0x40 [ 301.195415][ T28] ? complete_all+0x29/0x1e0 [ 301.200050][ T28] mutex_lock_nested+0x1a/0x20 [ 301.204816][ T28] ath9k_hif_usb_firmware_cb+0x36b/0x4e0 [ 301.210502][ T28] request_firmware_work_func+0x19b/0x270 [ 301.216219][ T28] ? ath9k_hif_request_firmware+0x4e0/0x4e0 [ 301.222138][ T28] ? request_firmware_nowait+0x460/0x460 [ 301.227774][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 301.233815][ T28] process_one_work+0x83c/0x11a0 [ 301.240562][ T28] ? worker_detach_from_pool+0x260/0x260 [ 301.246276][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 301.252337][ T28] ? kthread_data+0x4d/0xc0 [ 301.256945][ T28] ? wq_worker_running+0x95/0x190 [ 301.262449][ T28] worker_thread+0xa6c/0x1290 [ 301.267243][ T28] ? _raw_spin_unlock+0x40/0x40 [ 301.272456][ T28] kthread+0x2a3/0x2d0 [ 301.276533][ T28] ? rcu_lock_release+0x20/0x20 [ 301.281604][ T28] ? kthread_blkcg+0xd0/0xd0 [ 301.286293][ T28] ret_from_fork+0x1f/0x30 [ 301.290953][ T28] [ 301.294088][ T28] INFO: lockdep is turned off. [ 301.299384][ T28] NMI backtrace for cpu 1 [ 301.303710][ T28] CPU: 1 PID: 28 Comm: khungtaskd Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 301.314639][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.324693][ T28] Call Trace: [ 301.327955][ T28] [ 301.330865][ T28] dump_stack_lvl+0x1dc/0x2d8 [ 301.335535][ T28] ? show_regs_print_info+0x12/0x12 [ 301.340735][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 301.346477][ T28] nmi_cpu_backtrace+0x45f/0x490 [ 301.351412][ T28] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 301.357553][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 301.363255][ T28] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 301.369136][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 301.375276][ T28] nmi_trigger_cpumask_backtrace+0x16a/0x280 [ 301.381242][ T28] watchdog+0xc82/0xcd0 [ 301.385429][ T28] kthread+0x2a3/0x2d0 [ 301.389479][ T28] ? hungtask_pm_notify+0x50/0x50 [ 301.394488][ T28] ? kthread_blkcg+0xd0/0xd0 [ 301.399060][ T28] ret_from_fork+0x1f/0x30 [ 301.403464][ T28] [ 301.407020][ T28] Sending NMI from CPU 1 to CPUs 0: [ 301.412450][ C0] NMI backtrace for cpu 0 [ 301.412460][ C0] CPU: 0 PID: 1227 Comm: kworker/u4:5 Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 301.412477][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.412485][ C0] Workqueue: phy10 ieee80211_iface_work [ 301.412551][ C0] RIP: 0010:unwind_next_frame+0x13ce/0x1fc0 [ 301.412568][ C0] Code: 00 48 39 dd 76 46 49 39 de 77 41 41 83 7d 00 00 74 3a 48 83 c3 08 4c 39 f3 76 31 48 39 eb 77 2c 48 b8 00 00 00 00 00 fc ff df <41> 80 3c 04 00 48 8b 5c 24 50 74 0d 48 89 df e8 ae 66 9c 00 48 8b [ 301.412581][ C0] RSP: 0018:ffffc900054df5e0 EFLAGS: 00000287 [ 301.412592][ C0] RAX: dffffc0000000000 RBX: ffffc900054dfb00 RCX: dffffc0000000000 [ 301.412603][ C0] RDX: ffffc900054dfaa8 RSI: 0000000000000001 RDI: ffffc900054df6b0 [ 301.412613][ C0] RBP: ffffc900054e0000 R08: dffffc0000000000 R09: ffffc900054df6f0 [ 301.412623][ C0] R10: fffff52000a9bee0 R11: 0000000000000000 R12: 1ffff92000a9bedb [ 301.412633][ C0] R13: ffffc900054df6a0 R14: ffffc900054d8000 R15: 1ffff92000a9bed4 [ 301.412644][ C0] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 301.412656][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.412665][ C0] CR2: 000055dbae863548 CR3: 000000000ca8e000 CR4: 00000000003506f0 [ 301.412678][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 301.412686][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 301.412694][ C0] Call Trace: [ 301.412698][ C0] [ 301.412706][ C0] ? slab_free_freelist_hook+0x12e/0x1a0 [ 301.412722][ C0] ? stack_trace_save+0x1e0/0x1e0 [ 301.412762][ C0] arch_stack_walk+0x112/0x140 [ 301.412779][ C0] ? kfree+0xc6/0x390 [ 301.412796][ C0] stack_trace_save+0x11b/0x1e0 [ 301.412810][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x24b/0x2b30 [ 301.412839][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x24b/0x2b30 [ 301.412855][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 301.412869][ C0] ? lock_release+0x82/0x810 [ 301.412882][ C0] ? trace_lock_acquire+0x59/0x190 [ 301.412895][ C0] ? kfree+0xc6/0x390 [ 301.412908][ C0] ? kfree+0xc6/0x390 [ 301.412921][ C0] kasan_set_track+0x4c/0x70 [ 301.412933][ C0] ? kasan_set_track+0x4c/0x70 [ 301.412945][ C0] ? kasan_set_free_info+0x1f/0x40 [ 301.412958][ C0] ? ____kasan_slab_free+0x136/0x1e0 [ 301.412971][ C0] ? slab_free_freelist_hook+0x12e/0x1a0 [ 301.413000][ C0] kasan_set_free_info+0x1f/0x40 [ 301.413014][ C0] ____kasan_slab_free+0x136/0x1e0 [ 301.413028][ C0] slab_free_freelist_hook+0x12e/0x1a0 [ 301.413042][ C0] ? skb_release_data+0x48e/0x610 [ 301.413091][ C0] kfree+0xc6/0x390 [ 301.413104][ C0] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 301.413121][ C0] skb_release_data+0x48e/0x610 [ 301.413138][ C0] __kfree_skb+0x56/0x1d0 [ 301.413153][ C0] ieee80211_iface_work+0x79d/0xca0 [ 301.413168][ C0] process_one_work+0x83c/0x11a0 [ 301.413195][ C0] ? worker_detach_from_pool+0x260/0x260 [ 301.413210][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 301.413226][ C0] ? kthread_data+0x4d/0xc0 [ 301.413238][ C0] ? wq_worker_running+0x95/0x190 [ 301.413252][ C0] worker_thread+0xa6c/0x1290 [ 301.413269][ C0] ? _raw_spin_unlock+0x40/0x40 [ 301.413286][ C0] kthread+0x2a3/0x2d0 [ 301.413297][ C0] ? rcu_lock_release+0x20/0x20 [ 301.413310][ C0] ? kthread_blkcg+0xd0/0xd0 [ 301.413323][ C0] ret_from_fork+0x1f/0x30 [ 301.413342][ C0] [ 301.816622][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 301.823495][ T28] CPU: 1 PID: 28 Comm: khungtaskd Tainted: G W 5.17.0-syzkaller-11407-gae085d7f9365 #0 [ 301.834420][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.844466][ T28] Call Trace: [ 301.847737][ T28] [ 301.850661][ T28] dump_stack_lvl+0x1dc/0x2d8 [ 301.855338][ T28] ? show_regs_print_info+0x12/0x12 [ 301.860539][ T28] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 301.866257][ T28] ? vscnprintf+0x59/0x80 [ 301.870580][ T28] panic+0x313/0x890 [ 301.874470][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 301.880100][ T28] ? nmi_trigger_cpumask_backtrace+0x206/0x280 [ 301.886253][ T28] ? nmi_panic+0x90/0x90 [ 301.890497][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 301.895864][ T28] ? nmi_trigger_cpumask_backtrace+0x206/0x280 [ 301.902011][ T28] ? nmi_trigger_cpumask_backtrace+0x266/0x280 [ 301.908161][ T28] watchdog+0xcc2/0xcd0 [ 301.912318][ T28] kthread+0x2a3/0x2d0 [ 301.916380][ T28] ? hungtask_pm_notify+0x50/0x50 [ 301.921396][ T28] ? kthread_blkcg+0xd0/0xd0 [ 301.925978][ T28] ret_from_fork+0x1f/0x30 [ 301.930393][ T28] [ 301.933613][ T28] Kernel Offset: disabled [ 301.937923][ T28] Rebooting in 86400 seconds..