syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:32:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000280)={0x2, [0x0, 0x0]}) socket$netlink(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) unshare(0x40000000) 19:32:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 750.332413][T19064] IPVS: ftp: loaded support on port[0] = 21 [ 750.463726][T19155] IPVS: ftp: loaded support on port[0] = 21 19:32:17 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000004e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[{0x18, 0x1, 0x1, "bd"}], 0x18}}], 0x1, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) 19:32:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:32:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:32:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:32:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:32:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:32:18 executing program 0: write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x0, {0x0, 0x3}}, 0x14) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='lo\x00\x00\x00\x00\x00\x00\x02\x00', 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20040000, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x810) 19:32:18 executing program 0: write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x0, {0x0, 0x3}}, 0x14) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='lo\x00\x00\x00\x00\x00\x00\x02\x00', 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20040000, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x810) 19:32:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000280)={0x2, [0x0, 0x0]}) socket$netlink(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) unshare(0x40000000) 19:32:22 executing program 0: write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x0, {0x0, 0x3}}, 0x14) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='lo\x00\x00\x00\x00\x00\x00\x02\x00', 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20040000, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x810) [ 755.634300][T19310] IPVS: ftp: loaded support on port[0] = 21 19:32:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000280)={0x2, [0x0, 0x0]}) socket$netlink(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) unshare(0x40000000) 19:32:22 executing program 3: write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x0, {0x0, 0x3}}, 0x14) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='lo\x00\x00\x00\x00\x00\x00\x02\x00', 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20040000, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x810) 19:32:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:32:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:32:22 executing program 0: write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x0, {0x0, 0x3}}, 0x14) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='lo\x00\x00\x00\x00\x00\x00\x02\x00', 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20040000, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x810) 19:32:22 executing program 0: write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x0, {0x0, 0x3}}, 0x14) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='lo\x00\x00\x00\x00\x00\x00\x02\x00', 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20040000, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x810) 19:32:22 executing program 3: write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x0, {0x0, 0x3}}, 0x14) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='lo\x00\x00\x00\x00\x00\x00\x02\x00', 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20040000, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x810) 19:32:22 executing program 3: write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x0, {0x0, 0x3}}, 0x14) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='lo\x00\x00\x00\x00\x00\x00\x02\x00', 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20040000, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x810) 19:32:22 executing program 0: write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x0, {0x0, 0x3}}, 0x14) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='lo\x00\x00\x00\x00\x00\x00\x02\x00', 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20040000, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x810) [ 756.221888][T19318] IPVS: ftp: loaded support on port[0] = 21 19:32:23 executing program 3: write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x0, {0x0, 0x3}}, 0x14) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='lo\x00\x00\x00\x00\x00\x00\x02\x00', 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20040000, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x810) 19:32:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000280)={0x2, [0x0, 0x0]}) socket$netlink(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) unshare(0x40000000) 19:32:23 executing program 0: write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x0, {0x0, 0x3}}, 0x14) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='lo\x00\x00\x00\x00\x00\x00\x02\x00', 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20040000, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x810) [ 756.875525][T19384] IPVS: ftp: loaded support on port[0] = 21 19:32:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000280)={0x2, [0x0, 0x0]}) socket$netlink(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) unshare(0x40000000) 19:32:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:32:23 executing program 0: write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x0, {0x0, 0x3}}, 0x14) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='lo\x00\x00\x00\x00\x00\x00\x02\x00', 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20040000, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x810) 19:32:23 executing program 3: write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x0, {0x0, 0x3}}, 0x14) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='lo\x00\x00\x00\x00\x00\x00\x02\x00', 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20040000, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x810) 19:32:23 executing program 4: write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x0, {0x0, 0x3}}, 0x14) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='lo\x00\x00\x00\x00\x00\x00\x02\x00', 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20040000, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x810) 19:32:24 executing program 3: write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x0, {0x0, 0x3}}, 0x14) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='lo\x00\x00\x00\x00\x00\x00\x02\x00', 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20040000, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x810) 19:32:24 executing program 0: write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x0, {0x0, 0x3}}, 0x14) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='lo\x00\x00\x00\x00\x00\x00\x02\x00', 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20040000, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x810) [ 757.386158][T19452] IPVS: ftp: loaded support on port[0] = 21 19:32:24 executing program 3: write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x0, {0x0, 0x3}}, 0x14) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='lo\x00\x00\x00\x00\x00\x00\x02\x00', 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20040000, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x810) 19:32:24 executing program 4: write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x0, {0x0, 0x3}}, 0x14) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='lo\x00\x00\x00\x00\x00\x00\x02\x00', 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20040000, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x810) 19:32:24 executing program 0: r0 = creat(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x342688984d9ec43d) write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14}, 0x14) 19:32:28 executing program 1: r0 = creat(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x342688984d9ec43d) write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14}, 0x14) 19:32:28 executing program 0: r0 = creat(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x342688984d9ec43d) write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14}, 0x14) 19:32:28 executing program 4: write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x0, {0x0, 0x3}}, 0x14) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='lo\x00\x00\x00\x00\x00\x00\x02\x00', 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20040000, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x810) 19:32:28 executing program 3: write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x0, {0x0, 0x3}}, 0x14) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='lo\x00\x00\x00\x00\x00\x00\x02\x00', 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20040000, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x810) 19:32:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:32:28 executing program 0: r0 = creat(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x342688984d9ec43d) write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14}, 0x14) 19:32:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:32:28 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') 19:32:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:32:28 executing program 0: r0 = creat(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x342688984d9ec43d) write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14}, 0x14) 19:32:28 executing program 1: r0 = creat(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x342688984d9ec43d) write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14}, 0x14) 19:32:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) dup2(r1, r0) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 19:32:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000002c0)={0x1, 0x2}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:32:29 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') 19:32:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:32:29 executing program 3: write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x0, {0x0, 0x3}}, 0x14) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='lo\x00\x00\x00\x00\x00\x00\x02\x00', 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20040000, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x810) 19:32:29 executing program 1: r0 = creat(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x342688984d9ec43d) write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14}, 0x14) 19:32:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000002c0)={0x1, 0x2}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:32:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000002c0)={0x1, 0x2}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:32:29 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') 19:32:29 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') 19:32:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000002c0)={0x1, 0x2}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:32:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000002c0)={0x1, 0x2}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:32:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) dup2(r1, r0) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 19:32:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000002c0)={0x1, 0x2}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:32:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) sysinfo(0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8001, 0x400000) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000280)={0x8000, 0x0}) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x892}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 `\x00L\x00', 0xb7}) 19:32:30 executing program 2: prctl$PR_MCE_KILL(0x35, 0x1, 0x4) 19:32:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000002c0)={0x1, 0x2}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:32:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000002c0)={0x1, 0x2}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:32:30 executing program 2: prctl$PR_MCE_KILL(0x35, 0x1, 0x4) 19:32:30 executing program 2: prctl$PR_MCE_KILL(0x35, 0x1, 0x4) 19:32:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000002c0)={0x1, 0x2}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:32:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) dup2(r1, r0) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 19:32:30 executing program 2: prctl$PR_MCE_KILL(0x35, 0x1, 0x4) 19:32:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000002c0)={0x1, 0x2}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:32:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) dup2(r1, r0) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 19:32:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) dup2(r1, r0) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 19:32:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000279ffc)=0x6, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) connect$inet(r1, &(0x7f00005e2ff0), 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000080)=0x407, 0x1cc) 19:32:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) dup2(r1, r0) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 19:32:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) sysinfo(0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8001, 0x400000) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000280)={0x8000, 0x0}) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x892}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 `\x00L\x00', 0xb7}) 19:32:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000279ffc)=0x6, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) connect$inet(r1, &(0x7f00005e2ff0), 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000080)=0x407, 0x1cc) 19:32:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000279ffc)=0x6, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) connect$inet(r1, &(0x7f00005e2ff0), 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000080)=0x407, 0x1cc) 19:32:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) sysinfo(0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8001, 0x400000) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000280)={0x8000, 0x0}) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x892}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 `\x00L\x00', 0xb7}) 19:32:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) dup2(r1, r0) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 19:32:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) dup2(r1, r0) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 19:32:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000279ffc)=0x6, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) connect$inet(r1, &(0x7f00005e2ff0), 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000080)=0x407, 0x1cc) 19:32:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) dup2(r1, r0) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 19:32:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) sysinfo(0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8001, 0x400000) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000280)={0x8000, 0x0}) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x892}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 `\x00L\x00', 0xb7}) 19:32:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) sysinfo(0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8001, 0x400000) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000280)={0x8000, 0x0}) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x892}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 `\x00L\x00', 0xb7}) 19:32:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) dup2(r1, r0) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 19:32:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) sysinfo(0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8001, 0x400000) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000280)={0x8000, 0x0}) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x892}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 `\x00L\x00', 0xb7}) 19:32:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) sysinfo(0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8001, 0x400000) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000280)={0x8000, 0x0}) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x892}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 `\x00L\x00', 0xb7}) 19:32:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) sysinfo(0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8001, 0x400000) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000280)={0x8000, 0x0}) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x892}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 `\x00L\x00', 0xb7}) 19:32:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) sysinfo(0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8001, 0x400000) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000280)={0x8000, 0x0}) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x892}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 `\x00L\x00', 0xb7}) 19:32:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) sysinfo(0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8001, 0x400000) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000280)={0x8000, 0x0}) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x892}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 `\x00L\x00', 0xb7}) 19:32:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) sysinfo(0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8001, 0x400000) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000280)={0x8000, 0x0}) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x892}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 `\x00L\x00', 0xb7}) 19:32:33 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') readv(r0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/184, 0x4}], 0x1) 19:32:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) sysinfo(0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8001, 0x400000) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000280)={0x8000, 0x0}) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x892}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 `\x00L\x00', 0xb7}) 19:32:34 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="9558da36e2412ca90c3a354b3cf5f39218be11a160b767e745ce33f9a1e33adad4e2b9b53c036eb650b2b12b97fc1e5eedd2e569e993329c69810f75bfe08056ded27f251c55dcca5429d4aa02619e5ad9ca0e99"], 0x0, 0x0, 0x5110, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000007fae9ecb7cefa1b83e2d1394fb744539000000000000b6b200000093b205011fd58adef4fe3f34b7b27f92efed217d279da8ef8b111ba55aa3233a30e02b9aaadd97557c59fc663505f6be84539cb9dff968cc77e580831e1a45fbe1a1ee9a2889e47dc1fa70298c1e996161b35ea4c46c788e32124a173db3bb5ac2b28824922df73f6a6f3c016525af4b9c1cf29de386a95de4c91838621185abc52d3948eb841a42b9f355a895e9240292e7f3e077f54847f03c988001aaa1e235facd4ebaf42eb9d4effaf290cc4c9420c1c5db7fb5f676e3"], 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) 19:32:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) sysinfo(0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8001, 0x400000) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000280)={0x8000, 0x0}) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x892}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 `\x00L\x00', 0xb7}) 19:32:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) sysinfo(0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8001, 0x400000) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000280)={0x8000, 0x0}) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x892}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 `\x00L\x00', 0xb7}) [ 767.469300][T20571] device nr0 entered promiscuous mode 19:32:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) sysinfo(0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8001, 0x400000) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000280)={0x8000, 0x0}) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x892}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 `\x00L\x00', 0xb7}) [ 769.103597][T20577] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.110870][T20577] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.171382][T20577] device bridge0 left promiscuous mode [ 769.674244][T20582] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.681414][T20582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.689108][T20582] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.696185][T20582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.787912][T20582] device bridge0 entered promiscuous mode 19:32:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) sysinfo(0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8001, 0x400000) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000280)={0x8000, 0x0}) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x892}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 `\x00L\x00', 0xb7}) 19:32:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000340)={0x10000000007a, 0x0, [0x1020000048f]}) 19:32:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000001140)=ANY=[@ANYBLOB="7f454c4604f40057ff0300000000000000003f00ff0d0000880300000000000040000000000000000403000000000000090000008100380001000900a80000000000000007000000020000000000000008000000000000000800000000000000000100000000000003000000000000000d010000000000008fc764bd8d1eed4d0ebe136557a09c7a73c4ab2cdc6ce5771a4ebca7b66a0d982aeea7b9716a3ee2d82f19d1818bebb6d08a2d939100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023c267c60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2e9afa0ca919e016d7d0d6428c4e6a04f18e954225b3a34d6a8cdcf375060d13069ca77df9deb0f546ce4d48772f252062b9b0485cece9d56b553cee89103579e7bf7abe5fb8a1cca8b09e0e4f84f8d532fb8c2c73454d40a796d36878ca3775698d76a1cf16c1740d981bba98fd7eeb50ee7410f90a6ad6f270439379bc3a88c10eef44f6f51"], 0xa34) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab5, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x0, r2}) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000002c0)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="64f5d9f7", 0x4) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x20000, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000180)={0x10001, 0x3, 0xed, 0x1, 0x14cb, 0x60}) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r5, 0x0, 0x10000000000443) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x293b5}], 0x1) ioctl$VIDIOC_G_TUNER(r5, 0xc054561d, &(0x7f0000000340)={0xaade, "8ab8a26f1dd948f088412f4c939ffde3a188a36edd701d83737f5d56fabc0051", 0x7, 0x100, 0x8, 0x8000, 0x8, 0x1, 0x1, 0xffffffffffff7fff}) epoll_pwait(r5, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x4, 0xb9c3, &(0x7f0000000200)={0x4}, 0x8) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000100)={0x9, 0x6fe3a9e3, 0x9, 0x0, 0x5feb, 0x30c, 0x800, 0x4, 0x7, 0x100, 0x1, 0x6, 0x0, 0x3, 0xffffffffffffff00, 0x5, 0xffffffff, 0x2, 0x3}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x4000) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) 19:32:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044942, 0x0) syz_open_dev$admmidi(&(0x7f0000000540)='/dev/admmidi#\x00', 0x0, 0x8000) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20\x00', 0x800, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000600)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={0x6, {{0xa, 0x4e24, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) r2 = socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x101400, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x7) msgget$private(0x0, 0x20) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f00000002c0), 0x6}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x6, 0x81, 0x2, 0x5, 0x7, 0x75d7f6c8, 0xff, 0x100, 0xfff, 0x3ff, 0x0, 0x200f28e3, 0x2, 0x5, 0x7ff, 0x100, 0x4, 0x8c, 0x0, 0x100, 0x0, 0xff, 0x375, 0x100000000, 0x9, 0x8, 0x0, 0x9, 0x1, 0xffff, 0xfff, 0x8]}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000380)=""/173) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, 0x0, 0x0) getsockopt$inet6_int(r1, 0x29, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0xf) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) read(r4, &(0x7f0000000740)=""/207, 0x851) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) unshare(0x40000000) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000140)=[r2, r0], 0x2) 19:32:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xa34) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab5, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x0, r2}) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000002c0)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="64f5d9f7", 0x4) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x20000, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000180)={0x10001, 0x3, 0xed, 0x1, 0x14cb, 0x60}) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r5, 0x0, 0x10000000000443) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x293b5}], 0x1) ioctl$VIDIOC_G_TUNER(r5, 0xc054561d, &(0x7f0000000340)={0xaade, "8ab8a26f1dd948f088412f4c939ffde3a188a36edd701d83737f5d56fabc0051", 0x7, 0x100, 0x8, 0x8000, 0x8, 0x1, 0x1, 0xffffffffffff7fff}) epoll_pwait(r5, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x4, 0xb9c3, &(0x7f0000000200)={0x4}, 0x8) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000100)={0x9, 0x6fe3a9e3, 0x9, 0x0, 0x5feb, 0x30c, 0x800, 0x4, 0x7, 0x100, 0x1, 0x6, 0x0, 0x3, 0xffffffffffffff00, 0x5, 0xffffffff, 0x2, 0x3}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x4000) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) 19:32:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000340)={0x10000000007a, 0x0, [0x1020000048f]}) [ 770.800030][T20807] IPVS: ftp: loaded support on port[0] = 21 [ 771.082958][T20792] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.090169][T20792] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.097561][T20792] device bridge0 left promiscuous mode [ 771.344271][T20791] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.351468][T20791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 771.358882][T20791] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.366064][T20791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 771.468008][T20791] device bridge0 entered promiscuous mode 19:32:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') readv(r0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/184, 0x4}], 0x1) 19:32:38 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xa34) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab5, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x0, r2}) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000002c0)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="64f5d9f7", 0x4) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x20000, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000180)={0x10001, 0x3, 0xed, 0x1, 0x14cb, 0x60}) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r5, 0x0, 0x10000000000443) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x293b5}], 0x1) ioctl$VIDIOC_G_TUNER(r5, 0xc054561d, &(0x7f0000000340)={0xaade, "8ab8a26f1dd948f088412f4c939ffde3a188a36edd701d83737f5d56fabc0051", 0x7, 0x100, 0x8, 0x8000, 0x8, 0x1, 0x1, 0xffffffffffff7fff}) epoll_pwait(r5, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x4, 0xb9c3, &(0x7f0000000200)={0x4}, 0x8) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000100)={0x9, 0x6fe3a9e3, 0x9, 0x0, 0x5feb, 0x30c, 0x800, 0x4, 0x7, 0x100, 0x1, 0x6, 0x0, 0x3, 0xffffffffffffff00, 0x5, 0xffffffff, 0x2, 0x3}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x4000) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) 19:32:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000340)={0x10000000007a, 0x0, [0x1020000048f]}) 19:32:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000340)={0x10000000007a, 0x0, [0x1020000048f]}) 19:32:38 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="9558da36e2412ca90c3a354b3cf5f39218be11a160b767e745ce33f9a1e33adad4e2b9b53c036eb650b2b12b97fc1e5eedd2e569e993329c69810f75bfe08056ded27f251c55dcca5429d4aa02619e5ad9ca0e99"], 0x0, 0x0, 0x5110, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000007fae9ecb7cefa1b83e2d1394fb744539000000000000b6b200000093b205011fd58adef4fe3f34b7b27f92efed217d279da8ef8b111ba55aa3233a30e02b9aaadd97557c59fc663505f6be84539cb9dff968cc77e580831e1a45fbe1a1ee9a2889e47dc1fa70298c1e996161b35ea4c46c788e32124a173db3bb5ac2b28824922df73f6a6f3c016525af4b9c1cf29de386a95de4c91838621185abc52d3948eb841a42b9f355a895e9240292e7f3e077f54847f03c988001aaa1e235facd4ebaf42eb9d4effaf290cc4c9420c1c5db7fb5f676e3"], 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) [ 772.177399][T21129] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.185663][T21129] bridge0: port 1(bridge_slave_0) entered disabled state 19:32:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000340)={0x10000000007a, 0x0, [0x1020000048f]}) 19:32:38 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xa34) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab5, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x0, r2}) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000002c0)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="64f5d9f7", 0x4) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x20000, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000180)={0x10001, 0x3, 0xed, 0x1, 0x14cb, 0x60}) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r5, 0x0, 0x10000000000443) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x293b5}], 0x1) ioctl$VIDIOC_G_TUNER(r5, 0xc054561d, &(0x7f0000000340)={0xaade, "8ab8a26f1dd948f088412f4c939ffde3a188a36edd701d83737f5d56fabc0051", 0x7, 0x100, 0x8, 0x8000, 0x8, 0x1, 0x1, 0xffffffffffff7fff}) epoll_pwait(r5, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x4, 0xb9c3, &(0x7f0000000200)={0x4}, 0x8) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000100)={0x9, 0x6fe3a9e3, 0x9, 0x0, 0x5feb, 0x30c, 0x800, 0x4, 0x7, 0x100, 0x1, 0x6, 0x0, 0x3, 0xffffffffffffff00, 0x5, 0xffffffff, 0x2, 0x3}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x4000) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) 19:32:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000340)={0x10000000007a, 0x0, [0x1020000048f]}) [ 772.315177][T21129] device bridge0 left promiscuous mode 19:32:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000340)={0x10000000007a, 0x0, [0x1020000048f]}) [ 773.483938][T21232] device nr0 entered promiscuous mode [ 773.494076][T21237] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.501223][T21237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.508637][T21237] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.515774][T21237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.669176][T21237] device bridge0 entered promiscuous mode [ 773.676130][T16711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 19:32:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044942, 0x0) syz_open_dev$admmidi(&(0x7f0000000540)='/dev/admmidi#\x00', 0x0, 0x8000) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20\x00', 0x800, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000600)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={0x6, {{0xa, 0x4e24, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) r2 = socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x101400, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x7) msgget$private(0x0, 0x20) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f00000002c0), 0x6}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x6, 0x81, 0x2, 0x5, 0x7, 0x75d7f6c8, 0xff, 0x100, 0xfff, 0x3ff, 0x0, 0x200f28e3, 0x2, 0x5, 0x7ff, 0x100, 0x4, 0x8c, 0x0, 0x100, 0x0, 0xff, 0x375, 0x100000000, 0x9, 0x8, 0x0, 0x9, 0x1, 0xffff, 0xfff, 0x8]}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000380)=""/173) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, 0x0, 0x0) getsockopt$inet6_int(r1, 0x29, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0xf) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) read(r4, &(0x7f0000000740)=""/207, 0x851) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) unshare(0x40000000) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000140)=[r2, r0], 0x2) 19:32:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') readv(r0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/184, 0x4}], 0x1) 19:32:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') readv(r0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/184, 0x4}], 0x1) 19:32:54 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="9558da36e2412ca90c3a354b3cf5f39218be11a160b767e745ce33f9a1e33adad4e2b9b53c036eb650b2b12b97fc1e5eedd2e569e993329c69810f75bfe08056ded27f251c55dcca5429d4aa02619e5ad9ca0e99"], 0x0, 0x0, 0x5110, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000007fae9ecb7cefa1b83e2d1394fb744539000000000000b6b200000093b205011fd58adef4fe3f34b7b27f92efed217d279da8ef8b111ba55aa3233a30e02b9aaadd97557c59fc663505f6be84539cb9dff968cc77e580831e1a45fbe1a1ee9a2889e47dc1fa70298c1e996161b35ea4c46c788e32124a173db3bb5ac2b28824922df73f6a6f3c016525af4b9c1cf29de386a95de4c91838621185abc52d3948eb841a42b9f355a895e9240292e7f3e077f54847f03c988001aaa1e235facd4ebaf42eb9d4effaf290cc4c9420c1c5db7fb5f676e3"], 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) 19:32:54 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="9558da36e2412ca90c3a354b3cf5f39218be11a160b767e745ce33f9a1e33adad4e2b9b53c036eb650b2b12b97fc1e5eedd2e569e993329c69810f75bfe08056ded27f251c55dcca5429d4aa02619e5ad9ca0e99"], 0x0, 0x0, 0x5110, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000007fae9ecb7cefa1b83e2d1394fb744539000000000000b6b200000093b205011fd58adef4fe3f34b7b27f92efed217d279da8ef8b111ba55aa3233a30e02b9aaadd97557c59fc663505f6be84539cb9dff968cc77e580831e1a45fbe1a1ee9a2889e47dc1fa70298c1e996161b35ea4c46c788e32124a173db3bb5ac2b28824922df73f6a6f3c016525af4b9c1cf29de386a95de4c91838621185abc52d3948eb841a42b9f355a895e9240292e7f3e077f54847f03c988001aaa1e235facd4ebaf42eb9d4effaf290cc4c9420c1c5db7fb5f676e3"], 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) 19:32:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') readv(r0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/184, 0x4}], 0x1) [ 787.856815][T21359] device nr0 entered promiscuous mode [ 787.894361][T21358] device nr0 entered promiscuous mode [ 787.920689][T21355] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.930438][T21355] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.987008][T21355] device bridge0 left promiscuous mode [ 788.159766][T21363] IPVS: ftp: loaded support on port[0] = 21 [ 789.431383][T21364] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.438630][T21364] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.461725][T21364] device bridge0 left promiscuous mode [ 789.772026][T21467] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.779186][T21467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.786599][T21467] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.793741][T21467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.847784][T21467] device bridge0 entered promiscuous mode [ 789.875101][T21472] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.882265][T21472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.889703][T21472] bridge0: port 1(bridge_slave_0) entered blocking state 19:32:56 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="9558da36e2412ca90c3a354b3cf5f39218be11a160b767e745ce33f9a1e33adad4e2b9b53c036eb650b2b12b97fc1e5eedd2e569e993329c69810f75bfe08056ded27f251c55dcca5429d4aa02619e5ad9ca0e99"], 0x0, 0x0, 0x5110, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000007fae9ecb7cefa1b83e2d1394fb744539000000000000b6b200000093b205011fd58adef4fe3f34b7b27f92efed217d279da8ef8b111ba55aa3233a30e02b9aaadd97557c59fc663505f6be84539cb9dff968cc77e580831e1a45fbe1a1ee9a2889e47dc1fa70298c1e996161b35ea4c46c788e32124a173db3bb5ac2b28824922df73f6a6f3c016525af4b9c1cf29de386a95de4c91838621185abc52d3948eb841a42b9f355a895e9240292e7f3e077f54847f03c988001aaa1e235facd4ebaf42eb9d4effaf290cc4c9420c1c5db7fb5f676e3"], 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) [ 789.896786][T21472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.962371][T21472] device bridge0 entered promiscuous mode 19:32:56 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="9558da36e2412ca90c3a354b3cf5f39218be11a160b767e745ce33f9a1e33adad4e2b9b53c036eb650b2b12b97fc1e5eedd2e569e993329c69810f75bfe08056ded27f251c55dcca5429d4aa02619e5ad9ca0e99"], 0x0, 0x0, 0x5110, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000007fae9ecb7cefa1b83e2d1394fb744539000000000000b6b200000093b205011fd58adef4fe3f34b7b27f92efed217d279da8ef8b111ba55aa3233a30e02b9aaadd97557c59fc663505f6be84539cb9dff968cc77e580831e1a45fbe1a1ee9a2889e47dc1fa70298c1e996161b35ea4c46c788e32124a173db3bb5ac2b28824922df73f6a6f3c016525af4b9c1cf29de386a95de4c91838621185abc52d3948eb841a42b9f355a895e9240292e7f3e077f54847f03c988001aaa1e235facd4ebaf42eb9d4effaf290cc4c9420c1c5db7fb5f676e3"], 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) [ 790.466225][T16711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 790.486817][T21572] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.495299][T21572] bridge0: port 1(bridge_slave_0) entered disabled state 19:32:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') readv(r0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/184, 0x4}], 0x1) [ 790.545892][T21572] device bridge0 left promiscuous mode 19:32:57 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') readv(r0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/184, 0x4}], 0x1) [ 791.165466][T21573] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.172644][T21573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.180094][T21573] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.187182][T21573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.292302][T21573] device bridge0 entered promiscuous mode [ 791.329651][T21576] bridge0: port 2(bridge_slave_1) entered disabled state 19:32:57 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="9558da36e2412ca90c3a354b3cf5f39218be11a160b767e745ce33f9a1e33adad4e2b9b53c036eb650b2b12b97fc1e5eedd2e569e993329c69810f75bfe08056ded27f251c55dcca5429d4aa02619e5ad9ca0e99"], 0x0, 0x0, 0x5110, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000007fae9ecb7cefa1b83e2d1394fb744539000000000000b6b200000093b205011fd58adef4fe3f34b7b27f92efed217d279da8ef8b111ba55aa3233a30e02b9aaadd97557c59fc663505f6be84539cb9dff968cc77e580831e1a45fbe1a1ee9a2889e47dc1fa70298c1e996161b35ea4c46c788e32124a173db3bb5ac2b28824922df73f6a6f3c016525af4b9c1cf29de386a95de4c91838621185abc52d3948eb841a42b9f355a895e9240292e7f3e077f54847f03c988001aaa1e235facd4ebaf42eb9d4effaf290cc4c9420c1c5db7fb5f676e3"], 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) [ 791.336924][T21576] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.391305][T21576] device bridge0 left promiscuous mode [ 792.112205][T21577] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.119393][T21577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 792.126777][T21577] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.133922][T21577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 792.159219][T21577] device bridge0 entered promiscuous mode 19:32:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') readv(r0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/184, 0x4}], 0x1) [ 792.242327][T21581] device nr0 entered promiscuous mode [ 792.447766][T21590] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.455022][T21590] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.506428][T21590] device bridge0 left promiscuous mode [ 792.893089][T21591] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.900268][T21591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 792.907672][T21591] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.914816][T21591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.036928][T21591] device bridge0 entered promiscuous mode 19:33:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044942, 0x0) syz_open_dev$admmidi(&(0x7f0000000540)='/dev/admmidi#\x00', 0x0, 0x8000) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20\x00', 0x800, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000600)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={0x6, {{0xa, 0x4e24, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) r2 = socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x101400, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x7) msgget$private(0x0, 0x20) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f00000002c0), 0x6}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x6, 0x81, 0x2, 0x5, 0x7, 0x75d7f6c8, 0xff, 0x100, 0xfff, 0x3ff, 0x0, 0x200f28e3, 0x2, 0x5, 0x7ff, 0x100, 0x4, 0x8c, 0x0, 0x100, 0x0, 0xff, 0x375, 0x100000000, 0x9, 0x8, 0x0, 0x9, 0x1, 0xffff, 0xfff, 0x8]}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000380)=""/173) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, 0x0, 0x0) getsockopt$inet6_int(r1, 0x29, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0xf) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) read(r4, &(0x7f0000000740)=""/207, 0x851) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) unshare(0x40000000) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000140)=[r2, r0], 0x2) 19:33:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044942, 0x0) syz_open_dev$admmidi(&(0x7f0000000540)='/dev/admmidi#\x00', 0x0, 0x8000) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20\x00', 0x800, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000600)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={0x6, {{0xa, 0x4e24, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) r2 = socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x101400, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x7) msgget$private(0x0, 0x20) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f00000002c0), 0x6}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x6, 0x81, 0x2, 0x5, 0x7, 0x75d7f6c8, 0xff, 0x100, 0xfff, 0x3ff, 0x0, 0x200f28e3, 0x2, 0x5, 0x7ff, 0x100, 0x4, 0x8c, 0x0, 0x100, 0x0, 0xff, 0x375, 0x100000000, 0x9, 0x8, 0x0, 0x9, 0x1, 0xffff, 0xfff, 0x8]}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000380)=""/173) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, 0x0, 0x0) getsockopt$inet6_int(r1, 0x29, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0xf) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) read(r4, &(0x7f0000000740)=""/207, 0x851) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) unshare(0x40000000) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000140)=[r2, r0], 0x2) 19:33:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044942, 0x0) syz_open_dev$admmidi(&(0x7f0000000540)='/dev/admmidi#\x00', 0x0, 0x8000) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20\x00', 0x800, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000600)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={0x6, {{0xa, 0x4e24, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) r2 = socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x101400, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x7) msgget$private(0x0, 0x20) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f00000002c0), 0x6}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x6, 0x81, 0x2, 0x5, 0x7, 0x75d7f6c8, 0xff, 0x100, 0xfff, 0x3ff, 0x0, 0x200f28e3, 0x2, 0x5, 0x7ff, 0x100, 0x4, 0x8c, 0x0, 0x100, 0x0, 0xff, 0x375, 0x100000000, 0x9, 0x8, 0x0, 0x9, 0x1, 0xffff, 0xfff, 0x8]}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000380)=""/173) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, 0x0, 0x0) getsockopt$inet6_int(r1, 0x29, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0xf) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) read(r4, &(0x7f0000000740)=""/207, 0x851) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) unshare(0x40000000) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000140)=[r2, r0], 0x2) 19:33:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044942, 0x0) syz_open_dev$admmidi(&(0x7f0000000540)='/dev/admmidi#\x00', 0x0, 0x8000) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20\x00', 0x800, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000600)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={0x6, {{0xa, 0x4e24, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) r2 = socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x101400, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x7) msgget$private(0x0, 0x20) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f00000002c0), 0x6}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x6, 0x81, 0x2, 0x5, 0x7, 0x75d7f6c8, 0xff, 0x100, 0xfff, 0x3ff, 0x0, 0x200f28e3, 0x2, 0x5, 0x7ff, 0x100, 0x4, 0x8c, 0x0, 0x100, 0x0, 0xff, 0x375, 0x100000000, 0x9, 0x8, 0x0, 0x9, 0x1, 0xffff, 0xfff, 0x8]}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000380)=""/173) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, 0x0, 0x0) getsockopt$inet6_int(r1, 0x29, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0xf) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) read(r4, &(0x7f0000000740)=""/207, 0x851) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) unshare(0x40000000) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000140)=[r2, r0], 0x2) 19:33:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') readv(r0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/184, 0x4}], 0x1) 19:33:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') readv(r0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/184, 0x4}], 0x1) [ 806.820137][T21709] device nr0 entered promiscuous mode [ 806.853781][T21708] device nr0 entered promiscuous mode [ 807.014241][T21702] IPVS: ftp: loaded support on port[0] = 21 [ 807.275225][T21712] IPVS: ftp: loaded support on port[0] = 21 [ 807.639410][T21710] IPVS: ftp: loaded support on port[0] = 21 [ 807.685989][T21714] IPVS: ftp: loaded support on port[0] = 21 19:33:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044942, 0x0) syz_open_dev$admmidi(&(0x7f0000000540)='/dev/admmidi#\x00', 0x0, 0x8000) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20\x00', 0x800, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000600)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={0x6, {{0xa, 0x4e24, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) r2 = socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x101400, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x7) msgget$private(0x0, 0x20) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f00000002c0), 0x6}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x6, 0x81, 0x2, 0x5, 0x7, 0x75d7f6c8, 0xff, 0x100, 0xfff, 0x3ff, 0x0, 0x200f28e3, 0x2, 0x5, 0x7ff, 0x100, 0x4, 0x8c, 0x0, 0x100, 0x0, 0xff, 0x375, 0x100000000, 0x9, 0x8, 0x0, 0x9, 0x1, 0xffff, 0xfff, 0x8]}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000380)=""/173) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, 0x0, 0x0) getsockopt$inet6_int(r1, 0x29, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0xf) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) read(r4, &(0x7f0000000740)=""/207, 0x851) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) unshare(0x40000000) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000140)=[r2, r0], 0x2) 19:33:15 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="9558da36e2412ca90c3a354b3cf5f39218be11a160b767e745ce33f9a1e33adad4e2b9b53c036eb650b2b12b97fc1e5eedd2e569e993329c69810f75bfe08056ded27f251c55dcca5429d4aa02619e5ad9ca0e99"], 0x0, 0x0, 0x5110, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000007fae9ecb7cefa1b83e2d1394fb744539000000000000b6b200000093b205011fd58adef4fe3f34b7b27f92efed217d279da8ef8b111ba55aa3233a30e02b9aaadd97557c59fc663505f6be84539cb9dff968cc77e580831e1a45fbe1a1ee9a2889e47dc1fa70298c1e996161b35ea4c46c788e32124a173db3bb5ac2b28824922df73f6a6f3c016525af4b9c1cf29de386a95de4c91838621185abc52d3948eb841a42b9f355a895e9240292e7f3e077f54847f03c988001aaa1e235facd4ebaf42eb9d4effaf290cc4c9420c1c5db7fb5f676e3"], 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) [ 808.782160][T21823] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.793139][T21823] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.924844][T21823] device bridge0 left promiscuous mode [ 808.995749][T21821] IPVS: ftp: loaded support on port[0] = 21 [ 810.055827][T21861] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.063912][T21861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.072305][T21861] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.080196][T21861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 810.168734][T21861] device bridge0 entered promiscuous mode 19:33:16 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="9558da36e2412ca90c3a354b3cf5f39218be11a160b767e745ce33f9a1e33adad4e2b9b53c036eb650b2b12b97fc1e5eedd2e569e993329c69810f75bfe08056ded27f251c55dcca5429d4aa02619e5ad9ca0e99"], 0x0, 0x0, 0x5110, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000007fae9ecb7cefa1b83e2d1394fb744539000000000000b6b200000093b205011fd58adef4fe3f34b7b27f92efed217d279da8ef8b111ba55aa3233a30e02b9aaadd97557c59fc663505f6be84539cb9dff968cc77e580831e1a45fbe1a1ee9a2889e47dc1fa70298c1e996161b35ea4c46c788e32124a173db3bb5ac2b28824922df73f6a6f3c016525af4b9c1cf29de386a95de4c91838621185abc52d3948eb841a42b9f355a895e9240292e7f3e077f54847f03c988001aaa1e235facd4ebaf42eb9d4effaf290cc4c9420c1c5db7fb5f676e3"], 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) [ 810.440022][T21927] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.450408][T21927] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.524114][T21927] device bridge0 left promiscuous mode [ 811.679877][T21928] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.687257][T21928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 811.694762][T21928] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.701911][T21928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 811.849729][T21928] device bridge0 entered promiscuous mode 19:33:18 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="9558da36e2412ca90c3a354b3cf5f39218be11a160b767e745ce33f9a1e33adad4e2b9b53c036eb650b2b12b97fc1e5eedd2e569e993329c69810f75bfe08056ded27f251c55dcca5429d4aa02619e5ad9ca0e99"], 0x0, 0x0, 0x5110, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000007fae9ecb7cefa1b83e2d1394fb744539000000000000b6b200000093b205011fd58adef4fe3f34b7b27f92efed217d279da8ef8b111ba55aa3233a30e02b9aaadd97557c59fc663505f6be84539cb9dff968cc77e580831e1a45fbe1a1ee9a2889e47dc1fa70298c1e996161b35ea4c46c788e32124a173db3bb5ac2b28824922df73f6a6f3c016525af4b9c1cf29de386a95de4c91838621185abc52d3948eb841a42b9f355a895e9240292e7f3e077f54847f03c988001aaa1e235facd4ebaf42eb9d4effaf290cc4c9420c1c5db7fb5f676e3"], 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) [ 812.219792][T21931] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.228035][T21931] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.292562][T21931] device bridge0 left promiscuous mode [ 813.422249][T21932] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.429411][T21932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.436793][T21932] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.443928][T21932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.509256][T21932] device bridge0 entered promiscuous mode [ 813.516300][T21697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 19:33:20 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="9558da36e2412ca90c3a354b3cf5f39218be11a160b767e745ce33f9a1e33adad4e2b9b53c036eb650b2b12b97fc1e5eedd2e569e993329c69810f75bfe08056ded27f251c55dcca5429d4aa02619e5ad9ca0e99"], 0x0, 0x0, 0x5110, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000007fae9ecb7cefa1b83e2d1394fb744539000000000000b6b200000093b205011fd58adef4fe3f34b7b27f92efed217d279da8ef8b111ba55aa3233a30e02b9aaadd97557c59fc663505f6be84539cb9dff968cc77e580831e1a45fbe1a1ee9a2889e47dc1fa70298c1e996161b35ea4c46c788e32124a173db3bb5ac2b28824922df73f6a6f3c016525af4b9c1cf29de386a95de4c91838621185abc52d3948eb841a42b9f355a895e9240292e7f3e077f54847f03c988001aaa1e235facd4ebaf42eb9d4effaf290cc4c9420c1c5db7fb5f676e3"], 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) [ 813.909567][T21935] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.918893][T21935] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.041160][T21935] device bridge0 left promiscuous mode [ 815.230035][T21936] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.237174][T21936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.244666][T21936] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.251783][T21936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.429696][T21936] device bridge0 entered promiscuous mode 19:33:22 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="9558da36e2412ca90c3a354b3cf5f39218be11a160b767e745ce33f9a1e33adad4e2b9b53c036eb650b2b12b97fc1e5eedd2e569e993329c69810f75bfe08056ded27f251c55dcca5429d4aa02619e5ad9ca0e99"], 0x0, 0x0, 0x5110, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000007fae9ecb7cefa1b83e2d1394fb744539000000000000b6b200000093b205011fd58adef4fe3f34b7b27f92efed217d279da8ef8b111ba55aa3233a30e02b9aaadd97557c59fc663505f6be84539cb9dff968cc77e580831e1a45fbe1a1ee9a2889e47dc1fa70298c1e996161b35ea4c46c788e32124a173db3bb5ac2b28824922df73f6a6f3c016525af4b9c1cf29de386a95de4c91838621185abc52d3948eb841a42b9f355a895e9240292e7f3e077f54847f03c988001aaa1e235facd4ebaf42eb9d4effaf290cc4c9420c1c5db7fb5f676e3"], 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) [ 815.812064][T21939] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.821403][T21939] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.927430][T21939] device bridge0 left promiscuous mode [ 817.195178][T21940] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.202336][T21940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 817.209775][T21940] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.216860][T21940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.369381][T21940] device bridge0 entered promiscuous mode 19:33:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044942, 0x0) syz_open_dev$admmidi(&(0x7f0000000540)='/dev/admmidi#\x00', 0x0, 0x8000) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20\x00', 0x800, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000600)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={0x6, {{0xa, 0x4e24, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) r2 = socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x101400, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x7) msgget$private(0x0, 0x20) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f00000002c0), 0x6}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x6, 0x81, 0x2, 0x5, 0x7, 0x75d7f6c8, 0xff, 0x100, 0xfff, 0x3ff, 0x0, 0x200f28e3, 0x2, 0x5, 0x7ff, 0x100, 0x4, 0x8c, 0x0, 0x100, 0x0, 0xff, 0x375, 0x100000000, 0x9, 0x8, 0x0, 0x9, 0x1, 0xffff, 0xfff, 0x8]}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000380)=""/173) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, 0x0, 0x0) getsockopt$inet6_int(r1, 0x29, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0xf) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) read(r4, &(0x7f0000000740)=""/207, 0x851) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) unshare(0x40000000) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000140)=[r2, r0], 0x2) 19:33:39 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="9558da36e2412ca90c3a354b3cf5f39218be11a160b767e745ce33f9a1e33adad4e2b9b53c036eb650b2b12b97fc1e5eedd2e569e993329c69810f75bfe08056ded27f251c55dcca5429d4aa02619e5ad9ca0e99"], 0x0, 0x0, 0x5110, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000007fae9ecb7cefa1b83e2d1394fb744539000000000000b6b200000093b205011fd58adef4fe3f34b7b27f92efed217d279da8ef8b111ba55aa3233a30e02b9aaadd97557c59fc663505f6be84539cb9dff968cc77e580831e1a45fbe1a1ee9a2889e47dc1fa70298c1e996161b35ea4c46c788e32124a173db3bb5ac2b28824922df73f6a6f3c016525af4b9c1cf29de386a95de4c91838621185abc52d3948eb841a42b9f355a895e9240292e7f3e077f54847f03c988001aaa1e235facd4ebaf42eb9d4effaf290cc4c9420c1c5db7fb5f676e3"], 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) 19:33:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044942, 0x0) syz_open_dev$admmidi(&(0x7f0000000540)='/dev/admmidi#\x00', 0x0, 0x8000) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20\x00', 0x800, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000600)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={0x6, {{0xa, 0x4e24, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) r2 = socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x101400, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x7) msgget$private(0x0, 0x20) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f00000002c0), 0x6}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x6, 0x81, 0x2, 0x5, 0x7, 0x75d7f6c8, 0xff, 0x100, 0xfff, 0x3ff, 0x0, 0x200f28e3, 0x2, 0x5, 0x7ff, 0x100, 0x4, 0x8c, 0x0, 0x100, 0x0, 0xff, 0x375, 0x100000000, 0x9, 0x8, 0x0, 0x9, 0x1, 0xffff, 0xfff, 0x8]}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000380)=""/173) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, 0x0, 0x0) getsockopt$inet6_int(r1, 0x29, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0xf) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) read(r4, &(0x7f0000000740)=""/207, 0x851) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) unshare(0x40000000) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000140)=[r2, r0], 0x2) 19:33:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044942, 0x0) syz_open_dev$admmidi(&(0x7f0000000540)='/dev/admmidi#\x00', 0x0, 0x8000) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20\x00', 0x800, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000600)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={0x6, {{0xa, 0x4e24, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) r2 = socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x101400, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x7) msgget$private(0x0, 0x20) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f00000002c0), 0x6}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x6, 0x81, 0x2, 0x5, 0x7, 0x75d7f6c8, 0xff, 0x100, 0xfff, 0x3ff, 0x0, 0x200f28e3, 0x2, 0x5, 0x7ff, 0x100, 0x4, 0x8c, 0x0, 0x100, 0x0, 0xff, 0x375, 0x100000000, 0x9, 0x8, 0x0, 0x9, 0x1, 0xffff, 0xfff, 0x8]}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000380)=""/173) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, 0x0, 0x0) getsockopt$inet6_int(r1, 0x29, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0xf) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) read(r4, &(0x7f0000000740)=""/207, 0x851) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) unshare(0x40000000) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000140)=[r2, r0], 0x2) 19:33:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044942, 0x0) syz_open_dev$admmidi(&(0x7f0000000540)='/dev/admmidi#\x00', 0x0, 0x8000) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20\x00', 0x800, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000600)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={0x6, {{0xa, 0x4e24, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) r2 = socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x101400, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x7) msgget$private(0x0, 0x20) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f00000002c0), 0x6}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x6, 0x81, 0x2, 0x5, 0x7, 0x75d7f6c8, 0xff, 0x100, 0xfff, 0x3ff, 0x0, 0x200f28e3, 0x2, 0x5, 0x7ff, 0x100, 0x4, 0x8c, 0x0, 0x100, 0x0, 0xff, 0x375, 0x100000000, 0x9, 0x8, 0x0, 0x9, 0x1, 0xffff, 0xfff, 0x8]}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000380)=""/173) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, 0x0, 0x0) getsockopt$inet6_int(r1, 0x29, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0xf) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) read(r4, &(0x7f0000000740)=""/207, 0x851) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) unshare(0x40000000) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000140)=[r2, r0], 0x2) [ 832.943714][T21951] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.953158][T21951] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.004501][T21951] device bridge0 left promiscuous mode [ 833.185585][T21947] IPVS: ftp: loaded support on port[0] = 21 [ 833.273889][T22058] IPVS: ftp: loaded support on port[0] = 21 [ 833.366589][T21949] IPVS: ftp: loaded support on port[0] = 21 [ 833.862911][T21987] IPVS: ftp: loaded support on port[0] = 21 [ 833.929752][T21954] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.936925][T21954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.944385][T21954] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.951524][T21954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.995810][T21954] device bridge0 entered promiscuous mode 19:33:40 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="9558da36e2412ca90c3a354b3cf5f39218be11a160b767e745ce33f9a1e33adad4e2b9b53c036eb650b2b12b97fc1e5eedd2e569e993329c69810f75bfe08056ded27f251c55dcca5429d4aa02619e5ad9ca0e99"], 0x0, 0x0, 0x5110, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000007fae9ecb7cefa1b83e2d1394fb744539000000000000b6b200000093b205011fd58adef4fe3f34b7b27f92efed217d279da8ef8b111ba55aa3233a30e02b9aaadd97557c59fc663505f6be84539cb9dff968cc77e580831e1a45fbe1a1ee9a2889e47dc1fa70298c1e996161b35ea4c46c788e32124a173db3bb5ac2b28824922df73f6a6f3c016525af4b9c1cf29de386a95de4c91838621185abc52d3948eb841a42b9f355a895e9240292e7f3e077f54847f03c988001aaa1e235facd4ebaf42eb9d4effaf290cc4c9420c1c5db7fb5f676e3"], 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) [ 834.229426][T22062] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.237876][T22062] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.322028][T22062] device bridge0 left promiscuous mode 19:33:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044942, 0x0) syz_open_dev$admmidi(&(0x7f0000000540)='/dev/admmidi#\x00', 0x0, 0x8000) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20\x00', 0x800, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000600)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={0x6, {{0xa, 0x4e24, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) r2 = socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x101400, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x7) msgget$private(0x0, 0x20) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f00000002c0), 0x6}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x6, 0x81, 0x2, 0x5, 0x7, 0x75d7f6c8, 0xff, 0x100, 0xfff, 0x3ff, 0x0, 0x200f28e3, 0x2, 0x5, 0x7ff, 0x100, 0x4, 0x8c, 0x0, 0x100, 0x0, 0xff, 0x375, 0x100000000, 0x9, 0x8, 0x0, 0x9, 0x1, 0xffff, 0xfff, 0x8]}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000380)=""/173) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, 0x0, 0x0) getsockopt$inet6_int(r1, 0x29, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0xf) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) read(r4, &(0x7f0000000740)=""/207, 0x851) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) unshare(0x40000000) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000140)=[r2, r0], 0x2) 19:33:46 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="9558da36e2412ca90c3a354b3cf5f39218be11a160b767e745ce33f9a1e33adad4e2b9b53c036eb650b2b12b97fc1e5eedd2e569e993329c69810f75bfe08056ded27f251c55dcca5429d4aa02619e5ad9ca0e99"], 0x0, 0x0, 0x5110, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000007fae9ecb7cefa1b83e2d1394fb744539000000000000b6b200000093b205011fd58adef4fe3f34b7b27f92efed217d279da8ef8b111ba55aa3233a30e02b9aaadd97557c59fc663505f6be84539cb9dff968cc77e580831e1a45fbe1a1ee9a2889e47dc1fa70298c1e996161b35ea4c46c788e32124a173db3bb5ac2b28824922df73f6a6f3c016525af4b9c1cf29de386a95de4c91838621185abc52d3948eb841a42b9f355a895e9240292e7f3e077f54847f03c988001aaa1e235facd4ebaf42eb9d4effaf290cc4c9420c1c5db7fb5f676e3"], 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) [ 840.336195][T22071] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.343773][T22071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 840.353433][T22071] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.361209][T22071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 840.460450][T22071] device bridge0 entered promiscuous mode [ 840.544459][T22069] IPVS: ftp: loaded support on port[0] = 21 [ 840.559557][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 19:33:47 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="9558da36e2412ca90c3a354b3cf5f39218be11a160b767e745ce33f9a1e33adad4e2b9b53c036eb650b2b12b97fc1e5eedd2e569e993329c69810f75bfe08056ded27f251c55dcca5429d4aa02619e5ad9ca0e99"], 0x0, 0x0, 0x5110, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000007fae9ecb7cefa1b83e2d1394fb744539000000000000b6b200000093b205011fd58adef4fe3f34b7b27f92efed217d279da8ef8b111ba55aa3233a30e02b9aaadd97557c59fc663505f6be84539cb9dff968cc77e580831e1a45fbe1a1ee9a2889e47dc1fa70298c1e996161b35ea4c46c788e32124a173db3bb5ac2b28824922df73f6a6f3c016525af4b9c1cf29de386a95de4c91838621185abc52d3948eb841a42b9f355a895e9240292e7f3e077f54847f03c988001aaa1e235facd4ebaf42eb9d4effaf290cc4c9420c1c5db7fb5f676e3"], 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) 19:33:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044942, 0x0) syz_open_dev$admmidi(&(0x7f0000000540)='/dev/admmidi#\x00', 0x0, 0x8000) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20\x00', 0x800, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000600)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={0x6, {{0xa, 0x4e24, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) r2 = socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x101400, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x7) msgget$private(0x0, 0x20) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f00000002c0), 0x6}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x6, 0x81, 0x2, 0x5, 0x7, 0x75d7f6c8, 0xff, 0x100, 0xfff, 0x3ff, 0x0, 0x200f28e3, 0x2, 0x5, 0x7ff, 0x100, 0x4, 0x8c, 0x0, 0x100, 0x0, 0xff, 0x375, 0x100000000, 0x9, 0x8, 0x0, 0x9, 0x1, 0xffff, 0xfff, 0x8]}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000380)=""/173) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, 0x0, 0x0) getsockopt$inet6_int(r1, 0x29, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0xf) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) read(r4, &(0x7f0000000740)=""/207, 0x851) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) unshare(0x40000000) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000140)=[r2, r0], 0x2) [ 841.147500][T22178] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.156586][T22178] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.222407][T22178] device bridge0 left promiscuous mode [ 841.230457][T22176] IPVS: ftp: loaded support on port[0] = 21 [ 842.193087][T22179] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.200244][T22179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.207622][T22179] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.214749][T22179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.360240][T22179] device bridge0 entered promiscuous mode 19:33:49 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="9558da36e2412ca90c3a354b3cf5f39218be11a160b767e745ce33f9a1e33adad4e2b9b53c036eb650b2b12b97fc1e5eedd2e569e993329c69810f75bfe08056ded27f251c55dcca5429d4aa02619e5ad9ca0e99"], 0x0, 0x0, 0x5110, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000007fae9ecb7cefa1b83e2d1394fb744539000000000000b6b200000093b205011fd58adef4fe3f34b7b27f92efed217d279da8ef8b111ba55aa3233a30e02b9aaadd97557c59fc663505f6be84539cb9dff968cc77e580831e1a45fbe1a1ee9a2889e47dc1fa70298c1e996161b35ea4c46c788e32124a173db3bb5ac2b28824922df73f6a6f3c016525af4b9c1cf29de386a95de4c91838621185abc52d3948eb841a42b9f355a895e9240292e7f3e077f54847f03c988001aaa1e235facd4ebaf42eb9d4effaf290cc4c9420c1c5db7fb5f676e3"], 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) [ 842.711447][T22183] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.719583][T22183] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.739901][T22183] device bridge0 left promiscuous mode [ 843.872998][T22184] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.880151][T22184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.887543][T22184] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.894685][T22184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 844.029648][T22184] device bridge0 entered promiscuous mode 19:33:50 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="9558da36e2412ca90c3a354b3cf5f39218be11a160b767e745ce33f9a1e33adad4e2b9b53c036eb650b2b12b97fc1e5eedd2e569e993329c69810f75bfe08056ded27f251c55dcca5429d4aa02619e5ad9ca0e99"], 0x0, 0x0, 0x5110, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000007fae9ecb7cefa1b83e2d1394fb744539000000000000b6b200000093b205011fd58adef4fe3f34b7b27f92efed217d279da8ef8b111ba55aa3233a30e02b9aaadd97557c59fc663505f6be84539cb9dff968cc77e580831e1a45fbe1a1ee9a2889e47dc1fa70298c1e996161b35ea4c46c788e32124a173db3bb5ac2b28824922df73f6a6f3c016525af4b9c1cf29de386a95de4c91838621185abc52d3948eb841a42b9f355a895e9240292e7f3e077f54847f03c988001aaa1e235facd4ebaf42eb9d4effaf290cc4c9420c1c5db7fb5f676e3"], 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) [ 844.440415][T22187] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.448482][T22187] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.540631][T22187] device bridge0 left promiscuous mode [ 845.519768][T22188] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.526866][T22188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.534408][T22188] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.541522][T22188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.669236][T22188] device bridge0 entered promiscuous mode 19:34:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044942, 0x0) syz_open_dev$admmidi(&(0x7f0000000540)='/dev/admmidi#\x00', 0x0, 0x8000) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20\x00', 0x800, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000600)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={0x6, {{0xa, 0x4e24, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) r2 = socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x101400, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x7) msgget$private(0x0, 0x20) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f00000002c0), 0x6}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x6, 0x81, 0x2, 0x5, 0x7, 0x75d7f6c8, 0xff, 0x100, 0xfff, 0x3ff, 0x0, 0x200f28e3, 0x2, 0x5, 0x7ff, 0x100, 0x4, 0x8c, 0x0, 0x100, 0x0, 0xff, 0x375, 0x100000000, 0x9, 0x8, 0x0, 0x9, 0x1, 0xffff, 0xfff, 0x8]}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000380)=""/173) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, 0x0, 0x0) getsockopt$inet6_int(r1, 0x29, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0xf) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) read(r4, &(0x7f0000000740)=""/207, 0x851) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) unshare(0x40000000) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000140)=[r2, r0], 0x2) 19:34:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x1, 0x1a0, [0x20000380, 0x0, 0x0, 0x200003b0, 0x200003e0], 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000001000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000006000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000000300736630000010000000000000000064756d6d79300000000000000000000069666230000000000000000f000000006c6f0000000000000000000000000000ffffffffffff000000000000ffffffffffff000000000000000070000000a8000000e0000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000fcffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fdffffff00000000"]}, 0x218) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x138, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ya\x020\x00\x00\x01\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote, [], @link_local, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev, 0xfffffffffffffffd}}}}]}]}, 0x1b0) 19:34:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xa34) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab5, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x0, r2}) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000002c0)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="64f5d9f7", 0x4) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x20000, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000180)={0x10001, 0x3, 0xed, 0x1, 0x14cb, 0x60}) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r5, 0x0, 0x10000000000443) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x293b5}], 0x1) ioctl$VIDIOC_G_TUNER(r5, 0xc054561d, &(0x7f0000000340)={0xaade, "8ab8a26f1dd948f088412f4c939ffde3a188a36edd701d83737f5d56fabc0051", 0x7, 0x100, 0x8, 0x8000, 0x8, 0x1, 0x1, 0xffffffffffff7fff}) epoll_pwait(r5, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x4, 0xb9c3, &(0x7f0000000200)={0x4}, 0x8) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000100)={0x9, 0x6fe3a9e3, 0x9, 0x0, 0x5feb, 0x30c, 0x800, 0x4, 0x7, 0x100, 0x1, 0x6, 0x0, 0x3, 0xffffffffffffff00, 0x5, 0xffffffff, 0x2, 0x3}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x4000) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) 19:34:05 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="9558da36e2412ca90c3a354b3cf5f39218be11a160b767e745ce33f9a1e33adad4e2b9b53c036eb650b2b12b97fc1e5eedd2e569e993329c69810f75bfe08056ded27f251c55dcca5429d4aa02619e5ad9ca0e99"], 0x0, 0x0, 0x5110, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000007fae9ecb7cefa1b83e2d1394fb744539000000000000b6b200000093b205011fd58adef4fe3f34b7b27f92efed217d279da8ef8b111ba55aa3233a30e02b9aaadd97557c59fc663505f6be84539cb9dff968cc77e580831e1a45fbe1a1ee9a2889e47dc1fa70298c1e996161b35ea4c46c788e32124a173db3bb5ac2b28824922df73f6a6f3c016525af4b9c1cf29de386a95de4c91838621185abc52d3948eb841a42b9f355a895e9240292e7f3e077f54847f03c988001aaa1e235facd4ebaf42eb9d4effaf290cc4c9420c1c5db7fb5f676e3"], 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) 19:34:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044942, 0x0) syz_open_dev$admmidi(&(0x7f0000000540)='/dev/admmidi#\x00', 0x0, 0x8000) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20\x00', 0x800, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000600)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={0x6, {{0xa, 0x4e24, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) r2 = socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x101400, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x7) msgget$private(0x0, 0x20) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f00000002c0), 0x6}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x6, 0x81, 0x2, 0x5, 0x7, 0x75d7f6c8, 0xff, 0x100, 0xfff, 0x3ff, 0x0, 0x200f28e3, 0x2, 0x5, 0x7ff, 0x100, 0x4, 0x8c, 0x0, 0x100, 0x0, 0xff, 0x375, 0x100000000, 0x9, 0x8, 0x0, 0x9, 0x1, 0xffff, 0xfff, 0x8]}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000380)=""/173) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, 0x0, 0x0) getsockopt$inet6_int(r1, 0x29, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0xf) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) read(r4, &(0x7f0000000740)=""/207, 0x851) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) unshare(0x40000000) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000140)=[r2, r0], 0x2) [ 859.050691][T22198] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.060017][T22198] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.086461][T22198] device bridge0 left promiscuous mode 19:34:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x1, 0x1a0, [0x20000380, 0x0, 0x0, 0x200003b0, 0x200003e0], 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000001000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000006000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000000300736630000010000000000000000064756d6d79300000000000000000000069666230000000000000000f000000006c6f0000000000000000000000000000ffffffffffff000000000000ffffffffffff000000000000000070000000a8000000e0000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000fcffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fdffffff00000000"]}, 0x218) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x138, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ya\x020\x00\x00\x01\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote, [], @link_local, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev, 0xfffffffffffffffd}}}}]}]}, 0x1b0) [ 859.877343][T22248] IPVS: ftp: loaded support on port[0] = 21 [ 859.923705][T22230] IPVS: ftp: loaded support on port[0] = 21 [ 860.236807][T22267] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.243971][T22267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 860.251407][T22267] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.258496][T22267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 860.368850][T22267] device bridge0 entered promiscuous mode [ 861.309210][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 19:34:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044942, 0x0) syz_open_dev$admmidi(&(0x7f0000000540)='/dev/admmidi#\x00', 0x0, 0x8000) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20\x00', 0x800, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000600)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={0x6, {{0xa, 0x4e24, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) r2 = socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x101400, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x7) msgget$private(0x0, 0x20) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f00000002c0), 0x6}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x6, 0x81, 0x2, 0x5, 0x7, 0x75d7f6c8, 0xff, 0x100, 0xfff, 0x3ff, 0x0, 0x200f28e3, 0x2, 0x5, 0x7ff, 0x100, 0x4, 0x8c, 0x0, 0x100, 0x0, 0xff, 0x375, 0x100000000, 0x9, 0x8, 0x0, 0x9, 0x1, 0xffff, 0xfff, 0x8]}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000380)=""/173) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, 0x0, 0x0) getsockopt$inet6_int(r1, 0x29, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0xf) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) read(r4, &(0x7f0000000740)=""/207, 0x851) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) unshare(0x40000000) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000140)=[r2, r0], 0x2) 19:34:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x1, 0x1a0, [0x20000380, 0x0, 0x0, 0x200003b0, 0x200003e0], 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000001000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000006000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000000300736630000010000000000000000064756d6d79300000000000000000000069666230000000000000000f000000006c6f0000000000000000000000000000ffffffffffff000000000000ffffffffffff000000000000000070000000a8000000e0000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000fcffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fdffffff00000000"]}, 0x218) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x138, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ya\x020\x00\x00\x01\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote, [], @link_local, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev, 0xfffffffffffffffd}}}}]}]}, 0x1b0) 19:34:14 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xa34) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab5, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x0, r2}) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000002c0)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="64f5d9f7", 0x4) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x20000, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000180)={0x10001, 0x3, 0xed, 0x1, 0x14cb, 0x60}) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r5, 0x0, 0x10000000000443) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x293b5}], 0x1) ioctl$VIDIOC_G_TUNER(r5, 0xc054561d, &(0x7f0000000340)={0xaade, "8ab8a26f1dd948f088412f4c939ffde3a188a36edd701d83737f5d56fabc0051", 0x7, 0x100, 0x8, 0x8000, 0x8, 0x1, 0x1, 0xffffffffffff7fff}) epoll_pwait(r5, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x4, 0xb9c3, &(0x7f0000000200)={0x4}, 0x8) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000100)={0x9, 0x6fe3a9e3, 0x9, 0x0, 0x5feb, 0x30c, 0x800, 0x4, 0x7, 0x100, 0x1, 0x6, 0x0, 0x3, 0xffffffffffffff00, 0x5, 0xffffffff, 0x2, 0x3}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x4000) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) 19:34:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x1, 0x1a0, [0x20000380, 0x0, 0x0, 0x200003b0, 0x200003e0], 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000001000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000006000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000000300736630000010000000000000000064756d6d79300000000000000000000069666230000000000000000f000000006c6f0000000000000000000000000000ffffffffffff000000000000ffffffffffff000000000000000070000000a8000000e0000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000fcffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fdffffff00000000"]}, 0x218) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x138, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ya\x020\x00\x00\x01\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote, [], @link_local, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev, 0xfffffffffffffffd}}}}]}]}, 0x1b0) 19:34:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x1, 0x1a0, [0x20000380, 0x0, 0x0, 0x200003b0, 0x200003e0], 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000001000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000006000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000000300736630000010000000000000000064756d6d79300000000000000000000069666230000000000000000f000000006c6f0000000000000000000000000000ffffffffffff000000000000ffffffffffff000000000000000070000000a8000000e0000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000fcffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fdffffff00000000"]}, 0x218) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x138, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ya\x020\x00\x00\x01\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote, [], @link_local, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev, 0xfffffffffffffffd}}}}]}]}, 0x1b0) 19:34:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x1, 0x1a0, [0x20000380, 0x0, 0x0, 0x200003b0, 0x200003e0], 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000001000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000006000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000000300736630000010000000000000000064756d6d79300000000000000000000069666230000000000000000f000000006c6f0000000000000000000000000000ffffffffffff000000000000ffffffffffff000000000000000070000000a8000000e0000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000fcffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fdffffff00000000"]}, 0x218) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x138, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ya\x020\x00\x00\x01\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote, [], @link_local, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev, 0xfffffffffffffffd}}}}]}]}, 0x1b0) [ 867.698303][T22522] IPVS: ftp: loaded support on port[0] = 21 19:34:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x1, 0x1a0, [0x20000380, 0x0, 0x0, 0x200003b0, 0x200003e0], 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000001000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000006000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000000300736630000010000000000000000064756d6d79300000000000000000000069666230000000000000000f000000006c6f0000000000000000000000000000ffffffffffff000000000000ffffffffffff000000000000000070000000a8000000e0000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000fcffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fdffffff00000000"]}, 0x218) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x138, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ya\x020\x00\x00\x01\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote, [], @link_local, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev, 0xfffffffffffffffd}}}}]}]}, 0x1b0) 19:34:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000100)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000340)={0x1, 0x0, [{0xfff}]}) 19:34:15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000001140)=ANY=[@ANYBLOB="7f454c4604f40057ff0300000000000000003f00ff0d0000880300000000000040000000000000000403000000000000090000008100380001000900a80000000000000007000000020000000000000008000000000000000800000000000000000100000000000003000000000000000d010000000000008fc764bd8d1eed4d0ebe136557a09c7a73c4ab2cdc6ce5771a4ebca7b66a0d982aeea7b9716a3ee2d82f19d1818bebb6d08a2d939100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023c267c60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2e9afa0ca919e016d7d0d6428c4e6a04f18e954225b3a34d6a8cdcf375060d13069ca77df9deb0f546ce4d48772f252062b9b0485cece9d56b553cee89103579e7bf7abe5fb8a1cca8b09e0e4f84f8d532fb8c2c73454d40a796d36878ca3775698d76a1cf16c1740d981bba98fd7eeb50ee7410f90a6ad6f270439379bc3a88c10eef44f6f51"], 0xa34) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab5, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x0, r2}) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000002c0)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="64f5d9f7", 0x4) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x20000, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000180)={0x10001, 0x3, 0xed, 0x1, 0x14cb, 0x60}) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r5, 0x0, 0x10000000000443) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x293b5}], 0x1) ioctl$VIDIOC_G_TUNER(r5, 0xc054561d, &(0x7f0000000340)={0xaade, "8ab8a26f1dd948f088412f4c939ffde3a188a36edd701d83737f5d56fabc0051", 0x7, 0x100, 0x8, 0x8000, 0x8, 0x1, 0x1, 0xffffffffffff7fff}) epoll_pwait(r5, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x4, 0xb9c3, &(0x7f0000000200)={0x4}, 0x8) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000100)={0x9, 0x6fe3a9e3, 0x9, 0x0, 0x5feb, 0x30c, 0x800, 0x4, 0x7, 0x100, 0x1, 0x6, 0x0, 0x3, 0xffffffffffffff00, 0x5, 0xffffffff, 0x2, 0x3}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x4000) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) 19:34:15 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x76, &(0x7f00000000c0)={0x7}, 0x8) 19:34:15 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x1d6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='gretap0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) sendto(r0, &(0x7f0000000100)='s', 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 19:34:15 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x80}) 19:34:15 executing program 0: setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x6, 0x3b3) r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x72, &(0x7f0000000000), &(0x7f0000000400)=0xae) 19:34:15 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 19:34:15 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x1d6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='gretap0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) sendto(r0, &(0x7f0000000100)='s', 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 19:34:15 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x80}) 19:34:16 executing program 0: setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x6, 0x3b3) r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x72, &(0x7f0000000000), &(0x7f0000000400)=0xae) 19:34:16 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x1d6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='gretap0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) sendto(r0, &(0x7f0000000100)='s', 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 19:34:16 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x76, &(0x7f00000000c0)={0x7}, 0x8) 19:34:16 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x80}) 19:34:16 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 19:34:16 executing program 0: setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x6, 0x3b3) r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x72, &(0x7f0000000000), &(0x7f0000000400)=0xae) 19:34:16 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x80}) 19:34:16 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 19:34:16 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x1d6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='gretap0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) sendto(r0, &(0x7f0000000100)='s', 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 19:34:16 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x80}) 19:34:16 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x80}) 19:34:16 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x76, &(0x7f00000000c0)={0x7}, 0x8) 19:34:16 executing program 0: setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x6, 0x3b3) r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x72, &(0x7f0000000000), &(0x7f0000000400)=0xae) 19:34:16 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 19:34:16 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 19:34:16 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 19:34:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x1d6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='gretap0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) sendto(r0, &(0x7f0000000100)='s', 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 19:34:16 executing program 5: r0 = socket(0x1e, 0x2000000000000805, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) 19:34:16 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x80}) 19:34:16 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 19:34:16 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x76, &(0x7f00000000c0)={0x7}, 0x8) 19:34:16 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 19:34:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x1d6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='gretap0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) sendto(r0, &(0x7f0000000100)='s', 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 19:34:16 executing program 5: r0 = socket(0x1e, 0x2000000000000805, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) 19:34:16 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 19:34:17 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 19:34:17 executing program 4: r0 = socket(0x1e, 0x2000000000000805, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) 19:34:17 executing program 5: r0 = socket(0x1e, 0x2000000000000805, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) 19:34:17 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='dax\x00', 0x401, &(0x7f0000000100)='(\x00') 19:34:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x1d6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='gretap0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) sendto(r0, &(0x7f0000000100)='s', 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 19:34:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='sessionid\x00') pread64(r0, 0x0, 0x0, 0x0) 19:34:17 executing program 5: r0 = socket(0x1e, 0x2000000000000805, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) 19:34:17 executing program 0: ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = socket$unix(0x1, 0x2, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg(r1, &(0x7f0000000040), 0x40000000000020f, 0xc0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0) 19:34:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='sessionid\x00') pread64(r0, 0x0, 0x0, 0x0) 19:34:17 executing program 4: r0 = socket(0x1e, 0x2000000000000805, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) 19:34:17 executing program 2: syz_execute_func(&(0x7f00000000c0)="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") syz_execute_func(&(0x7f0000000080)="66430f67c564ff0941c366440f56c9660f3a16649c6700449fc441dfd04b00c442019dcc0f11d46f") syz_execute_func(&(0x7f0000000680)="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") 19:34:17 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = creat(0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getresuid(0x0, 0x0, 0x0) getegid() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@local, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:34:17 executing program 0: ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = socket$unix(0x1, 0x2, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg(r1, &(0x7f0000000040), 0x40000000000020f, 0xc0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0) 19:34:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='sessionid\x00') pread64(r0, 0x0, 0x0, 0x0) 19:34:17 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='dax\x00', 0x401, &(0x7f0000000100)='(\x00') 19:34:17 executing program 4: r0 = socket(0x1e, 0x2000000000000805, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) [ 871.054171][T23338] mmap: syz-executor.2 (23338) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 19:34:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='sessionid\x00') pread64(r0, 0x0, 0x0, 0x0) 19:34:17 executing program 0: ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = socket$unix(0x1, 0x2, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg(r1, &(0x7f0000000040), 0x40000000000020f, 0xc0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0) 19:34:17 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = creat(0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getresuid(0x0, 0x0, 0x0) getegid() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@local, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:34:17 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = creat(0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getresuid(0x0, 0x0, 0x0) getegid() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@local, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:34:17 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='dax\x00', 0x401, &(0x7f0000000100)='(\x00') 19:34:17 executing program 0: ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = socket$unix(0x1, 0x2, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg(r1, &(0x7f0000000040), 0x40000000000020f, 0xc0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0) 19:34:18 executing program 2: syz_execute_func(&(0x7f00000000c0)="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") syz_execute_func(&(0x7f0000000080)="66430f67c564ff0941c366440f56c9660f3a16649c6700449fc441dfd04b00c442019dcc0f11d46f") syz_execute_func(&(0x7f0000000680)="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") 19:34:18 executing program 4: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = creat(0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getresuid(0x0, 0x0, 0x0) getegid() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@local, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:34:18 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = creat(0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getresuid(0x0, 0x0, 0x0) getegid() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@local, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:34:18 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = creat(0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getresuid(0x0, 0x0, 0x0) getegid() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@local, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:34:18 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = creat(0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getresuid(0x0, 0x0, 0x0) getegid() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@local, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:34:18 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='dax\x00', 0x401, &(0x7f0000000100)='(\x00') 19:34:18 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = creat(0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getresuid(0x0, 0x0, 0x0) getegid() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@local, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:34:18 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = creat(0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getresuid(0x0, 0x0, 0x0) getegid() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@local, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:34:19 executing program 1: syz_execute_func(&(0x7f00000000c0)="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") syz_execute_func(&(0x7f0000000080)="66430f67c564ff0941c366440f56c9660f3a16649c6700449fc441dfd04b00c442019dcc0f11d46f") syz_execute_func(&(0x7f0000000680)="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") 19:34:19 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = creat(0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getresuid(0x0, 0x0, 0x0) getegid() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@local, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:34:19 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = creat(0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getresuid(0x0, 0x0, 0x0) getegid() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@local, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:34:19 executing program 2: syz_execute_func(&(0x7f00000000c0)="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") syz_execute_func(&(0x7f0000000080)="66430f67c564ff0941c366440f56c9660f3a16649c6700449fc441dfd04b00c442019dcc0f11d46f") syz_execute_func(&(0x7f0000000680)="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") 19:34:19 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = creat(0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getresuid(0x0, 0x0, 0x0) getegid() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@local, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:34:19 executing program 4: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = creat(0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getresuid(0x0, 0x0, 0x0) getegid() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@local, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:34:19 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = creat(0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getresuid(0x0, 0x0, 0x0) getegid() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@local, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:34:19 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = creat(0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getresuid(0x0, 0x0, 0x0) getegid() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@local, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:34:20 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = creat(0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getresuid(0x0, 0x0, 0x0) getegid() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@local, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:34:20 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = creat(0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getresuid(0x0, 0x0, 0x0) getegid() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@local, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:34:20 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = creat(0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getresuid(0x0, 0x0, 0x0) getegid() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@local, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:34:20 executing program 2: syz_execute_func(&(0x7f00000000c0)="c4e3f961483207dcdc2be966420fb3f0f5980f0578f3aec4a37bf0c50341e2e9c443156c82feefffff00f34a0f38f60128218d00a30000262ff342906692c4611dd919dec4c6c100dc55b1e6172525000e818f470fc9660f171f80e2859ecf8fe97c810f6df08f09bec5c4c2858c3ff280dccf56266465460f9f8b1ce75613c4213e5377000043d943ad440fa3d55959c4e2293ce767f36ab456c4013611c066410ffe3a16286c6c0fbc7b1f000000fe8f08e4a25600b1355809580900000081660fdf53672ef30f51c97bc4c4617b708cfa00000000007466dee450c1f043be02660f38de8e85e1f32646dec43b7d0f18e4e4e4f4260fe88c4200000000ca30cac4017a7fc3bb3cbb3c0209912af3430f47bb00000000000045dc0f845000f04781ae00100000f1000000c44258f313d800d800dd480563a5b76e0b0ba17ae64295589cffffcec3c37c302d8300350035cb0c0ce42ec4a17c100297a862b274c49f660f38378100080000ddfafa485c5e2ec422e6912cb18374fb0a07c40155f64e0666460fddc7eccd36660f38058b97619236c423d50fa164ab00001d979547910002c1045c0b8f284086e70047cc5cdbed2ef246e16d44800199bb00004242c401f82e14dc2941eee8310e617ddd880c00e405f5c71606df6920") syz_execute_func(&(0x7f0000000080)="66430f67c564ff0941c366440f56c9660f3a16649c6700449fc441dfd04b00c442019dcc0f11d46f") syz_execute_func(&(0x7f0000000680)="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") 19:34:20 executing program 1: syz_execute_func(&(0x7f00000000c0)="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") syz_execute_func(&(0x7f0000000080)="66430f67c564ff0941c366440f56c9660f3a16649c6700449fc441dfd04b00c442019dcc0f11d46f") syz_execute_func(&(0x7f0000000680)="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") 19:34:20 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = creat(0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getresuid(0x0, 0x0, 0x0) getegid() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@local, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:34:20 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = creat(0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getresuid(0x0, 0x0, 0x0) getegid() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@local, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:34:20 executing program 4: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = creat(0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getresuid(0x0, 0x0, 0x0) getegid() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@local, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:34:21 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = creat(0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getresuid(0x0, 0x0, 0x0) getegid() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@local, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:34:21 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = creat(0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getresuid(0x0, 0x0, 0x0) getegid() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@local, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:34:21 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = creat(0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getresuid(0x0, 0x0, 0x0) getegid() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@local, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:34:21 executing program 2: ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = socket$unix(0x1, 0x2, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg(r1, &(0x7f0000000040), 0x40000000000020f, 0xc0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0) 19:34:21 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = creat(0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getresuid(0x0, 0x0, 0x0) getegid() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@local, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:34:21 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = creat(0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getresuid(0x0, 0x0, 0x0) getegid() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@local, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:34:22 executing program 4: ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = socket$unix(0x1, 0x2, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg(r1, &(0x7f0000000040), 0x40000000000020f, 0xc0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0) 19:34:22 executing program 2: ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = socket$unix(0x1, 0x2, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg(r1, &(0x7f0000000040), 0x40000000000020f, 0xc0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0) 19:34:22 executing program 1: syz_execute_func(&(0x7f00000000c0)="c4e3f961483207dcdc2be966420fb3f0f5980f0578f3aec4a37bf0c50341e2e9c443156c82feefffff00f34a0f38f60128218d00a30000262ff342906692c4611dd919dec4c6c100dc55b1e6172525000e818f470fc9660f171f80e2859ecf8fe97c810f6df08f09bec5c4c2858c3ff280dccf56266465460f9f8b1ce75613c4213e5377000043d943ad440fa3d55959c4e2293ce767f36ab456c4013611c066410ffe3a16286c6c0fbc7b1f000000fe8f08e4a25600b1355809580900000081660fdf53672ef30f51c97bc4c4617b708cfa00000000007466dee450c1f043be02660f38de8e85e1f32646dec43b7d0f18e4e4e4f4260fe88c4200000000ca30cac4017a7fc3bb3cbb3c0209912af3430f47bb00000000000045dc0f845000f04781ae00100000f1000000c44258f313d800d800dd480563a5b76e0b0ba17ae64295589cffffcec3c37c302d8300350035cb0c0ce42ec4a17c100297a862b274c49f660f38378100080000ddfafa485c5e2ec422e6912cb18374fb0a07c40155f64e0666460fddc7eccd36660f38058b97619236c423d50fa164ab00001d979547910002c1045c0b8f284086e70047cc5cdbed2ef246e16d44800199bb00004242c401f82e14dc2941eee8310e617ddd880c00e405f5c71606df6920") syz_execute_func(&(0x7f0000000080)="66430f67c564ff0941c366440f56c9660f3a16649c6700449fc441dfd04b00c442019dcc0f11d46f") syz_execute_func(&(0x7f0000000680)="c4e379614832074a2be91cb9980f053ef3aec4a37bf0c50141e2e922ebc4a2fd1ceb262f2e45c0e754790600f2d2dec461dc57b1e67d0b25006100c4837916d2be653e6766400f383ce30040dbe1491e2f160f41fe4cbec5c54d0f2c718f56676beeee8f2870b63b30319ebb517034fe6dfe98dfdf0f40b267f34cb4baf281f999899999a8271ec46471681966410f3a16288836670fe0a9f27f0000536bd1049999efef4b0fae27c4a27921f97cd8d8a1a12ad764cc313ac441782b364066bd0ffe383bd4d467460f330002c4c1c211db4064d266413a010f0f30ca70cac442fd21b19b0b0000f267a1c900000000ddc4218d5d7f67650f01dcc462c9ae49f1a79ad0818194d800092ddd8f0b00c4a17ae64295007b1cbcff6c7ed222ba22baa9a700002e3664644626cc4683b9080000000d0df698b900000036b2aad9c741af44841078470f73dc024c593e40d9f50f001e570000a858edc4037d092101f20d6d1d430010000000e5c5c421fb5a1747cc474cf92fddc665c4002d08000000009b5d8ea7a7282856754401a9bb000042c441574974ecd53131fbc4a2750831c44109f89700008020") 19:34:22 executing program 2: ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = socket$unix(0x1, 0x2, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg(r1, &(0x7f0000000040), 0x40000000000020f, 0xc0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0) 19:34:22 executing program 5: ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = socket$unix(0x1, 0x2, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg(r1, &(0x7f0000000040), 0x40000000000020f, 0xc0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0) 19:34:22 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = creat(0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getresuid(0x0, 0x0, 0x0) getegid() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@local, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:34:22 executing program 4: ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = socket$unix(0x1, 0x2, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg(r1, &(0x7f0000000040), 0x40000000000020f, 0xc0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0) 19:34:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x180, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote, [], @link_local, [], 0xb8, 0xb8, 0xf0, [@ip={'ip\x00', 0x20, {{@loopback, @dev, 0x0, 0x0, 0x0, 0x84, 0x20, 0x0, 0x0, 0x0, 0x3}}}]}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1f8) 19:34:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x180, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote, [], @link_local, [], 0xb8, 0xb8, 0xf0, [@ip={'ip\x00', 0x20, {{@loopback, @dev, 0x0, 0x0, 0x0, 0x84, 0x20, 0x0, 0x0, 0x0, 0x3}}}]}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1f8) 19:34:22 executing program 2: syz_open_dev$vcsn(&(0x7f0000000400)='/dev/vcs#\x00', 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) bind(r0, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0x30c}, 0xfdef) 19:34:22 executing program 5: ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = socket$unix(0x1, 0x2, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg(r1, &(0x7f0000000040), 0x40000000000020f, 0xc0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0) 19:34:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x180, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote, [], @link_local, [], 0xb8, 0xb8, 0xf0, [@ip={'ip\x00', 0x20, {{@loopback, @dev, 0x0, 0x0, 0x0, 0x84, 0x20, 0x0, 0x0, 0x0, 0x3}}}]}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1f8) 19:34:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x180, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote, [], @link_local, [], 0xb8, 0xb8, 0xf0, [@ip={'ip\x00', 0x20, {{@loopback, @dev, 0x0, 0x0, 0x0, 0x84, 0x20, 0x0, 0x0, 0x0, 0x3}}}]}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1f8) 19:34:22 executing program 5: ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = socket$unix(0x1, 0x2, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg(r1, &(0x7f0000000040), 0x40000000000020f, 0xc0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0) 19:34:23 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = creat(0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getresuid(0x0, 0x0, 0x0) getegid() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@local, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:34:23 executing program 2: syz_open_dev$vcsn(&(0x7f0000000400)='/dev/vcs#\x00', 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) bind(r0, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0x30c}, 0xfdef) 19:34:23 executing program 4: ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = socket$unix(0x1, 0x2, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg(r1, &(0x7f0000000040), 0x40000000000020f, 0xc0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0) 19:34:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = gettid() clone(0x1fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:34:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@v2={0x0, 0x0, 0x0, 0x0, 0x24, "c72b31b831aa63fd9167b88f48beb1201a67b197023efa67ad6c9f4e6cfa3014c6ff6d42"}, 0x2e, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:34:23 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x1000b525, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f00000000c0)={0x3, 0x0, 0x40000000000003f, [], &(0x7f0000000100)}) 19:34:23 executing program 2: syz_open_dev$vcsn(&(0x7f0000000400)='/dev/vcs#\x00', 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) bind(r0, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0x30c}, 0xfdef) 19:34:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = gettid() clone(0x1fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:34:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = gettid() clone(0x1fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:34:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@v2={0x0, 0x0, 0x0, 0x0, 0x24, "c72b31b831aa63fd9167b88f48beb1201a67b197023efa67ad6c9f4e6cfa3014c6ff6d42"}, 0x2e, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:34:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = gettid() clone(0x1fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:34:24 executing program 2: syz_open_dev$vcsn(&(0x7f0000000400)='/dev/vcs#\x00', 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) bind(r0, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0x30c}, 0xfdef) 19:34:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@v2={0x0, 0x0, 0x0, 0x0, 0x24, "c72b31b831aa63fd9167b88f48beb1201a67b197023efa67ad6c9f4e6cfa3014c6ff6d42"}, 0x2e, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:34:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x80e85411) 19:34:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = gettid() clone(0x1fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:34:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = gettid() clone(0x1fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:34:24 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x848000000015, 0x805, 0x0) getpeername$netlink(r0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x2713, 0x0, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x801, 0x0) syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x10001, 0x0) 19:34:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = gettid() clone(0x1fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:34:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x80e85411) 19:34:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x80e85411) 19:34:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@v2={0x0, 0x0, 0x0, 0x0, 0x24, "c72b31b831aa63fd9167b88f48beb1201a67b197023efa67ad6c9f4e6cfa3014c6ff6d42"}, 0x2e, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:34:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = gettid() clone(0x1fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:34:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x80e85411) 19:34:24 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x848000000015, 0x805, 0x0) getpeername$netlink(r0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x2713, 0x0, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x801, 0x0) syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x10001, 0x0) 19:34:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x80e85411) 19:34:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = gettid() clone(0x1fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:34:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x80e85411) 19:34:24 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x848000000015, 0x805, 0x0) getpeername$netlink(r0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x2713, 0x0, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x801, 0x0) syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x10001, 0x0) 19:34:25 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x848000000015, 0x805, 0x0) getpeername$netlink(r0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x2713, 0x0, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x801, 0x0) syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x10001, 0x0) 19:34:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = gettid() clone(0x1fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:34:25 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x848000000015, 0x805, 0x0) getpeername$netlink(r0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x2713, 0x0, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x801, 0x0) syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x10001, 0x0) 19:34:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x80e85411) 19:34:25 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x848000000015, 0x805, 0x0) getpeername$netlink(r0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x2713, 0x0, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x801, 0x0) syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x10001, 0x0) 19:34:27 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x848000000015, 0x805, 0x0) getpeername$netlink(r0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x2713, 0x0, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x801, 0x0) syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x10001, 0x0) 19:34:27 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x848000000015, 0x805, 0x0) getpeername$netlink(r0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x2713, 0x0, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x801, 0x0) syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x10001, 0x0) 19:34:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x80e85411) 19:34:27 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff026}]}, 0x10) 19:34:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0xf0ffffff, &(0x7f0000000f40)=[{&(0x7f0000002980)=""/4096, 0x7ffff000}], 0x1}}], 0x1, 0x0, 0x0) 19:34:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x80e85411) 19:34:27 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x848000000015, 0x805, 0x0) getpeername$netlink(r0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x2713, 0x0, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x801, 0x0) syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x10001, 0x0) 19:34:27 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x848000000015, 0x805, 0x0) getpeername$netlink(r0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x2713, 0x0, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x801, 0x0) syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x10001, 0x0) 19:34:28 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0xf0ffffff, &(0x7f0000000f40)=[{&(0x7f0000002980)=""/4096, 0x7ffff000}], 0x1}}], 0x1, 0x0, 0x0) 19:34:28 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff026}]}, 0x10) 19:34:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00') r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) r2 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r2, &(0x7f00002aafe4)={0xa, 0x4e22, 0x0, @ipv4}, 0x1c) connect$netlink(r1, &(0x7f0000000040)=@proc, 0xc) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f00000000c0)={0x6, 0x2, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) r3 = gettid() perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x2) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x345) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r4 = io_uring_setup(0x14a, &(0x7f0000000040)) io_uring_enter(r4, 0x0, 0xb0, 0x3, 0x0, 0x0) 19:34:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x80e85411) 19:34:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0xf0ffffff, &(0x7f0000000f40)=[{&(0x7f0000002980)=""/4096, 0x7ffff000}], 0x1}}], 0x1, 0x0, 0x0) 19:34:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0xf0ffffff, &(0x7f0000000f40)=[{&(0x7f0000002980)=""/4096, 0x7ffff000}], 0x1}}], 0x1, 0x0, 0x0) 19:34:28 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0xf0ffffff, &(0x7f0000000f40)=[{&(0x7f0000002980)=""/4096, 0x7ffff000}], 0x1}}], 0x1, 0x0, 0x0) 19:34:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0xf0ffffff, &(0x7f0000000f40)=[{&(0x7f0000002980)=""/4096, 0x7ffff000}], 0x1}}], 0x1, 0x0, 0x0) 19:34:28 executing program 2: r0 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000000380)={0x80, 0x0, 0x7, 0x4, 0x2, 0xce51, 0x0, 0x0, 0x101, 0x0, 0x800100, 0x0, 0x0, 0x0, 0x0, 0x5}) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) r3 = dup3(r2, r1, 0x0) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000140), &(0x7f00000001c0)=0x4) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) socket$nl_route(0x10, 0x3, 0x0) 19:34:28 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff026}]}, 0x10) 19:34:28 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0xf0ffffff, &(0x7f0000000f40)=[{&(0x7f0000002980)=""/4096, 0x7ffff000}], 0x1}}], 0x1, 0x0, 0x0) 19:34:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0xf0ffffff, &(0x7f0000000f40)=[{&(0x7f0000002980)=""/4096, 0x7ffff000}], 0x1}}], 0x1, 0x0, 0x0) 19:34:28 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff026}]}, 0x10) 19:34:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00') r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) r2 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r2, &(0x7f00002aafe4)={0xa, 0x4e22, 0x0, @ipv4}, 0x1c) connect$netlink(r1, &(0x7f0000000040)=@proc, 0xc) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f00000000c0)={0x6, 0x2, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) r3 = gettid() perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x2) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x345) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r4 = io_uring_setup(0x14a, &(0x7f0000000040)) io_uring_enter(r4, 0x0, 0xb0, 0x3, 0x0, 0x0) 19:34:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00') r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) r2 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r2, &(0x7f00002aafe4)={0xa, 0x4e22, 0x0, @ipv4}, 0x1c) connect$netlink(r1, &(0x7f0000000040)=@proc, 0xc) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f00000000c0)={0x6, 0x2, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) r3 = gettid() perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x2) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x345) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r4 = io_uring_setup(0x14a, &(0x7f0000000040)) io_uring_enter(r4, 0x0, 0xb0, 0x3, 0x0, 0x0) 19:34:28 executing program 5: ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "35031e8a465d4419444e6debceae50e8886fcb3c582e56ed75430e0365e0b01e"}}) r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffaa, &(0x7f0000000080)) 19:34:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0xf0ffffff, &(0x7f0000000f40)=[{&(0x7f0000002980)=""/4096, 0x7ffff000}], 0x1}}], 0x1, 0x0, 0x0) 19:34:28 executing program 2: r0 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000000380)={0x80, 0x0, 0x7, 0x4, 0x2, 0xce51, 0x0, 0x0, 0x101, 0x0, 0x800100, 0x0, 0x0, 0x0, 0x0, 0x5}) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) r3 = dup3(r2, r1, 0x0) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000140), &(0x7f00000001c0)=0x4) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) socket$nl_route(0x10, 0x3, 0x0) 19:34:28 executing program 3: r0 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000000380)={0x80, 0x0, 0x7, 0x4, 0x2, 0xce51, 0x0, 0x0, 0x101, 0x0, 0x800100, 0x0, 0x0, 0x0, 0x0, 0x5}) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) r3 = dup3(r2, r1, 0x0) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000140), &(0x7f00000001c0)=0x4) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) socket$nl_route(0x10, 0x3, 0x0) 19:34:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00') r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) r2 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r2, &(0x7f00002aafe4)={0xa, 0x4e22, 0x0, @ipv4}, 0x1c) connect$netlink(r1, &(0x7f0000000040)=@proc, 0xc) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f00000000c0)={0x6, 0x2, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) r3 = gettid() perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x2) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x345) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r4 = io_uring_setup(0x14a, &(0x7f0000000040)) io_uring_enter(r4, 0x0, 0xb0, 0x3, 0x0, 0x0) 19:34:28 executing program 5: ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "35031e8a465d4419444e6debceae50e8886fcb3c582e56ed75430e0365e0b01e"}}) r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffaa, &(0x7f0000000080)) 19:34:29 executing program 2: r0 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000000380)={0x80, 0x0, 0x7, 0x4, 0x2, 0xce51, 0x0, 0x0, 0x101, 0x0, 0x800100, 0x0, 0x0, 0x0, 0x0, 0x5}) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) r3 = dup3(r2, r1, 0x0) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000140), &(0x7f00000001c0)=0x4) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) socket$nl_route(0x10, 0x3, 0x0) 19:34:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00') r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) r2 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r2, &(0x7f00002aafe4)={0xa, 0x4e22, 0x0, @ipv4}, 0x1c) connect$netlink(r1, &(0x7f0000000040)=@proc, 0xc) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f00000000c0)={0x6, 0x2, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) r3 = gettid() perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x2) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x345) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r4 = io_uring_setup(0x14a, &(0x7f0000000040)) io_uring_enter(r4, 0x0, 0xb0, 0x3, 0x0, 0x0) 19:34:29 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0xf0ffffff, &(0x7f0000000f40)=[{&(0x7f0000002980)=""/4096, 0x7ffff000}], 0x1}}], 0x1, 0x0, 0x0) 19:34:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00') r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) r2 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r2, &(0x7f00002aafe4)={0xa, 0x4e22, 0x0, @ipv4}, 0x1c) connect$netlink(r1, &(0x7f0000000040)=@proc, 0xc) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f00000000c0)={0x6, 0x2, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) r3 = gettid() perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x2) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x345) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r4 = io_uring_setup(0x14a, &(0x7f0000000040)) io_uring_enter(r4, 0x0, 0xb0, 0x3, 0x0, 0x0) 19:34:29 executing program 5: ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "35031e8a465d4419444e6debceae50e8886fcb3c582e56ed75430e0365e0b01e"}}) r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffaa, &(0x7f0000000080)) 19:34:29 executing program 3: r0 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000000380)={0x80, 0x0, 0x7, 0x4, 0x2, 0xce51, 0x0, 0x0, 0x101, 0x0, 0x800100, 0x0, 0x0, 0x0, 0x0, 0x5}) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) r3 = dup3(r2, r1, 0x0) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000140), &(0x7f00000001c0)=0x4) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) socket$nl_route(0x10, 0x3, 0x0) 19:34:29 executing program 0: r0 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000000380)={0x80, 0x0, 0x7, 0x4, 0x2, 0xce51, 0x0, 0x0, 0x101, 0x0, 0x800100, 0x0, 0x0, 0x0, 0x0, 0x5}) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) r3 = dup3(r2, r1, 0x0) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000140), &(0x7f00000001c0)=0x4) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) socket$nl_route(0x10, 0x3, 0x0) 19:34:29 executing program 5: ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "35031e8a465d4419444e6debceae50e8886fcb3c582e56ed75430e0365e0b01e"}}) r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffaa, &(0x7f0000000080)) 19:34:29 executing program 2: r0 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000000380)={0x80, 0x0, 0x7, 0x4, 0x2, 0xce51, 0x0, 0x0, 0x101, 0x0, 0x800100, 0x0, 0x0, 0x0, 0x0, 0x5}) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) r3 = dup3(r2, r1, 0x0) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000140), &(0x7f00000001c0)=0x4) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) socket$nl_route(0x10, 0x3, 0x0) 19:34:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00') r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) r2 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r2, &(0x7f00002aafe4)={0xa, 0x4e22, 0x0, @ipv4}, 0x1c) connect$netlink(r1, &(0x7f0000000040)=@proc, 0xc) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f00000000c0)={0x6, 0x2, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) r3 = gettid() perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x2) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x345) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r4 = io_uring_setup(0x14a, &(0x7f0000000040)) io_uring_enter(r4, 0x0, 0xb0, 0x3, 0x0, 0x0) 19:34:29 executing program 5: r0 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000000380)={0x80, 0x0, 0x7, 0x4, 0x2, 0xce51, 0x0, 0x0, 0x101, 0x0, 0x800100, 0x0, 0x0, 0x0, 0x0, 0x5}) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) r3 = dup3(r2, r1, 0x0) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000140), &(0x7f00000001c0)=0x4) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) socket$nl_route(0x10, 0x3, 0x0) 19:34:29 executing program 1: socket$kcm(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffd95) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="9e4301000080000000021fe4ac14140ceb", 0x11}], 0x1}, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c00000024000000060000006f3096d2a59598e5735de07300de"], 0x0, 0x26, 0x0, 0x1}, 0x20) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 19:34:29 executing program 3: r0 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000000380)={0x80, 0x0, 0x7, 0x4, 0x2, 0xce51, 0x0, 0x0, 0x101, 0x0, 0x800100, 0x0, 0x0, 0x0, 0x0, 0x5}) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) r3 = dup3(r2, r1, 0x0) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000140), &(0x7f00000001c0)=0x4) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) socket$nl_route(0x10, 0x3, 0x0) 19:34:29 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) syz_execute_func(&(0x7f0000000340)="9877774a2ae92cb81c0c0f05bf03000000c4a37bf0c55d41e2e9c422e9aabb3c000000c4c16d608590a00000660f383a9e02000000110f33b8c4014e4e4e5b7f4b4b26660f38091e14dee509c421045f4607c421dd5831c4e10bf8c45b64660f3838520ac4c4a3bd4877f88ac483397fd3fb0000d0c4efa1a12ad764d3cf53afaf6766f2ab440fec3f67ddea660f79cec462b1f72ec3c4e2899294d80000000019c2c2b0c10b0b0000c4414e53d2c4816016f7a80db8d4d466450fc4650000ebeb628f8f89709b6500a25800218de3c02cf52626802d08000000fa49c45c450f91f3ffefffffbedc4e61c9fb110f66474eb83aa2f1fbfbe2") mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 19:34:29 executing program 5: r0 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000000380)={0x80, 0x0, 0x7, 0x4, 0x2, 0xce51, 0x0, 0x0, 0x101, 0x0, 0x800100, 0x0, 0x0, 0x0, 0x0, 0x5}) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) r3 = dup3(r2, r1, 0x0) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000140), &(0x7f00000001c0)=0x4) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) socket$nl_route(0x10, 0x3, 0x0) 19:34:29 executing program 4: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 883.336311][T25567] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 19:34:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') sendfile(r1, r2, 0x0, 0x80000002) [ 883.503442][T25567] CPU: 0 PID: 25567 Comm: syz-executor.1 Not tainted 5.1.0-rc7+ #97 [ 883.511631][T25567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 883.511678][T25567] Call Trace: [ 883.511804][T25567] dump_stack+0x172/0x1f0 [ 883.511851][T25567] dump_header+0x10f/0xb6c [ 883.511890][T25567] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 883.511931][T25567] ? ___ratelimit+0x60/0x595 [ 883.511971][T25567] ? do_raw_spin_unlock+0x57/0x270 19:34:30 executing program 5: r0 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000000380)={0x80, 0x0, 0x7, 0x4, 0x2, 0xce51, 0x0, 0x0, 0x101, 0x0, 0x800100, 0x0, 0x0, 0x0, 0x0, 0x5}) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) r3 = dup3(r2, r1, 0x0) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000140), &(0x7f00000001c0)=0x4) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) socket$nl_route(0x10, 0x3, 0x0) [ 883.511990][T25567] oom_kill_process.cold+0x10/0x15 [ 883.512007][T25567] out_of_memory+0x79a/0x1280 [ 883.512025][T25567] ? lock_downgrade+0x880/0x880 [ 883.512062][T25567] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 883.512079][T25567] ? oom_killer_disable+0x280/0x280 [ 883.512091][T25567] ? find_held_lock+0x35/0x130 [ 883.512137][T25567] mem_cgroup_out_of_memory+0x1ca/0x230 [ 883.512153][T25567] ? memcg_event_wake+0x230/0x230 [ 883.512174][T25567] ? do_raw_spin_unlock+0x57/0x270 [ 883.512190][T25567] ? _raw_spin_unlock+0x2d/0x50 [ 883.512208][T25567] try_charge+0x102c/0x15c0 [ 883.512221][T25567] ? find_held_lock+0x35/0x130 [ 883.512244][T25567] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 883.512261][T25567] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 883.512325][T25567] ? kasan_check_read+0x11/0x20 [ 883.512345][T25567] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 883.512396][T25567] mem_cgroup_try_charge+0x24d/0x5e0 [ 883.601448][T25567] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 883.610777][T25567] __handle_mm_fault+0x1e1f/0x3ec0 [ 883.610799][T25567] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 883.610819][T25567] ? find_held_lock+0x35/0x130 [ 883.659178][T25567] ? handle_mm_fault+0x322/0xb30 [ 883.664124][T25567] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 883.670372][T25567] ? kasan_check_read+0x11/0x20 [ 883.675321][T25567] handle_mm_fault+0x43f/0xb30 [ 883.680148][T25567] __do_page_fault+0x5ef/0xda0 [ 883.684924][T25567] do_page_fault+0x71/0x581 [ 883.689427][T25567] ? page_fault+0x8/0x30 [ 883.693671][T25567] page_fault+0x1e/0x30 [ 883.697908][T25567] RIP: 0033:0x4107bf [ 883.701809][T25567] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 883.721413][T25567] RSP: 002b:0000000000a4fae0 EFLAGS: 00010206 [ 883.727475][T25567] RAX: 00007f6976e95000 RBX: 0000000000020000 RCX: 0000000000458dfa [ 883.735451][T25567] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 883.743423][T25567] RBP: 0000000000a4fbc0 R08: ffffffffffffffff R09: 0000000000000000 [ 883.751399][T25567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fcb0 [ 883.759378][T25567] R13: 00007f6976eb5700 R14: 0000000000000002 R15: 000000000073c04c [ 884.032858][T25567] memory: usage 75024kB, limit 0kB, failcnt 8 [ 884.048688][T25567] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 884.064149][T25567] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 19:34:30 executing program 0: r0 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000000380)={0x80, 0x0, 0x7, 0x4, 0x2, 0xce51, 0x0, 0x0, 0x101, 0x0, 0x800100, 0x0, 0x0, 0x0, 0x0, 0x5}) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) r3 = dup3(r2, r1, 0x0) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000140), &(0x7f00000001c0)=0x4) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) socket$nl_route(0x10, 0x3, 0x0) 19:34:30 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x3dd, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000000)) 19:34:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') sendfile(r1, r2, 0x0, 0x80000002) 19:34:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') sendfile(r1, r2, 0x0, 0x80000002) [ 884.114788][T25567] Memory cgroup stats for /syz1: cache:20KB rss:68328KB rss_huge:63488KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:68256KB inactive_file:0KB active_file:0KB unevictable:0KB [ 884.180876][T25567] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=29956,uid=0 [ 884.200646][T25567] Memory cgroup out of memory: Killed process 29956 (syz-executor.1) total-vm:72712kB, anon-rss:6312kB, file-rss:35868kB, shmem-rss:0kB 19:34:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') sendfile(r1, r2, 0x0, 0x80000002) [ 884.363736][ T1043] oom_reaper: reaped process 29956 (syz-executor.1), now anon-rss:0kB, file-rss:34908kB, shmem-rss:0kB [ 884.451634][T25663] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 884.555002][T25663] CPU: 0 PID: 25663 Comm: syz-executor.1 Not tainted 5.1.0-rc7+ #97 [ 884.563113][T25663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 884.573174][T25663] Call Trace: [ 884.576496][T25663] dump_stack+0x172/0x1f0 [ 884.580851][T25663] dump_header+0x10f/0xb6c [ 884.585286][T25663] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 884.591105][T25663] ? ___ratelimit+0x60/0x595 [ 884.595707][T25663] ? do_raw_spin_unlock+0x57/0x270 [ 884.600832][T25663] oom_kill_process.cold+0x10/0x15 [ 884.605956][T25663] out_of_memory+0x79a/0x1280 [ 884.610750][T25663] ? oom_killer_disable+0x280/0x280 [ 884.616004][T25663] mem_cgroup_out_of_memory+0x1ca/0x230 [ 884.621563][T25663] ? memcg_event_wake+0x230/0x230 [ 884.626650][T25663] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 884.632534][T25663] ? cgroup_file_notify+0x140/0x1b0 [ 884.637758][T25663] memory_max_write+0x169/0x300 [ 884.642668][T25663] ? kernfs_fop_write+0x204/0x480 [ 884.647709][T25663] ? mem_cgroup_write+0x360/0x360 [ 884.652748][T25663] ? lock_acquire+0x16f/0x3f0 [ 884.657429][T25663] ? kernfs_fop_write+0x227/0x480 [ 884.662554][T25663] cgroup_file_write+0x245/0x7a0 [ 884.667523][T25663] ? mem_cgroup_write+0x360/0x360 [ 884.672559][T25663] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 884.678229][T25663] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 884.683881][T25663] kernfs_fop_write+0x2ba/0x480 [ 884.688846][T25663] __vfs_write+0x8d/0x110 [ 884.693193][T25663] ? kernfs_fop_open+0xd90/0xd90 [ 884.698157][T25663] vfs_write+0x20c/0x580 [ 884.702415][T25663] ksys_write+0x14f/0x2d0 [ 884.706755][T25663] ? __ia32_sys_read+0xb0/0xb0 [ 884.711561][T25663] ? do_syscall_64+0x26/0x610 [ 884.716264][T25663] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 884.722340][T25663] ? do_syscall_64+0x26/0x610 [ 884.727037][T25663] __x64_sys_write+0x73/0xb0 [ 884.731646][T25663] do_syscall_64+0x103/0x610 [ 884.736252][T25663] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 884.742150][T25663] RIP: 0033:0x458da9 [ 884.746050][T25663] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 884.765669][T25663] RSP: 002b:00007f6976ed5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 884.774099][T25663] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9 [ 884.782117][T25663] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 884.790101][T25663] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 884.798089][T25663] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6976ed66d4 [ 884.806072][T25663] R13: 00000000004c880e R14: 00000000004def78 R15: 00000000ffffffff [ 885.294932][T25663] memory: usage 68560kB, limit 0kB, failcnt 14 [ 885.334921][T25663] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 885.399067][T25663] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 885.405947][T25663] Memory cgroup stats for /syz1: cache:20KB rss:62068KB rss_huge:57344KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:61972KB inactive_file:0KB active_file:0KB unevictable:0KB [ 885.555734][T25663] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=8214,uid=0 [ 885.620910][T25663] Memory cgroup out of memory: Killed process 8214 (syz-executor.1) total-vm:72580kB, anon-rss:4248kB, file-rss:35828kB, shmem-rss:0kB [ 885.783786][T25663] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 885.871463][T25663] CPU: 0 PID: 25663 Comm: syz-executor.1 Not tainted 5.1.0-rc7+ #97 [ 885.879482][T25663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 885.889548][T25663] Call Trace: [ 885.892863][T25663] dump_stack+0x172/0x1f0 [ 885.897206][T25663] dump_header+0x10f/0xb6c [ 885.901646][T25663] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 885.907467][T25663] ? ___ratelimit+0x60/0x595 [ 885.912106][T25663] ? do_raw_spin_unlock+0x57/0x270 [ 885.917234][T25663] oom_kill_process.cold+0x10/0x15 [ 885.922360][T25663] out_of_memory+0x79a/0x1280 [ 885.927052][T25663] ? __sched_text_start+0x8/0x8 [ 885.931919][T25663] ? oom_killer_disable+0x280/0x280 [ 885.937126][T25663] ? cgroup_file_notify+0x140/0x1b0 [ 885.942363][T25663] mem_cgroup_out_of_memory+0x1ca/0x230 [ 885.947929][T25663] ? memcg_event_wake+0x230/0x230 [ 885.952969][T25663] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 885.958784][T25663] ? cgroup_file_notify+0x140/0x1b0 [ 885.964031][T25663] memory_max_write+0x169/0x300 [ 885.968887][T25663] ? kernfs_fop_write+0x204/0x480 [ 885.973921][T25663] ? mem_cgroup_write+0x360/0x360 [ 885.978956][T25663] ? lock_acquire+0x16f/0x3f0 [ 885.983638][T25663] ? kernfs_fop_write+0x227/0x480 [ 885.988682][T25663] cgroup_file_write+0x245/0x7a0 [ 885.993636][T25663] ? mem_cgroup_write+0x360/0x360 [ 885.998668][T25663] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 886.004324][T25663] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 886.009961][T25663] kernfs_fop_write+0x2ba/0x480 [ 886.014853][T25663] __vfs_write+0x8d/0x110 [ 886.019192][T25663] ? kernfs_fop_open+0xd90/0xd90 [ 886.024140][T25663] vfs_write+0x20c/0x580 [ 886.028392][T25663] ksys_write+0x14f/0x2d0 [ 886.032731][T25663] ? __ia32_sys_read+0xb0/0xb0 [ 886.037501][T25663] ? do_syscall_64+0x26/0x610 [ 886.042184][T25663] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 886.048257][T25663] ? do_syscall_64+0x26/0x610 [ 886.052955][T25663] __x64_sys_write+0x73/0xb0 [ 886.057554][T25663] do_syscall_64+0x103/0x610 [ 886.062174][T25663] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 886.068068][T25663] RIP: 0033:0x458da9 [ 886.071971][T25663] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 886.091590][T25663] RSP: 002b:00007f6976ed5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 886.100017][T25663] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9 [ 886.107997][T25663] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 886.115972][T25663] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 886.123954][T25663] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6976ed66d4 [ 886.131937][T25663] R13: 00000000004c880e R14: 00000000004def78 R15: 00000000ffffffff [ 886.829073][T25663] memory: usage 64068kB, limit 0kB, failcnt 23 [ 886.835361][T25663] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 886.879084][T25663] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 886.885968][T25663] Memory cgroup stats for /syz1: cache:20KB rss:57872KB rss_huge:53248KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:57760KB inactive_file:0KB active_file:0KB unevictable:0KB [ 887.039092][T25663] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=8025,uid=0 [ 887.099180][T25663] Memory cgroup out of memory: Killed process 8025 (syz-executor.1) total-vm:72580kB, anon-rss:4248kB, file-rss:35824kB, shmem-rss:0kB [ 887.149482][ T7863] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 887.209097][ T7863] CPU: 1 PID: 7863 Comm: syz-executor.1 Not tainted 5.1.0-rc7+ #97 [ 887.217033][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 887.227100][ T7863] Call Trace: [ 887.230417][ T7863] dump_stack+0x172/0x1f0 [ 887.234770][ T7863] dump_header+0x10f/0xb6c [ 887.239208][ T7863] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 887.245038][ T7863] ? ___ratelimit+0x60/0x595 [ 887.249684][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 887.254828][ T7863] oom_kill_process.cold+0x10/0x15 [ 887.259960][ T7863] out_of_memory+0x79a/0x1280 [ 887.264662][ T7863] ? oom_killer_disable+0x280/0x280 [ 887.269870][ T7863] ? find_held_lock+0x35/0x130 [ 887.274659][ T7863] mem_cgroup_out_of_memory+0x1ca/0x230 [ 887.280224][ T7863] ? memcg_event_wake+0x230/0x230 [ 887.285278][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 887.290410][ T7863] ? _raw_spin_unlock+0x2d/0x50 [ 887.295280][ T7863] try_charge+0x102c/0x15c0 [ 887.299797][ T7863] ? find_held_lock+0x35/0x130 [ 887.304602][ T7863] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 887.310177][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 887.316449][ T7863] ? kasan_check_read+0x11/0x20 [ 887.321329][ T7863] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 887.326898][ T7863] mem_cgroup_try_charge+0x24d/0x5e0 [ 887.332212][ T7863] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 887.337871][ T7863] wp_page_copy+0x408/0x1740 [ 887.342489][ T7863] ? find_held_lock+0x35/0x130 [ 887.347280][ T7863] ? pmd_pfn+0x1d0/0x1d0 [ 887.351547][ T7863] ? lock_downgrade+0x880/0x880 [ 887.356422][ T7863] ? swp_swapcount+0x540/0x540 [ 887.361204][ T7863] ? kasan_check_read+0x11/0x20 [ 887.366071][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 887.371708][ T7863] do_wp_page+0x48e/0x1500 [ 887.376162][ T7863] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 887.381558][ T7863] __handle_mm_fault+0x22e8/0x3ec0 [ 887.386701][ T7863] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 887.392261][ T7863] ? find_held_lock+0x35/0x130 [ 887.397040][ T7863] ? handle_mm_fault+0x322/0xb30 [ 887.401999][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 887.408272][ T7863] ? kasan_check_read+0x11/0x20 [ 887.413148][ T7863] handle_mm_fault+0x43f/0xb30 [ 887.417935][ T7863] __do_page_fault+0x5ef/0xda0 [ 887.422728][ T7863] do_page_fault+0x71/0x581 [ 887.427273][ T7863] ? page_fault+0x8/0x30 [ 887.431536][ T7863] page_fault+0x1e/0x30 [ 887.435701][ T7863] RIP: 0033:0x42ff3a [ 887.439615][ T7863] Code: 48 29 e8 31 c9 48 81 fb 40 36 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 2c 50 62 00 85 c0 0f 84 3a f7 ff ff [ 887.459234][ T7863] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 887.465317][ T7863] RAX: 0000000000018691 RBX: 0000000000713640 RCX: 0000000000008041 [ 887.473331][ T7863] RDX: 00000000014aa930 RSI: 00000000014b2970 RDI: 0000000000000003 [ 887.481316][ T7863] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000014a9940 [ 887.489317][ T7863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000713698 [ 887.497309][ T7863] R13: 0000000000713698 R14: 00000000000d796c R15: 0000000000002710 [ 888.479086][ T7863] memory: usage 57356kB, limit 0kB, failcnt 23 [ 888.485309][ T7863] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 888.539923][ T7863] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 888.546853][ T7863] Memory cgroup stats for /syz1: cache:20KB rss:51512KB rss_huge:47104KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:51396KB inactive_file:0KB active_file:0KB unevictable:0KB [ 888.659078][ T7863] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=8044,uid=0 [ 888.730152][ T7863] Memory cgroup out of memory: Killed process 8044 (syz-executor.1) total-vm:72448kB, anon-rss:4240kB, file-rss:35828kB, shmem-rss:0kB [ 888.820055][ T7863] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 888.859128][ T7863] CPU: 1 PID: 7863 Comm: syz-executor.1 Not tainted 5.1.0-rc7+ #97 [ 888.867062][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 888.877140][ T7863] Call Trace: [ 888.880448][ T7863] dump_stack+0x172/0x1f0 [ 888.884793][ T7863] dump_header+0x10f/0xb6c [ 888.889226][ T7863] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 888.895050][ T7863] ? ___ratelimit+0x60/0x595 [ 888.899657][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 888.904786][ T7863] oom_kill_process.cold+0x10/0x15 [ 888.909908][ T7863] out_of_memory+0x79a/0x1280 [ 888.914606][ T7863] ? lock_downgrade+0x880/0x880 [ 888.919468][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 888.925726][ T7863] ? oom_killer_disable+0x280/0x280 [ 888.931160][ T7863] ? find_held_lock+0x35/0x130 [ 888.935946][ T7863] mem_cgroup_out_of_memory+0x1ca/0x230 [ 888.941496][ T7863] ? memcg_event_wake+0x230/0x230 [ 888.946535][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 888.951657][ T7863] ? _raw_spin_unlock+0x2d/0x50 [ 888.956519][ T7863] try_charge+0x102c/0x15c0 [ 888.961025][ T7863] ? find_held_lock+0x35/0x130 [ 888.965805][ T7863] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 888.971358][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 888.977617][ T7863] ? kasan_check_read+0x11/0x20 [ 888.982485][ T7863] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 888.988074][ T7863] mem_cgroup_try_charge+0x24d/0x5e0 [ 888.993376][ T7863] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 888.999016][ T7863] wp_page_copy+0x408/0x1740 [ 889.003622][ T7863] ? find_held_lock+0x35/0x130 [ 889.008588][ T7863] ? pmd_pfn+0x1d0/0x1d0 [ 889.012844][ T7863] ? lock_downgrade+0x880/0x880 [ 889.017785][ T7863] ? swp_swapcount+0x540/0x540 [ 889.022557][ T7863] ? kasan_check_read+0x11/0x20 [ 889.027426][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 889.032569][ T7863] do_wp_page+0x48e/0x1500 [ 889.037011][ T7863] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 889.042418][ T7863] __handle_mm_fault+0x22e8/0x3ec0 [ 889.047551][ T7863] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 889.053117][ T7863] ? find_held_lock+0x35/0x130 [ 889.057889][ T7863] ? handle_mm_fault+0x322/0xb30 [ 889.062846][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 889.069100][ T7863] ? kasan_check_read+0x11/0x20 [ 889.073969][ T7863] handle_mm_fault+0x43f/0xb30 [ 889.078743][ T7863] __do_page_fault+0x5ef/0xda0 [ 889.083519][ T7863] do_page_fault+0x71/0x581 [ 889.088027][ T7863] ? page_fault+0x8/0x30 [ 889.092276][ T7863] page_fault+0x1e/0x30 [ 889.096432][ T7863] RIP: 0033:0x42ff3a [ 889.100332][ T7863] Code: 48 29 e8 31 c9 48 81 fb 40 36 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 2c 50 62 00 85 c0 0f 84 3a f7 ff ff [ 889.119949][ T7863] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 889.126033][ T7863] RAX: 0000000000018691 RBX: 0000000000713640 RCX: 0000000000008041 [ 889.134025][ T7863] RDX: 00000000014aa930 RSI: 00000000014b2970 RDI: 0000000000000003 [ 889.141998][ T7863] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000014a9940 [ 889.149978][ T7863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000713698 [ 889.157974][ T7863] R13: 0000000000713698 R14: 00000000000d796c R15: 0000000000002710 [ 890.099091][ T7863] memory: usage 52924kB, limit 0kB, failcnt 29 [ 890.105301][ T7863] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 890.149098][ T7863] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 890.155987][ T7863] Memory cgroup stats for /syz1: cache:20KB rss:47232KB rss_huge:43008KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:47188KB inactive_file:0KB active_file:0KB unevictable:0KB [ 890.223930][ T7863] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=8154,uid=0 [ 890.304927][ T7863] Memory cgroup out of memory: Killed process 8154 (syz-executor.1) total-vm:72448kB, anon-rss:4240kB, file-rss:35828kB, shmem-rss:0kB [ 890.388450][ T7863] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 890.411797][ T7863] CPU: 0 PID: 7863 Comm: syz-executor.1 Not tainted 5.1.0-rc7+ #97 [ 890.419719][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 890.429776][ T7863] Call Trace: [ 890.433083][ T7863] dump_stack+0x172/0x1f0 [ 890.437428][ T7863] dump_header+0x10f/0xb6c [ 890.441853][ T7863] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 890.447688][ T7863] ? ___ratelimit+0x60/0x595 [ 890.452287][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 890.457411][ T7863] oom_kill_process.cold+0x10/0x15 [ 890.462559][ T7863] out_of_memory+0x79a/0x1280 [ 890.467256][ T7863] ? lock_downgrade+0x880/0x880 [ 890.472111][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 890.478357][ T7863] ? oom_killer_disable+0x280/0x280 [ 890.483557][ T7863] ? find_held_lock+0x35/0x130 [ 890.488343][ T7863] mem_cgroup_out_of_memory+0x1ca/0x230 [ 890.493892][ T7863] ? memcg_event_wake+0x230/0x230 [ 890.498932][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 890.504049][ T7863] ? _raw_spin_unlock+0x2d/0x50 [ 890.508908][ T7863] try_charge+0x102c/0x15c0 [ 890.513413][ T7863] ? find_held_lock+0x35/0x130 [ 890.518214][ T7863] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 890.523768][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 890.530020][ T7863] ? kasan_check_read+0x11/0x20 [ 890.534881][ T7863] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 890.540441][ T7863] mem_cgroup_try_charge+0x24d/0x5e0 [ 890.545737][ T7863] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 890.551379][ T7863] wp_page_copy+0x408/0x1740 [ 890.555971][ T7863] ? find_held_lock+0x35/0x130 [ 890.560746][ T7863] ? pmd_pfn+0x1d0/0x1d0 [ 890.564992][ T7863] ? lock_downgrade+0x880/0x880 [ 890.569850][ T7863] ? swp_swapcount+0x540/0x540 [ 890.574637][ T7863] ? kasan_check_read+0x11/0x20 [ 890.579494][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 890.584631][ T7863] do_wp_page+0x48e/0x1500 [ 890.589056][ T7863] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 890.594446][ T7863] __handle_mm_fault+0x22e8/0x3ec0 [ 890.599571][ T7863] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 890.605138][ T7863] ? find_held_lock+0x35/0x130 [ 890.609906][ T7863] ? handle_mm_fault+0x322/0xb30 [ 890.614864][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 890.621114][ T7863] ? kasan_check_read+0x11/0x20 [ 890.625978][ T7863] handle_mm_fault+0x43f/0xb30 [ 890.630749][ T7863] __do_page_fault+0x5ef/0xda0 [ 890.635524][ T7863] do_page_fault+0x71/0x581 [ 890.640034][ T7863] ? page_fault+0x8/0x30 [ 890.644281][ T7863] page_fault+0x1e/0x30 [ 890.648436][ T7863] RIP: 0033:0x42ff3a [ 890.652357][ T7863] Code: 48 29 e8 31 c9 48 81 fb 40 36 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 2c 50 62 00 85 c0 0f 84 3a f7 ff ff [ 890.671997][ T7863] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 890.678071][ T7863] RAX: 0000000000018691 RBX: 0000000000713640 RCX: 0000000000008041 [ 890.686048][ T7863] RDX: 00000000014aa930 RSI: 00000000014b2970 RDI: 0000000000000003 [ 890.694028][ T7863] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000014a9940 [ 890.702111][ T7863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000713698 [ 890.710088][ T7863] R13: 0000000000713698 R14: 00000000000d796c R15: 0000000000002710 [ 890.969069][ T7863] memory: usage 48444kB, limit 0kB, failcnt 35 [ 890.975441][ T7863] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 891.029072][ T7863] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 891.045021][ T7863] Memory cgroup stats for /syz1: cache:20KB rss:43004KB rss_huge:38912KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:42988KB inactive_file:0KB active_file:0KB unevictable:0KB [ 891.119084][ T7863] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=8190,uid=0 [ 891.189166][ T7863] Memory cgroup out of memory: Killed process 8190 (syz-executor.1) total-vm:72448kB, anon-rss:4240kB, file-rss:35828kB, shmem-rss:0kB [ 891.278162][ T7863] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 891.319107][ T7863] CPU: 1 PID: 7863 Comm: syz-executor.1 Not tainted 5.1.0-rc7+ #97 [ 891.327043][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 891.337194][ T7863] Call Trace: [ 891.340503][ T7863] dump_stack+0x172/0x1f0 [ 891.344845][ T7863] dump_header+0x10f/0xb6c [ 891.349273][ T7863] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 891.355086][ T7863] ? ___ratelimit+0x60/0x595 [ 891.359690][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 891.364813][ T7863] oom_kill_process.cold+0x10/0x15 [ 891.370403][ T7863] out_of_memory+0x79a/0x1280 [ 891.375090][ T7863] ? lock_downgrade+0x880/0x880 [ 891.379954][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 891.386200][ T7863] ? oom_killer_disable+0x280/0x280 [ 891.391399][ T7863] ? find_held_lock+0x35/0x130 [ 891.396180][ T7863] mem_cgroup_out_of_memory+0x1ca/0x230 [ 891.401731][ T7863] ? memcg_event_wake+0x230/0x230 [ 891.406770][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 891.411888][ T7863] ? _raw_spin_unlock+0x2d/0x50 [ 891.416746][ T7863] try_charge+0x102c/0x15c0 [ 891.421250][ T7863] ? find_held_lock+0x35/0x130 [ 891.426023][ T7863] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 891.431576][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 891.437838][ T7863] ? kasan_check_read+0x11/0x20 [ 891.442701][ T7863] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 891.448253][ T7863] mem_cgroup_try_charge+0x24d/0x5e0 [ 891.453548][ T7863] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 891.459197][ T7863] wp_page_copy+0x408/0x1740 [ 891.463790][ T7863] ? find_held_lock+0x35/0x130 [ 891.468560][ T7863] ? pmd_pfn+0x1d0/0x1d0 [ 891.472820][ T7863] ? lock_downgrade+0x880/0x880 [ 891.477696][ T7863] ? swp_swapcount+0x540/0x540 [ 891.482470][ T7863] ? kasan_check_read+0x11/0x20 [ 891.487328][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 891.492450][ T7863] do_wp_page+0x48e/0x1500 [ 891.496881][ T7863] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 891.502273][ T7863] __handle_mm_fault+0x22e8/0x3ec0 [ 891.507416][ T7863] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 891.512970][ T7863] ? find_held_lock+0x35/0x130 [ 891.517740][ T7863] ? handle_mm_fault+0x322/0xb30 [ 891.522698][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 891.528948][ T7863] ? kasan_check_read+0x11/0x20 [ 891.533818][ T7863] handle_mm_fault+0x43f/0xb30 [ 891.538601][ T7863] __do_page_fault+0x5ef/0xda0 [ 891.543382][ T7863] do_page_fault+0x71/0x581 [ 891.547891][ T7863] ? page_fault+0x8/0x30 [ 891.552146][ T7863] page_fault+0x1e/0x30 [ 891.556301][ T7863] RIP: 0033:0x42ff3a [ 891.560201][ T7863] Code: 48 29 e8 31 c9 48 81 fb 40 36 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 2c 50 62 00 85 c0 0f 84 3a f7 ff ff [ 891.579811][ T7863] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 891.585880][ T7863] RAX: 0000000000018691 RBX: 0000000000713640 RCX: 0000000000008041 [ 891.593854][ T7863] RDX: 00000000014aa930 RSI: 00000000014b2970 RDI: 0000000000000003 [ 891.601849][ T7863] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000014a9940 [ 891.609830][ T7863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000713698 [ 891.617819][ T7863] R13: 0000000000713698 R14: 00000000000d796c R15: 0000000000002710 [ 891.630407][ T7863] memory: usage 44076kB, limit 0kB, failcnt 41 [ 891.636599][ T7863] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 891.644474][ T7863] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 891.651687][ T7863] Memory cgroup stats for /syz1: cache:20KB rss:38804KB rss_huge:34816KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:38788KB inactive_file:0KB active_file:0KB unevictable:0KB [ 891.673389][ T7863] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=8266,uid=0 [ 891.689219][ T7863] Memory cgroup out of memory: Killed process 8266 (syz-executor.1) total-vm:72448kB, anon-rss:4240kB, file-rss:35824kB, shmem-rss:0kB [ 891.722434][ T7863] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 891.732613][ T7863] CPU: 1 PID: 7863 Comm: syz-executor.1 Not tainted 5.1.0-rc7+ #97 [ 891.740526][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 891.750605][ T7863] Call Trace: [ 891.753928][ T7863] dump_stack+0x172/0x1f0 [ 891.758292][ T7863] dump_header+0x10f/0xb6c [ 891.762719][ T7863] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 891.768531][ T7863] ? ___ratelimit+0x60/0x595 [ 891.773130][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 891.778254][ T7863] oom_kill_process.cold+0x10/0x15 [ 891.783385][ T7863] out_of_memory+0x79a/0x1280 [ 891.788074][ T7863] ? lock_downgrade+0x880/0x880 [ 891.792942][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 891.799216][ T7863] ? oom_killer_disable+0x280/0x280 [ 891.804425][ T7863] ? find_held_lock+0x35/0x130 [ 891.809201][ T7863] mem_cgroup_out_of_memory+0x1ca/0x230 [ 891.814752][ T7863] ? memcg_event_wake+0x230/0x230 [ 891.819789][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 891.824909][ T7863] ? _raw_spin_unlock+0x2d/0x50 [ 891.829770][ T7863] try_charge+0x102c/0x15c0 [ 891.834276][ T7863] ? find_held_lock+0x35/0x130 [ 891.839048][ T7863] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 891.844613][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 891.850866][ T7863] ? kasan_check_read+0x11/0x20 [ 891.855733][ T7863] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 891.861290][ T7863] mem_cgroup_try_charge+0x24d/0x5e0 [ 891.866596][ T7863] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 891.872258][ T7863] wp_page_copy+0x408/0x1740 [ 891.876852][ T7863] ? find_held_lock+0x35/0x130 [ 891.881647][ T7863] ? pmd_pfn+0x1d0/0x1d0 [ 891.885905][ T7863] ? lock_downgrade+0x880/0x880 [ 891.890763][ T7863] ? swp_swapcount+0x540/0x540 [ 891.895538][ T7863] ? kasan_check_read+0x11/0x20 [ 891.900418][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 891.905556][ T7863] do_wp_page+0x48e/0x1500 [ 891.909995][ T7863] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 891.915401][ T7863] __handle_mm_fault+0x22e8/0x3ec0 [ 891.920526][ T7863] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 891.926078][ T7863] ? find_held_lock+0x35/0x130 [ 891.930856][ T7863] ? handle_mm_fault+0x322/0xb30 [ 891.935810][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 891.942079][ T7863] ? kasan_check_read+0x11/0x20 [ 891.946978][ T7863] handle_mm_fault+0x43f/0xb30 [ 891.951758][ T7863] __do_page_fault+0x5ef/0xda0 [ 891.956538][ T7863] do_page_fault+0x71/0x581 [ 891.961051][ T7863] ? page_fault+0x8/0x30 [ 891.965300][ T7863] page_fault+0x1e/0x30 [ 891.969461][ T7863] RIP: 0033:0x42ff3a [ 891.973533][ T7863] Code: 48 29 e8 31 c9 48 81 fb 40 36 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 2c 50 62 00 85 c0 0f 84 3a f7 ff ff [ 891.993155][ T7863] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 891.999234][ T7863] RAX: 0000000000018691 RBX: 0000000000713640 RCX: 0000000000008041 [ 892.007234][ T7863] RDX: 00000000014aa930 RSI: 00000000014b2970 RDI: 0000000000000003 [ 892.015735][ T7863] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000014a9940 [ 892.023712][ T7863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000713698 [ 892.031687][ T7863] R13: 0000000000713698 R14: 00000000000d796c R15: 0000000000002710 [ 892.042574][ T7863] memory: usage 39700kB, limit 0kB, failcnt 47 [ 892.048773][ T7863] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 892.079142][ T7863] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 892.086100][ T7863] Memory cgroup stats for /syz1: cache:20KB rss:34596KB rss_huge:30720KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:34580KB inactive_file:0KB active_file:0KB unevictable:0KB [ 892.149076][ T7863] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=16931,uid=0 [ 892.239157][ T7863] Memory cgroup out of memory: Killed process 16931 (syz-executor.1) total-vm:72580kB, anon-rss:2208kB, file-rss:35860kB, shmem-rss:0kB [ 892.347109][ T7863] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 892.389144][ T7863] CPU: 1 PID: 7863 Comm: syz-executor.1 Not tainted 5.1.0-rc7+ #97 [ 892.397070][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 892.407231][ T7863] Call Trace: [ 892.410546][ T7863] dump_stack+0x172/0x1f0 [ 892.414900][ T7863] dump_header+0x10f/0xb6c [ 892.419340][ T7863] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 892.425162][ T7863] ? ___ratelimit+0x60/0x595 [ 892.429765][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 892.434887][ T7863] oom_kill_process.cold+0x10/0x15 [ 892.440007][ T7863] out_of_memory+0x79a/0x1280 [ 892.444693][ T7863] ? lock_downgrade+0x880/0x880 [ 892.449559][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 892.455821][ T7863] ? oom_killer_disable+0x280/0x280 [ 892.461027][ T7863] ? find_held_lock+0x35/0x130 [ 892.465834][ T7863] mem_cgroup_out_of_memory+0x1ca/0x230 [ 892.471385][ T7863] ? memcg_event_wake+0x230/0x230 [ 892.476421][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 892.481540][ T7863] ? _raw_spin_unlock+0x2d/0x50 [ 892.486405][ T7863] try_charge+0x102c/0x15c0 [ 892.490911][ T7863] ? find_held_lock+0x35/0x130 [ 892.495693][ T7863] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 892.501273][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 892.507637][ T7863] ? kasan_check_read+0x11/0x20 [ 892.512505][ T7863] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 892.518061][ T7863] mem_cgroup_try_charge+0x24d/0x5e0 [ 892.523362][ T7863] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 892.529004][ T7863] wp_page_copy+0x408/0x1740 [ 892.533607][ T7863] ? find_held_lock+0x35/0x130 [ 892.538384][ T7863] ? pmd_pfn+0x1d0/0x1d0 [ 892.542632][ T7863] ? lock_downgrade+0x880/0x880 [ 892.547490][ T7863] ? swp_swapcount+0x540/0x540 [ 892.552264][ T7863] ? kasan_check_read+0x11/0x20 [ 892.557126][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 892.562250][ T7863] do_wp_page+0x48e/0x1500 [ 892.566679][ T7863] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 892.572066][ T7863] __handle_mm_fault+0x22e8/0x3ec0 [ 892.577188][ T7863] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 892.582736][ T7863] ? find_held_lock+0x35/0x130 [ 892.587505][ T7863] ? handle_mm_fault+0x322/0xb30 [ 892.592459][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 892.598731][ T7863] ? kasan_check_read+0x11/0x20 [ 892.603606][ T7863] handle_mm_fault+0x43f/0xb30 [ 892.608384][ T7863] __do_page_fault+0x5ef/0xda0 [ 892.613167][ T7863] do_page_fault+0x71/0x581 [ 892.617680][ T7863] ? page_fault+0x8/0x30 [ 892.621930][ T7863] page_fault+0x1e/0x30 [ 892.626087][ T7863] RIP: 0033:0x42ff3a [ 892.630005][ T7863] Code: 48 29 e8 31 c9 48 81 fb 40 36 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 2c 50 62 00 85 c0 0f 84 3a f7 ff ff [ 892.649624][ T7863] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 892.655697][ T7863] RAX: 0000000000018691 RBX: 0000000000713640 RCX: 0000000000008041 [ 892.663677][ T7863] RDX: 00000000014aa930 RSI: 00000000014b2970 RDI: 0000000000000003 [ 892.671658][ T7863] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000014a9940 [ 892.679637][ T7863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000713698 [ 892.687627][ T7863] R13: 0000000000713698 R14: 00000000000d796c R15: 0000000000002710 [ 893.539066][ T7863] memory: usage 37352kB, limit 0kB, failcnt 53 [ 893.545277][ T7863] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 893.609092][ T7863] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 893.615980][ T7863] Memory cgroup stats for /syz1: cache:20KB rss:32436KB rss_huge:28672KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:32412KB inactive_file:0KB active_file:0KB unevictable:0KB [ 893.709079][ T7863] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=8105,uid=0 [ 893.779139][ T7863] Memory cgroup out of memory: Killed process 8105 (syz-executor.1) total-vm:72448kB, anon-rss:2192kB, file-rss:35820kB, shmem-rss:0kB [ 893.831755][ T7863] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 893.929093][ T7863] CPU: 0 PID: 7863 Comm: syz-executor.1 Not tainted 5.1.0-rc7+ #97 [ 893.937013][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 893.947247][ T7863] Call Trace: [ 893.950547][ T7863] dump_stack+0x172/0x1f0 [ 893.954889][ T7863] dump_header+0x10f/0xb6c [ 893.959442][ T7863] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 893.965252][ T7863] ? ___ratelimit+0x60/0x595 [ 893.970109][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 893.975227][ T7863] oom_kill_process.cold+0x10/0x15 [ 893.980344][ T7863] out_of_memory+0x79a/0x1280 [ 893.985028][ T7863] ? lock_downgrade+0x880/0x880 [ 893.989882][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 893.996125][ T7863] ? oom_killer_disable+0x280/0x280 [ 894.001328][ T7863] ? find_held_lock+0x35/0x130 [ 894.006104][ T7863] mem_cgroup_out_of_memory+0x1ca/0x230 [ 894.011654][ T7863] ? memcg_event_wake+0x230/0x230 [ 894.016687][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 894.021848][ T7863] ? _raw_spin_unlock+0x2d/0x50 [ 894.026707][ T7863] try_charge+0x102c/0x15c0 [ 894.031215][ T7863] ? find_held_lock+0x35/0x130 [ 894.035999][ T7863] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 894.041552][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 894.047810][ T7863] ? kasan_check_read+0x11/0x20 [ 894.052677][ T7863] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 894.058230][ T7863] mem_cgroup_try_charge+0x24d/0x5e0 [ 894.063526][ T7863] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 894.069170][ T7863] wp_page_copy+0x408/0x1740 [ 894.073764][ T7863] ? find_held_lock+0x35/0x130 [ 894.078539][ T7863] ? pmd_pfn+0x1d0/0x1d0 [ 894.082792][ T7863] ? lock_downgrade+0x880/0x880 [ 894.087651][ T7863] ? swp_swapcount+0x540/0x540 [ 894.092426][ T7863] ? kasan_check_read+0x11/0x20 [ 894.097280][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 894.102401][ T7863] do_wp_page+0x48e/0x1500 [ 894.106832][ T7863] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 894.112220][ T7863] __handle_mm_fault+0x22e8/0x3ec0 [ 894.117347][ T7863] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 894.122901][ T7863] ? find_held_lock+0x35/0x130 [ 894.127670][ T7863] ? handle_mm_fault+0x322/0xb30 [ 894.132635][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 894.138884][ T7863] ? kasan_check_read+0x11/0x20 [ 894.143746][ T7863] handle_mm_fault+0x43f/0xb30 [ 894.148518][ T7863] __do_page_fault+0x5ef/0xda0 [ 894.153294][ T7863] do_page_fault+0x71/0x581 [ 894.157799][ T7863] ? page_fault+0x8/0x30 [ 894.162053][ T7863] page_fault+0x1e/0x30 [ 894.166212][ T7863] RIP: 0033:0x42ff3a [ 894.170309][ T7863] Code: 48 29 e8 31 c9 48 81 fb 40 36 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 2c 50 62 00 85 c0 0f 84 3a f7 ff ff [ 894.189919][ T7863] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 894.195989][ T7863] RAX: 0000000000018691 RBX: 0000000000713640 RCX: 0000000000008041 [ 894.203973][ T7863] RDX: 00000000014aa930 RSI: 00000000014b2970 RDI: 0000000000000003 [ 894.211947][ T7863] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000014a9940 [ 894.219920][ T7863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000713698 [ 894.227893][ T7863] R13: 0000000000713698 R14: 00000000000d796c R15: 0000000000002710 [ 895.233772][ T7863] memory: usage 35000kB, limit 0kB, failcnt 59 [ 895.261038][ T7863] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 895.268535][ T7863] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 895.354950][ T7863] Memory cgroup stats for /syz1: cache:20KB rss:30276KB rss_huge:26624KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:30252KB inactive_file:0KB active_file:0KB unevictable:0KB [ 895.482988][ T7863] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=8174,uid=0 [ 895.565010][ T7863] Memory cgroup out of memory: Killed process 8174 (syz-executor.1) total-vm:72448kB, anon-rss:2192kB, file-rss:35820kB, shmem-rss:0kB 19:34:42 executing program 1: socket$kcm(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffd95) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="9e4301000080000000021fe4ac14140ceb", 0x11}], 0x1}, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c00000024000000060000006f3096d2a59598e5735de07300de"], 0x0, 0x26, 0x0, 0x1}, 0x20) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 19:34:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') sendfile(r1, r2, 0x0, 0x80000002) 19:34:42 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x3dd, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000000)) 19:34:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') sendfile(r1, r2, 0x0, 0x80000002) 19:34:42 executing program 4: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 19:34:42 executing program 0: r0 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000000380)={0x80, 0x0, 0x7, 0x4, 0x2, 0xce51, 0x0, 0x0, 0x101, 0x0, 0x800100, 0x0, 0x0, 0x0, 0x0, 0x5}) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) r3 = dup3(r2, r1, 0x0) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000140), &(0x7f00000001c0)=0x4) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) socket$nl_route(0x10, 0x3, 0x0) 19:34:42 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x3dd, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000000)) 19:34:42 executing program 5: socket$kcm(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffd95) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="9e4301000080000000021fe4ac14140ceb", 0x11}], 0x1}, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c00000024000000060000006f3096d2a59598e5735de07300de"], 0x0, 0x26, 0x0, 0x1}, 0x20) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 19:34:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') sendfile(r1, r2, 0x0, 0x80000002) [ 895.790288][ T7863] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 895.910451][ T7863] CPU: 1 PID: 7863 Comm: syz-executor.1 Not tainted 5.1.0-rc7+ #97 [ 895.918384][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 895.928447][ T7863] Call Trace: [ 895.931756][ T7863] dump_stack+0x172/0x1f0 [ 895.936110][ T7863] dump_header+0x10f/0xb6c [ 895.940554][ T7863] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 895.946383][ T7863] ? ___ratelimit+0x60/0x595 [ 895.950980][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 895.956122][ T7863] oom_kill_process.cold+0x10/0x15 [ 895.961245][ T7863] out_of_memory+0x79a/0x1280 [ 895.965927][ T7863] ? lock_downgrade+0x880/0x880 [ 895.970789][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 895.977036][ T7863] ? oom_killer_disable+0x280/0x280 [ 895.982234][ T7863] ? find_held_lock+0x35/0x130 [ 895.987033][ T7863] mem_cgroup_out_of_memory+0x1ca/0x230 [ 895.992582][ T7863] ? memcg_event_wake+0x230/0x230 [ 895.997637][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 896.002759][ T7863] ? _raw_spin_unlock+0x2d/0x50 [ 896.007646][ T7863] try_charge+0x102c/0x15c0 [ 896.012151][ T7863] ? find_held_lock+0x35/0x130 [ 896.016930][ T7863] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 896.022487][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 896.028736][ T7863] ? kasan_check_read+0x11/0x20 [ 896.033607][ T7863] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 896.039167][ T7863] mem_cgroup_try_charge+0x24d/0x5e0 [ 896.044467][ T7863] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 896.050109][ T7863] wp_page_copy+0x408/0x1740 [ 896.054718][ T7863] ? find_held_lock+0x35/0x130 [ 896.059544][ T7863] ? pmd_pfn+0x1d0/0x1d0 [ 896.063993][ T7863] ? lock_downgrade+0x880/0x880 [ 896.068848][ T7863] ? swp_swapcount+0x540/0x540 [ 896.073627][ T7863] ? kasan_check_read+0x11/0x20 [ 896.078485][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 896.083621][ T7863] do_wp_page+0x48e/0x1500 [ 896.088063][ T7863] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 896.093454][ T7863] __handle_mm_fault+0x22e8/0x3ec0 [ 896.098576][ T7863] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 896.104161][ T7863] ? find_held_lock+0x35/0x130 [ 896.108933][ T7863] ? handle_mm_fault+0x322/0xb30 [ 896.113887][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 896.120149][ T7863] ? kasan_check_read+0x11/0x20 [ 896.125018][ T7863] handle_mm_fault+0x43f/0xb30 [ 896.129796][ T7863] __do_page_fault+0x5ef/0xda0 [ 896.134578][ T7863] do_page_fault+0x71/0x581 [ 896.139097][ T7863] ? page_fault+0x8/0x30 [ 896.143349][ T7863] page_fault+0x1e/0x30 [ 896.147507][ T7863] RIP: 0033:0x40672e [ 896.151407][ T7863] Code: 08 ff ff ff 8b 54 24 04 49 8b 37 31 c0 bf 42 df 4b 00 e8 f5 b1 ff ff 8b 44 24 6c 49 8d 4f 60 ba 40 00 00 00 44 89 f6 44 89 e7 <41> 89 87 b4 00 00 00 48 8d 84 24 80 00 00 00 49 89 87 b8 00 00 00 [ 896.171018][ T7863] RSP: 002b:0000000000a4f5f0 EFLAGS: 00010206 [ 896.177092][ T7863] RAX: 0000000000000004 RBX: 0000000000a4f610 RCX: 0000000000710d20 [ 896.185076][ T7863] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 896.193147][ T7863] RBP: 0000000000712e80 R08: 0000000000006000 R09: 0000000000004000 [ 896.201134][ T7863] R10: 0000000000a4f710 R11: 0000000000000216 R12: 0000000000000003 [ 896.209108][ T7863] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000710cc0 [ 896.243439][ T7863] memory: usage 32520kB, limit 0kB, failcnt 67 [ 896.249910][ T7863] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 896.257560][ T7863] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 896.266011][ T7863] Memory cgroup stats for /syz1: cache:20KB rss:28116KB rss_huge:24576KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:28092KB inactive_file:0KB active_file:0KB unevictable:0KB [ 896.289942][ T7863] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=11955,uid=0 [ 896.290083][ T7863] Memory cgroup out of memory: Killed process 11955 (syz-executor.1) total-vm:72448kB, anon-rss:2200kB, file-rss:35812kB, shmem-rss:0kB [ 896.292982][ T1043] oom_reaper: reaped process 11955 (syz-executor.1), now anon-rss:0kB, file-rss:34852kB, shmem-rss:0kB [ 896.311769][ T7863] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 19:34:42 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x3dd, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000000)) 19:34:43 executing program 5: socket$kcm(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffd95) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="9e4301000080000000021fe4ac14140ceb", 0x11}], 0x1}, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c00000024000000060000006f3096d2a59598e5735de07300de"], 0x0, 0x26, 0x0, 0x1}, 0x20) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) [ 896.454750][ T7863] CPU: 0 PID: 7863 Comm: syz-executor.1 Not tainted 5.1.0-rc7+ #97 [ 896.462673][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 896.472732][ T7863] Call Trace: [ 896.476130][ T7863] dump_stack+0x172/0x1f0 [ 896.480481][ T7863] dump_header+0x10f/0xb6c [ 896.484914][ T7863] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 896.490735][ T7863] ? ___ratelimit+0x60/0x595 [ 896.495359][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 896.500492][ T7863] oom_kill_process.cold+0x10/0x15 [ 896.505635][ T7863] out_of_memory+0x79a/0x1280 [ 896.510341][ T7863] ? oom_killer_disable+0x280/0x280 [ 896.515554][ T7863] ? find_held_lock+0x35/0x130 [ 896.520353][ T7863] mem_cgroup_out_of_memory+0x1ca/0x230 [ 896.525911][ T7863] ? memcg_event_wake+0x230/0x230 [ 896.531042][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 896.536171][ T7863] ? _raw_spin_unlock+0x2d/0x50 [ 896.541035][ T7863] try_charge+0x102c/0x15c0 [ 896.545552][ T7863] ? find_held_lock+0x35/0x130 [ 896.550343][ T7863] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 896.555906][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 896.562163][ T7863] ? kasan_check_read+0x11/0x20 [ 896.567033][ T7863] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 896.572598][ T7863] mem_cgroup_try_charge+0x24d/0x5e0 [ 896.577910][ T7863] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 896.583562][ T7863] wp_page_copy+0x408/0x1740 [ 896.588178][ T7863] ? find_held_lock+0x35/0x130 [ 896.592961][ T7863] ? pmd_pfn+0x1d0/0x1d0 [ 896.597217][ T7863] ? lock_downgrade+0x880/0x880 [ 896.602080][ T7863] ? swp_swapcount+0x540/0x540 [ 896.606861][ T7863] ? kasan_check_read+0x11/0x20 [ 896.611728][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 896.616854][ T7863] do_wp_page+0x48e/0x1500 [ 896.621289][ T7863] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 896.626850][ T7863] __handle_mm_fault+0x22e8/0x3ec0 [ 896.631977][ T7863] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 896.637522][ T7863] ? find_held_lock+0x35/0x130 [ 896.642285][ T7863] ? handle_mm_fault+0x322/0xb30 [ 896.647228][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 896.653483][ T7863] ? kasan_check_read+0x11/0x20 [ 896.658341][ T7863] handle_mm_fault+0x43f/0xb30 [ 896.663110][ T7863] __do_page_fault+0x5ef/0xda0 [ 896.667894][ T7863] do_page_fault+0x71/0x581 [ 896.672397][ T7863] ? page_fault+0x8/0x30 [ 896.676640][ T7863] page_fault+0x1e/0x30 [ 896.680801][ T7863] RIP: 0033:0x40672e [ 896.684693][ T7863] Code: 08 ff ff ff 8b 54 24 04 49 8b 37 31 c0 bf 42 df 4b 00 e8 f5 b1 ff ff 8b 44 24 6c 49 8d 4f 60 ba 40 00 00 00 44 89 f6 44 89 e7 <41> 89 87 b4 00 00 00 48 8d 84 24 80 00 00 00 49 89 87 b8 00 00 00 [ 896.704306][ T7863] RSP: 002b:0000000000a4f5f0 EFLAGS: 00010206 [ 896.710375][ T7863] RAX: 0000000000000004 RBX: 0000000000a4f610 RCX: 0000000000710d20 [ 896.718341][ T7863] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 896.726323][ T7863] RBP: 0000000000712e80 R08: 0000000000006000 R09: 0000000000004000 [ 896.734291][ T7863] R10: 0000000000a4f710 R11: 0000000000000216 R12: 0000000000000003 [ 896.742279][ T7863] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000710cc0 19:34:43 executing program 0: socket$kcm(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffd95) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="9e4301000080000000021fe4ac14140ceb", 0x11}], 0x1}, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c00000024000000060000006f3096d2a59598e5735de07300de"], 0x0, 0x26, 0x0, 0x1}, 0x20) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) [ 896.878197][ T7863] memory: usage 30212kB, limit 0kB, failcnt 73 [ 896.884575][ T7863] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 896.909390][ T7863] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 896.916325][ T7863] Memory cgroup stats for /syz1: cache:20KB rss:25964KB rss_huge:22528KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:25948KB inactive_file:0KB active_file:0KB unevictable:0KB [ 896.983162][ T7863] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=11986,uid=0 [ 897.071889][ T7863] Memory cgroup out of memory: Killed process 11986 (syz-executor.1) total-vm:72448kB, anon-rss:2200kB, file-rss:35812kB, shmem-rss:0kB [ 897.246688][T26740] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 897.262698][T26740] CPU: 1 PID: 26740 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 897.270691][T26740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 897.280751][T26740] Call Trace: [ 897.284051][T26740] dump_stack+0x172/0x1f0 [ 897.288391][T26740] dump_header+0x10f/0xb6c [ 897.292903][T26740] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 897.298736][T26740] ? ___ratelimit+0x60/0x595 [ 897.303334][T26740] ? do_raw_spin_unlock+0x57/0x270 [ 897.308454][T26740] oom_kill_process.cold+0x10/0x15 [ 897.313606][T26740] out_of_memory+0x79a/0x1280 [ 897.318297][T26740] ? oom_killer_disable+0x280/0x280 [ 897.323498][T26740] ? find_held_lock+0x35/0x130 [ 897.328278][T26740] mem_cgroup_out_of_memory+0x1ca/0x230 [ 897.333829][T26740] ? memcg_event_wake+0x230/0x230 [ 897.338868][T26740] ? do_raw_spin_unlock+0x57/0x270 [ 897.343985][T26740] ? _raw_spin_unlock+0x2d/0x50 [ 897.348853][T26740] try_charge+0x102c/0x15c0 [ 897.353365][T26740] ? find_held_lock+0x35/0x130 [ 897.358149][T26740] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 897.363707][T26740] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 897.369965][T26740] ? kasan_check_read+0x11/0x20 [ 897.374849][T26740] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 897.380406][T26740] mem_cgroup_try_charge+0x24d/0x5e0 [ 897.385699][T26740] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 897.391341][T26740] __handle_mm_fault+0x1e1f/0x3ec0 [ 897.396464][T26740] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 897.402035][T26740] ? find_held_lock+0x35/0x130 [ 897.406806][T26740] ? handle_mm_fault+0x322/0xb30 [ 897.411761][T26740] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 897.418014][T26740] ? kasan_check_read+0x11/0x20 [ 897.422882][T26740] handle_mm_fault+0x43f/0xb30 [ 897.427658][T26740] __do_page_fault+0x5ef/0xda0 [ 897.432443][T26740] do_page_fault+0x71/0x581 [ 897.437142][T26740] ? page_fault+0x8/0x30 [ 897.441394][T26740] page_fault+0x1e/0x30 [ 897.445550][T26740] RIP: 0033:0x4107bf [ 897.449459][T26740] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 897.469075][T26740] RSP: 002b:0000000000a4fae0 EFLAGS: 00010206 [ 897.475164][T26740] RAX: 00007fa46bdb4000 RBX: 0000000000020000 RCX: 0000000000458dfa [ 897.483147][T26740] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 897.491142][T26740] RBP: 0000000000a4fbc0 R08: ffffffffffffffff R09: 0000000000000000 [ 897.499143][T26740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fcb0 [ 897.507137][T26740] R13: 00007fa46bdd4700 R14: 0000000000000001 R15: 000000000073bfac [ 897.520641][T26740] memory: usage 101384kB, limit 0kB, failcnt 8 [ 897.526950][T26740] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 897.535059][T26740] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 897.542386][T26740] Memory cgroup stats for /syz5: cache:16KB rss:91432KB rss_huge:88064KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:91332KB inactive_file:0KB active_file:0KB unevictable:0KB [ 897.564304][T26740] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=7976,uid=0 [ 897.581727][T26740] Memory cgroup out of memory: Killed process 7976 (syz-executor.5) total-vm:72448kB, anon-rss:4240kB, file-rss:35828kB, shmem-rss:0kB [ 897.614314][T26741] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 897.627855][T26741] CPU: 1 PID: 26741 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 897.635856][T26741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 897.645950][T26741] Call Trace: [ 897.649257][T26741] dump_stack+0x172/0x1f0 [ 897.653623][T26741] dump_header+0x10f/0xb6c [ 897.658062][T26741] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 897.663881][T26741] ? ___ratelimit+0x60/0x595 [ 897.668483][T26741] ? do_raw_spin_unlock+0x57/0x270 [ 897.673622][T26741] oom_kill_process.cold+0x10/0x15 [ 897.678754][T26741] out_of_memory+0x79a/0x1280 [ 897.683473][T26741] ? retint_kernel+0x2d/0x2d [ 897.688079][T26741] ? oom_killer_disable+0x280/0x280 [ 897.693307][T26741] mem_cgroup_out_of_memory+0x1ca/0x230 [ 897.698867][T26741] ? memcg_event_wake+0x230/0x230 [ 897.703915][T26741] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 897.709827][T26741] ? cgroup_file_notify+0x140/0x1b0 [ 897.715044][T26741] memory_max_write+0x169/0x300 [ 897.719918][T26741] ? mem_cgroup_write+0x360/0x360 [ 897.724966][T26741] cgroup_file_write+0x245/0x7a0 [ 897.729915][T26741] ? mem_cgroup_write+0x360/0x360 [ 897.734952][T26741] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 897.740613][T26741] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 897.746256][T26741] kernfs_fop_write+0x2ba/0x480 [ 897.751135][T26741] __vfs_write+0x8d/0x110 [ 897.755473][T26741] ? kernfs_fop_open+0xd90/0xd90 [ 897.760421][T26741] vfs_write+0x20c/0x580 [ 897.764686][T26741] ksys_write+0x14f/0x2d0 [ 897.769028][T26741] ? __ia32_sys_read+0xb0/0xb0 [ 897.773808][T26741] ? do_syscall_64+0x26/0x610 [ 897.778499][T26741] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 897.784583][T26741] ? do_syscall_64+0x26/0x610 [ 897.789292][T26741] __x64_sys_write+0x73/0xb0 [ 897.793899][T26741] do_syscall_64+0x103/0x610 [ 897.798514][T26741] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 897.804416][T26741] RIP: 0033:0x458da9 [ 897.808318][T26741] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 897.827939][T26741] RSP: 002b:00007fa46bdf4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 897.836476][T26741] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9 [ 897.844464][T26741] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 897.852546][T26741] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 897.860637][T26741] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa46bdf56d4 [ 897.868633][T26741] R13: 00000000004c880e R14: 00000000004def78 R15: 00000000ffffffff [ 897.889224][T26741] memory: usage 97012kB, limit 0kB, failcnt 14 [ 897.895584][T26741] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 897.909368][T26741] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 897.916332][T26741] Memory cgroup stats for /syz5: cache:16KB rss:87232KB rss_huge:83968KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:87124KB inactive_file:0KB active_file:0KB unevictable:0KB [ 897.959285][T26741] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=8000,uid=0 [ 897.989423][T26741] Memory cgroup out of memory: Killed process 8000 (syz-executor.5) total-vm:72448kB, anon-rss:4240kB, file-rss:35828kB, shmem-rss:0kB [ 898.007624][ T1043] oom_reaper: reaped process 8000 (syz-executor.5), now anon-rss:0kB, file-rss:34868kB, shmem-rss:0kB [ 898.019204][T26832] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 898.049088][T26832] CPU: 1 PID: 26832 Comm: syz-executor.0 Not tainted 5.1.0-rc7+ #97 [ 898.057137][T26832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 898.067291][T26832] Call Trace: [ 898.070607][T26832] dump_stack+0x172/0x1f0 [ 898.074958][T26832] dump_header+0x10f/0xb6c [ 898.079390][T26832] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 898.085233][T26832] ? ___ratelimit+0x60/0x595 [ 898.089830][T26832] ? do_raw_spin_unlock+0x57/0x270 [ 898.094959][T26832] oom_kill_process.cold+0x10/0x15 [ 898.100089][T26832] out_of_memory+0x79a/0x1280 [ 898.104794][T26832] ? oom_killer_disable+0x280/0x280 [ 898.110003][T26832] ? find_held_lock+0x35/0x130 [ 898.114793][T26832] mem_cgroup_out_of_memory+0x1ca/0x230 [ 898.120348][T26832] ? memcg_event_wake+0x230/0x230 [ 898.125422][T26832] ? do_raw_spin_unlock+0x57/0x270 [ 898.130547][T26832] ? _raw_spin_unlock+0x2d/0x50 [ 898.135420][T26832] try_charge+0x102c/0x15c0 [ 898.140022][T26832] ? find_held_lock+0x35/0x130 [ 898.144808][T26832] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 898.150458][T26832] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 898.156740][T26832] ? kasan_check_read+0x11/0x20 [ 898.161620][T26832] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 898.167196][T26832] mem_cgroup_try_charge+0x24d/0x5e0 [ 898.172531][T26832] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 898.178178][T26832] __handle_mm_fault+0x1e1f/0x3ec0 [ 898.183315][T26832] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 898.188878][T26832] ? find_held_lock+0x35/0x130 [ 898.193658][T26832] ? handle_mm_fault+0x322/0xb30 [ 898.198631][T26832] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 898.204894][T26832] ? kasan_check_read+0x11/0x20 [ 898.209765][T26832] handle_mm_fault+0x43f/0xb30 [ 898.214546][T26832] __do_page_fault+0x5ef/0xda0 [ 898.219340][T26832] do_page_fault+0x71/0x581 [ 898.223857][T26832] ? page_fault+0x8/0x30 [ 898.228123][T26832] page_fault+0x1e/0x30 [ 898.232291][T26832] RIP: 0033:0x4107bf [ 898.236195][T26832] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 898.255811][T26832] RSP: 002b:0000000000a4fae0 EFLAGS: 00010206 [ 898.261890][T26832] RAX: 00007f9f2078e000 RBX: 0000000000020000 RCX: 0000000000458dfa [ 898.270769][T26832] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 898.278757][T26832] RBP: 0000000000a4fbc0 R08: ffffffffffffffff R09: 0000000000000000 [ 898.286746][T26832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fcb0 [ 898.294731][T26832] R13: 00007f9f207ae700 R14: 0000000000000001 R15: 000000000073bfac [ 898.310296][T26832] memory: usage 94624kB, limit 0kB, failcnt 8 [ 898.316573][T26832] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 898.324621][T26832] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 898.331981][T26832] Memory cgroup stats for /syz0: cache:44KB rss:87188KB rss_huge:83968KB shmem:80KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:87092KB inactive_file:0KB active_file:0KB unevictable:0KB [ 898.355461][T26832] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=29537,uid=0 [ 898.372392][T26832] Memory cgroup out of memory: Killed process 29537 (syz-executor.0) total-vm:72712kB, anon-rss:6312kB, file-rss:35860kB, shmem-rss:0kB [ 898.402002][ T1043] oom_reaper: reaped process 29537 (syz-executor.0), now anon-rss:0kB, file-rss:34900kB, shmem-rss:0kB [ 898.420636][ T7863] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 898.448674][ T7863] CPU: 1 PID: 7863 Comm: syz-executor.1 Not tainted 5.1.0-rc7+ #97 [ 898.456611][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 898.466705][ T7863] Call Trace: [ 898.470012][ T7863] dump_stack+0x172/0x1f0 [ 898.474359][ T7863] dump_header+0x10f/0xb6c [ 898.478871][ T7863] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 898.484794][ T7863] ? ___ratelimit+0x60/0x595 [ 898.489401][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 898.494522][ T7863] oom_kill_process.cold+0x10/0x15 [ 898.499645][ T7863] out_of_memory+0x79a/0x1280 [ 898.504335][ T7863] ? oom_killer_disable+0x280/0x280 [ 898.509540][ T7863] ? find_held_lock+0x35/0x130 [ 898.514325][ T7863] mem_cgroup_out_of_memory+0x1ca/0x230 [ 898.519878][ T7863] ? memcg_event_wake+0x230/0x230 [ 898.525004][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 898.530133][ T7863] ? _raw_spin_unlock+0x2d/0x50 [ 898.535002][ T7863] try_charge+0x102c/0x15c0 [ 898.539513][ T7863] ? find_held_lock+0x35/0x130 [ 898.544293][ T7863] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 898.549847][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 898.556101][ T7863] ? kasan_check_read+0x11/0x20 [ 898.560972][ T7863] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 898.566532][ T7863] mem_cgroup_try_charge+0x24d/0x5e0 [ 898.571833][ T7863] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 898.577492][ T7863] wp_page_copy+0x408/0x1740 [ 898.582090][ T7863] ? find_held_lock+0x35/0x130 [ 898.586879][ T7863] ? pmd_pfn+0x1d0/0x1d0 [ 898.591137][ T7863] ? lock_downgrade+0x880/0x880 [ 898.595996][ T7863] ? swp_swapcount+0x540/0x540 [ 898.600772][ T7863] ? kasan_check_read+0x11/0x20 [ 898.605647][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 898.610767][ T7863] do_wp_page+0x48e/0x1500 [ 898.615198][ T7863] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 898.620585][ T7863] __handle_mm_fault+0x22e8/0x3ec0 [ 898.625748][ T7863] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 898.631298][ T7863] ? find_held_lock+0x35/0x130 [ 898.636068][ T7863] ? handle_mm_fault+0x322/0xb30 [ 898.641027][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 898.647278][ T7863] ? kasan_check_read+0x11/0x20 [ 898.652155][ T7863] handle_mm_fault+0x43f/0xb30 [ 898.656928][ T7863] __do_page_fault+0x5ef/0xda0 [ 898.661705][ T7863] do_page_fault+0x71/0x581 [ 898.666218][ T7863] ? page_fault+0x8/0x30 [ 898.670473][ T7863] page_fault+0x1e/0x30 [ 898.674640][ T7863] RIP: 0033:0x40672e [ 898.678538][ T7863] Code: 08 ff ff ff 8b 54 24 04 49 8b 37 31 c0 bf 42 df 4b 00 e8 f5 b1 ff ff 8b 44 24 6c 49 8d 4f 60 ba 40 00 00 00 44 89 f6 44 89 e7 <41> 89 87 b4 00 00 00 48 8d 84 24 80 00 00 00 49 89 87 b8 00 00 00 [ 898.698163][ T7863] RSP: 002b:0000000000a4f5f0 EFLAGS: 00010206 [ 898.704237][ T7863] RAX: 0000000000000004 RBX: 0000000000a4f610 RCX: 0000000000710d20 [ 898.712210][ T7863] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 898.720195][ T7863] RBP: 0000000000712e80 R08: 0000000000006000 R09: 0000000000004000 [ 898.728171][ T7863] R10: 0000000000a4f710 R11: 0000000000000216 R12: 0000000000000003 [ 898.736152][ T7863] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000710cc0 [ 898.760392][ T7863] memory: usage 27888kB, limit 0kB, failcnt 79 [ 898.798421][ T7863] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 898.821041][ T7863] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 898.827908][ T7863] Memory cgroup stats for /syz1: cache:20KB rss:23820KB rss_huge:20480KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:23804KB inactive_file:0KB active_file:0KB unevictable:0KB [ 898.894756][ T7863] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=11931,uid=0 [ 898.954936][ T7863] Memory cgroup out of memory: Killed process 11931 (syz-executor.1) total-vm:72580kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB [ 898.998192][ T1043] oom_reaper: reaped process 11931 (syz-executor.1), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 899.009570][T26740] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 899.026672][T26740] CPU: 1 PID: 26740 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 899.034679][T26740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 899.044738][T26740] Call Trace: [ 899.048037][T26740] dump_stack+0x172/0x1f0 [ 899.052381][T26740] dump_header+0x10f/0xb6c [ 899.056808][T26740] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 899.062631][T26740] ? ___ratelimit+0x60/0x595 [ 899.067224][T26740] ? do_raw_spin_unlock+0x57/0x270 [ 899.072345][T26740] oom_kill_process.cold+0x10/0x15 [ 899.077462][T26740] out_of_memory+0x79a/0x1280 [ 899.082177][T26740] ? oom_killer_disable+0x280/0x280 [ 899.087379][T26740] ? find_held_lock+0x35/0x130 [ 899.092164][T26740] mem_cgroup_out_of_memory+0x1ca/0x230 [ 899.097717][T26740] ? memcg_event_wake+0x230/0x230 [ 899.102755][T26740] ? do_raw_spin_unlock+0x57/0x270 [ 899.107894][T26740] ? _raw_spin_unlock+0x2d/0x50 [ 899.112752][T26740] try_charge+0x102c/0x15c0 [ 899.117257][T26740] ? find_held_lock+0x35/0x130 [ 899.122034][T26740] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 899.127598][T26740] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 899.133852][T26740] ? kasan_check_read+0x11/0x20 [ 899.138713][T26740] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 899.144277][T26740] mem_cgroup_try_charge+0x24d/0x5e0 [ 899.149576][T26740] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 899.155230][T26740] __handle_mm_fault+0x1e1f/0x3ec0 [ 899.160357][T26740] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 899.165929][T26740] ? find_held_lock+0x35/0x130 [ 899.170702][T26740] ? handle_mm_fault+0x322/0xb30 [ 899.175680][T26740] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 899.181929][T26740] ? kasan_check_read+0x11/0x20 [ 899.186792][T26740] handle_mm_fault+0x43f/0xb30 [ 899.191565][T26740] __do_page_fault+0x5ef/0xda0 [ 899.196351][T26740] do_page_fault+0x71/0x581 [ 899.200860][T26740] ? page_fault+0x8/0x30 [ 899.205130][T26740] page_fault+0x1e/0x30 [ 899.209288][T26740] RIP: 0033:0x4107bf [ 899.213191][T26740] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 899.232806][T26740] RSP: 002b:0000000000a4fae0 EFLAGS: 00010206 [ 899.238888][T26740] RAX: 00007fa46bdb4000 RBX: 0000000000020000 RCX: 0000000000458dfa [ 899.246868][T26740] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 899.254859][T26740] RBP: 0000000000a4fbc0 R08: ffffffffffffffff R09: 0000000000000000 [ 899.262847][T26740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fcb0 [ 899.270827][T26740] R13: 00007fa46bdd4700 R14: 0000000000000001 R15: 000000000073bfac [ 899.421231][T26740] memory: usage 92176kB, limit 0kB, failcnt 14 [ 899.430865][T26740] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 899.442905][T26740] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 899.454413][T26740] Memory cgroup stats for /syz5: cache:16KB rss:83024KB rss_huge:79872KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:82916KB inactive_file:0KB active_file:0KB unevictable:0KB [ 899.485003][T26740] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=8043,uid=0 [ 899.525701][T26740] Memory cgroup out of memory: Killed process 8043 (syz-executor.5) total-vm:72448kB, anon-rss:4240kB, file-rss:35828kB, shmem-rss:0kB [ 899.597784][T26833] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 899.619336][T26833] CPU: 0 PID: 26833 Comm: syz-executor.0 Not tainted 5.1.0-rc7+ #97 [ 899.627345][T26833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 899.637420][T26833] Call Trace: [ 899.640725][T26833] dump_stack+0x172/0x1f0 [ 899.645065][T26833] dump_header+0x10f/0xb6c [ 899.649492][T26833] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 899.655309][T26833] ? ___ratelimit+0x60/0x595 [ 899.659907][T26833] ? do_raw_spin_unlock+0x57/0x270 [ 899.665027][T26833] oom_kill_process.cold+0x10/0x15 [ 899.670156][T26833] out_of_memory+0x79a/0x1280 [ 899.674839][T26833] ? retint_kernel+0x2d/0x2d [ 899.679445][T26833] ? oom_killer_disable+0x280/0x280 [ 899.684663][T26833] mem_cgroup_out_of_memory+0x1ca/0x230 [ 899.690214][T26833] ? memcg_event_wake+0x230/0x230 [ 899.695252][T26833] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 899.701065][T26833] ? cgroup_file_notify+0x140/0x1b0 [ 899.706272][T26833] memory_max_write+0x169/0x300 [ 899.711154][T26833] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 899.716642][T26833] ? mem_cgroup_write+0x360/0x360 [ 899.721683][T26833] ? retint_kernel+0x2d/0x2d [ 899.726290][T26833] cgroup_file_write+0x245/0x7a0 [ 899.731238][T26833] ? mem_cgroup_write+0x360/0x360 [ 899.736269][T26833] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 899.741922][T26833] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 899.747559][T26833] kernfs_fop_write+0x2ba/0x480 [ 899.752541][T26833] __vfs_write+0x8d/0x110 [ 899.756880][T26833] ? kernfs_fop_open+0xd90/0xd90 [ 899.761827][T26833] vfs_write+0x20c/0x580 [ 899.766084][T26833] ksys_write+0x14f/0x2d0 [ 899.770426][T26833] ? __ia32_sys_read+0xb0/0xb0 [ 899.775206][T26833] ? do_syscall_64+0x26/0x610 [ 899.779894][T26833] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 899.785968][T26833] ? do_syscall_64+0x26/0x610 [ 899.790665][T26833] __x64_sys_write+0x73/0xb0 [ 899.795266][T26833] do_syscall_64+0x103/0x610 [ 899.799871][T26833] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 899.805766][T26833] RIP: 0033:0x458da9 [ 899.809667][T26833] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 899.829275][T26833] RSP: 002b:00007f9f207cec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 899.837689][T26833] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9 [ 899.845688][T26833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 899.853663][T26833] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 899.861647][T26833] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f207cf6d4 [ 899.869636][T26833] R13: 00000000004c880e R14: 00000000004def78 R15: 00000000ffffffff [ 899.894193][T26833] memory: usage 88132kB, limit 0kB, failcnt 15 [ 899.906860][T26833] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 899.914956][T26833] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 899.928096][T26833] Memory cgroup stats for /syz0: cache:44KB rss:80936KB rss_huge:77824KB shmem:80KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:80816KB inactive_file:0KB active_file:0KB unevictable:0KB [ 899.956708][T26833] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=27325,uid=0 [ 899.975797][T26833] Memory cgroup out of memory: Killed process 27325 (syz-executor.0) total-vm:72580kB, anon-rss:6304kB, file-rss:35860kB, shmem-rss:0kB [ 899.995164][ T1043] oom_reaper: reaped process 27325 (syz-executor.0), now anon-rss:0kB, file-rss:34900kB, shmem-rss:0kB [ 900.006486][ T7863] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 900.052425][ T7863] CPU: 0 PID: 7863 Comm: syz-executor.1 Not tainted 5.1.0-rc7+ #97 [ 900.060356][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 900.070415][ T7863] Call Trace: [ 900.073722][ T7863] dump_stack+0x172/0x1f0 [ 900.078068][ T7863] dump_header+0x10f/0xb6c [ 900.082496][ T7863] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 900.088314][ T7863] ? ___ratelimit+0x60/0x595 [ 900.092916][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 900.098036][ T7863] oom_kill_process.cold+0x10/0x15 [ 900.103160][ T7863] out_of_memory+0x79a/0x1280 [ 900.107853][ T7863] ? oom_killer_disable+0x280/0x280 [ 900.113055][ T7863] ? find_held_lock+0x35/0x130 [ 900.117837][ T7863] mem_cgroup_out_of_memory+0x1ca/0x230 [ 900.123391][ T7863] ? memcg_event_wake+0x230/0x230 [ 900.128430][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 900.133549][ T7863] ? _raw_spin_unlock+0x2d/0x50 [ 900.138419][ T7863] try_charge+0x102c/0x15c0 [ 900.142928][ T7863] ? find_held_lock+0x35/0x130 [ 900.147707][ T7863] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 900.153262][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 900.159513][ T7863] ? kasan_check_read+0x11/0x20 [ 900.164372][ T7863] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 900.169930][ T7863] mem_cgroup_try_charge+0x24d/0x5e0 [ 900.175235][ T7863] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 900.180879][ T7863] wp_page_copy+0x408/0x1740 [ 900.185477][ T7863] ? find_held_lock+0x35/0x130 [ 900.190252][ T7863] ? pmd_pfn+0x1d0/0x1d0 [ 900.194504][ T7863] ? lock_downgrade+0x880/0x880 [ 900.199361][ T7863] ? swp_swapcount+0x540/0x540 [ 900.204134][ T7863] ? kasan_check_read+0x11/0x20 [ 900.208995][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 900.214129][ T7863] do_wp_page+0x48e/0x1500 [ 900.218560][ T7863] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 900.223957][ T7863] __handle_mm_fault+0x22e8/0x3ec0 [ 900.229080][ T7863] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 900.234637][ T7863] ? find_held_lock+0x35/0x130 [ 900.239414][ T7863] ? handle_mm_fault+0x322/0xb30 [ 900.244368][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 900.250638][ T7863] ? kasan_check_read+0x11/0x20 [ 900.255505][ T7863] handle_mm_fault+0x43f/0xb30 [ 900.260281][ T7863] __do_page_fault+0x5ef/0xda0 [ 900.266530][ T7863] do_page_fault+0x71/0x581 [ 900.271040][ T7863] ? page_fault+0x8/0x30 [ 900.275294][ T7863] page_fault+0x1e/0x30 [ 900.279453][ T7863] RIP: 0033:0x40672e [ 900.283357][ T7863] Code: 08 ff ff ff 8b 54 24 04 49 8b 37 31 c0 bf 42 df 4b 00 e8 f5 b1 ff ff 8b 44 24 6c 49 8d 4f 60 ba 40 00 00 00 44 89 f6 44 89 e7 <41> 89 87 b4 00 00 00 48 8d 84 24 80 00 00 00 49 89 87 b8 00 00 00 [ 900.302974][ T7863] RSP: 002b:0000000000a4f5f0 EFLAGS: 00010206 [ 900.309049][ T7863] RAX: 0000000000000004 RBX: 0000000000a4f610 RCX: 0000000000710d20 [ 900.317032][ T7863] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 900.325019][ T7863] RBP: 0000000000712e80 R08: 0000000000006000 R09: 0000000000004000 [ 900.333006][ T7863] R10: 0000000000a4f710 R11: 0000000000000216 R12: 0000000000000003 [ 900.341101][ T7863] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000710cc0 [ 900.361504][ T7863] memory: usage 25428kB, limit 0kB, failcnt 91 [ 900.367913][ T7863] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 900.382250][ T7863] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 900.391277][ T7863] Memory cgroup stats for /syz1: cache:20KB rss:21672KB rss_huge:18432KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:21648KB inactive_file:0KB active_file:0KB unevictable:0KB [ 900.419137][ T7863] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=11963,uid=0 [ 900.448659][ T7863] Memory cgroup out of memory: Killed process 11963 (syz-executor.1) total-vm:72448kB, anon-rss:2200kB, file-rss:35804kB, shmem-rss:0kB [ 900.466407][ T1043] oom_reaper: reaped process 11963 (syz-executor.1), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 900.500603][ T7863] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 900.519147][ T7863] CPU: 1 PID: 7863 Comm: syz-executor.1 Not tainted 5.1.0-rc7+ #97 [ 900.527086][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 900.537155][ T7863] Call Trace: [ 900.540494][ T7863] dump_stack+0x172/0x1f0 [ 900.544840][ T7863] dump_header+0x10f/0xb6c [ 900.549264][ T7863] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 900.555078][ T7863] ? ___ratelimit+0x60/0x595 [ 900.559680][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 900.564801][ T7863] oom_kill_process.cold+0x10/0x15 [ 900.569922][ T7863] out_of_memory+0x79a/0x1280 [ 900.574616][ T7863] ? lock_downgrade+0x880/0x880 [ 900.579470][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 900.585716][ T7863] ? oom_killer_disable+0x280/0x280 [ 900.590913][ T7863] ? find_held_lock+0x35/0x130 [ 900.595694][ T7863] mem_cgroup_out_of_memory+0x1ca/0x230 [ 900.601253][ T7863] ? memcg_event_wake+0x230/0x230 [ 900.606288][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 900.611577][ T7863] ? _raw_spin_unlock+0x2d/0x50 [ 900.616446][ T7863] try_charge+0x102c/0x15c0 [ 900.620955][ T7863] ? find_held_lock+0x35/0x130 [ 900.625823][ T7863] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 900.631379][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 900.637633][ T7863] ? kasan_check_read+0x11/0x20 [ 900.642495][ T7863] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 900.648046][ T7863] mem_cgroup_try_charge+0x24d/0x5e0 [ 900.653344][ T7863] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 900.658987][ T7863] wp_page_copy+0x408/0x1740 [ 900.663579][ T7863] ? find_held_lock+0x35/0x130 [ 900.668363][ T7863] ? pmd_pfn+0x1d0/0x1d0 [ 900.672634][ T7863] ? lock_downgrade+0x880/0x880 [ 900.677487][ T7863] ? swp_swapcount+0x540/0x540 [ 900.682261][ T7863] ? kasan_check_read+0x11/0x20 [ 900.687123][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 900.692245][ T7863] do_wp_page+0x48e/0x1500 [ 900.696674][ T7863] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 900.702064][ T7863] __handle_mm_fault+0x22e8/0x3ec0 [ 900.707185][ T7863] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 900.712735][ T7863] ? find_held_lock+0x35/0x130 [ 900.717504][ T7863] ? handle_mm_fault+0x322/0xb30 [ 900.722456][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 900.728704][ T7863] ? kasan_check_read+0x11/0x20 [ 900.733566][ T7863] handle_mm_fault+0x43f/0xb30 [ 900.738349][ T7863] __do_page_fault+0x5ef/0xda0 [ 900.743134][ T7863] do_page_fault+0x71/0x581 [ 900.747663][ T7863] ? page_fault+0x8/0x30 [ 900.751912][ T7863] page_fault+0x1e/0x30 [ 900.756071][ T7863] RIP: 0033:0x40672e [ 900.759989][ T7863] Code: 08 ff ff ff 8b 54 24 04 49 8b 37 31 c0 bf 42 df 4b 00 e8 f5 b1 ff ff 8b 44 24 6c 49 8d 4f 60 ba 40 00 00 00 44 89 f6 44 89 e7 <41> 89 87 b4 00 00 00 48 8d 84 24 80 00 00 00 49 89 87 b8 00 00 00 [ 900.779627][ T7863] RSP: 002b:0000000000a4f5f0 EFLAGS: 00010206 [ 900.785706][ T7863] RAX: 0000000000000004 RBX: 0000000000a4f610 RCX: 0000000000710d20 [ 900.793771][ T7863] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 900.801777][ T7863] RBP: 0000000000712e80 R08: 0000000000006000 R09: 0000000000004000 [ 900.809755][ T7863] R10: 0000000000a4f710 R11: 0000000000000216 R12: 0000000000000003 [ 900.817730][ T7863] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000710cc0 [ 900.835415][ T7863] memory: usage 23096kB, limit 0kB, failcnt 145 [ 900.841742][ T7863] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 900.874972][ T7863] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 900.881937][ T7863] Memory cgroup stats for /syz1: cache:20KB rss:19504KB rss_huge:16384KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:19480KB inactive_file:0KB active_file:0KB unevictable:0KB [ 900.929072][ T7863] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15905,uid=0 [ 900.949947][ T7863] Memory cgroup out of memory: Killed process 15905 (syz-executor.1) total-vm:72580kB, anon-rss:2208kB, file-rss:35788kB, shmem-rss:0kB [ 900.993349][ T7863] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 901.008203][ T7863] CPU: 0 PID: 7863 Comm: syz-executor.1 Not tainted 5.1.0-rc7+ #97 [ 901.016125][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 901.026188][ T7863] Call Trace: [ 901.029487][ T7863] dump_stack+0x172/0x1f0 [ 901.033828][ T7863] dump_header+0x10f/0xb6c [ 901.038279][ T7863] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 901.044091][ T7863] ? ___ratelimit+0x60/0x595 [ 901.048691][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 901.053815][ T7863] oom_kill_process.cold+0x10/0x15 [ 901.058939][ T7863] out_of_memory+0x79a/0x1280 [ 901.063638][ T7863] ? lock_downgrade+0x880/0x880 [ 901.068520][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 901.074861][ T7863] ? oom_killer_disable+0x280/0x280 [ 901.080066][ T7863] ? find_held_lock+0x35/0x130 [ 901.084845][ T7863] mem_cgroup_out_of_memory+0x1ca/0x230 [ 901.090398][ T7863] ? memcg_event_wake+0x230/0x230 [ 901.095443][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 901.100567][ T7863] ? _raw_spin_unlock+0x2d/0x50 [ 901.105453][ T7863] try_charge+0x102c/0x15c0 [ 901.109965][ T7863] ? find_held_lock+0x35/0x130 [ 901.114746][ T7863] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 901.120305][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 901.126553][ T7863] ? kasan_check_read+0x11/0x20 [ 901.131423][ T7863] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 901.136976][ T7863] mem_cgroup_try_charge+0x24d/0x5e0 [ 901.142296][ T7863] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 901.147939][ T7863] wp_page_copy+0x408/0x1740 [ 901.152536][ T7863] ? find_held_lock+0x35/0x130 [ 901.157314][ T7863] ? pmd_pfn+0x1d0/0x1d0 [ 901.161564][ T7863] ? lock_downgrade+0x880/0x880 [ 901.166452][ T7863] ? swp_swapcount+0x540/0x540 [ 901.171228][ T7863] ? kasan_check_read+0x11/0x20 [ 901.176127][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 901.181258][ T7863] do_wp_page+0x48e/0x1500 [ 901.185688][ T7863] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 901.191079][ T7863] __handle_mm_fault+0x22e8/0x3ec0 [ 901.196204][ T7863] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 901.201757][ T7863] ? find_held_lock+0x35/0x130 [ 901.206532][ T7863] ? handle_mm_fault+0x322/0xb30 [ 901.211493][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 901.217754][ T7863] ? kasan_check_read+0x11/0x20 [ 901.222635][ T7863] handle_mm_fault+0x43f/0xb30 [ 901.227418][ T7863] __do_page_fault+0x5ef/0xda0 [ 901.232292][ T7863] do_page_fault+0x71/0x581 [ 901.236829][ T7863] ? page_fault+0x8/0x30 [ 901.241087][ T7863] page_fault+0x1e/0x30 [ 901.245246][ T7863] RIP: 0033:0x40672e [ 901.249147][ T7863] Code: 08 ff ff ff 8b 54 24 04 49 8b 37 31 c0 bf 42 df 4b 00 e8 f5 b1 ff ff 8b 44 24 6c 49 8d 4f 60 ba 40 00 00 00 44 89 f6 44 89 e7 <41> 89 87 b4 00 00 00 48 8d 84 24 80 00 00 00 49 89 87 b8 00 00 00 [ 901.269219][ T7863] RSP: 002b:0000000000a4f5f0 EFLAGS: 00010206 [ 901.275297][ T7863] RAX: 0000000000000004 RBX: 0000000000a4f610 RCX: 0000000000710d20 [ 901.283301][ T7863] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 901.291288][ T7863] RBP: 0000000000712e80 R08: 0000000000006000 R09: 0000000000004000 [ 901.299269][ T7863] R10: 0000000000a4f710 R11: 0000000000000216 R12: 0000000000000003 [ 901.307250][ T7863] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000710cc0 [ 901.324135][ T7863] memory: usage 20776kB, limit 0kB, failcnt 151 [ 901.332509][ T7863] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 901.344346][ T7863] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 901.353583][ T7863] Memory cgroup stats for /syz1: cache:20KB rss:17356KB rss_huge:14336KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:17324KB inactive_file:0KB active_file:0KB unevictable:0KB [ 901.381315][ T7863] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15940,uid=0 [ 901.406130][ T7863] Memory cgroup out of memory: Killed process 15940 (syz-executor.1) total-vm:72580kB, anon-rss:2208kB, file-rss:35788kB, shmem-rss:0kB [ 901.427859][ T1043] oom_reaper: reaped process 15940 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 901.447438][ T7863] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 901.457861][ T7863] CPU: 0 PID: 7863 Comm: syz-executor.1 Not tainted 5.1.0-rc7+ #97 [ 901.465758][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 901.475814][ T7863] Call Trace: [ 901.479114][ T7863] dump_stack+0x172/0x1f0 [ 901.483456][ T7863] dump_header+0x10f/0xb6c [ 901.487884][ T7863] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 901.493700][ T7863] ? ___ratelimit+0x60/0x595 [ 901.498303][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 901.503432][ T7863] oom_kill_process.cold+0x10/0x15 [ 901.508557][ T7863] out_of_memory+0x79a/0x1280 [ 901.513258][ T7863] ? lock_downgrade+0x880/0x880 [ 901.518118][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 901.524374][ T7863] ? oom_killer_disable+0x280/0x280 [ 901.529582][ T7863] ? find_held_lock+0x35/0x130 [ 901.534386][ T7863] mem_cgroup_out_of_memory+0x1ca/0x230 [ 901.539946][ T7863] ? memcg_event_wake+0x230/0x230 [ 901.544996][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 901.550123][ T7863] ? _raw_spin_unlock+0x2d/0x50 [ 901.554991][ T7863] try_charge+0x102c/0x15c0 [ 901.559499][ T7863] ? find_held_lock+0x35/0x130 [ 901.564277][ T7863] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 901.569854][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 901.576110][ T7863] ? kasan_check_read+0x11/0x20 [ 901.580981][ T7863] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 901.586565][ T7863] mem_cgroup_try_charge+0x24d/0x5e0 [ 901.591879][ T7863] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 901.597531][ T7863] wp_page_copy+0x408/0x1740 [ 901.602126][ T7863] ? find_held_lock+0x35/0x130 [ 901.606907][ T7863] ? pmd_pfn+0x1d0/0x1d0 [ 901.611269][ T7863] ? lock_downgrade+0x880/0x880 [ 901.616127][ T7863] ? swp_swapcount+0x540/0x540 [ 901.620902][ T7863] ? kasan_check_read+0x11/0x20 [ 901.625757][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 901.630877][ T7863] do_wp_page+0x48e/0x1500 [ 901.635309][ T7863] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 901.640701][ T7863] __handle_mm_fault+0x22e8/0x3ec0 [ 901.645826][ T7863] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 901.651380][ T7863] ? find_held_lock+0x35/0x130 [ 901.656151][ T7863] ? handle_mm_fault+0x322/0xb30 [ 901.661115][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 901.667368][ T7863] ? kasan_check_read+0x11/0x20 [ 901.672228][ T7863] handle_mm_fault+0x43f/0xb30 [ 901.677004][ T7863] __do_page_fault+0x5ef/0xda0 [ 901.681783][ T7863] do_page_fault+0x71/0x581 [ 901.686290][ T7863] ? page_fault+0x8/0x30 [ 901.690540][ T7863] page_fault+0x1e/0x30 [ 901.694698][ T7863] RIP: 0033:0x40672e [ 901.698607][ T7863] Code: 08 ff ff ff 8b 54 24 04 49 8b 37 31 c0 bf 42 df 4b 00 e8 f5 b1 ff ff 8b 44 24 6c 49 8d 4f 60 ba 40 00 00 00 44 89 f6 44 89 e7 <41> 89 87 b4 00 00 00 48 8d 84 24 80 00 00 00 49 89 87 b8 00 00 00 [ 901.718231][ T7863] RSP: 002b:0000000000a4f5f0 EFLAGS: 00010206 [ 901.724386][ T7863] RAX: 0000000000000004 RBX: 0000000000a4f610 RCX: 0000000000710d20 [ 901.732359][ T7863] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 901.740337][ T7863] RBP: 0000000000712e80 R08: 0000000000006000 R09: 0000000000004000 [ 901.748317][ T7863] R10: 0000000000a4f710 R11: 0000000000000216 R12: 0000000000000003 [ 901.756291][ T7863] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000710cc0 [ 901.772721][ T7863] memory: usage 18456kB, limit 0kB, failcnt 157 [ 901.782042][ T7863] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 901.794885][ T7863] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 901.805034][ T7863] Memory cgroup stats for /syz1: cache:20KB rss:15200KB rss_huge:12288KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:15168KB inactive_file:0KB active_file:0KB unevictable:0KB [ 901.832448][ T7863] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15975,uid=0 [ 901.854077][ T7863] Memory cgroup out of memory: Killed process 15975 (syz-executor.1) total-vm:72580kB, anon-rss:2208kB, file-rss:35788kB, shmem-rss:0kB [ 901.876342][ T7863] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 901.886544][ T7863] CPU: 0 PID: 7863 Comm: syz-executor.1 Not tainted 5.1.0-rc7+ #97 [ 901.894534][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 901.904599][ T7863] Call Trace: [ 901.907906][ T7863] dump_stack+0x172/0x1f0 [ 901.912249][ T7863] dump_header+0x10f/0xb6c [ 901.916673][ T7863] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 901.922489][ T7863] ? ___ratelimit+0x60/0x595 [ 901.927086][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 901.932208][ T7863] oom_kill_process.cold+0x10/0x15 [ 901.937333][ T7863] out_of_memory+0x79a/0x1280 [ 901.942039][ T7863] ? lock_downgrade+0x880/0x880 [ 901.946894][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 901.953143][ T7863] ? oom_killer_disable+0x280/0x280 [ 901.958346][ T7863] ? find_held_lock+0x35/0x130 [ 901.963124][ T7863] mem_cgroup_out_of_memory+0x1ca/0x230 [ 901.968675][ T7863] ? memcg_event_wake+0x230/0x230 [ 901.973712][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 901.978857][ T7863] ? _raw_spin_unlock+0x2d/0x50 [ 901.983718][ T7863] try_charge+0x102c/0x15c0 [ 901.988223][ T7863] ? find_held_lock+0x35/0x130 [ 901.993001][ T7863] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 901.998553][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 902.004809][ T7863] ? kasan_check_read+0x11/0x20 [ 902.009674][ T7863] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 902.015231][ T7863] mem_cgroup_try_charge+0x24d/0x5e0 [ 902.020533][ T7863] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 902.026199][ T7863] wp_page_copy+0x408/0x1740 [ 902.030794][ T7863] ? find_held_lock+0x35/0x130 [ 902.035571][ T7863] ? pmd_pfn+0x1d0/0x1d0 [ 902.039858][ T7863] ? lock_downgrade+0x880/0x880 [ 902.044714][ T7863] ? swp_swapcount+0x540/0x540 [ 902.049510][ T7863] ? kasan_check_read+0x11/0x20 [ 902.054364][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 902.059486][ T7863] do_wp_page+0x48e/0x1500 [ 902.063917][ T7863] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 902.069311][ T7863] __handle_mm_fault+0x22e8/0x3ec0 [ 902.074435][ T7863] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 902.079988][ T7863] ? find_held_lock+0x35/0x130 [ 902.084764][ T7863] ? handle_mm_fault+0x322/0xb30 [ 902.089716][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 902.095972][ T7863] ? kasan_check_read+0x11/0x20 [ 902.100835][ T7863] handle_mm_fault+0x43f/0xb30 [ 902.105786][ T7863] __do_page_fault+0x5ef/0xda0 [ 902.110564][ T7863] do_page_fault+0x71/0x581 [ 902.115082][ T7863] ? page_fault+0x8/0x30 [ 902.119343][ T7863] page_fault+0x1e/0x30 [ 902.123502][ T7863] RIP: 0033:0x40672e [ 902.127400][ T7863] Code: 08 ff ff ff 8b 54 24 04 49 8b 37 31 c0 bf 42 df 4b 00 e8 f5 b1 ff ff 8b 44 24 6c 49 8d 4f 60 ba 40 00 00 00 44 89 f6 44 89 e7 <41> 89 87 b4 00 00 00 48 8d 84 24 80 00 00 00 49 89 87 b8 00 00 00 [ 902.147011][ T7863] RSP: 002b:0000000000a4f5f0 EFLAGS: 00010206 [ 902.153081][ T7863] RAX: 0000000000000004 RBX: 0000000000a4f610 RCX: 0000000000710d20 [ 902.161057][ T7863] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 902.169049][ T7863] RBP: 0000000000712e80 R08: 0000000000006000 R09: 0000000000004000 [ 902.177109][ T7863] R10: 0000000000a4f710 R11: 0000000000000216 R12: 0000000000000003 [ 902.185081][ T7863] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000710cc0 [ 902.200126][ T7863] memory: usage 16112kB, limit 0kB, failcnt 163 [ 902.206388][ T7863] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 902.213972][ T7863] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 902.220948][ T7863] Memory cgroup stats for /syz1: cache:20KB rss:13020KB rss_huge:10240KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:12988KB inactive_file:0KB active_file:0KB unevictable:0KB [ 902.242339][ T7863] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=24700,uid=0 [ 902.257891][ T7863] Memory cgroup out of memory: Killed process 24700 (syz-executor.1) total-vm:72448kB, anon-rss:2200kB, file-rss:35796kB, shmem-rss:0kB [ 902.290805][ T7863] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 902.300864][ T7863] CPU: 0 PID: 7863 Comm: syz-executor.1 Not tainted 5.1.0-rc7+ #97 [ 902.308771][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 902.318829][ T7863] Call Trace: [ 902.322126][ T7863] dump_stack+0x172/0x1f0 [ 902.326467][ T7863] dump_header+0x10f/0xb6c [ 902.330896][ T7863] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 902.336715][ T7863] ? ___ratelimit+0x60/0x595 [ 902.341314][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 902.346436][ T7863] oom_kill_process.cold+0x10/0x15 [ 902.351556][ T7863] out_of_memory+0x79a/0x1280 [ 902.356279][ T7863] ? lock_downgrade+0x880/0x880 [ 902.361134][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 902.367386][ T7863] ? oom_killer_disable+0x280/0x280 [ 902.373325][ T7863] ? find_held_lock+0x35/0x130 [ 902.378109][ T7863] mem_cgroup_out_of_memory+0x1ca/0x230 [ 902.383664][ T7863] ? memcg_event_wake+0x230/0x230 [ 902.388703][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 902.393826][ T7863] ? _raw_spin_unlock+0x2d/0x50 [ 902.398692][ T7863] try_charge+0x102c/0x15c0 [ 902.403195][ T7863] ? find_held_lock+0x35/0x130 [ 902.407970][ T7863] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 902.413527][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 902.419781][ T7863] ? kasan_check_read+0x11/0x20 [ 902.424645][ T7863] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 902.430200][ T7863] mem_cgroup_try_charge+0x24d/0x5e0 [ 902.435495][ T7863] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 902.441136][ T7863] wp_page_copy+0x408/0x1740 [ 902.445730][ T7863] ? find_held_lock+0x35/0x130 [ 902.450507][ T7863] ? pmd_pfn+0x1d0/0x1d0 [ 902.454754][ T7863] ? lock_downgrade+0x880/0x880 [ 902.459627][ T7863] ? swp_swapcount+0x540/0x540 [ 902.464398][ T7863] ? kasan_check_read+0x11/0x20 [ 902.469257][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 902.474379][ T7863] do_wp_page+0x48e/0x1500 [ 902.478807][ T7863] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 902.484197][ T7863] __handle_mm_fault+0x22e8/0x3ec0 [ 902.489320][ T7863] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 902.494874][ T7863] ? find_held_lock+0x35/0x130 [ 902.499650][ T7863] ? handle_mm_fault+0x322/0xb30 [ 902.504611][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 902.510865][ T7863] ? kasan_check_read+0x11/0x20 [ 902.515728][ T7863] handle_mm_fault+0x43f/0xb30 [ 902.520501][ T7863] __do_page_fault+0x5ef/0xda0 [ 902.525293][ T7863] do_page_fault+0x71/0x581 [ 902.529802][ T7863] ? page_fault+0x8/0x30 [ 902.534076][ T7863] page_fault+0x1e/0x30 [ 902.538228][ T7863] RIP: 0033:0x40672e [ 902.542126][ T7863] Code: 08 ff ff ff 8b 54 24 04 49 8b 37 31 c0 bf 42 df 4b 00 e8 f5 b1 ff ff 8b 44 24 6c 49 8d 4f 60 ba 40 00 00 00 44 89 f6 44 89 e7 <41> 89 87 b4 00 00 00 48 8d 84 24 80 00 00 00 49 89 87 b8 00 00 00 [ 902.561735][ T7863] RSP: 002b:0000000000a4f5f0 EFLAGS: 00010206 [ 902.567801][ T7863] RAX: 0000000000000004 RBX: 0000000000a4f610 RCX: 0000000000710d20 [ 902.575775][ T7863] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 902.583766][ T7863] RBP: 0000000000712e80 R08: 0000000000006000 R09: 0000000000004000 [ 902.591738][ T7863] R10: 0000000000a4f710 R11: 0000000000000216 R12: 0000000000000003 [ 902.599716][ T7863] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000710cc0 [ 902.609217][ T7863] memory: usage 13804kB, limit 0kB, failcnt 169 [ 902.615473][ T7863] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 902.623138][ T7863] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 902.630358][ T7863] Memory cgroup stats for /syz1: cache:20KB rss:10868KB rss_huge:8192KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:10844KB inactive_file:0KB active_file:0KB unevictable:0KB [ 902.651934][ T7863] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=1465,uid=0 [ 902.667639][ T7863] Memory cgroup out of memory: Killed process 1465 (syz-executor.1) total-vm:72712kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB [ 902.700603][ T7863] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 902.710754][ T7863] CPU: 0 PID: 7863 Comm: syz-executor.1 Not tainted 5.1.0-rc7+ #97 [ 902.718683][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 902.728735][ T7863] Call Trace: [ 902.732036][ T7863] dump_stack+0x172/0x1f0 [ 902.736398][ T7863] dump_header+0x10f/0xb6c [ 902.740822][ T7863] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 902.746644][ T7863] ? ___ratelimit+0x60/0x595 [ 902.751242][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 902.756363][ T7863] oom_kill_process.cold+0x10/0x15 [ 902.761479][ T7863] out_of_memory+0x79a/0x1280 [ 902.766164][ T7863] ? lock_downgrade+0x880/0x880 [ 902.771019][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 902.777271][ T7863] ? oom_killer_disable+0x280/0x280 [ 902.782472][ T7863] ? find_held_lock+0x35/0x130 [ 902.787250][ T7863] mem_cgroup_out_of_memory+0x1ca/0x230 [ 902.792802][ T7863] ? memcg_event_wake+0x230/0x230 [ 902.797839][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 902.802986][ T7863] ? _raw_spin_unlock+0x2d/0x50 [ 902.807846][ T7863] try_charge+0x102c/0x15c0 [ 902.812358][ T7863] ? find_held_lock+0x35/0x130 [ 902.817133][ T7863] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 902.822692][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 902.828942][ T7863] ? kasan_check_read+0x11/0x20 [ 902.833808][ T7863] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 902.839395][ T7863] mem_cgroup_try_charge+0x24d/0x5e0 [ 902.844692][ T7863] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 902.850335][ T7863] wp_page_copy+0x408/0x1740 [ 902.854930][ T7863] ? find_held_lock+0x35/0x130 [ 902.859707][ T7863] ? pmd_pfn+0x1d0/0x1d0 [ 902.863951][ T7863] ? lock_downgrade+0x880/0x880 [ 902.868803][ T7863] ? swp_swapcount+0x540/0x540 [ 902.873577][ T7863] ? kasan_check_read+0x11/0x20 [ 902.878447][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 902.883572][ T7863] do_wp_page+0x48e/0x1500 [ 902.888006][ T7863] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 902.893397][ T7863] __handle_mm_fault+0x22e8/0x3ec0 [ 902.898523][ T7863] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 902.904071][ T7863] ? find_held_lock+0x35/0x130 [ 902.908841][ T7863] ? handle_mm_fault+0x322/0xb30 [ 902.913790][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 902.920130][ T7863] ? kasan_check_read+0x11/0x20 [ 902.924989][ T7863] handle_mm_fault+0x43f/0xb30 [ 902.929847][ T7863] __do_page_fault+0x5ef/0xda0 [ 902.934638][ T7863] do_page_fault+0x71/0x581 [ 902.939152][ T7863] ? page_fault+0x8/0x30 [ 902.943399][ T7863] page_fault+0x1e/0x30 [ 902.947552][ T7863] RIP: 0033:0x40672e [ 902.951458][ T7863] Code: 08 ff ff ff 8b 54 24 04 49 8b 37 31 c0 bf 42 df 4b 00 e8 f5 b1 ff ff 8b 44 24 6c 49 8d 4f 60 ba 40 00 00 00 44 89 f6 44 89 e7 <41> 89 87 b4 00 00 00 48 8d 84 24 80 00 00 00 49 89 87 b8 00 00 00 [ 902.971068][ T7863] RSP: 002b:0000000000a4f5f0 EFLAGS: 00010206 [ 902.977140][ T7863] RAX: 0000000000000004 RBX: 0000000000a4f610 RCX: 0000000000710d20 [ 902.985116][ T7863] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 902.993114][ T7863] RBP: 0000000000712e80 R08: 0000000000006000 R09: 0000000000004000 [ 903.001089][ T7863] R10: 0000000000a4f710 R11: 0000000000000216 R12: 0000000000000003 [ 903.009060][ T7863] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000710cc0 [ 903.019359][ T7863] memory: usage 11500kB, limit 0kB, failcnt 175 [ 903.025631][ T7863] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 903.033487][ T7863] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 903.041354][ T7863] Memory cgroup stats for /syz1: cache:20KB rss:8736KB rss_huge:8192KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:8696KB inactive_file:0KB active_file:0KB unevictable:0KB [ 903.067223][ T7863] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=1462,uid=0 [ 903.083205][ T7863] Memory cgroup out of memory: Killed process 1462 (syz-executor.1) total-vm:72580kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 903.114301][ T7863] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 903.124430][ T7863] CPU: 0 PID: 7863 Comm: syz-executor.1 Not tainted 5.1.0-rc7+ #97 [ 903.132347][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 903.142512][ T7863] Call Trace: [ 903.145811][ T7863] dump_stack+0x172/0x1f0 [ 903.150178][ T7863] dump_header+0x10f/0xb6c [ 903.154615][ T7863] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 903.160455][ T7863] ? ___ratelimit+0x60/0x595 [ 903.165053][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 903.170193][ T7863] oom_kill_process.cold+0x10/0x15 [ 903.175319][ T7863] out_of_memory+0x79a/0x1280 [ 903.180006][ T7863] ? lock_downgrade+0x880/0x880 [ 903.184978][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 903.191225][ T7863] ? oom_killer_disable+0x280/0x280 [ 903.196431][ T7863] ? find_held_lock+0x35/0x130 [ 903.201211][ T7863] mem_cgroup_out_of_memory+0x1ca/0x230 [ 903.206758][ T7863] ? memcg_event_wake+0x230/0x230 [ 903.211809][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 903.216932][ T7863] ? _raw_spin_unlock+0x2d/0x50 [ 903.221798][ T7863] try_charge+0x102c/0x15c0 [ 903.232730][ T7863] ? find_held_lock+0x35/0x130 [ 903.237504][ T7863] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 903.243076][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 903.249325][ T7863] ? kasan_check_read+0x11/0x20 [ 903.254192][ T7863] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 903.259746][ T7863] mem_cgroup_try_charge+0x24d/0x5e0 [ 903.265066][ T7863] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 903.270712][ T7863] wp_page_copy+0x408/0x1740 [ 903.275398][ T7863] ? find_held_lock+0x35/0x130 [ 903.280175][ T7863] ? pmd_pfn+0x1d0/0x1d0 [ 903.284423][ T7863] ? lock_downgrade+0x880/0x880 [ 903.289280][ T7863] ? swp_swapcount+0x540/0x540 [ 903.294049][ T7863] ? kasan_check_read+0x11/0x20 [ 903.298910][ T7863] ? do_raw_spin_unlock+0x57/0x270 [ 903.304032][ T7863] do_wp_page+0x48e/0x1500 [ 903.308467][ T7863] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 903.313853][ T7863] __handle_mm_fault+0x22e8/0x3ec0 [ 903.318976][ T7863] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 903.324526][ T7863] ? find_held_lock+0x35/0x130 [ 903.329303][ T7863] ? handle_mm_fault+0x322/0xb30 [ 903.334253][ T7863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 903.340503][ T7863] ? kasan_check_read+0x11/0x20 [ 903.345365][ T7863] handle_mm_fault+0x43f/0xb30 [ 903.350136][ T7863] __do_page_fault+0x5ef/0xda0 [ 903.354940][ T7863] do_page_fault+0x71/0x581 [ 903.359448][ T7863] ? page_fault+0x8/0x30 [ 903.363692][ T7863] page_fault+0x1e/0x30 [ 903.367851][ T7863] RIP: 0033:0x40672e [ 903.371778][ T7863] Code: 08 ff ff ff 8b 54 24 04 49 8b 37 31 c0 bf 42 df 4b 00 e8 f5 b1 ff ff 8b 44 24 6c 49 8d 4f 60 ba 40 00 00 00 44 89 f6 44 89 e7 <41> 89 87 b4 00 00 00 48 8d 84 24 80 00 00 00 49 89 87 b8 00 00 00 [ 903.391392][ T7863] RSP: 002b:0000000000a4f5f0 EFLAGS: 00010206 [ 903.397462][ T7863] RAX: 0000000000000004 RBX: 0000000000a4f610 RCX: 0000000000710d20 [ 903.405437][ T7863] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 903.413415][ T7863] RBP: 0000000000712e80 R08: 0000000000006000 R09: 0000000000004000 [ 903.421393][ T7863] R10: 0000000000a4f710 R11: 0000000000000216 R12: 0000000000000003 [ 903.429368][ T7863] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000710cc0 [ 903.441760][ T7863] memory: usage 9100kB, limit 0kB, failcnt 181 [ 903.447936][ T7863] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 903.455938][ T7863] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 903.463164][ T7863] Memory cgroup stats for /syz1: cache:20KB rss:6564KB rss_huge:6144KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:6532KB inactive_file:0KB active_file:0KB unevictable:0KB [ 903.492467][ T7863] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=2307,uid=0 [ 903.508292][ T7863] Memory cgroup out of memory: Killed process 2307 (syz-executor.1) total-vm:72580kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 903.540089][ T7863] Memory cgroup out of memory: Killed process 1618 (syz-executor.1) total-vm:72448kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 903.581643][ T7863] Memory cgroup out of memory: Killed process 2007 (syz-executor.1) total-vm:72448kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 903.610270][ T1043] oom_reaper: reaped process 2007 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 903.623787][ T7863] Memory cgroup out of memory: Killed process 7863 (syz-executor.1) total-vm:72316kB, anon-rss:108kB, file-rss:35712kB, shmem-rss:0kB [ 903.649783][ T1043] oom_reaper: reaped process 7863 (syz-executor.1), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 19:34:50 executing program 1: socket$kcm(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffd95) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="9e4301000080000000021fe4ac14140ceb", 0x11}], 0x1}, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c00000024000000060000006f3096d2a59598e5735de07300de"], 0x0, 0x26, 0x0, 0x1}, 0x20) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 19:34:50 executing program 3: socket$kcm(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffd95) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="9e4301000080000000021fe4ac14140ceb", 0x11}], 0x1}, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c00000024000000060000006f3096d2a59598e5735de07300de"], 0x0, 0x26, 0x0, 0x1}, 0x20) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 19:34:50 executing program 4: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 19:34:50 executing program 2: socket$kcm(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffd95) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="9e4301000080000000021fe4ac14140ceb", 0x11}], 0x1}, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c00000024000000060000006f3096d2a59598e5735de07300de"], 0x0, 0x26, 0x0, 0x1}, 0x20) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 19:34:50 executing program 5: socket$kcm(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffd95) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="9e4301000080000000021fe4ac14140ceb", 0x11}], 0x1}, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c00000024000000060000006f3096d2a59598e5735de07300de"], 0x0, 0x26, 0x0, 0x1}, 0x20) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 19:34:50 executing program 0: socket$kcm(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffd95) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="9e4301000080000000021fe4ac14140ceb", 0x11}], 0x1}, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c00000024000000060000006f3096d2a59598e5735de07300de"], 0x0, 0x26, 0x0, 0x1}, 0x20) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) [ 904.145017][ T7876] oom_kill_process: 3 callbacks suppressed [ 904.145065][ T7876] syz-executor.5 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 904.249522][ T7876] CPU: 1 PID: 7876 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 904.257455][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 904.268288][ T7876] Call Trace: [ 904.271638][ T7876] dump_stack+0x172/0x1f0 [ 904.275994][ T7876] dump_header+0x10f/0xb6c [ 904.280426][ T7876] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 904.286248][ T7876] ? ___ratelimit+0x60/0x595 [ 904.290856][ T7876] oom_kill_process.cold+0x10/0x15 19:34:50 executing program 1: socket$kcm(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffd95) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="9e4301000080000000021fe4ac14140ceb", 0x11}], 0x1}, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c00000024000000060000006f3096d2a59598e5735de07300de"], 0x0, 0x26, 0x0, 0x1}, 0x20) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) [ 904.295984][ T7876] out_of_memory+0x79a/0x1280 [ 904.300673][ T7876] ? lock_downgrade+0x880/0x880 [ 904.305532][ T7876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 904.311789][ T7876] ? oom_killer_disable+0x280/0x280 [ 904.317003][ T7876] ? find_held_lock+0x35/0x130 [ 904.321789][ T7876] mem_cgroup_out_of_memory+0x1ca/0x230 [ 904.321804][ T7876] ? memcg_event_wake+0x230/0x230 [ 904.321827][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 904.321842][ T7876] ? _raw_spin_unlock+0x2d/0x50 [ 904.321859][ T7876] try_charge+0x102c/0x15c0 [ 904.321881][ T7876] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 904.321953][ T7876] ? rcu_read_lock_sched_held+0x110/0x130 [ 904.322002][ T7876] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 904.363841][ T7876] __memcg_kmem_charge_memcg+0x7c/0x130 [ 904.369403][ T7876] ? memcg_kmem_put_cache+0xb0/0xb0 [ 904.375605][ T7876] ? cache_grow_begin+0x594/0x860 [ 904.380649][ T7876] ? lockdep_hardirqs_on+0x418/0x5d0 [ 904.385984][ T7876] ? trace_hardirqs_on+0x67/0x230 [ 904.391026][ T7876] cache_grow_begin+0x5c0/0x860 [ 904.391045][ T7876] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 904.391060][ T7876] ? __cpuset_node_allowed+0x136/0x540 [ 904.391079][ T7876] fallback_alloc+0x1fd/0x2d0 [ 904.391103][ T7876] ____cache_alloc_node+0x1be/0x1e0 [ 904.391116][ T7876] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 904.391144][ T7876] kmem_cache_alloc_node+0xe3/0x710 [ 904.428955][ T7876] ? lockdep_hardirqs_on+0x418/0x5d0 [ 904.434269][ T7876] ? trace_hardirqs_on+0x67/0x230 [ 904.439389][ T7876] copy_process.part.0+0x1d08/0x7980 [ 904.444696][ T7876] ? __lock_acquire+0x548/0x3fb0 [ 904.444713][ T7876] ? wp_page_reuse+0x159/0x1d0 [ 904.444740][ T7876] ? __might_fault+0x12b/0x1e0 [ 904.444765][ T7876] ? __cleanup_sighand+0x60/0x60 [ 904.444783][ T7876] ? lock_downgrade+0x880/0x880 [ 904.444810][ T7876] _do_fork+0x257/0xfd0 [ 904.473181][ T7876] ? fork_idle+0x1d0/0x1d0 [ 904.477634][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 904.483110][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 904.488607][ T7876] ? do_syscall_64+0x26/0x610 [ 904.493291][ T7876] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 904.493306][ T7876] ? do_syscall_64+0x26/0x610 [ 904.493327][ T7876] __x64_sys_clone+0xbf/0x150 [ 904.493347][ T7876] do_syscall_64+0x103/0x610 [ 904.493366][ T7876] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 904.493378][ T7876] RIP: 0033:0x45737a [ 904.493392][ T7876] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 904.493400][ T7876] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 904.493424][ T7876] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 904.493432][ T7876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 904.493439][ T7876] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 000000000275d940 [ 904.493446][ T7876] R10: 000000000275dc10 R11: 0000000000000246 R12: 0000000000000001 [ 904.493454][ T7876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 904.520117][ T7876] memory: usage 84944kB, limit 0kB, failcnt 27 [ 904.520136][ T7876] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 904.520146][ T7876] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 904.520152][ T7876] Memory cgroup stats for /syz5: cache:16KB rss:76672KB rss_huge:73728KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:76576KB inactive_file:0KB active_file:0KB unevictable:0KB [ 904.520401][ T7876] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=8064,uid=0 [ 904.522389][ T7876] Memory cgroup out of memory: Killed process 8064 (syz-executor.5) total-vm:72448kB, anon-rss:4240kB, file-rss:35828kB, shmem-rss:0kB [ 904.523884][ T7860] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 904.523901][ T7860] CPU: 1 PID: 7860 Comm: syz-executor.0 Not tainted 5.1.0-rc7+ #97 [ 904.523909][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 904.523915][ T7860] Call Trace: [ 904.523936][ T7860] dump_stack+0x172/0x1f0 [ 904.523957][ T7860] dump_header+0x10f/0xb6c [ 904.523976][ T7860] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 904.523992][ T7860] ? ___ratelimit+0x60/0x595 [ 904.524008][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 904.524032][ T7860] oom_kill_process.cold+0x10/0x15 [ 904.524050][ T7860] out_of_memory+0x79a/0x1280 [ 904.524072][ T7860] ? oom_killer_disable+0x280/0x280 [ 904.524085][ T7860] ? find_held_lock+0x35/0x130 [ 904.524110][ T7860] mem_cgroup_out_of_memory+0x1ca/0x230 [ 904.524132][ T7860] ? memcg_event_wake+0x230/0x230 [ 904.524154][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 904.524169][ T7860] ? _raw_spin_unlock+0x2d/0x50 [ 904.524187][ T7860] try_charge+0x102c/0x15c0 [ 904.524200][ T7860] ? find_held_lock+0x35/0x130 [ 904.524223][ T7860] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 904.524238][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 904.524253][ T7860] ? find_held_lock+0x35/0x130 [ 904.524270][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 904.524297][ T7860] __memcg_kmem_charge_memcg+0x7c/0x130 [ 904.524313][ T7860] ? memcg_kmem_put_cache+0xb0/0xb0 [ 904.524332][ T7860] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 904.524351][ T7860] __memcg_kmem_charge+0x136/0x300 [ 904.524371][ T7860] __alloc_pages_nodemask+0x4bf/0x8d0 [ 904.524386][ T7860] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 904.524405][ T7860] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 904.524423][ T7860] ? copy_process.part.0+0x1d08/0x7980 [ 904.524454][ T7860] copy_process.part.0+0x3e0/0x7980 [ 904.524471][ T7860] ? __lock_acquire+0x548/0x3fb0 [ 904.524487][ T7860] ? wp_page_reuse+0x159/0x1d0 [ 904.524513][ T7860] ? __might_fault+0x12b/0x1e0 [ 904.524537][ T7860] ? __cleanup_sighand+0x60/0x60 [ 904.524555][ T7860] ? lock_downgrade+0x880/0x880 [ 904.524585][ T7860] _do_fork+0x257/0xfd0 [ 904.524617][ T7860] ? fork_idle+0x1d0/0x1d0 [ 904.524642][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 904.524658][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 904.524673][ T7860] ? do_syscall_64+0x26/0x610 [ 904.524687][ T7860] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 904.524701][ T7860] ? do_syscall_64+0x26/0x610 [ 904.524721][ T7860] __x64_sys_clone+0xbf/0x150 [ 904.524740][ T7860] do_syscall_64+0x103/0x610 [ 904.524759][ T7860] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 904.524770][ T7860] RIP: 0033:0x45737a [ 904.524786][ T7860] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 904.524794][ T7860] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 904.524809][ T7860] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 904.524818][ T7860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 904.524827][ T7860] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 00000000022b4940 [ 904.524835][ T7860] R10: 00000000022b4c10 R11: 0000000000000246 R12: 0000000000000001 [ 904.524844][ T7860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 904.524869][ T7860] memory: usage 79276kB, limit 0kB, failcnt 23 [ 904.524879][ T7860] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 904.524888][ T7860] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 904.524894][ T7860] Memory cgroup stats for /syz0: cache:44KB rss:72512KB rss_huge:69632KB shmem:80KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:72408KB inactive_file:0KB active_file:0KB unevictable:0KB [ 904.524970][ T7860] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=27696,uid=0 [ 904.525269][ T7860] Memory cgroup out of memory: Killed process 27696 (syz-executor.0) total-vm:72580kB, anon-rss:6304kB, file-rss:35860kB, shmem-rss:0kB [ 904.623132][T26857] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 904.631855][ T1043] oom_reaper: reaped process 27696 (syz-executor.0), now anon-rss:0kB, file-rss:34900kB, shmem-rss:0kB [ 904.695497][T26857] CPU: 0 PID: 26857 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #97 [ 904.730165][T26857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 904.730172][T26857] Call Trace: [ 904.730195][T26857] dump_stack+0x172/0x1f0 [ 904.730216][T26857] dump_header+0x10f/0xb6c [ 904.730233][T26857] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 904.730248][T26857] ? ___ratelimit+0x60/0x595 [ 904.730263][T26857] ? do_raw_spin_unlock+0x57/0x270 [ 904.730282][T26857] oom_kill_process.cold+0x10/0x15 [ 904.730298][T26857] out_of_memory+0x79a/0x1280 [ 904.730318][T26857] ? oom_killer_disable+0x280/0x280 [ 904.730344][T26857] mem_cgroup_out_of_memory+0x1ca/0x230 [ 904.730359][T26857] ? memcg_event_wake+0x230/0x230 [ 904.730380][T26857] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 904.730397][T26857] ? cgroup_file_notify+0x140/0x1b0 [ 904.730429][T26857] memory_max_write+0x169/0x300 [ 904.745230][T26857] ? kernfs_fop_write+0x204/0x480 [ 904.745251][T26857] ? mem_cgroup_write+0x360/0x360 [ 904.745268][T26857] ? lock_acquire+0x16f/0x3f0 [ 904.745281][T26857] ? kernfs_fop_write+0x227/0x480 [ 904.745310][T26857] cgroup_file_write+0x245/0x7a0 [ 904.795192][T26857] ? mem_cgroup_write+0x360/0x360 [ 904.795212][T26857] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 904.795235][T26857] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 904.795261][T26857] kernfs_fop_write+0x2ba/0x480 [ 904.795279][T26857] __vfs_write+0x8d/0x110 [ 904.795289][T26857] ? kernfs_fop_open+0xd90/0xd90 [ 904.795306][T26857] vfs_write+0x20c/0x580 [ 904.827721][T26857] ksys_write+0x14f/0x2d0 [ 904.827743][T26857] ? __ia32_sys_read+0xb0/0xb0 [ 904.827770][T26857] __x64_sys_write+0x73/0xb0 [ 904.827799][T26857] do_syscall_64+0x103/0x610 [ 904.855757][T26857] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 904.855770][T26857] RIP: 0033:0x458da9 [ 904.855786][T26857] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 904.855794][T26857] RSP: 002b:00007f3586263c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 904.855822][T26857] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9 [ 904.929282][T26857] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 904.929292][T26857] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 904.929301][T26857] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f35862646d4 [ 904.929311][T26857] R13: 00000000004c880e R14: 00000000004def78 R15: 00000000ffffffff [ 905.025565][T26857] memory: usage 87688kB, limit 0kB, failcnt 8 [ 905.308993][T26857] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 905.359894][T26857] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 905.374239][T26857] Memory cgroup stats for /syz3: cache:0KB rss:79028KB rss_huge:75776KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:78940KB inactive_file:0KB active_file:0KB unevictable:0KB [ 905.398140][T26857] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=8010,uid=0 [ 905.414794][T26857] Memory cgroup out of memory: Killed process 8010 (syz-executor.3) total-vm:72580kB, anon-rss:4252kB, file-rss:35832kB, shmem-rss:0kB [ 905.446212][T26853] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 905.476050][T26853] CPU: 0 PID: 26853 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #97 [ 905.484231][T26853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 905.484238][T26853] Call Trace: [ 905.484259][T26853] dump_stack+0x172/0x1f0 [ 905.484281][T26853] dump_header+0x10f/0xb6c [ 905.506371][T26853] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 905.512188][T26853] ? ___ratelimit+0x60/0x595 [ 905.516790][T26853] ? do_raw_spin_unlock+0x57/0x270 [ 905.521911][T26853] oom_kill_process.cold+0x10/0x15 [ 905.521927][T26853] out_of_memory+0x79a/0x1280 [ 905.521947][T26853] ? oom_killer_disable+0x280/0x280 [ 905.521959][T26853] ? find_held_lock+0x35/0x130 [ 905.521982][T26853] mem_cgroup_out_of_memory+0x1ca/0x230 [ 905.521995][T26853] ? memcg_event_wake+0x230/0x230 [ 905.522016][T26853] ? do_raw_spin_unlock+0x57/0x270 [ 905.522032][T26853] ? _raw_spin_unlock+0x2d/0x50 [ 905.522049][T26853] try_charge+0x102c/0x15c0 [ 905.522061][T26853] ? find_held_lock+0x35/0x130 [ 905.522082][T26853] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 905.577024][T26853] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 905.583291][T26853] ? kasan_check_read+0x11/0x20 [ 905.588154][T26853] ? get_mem_cgroup_from_mm+0x128/0x2b0 19:34:52 executing program 4: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 905.593721][T26853] mem_cgroup_try_charge+0x24d/0x5e0 [ 905.599017][T26853] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 905.604665][T26853] __handle_mm_fault+0x1e1f/0x3ec0 [ 905.609790][T26853] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 905.615340][T26853] ? find_held_lock+0x35/0x130 [ 905.620113][T26853] ? handle_mm_fault+0x322/0xb30 [ 905.625070][T26853] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 905.631321][T26853] ? kasan_check_read+0x11/0x20 [ 905.636187][T26853] handle_mm_fault+0x43f/0xb30 [ 905.640963][T26853] __do_page_fault+0x5ef/0xda0 [ 905.645740][T26853] do_page_fault+0x71/0x581 [ 905.650337][T26853] ? page_fault+0x8/0x30 [ 905.654587][T26853] page_fault+0x1e/0x30 [ 905.658766][T26853] RIP: 0033:0x4107bf [ 905.662665][T26853] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 905.682274][T26853] RSP: 002b:0000000000a4fae0 EFLAGS: 00010206 [ 905.688343][T26853] RAX: 00007f3586223000 RBX: 0000000000020000 RCX: 0000000000458dfa [ 905.696318][T26853] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 905.704294][T26853] RBP: 0000000000a4fbc0 R08: ffffffffffffffff R09: 0000000000000000 [ 905.712267][T26853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fcb0 [ 905.720246][T26853] R13: 00007f3586243700 R14: 0000000000000001 R15: 000000000073bfac [ 905.783269][T26853] memory: usage 83296kB, limit 0kB, failcnt 8 [ 905.789671][T26853] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 905.800485][T26853] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 905.807389][T26853] Memory cgroup stats for /syz3: cache:0KB rss:74736KB rss_huge:71680KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:74720KB inactive_file:0KB active_file:0KB unevictable:0KB [ 905.849002][T26863] IPVS: ftp: loaded support on port[0] = 21 [ 905.869112][T26853] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=8040,uid=0 [ 905.889492][T26853] Memory cgroup out of memory: Killed process 8040 (syz-executor.3) total-vm:72448kB, anon-rss:4244kB, file-rss:35828kB, shmem-rss:0kB [ 905.920027][T26854] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 905.921635][ T1043] oom_reaper: reaped process 8040 (syz-executor.3), now anon-rss:0kB, file-rss:34868kB, shmem-rss:0kB [ 905.941243][T26854] CPU: 0 PID: 26854 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 905.941253][T26854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 905.941257][T26854] Call Trace: [ 905.941288][T26854] dump_stack+0x172/0x1f0 [ 905.941308][T26854] dump_header+0x10f/0xb6c [ 905.941324][T26854] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 905.941345][T26854] ? ___ratelimit+0x60/0x595 [ 905.981773][T26854] ? do_raw_spin_unlock+0x57/0x270 [ 905.986912][T26854] oom_kill_process.cold+0x10/0x15 [ 905.992048][T26854] out_of_memory+0x79a/0x1280 [ 905.996747][T26854] ? oom_killer_disable+0x280/0x280 [ 906.001954][T26854] ? find_held_lock+0x35/0x130 [ 906.006739][T26854] mem_cgroup_out_of_memory+0x1ca/0x230 [ 906.012294][T26854] ? memcg_event_wake+0x230/0x230 [ 906.017335][T26854] ? do_raw_spin_unlock+0x57/0x270 [ 906.022456][T26854] ? _raw_spin_unlock+0x2d/0x50 [ 906.027325][T26854] try_charge+0x102c/0x15c0 [ 906.031835][T26854] ? find_held_lock+0x35/0x130 [ 906.036630][T26854] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 906.042193][T26854] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 906.048447][T26854] ? kasan_check_read+0x11/0x20 [ 906.053313][T26854] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 906.058874][T26854] mem_cgroup_try_charge+0x24d/0x5e0 [ 906.064176][T26854] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 906.069818][T26854] __handle_mm_fault+0x1e1f/0x3ec0 [ 906.074943][T26854] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 906.080496][T26854] ? find_held_lock+0x35/0x130 [ 906.085268][T26854] ? handle_mm_fault+0x322/0xb30 [ 906.090220][T26854] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 906.096470][T26854] ? kasan_check_read+0x11/0x20 [ 906.101334][T26854] handle_mm_fault+0x43f/0xb30 [ 906.106109][T26854] __do_page_fault+0x5ef/0xda0 [ 906.110891][T26854] do_page_fault+0x71/0x581 [ 906.115400][T26854] ? page_fault+0x8/0x30 [ 906.119666][T26854] page_fault+0x1e/0x30 [ 906.123828][T26854] RIP: 0033:0x4107bf [ 906.127730][T26854] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 906.147348][T26854] RSP: 002b:0000000000a4fae0 EFLAGS: 00010206 [ 906.153420][T26854] RAX: 00007fa873c96000 RBX: 0000000000020000 RCX: 0000000000458dfa [ 906.161400][T26854] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 906.169378][T26854] RBP: 0000000000a4fbc0 R08: ffffffffffffffff R09: 0000000000000000 [ 906.177357][T26854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fcb0 [ 906.185343][T26854] R13: 00007fa873cb6700 R14: 0000000000000001 R15: 000000000073bfac [ 906.194469][T26854] memory: usage 110848kB, limit 0kB, failcnt 8 [ 906.208519][T26854] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 906.216294][T26854] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 906.223326][T26854] Memory cgroup stats for /syz2: cache:124KB rss:101852KB rss_huge:98304KB shmem:0KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:101836KB inactive_file:0KB active_file:0KB unevictable:0KB [ 906.223409][T26854] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=26823,uid=0 [ 906.223511][T26854] Memory cgroup out of memory: Killed process 26823 (syz-executor.2) total-vm:72580kB, anon-rss:6300kB, file-rss:35876kB, shmem-rss:0kB [ 906.234563][ T7860] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 906.251960][ T1043] oom_reaper: reaped process 26823 (syz-executor.2), now anon-rss:0kB, file-rss:34916kB, shmem-rss:0kB [ 906.271872][ T7860] CPU: 0 PID: 7860 Comm: syz-executor.0 Not tainted 5.1.0-rc7+ #97 [ 906.312170][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 906.322238][ T7860] Call Trace: [ 906.325545][ T7860] dump_stack+0x172/0x1f0 [ 906.329893][ T7860] dump_header+0x10f/0xb6c [ 906.334321][ T7860] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 906.340159][ T7860] ? ___ratelimit+0x60/0x595 [ 906.344757][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 906.349887][ T7860] oom_kill_process.cold+0x10/0x15 [ 906.355005][ T7860] out_of_memory+0x79a/0x1280 [ 906.359703][ T7860] ? oom_killer_disable+0x280/0x280 [ 906.364907][ T7860] ? find_held_lock+0x35/0x130 [ 906.369688][ T7860] mem_cgroup_out_of_memory+0x1ca/0x230 [ 906.376184][ T7860] ? memcg_event_wake+0x230/0x230 [ 906.376208][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 906.376226][ T7860] ? _raw_spin_unlock+0x2d/0x50 [ 906.376244][ T7860] try_charge+0x102c/0x15c0 [ 906.376271][ T7860] ? find_held_lock+0x35/0x130 [ 906.400489][ T7860] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 906.406038][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 906.411630][ T7860] ? find_held_lock+0x35/0x130 [ 906.416406][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 906.421973][ T7860] __memcg_kmem_charge_memcg+0x7c/0x130 [ 906.427520][ T7860] ? memcg_kmem_put_cache+0xb0/0xb0 [ 906.427539][ T7860] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 906.427558][ T7860] __memcg_kmem_charge+0x136/0x300 [ 906.427579][ T7860] __alloc_pages_nodemask+0x4bf/0x8d0 [ 906.427617][ T7860] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 906.455038][ T7860] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 906.460769][ T7860] ? copy_process.part.0+0x1d08/0x7980 [ 906.460797][ T7860] copy_process.part.0+0x3e0/0x7980 [ 906.460814][ T7860] ? __lock_acquire+0x548/0x3fb0 [ 906.460831][ T7860] ? wp_page_reuse+0x159/0x1d0 [ 906.460857][ T7860] ? __might_fault+0x12b/0x1e0 [ 906.460881][ T7860] ? __cleanup_sighand+0x60/0x60 [ 906.460897][ T7860] ? lock_downgrade+0x880/0x880 [ 906.460924][ T7860] _do_fork+0x257/0xfd0 [ 906.460945][ T7860] ? fork_idle+0x1d0/0x1d0 [ 906.460970][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 906.460986][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 906.461001][ T7860] ? do_syscall_64+0x26/0x610 [ 906.461017][ T7860] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 906.461031][ T7860] ? do_syscall_64+0x26/0x610 [ 906.461050][ T7860] __x64_sys_clone+0xbf/0x150 [ 906.461069][ T7860] do_syscall_64+0x103/0x610 [ 906.461087][ T7860] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 906.461099][ T7860] RIP: 0033:0x45737a [ 906.461113][ T7860] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 906.461136][ T7860] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 906.509966][ T7860] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 906.509975][ T7860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 906.509984][ T7860] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 00000000022b4940 [ 906.509993][ T7860] R10: 00000000022b4c10 R11: 0000000000000246 R12: 0000000000000001 [ 906.510001][ T7860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 906.522937][ T7860] memory: usage 72824kB, limit 0kB, failcnt 155 [ 906.531265][ T7860] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 906.540913][ T7860] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 906.571644][ T7860] Memory cgroup stats for /syz0: cache:44KB rss:66236KB rss_huge:63488KB shmem:80KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:66132KB inactive_file:0KB active_file:0KB unevictable:0KB [ 906.612242][ T7860] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=29208,uid=0 [ 906.640995][ T7860] Memory cgroup out of memory: Killed process 29208 (syz-executor.0) total-vm:72976kB, anon-rss:6328kB, file-rss:35820kB, shmem-rss:0kB [ 906.709713][ T7876] syz-executor.5 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 906.721920][ T1043] oom_reaper: reaped process 29208 (syz-executor.0), now anon-rss:0kB, file-rss:34860kB, shmem-rss:0kB [ 906.729079][ T7876] CPU: 0 PID: 7876 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 906.740865][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 906.750923][ T7876] Call Trace: [ 906.754225][ T7876] dump_stack+0x172/0x1f0 [ 906.758572][ T7876] dump_header+0x10f/0xb6c [ 906.763015][ T7876] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 906.768828][ T7876] ? ___ratelimit+0x60/0x595 [ 906.773427][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 906.778545][ T7876] oom_kill_process.cold+0x10/0x15 [ 906.783677][ T7876] out_of_memory+0x79a/0x1280 [ 906.788367][ T7876] ? oom_killer_disable+0x280/0x280 [ 906.793570][ T7876] ? find_held_lock+0x35/0x130 [ 906.798359][ T7876] mem_cgroup_out_of_memory+0x1ca/0x230 [ 906.803934][ T7876] ? memcg_event_wake+0x230/0x230 [ 906.808973][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 906.814100][ T7876] ? _raw_spin_unlock+0x2d/0x50 [ 906.818960][ T7876] try_charge+0x102c/0x15c0 [ 906.823480][ T7876] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 906.829036][ T7876] ? rcu_read_lock_sched_held+0x110/0x130 [ 906.834766][ T7876] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 906.840328][ T7876] __memcg_kmem_charge_memcg+0x7c/0x130 [ 906.845888][ T7876] ? memcg_kmem_put_cache+0xb0/0xb0 [ 906.851092][ T7876] ? cache_grow_begin+0x594/0x860 [ 906.856127][ T7876] ? lockdep_hardirqs_on+0x418/0x5d0 [ 906.861420][ T7876] ? trace_hardirqs_on+0x67/0x230 [ 906.866458][ T7876] cache_grow_begin+0x5c0/0x860 [ 906.871317][ T7876] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 906.877565][ T7876] ? __cpuset_node_allowed+0x136/0x540 [ 906.883042][ T7876] fallback_alloc+0x1fd/0x2d0 [ 906.887739][ T7876] ____cache_alloc_node+0x1be/0x1e0 [ 906.892947][ T7876] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 906.899210][ T7876] kmem_cache_alloc_node+0xe3/0x710 [ 906.904418][ T7876] ? lockdep_hardirqs_on+0x418/0x5d0 [ 906.909734][ T7876] ? trace_hardirqs_on+0x67/0x230 [ 906.914783][ T7876] copy_process.part.0+0x1d08/0x7980 [ 906.920090][ T7876] ? __lock_acquire+0x548/0x3fb0 [ 906.925037][ T7876] ? wp_page_reuse+0x159/0x1d0 [ 906.929829][ T7876] ? __might_fault+0x12b/0x1e0 [ 906.934619][ T7876] ? __cleanup_sighand+0x60/0x60 [ 906.939577][ T7876] ? lock_downgrade+0x880/0x880 [ 906.944471][ T7876] _do_fork+0x257/0xfd0 [ 906.948654][ T7876] ? fork_idle+0x1d0/0x1d0 [ 906.953091][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 906.958681][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 906.964153][ T7876] ? do_syscall_64+0x26/0x610 [ 906.968847][ T7876] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 906.974924][ T7876] ? do_syscall_64+0x26/0x610 [ 906.979631][ T7876] __x64_sys_clone+0xbf/0x150 [ 906.984322][ T7876] do_syscall_64+0x103/0x610 [ 906.988922][ T7876] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 906.994817][ T7876] RIP: 0033:0x45737a [ 906.998721][ T7876] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 907.018334][ T7876] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 907.026929][ T7876] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 907.034911][ T7876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 907.042887][ T7876] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 000000000275d940 [ 907.050865][ T7876] R10: 000000000275dc10 R11: 0000000000000246 R12: 0000000000000001 [ 907.058837][ T7876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 907.113289][ T7876] memory: usage 80568kB, limit 0kB, failcnt 147 [ 907.124535][ T7876] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 19:34:53 executing program 4: socket$kcm(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffd95) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="9e4301000080000000021fe4ac14140ceb", 0x11}], 0x1}, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c00000024000000060000006f3096d2a59598e5735de07300de"], 0x0, 0x26, 0x0, 0x1}, 0x20) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) [ 907.182829][ T7876] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 907.212284][ T7876] Memory cgroup stats for /syz5: cache:16KB rss:72396KB rss_huge:69632KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:72368KB inactive_file:0KB active_file:0KB unevictable:0KB [ 907.297593][ T7876] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=8087,uid=0 [ 907.387280][ T7876] Memory cgroup out of memory: Killed process 8087 (syz-executor.5) total-vm:72448kB, anon-rss:4240kB, file-rss:35828kB, shmem-rss:0kB [ 907.436184][ T1043] oom_reaper: reaped process 8087 (syz-executor.5), now anon-rss:0kB, file-rss:34868kB, shmem-rss:0kB [ 907.449473][ T7860] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 907.494855][ T7860] CPU: 1 PID: 7860 Comm: syz-executor.0 Not tainted 5.1.0-rc7+ #97 [ 907.502780][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 907.512836][ T7860] Call Trace: [ 907.516148][ T7860] dump_stack+0x172/0x1f0 [ 907.520491][ T7860] dump_header+0x10f/0xb6c [ 907.524918][ T7860] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 907.530754][ T7860] ? ___ratelimit+0x60/0x595 [ 907.535377][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 907.540504][ T7860] oom_kill_process.cold+0x10/0x15 [ 907.545637][ T7860] out_of_memory+0x79a/0x1280 [ 907.550332][ T7860] ? oom_killer_disable+0x280/0x280 [ 907.555533][ T7860] ? find_held_lock+0x35/0x130 [ 907.560307][ T7860] mem_cgroup_out_of_memory+0x1ca/0x230 [ 907.565852][ T7860] ? memcg_event_wake+0x230/0x230 [ 907.570882][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 907.575995][ T7860] ? _raw_spin_unlock+0x2d/0x50 [ 907.580935][ T7860] try_charge+0x102c/0x15c0 [ 907.585435][ T7860] ? find_held_lock+0x35/0x130 [ 907.590202][ T7860] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 907.595742][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 907.601287][ T7860] ? find_held_lock+0x35/0x130 [ 907.606050][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 907.611614][ T7860] __memcg_kmem_charge_memcg+0x7c/0x130 [ 907.617172][ T7860] ? memcg_kmem_put_cache+0xb0/0xb0 [ 907.622370][ T7860] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 907.627915][ T7860] __memcg_kmem_charge+0x136/0x300 [ 907.633033][ T7860] __alloc_pages_nodemask+0x4bf/0x8d0 [ 907.638407][ T7860] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 907.644649][ T7860] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 907.650372][ T7860] ? copy_process.part.0+0x1d08/0x7980 [ 907.655845][ T7860] copy_process.part.0+0x3e0/0x7980 [ 907.661044][ T7860] ? __lock_acquire+0x548/0x3fb0 [ 907.665980][ T7860] ? wp_page_reuse+0x159/0x1d0 [ 907.670753][ T7860] ? __might_fault+0x12b/0x1e0 [ 907.675522][ T7860] ? __cleanup_sighand+0x60/0x60 [ 907.680463][ T7860] ? lock_downgrade+0x880/0x880 [ 907.685328][ T7860] _do_fork+0x257/0xfd0 [ 907.689490][ T7860] ? fork_idle+0x1d0/0x1d0 [ 907.693915][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 907.699368][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 907.704823][ T7860] ? do_syscall_64+0x26/0x610 [ 907.709494][ T7860] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 907.715553][ T7860] ? do_syscall_64+0x26/0x610 [ 907.720234][ T7860] __x64_sys_clone+0xbf/0x150 [ 907.724910][ T7860] do_syscall_64+0x103/0x610 [ 907.729501][ T7860] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 907.735388][ T7860] RIP: 0033:0x45737a [ 907.739285][ T7860] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 907.758902][ T7860] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 907.767400][ T7860] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 907.775374][ T7860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 907.783349][ T7860] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 00000000022b4940 19:34:54 executing program 2: socket$kcm(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffd95) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="9e4301000080000000021fe4ac14140ceb", 0x11}], 0x1}, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c00000024000000060000006f3096d2a59598e5735de07300de"], 0x0, 0x26, 0x0, 0x1}, 0x20) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 19:34:54 executing program 3: socket$kcm(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffd95) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="9e4301000080000000021fe4ac14140ceb", 0x11}], 0x1}, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c00000024000000060000006f3096d2a59598e5735de07300de"], 0x0, 0x26, 0x0, 0x1}, 0x20) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) [ 907.791318][ T7860] R10: 00000000022b4c10 R11: 0000000000000246 R12: 0000000000000001 [ 907.799302][ T7860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 907.864668][ T7860] memory: usage 66360kB, limit 0kB, failcnt 161 [ 907.864683][ T7860] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 907.899449][ T7860] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 907.906330][ T7860] Memory cgroup stats for /syz0: cache:44KB rss:59896KB rss_huge:57344KB shmem:80KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:59840KB inactive_file:0KB active_file:0KB unevictable:0KB [ 907.936110][ T7860] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=8012,uid=0 [ 907.952234][ T7860] Memory cgroup out of memory: Killed process 8012 (syz-executor.0) total-vm:72580kB, anon-rss:4248kB, file-rss:35828kB, shmem-rss:0kB [ 907.967165][ T7876] syz-executor.5 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 907.968749][ T1043] oom_reaper: reaped process 8012 (syz-executor.0), now anon-rss:0kB, file-rss:34868kB, shmem-rss:0kB [ 907.981030][ T7876] CPU: 0 PID: 7876 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 907.997154][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 908.007207][ T7876] Call Trace: [ 908.007230][ T7876] dump_stack+0x172/0x1f0 [ 908.007250][ T7876] dump_header+0x10f/0xb6c [ 908.007265][ T7876] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 908.007278][ T7876] ? ___ratelimit+0x60/0x595 [ 908.007293][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 908.007309][ T7876] oom_kill_process.cold+0x10/0x15 [ 908.007328][ T7876] out_of_memory+0x79a/0x1280 [ 908.039928][ T7876] ? oom_killer_disable+0x280/0x280 [ 908.039942][ T7876] ? find_held_lock+0x35/0x130 [ 908.039966][ T7876] mem_cgroup_out_of_memory+0x1ca/0x230 [ 908.039986][ T7876] ? memcg_event_wake+0x230/0x230 [ 908.049847][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 908.049864][ T7876] ? _raw_spin_unlock+0x2d/0x50 [ 908.049880][ T7876] try_charge+0x102c/0x15c0 [ 908.049902][ T7876] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 908.049925][ T7876] ? rcu_read_lock_sched_held+0x110/0x130 [ 908.049941][ T7876] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 908.049971][ T7876] __memcg_kmem_charge_memcg+0x7c/0x130 [ 908.070377][ T7876] ? memcg_kmem_put_cache+0xb0/0xb0 [ 908.070393][ T7876] ? cache_grow_begin+0x594/0x860 [ 908.070408][ T7876] ? lockdep_hardirqs_on+0x418/0x5d0 [ 908.070424][ T7876] ? trace_hardirqs_on+0x67/0x230 [ 908.070443][ T7876] cache_grow_begin+0x5c0/0x860 [ 908.070459][ T7876] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 908.070474][ T7876] ? __cpuset_node_allowed+0x136/0x540 [ 908.070498][ T7876] fallback_alloc+0x1fd/0x2d0 [ 908.085982][ T7876] ____cache_alloc_node+0x1be/0x1e0 [ 908.107934][ T7876] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 908.107955][ T7876] kmem_cache_alloc_node+0xe3/0x710 [ 908.128146][ T7876] ? lockdep_hardirqs_on+0x418/0x5d0 [ 908.155922][ T7876] ? trace_hardirqs_on+0x67/0x230 [ 908.171394][ T7876] copy_process.part.0+0x1d08/0x7980 [ 908.176680][ T7876] ? __lock_acquire+0x548/0x3fb0 [ 908.181632][ T7876] ? wp_page_reuse+0x159/0x1d0 [ 908.181657][ T7876] ? __might_fault+0x12b/0x1e0 [ 908.181680][ T7876] ? __cleanup_sighand+0x60/0x60 [ 908.181698][ T7876] ? lock_downgrade+0x880/0x880 [ 908.181724][ T7876] _do_fork+0x257/0xfd0 [ 908.201015][ T7876] ? fork_idle+0x1d0/0x1d0 [ 908.201040][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 908.201055][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 908.201071][ T7876] ? do_syscall_64+0x26/0x610 [ 908.201092][ T7876] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 908.209652][ T7876] ? do_syscall_64+0x26/0x610 [ 908.209672][ T7876] __x64_sys_clone+0xbf/0x150 [ 908.209691][ T7876] do_syscall_64+0x103/0x610 [ 908.209709][ T7876] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 908.209721][ T7876] RIP: 0033:0x45737a [ 908.209736][ T7876] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 908.209750][ T7876] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 908.220741][ T7876] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 908.220749][ T7876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 908.220757][ T7876] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 000000000275d940 [ 908.220765][ T7876] R10: 000000000275dc10 R11: 0000000000000246 R12: 0000000000000001 [ 908.220773][ T7876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 908.329000][ T7876] memory: usage 76196kB, limit 0kB, failcnt 153 [ 908.335346][ T7876] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 908.343332][ T7876] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 908.359733][ T7876] Memory cgroup stats for /syz5: cache:16KB rss:68176KB rss_huge:65536KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:68160KB inactive_file:0KB active_file:0KB unevictable:0KB [ 908.387337][ T7876] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=8156,uid=0 [ 908.403081][ T7876] Memory cgroup out of memory: Killed process 8156 (syz-executor.5) total-vm:72448kB, anon-rss:4240kB, file-rss:35828kB, shmem-rss:0kB [ 908.417917][T26865] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 908.419641][ T1043] oom_reaper: reaped process 8156 (syz-executor.5), now anon-rss:0kB, file-rss:34868kB, shmem-rss:0kB [ 908.430403][T26865] CPU: 0 PID: 26865 Comm: syz-executor.4 Not tainted 5.1.0-rc7+ #97 [ 908.446961][T26865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 908.457013][T26865] Call Trace: [ 908.460322][T26865] dump_stack+0x172/0x1f0 [ 908.464660][T26865] dump_header+0x10f/0xb6c [ 908.469095][T26865] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 908.474934][T26865] ? ___ratelimit+0x60/0x595 [ 908.479530][T26865] ? do_raw_spin_unlock+0x57/0x270 [ 908.484651][T26865] oom_kill_process.cold+0x10/0x15 [ 908.489776][T26865] out_of_memory+0x79a/0x1280 [ 908.494464][T26865] ? oom_killer_disable+0x280/0x280 [ 908.499670][T26865] ? find_held_lock+0x35/0x130 [ 908.504446][T26865] mem_cgroup_out_of_memory+0x1ca/0x230 [ 908.510016][T26865] ? memcg_event_wake+0x230/0x230 [ 908.515054][T26865] ? do_raw_spin_unlock+0x57/0x270 [ 908.520172][T26865] ? _raw_spin_unlock+0x2d/0x50 [ 908.525022][T26865] try_charge+0x102c/0x15c0 [ 908.529526][T26865] ? find_held_lock+0x35/0x130 [ 908.534401][T26865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 908.540039][T26865] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 908.546283][T26865] ? kasan_check_read+0x11/0x20 [ 908.551141][T26865] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 908.556696][T26865] mem_cgroup_try_charge+0x24d/0x5e0 [ 908.561997][T26865] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 908.567648][T26865] __handle_mm_fault+0x1e1f/0x3ec0 [ 908.572783][T26865] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 908.578332][T26865] ? find_held_lock+0x35/0x130 [ 908.583119][T26865] ? handle_mm_fault+0x322/0xb30 [ 908.588067][T26865] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 908.594317][T26865] ? kasan_check_read+0x11/0x20 [ 908.599190][T26865] handle_mm_fault+0x43f/0xb30 [ 908.603970][T26865] __do_page_fault+0x5ef/0xda0 [ 908.608797][T26865] do_page_fault+0x71/0x581 [ 908.613307][T26865] ? page_fault+0x8/0x30 [ 908.617557][T26865] page_fault+0x1e/0x30 [ 908.621718][T26865] RIP: 0033:0x4107bf [ 908.625636][T26865] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 908.645243][T26865] RSP: 002b:0000000000a4fae0 EFLAGS: 00010206 [ 908.651310][T26865] RAX: 00007f8fa473d000 RBX: 0000000000020000 RCX: 0000000000458dfa [ 908.659283][T26865] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 908.667247][T26865] RBP: 0000000000a4fbc0 R08: ffffffffffffffff R09: 0000000000000000 [ 908.667262][T26865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fcb0 [ 908.683193][T26865] R13: 00007f8fa475d700 R14: 0000000000000002 R15: 000000000073c04c [ 908.692570][T26865] memory: usage 62644kB, limit 0kB, failcnt 8 [ 908.698741][T26865] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 908.739186][T26865] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 908.759096][T26865] Memory cgroup stats for /syz4: cache:76KB rss:57492KB rss_huge:55296KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:57420KB inactive_file:0KB active_file:0KB unevictable:0KB [ 908.831575][T26865] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=27317,uid=0 [ 908.847205][T26865] Memory cgroup out of memory: Killed process 27317 (syz-executor.4) total-vm:72712kB, anon-rss:6316kB, file-rss:35864kB, shmem-rss:0kB [ 908.870705][ T7865] Memory cgroup out of memory: Killed process 27397 (syz-executor.2) total-vm:72580kB, anon-rss:6300kB, file-rss:35872kB, shmem-rss:0kB [ 908.872360][ T1043] oom_reaper: reaped process 27317 (syz-executor.4), now anon-rss:0kB, file-rss:34904kB, shmem-rss:0kB [ 908.899509][ T7867] Memory cgroup out of memory: Killed process 8121 (syz-executor.3) total-vm:72448kB, anon-rss:4244kB, file-rss:35828kB, shmem-rss:0kB [ 908.984962][ T7860] Memory cgroup out of memory: Killed process 8034 (syz-executor.0) total-vm:72580kB, anon-rss:4248kB, file-rss:35824kB, shmem-rss:0kB [ 909.010346][ T7876] Memory cgroup out of memory: Killed process 8186 (syz-executor.5) total-vm:72448kB, anon-rss:4240kB, file-rss:35828kB, shmem-rss:0kB [ 909.037233][ T1043] oom_reaper: reaped process 8186 (syz-executor.5), now anon-rss:0kB, file-rss:34868kB, shmem-rss:0kB [ 909.056248][T26867] Memory cgroup out of memory: Killed process 30707 (syz-executor.4) total-vm:72712kB, anon-rss:6316kB, file-rss:35836kB, shmem-rss:0kB [ 909.109512][T26865] Memory cgroup out of memory: Killed process 8067 (syz-executor.4) total-vm:72448kB, anon-rss:4244kB, file-rss:35828kB, shmem-rss:0kB [ 909.166436][ T7865] oom_kill_process: 6 callbacks suppressed [ 909.166453][ T7865] syz-executor.2 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 909.208083][ T7865] CPU: 1 PID: 7865 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 909.216014][ T7865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 909.226070][ T7865] Call Trace: [ 909.229367][ T7865] dump_stack+0x172/0x1f0 [ 909.233706][ T7865] dump_header+0x10f/0xb6c [ 909.238138][ T7865] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 909.243954][ T7865] ? ___ratelimit+0x60/0x595 [ 909.248556][ T7865] oom_kill_process.cold+0x10/0x15 [ 909.253684][ T7865] out_of_memory+0x79a/0x1280 [ 909.258377][ T7865] ? oom_killer_disable+0x280/0x280 [ 909.263581][ T7865] ? find_held_lock+0x35/0x130 [ 909.268379][ T7865] mem_cgroup_out_of_memory+0x1ca/0x230 [ 909.273933][ T7865] ? memcg_event_wake+0x230/0x230 [ 909.278996][ T7865] ? do_raw_spin_unlock+0x57/0x270 [ 909.284119][ T7865] ? _raw_spin_unlock+0x2d/0x50 [ 909.288988][ T7865] try_charge+0x102c/0x15c0 [ 909.293507][ T7865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 909.299068][ T7865] ? rcu_read_lock_sched_held+0x110/0x130 [ 909.304798][ T7865] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 909.310367][ T7865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 909.315921][ T7865] ? memcg_kmem_put_cache+0xb0/0xb0 [ 909.321137][ T7865] ? cache_grow_begin+0x594/0x860 [ 909.326174][ T7865] ? lockdep_hardirqs_on+0x418/0x5d0 [ 909.331482][ T7865] ? trace_hardirqs_on+0x67/0x230 [ 909.336537][ T7865] cache_grow_begin+0x5c0/0x860 [ 909.341404][ T7865] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 909.347651][ T7865] ? __cpuset_node_allowed+0x136/0x540 [ 909.353133][ T7865] fallback_alloc+0x1fd/0x2d0 [ 909.357828][ T7865] ____cache_alloc_node+0x1be/0x1e0 [ 909.363037][ T7865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 909.369509][ T7865] kmem_cache_alloc+0x1e8/0x6f0 [ 909.374436][ T7865] ? inet_create+0x2f4/0xe10 [ 909.379086][ T7865] sk_prot_alloc+0x67/0x2e0 [ 909.383619][ T7865] ? lock_downgrade+0x880/0x880 [ 909.388482][ T7865] sk_alloc+0x39/0xf70 [ 909.392563][ T7865] inet_create+0x36a/0xe10 [ 909.397060][ T7865] __sock_create+0x3e6/0x750 [ 909.401666][ T7865] __sys_socket+0x103/0x220 [ 909.406181][ T7865] ? move_addr_to_kernel+0x80/0x80 [ 909.411299][ T7865] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 909.416771][ T7865] ? do_syscall_64+0x26/0x610 [ 909.421462][ T7865] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 909.427541][ T7865] ? do_syscall_64+0x26/0x610 [ 909.432238][ T7865] __x64_sys_socket+0x73/0xb0 [ 909.436926][ T7865] do_syscall_64+0x103/0x610 [ 909.441532][ T7865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 909.447435][ T7865] RIP: 0033:0x45b917 [ 909.451336][ T7865] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 909.471035][ T7865] RSP: 002b:0000000000a4f698 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 909.479476][ T7865] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b917 [ 909.487451][ T7865] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 909.495435][ T7865] RBP: 000000000000182d R08: 0000000000000000 R09: 000000000000000a [ 909.503408][ T7865] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 909.511389][ T7865] R13: 0000000000a4fdb0 R14: 000000000100099b R15: 0000000000a4fdc0 [ 909.529878][ T7865] memory: usage 95596kB, limit 0kB, failcnt 33 [ 909.536154][ T7865] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 909.549727][ T7865] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 909.556587][ T7865] Memory cgroup stats for /syz2: cache:124KB rss:87184KB rss_huge:83968KB shmem:0KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:87152KB inactive_file:0KB active_file:0KB unevictable:0KB [ 909.584369][ T7865] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=27112,uid=0 [ 909.605766][ T7865] Memory cgroup out of memory: Killed process 27112 (syz-executor.2) total-vm:72580kB, anon-rss:6300kB, file-rss:35868kB, shmem-rss:0kB [ 909.647821][ T1043] oom_reaper: reaped process 27112 (syz-executor.2), now anon-rss:0kB, file-rss:34908kB, shmem-rss:0kB [ 909.659251][ T7867] syz-executor.3 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 909.685136][ T7867] CPU: 0 PID: 7867 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #97 [ 909.693046][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 909.703103][ T7867] Call Trace: [ 909.706406][ T7867] dump_stack+0x172/0x1f0 [ 909.710747][ T7867] dump_header+0x10f/0xb6c [ 909.715170][ T7867] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 909.721078][ T7867] ? ___ratelimit+0x60/0x595 [ 909.725683][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 909.730807][ T7867] oom_kill_process.cold+0x10/0x15 [ 909.735925][ T7867] out_of_memory+0x79a/0x1280 [ 909.740623][ T7867] ? oom_killer_disable+0x280/0x280 [ 909.745831][ T7867] ? find_held_lock+0x35/0x130 [ 909.750615][ T7867] mem_cgroup_out_of_memory+0x1ca/0x230 [ 909.756169][ T7867] ? memcg_event_wake+0x230/0x230 [ 909.761206][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 909.766326][ T7867] ? _raw_spin_unlock+0x2d/0x50 [ 909.771187][ T7867] try_charge+0x102c/0x15c0 [ 909.775704][ T7867] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 909.781267][ T7867] ? rcu_read_lock_sched_held+0x110/0x130 [ 909.786998][ T7867] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 909.792559][ T7867] __memcg_kmem_charge_memcg+0x7c/0x130 [ 909.798117][ T7867] ? memcg_kmem_put_cache+0xb0/0xb0 [ 909.803320][ T7867] ? cache_grow_begin+0x594/0x860 [ 909.808354][ T7867] ? lockdep_hardirqs_on+0x418/0x5d0 [ 909.813652][ T7867] ? trace_hardirqs_on+0x67/0x230 [ 909.818798][ T7867] cache_grow_begin+0x5c0/0x860 [ 909.823663][ T7867] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 909.829925][ T7867] ? __cpuset_node_allowed+0x136/0x540 [ 909.835400][ T7867] fallback_alloc+0x1fd/0x2d0 [ 909.840091][ T7867] ____cache_alloc_node+0x1be/0x1e0 [ 909.845295][ T7867] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 909.851554][ T7867] kmem_cache_alloc+0x1e8/0x6f0 [ 909.856425][ T7867] ? inet_create+0x2f4/0xe10 [ 909.861039][ T7867] sk_prot_alloc+0x67/0x2e0 [ 909.865555][ T7867] ? lock_downgrade+0x880/0x880 [ 909.870428][ T7867] sk_alloc+0x39/0xf70 [ 909.874531][ T7867] inet_create+0x36a/0xe10 [ 909.878967][ T7867] __sock_create+0x3e6/0x750 [ 909.883618][ T7867] __sys_socket+0x103/0x220 [ 909.888141][ T7867] ? move_addr_to_kernel+0x80/0x80 [ 909.893266][ T7867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 909.898739][ T7867] ? do_syscall_64+0x26/0x610 [ 909.903439][ T7867] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 909.909512][ T7867] ? do_syscall_64+0x26/0x610 [ 909.914199][ T7867] __x64_sys_socket+0x73/0xb0 [ 909.918896][ T7867] do_syscall_64+0x103/0x610 [ 909.923501][ T7867] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 909.929402][ T7867] RIP: 0033:0x45b917 [ 909.933298][ T7867] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 909.952909][ T7867] RSP: 002b:0000000000a4f698 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 909.961347][ T7867] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b917 [ 909.969328][ T7867] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 909.977307][ T7867] RBP: 0000000000002c54 R08: 0000000000000000 R09: 000000000000000a [ 909.985288][ T7867] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 909.993270][ T7867] R13: 0000000000a4fdb0 R14: 00000000013a099b R15: 0000000000a4fdc0 [ 910.003402][ T7867] memory: usage 71564kB, limit 0kB, failcnt 33 [ 910.010034][ T7867] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 910.017510][ T7867] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 910.024887][ T7867] Memory cgroup stats for /syz3: cache:0KB rss:64188KB rss_huge:61440KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:64172KB inactive_file:0KB active_file:0KB unevictable:0KB [ 910.046764][ T7867] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=8172,uid=0 [ 910.062537][ T7867] Memory cgroup out of memory: Killed process 8172 (syz-executor.3) total-vm:72448kB, anon-rss:4244kB, file-rss:35828kB, shmem-rss:0kB [ 910.092400][ T7860] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 910.106539][ T7860] CPU: 0 PID: 7860 Comm: syz-executor.0 Not tainted 5.1.0-rc7+ #97 [ 910.114462][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 910.114476][ T7860] Call Trace: [ 910.127878][ T7860] dump_stack+0x172/0x1f0 [ 910.132220][ T7860] dump_header+0x10f/0xb6c [ 910.136646][ T7860] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 910.142461][ T7860] ? ___ratelimit+0x60/0x595 [ 910.147052][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 910.152171][ T7860] oom_kill_process.cold+0x10/0x15 [ 910.157292][ T7860] out_of_memory+0x79a/0x1280 [ 910.162160][ T7860] ? oom_killer_disable+0x280/0x280 [ 910.167357][ T7860] ? find_held_lock+0x35/0x130 [ 910.172131][ T7860] mem_cgroup_out_of_memory+0x1ca/0x230 [ 910.177674][ T7860] ? memcg_event_wake+0x230/0x230 [ 910.182790][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 910.187900][ T7860] ? _raw_spin_unlock+0x2d/0x50 [ 910.192752][ T7860] try_charge+0x102c/0x15c0 [ 910.197253][ T7860] ? find_held_lock+0x35/0x130 [ 910.202033][ T7860] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 910.207604][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 910.213178][ T7860] ? find_held_lock+0x35/0x130 [ 910.217961][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 910.223532][ T7860] __memcg_kmem_charge_memcg+0x7c/0x130 [ 910.229087][ T7860] ? memcg_kmem_put_cache+0xb0/0xb0 [ 910.234296][ T7860] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 910.239848][ T7860] __memcg_kmem_charge+0x136/0x300 [ 910.244967][ T7860] __alloc_pages_nodemask+0x4bf/0x8d0 [ 910.250339][ T7860] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 910.256591][ T7860] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 910.262334][ T7860] ? copy_process.part.0+0x1d08/0x7980 [ 910.269341][ T7860] copy_process.part.0+0x3e0/0x7980 [ 910.274563][ T7860] ? __lock_acquire+0x548/0x3fb0 [ 910.279518][ T7860] ? wp_page_reuse+0x159/0x1d0 [ 910.284300][ T7860] ? __might_fault+0x12b/0x1e0 [ 910.289077][ T7860] ? __cleanup_sighand+0x60/0x60 [ 910.294028][ T7860] ? lock_downgrade+0x880/0x880 [ 910.298901][ T7860] _do_fork+0x257/0xfd0 [ 910.303071][ T7860] ? fork_idle+0x1d0/0x1d0 [ 910.307497][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 910.312959][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 910.318420][ T7860] ? do_syscall_64+0x26/0x610 [ 910.323097][ T7860] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 910.329167][ T7860] ? do_syscall_64+0x26/0x610 [ 910.333851][ T7860] __x64_sys_clone+0xbf/0x150 [ 910.338529][ T7860] do_syscall_64+0x103/0x610 [ 910.343128][ T7860] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 910.349015][ T7860] RIP: 0033:0x45737a [ 910.352912][ T7860] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 910.374229][ T7860] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 910.382733][ T7860] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 910.390705][ T7860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 910.398718][ T7860] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 00000000022b4940 [ 910.406695][ T7860] R10: 00000000022b4c10 R11: 0000000000000246 R12: 0000000000000001 19:34:57 executing program 4: socket$kcm(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffd95) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="9e4301000080000000021fe4ac14140ceb", 0x11}], 0x1}, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c00000024000000060000006f3096d2a59598e5735de07300de"], 0x0, 0x26, 0x0, 0x1}, 0x20) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) [ 910.414757][ T7860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 910.441874][ T7860] memory: usage 57588kB, limit 0kB, failcnt 173 [ 910.448186][ T7860] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 910.479326][ T7860] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 910.486215][ T7860] Memory cgroup stats for /syz0: cache:44KB rss:51440KB rss_huge:49152KB shmem:80KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:51408KB inactive_file:0KB active_file:0KB unevictable:0KB [ 910.519147][ T7860] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=8063,uid=0 [ 910.549494][ T7860] Memory cgroup out of memory: Killed process 8063 (syz-executor.0) total-vm:72448kB, anon-rss:4240kB, file-rss:35828kB, shmem-rss:0kB [ 910.610134][ T7876] syz-executor.5 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 910.645452][ T7876] CPU: 0 PID: 7876 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 910.653378][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 910.663441][ T7876] Call Trace: [ 910.666752][ T7876] dump_stack+0x172/0x1f0 [ 910.671097][ T7876] dump_header+0x10f/0xb6c [ 910.675519][ T7876] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 910.681355][ T7876] ? ___ratelimit+0x60/0x595 [ 910.685954][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 910.691081][ T7876] oom_kill_process.cold+0x10/0x15 [ 910.696208][ T7876] out_of_memory+0x79a/0x1280 [ 910.700926][ T7876] ? oom_killer_disable+0x280/0x280 [ 910.706133][ T7876] ? find_held_lock+0x35/0x130 [ 910.710928][ T7876] mem_cgroup_out_of_memory+0x1ca/0x230 [ 910.716489][ T7876] ? memcg_event_wake+0x230/0x230 [ 910.721532][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 910.726683][ T7876] ? _raw_spin_unlock+0x2d/0x50 [ 910.731574][ T7876] try_charge+0x102c/0x15c0 [ 910.736103][ T7876] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 910.741668][ T7876] ? rcu_read_lock_sched_held+0x110/0x130 [ 910.747486][ T7876] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 910.753046][ T7876] __memcg_kmem_charge_memcg+0x7c/0x130 [ 910.758593][ T7876] ? memcg_kmem_put_cache+0xb0/0xb0 [ 910.763815][ T7876] ? cache_grow_begin+0x594/0x860 [ 910.768847][ T7876] ? lockdep_hardirqs_on+0x418/0x5d0 [ 910.774162][ T7876] ? trace_hardirqs_on+0x67/0x230 [ 910.779227][ T7876] cache_grow_begin+0x5c0/0x860 [ 910.784107][ T7876] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 910.790357][ T7876] ? __cpuset_node_allowed+0x136/0x540 [ 910.795828][ T7876] fallback_alloc+0x1fd/0x2d0 [ 910.800522][ T7876] ____cache_alloc_node+0x1be/0x1e0 [ 910.805724][ T7876] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 910.811985][ T7876] kmem_cache_alloc_node+0xe3/0x710 [ 910.817215][ T7876] ? lockdep_hardirqs_on+0x418/0x5d0 [ 910.822538][ T7876] ? trace_hardirqs_on+0x67/0x230 [ 910.827581][ T7876] copy_process.part.0+0x1d08/0x7980 [ 910.832888][ T7876] ? __lock_acquire+0x548/0x3fb0 [ 910.837838][ T7876] ? wp_page_reuse+0x159/0x1d0 [ 910.842631][ T7876] ? __might_fault+0x12b/0x1e0 [ 910.847502][ T7876] ? __cleanup_sighand+0x60/0x60 [ 910.852472][ T7876] ? lock_downgrade+0x880/0x880 [ 910.857346][ T7876] _do_fork+0x257/0xfd0 [ 910.861519][ T7876] ? fork_idle+0x1d0/0x1d0 [ 910.865952][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 910.871417][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 910.876882][ T7876] ? do_syscall_64+0x26/0x610 [ 910.881574][ T7876] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 910.887666][ T7876] ? do_syscall_64+0x26/0x610 [ 910.892354][ T7876] __x64_sys_clone+0xbf/0x150 [ 910.897037][ T7876] do_syscall_64+0x103/0x610 [ 910.901653][ T7876] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 910.907548][ T7876] RIP: 0033:0x45737a [ 910.911451][ T7876] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 910.931060][ T7876] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 910.939476][ T7876] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 910.947451][ T7876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 910.955449][ T7876] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 000000000275d940 [ 910.963424][ T7876] R10: 000000000275dc10 R11: 0000000000000246 R12: 0000000000000001 [ 910.971400][ T7876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 910.981613][ T7876] memory: usage 66664kB, limit 0kB, failcnt 165 [ 910.988910][ T7876] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 910.996935][ T7876] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 911.004084][ T7876] Memory cgroup stats for /syz5: cache:16KB rss:59760KB rss_huge:57344KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:59744KB inactive_file:0KB active_file:0KB unevictable:0KB [ 911.025886][ T7876] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=8213,uid=0 [ 911.041749][ T7876] Memory cgroup out of memory: Killed process 8213 (syz-executor.5) total-vm:72448kB, anon-rss:4240kB, file-rss:35828kB, shmem-rss:0kB [ 911.056240][ T7865] syz-executor.2 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 911.057831][ T1043] oom_reaper: reaped process 8213 (syz-executor.5), now anon-rss:0kB, file-rss:34868kB, shmem-rss:0kB [ 911.069757][ T7865] CPU: 0 PID: 7865 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 911.086167][ T7865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 911.096221][ T7865] Call Trace: [ 911.099521][ T7865] dump_stack+0x172/0x1f0 [ 911.103880][ T7865] dump_header+0x10f/0xb6c [ 911.108298][ T7865] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 911.114124][ T7865] ? ___ratelimit+0x60/0x595 [ 911.114139][ T7865] ? do_raw_spin_unlock+0x57/0x270 [ 911.114155][ T7865] oom_kill_process.cold+0x10/0x15 [ 911.114172][ T7865] out_of_memory+0x79a/0x1280 [ 911.114193][ T7865] ? oom_killer_disable+0x280/0x280 [ 911.114213][ T7865] ? find_held_lock+0x35/0x130 [ 911.114232][ T7865] mem_cgroup_out_of_memory+0x1ca/0x230 [ 911.114243][ T7865] ? memcg_event_wake+0x230/0x230 [ 911.114260][ T7865] ? do_raw_spin_unlock+0x57/0x270 [ 911.114271][ T7865] ? _raw_spin_unlock+0x2d/0x50 [ 911.114285][ T7865] try_charge+0x102c/0x15c0 [ 911.114305][ T7865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 911.149419][ T7865] ? rcu_read_lock_sched_held+0x110/0x130 [ 911.149438][ T7865] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 911.149461][ T7865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 911.149475][ T7865] ? memcg_kmem_put_cache+0xb0/0xb0 [ 911.149490][ T7865] ? cache_grow_begin+0x594/0x860 [ 911.149504][ T7865] ? lockdep_hardirqs_on+0x418/0x5d0 [ 911.149519][ T7865] ? trace_hardirqs_on+0x67/0x230 [ 911.149536][ T7865] cache_grow_begin+0x5c0/0x860 [ 911.149552][ T7865] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 911.149566][ T7865] ? __cpuset_node_allowed+0x136/0x540 [ 911.149584][ T7865] fallback_alloc+0x1fd/0x2d0 [ 911.149631][ T7865] ____cache_alloc_node+0x1be/0x1e0 [ 911.169114][ T7865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 911.169135][ T7865] kmem_cache_alloc+0x1e8/0x6f0 [ 911.169149][ T7865] ? inet_create+0x2f4/0xe10 [ 911.169168][ T7865] sk_prot_alloc+0x67/0x2e0 [ 911.169181][ T7865] ? lock_downgrade+0x880/0x880 [ 911.169201][ T7865] sk_alloc+0x39/0xf70 [ 911.191513][ T7865] inet_create+0x36a/0xe10 [ 911.201891][ T7865] __sock_create+0x3e6/0x750 [ 911.201911][ T7865] __sys_socket+0x103/0x220 [ 911.201926][ T7865] ? move_addr_to_kernel+0x80/0x80 [ 911.201941][ T7865] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 911.201954][ T7865] ? do_syscall_64+0x26/0x610 [ 911.201968][ T7865] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 911.201981][ T7865] ? do_syscall_64+0x26/0x610 [ 911.202001][ T7865] __x64_sys_socket+0x73/0xb0 [ 911.202017][ T7865] do_syscall_64+0x103/0x610 [ 911.202034][ T7865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 911.202054][ T7865] RIP: 0033:0x45b917 [ 911.238728][ T7865] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 911.264182][ T7865] RSP: 002b:0000000000a4f698 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 911.272759][ T7865] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b917 [ 911.272767][ T7865] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 911.272774][ T7865] RBP: 000000000000182d R08: 0000000000000000 R09: 000000000000000a [ 911.272781][ T7865] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 911.272789][ T7865] R13: 0000000000a4fdb0 R14: 000000000100099b R15: 0000000000a4fdc0 [ 911.282958][ T7865] memory: usage 88452kB, limit 0kB, failcnt 39 [ 911.318387][ T7865] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 911.353024][ T7865] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 911.377377][ T7865] Memory cgroup stats for /syz2: cache:124KB rss:80908KB rss_huge:77824KB shmem:0KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:80876KB inactive_file:0KB active_file:0KB unevictable:0KB [ 911.408645][ T7865] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=26588,uid=0 [ 911.444400][ T7865] Memory cgroup out of memory: Killed process 26588 (syz-executor.2) total-vm:72580kB, anon-rss:6300kB, file-rss:35864kB, shmem-rss:0kB [ 911.482138][T26863] chnl_net:caif_netlink_parms(): no params data found [ 911.515238][ T7867] syz-executor.3 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 911.517710][ T1043] oom_reaper: reaped process 26588 (syz-executor.2), now anon-rss:0kB, file-rss:34904kB, shmem-rss:0kB [ 911.528644][ T7867] CPU: 0 PID: 7867 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #97 [ 911.545340][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 911.555411][ T7867] Call Trace: [ 911.558706][ T7867] dump_stack+0x172/0x1f0 [ 911.563041][ T7867] dump_header+0x10f/0xb6c [ 911.563057][ T7867] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 911.563071][ T7867] ? ___ratelimit+0x60/0x595 [ 911.563083][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 911.563100][ T7867] oom_kill_process.cold+0x10/0x15 [ 911.563115][ T7867] out_of_memory+0x79a/0x1280 [ 911.563148][ T7867] ? oom_killer_disable+0x280/0x280 [ 911.583030][ T7867] ? find_held_lock+0x35/0x130 [ 911.602730][ T7867] mem_cgroup_out_of_memory+0x1ca/0x230 [ 911.608278][ T7867] ? memcg_event_wake+0x230/0x230 [ 911.613307][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 911.613323][ T7867] ? _raw_spin_unlock+0x2d/0x50 [ 911.613339][ T7867] try_charge+0x102c/0x15c0 [ 911.613360][ T7867] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 911.613379][ T7867] ? rcu_read_lock_sched_held+0x110/0x130 [ 911.613394][ T7867] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 911.613416][ T7867] __memcg_kmem_charge_memcg+0x7c/0x130 [ 911.633400][ T7867] ? memcg_kmem_put_cache+0xb0/0xb0 [ 911.655380][ T7867] ? cache_grow_begin+0x594/0x860 [ 911.660411][ T7867] ? lockdep_hardirqs_on+0x418/0x5d0 [ 911.665709][ T7867] ? trace_hardirqs_on+0x67/0x230 [ 911.670738][ T7867] cache_grow_begin+0x5c0/0x860 [ 911.670755][ T7867] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 911.670767][ T7867] ? __cpuset_node_allowed+0x136/0x540 [ 911.670784][ T7867] fallback_alloc+0x1fd/0x2d0 [ 911.670803][ T7867] ____cache_alloc_node+0x1be/0x1e0 [ 911.670815][ T7867] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 911.670833][ T7867] kmem_cache_alloc+0x1e8/0x6f0 [ 911.670853][ T7867] ? inet_create+0x2f4/0xe10 [ 911.682027][ T7867] sk_prot_alloc+0x67/0x2e0 [ 911.692138][ T7867] ? lock_downgrade+0x880/0x880 [ 911.692156][ T7867] sk_alloc+0x39/0xf70 [ 911.692171][ T7867] inet_create+0x36a/0xe10 [ 911.692192][ T7867] __sock_create+0x3e6/0x750 [ 911.692210][ T7867] __sys_socket+0x103/0x220 [ 911.692225][ T7867] ? move_addr_to_kernel+0x80/0x80 [ 911.692241][ T7867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 911.692261][ T7867] ? do_syscall_64+0x26/0x610 [ 911.722535][ T7867] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 911.731012][ T7867] ? do_syscall_64+0x26/0x610 [ 911.731034][ T7867] __x64_sys_socket+0x73/0xb0 [ 911.731050][ T7867] do_syscall_64+0x103/0x610 [ 911.731066][ T7867] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 911.731077][ T7867] RIP: 0033:0x45b917 [ 911.731091][ T7867] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 911.731106][ T7867] RSP: 002b:0000000000a4f698 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 911.740184][ T7867] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b917 [ 911.750731][ T7867] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 911.750739][ T7867] RBP: 0000000000002c54 R08: 0000000000000000 R09: 000000000000000a [ 911.750746][ T7867] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 911.750754][ T7867] R13: 0000000000a4fdb0 R14: 00000000013a099b R15: 0000000000a4fdc0 [ 911.853668][ T7867] memory: usage 67132kB, limit 0kB, failcnt 39 [ 911.866699][ T7867] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 911.874859][ T7867] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 911.889307][ T7867] Memory cgroup stats for /syz3: cache:0KB rss:59988KB rss_huge:57344KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:59972KB inactive_file:0KB active_file:0KB unevictable:0KB [ 911.917093][ T7867] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=8191,uid=0 [ 911.939333][ T7867] Memory cgroup out of memory: Killed process 8191 (syz-executor.3) total-vm:72448kB, anon-rss:4244kB, file-rss:35828kB, shmem-rss:0kB [ 911.982329][ T7873] syz-executor.4 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=0, oom_score_adj=0 [ 912.002656][ T7873] CPU: 0 PID: 7873 Comm: syz-executor.4 Not tainted 5.1.0-rc7+ #97 [ 912.010560][ T7873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 912.010572][ T7873] Call Trace: [ 912.023944][ T7873] dump_stack+0x172/0x1f0 [ 912.028284][ T7873] dump_header+0x10f/0xb6c [ 912.032711][ T7873] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 912.038514][ T7873] ? ___ratelimit+0x60/0x595 [ 912.038529][ T7873] ? do_raw_spin_unlock+0x57/0x270 [ 912.038547][ T7873] oom_kill_process.cold+0x10/0x15 [ 912.038565][ T7873] out_of_memory+0x79a/0x1280 [ 912.058039][ T7873] ? oom_killer_disable+0x280/0x280 [ 912.063236][ T7873] ? find_held_lock+0x35/0x130 [ 912.063260][ T7873] mem_cgroup_out_of_memory+0x1ca/0x230 [ 912.073537][ T7873] ? memcg_event_wake+0x230/0x230 [ 912.073557][ T7873] ? do_raw_spin_unlock+0x57/0x270 [ 912.073572][ T7873] ? _raw_spin_unlock+0x2d/0x50 [ 912.073588][ T7873] try_charge+0x102c/0x15c0 [ 912.073611][ T7873] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 912.073694][ T7873] ? should_fail+0x1de/0x852 [ 912.073716][ T7873] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 912.093182][ T7873] ? rcu_read_lock_sched_held+0x110/0x130 [ 912.109528][ T7873] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 912.120786][ T7873] __memcg_kmem_charge_memcg+0x7c/0x130 [ 912.120801][ T7873] ? memcg_kmem_put_cache+0xb0/0xb0 [ 912.120815][ T7873] ? cache_grow_begin+0x594/0x860 [ 912.120829][ T7873] ? lockdep_hardirqs_on+0x418/0x5d0 [ 912.120844][ T7873] ? trace_hardirqs_on+0x67/0x230 [ 912.120860][ T7873] cache_grow_begin+0x5c0/0x860 [ 912.120876][ T7873] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 912.120896][ T7873] ? __cpuset_node_allowed+0x136/0x540 [ 912.141940][ T7873] fallback_alloc+0x1fd/0x2d0 [ 912.151879][ T7873] ____cache_alloc_node+0x1be/0x1e0 [ 912.151894][ T7873] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 912.151910][ T7873] kmem_cache_alloc+0x1e8/0x6f0 [ 912.151991][ T7873] __alloc_file+0x27/0x300 [ 912.152010][ T7873] alloc_empty_file+0x72/0x170 [ 912.179787][ T7873] alloc_file+0x5e/0x4d0 [ 912.179805][ T7873] alloc_file_pseudo+0x189/0x280 [ 912.179819][ T7873] ? alloc_file+0x4d0/0x4d0 [ 912.179920][ T7873] ? __alloc_fd+0x44d/0x560 [ 912.189315][ T7873] sock_alloc_file+0x4d/0x170 [ 912.189333][ T7873] __sys_socket+0x150/0x220 [ 912.189348][ T7873] ? move_addr_to_kernel+0x80/0x80 [ 912.189365][ T7873] ? do_syscall_64+0x26/0x610 [ 912.189380][ T7873] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 912.189400][ T7873] ? do_syscall_64+0x26/0x610 [ 912.212288][ T7873] __x64_sys_socket+0x73/0xb0 [ 912.212308][ T7873] do_syscall_64+0x103/0x610 [ 912.212328][ T7873] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 912.212339][ T7873] RIP: 0033:0x45b917 [ 912.212353][ T7873] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 912.212360][ T7873] RSP: 002b:0000000000a4f628 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 912.212373][ T7873] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b917 [ 912.212381][ T7873] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 912.212388][ T7873] RBP: 0000000000000706 R08: 0000000000a4f6ac R09: 000000000000000a [ 912.212396][ T7873] R10: 0000000000a4f6b0 R11: 0000000000000246 R12: 0000000000000000 [ 912.212403][ T7873] R13: 0000000000a4fdb0 R14: 00000000000dd7eb R15: 0000000000a4fdc0 [ 912.239072][ T7873] memory: usage 42984kB, limit 0kB, failcnt 33 [ 912.269141][ T7873] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 912.345892][ T7873] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 912.359123][ T7873] Memory cgroup stats for /syz4: cache:76KB rss:38684KB rss_huge:36864KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:38500KB inactive_file:0KB active_file:0KB unevictable:0KB [ 912.410192][ T7873] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=8090,uid=0 [ 912.438339][ T7873] Memory cgroup out of memory: Killed process 8090 (syz-executor.4) total-vm:72448kB, anon-rss:4244kB, file-rss:35828kB, shmem-rss:0kB [ 912.481595][ T7860] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 912.502757][ T7860] CPU: 0 PID: 7860 Comm: syz-executor.0 Not tainted 5.1.0-rc7+ #97 [ 912.510688][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 912.520754][ T7860] Call Trace: [ 912.524061][ T7860] dump_stack+0x172/0x1f0 [ 912.528402][ T7860] dump_header+0x10f/0xb6c [ 912.532834][ T7860] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 912.538680][ T7860] ? ___ratelimit+0x60/0x595 [ 912.543282][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 912.548420][ T7860] oom_kill_process.cold+0x10/0x15 [ 912.553548][ T7860] out_of_memory+0x79a/0x1280 [ 912.558242][ T7860] ? oom_killer_disable+0x280/0x280 [ 912.563447][ T7860] ? find_held_lock+0x35/0x130 [ 912.568243][ T7860] mem_cgroup_out_of_memory+0x1ca/0x230 [ 912.573809][ T7860] ? memcg_event_wake+0x230/0x230 [ 912.578847][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 912.583969][ T7860] ? _raw_spin_unlock+0x2d/0x50 [ 912.588831][ T7860] try_charge+0x102c/0x15c0 [ 912.593342][ T7860] ? find_held_lock+0x35/0x130 [ 912.598123][ T7860] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 912.603678][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 912.609235][ T7860] ? find_held_lock+0x35/0x130 [ 912.614013][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 912.619670][ T7860] __memcg_kmem_charge_memcg+0x7c/0x130 [ 912.625227][ T7860] ? memcg_kmem_put_cache+0xb0/0xb0 [ 912.630441][ T7860] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 912.636003][ T7860] __memcg_kmem_charge+0x136/0x300 [ 912.641129][ T7860] __alloc_pages_nodemask+0x4bf/0x8d0 [ 912.646514][ T7860] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 912.652782][ T7860] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 912.658515][ T7860] ? copy_process.part.0+0x1d08/0x7980 [ 912.663994][ T7860] copy_process.part.0+0x3e0/0x7980 [ 912.669206][ T7860] ? __lock_acquire+0x548/0x3fb0 [ 912.674152][ T7860] ? wp_page_reuse+0x159/0x1d0 [ 912.678933][ T7860] ? __might_fault+0x12b/0x1e0 [ 912.683719][ T7860] ? __cleanup_sighand+0x60/0x60 [ 912.688677][ T7860] ? lock_downgrade+0x880/0x880 [ 912.693556][ T7860] _do_fork+0x257/0xfd0 [ 912.697737][ T7860] ? fork_idle+0x1d0/0x1d0 [ 912.702171][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 912.707652][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 912.713118][ T7860] ? do_syscall_64+0x26/0x610 [ 912.717805][ T7860] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 912.723879][ T7860] ? do_syscall_64+0x26/0x610 [ 912.728571][ T7860] __x64_sys_clone+0xbf/0x150 [ 912.733271][ T7860] do_syscall_64+0x103/0x610 [ 912.737877][ T7860] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 912.743809][ T7860] RIP: 0033:0x45737a [ 912.747717][ T7860] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 912.767357][ T7860] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 912.775810][ T7860] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 912.783793][ T7860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 912.791797][ T7860] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 00000000022b4940 [ 912.799780][ T7860] R10: 00000000022b4c10 R11: 0000000000000246 R12: 0000000000000001 [ 912.807760][ T7860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 912.816632][ T7860] memory: usage 53124kB, limit 0kB, failcnt 179 [ 912.830499][ T7860] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 912.837985][ T7860] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 912.860677][ T7860] Memory cgroup stats for /syz0: cache:44KB rss:47224KB rss_huge:45056KB shmem:80KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:47200KB inactive_file:0KB active_file:0KB unevictable:0KB [ 912.899185][ T7860] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=8141,uid=0 [ 912.905437][T26863] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.929203][ T7860] Memory cgroup out of memory: Killed process 8141 (syz-executor.0) total-vm:72448kB, anon-rss:4240kB, file-rss:35828kB, shmem-rss:0kB [ 912.939183][T26863] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.951172][ T1043] oom_reaper: reaped process 8141 (syz-executor.0), now anon-rss:0kB, file-rss:34868kB, shmem-rss:0kB [ 912.962860][ T7876] syz-executor.5 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 912.969128][T26863] device bridge_slave_0 entered promiscuous mode [ 912.976305][ T7876] CPU: 1 PID: 7876 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 912.988111][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 912.998177][ T7876] Call Trace: [ 912.998205][ T7876] dump_stack+0x172/0x1f0 [ 912.998222][ T7876] dump_header+0x10f/0xb6c [ 912.998237][ T7876] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 912.998252][ T7876] ? ___ratelimit+0x60/0x595 [ 912.998265][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 912.998282][ T7876] oom_kill_process.cold+0x10/0x15 [ 912.998302][ T7876] out_of_memory+0x79a/0x1280 [ 913.035656][ T7876] ? oom_killer_disable+0x280/0x280 [ 913.040871][ T7876] ? find_held_lock+0x35/0x130 [ 913.045660][ T7876] mem_cgroup_out_of_memory+0x1ca/0x230 [ 913.051241][ T7876] ? memcg_event_wake+0x230/0x230 [ 913.056284][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 913.061406][ T7876] ? _raw_spin_unlock+0x2d/0x50 [ 913.066278][ T7876] try_charge+0x102c/0x15c0 [ 913.070831][ T7876] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 913.076402][ T7876] ? rcu_read_lock_sched_held+0x110/0x130 [ 913.082138][ T7876] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 913.087706][ T7876] __memcg_kmem_charge_memcg+0x7c/0x130 [ 913.093267][ T7876] ? memcg_kmem_put_cache+0xb0/0xb0 [ 913.098479][ T7876] ? cache_grow_begin+0x594/0x860 [ 913.103516][ T7876] ? lockdep_hardirqs_on+0x418/0x5d0 [ 913.108812][ T7876] ? trace_hardirqs_on+0x67/0x230 [ 913.113854][ T7876] cache_grow_begin+0x5c0/0x860 [ 913.118720][ T7876] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 913.124971][ T7876] ? __cpuset_node_allowed+0x136/0x540 [ 913.130444][ T7876] fallback_alloc+0x1fd/0x2d0 [ 913.135145][ T7876] ____cache_alloc_node+0x1be/0x1e0 [ 913.140356][ T7876] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 913.146619][ T7876] kmem_cache_alloc_node+0xe3/0x710 [ 913.151827][ T7876] ? lockdep_hardirqs_on+0x418/0x5d0 [ 913.157120][ T7876] ? trace_hardirqs_on+0x67/0x230 [ 913.162173][ T7876] copy_process.part.0+0x1d08/0x7980 [ 913.167470][ T7876] ? __lock_acquire+0x548/0x3fb0 [ 913.172421][ T7876] ? wp_page_reuse+0x159/0x1d0 [ 913.177202][ T7876] ? __might_fault+0x12b/0x1e0 [ 913.181983][ T7876] ? __cleanup_sighand+0x60/0x60 [ 913.186930][ T7876] ? lock_downgrade+0x880/0x880 [ 913.191804][ T7876] _do_fork+0x257/0xfd0 [ 913.195972][ T7876] ? fork_idle+0x1d0/0x1d0 [ 913.200403][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 913.205868][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 913.211336][ T7876] ? do_syscall_64+0x26/0x610 [ 913.216016][ T7876] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 913.222083][ T7876] ? do_syscall_64+0x26/0x610 [ 913.226770][ T7876] __x64_sys_clone+0xbf/0x150 [ 913.231457][ T7876] do_syscall_64+0x103/0x610 [ 913.236057][ T7876] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 913.241950][ T7876] RIP: 0033:0x45737a [ 913.245852][ T7876] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 913.265465][ T7876] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 913.273889][ T7876] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 913.281877][ T7876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 913.289856][ T7876] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 000000000275d940 [ 913.297835][ T7876] R10: 000000000275dc10 R11: 0000000000000246 R12: 0000000000000001 [ 913.305817][ T7876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 913.329070][ T7876] memory: usage 62116kB, limit 0kB, failcnt 171 [ 913.335523][ T7876] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 913.389181][ T7876] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 913.396058][ T7876] Memory cgroup stats for /syz5: cache:16KB rss:55560KB rss_huge:53248KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:55544KB inactive_file:0KB active_file:0KB unevictable:0KB [ 913.418746][ T7876] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=8234,uid=0 [ 913.434761][ T7876] Memory cgroup out of memory: Killed process 8234 (syz-executor.5) total-vm:72448kB, anon-rss:4240kB, file-rss:35828kB, shmem-rss:0kB [ 913.461290][T26863] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.468382][T26863] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.479573][ T7865] syz-executor.2 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 913.493181][ T7865] CPU: 0 PID: 7865 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 913.501228][ T7865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 913.501234][ T7865] Call Trace: [ 913.501257][ T7865] dump_stack+0x172/0x1f0 [ 913.501277][ T7865] dump_header+0x10f/0xb6c [ 913.501292][ T7865] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 913.501307][ T7865] ? ___ratelimit+0x60/0x595 [ 913.501321][ T7865] ? do_raw_spin_unlock+0x57/0x270 [ 913.501342][ T7865] oom_kill_process.cold+0x10/0x15 [ 913.539904][T26863] device bridge_slave_1 entered promiscuous mode [ 913.544033][ T7865] out_of_memory+0x79a/0x1280 [ 913.555037][ T7865] ? oom_killer_disable+0x280/0x280 [ 913.560238][ T7865] ? find_held_lock+0x35/0x130 [ 913.565016][ T7865] mem_cgroup_out_of_memory+0x1ca/0x230 [ 913.570565][ T7865] ? memcg_event_wake+0x230/0x230 [ 913.575619][ T7865] ? do_raw_spin_unlock+0x57/0x270 [ 913.580739][ T7865] ? _raw_spin_unlock+0x2d/0x50 [ 913.580757][ T7865] try_charge+0x102c/0x15c0 [ 913.580780][ T7865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 913.580800][ T7865] ? rcu_read_lock_sched_held+0x110/0x130 [ 913.580822][ T7865] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 913.601403][ T7865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 913.601420][ T7865] ? memcg_kmem_put_cache+0xb0/0xb0 [ 913.601434][ T7865] ? cache_grow_begin+0x594/0x860 [ 913.601449][ T7865] ? lockdep_hardirqs_on+0x418/0x5d0 [ 913.601464][ T7865] ? trace_hardirqs_on+0x67/0x230 [ 913.601482][ T7865] cache_grow_begin+0x5c0/0x860 [ 913.601509][ T7865] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 913.628109][ T7865] ? __cpuset_node_allowed+0x136/0x540 [ 913.637974][ T7865] fallback_alloc+0x1fd/0x2d0 [ 913.654424][ T7865] ____cache_alloc_node+0x1be/0x1e0 [ 913.659643][ T7865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 913.665923][ T7865] kmem_cache_alloc+0x1e8/0x6f0 [ 913.670782][ T7865] ? inet_create+0x2f4/0xe10 [ 913.675389][ T7865] sk_prot_alloc+0x67/0x2e0 [ 913.679918][ T7865] ? lock_downgrade+0x880/0x880 [ 913.679934][ T7865] sk_alloc+0x39/0xf70 [ 913.679950][ T7865] inet_create+0x36a/0xe10 [ 913.679971][ T7865] __sock_create+0x3e6/0x750 [ 913.679990][ T7865] __sys_socket+0x103/0x220 [ 913.680005][ T7865] ? move_addr_to_kernel+0x80/0x80 [ 913.680021][ T7865] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 913.680036][ T7865] ? do_syscall_64+0x26/0x610 [ 913.680050][ T7865] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 913.680061][ T7865] ? do_syscall_64+0x26/0x610 [ 913.680078][ T7865] __x64_sys_socket+0x73/0xb0 [ 913.680094][ T7865] do_syscall_64+0x103/0x610 [ 913.680111][ T7865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 913.680129][ T7865] RIP: 0033:0x45b917 [ 913.707659][ T7865] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 913.733158][ T7865] RSP: 002b:0000000000a4f698 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 913.743636][ T7865] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b917 [ 913.743644][ T7865] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 913.743651][ T7865] RBP: 000000000000182d R08: 0000000000000000 R09: 000000000000000a [ 913.743659][ T7865] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 913.743666][ T7865] R13: 0000000000a4fdb0 R14: 000000000100099b R15: 0000000000a4fdc0 [ 913.816070][ T7865] memory: usage 81920kB, limit 0kB, failcnt 45 [ 913.822288][ T7865] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 913.830111][ T7865] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 913.836988][ T7865] Memory cgroup stats for /syz2: cache:124KB rss:74632KB rss_huge:71680KB shmem:0KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:74600KB inactive_file:0KB active_file:0KB unevictable:0KB [ 913.859205][ T7865] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30844,uid=0 [ 913.875507][ T7865] Memory cgroup out of memory: Killed process 30844 (syz-executor.2) total-vm:72580kB, anon-rss:6300kB, file-rss:35856kB, shmem-rss:0kB [ 913.901897][ T1043] oom_reaper: reaped process 30844 (syz-executor.2), now anon-rss:0kB, file-rss:34896kB, shmem-rss:0kB [ 913.913267][ T7867] Memory cgroup out of memory: Killed process 8211 (syz-executor.3) total-vm:72448kB, anon-rss:4244kB, file-rss:35828kB, shmem-rss:0kB [ 913.957419][ T7873] Memory cgroup out of memory: Killed process 8195 (syz-executor.4) total-vm:72448kB, anon-rss:4244kB, file-rss:35828kB, shmem-rss:0kB [ 913.988889][ T7860] Memory cgroup out of memory: Killed process 8159 (syz-executor.0) total-vm:72448kB, anon-rss:4240kB, file-rss:35828kB, shmem-rss:0kB [ 914.006375][ T7876] Memory cgroup out of memory: Killed process 8280 (syz-executor.5) total-vm:72448kB, anon-rss:4240kB, file-rss:35828kB, shmem-rss:0kB [ 914.038660][ T7865] Memory cgroup out of memory: Killed process 8009 (syz-executor.2) total-vm:72580kB, anon-rss:4244kB, file-rss:35836kB, shmem-rss:0kB [ 914.052557][ T7908] device bridge_slave_1 left promiscuous mode [ 914.059853][ T7908] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.079906][ T7867] Memory cgroup out of memory: Killed process 8233 (syz-executor.3) total-vm:72448kB, anon-rss:4244kB, file-rss:35828kB, shmem-rss:0kB [ 914.111203][ T7873] Memory cgroup out of memory: Killed process 8217 (syz-executor.4) total-vm:72448kB, anon-rss:4244kB, file-rss:35828kB, shmem-rss:0kB [ 914.137285][ T7908] device bridge_slave_0 left promiscuous mode [ 914.142048][ T7860] Memory cgroup out of memory: Killed process 8092 (syz-executor.0) total-vm:72448kB, anon-rss:4240kB, file-rss:35824kB, shmem-rss:0kB [ 914.157579][ T7908] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.184493][ T7876] oom_kill_process: 8 callbacks suppressed [ 914.184509][ T7876] syz-executor.5 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 914.204312][ T7876] CPU: 0 PID: 7876 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 914.212218][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 914.222303][ T7876] Call Trace: [ 914.225615][ T7876] dump_stack+0x172/0x1f0 [ 914.229964][ T7876] dump_header+0x10f/0xb6c [ 914.234392][ T7876] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 914.240205][ T7876] ? ___ratelimit+0x60/0x595 [ 914.244805][ T7876] oom_kill_process.cold+0x10/0x15 [ 914.249926][ T7876] out_of_memory+0x79a/0x1280 [ 914.254655][ T7876] ? oom_killer_disable+0x280/0x280 [ 914.259858][ T7876] ? find_held_lock+0x35/0x130 [ 914.266106][ T7876] mem_cgroup_out_of_memory+0x1ca/0x230 [ 914.271661][ T7876] ? memcg_event_wake+0x230/0x230 [ 914.276698][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 914.281819][ T7876] ? _raw_spin_unlock+0x2d/0x50 [ 914.286707][ T7876] try_charge+0x102c/0x15c0 [ 914.291228][ T7876] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 914.296785][ T7876] ? rcu_read_lock_sched_held+0x110/0x130 [ 914.302510][ T7876] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 914.308095][ T7876] __memcg_kmem_charge_memcg+0x7c/0x130 [ 914.313651][ T7876] ? memcg_kmem_put_cache+0xb0/0xb0 [ 914.318852][ T7876] ? cache_grow_begin+0x594/0x860 [ 914.323903][ T7876] ? lockdep_hardirqs_on+0x418/0x5d0 [ 914.329195][ T7876] ? trace_hardirqs_on+0x67/0x230 [ 914.334678][ T7876] cache_grow_begin+0x5c0/0x860 [ 914.339539][ T7876] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 914.345782][ T7876] ? __cpuset_node_allowed+0x136/0x540 [ 914.351262][ T7876] fallback_alloc+0x1fd/0x2d0 [ 914.355952][ T7876] ____cache_alloc_node+0x1be/0x1e0 [ 914.361155][ T7876] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 914.367409][ T7876] kmem_cache_alloc_node+0xe3/0x710 [ 914.373877][ T7876] ? lockdep_hardirqs_on+0x418/0x5d0 [ 914.379169][ T7876] ? trace_hardirqs_on+0x67/0x230 [ 914.384223][ T7876] copy_process.part.0+0x1d08/0x7980 [ 914.389514][ T7876] ? __lock_acquire+0x548/0x3fb0 [ 914.394458][ T7876] ? wp_page_reuse+0x159/0x1d0 [ 914.399235][ T7876] ? __might_fault+0x12b/0x1e0 [ 914.404010][ T7876] ? __cleanup_sighand+0x60/0x60 [ 914.408954][ T7876] ? lock_downgrade+0x880/0x880 [ 914.413822][ T7876] _do_fork+0x257/0xfd0 [ 914.417989][ T7876] ? fork_idle+0x1d0/0x1d0 [ 914.422421][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 914.428089][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 914.433553][ T7876] ? do_syscall_64+0x26/0x610 [ 914.438234][ T7876] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 914.444330][ T7876] ? do_syscall_64+0x26/0x610 [ 914.449025][ T7876] __x64_sys_clone+0xbf/0x150 [ 914.453715][ T7876] do_syscall_64+0x103/0x610 [ 914.458316][ T7876] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 914.464209][ T7876] RIP: 0033:0x45737a [ 914.468108][ T7876] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 914.487723][ T7876] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 914.496141][ T7876] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 914.504138][ T7876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 914.512116][ T7876] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 000000000275d940 [ 914.520093][ T7876] R10: 000000000275dc10 R11: 0000000000000246 R12: 0000000000000001 [ 914.528159][ T7876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 914.538742][ T7876] memory: usage 53328kB, limit 0kB, failcnt 183 [ 914.565650][ T7876] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 914.593943][ T7876] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 914.619178][ T7876] Memory cgroup stats for /syz5: cache:16KB rss:47144KB rss_huge:45056KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:47128KB inactive_file:0KB active_file:0KB unevictable:0KB [ 914.659110][ T7876] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=8300,uid=0 [ 914.689178][ T7876] Memory cgroup out of memory: Killed process 8300 (syz-executor.5) total-vm:72448kB, anon-rss:4240kB, file-rss:35828kB, shmem-rss:0kB [ 914.737889][ T7876] syz-executor.5 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 914.760010][ T7876] CPU: 1 PID: 7876 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 914.767948][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 914.778003][ T7876] Call Trace: [ 914.781320][ T7876] dump_stack+0x172/0x1f0 [ 914.785670][ T7876] dump_header+0x10f/0xb6c [ 914.790088][ T7876] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 914.795898][ T7876] ? ___ratelimit+0x60/0x595 [ 914.800488][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 914.805691][ T7876] oom_kill_process.cold+0x10/0x15 [ 914.810814][ T7876] out_of_memory+0x79a/0x1280 [ 914.815587][ T7876] ? lock_downgrade+0x880/0x880 [ 914.820727][ T7876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 914.826971][ T7876] ? oom_killer_disable+0x280/0x280 [ 914.832176][ T7876] ? find_held_lock+0x35/0x130 [ 914.836963][ T7876] mem_cgroup_out_of_memory+0x1ca/0x230 [ 914.842512][ T7876] ? memcg_event_wake+0x230/0x230 [ 914.847550][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 914.852672][ T7876] ? _raw_spin_unlock+0x2d/0x50 [ 914.857527][ T7876] try_charge+0x102c/0x15c0 [ 914.862045][ T7876] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 914.867659][ T7876] ? rcu_read_lock_sched_held+0x110/0x130 [ 914.873381][ T7876] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 914.878935][ T7876] __memcg_kmem_charge_memcg+0x7c/0x130 [ 914.884482][ T7876] ? memcg_kmem_put_cache+0xb0/0xb0 [ 914.889861][ T7876] ? cache_grow_begin+0x594/0x860 [ 914.894996][ T7876] ? lockdep_hardirqs_on+0x418/0x5d0 [ 914.900305][ T7876] ? trace_hardirqs_on+0x67/0x230 [ 914.905338][ T7876] cache_grow_begin+0x5c0/0x860 [ 914.910214][ T7876] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 914.916456][ T7876] ? __cpuset_node_allowed+0x136/0x540 [ 914.921921][ T7876] fallback_alloc+0x1fd/0x2d0 [ 914.926705][ T7876] ____cache_alloc_node+0x1be/0x1e0 [ 914.931918][ T7876] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 914.938170][ T7876] kmem_cache_alloc_node+0xe3/0x710 [ 914.943371][ T7876] ? lockdep_hardirqs_on+0x418/0x5d0 [ 914.948659][ T7876] ? trace_hardirqs_on+0x67/0x230 [ 914.954674][ T7876] copy_process.part.0+0x1d08/0x7980 [ 914.959965][ T7876] ? __lock_acquire+0x548/0x3fb0 [ 914.964915][ T7876] ? wp_page_reuse+0x159/0x1d0 [ 914.969709][ T7876] ? __might_fault+0x12b/0x1e0 [ 914.974486][ T7876] ? __cleanup_sighand+0x60/0x60 [ 914.979427][ T7876] ? lock_downgrade+0x880/0x880 [ 914.984312][ T7876] _do_fork+0x257/0xfd0 [ 914.988477][ T7876] ? fork_idle+0x1d0/0x1d0 [ 914.992905][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 914.998365][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 915.003825][ T7876] ? do_syscall_64+0x26/0x610 [ 915.008506][ T7876] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 915.014576][ T7876] ? do_syscall_64+0x26/0x610 [ 915.019273][ T7876] __x64_sys_clone+0xbf/0x150 [ 915.023953][ T7876] do_syscall_64+0x103/0x610 [ 915.028574][ T7876] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 915.034474][ T7876] RIP: 0033:0x45737a [ 915.038367][ T7876] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 915.057969][ T7876] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 915.066392][ T7876] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 915.074364][ T7876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 915.082333][ T7876] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 000000000275d940 [ 915.090302][ T7876] R10: 000000000275dc10 R11: 0000000000000246 R12: 0000000000000001 [ 915.098382][ T7876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 915.315853][ T7876] memory: usage 48956kB, limit 0kB, failcnt 189 [ 915.329230][ T7876] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 915.336729][ T7876] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 915.372148][ T7876] Memory cgroup stats for /syz5: cache:16KB rss:42936KB rss_huge:40960KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:42920KB inactive_file:0KB active_file:0KB unevictable:0KB [ 915.429123][ T7876] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=8113,uid=0 [ 915.459155][ T7876] Memory cgroup out of memory: Killed process 8113 (syz-executor.5) total-vm:72448kB, anon-rss:4240kB, file-rss:35824kB, shmem-rss:0kB [ 915.514493][ T7865] syz-executor.2 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 915.542044][ T7865] CPU: 0 PID: 7865 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 915.549966][ T7865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 915.560023][ T7865] Call Trace: [ 915.563321][ T7865] dump_stack+0x172/0x1f0 [ 915.567667][ T7865] dump_header+0x10f/0xb6c [ 915.572094][ T7865] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 915.577905][ T7865] ? ___ratelimit+0x60/0x595 [ 915.582508][ T7865] ? do_raw_spin_unlock+0x57/0x270 [ 915.587650][ T7865] oom_kill_process.cold+0x10/0x15 [ 915.592778][ T7865] out_of_memory+0x79a/0x1280 [ 915.597470][ T7865] ? oom_killer_disable+0x280/0x280 [ 915.602693][ T7865] ? find_held_lock+0x35/0x130 [ 915.607473][ T7865] mem_cgroup_out_of_memory+0x1ca/0x230 [ 915.613025][ T7865] ? memcg_event_wake+0x230/0x230 [ 915.618060][ T7865] ? do_raw_spin_unlock+0x57/0x270 [ 915.623179][ T7865] ? _raw_spin_unlock+0x2d/0x50 [ 915.628035][ T7865] try_charge+0x102c/0x15c0 [ 915.632553][ T7865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 915.638108][ T7865] ? rcu_read_lock_sched_held+0x110/0x130 [ 915.643833][ T7865] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 915.649400][ T7865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 915.654977][ T7865] ? memcg_kmem_put_cache+0xb0/0xb0 [ 915.660177][ T7865] ? cache_grow_begin+0x594/0x860 [ 915.665233][ T7865] ? lockdep_hardirqs_on+0x418/0x5d0 [ 915.670529][ T7865] ? trace_hardirqs_on+0x67/0x230 [ 915.675569][ T7865] cache_grow_begin+0x5c0/0x860 [ 915.680437][ T7865] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 915.686693][ T7865] ? __cpuset_node_allowed+0x136/0x540 [ 915.692167][ T7865] fallback_alloc+0x1fd/0x2d0 [ 915.696858][ T7865] ____cache_alloc_node+0x1be/0x1e0 [ 915.702066][ T7865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 915.708335][ T7865] kmem_cache_alloc+0x1e8/0x6f0 [ 915.713193][ T7865] ? inet_create+0x2f4/0xe10 [ 915.717799][ T7865] sk_prot_alloc+0x67/0x2e0 [ 915.722312][ T7865] ? lock_downgrade+0x880/0x880 [ 915.727174][ T7865] sk_alloc+0x39/0xf70 [ 915.731256][ T7865] inet_create+0x36a/0xe10 [ 915.735685][ T7865] __sock_create+0x3e6/0x750 [ 915.740288][ T7865] __sys_socket+0x103/0x220 [ 915.744801][ T7865] ? move_addr_to_kernel+0x80/0x80 [ 915.749920][ T7865] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 915.755387][ T7865] ? do_syscall_64+0x26/0x610 [ 915.760076][ T7865] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 915.766156][ T7865] ? do_syscall_64+0x26/0x610 [ 915.770855][ T7865] __x64_sys_socket+0x73/0xb0 [ 915.775546][ T7865] do_syscall_64+0x103/0x610 [ 915.780145][ T7865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 915.786044][ T7865] RIP: 0033:0x45b917 [ 915.789941][ T7865] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 915.809559][ T7865] RSP: 002b:0000000000a4f698 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 915.818081][ T7865] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b917 [ 915.826062][ T7865] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 915.834042][ T7865] RBP: 000000000000182d R08: 0000000000000000 R09: 000000000000000a [ 915.842025][ T7865] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 915.850030][ T7865] R13: 0000000000a4fdb0 R14: 000000000100099b R15: 0000000000a4fdc0 [ 915.875387][ T7865] memory: usage 71072kB, limit 0kB, failcnt 57 [ 915.882727][ T7865] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 915.896577][ T7865] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 915.904939][ T7865] Memory cgroup stats for /syz2: cache:124KB rss:64136KB rss_huge:61440KB shmem:0KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:64104KB inactive_file:0KB active_file:0KB unevictable:0KB [ 915.934115][ T7865] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=8243,uid=0 [ 915.957119][ T7865] Memory cgroup out of memory: Killed process 8243 (syz-executor.2) total-vm:72580kB, anon-rss:4244kB, file-rss:35828kB, shmem-rss:0kB [ 916.019303][ T7867] syz-executor.3 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 916.056060][ T7867] CPU: 0 PID: 7867 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #97 [ 916.063984][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 916.074046][ T7867] Call Trace: [ 916.077391][ T7867] dump_stack+0x172/0x1f0 [ 916.081729][ T7867] dump_header+0x10f/0xb6c [ 916.086155][ T7867] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 916.091970][ T7867] ? ___ratelimit+0x60/0x595 [ 916.096661][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 916.101785][ T7867] oom_kill_process.cold+0x10/0x15 [ 916.106918][ T7867] out_of_memory+0x79a/0x1280 [ 916.111646][ T7867] ? oom_killer_disable+0x280/0x280 [ 916.116850][ T7867] ? find_held_lock+0x35/0x130 [ 916.121642][ T7867] mem_cgroup_out_of_memory+0x1ca/0x230 [ 916.127195][ T7867] ? memcg_event_wake+0x230/0x230 [ 916.132264][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 916.137412][ T7867] ? _raw_spin_unlock+0x2d/0x50 [ 916.142276][ T7867] try_charge+0x102c/0x15c0 [ 916.146793][ T7867] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 916.152348][ T7867] ? rcu_read_lock_sched_held+0x110/0x130 [ 916.158074][ T7867] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 916.163651][ T7867] __memcg_kmem_charge_memcg+0x7c/0x130 [ 916.169206][ T7867] ? memcg_kmem_put_cache+0xb0/0xb0 [ 916.174410][ T7867] ? cache_grow_begin+0x594/0x860 [ 916.179438][ T7867] ? lockdep_hardirqs_on+0x418/0x5d0 [ 916.184729][ T7867] ? trace_hardirqs_on+0x67/0x230 [ 916.189764][ T7867] cache_grow_begin+0x5c0/0x860 [ 916.194639][ T7867] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 916.200889][ T7867] ? __cpuset_node_allowed+0x136/0x540 [ 916.206359][ T7867] fallback_alloc+0x1fd/0x2d0 [ 916.211046][ T7867] ____cache_alloc_node+0x1be/0x1e0 [ 916.216246][ T7867] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 916.222497][ T7867] kmem_cache_alloc+0x1e8/0x6f0 [ 916.227354][ T7867] ? inet_create+0x2f4/0xe10 [ 916.231972][ T7867] sk_prot_alloc+0x67/0x2e0 [ 916.236478][ T7867] ? lock_downgrade+0x880/0x880 [ 916.241333][ T7867] sk_alloc+0x39/0xf70 [ 916.245411][ T7867] inet_create+0x36a/0xe10 [ 916.249842][ T7867] __sock_create+0x3e6/0x750 [ 916.254447][ T7867] __sys_socket+0x103/0x220 [ 916.258961][ T7867] ? move_addr_to_kernel+0x80/0x80 [ 916.265585][ T7867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 916.271065][ T7867] ? do_syscall_64+0x26/0x610 [ 916.275747][ T7867] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 916.281819][ T7867] ? do_syscall_64+0x26/0x610 [ 916.286511][ T7867] __x64_sys_socket+0x73/0xb0 [ 916.291206][ T7867] do_syscall_64+0x103/0x610 [ 916.295805][ T7867] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 916.301701][ T7867] RIP: 0033:0x45b917 [ 916.305595][ T7867] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 916.325479][ T7867] RSP: 002b:0000000000a4f698 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 916.333899][ T7867] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b917 [ 916.341878][ T7867] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 916.349854][ T7867] RBP: 0000000000002c54 R08: 0000000000000000 R09: 000000000000000a [ 916.357852][ T7867] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 916.365831][ T7867] R13: 0000000000a4fdb0 R14: 00000000013a099b R15: 0000000000a4fdc0 [ 916.377990][ T7867] memory: usage 53776kB, limit 0kB, failcnt 57 [ 916.387089][ T7867] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 916.395074][ T7867] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 916.402223][ T7867] Memory cgroup stats for /syz3: cache:0KB rss:47380KB rss_huge:45056KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:47364KB inactive_file:0KB active_file:0KB unevictable:0KB [ 916.423973][ T7867] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=8277,uid=0 [ 916.439981][ T7867] Memory cgroup out of memory: Killed process 8277 (syz-executor.3) total-vm:72448kB, anon-rss:4244kB, file-rss:35828kB, shmem-rss:0kB [ 916.469641][ T7873] syz-executor.4 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=0, oom_score_adj=0 [ 916.482878][ T7873] CPU: 0 PID: 7873 Comm: syz-executor.4 Not tainted 5.1.0-rc7+ #97 [ 916.490785][ T7873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 916.500866][ T7873] Call Trace: [ 916.504191][ T7873] dump_stack+0x172/0x1f0 [ 916.508538][ T7873] dump_header+0x10f/0xb6c [ 916.512971][ T7873] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 916.518809][ T7873] ? ___ratelimit+0x60/0x595 [ 916.523408][ T7873] ? do_raw_spin_unlock+0x57/0x270 [ 916.528535][ T7873] oom_kill_process.cold+0x10/0x15 [ 916.533689][ T7873] out_of_memory+0x79a/0x1280 [ 916.538404][ T7873] ? oom_killer_disable+0x280/0x280 [ 916.543637][ T7873] ? find_held_lock+0x35/0x130 [ 916.548421][ T7873] mem_cgroup_out_of_memory+0x1ca/0x230 [ 916.553973][ T7873] ? memcg_event_wake+0x230/0x230 [ 916.559010][ T7873] ? do_raw_spin_unlock+0x57/0x270 [ 916.564142][ T7873] ? _raw_spin_unlock+0x2d/0x50 [ 916.569001][ T7873] try_charge+0x102c/0x15c0 [ 916.573507][ T7873] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 916.579753][ T7873] ? should_fail+0x1de/0x852 [ 916.584355][ T7873] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 916.589913][ T7873] ? rcu_read_lock_sched_held+0x110/0x130 [ 916.595652][ T7873] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 916.601216][ T7873] __memcg_kmem_charge_memcg+0x7c/0x130 [ 916.606763][ T7873] ? memcg_kmem_put_cache+0xb0/0xb0 [ 916.611964][ T7873] ? cache_grow_begin+0x594/0x860 [ 916.616990][ T7873] ? lockdep_hardirqs_on+0x418/0x5d0 [ 916.622285][ T7873] ? trace_hardirqs_on+0x67/0x230 [ 916.627317][ T7873] cache_grow_begin+0x5c0/0x860 [ 916.632181][ T7873] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 916.638426][ T7873] ? __cpuset_node_allowed+0x136/0x540 [ 916.643897][ T7873] fallback_alloc+0x1fd/0x2d0 [ 916.648676][ T7873] ____cache_alloc_node+0x1be/0x1e0 [ 916.653884][ T7873] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 916.660133][ T7873] kmem_cache_alloc+0x1e8/0x6f0 [ 916.665004][ T7873] __alloc_file+0x27/0x300 [ 916.669425][ T7873] alloc_empty_file+0x72/0x170 [ 916.674200][ T7873] alloc_file+0x5e/0x4d0 [ 916.678448][ T7873] alloc_file_pseudo+0x189/0x280 [ 916.683390][ T7873] ? alloc_file+0x4d0/0x4d0 [ 916.687896][ T7873] ? __alloc_fd+0x44d/0x560 [ 916.692411][ T7873] sock_alloc_file+0x4d/0x170 [ 916.697094][ T7873] __sys_socket+0x150/0x220 [ 916.701609][ T7873] ? move_addr_to_kernel+0x80/0x80 [ 916.706733][ T7873] ? do_syscall_64+0x26/0x610 [ 916.711414][ T7873] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 916.717484][ T7873] ? do_syscall_64+0x26/0x610 [ 916.722176][ T7873] __x64_sys_socket+0x73/0xb0 [ 916.726860][ T7873] do_syscall_64+0x103/0x610 [ 916.731461][ T7873] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 916.737355][ T7873] RIP: 0033:0x45b917 [ 916.741254][ T7873] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 916.760860][ T7873] RSP: 002b:0000000000a4f628 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 916.769278][ T7873] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b917 [ 916.777256][ T7873] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 916.785253][ T7873] RBP: 0000000000000706 R08: 0000000000a4f6ac R09: 000000000000000a [ 916.793227][ T7873] R10: 0000000000a4f6b0 R11: 0000000000000246 R12: 0000000000000000 [ 916.801223][ T7873] R13: 0000000000a4fdb0 R14: 00000000000dd7eb R15: 0000000000a4fdc0 [ 916.811599][ T7873] memory: usage 29832kB, limit 0kB, failcnt 51 [ 916.817793][ T7873] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 916.839103][ T7873] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 916.846003][ T7873] Memory cgroup stats for /syz4: cache:76KB rss:25992KB rss_huge:24576KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:25884KB inactive_file:0KB active_file:0KB unevictable:0KB [ 916.919070][ T7873] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=8150,uid=0 [ 916.959189][ T7873] Memory cgroup out of memory: Killed process 8150 (syz-executor.4) total-vm:72448kB, anon-rss:4244kB, file-rss:35824kB, shmem-rss:0kB [ 916.999440][ T7860] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 917.019071][ T7860] CPU: 0 PID: 7860 Comm: syz-executor.0 Not tainted 5.1.0-rc7+ #97 [ 917.026979][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 917.037034][ T7860] Call Trace: [ 917.040337][ T7860] dump_stack+0x172/0x1f0 [ 917.044674][ T7860] dump_header+0x10f/0xb6c [ 917.049096][ T7860] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 917.054906][ T7860] ? ___ratelimit+0x60/0x595 [ 917.059519][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 917.064654][ T7860] oom_kill_process.cold+0x10/0x15 [ 917.069776][ T7860] out_of_memory+0x79a/0x1280 [ 917.074490][ T7860] ? oom_killer_disable+0x280/0x280 [ 917.079697][ T7860] ? find_held_lock+0x35/0x130 [ 917.084477][ T7860] mem_cgroup_out_of_memory+0x1ca/0x230 [ 917.090032][ T7860] ? memcg_event_wake+0x230/0x230 [ 917.095069][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 917.100185][ T7860] ? _raw_spin_unlock+0x2d/0x50 [ 917.105057][ T7860] try_charge+0x102c/0x15c0 [ 917.109584][ T7860] ? find_held_lock+0x35/0x130 [ 917.114370][ T7860] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 917.119922][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 917.125472][ T7860] ? find_held_lock+0x35/0x130 [ 917.130241][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 917.135802][ T7860] __memcg_kmem_charge_memcg+0x7c/0x130 [ 917.141356][ T7860] ? memcg_kmem_put_cache+0xb0/0xb0 [ 917.146560][ T7860] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 917.152115][ T7860] __memcg_kmem_charge+0x136/0x300 [ 917.157238][ T7860] __alloc_pages_nodemask+0x4bf/0x8d0 [ 917.162623][ T7860] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 917.168878][ T7860] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 917.174627][ T7860] ? copy_process.part.0+0x1d08/0x7980 [ 917.180286][ T7860] copy_process.part.0+0x3e0/0x7980 [ 917.185489][ T7860] ? __lock_acquire+0x548/0x3fb0 [ 917.190432][ T7860] ? wp_page_reuse+0x159/0x1d0 [ 917.195215][ T7860] ? __might_fault+0x12b/0x1e0 [ 917.199994][ T7860] ? __cleanup_sighand+0x60/0x60 [ 917.204941][ T7860] ? lock_downgrade+0x880/0x880 [ 917.209811][ T7860] _do_fork+0x257/0xfd0 [ 917.213996][ T7860] ? fork_idle+0x1d0/0x1d0 [ 917.218432][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 917.223894][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 917.229355][ T7860] ? do_syscall_64+0x26/0x610 [ 917.234034][ T7860] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 917.240103][ T7860] ? do_syscall_64+0x26/0x610 [ 917.244790][ T7860] __x64_sys_clone+0xbf/0x150 [ 917.249472][ T7860] do_syscall_64+0x103/0x610 [ 917.254069][ T7860] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 917.259979][ T7860] RIP: 0033:0x45737a [ 917.264365][ T7860] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 917.283975][ T7860] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 917.292390][ T7860] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 917.300362][ T7860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 917.308422][ T7860] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 00000000022b4940 [ 917.316423][ T7860] R10: 00000000022b4c10 R11: 0000000000000246 R12: 0000000000000001 [ 917.324404][ T7860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 917.334714][ T7860] memory: usage 39912kB, limit 0kB, failcnt 197 [ 917.347782][ T7860] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 917.355710][ T7860] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 917.369860][ T7860] Memory cgroup stats for /syz0: cache:44KB rss:34600KB rss_huge:32768KB shmem:80KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:34584KB inactive_file:0KB active_file:0KB unevictable:0KB [ 917.395453][ T7860] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=16919,uid=0 [ 917.416212][ T7860] Memory cgroup out of memory: Killed process 16919 (syz-executor.0) total-vm:72580kB, anon-rss:2208kB, file-rss:35848kB, shmem-rss:0kB [ 917.438854][ T1043] oom_reaper: reaped process 16919 (syz-executor.0), now anon-rss:0kB, file-rss:34888kB, shmem-rss:0kB [ 917.457334][ T7876] syz-executor.5 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 917.479085][ T7876] CPU: 1 PID: 7876 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 917.487053][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 917.497125][ T7876] Call Trace: [ 917.500440][ T7876] dump_stack+0x172/0x1f0 [ 917.504784][ T7876] dump_header+0x10f/0xb6c [ 917.509214][ T7876] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 917.515035][ T7876] ? ___ratelimit+0x60/0x595 [ 917.519652][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 917.524779][ T7876] oom_kill_process.cold+0x10/0x15 [ 917.529913][ T7876] out_of_memory+0x79a/0x1280 [ 917.534623][ T7876] ? oom_killer_disable+0x280/0x280 [ 917.539917][ T7876] ? find_held_lock+0x35/0x130 [ 917.544702][ T7876] mem_cgroup_out_of_memory+0x1ca/0x230 [ 917.550254][ T7876] ? memcg_event_wake+0x230/0x230 [ 917.555309][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 917.560432][ T7876] ? _raw_spin_unlock+0x2d/0x50 [ 917.565302][ T7876] try_charge+0x102c/0x15c0 [ 917.569825][ T7876] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 917.575390][ T7876] ? rcu_read_lock_sched_held+0x110/0x130 [ 917.581124][ T7876] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 917.586707][ T7876] __memcg_kmem_charge_memcg+0x7c/0x130 [ 917.592268][ T7876] ? memcg_kmem_put_cache+0xb0/0xb0 [ 917.597475][ T7876] ? cache_grow_begin+0x594/0x860 [ 917.602509][ T7876] ? lockdep_hardirqs_on+0x418/0x5d0 [ 917.607805][ T7876] ? trace_hardirqs_on+0x67/0x230 [ 917.612841][ T7876] cache_grow_begin+0x5c0/0x860 [ 917.617793][ T7876] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 917.624045][ T7876] ? __cpuset_node_allowed+0x136/0x540 [ 917.629517][ T7876] fallback_alloc+0x1fd/0x2d0 [ 917.634218][ T7876] ____cache_alloc_node+0x1be/0x1e0 [ 917.639423][ T7876] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 917.645701][ T7876] kmem_cache_alloc_node+0xe3/0x710 [ 917.650906][ T7876] ? lockdep_hardirqs_on+0x418/0x5d0 [ 917.656208][ T7876] ? trace_hardirqs_on+0x67/0x230 [ 917.661251][ T7876] copy_process.part.0+0x1d08/0x7980 [ 917.666548][ T7876] ? __lock_acquire+0x548/0x3fb0 [ 917.671493][ T7876] ? wp_page_reuse+0x159/0x1d0 [ 917.676271][ T7876] ? __might_fault+0x12b/0x1e0 [ 917.681054][ T7876] ? __cleanup_sighand+0x60/0x60 [ 917.686004][ T7876] ? lock_downgrade+0x880/0x880 [ 917.690877][ T7876] _do_fork+0x257/0xfd0 [ 917.695043][ T7876] ? fork_idle+0x1d0/0x1d0 [ 917.699474][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 917.704960][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 917.710425][ T7876] ? do_syscall_64+0x26/0x610 [ 917.715107][ T7876] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 917.721194][ T7876] ? do_syscall_64+0x26/0x610 [ 917.725910][ T7876] __x64_sys_clone+0xbf/0x150 [ 917.730598][ T7876] do_syscall_64+0x103/0x610 [ 917.735243][ T7876] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 917.741155][ T7876] RIP: 0033:0x45737a [ 917.745246][ T7876] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 917.764860][ T7876] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 917.773311][ T7876] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 917.781393][ T7876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 917.789399][ T7876] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 000000000275d940 [ 917.797377][ T7876] R10: 000000000275dc10 R11: 0000000000000246 R12: 0000000000000001 [ 917.805355][ T7876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 917.826370][ T7876] memory: usage 44392kB, limit 0kB, failcnt 195 [ 917.839152][ T7876] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 917.846648][ T7876] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 917.874033][ T7876] Memory cgroup stats for /syz5: cache:16KB rss:38728KB rss_huge:36864KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:38712KB inactive_file:0KB active_file:0KB unevictable:0KB [ 917.919084][ T7876] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=8027,uid=0 [ 918.019245][ T7876] Memory cgroup out of memory: Killed process 8027 (syz-executor.5) total-vm:72448kB, anon-rss:4240kB, file-rss:35820kB, shmem-rss:0kB [ 918.074549][ T7865] syz-executor.2 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 918.096461][ T7865] CPU: 0 PID: 7865 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 918.104392][ T7865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 918.114458][ T7865] Call Trace: [ 918.117763][ T7865] dump_stack+0x172/0x1f0 [ 918.122102][ T7865] dump_header+0x10f/0xb6c [ 918.126520][ T7865] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 918.132328][ T7865] ? ___ratelimit+0x60/0x595 [ 918.136920][ T7865] ? do_raw_spin_unlock+0x57/0x270 [ 918.142037][ T7865] oom_kill_process.cold+0x10/0x15 [ 918.147154][ T7865] out_of_memory+0x79a/0x1280 [ 918.151841][ T7865] ? oom_killer_disable+0x280/0x280 [ 918.157041][ T7865] ? find_held_lock+0x35/0x130 [ 918.161818][ T7865] mem_cgroup_out_of_memory+0x1ca/0x230 [ 918.167453][ T7865] ? memcg_event_wake+0x230/0x230 [ 918.172489][ T7865] ? do_raw_spin_unlock+0x57/0x270 [ 918.177613][ T7865] ? _raw_spin_unlock+0x2d/0x50 [ 918.182490][ T7865] try_charge+0x102c/0x15c0 [ 918.187029][ T7865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 918.192616][ T7865] ? rcu_read_lock_sched_held+0x110/0x130 [ 918.198349][ T7865] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 918.203910][ T7865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 918.209461][ T7865] ? memcg_kmem_put_cache+0xb0/0xb0 [ 918.214689][ T7865] ? cache_grow_begin+0x594/0x860 [ 918.219719][ T7865] ? lockdep_hardirqs_on+0x418/0x5d0 [ 918.229704][ T7865] ? trace_hardirqs_on+0x67/0x230 [ 918.234933][ T7865] cache_grow_begin+0x5c0/0x860 [ 918.239788][ T7865] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 918.246037][ T7865] ? __cpuset_node_allowed+0x136/0x540 [ 918.251512][ T7865] fallback_alloc+0x1fd/0x2d0 [ 918.256211][ T7865] ____cache_alloc_node+0x1be/0x1e0 [ 918.261411][ T7865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 918.269152][ T7865] kmem_cache_alloc+0x1e8/0x6f0 [ 918.274010][ T7865] ? inet_create+0x2f4/0xe10 [ 918.278620][ T7865] sk_prot_alloc+0x67/0x2e0 [ 918.283136][ T7865] ? lock_downgrade+0x880/0x880 [ 918.287995][ T7865] sk_alloc+0x39/0xf70 [ 918.292074][ T7865] inet_create+0x36a/0xe10 [ 918.296505][ T7865] __sock_create+0x3e6/0x750 [ 918.301105][ T7865] __sys_socket+0x103/0x220 [ 918.305628][ T7865] ? move_addr_to_kernel+0x80/0x80 [ 918.310756][ T7865] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 918.316252][ T7865] ? do_syscall_64+0x26/0x610 [ 918.320935][ T7865] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 918.327004][ T7865] ? do_syscall_64+0x26/0x610 [ 918.331695][ T7865] __x64_sys_socket+0x73/0xb0 [ 918.336383][ T7865] do_syscall_64+0x103/0x610 [ 918.340987][ T7865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 918.346883][ T7865] RIP: 0033:0x45b917 [ 918.350785][ T7865] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 918.372297][ T7865] RSP: 002b:0000000000a4f698 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 918.380720][ T7865] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b917 [ 918.388700][ T7865] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 918.396694][ T7865] RBP: 000000000000182d R08: 0000000000000000 R09: 000000000000000a [ 918.404689][ T7865] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 918.412753][ T7865] R13: 0000000000a4fdb0 R14: 000000000100099b R15: 0000000000a4fdc0 [ 918.539118][ T7865] memory: usage 66624kB, limit 0kB, failcnt 63 [ 918.545323][ T7865] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 918.679169][ T7865] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 918.686056][ T7865] Memory cgroup stats for /syz2: cache:124KB rss:59916KB rss_huge:57344KB shmem:0KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:59884KB inactive_file:0KB active_file:0KB unevictable:0KB [ 918.756486][ T7865] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=8030,uid=0 [ 918.779168][ T7865] Memory cgroup out of memory: Killed process 8030 (syz-executor.2) total-vm:72448kB, anon-rss:4236kB, file-rss:35828kB, shmem-rss:0kB [ 918.809408][ T7867] syz-executor.3 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 918.822704][ T7867] CPU: 0 PID: 7867 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #97 [ 918.830599][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 918.840666][ T7867] Call Trace: [ 918.843966][ T7867] dump_stack+0x172/0x1f0 [ 918.848302][ T7867] dump_header+0x10f/0xb6c [ 918.852724][ T7867] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 918.858533][ T7867] ? ___ratelimit+0x60/0x595 [ 918.863126][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 918.868242][ T7867] oom_kill_process.cold+0x10/0x15 [ 918.873356][ T7867] out_of_memory+0x79a/0x1280 [ 918.878040][ T7867] ? oom_killer_disable+0x280/0x280 [ 918.883238][ T7867] ? find_held_lock+0x35/0x130 [ 918.888015][ T7867] mem_cgroup_out_of_memory+0x1ca/0x230 [ 918.893829][ T7867] ? memcg_event_wake+0x230/0x230 [ 918.898861][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 918.903976][ T7867] ? _raw_spin_unlock+0x2d/0x50 [ 918.909005][ T7867] try_charge+0x102c/0x15c0 [ 918.913522][ T7867] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 918.919108][ T7867] ? rcu_read_lock_sched_held+0x110/0x130 [ 918.924837][ T7867] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 918.930396][ T7867] __memcg_kmem_charge_memcg+0x7c/0x130 [ 918.935943][ T7867] ? memcg_kmem_put_cache+0xb0/0xb0 [ 918.941149][ T7867] ? cache_grow_begin+0x594/0x860 [ 918.946179][ T7867] ? lockdep_hardirqs_on+0x418/0x5d0 [ 918.951478][ T7867] ? trace_hardirqs_on+0x67/0x230 [ 918.956599][ T7867] cache_grow_begin+0x5c0/0x860 [ 918.961472][ T7867] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 918.967717][ T7867] ? __cpuset_node_allowed+0x136/0x540 [ 918.973188][ T7867] fallback_alloc+0x1fd/0x2d0 [ 918.977878][ T7867] ____cache_alloc_node+0x1be/0x1e0 [ 918.983082][ T7867] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 918.989328][ T7867] kmem_cache_alloc+0x1e8/0x6f0 [ 918.994181][ T7867] ? inet_create+0x2f4/0xe10 [ 918.998779][ T7867] sk_prot_alloc+0x67/0x2e0 [ 919.003283][ T7867] ? lock_downgrade+0x880/0x880 [ 919.008245][ T7867] sk_alloc+0x39/0xf70 [ 919.012327][ T7867] inet_create+0x36a/0xe10 [ 919.016772][ T7867] __sock_create+0x3e6/0x750 [ 919.021374][ T7867] __sys_socket+0x103/0x220 [ 919.025882][ T7867] ? move_addr_to_kernel+0x80/0x80 [ 919.031001][ T7867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 919.036463][ T7867] ? do_syscall_64+0x26/0x610 [ 919.041144][ T7867] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 919.047213][ T7867] ? do_syscall_64+0x26/0x610 [ 919.051903][ T7867] __x64_sys_socket+0x73/0xb0 [ 919.056591][ T7867] do_syscall_64+0x103/0x610 [ 919.061206][ T7867] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 919.067098][ T7867] RIP: 0033:0x45b917 [ 919.070994][ T7867] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 919.090615][ T7867] RSP: 002b:0000000000a4f698 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 919.099046][ T7867] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b917 [ 919.107025][ T7867] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 919.115021][ T7867] RBP: 0000000000002c54 R08: 0000000000000000 R09: 000000000000000a [ 919.123000][ T7867] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 919.130982][ T7867] R13: 0000000000a4fdb0 R14: 00000000013a099b R15: 0000000000a4fdc0 [ 919.309090][ T7867] memory: usage 49384kB, limit 0kB, failcnt 63 [ 919.315285][ T7867] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 919.329067][ T7867] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 919.335937][ T7867] Memory cgroup stats for /syz3: cache:0KB rss:43172KB rss_huge:40960KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:43156KB inactive_file:0KB active_file:0KB unevictable:0KB [ 919.379087][ T7867] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=8095,uid=0 [ 919.395917][ T7867] Memory cgroup out of memory: Killed process 8095 (syz-executor.3) total-vm:72448kB, anon-rss:4244kB, file-rss:35824kB, shmem-rss:0kB [ 919.431113][ T1043] oom_reaper: reaped process 8095 (syz-executor.3), now anon-rss:0kB, file-rss:34864kB, shmem-rss:0kB [ 919.444562][ T7867] syz-executor.3 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 919.470673][ T7867] CPU: 0 PID: 7867 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #97 [ 919.478587][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 919.488665][ T7867] Call Trace: [ 919.491972][ T7867] dump_stack+0x172/0x1f0 [ 919.496313][ T7867] dump_header+0x10f/0xb6c [ 919.500740][ T7867] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 919.506563][ T7867] ? ___ratelimit+0x60/0x595 [ 919.511174][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 919.516330][ T7867] oom_kill_process.cold+0x10/0x15 [ 919.521461][ T7867] out_of_memory+0x79a/0x1280 [ 919.526149][ T7867] ? lock_downgrade+0x880/0x880 [ 919.531097][ T7867] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 919.537344][ T7867] ? oom_killer_disable+0x280/0x280 [ 919.542543][ T7867] ? find_held_lock+0x35/0x130 [ 919.547326][ T7867] mem_cgroup_out_of_memory+0x1ca/0x230 [ 919.552881][ T7867] ? memcg_event_wake+0x230/0x230 [ 919.557918][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 919.563035][ T7867] ? _raw_spin_unlock+0x2d/0x50 [ 919.567895][ T7867] try_charge+0x102c/0x15c0 [ 919.572444][ T7867] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 919.578001][ T7867] ? rcu_read_lock_sched_held+0x110/0x130 [ 919.583746][ T7867] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 919.589305][ T7867] __memcg_kmem_charge_memcg+0x7c/0x130 [ 919.594850][ T7867] ? memcg_kmem_put_cache+0xb0/0xb0 [ 919.600050][ T7867] ? cache_grow_begin+0x594/0x860 [ 919.605083][ T7867] ? lockdep_hardirqs_on+0x418/0x5d0 [ 919.610373][ T7867] ? trace_hardirqs_on+0x67/0x230 [ 919.615416][ T7867] cache_grow_begin+0x5c0/0x860 [ 919.620283][ T7867] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 919.626533][ T7867] ? __cpuset_node_allowed+0x136/0x540 [ 919.632005][ T7867] fallback_alloc+0x1fd/0x2d0 [ 919.636701][ T7867] ____cache_alloc_node+0x1be/0x1e0 [ 919.641904][ T7867] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 919.648153][ T7867] kmem_cache_alloc+0x1e8/0x6f0 [ 919.653008][ T7867] ? inet_create+0x2f4/0xe10 [ 919.657616][ T7867] sk_prot_alloc+0x67/0x2e0 [ 919.662143][ T7867] ? lock_downgrade+0x880/0x880 [ 919.667000][ T7867] sk_alloc+0x39/0xf70 [ 919.671079][ T7867] inet_create+0x36a/0xe10 [ 919.675508][ T7867] __sock_create+0x3e6/0x750 [ 919.680111][ T7867] __sys_socket+0x103/0x220 [ 919.684636][ T7867] ? move_addr_to_kernel+0x80/0x80 [ 919.689759][ T7867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 919.695219][ T7867] ? do_syscall_64+0x26/0x610 [ 919.699900][ T7867] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 919.705990][ T7867] ? do_syscall_64+0x26/0x610 [ 919.710683][ T7867] __x64_sys_socket+0x73/0xb0 [ 919.715363][ T7867] do_syscall_64+0x103/0x610 [ 919.719970][ T7867] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 919.725864][ T7867] RIP: 0033:0x45b917 [ 919.729772][ T7867] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 919.749385][ T7867] RSP: 002b:0000000000a4f698 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 919.757805][ T7867] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b917 [ 919.765782][ T7867] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 919.773763][ T7867] RBP: 0000000000002c54 R08: 0000000000000000 R09: 000000000000000a [ 919.781739][ T7867] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 919.789739][ T7867] R13: 0000000000a4fdb0 R14: 00000000013a099b R15: 0000000000a4fdc0 [ 919.798171][ T7867] memory: usage 45008kB, limit 0kB, failcnt 69 [ 919.835933][ T7867] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 919.858095][ T7867] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 919.881235][ T7908] bond3 (unregistering): Released all slaves [ 919.937673][ T7908] bond2 (unregistering): Released all slaves [ 919.978778][ T7908] bond1 (unregistering): Released all slaves [ 920.020915][ T7867] Memory cgroup stats for /syz3: cache:0KB rss:38964KB rss_huge:36864KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:38948KB inactive_file:0KB active_file:0KB unevictable:0KB [ 920.052107][ T7908] device hsr_slave_1 left promiscuous mode [ 920.089099][ T7867] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17047,uid=0 [ 920.109145][ T7867] Memory cgroup out of memory: Killed process 17047 (syz-executor.3) total-vm:72580kB, anon-rss:2212kB, file-rss:35860kB, shmem-rss:0kB [ 920.131062][ T7908] device hsr_slave_0 left promiscuous mode [ 920.155421][ T7873] syz-executor.4 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=0, oom_score_adj=0 [ 920.179109][ T7873] CPU: 0 PID: 7873 Comm: syz-executor.4 Not tainted 5.1.0-rc7+ #97 [ 920.187034][ T7873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 920.187050][ T7873] Call Trace: [ 920.200516][ T7873] dump_stack+0x172/0x1f0 [ 920.204874][ T7873] dump_header+0x10f/0xb6c [ 920.209295][ T7873] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 920.215107][ T7873] ? ___ratelimit+0x60/0x595 [ 920.219698][ T7873] ? do_raw_spin_unlock+0x57/0x270 [ 920.219717][ T7873] oom_kill_process.cold+0x10/0x15 [ 920.219733][ T7873] out_of_memory+0x79a/0x1280 [ 920.219753][ T7873] ? oom_killer_disable+0x280/0x280 [ 920.219765][ T7873] ? find_held_lock+0x35/0x130 [ 920.219790][ T7873] mem_cgroup_out_of_memory+0x1ca/0x230 [ 920.219804][ T7873] ? memcg_event_wake+0x230/0x230 [ 920.219824][ T7873] ? do_raw_spin_unlock+0x57/0x270 [ 920.219839][ T7873] ? _raw_spin_unlock+0x2d/0x50 [ 920.219859][ T7873] try_charge+0x102c/0x15c0 [ 920.245981][ T7873] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 920.256526][ T7873] ? should_fail+0x1de/0x852 [ 920.278745][ T7873] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 920.288869][ T7873] ? rcu_read_lock_sched_held+0x110/0x130 [ 920.288891][ T7873] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 920.300153][ T7873] __memcg_kmem_charge_memcg+0x7c/0x130 [ 920.305704][ T7873] ? memcg_kmem_put_cache+0xb0/0xb0 [ 920.310906][ T7873] ? cache_grow_begin+0x594/0x860 [ 920.315933][ T7873] ? lockdep_hardirqs_on+0x418/0x5d0 [ 920.321226][ T7873] ? trace_hardirqs_on+0x67/0x230 [ 920.321244][ T7873] cache_grow_begin+0x5c0/0x860 [ 920.321260][ T7873] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 920.321274][ T7873] ? __cpuset_node_allowed+0x136/0x540 [ 920.321291][ T7873] fallback_alloc+0x1fd/0x2d0 [ 920.321312][ T7873] ____cache_alloc_node+0x1be/0x1e0 [ 920.321325][ T7873] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 920.321343][ T7873] kmem_cache_alloc+0x1e8/0x6f0 [ 920.321367][ T7873] __alloc_file+0x27/0x300 [ 920.337466][ T7873] alloc_empty_file+0x72/0x170 [ 920.359116][ T7873] alloc_file+0x5e/0x4d0 [ 920.359134][ T7873] alloc_file_pseudo+0x189/0x280 [ 920.359148][ T7873] ? alloc_file+0x4d0/0x4d0 [ 920.359163][ T7873] ? __alloc_fd+0x44d/0x560 [ 920.359187][ T7873] sock_alloc_file+0x4d/0x170 [ 920.359204][ T7873] __sys_socket+0x150/0x220 [ 920.359220][ T7873] ? move_addr_to_kernel+0x80/0x80 [ 920.359236][ T7873] ? do_syscall_64+0x26/0x610 [ 920.359250][ T7873] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 920.359270][ T7873] ? do_syscall_64+0x26/0x610 [ 920.368530][ T7873] __x64_sys_socket+0x73/0xb0 [ 920.397071][ T7873] do_syscall_64+0x103/0x610 [ 920.406791][ T7873] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 920.422167][ T7873] RIP: 0033:0x45b917 [ 920.431405][ T7873] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 920.431412][ T7873] RSP: 002b:0000000000a4f628 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 920.431425][ T7873] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b917 [ 920.431433][ T7873] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 920.431440][ T7873] RBP: 0000000000000706 R08: 0000000000a4f6ac R09: 000000000000000a [ 920.431448][ T7873] R10: 0000000000a4f6b0 R11: 0000000000000246 R12: 0000000000000000 [ 920.431456][ T7873] R13: 0000000000a4fdb0 R14: 00000000000dd7eb R15: 0000000000a4fdc0 [ 920.516907][ T7873] memory: usage 25452kB, limit 0kB, failcnt 57 [ 920.526762][ T7908] team0 (unregistering): Port device team_slave_1 removed [ 920.541840][ T7873] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 920.552411][ T7908] team0 (unregistering): Port device team_slave_0 removed [ 920.565726][ T7908] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 920.575766][ T7873] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 920.583012][ T7873] Memory cgroup stats for /syz4: cache:76KB rss:21692KB rss_huge:20480KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:21676KB inactive_file:0KB active_file:0KB unevictable:0KB [ 920.604712][ T7873] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17077,uid=0 [ 920.628366][ T7873] Memory cgroup out of memory: Killed process 17077 (syz-executor.4) total-vm:72580kB, anon-rss:2212kB, file-rss:35848kB, shmem-rss:0kB [ 920.648735][ T7908] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 920.650530][ T7860] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 920.657887][ T1043] oom_reaper: reaped process 17077 (syz-executor.4), now anon-rss:0kB, file-rss:34888kB, shmem-rss:0kB [ 920.679815][ T7860] CPU: 1 PID: 7860 Comm: syz-executor.0 Not tainted 5.1.0-rc7+ #97 [ 920.687720][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 920.697775][ T7860] Call Trace: [ 920.701077][ T7860] dump_stack+0x172/0x1f0 [ 920.705413][ T7860] dump_header+0x10f/0xb6c [ 920.709833][ T7860] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 920.715648][ T7860] ? ___ratelimit+0x60/0x595 [ 920.720245][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 920.725368][ T7860] oom_kill_process.cold+0x10/0x15 [ 920.730485][ T7860] out_of_memory+0x79a/0x1280 [ 920.735181][ T7860] ? oom_killer_disable+0x280/0x280 [ 920.740408][ T7860] ? find_held_lock+0x35/0x130 [ 920.745188][ T7860] mem_cgroup_out_of_memory+0x1ca/0x230 [ 920.750739][ T7860] ? memcg_event_wake+0x230/0x230 [ 920.755867][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 920.760984][ T7860] ? _raw_spin_unlock+0x2d/0x50 [ 920.765853][ T7860] try_charge+0x102c/0x15c0 [ 920.770364][ T7860] ? find_held_lock+0x35/0x130 [ 920.775151][ T7860] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 920.780704][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 920.786260][ T7860] ? find_held_lock+0x35/0x130 [ 920.791030][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 920.796594][ T7860] __memcg_kmem_charge_memcg+0x7c/0x130 [ 920.802161][ T7860] ? memcg_kmem_put_cache+0xb0/0xb0 [ 920.807368][ T7860] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 920.812924][ T7860] __memcg_kmem_charge+0x136/0x300 [ 920.818048][ T7860] __alloc_pages_nodemask+0x4bf/0x8d0 [ 920.823422][ T7860] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 920.829671][ T7860] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 920.835397][ T7860] ? copy_process.part.0+0x1d08/0x7980 [ 920.840880][ T7860] copy_process.part.0+0x3e0/0x7980 [ 920.846082][ T7860] ? __lock_acquire+0x548/0x3fb0 [ 920.851025][ T7860] ? wp_page_reuse+0x159/0x1d0 [ 920.855813][ T7860] ? __might_fault+0x12b/0x1e0 [ 920.860595][ T7860] ? __cleanup_sighand+0x60/0x60 [ 920.865550][ T7860] ? lock_downgrade+0x880/0x880 [ 920.870421][ T7860] _do_fork+0x257/0xfd0 [ 920.874588][ T7860] ? fork_idle+0x1d0/0x1d0 [ 920.879026][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 920.884488][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 920.889951][ T7860] ? do_syscall_64+0x26/0x610 [ 920.894640][ T7860] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 920.900713][ T7860] ? do_syscall_64+0x26/0x610 [ 920.905401][ T7860] __x64_sys_clone+0xbf/0x150 [ 920.910087][ T7860] do_syscall_64+0x103/0x610 [ 920.914691][ T7860] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 920.920594][ T7860] RIP: 0033:0x45737a [ 920.924505][ T7860] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 920.944116][ T7860] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 920.952560][ T7860] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 920.960535][ T7860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 920.968508][ T7860] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 00000000022b4940 [ 920.976484][ T7860] R10: 00000000022b4c10 R11: 0000000000000246 R12: 0000000000000001 [ 920.984464][ T7860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 920.995742][ T7860] memory: usage 37472kB, limit 0kB, failcnt 203 [ 921.002054][ T7860] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 921.009954][ T7860] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 921.016808][ T7860] Memory cgroup stats for /syz0: cache:44KB rss:32452KB rss_huge:30720KB shmem:80KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:32428KB inactive_file:0KB active_file:0KB unevictable:0KB [ 921.047354][ T7860] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=16870,uid=0 [ 921.084083][ T7860] Memory cgroup out of memory: Killed process 16870 (syz-executor.0) total-vm:72448kB, anon-rss:2200kB, file-rss:35852kB, shmem-rss:0kB [ 921.142564][ T7876] syz-executor.5 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 921.165361][ T7876] CPU: 1 PID: 7876 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 921.173292][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 921.173305][ T7876] Call Trace: [ 921.186684][ T7876] dump_stack+0x172/0x1f0 [ 921.191024][ T7876] dump_header+0x10f/0xb6c [ 921.195458][ T7876] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 921.201269][ T7876] ? ___ratelimit+0x60/0x595 [ 921.205869][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 921.205889][ T7876] oom_kill_process.cold+0x10/0x15 [ 921.216093][ T7876] out_of_memory+0x79a/0x1280 [ 921.220784][ T7876] ? oom_killer_disable+0x280/0x280 [ 921.220803][ T7876] ? find_held_lock+0x35/0x130 [ 921.230744][ T7876] mem_cgroup_out_of_memory+0x1ca/0x230 [ 921.230758][ T7876] ? memcg_event_wake+0x230/0x230 [ 921.230780][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 921.246429][ T7876] ? _raw_spin_unlock+0x2d/0x50 [ 921.251294][ T7876] try_charge+0x102c/0x15c0 [ 921.255813][ T7876] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 921.261369][ T7876] ? rcu_read_lock_sched_held+0x110/0x130 [ 921.261390][ T7876] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 921.273123][ T7876] __memcg_kmem_charge_memcg+0x7c/0x130 [ 921.273145][ T7876] ? memcg_kmem_put_cache+0xb0/0xb0 [ 921.273161][ T7876] ? cache_grow_begin+0x594/0x860 [ 921.273182][ T7876] ? lockdep_hardirqs_on+0x418/0x5d0 [ 921.294207][ T7876] ? trace_hardirqs_on+0x67/0x230 [ 921.299246][ T7876] cache_grow_begin+0x5c0/0x860 [ 921.299266][ T7876] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 921.310357][ T7876] ? __cpuset_node_allowed+0x136/0x540 [ 921.310377][ T7876] fallback_alloc+0x1fd/0x2d0 [ 921.310405][ T7876] ____cache_alloc_node+0x1be/0x1e0 [ 921.325709][ T7876] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 921.331964][ T7876] kmem_cache_alloc_node+0xe3/0x710 [ 921.337192][ T7876] ? lockdep_hardirqs_on+0x418/0x5d0 [ 921.342485][ T7876] ? trace_hardirqs_on+0x67/0x230 [ 921.342507][ T7876] copy_process.part.0+0x1d08/0x7980 [ 921.342524][ T7876] ? __lock_acquire+0x548/0x3fb0 [ 921.342546][ T7876] ? wp_page_reuse+0x159/0x1d0 [ 921.362552][ T7876] ? __might_fault+0x12b/0x1e0 [ 921.367336][ T7876] ? __cleanup_sighand+0x60/0x60 [ 921.372379][ T7876] ? lock_downgrade+0x880/0x880 [ 921.372406][ T7876] _do_fork+0x257/0xfd0 [ 921.381479][ T7876] ? fork_idle+0x1d0/0x1d0 [ 921.381505][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 921.381525][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 921.396816][ T7876] ? do_syscall_64+0x26/0x610 [ 921.401499][ T7876] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 921.401519][ T7876] ? do_syscall_64+0x26/0x610 [ 921.412290][ T7876] __x64_sys_clone+0xbf/0x150 [ 921.412309][ T7876] do_syscall_64+0x103/0x610 [ 921.412328][ T7876] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 921.412347][ T7876] RIP: 0033:0x45737a [ 921.431757][ T7876] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 921.451371][ T7876] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 921.451386][ T7876] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 921.451393][ T7876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 921.451400][ T7876] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 000000000275d940 [ 921.451407][ T7876] R10: 000000000275dc10 R11: 0000000000000246 R12: 0000000000000001 [ 921.451414][ T7876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 921.463249][ T7876] memory: usage 39952kB, limit 0kB, failcnt 201 [ 921.494539][ T7876] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 921.522322][ T7876] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 921.534598][ T7876] Memory cgroup stats for /syz5: cache:16KB rss:34520KB rss_huge:32768KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:34504KB inactive_file:0KB active_file:0KB unevictable:0KB [ 921.565555][ T7876] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16961,uid=0 [ 921.589271][ T7876] Memory cgroup out of memory: Killed process 16961 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35856kB, shmem-rss:0kB [ 921.619436][ T7865] syz-executor.2 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 921.648670][ T7908] bond0 (unregistering): Released all slaves [ 921.650939][ T7865] CPU: 1 PID: 7865 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 921.662587][ T7865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 921.672663][ T7865] Call Trace: [ 921.672687][ T7865] dump_stack+0x172/0x1f0 [ 921.672705][ T7865] dump_header+0x10f/0xb6c [ 921.672722][ T7865] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 921.672736][ T7865] ? ___ratelimit+0x60/0x595 [ 921.672759][ T7865] ? do_raw_spin_unlock+0x57/0x270 [ 921.680388][ T7865] oom_kill_process.cold+0x10/0x15 [ 921.680405][ T7865] out_of_memory+0x79a/0x1280 [ 921.680426][ T7865] ? oom_killer_disable+0x280/0x280 [ 921.680446][ T7865] ? find_held_lock+0x35/0x130 [ 921.690659][ T7865] mem_cgroup_out_of_memory+0x1ca/0x230 [ 921.690675][ T7865] ? memcg_event_wake+0x230/0x230 [ 921.690696][ T7865] ? do_raw_spin_unlock+0x57/0x270 [ 921.690716][ T7865] ? _raw_spin_unlock+0x2d/0x50 [ 921.700407][ T7865] try_charge+0x102c/0x15c0 [ 921.700431][ T7865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 921.700453][ T7865] ? rcu_read_lock_sched_held+0x110/0x130 [ 921.700474][ T7865] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 921.710284][ T7865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 921.710300][ T7865] ? memcg_kmem_put_cache+0xb0/0xb0 [ 921.710315][ T7865] ? cache_grow_begin+0x594/0x860 [ 921.710336][ T7865] ? lockdep_hardirqs_on+0x418/0x5d0 [ 921.720291][ T7865] ? trace_hardirqs_on+0x67/0x230 [ 921.720312][ T7865] cache_grow_begin+0x5c0/0x860 [ 921.720329][ T7865] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 921.720349][ T7865] ? __cpuset_node_allowed+0x136/0x540 [ 921.730901][ T7865] fallback_alloc+0x1fd/0x2d0 [ 921.730924][ T7865] ____cache_alloc_node+0x1be/0x1e0 [ 921.730938][ T7865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 921.730957][ T7865] kmem_cache_alloc+0x1e8/0x6f0 [ 921.740916][ T7865] ? inet_create+0x2f4/0xe10 [ 921.740937][ T7865] sk_prot_alloc+0x67/0x2e0 [ 921.740951][ T7865] ? lock_downgrade+0x880/0x880 [ 921.740966][ T7865] sk_alloc+0x39/0xf70 [ 921.740984][ T7865] inet_create+0x36a/0xe10 [ 921.751065][ T7865] __sock_create+0x3e6/0x750 [ 921.751085][ T7865] __sys_socket+0x103/0x220 [ 921.751100][ T7865] ? move_addr_to_kernel+0x80/0x80 [ 921.751117][ T7865] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 921.751146][ T7865] ? do_syscall_64+0x26/0x610 [ 921.762401][ T7865] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 921.762416][ T7865] ? do_syscall_64+0x26/0x610 [ 921.762437][ T7865] __x64_sys_socket+0x73/0xb0 [ 921.762453][ T7865] do_syscall_64+0x103/0x610 [ 921.762478][ T7865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 921.773197][ T7865] RIP: 0033:0x45b917 [ 921.773212][ T7865] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 921.773219][ T7865] RSP: 002b:0000000000a4f698 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 921.773231][ T7865] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b917 [ 921.773238][ T7865] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 921.773246][ T7865] RBP: 000000000000182d R08: 0000000000000000 R09: 000000000000000a [ 921.773253][ T7865] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 921.773261][ T7865] R13: 0000000000a4fdb0 R14: 000000000100099b R15: 0000000000a4fdc0 [ 921.885300][ T7865] memory: usage 62216kB, limit 0kB, failcnt 69 [ 921.885318][ T7865] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 922.032834][ T7865] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 922.039843][ T7865] Memory cgroup stats for /syz2: cache:124KB rss:55700KB rss_huge:53248KB shmem:0KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:55676KB inactive_file:0KB active_file:0KB unevictable:0KB [ 922.085910][ T7865] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=8103,uid=0 [ 922.109200][ T7865] Memory cgroup out of memory: Killed process 8103 (syz-executor.2) total-vm:72448kB, anon-rss:4236kB, file-rss:35828kB, shmem-rss:0kB [ 922.133578][ T7867] syz-executor.3 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 922.159162][ T7867] CPU: 0 PID: 7867 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #97 [ 922.167075][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 922.167088][ T7867] Call Trace: [ 922.180458][ T7867] dump_stack+0x172/0x1f0 [ 922.184798][ T7867] dump_header+0x10f/0xb6c [ 922.189218][ T7867] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 922.195027][ T7867] ? ___ratelimit+0x60/0x595 [ 922.199632][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 922.199657][ T7867] oom_kill_process.cold+0x10/0x15 [ 922.199673][ T7867] out_of_memory+0x79a/0x1280 [ 922.199692][ T7867] ? oom_killer_disable+0x280/0x280 [ 922.199704][ T7867] ? find_held_lock+0x35/0x130 [ 922.199729][ T7867] mem_cgroup_out_of_memory+0x1ca/0x230 [ 922.199742][ T7867] ? memcg_event_wake+0x230/0x230 [ 922.199762][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 922.199781][ T7867] ? _raw_spin_unlock+0x2d/0x50 [ 922.230172][ T7867] try_charge+0x102c/0x15c0 [ 922.230195][ T7867] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 922.230215][ T7867] ? rcu_read_lock_sched_held+0x110/0x130 [ 922.230230][ T7867] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 922.230253][ T7867] __memcg_kmem_charge_memcg+0x7c/0x130 [ 922.240654][ T7867] ? memcg_kmem_put_cache+0xb0/0xb0 [ 922.240669][ T7867] ? cache_grow_begin+0x594/0x860 [ 922.240684][ T7867] ? lockdep_hardirqs_on+0x418/0x5d0 [ 922.240699][ T7867] ? trace_hardirqs_on+0x67/0x230 [ 922.240715][ T7867] cache_grow_begin+0x5c0/0x860 [ 922.240730][ T7867] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 922.240744][ T7867] ? __cpuset_node_allowed+0x136/0x540 [ 922.240762][ T7867] fallback_alloc+0x1fd/0x2d0 [ 922.240782][ T7867] ____cache_alloc_node+0x1be/0x1e0 [ 922.240809][ T7867] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 922.268473][ T7867] kmem_cache_alloc+0x1e8/0x6f0 [ 922.279223][ T7867] ? inet_create+0x2f4/0xe10 [ 922.279243][ T7867] sk_prot_alloc+0x67/0x2e0 [ 922.279257][ T7867] ? lock_downgrade+0x880/0x880 [ 922.279272][ T7867] sk_alloc+0x39/0xf70 [ 922.279289][ T7867] inet_create+0x36a/0xe10 [ 922.279312][ T7867] __sock_create+0x3e6/0x750 [ 922.279333][ T7867] __sys_socket+0x103/0x220 [ 922.279349][ T7867] ? move_addr_to_kernel+0x80/0x80 [ 922.279365][ T7867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 922.279385][ T7867] ? do_syscall_64+0x26/0x610 [ 922.294708][ T7867] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 922.327285][ T7867] ? do_syscall_64+0x26/0x610 [ 922.336711][ T7867] __x64_sys_socket+0x73/0xb0 [ 922.350088][ T7867] do_syscall_64+0x103/0x610 [ 922.350109][ T7867] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 922.350121][ T7867] RIP: 0033:0x45b917 [ 922.350135][ T7867] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 922.350143][ T7867] RSP: 002b:0000000000a4f698 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 922.350157][ T7867] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b917 [ 922.350165][ T7867] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 922.350173][ T7867] RBP: 0000000000002c54 R08: 0000000000000000 R09: 000000000000000a [ 922.350180][ T7867] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 922.350188][ T7867] R13: 0000000000a4fdb0 R14: 00000000013a099b R15: 0000000000a4fdc0 [ 922.459133][ T7867] memory: usage 42652kB, limit 0kB, failcnt 75 [ 922.499122][ T7867] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 922.506692][ T7867] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 922.514025][ T7867] Memory cgroup stats for /syz3: cache:0KB rss:36816KB rss_huge:34816KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36792KB inactive_file:0KB active_file:0KB unevictable:0KB [ 922.549064][ T7867] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16903,uid=0 [ 922.577593][T26863] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 922.579116][ T7867] Memory cgroup out of memory: Killed process 16903 (syz-executor.3) total-vm:72580kB, anon-rss:2212kB, file-rss:35852kB, shmem-rss:0kB [ 922.605766][T26863] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 922.623271][ T7867] syz-executor.3 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 922.651791][ T7867] CPU: 0 PID: 7867 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #97 [ 922.655914][T26863] team0: Port device team_slave_0 added [ 922.659708][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 922.659713][ T7867] Call Trace: [ 922.659735][ T7867] dump_stack+0x172/0x1f0 [ 922.659754][ T7867] dump_header+0x10f/0xb6c [ 922.659770][ T7867] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 922.659786][ T7867] ? ___ratelimit+0x60/0x595 [ 922.659801][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 922.659817][ T7867] oom_kill_process.cold+0x10/0x15 [ 922.659838][ T7867] out_of_memory+0x79a/0x1280 [ 922.674276][T26863] team0: Port device team_slave_1 added [ 922.675443][ T7867] ? lock_downgrade+0x880/0x880 [ 922.697832][ T7867] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 922.708032][ T7867] ? oom_killer_disable+0x280/0x280 [ 922.723059][ T7867] ? find_held_lock+0x35/0x130 [ 922.739239][ T7867] mem_cgroup_out_of_memory+0x1ca/0x230 [ 922.744817][ T7867] ? memcg_event_wake+0x230/0x230 [ 922.749853][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 922.749868][ T7867] ? _raw_spin_unlock+0x2d/0x50 [ 922.749885][ T7867] try_charge+0x102c/0x15c0 [ 922.749906][ T7867] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 922.749927][ T7867] ? rcu_read_lock_sched_held+0x110/0x130 [ 922.749944][ T7867] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 922.749967][ T7867] __memcg_kmem_charge_memcg+0x7c/0x130 [ 922.749989][ T7867] ? memcg_kmem_put_cache+0xb0/0xb0 [ 922.775667][ T7867] ? cache_grow_begin+0x594/0x860 [ 922.786836][ T7867] ? lockdep_hardirqs_on+0x418/0x5d0 [ 922.797067][ T7867] ? trace_hardirqs_on+0x67/0x230 [ 922.807362][ T7867] cache_grow_begin+0x5c0/0x860 [ 922.812225][ T7867] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 922.818472][ T7867] ? __cpuset_node_allowed+0x136/0x540 [ 922.823934][ T7867] fallback_alloc+0x1fd/0x2d0 [ 922.823955][ T7867] ____cache_alloc_node+0x1be/0x1e0 [ 922.823969][ T7867] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 922.823986][ T7867] kmem_cache_alloc+0x1e8/0x6f0 [ 922.824000][ T7867] ? inet_create+0x2f4/0xe10 [ 922.824019][ T7867] sk_prot_alloc+0x67/0x2e0 [ 922.824031][ T7867] ? lock_downgrade+0x880/0x880 [ 922.824044][ T7867] sk_alloc+0x39/0xf70 [ 922.824060][ T7867] inet_create+0x36a/0xe10 [ 922.824083][ T7867] __sock_create+0x3e6/0x750 [ 922.845098][ T7867] __sys_socket+0x103/0x220 [ 922.854177][ T7867] ? move_addr_to_kernel+0x80/0x80 [ 922.867480][ T7867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 922.887096][ T7867] ? do_syscall_64+0x26/0x610 [ 922.891782][ T7867] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 922.891795][ T7867] ? do_syscall_64+0x26/0x610 [ 922.891816][ T7867] __x64_sys_socket+0x73/0xb0 [ 922.891832][ T7867] do_syscall_64+0x103/0x610 [ 922.891848][ T7867] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 922.891858][ T7867] RIP: 0033:0x45b917 [ 922.891870][ T7867] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 922.891878][ T7867] RSP: 002b:0000000000a4f698 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 922.891891][ T7867] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b917 [ 922.891899][ T7867] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 922.891914][ T7867] RBP: 0000000000002c54 R08: 0000000000000000 R09: 000000000000000a [ 922.902993][ T7867] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 922.903001][ T7867] R13: 0000000000a4fdb0 R14: 00000000013a099b R15: 0000000000a4fdc0 [ 923.008266][ T7867] memory: usage 40332kB, limit 0kB, failcnt 81 [ 923.021571][ T7867] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 923.033105][ T7867] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 923.045921][T26863] device hsr_slave_0 entered promiscuous mode [ 923.062052][ T7867] Memory cgroup stats for /syz3: cache:0KB rss:34668KB rss_huge:32768KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:34636KB inactive_file:0KB active_file:0KB unevictable:0KB [ 923.109077][ T7867] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16885,uid=0 [ 923.130235][T26863] device hsr_slave_1 entered promiscuous mode [ 923.161467][ T7867] Memory cgroup out of memory: Killed process 16885 (syz-executor.3) total-vm:72448kB, anon-rss:2204kB, file-rss:35852kB, shmem-rss:0kB [ 923.202247][ T1043] oom_reaper: reaped process 16885 (syz-executor.3), now anon-rss:0kB, file-rss:34892kB, shmem-rss:0kB [ 923.220796][ T7873] syz-executor.4 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=0, oom_score_adj=0 [ 923.225754][T26863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 923.245641][T22063] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 923.256573][ T7873] CPU: 0 PID: 7873 Comm: syz-executor.4 Not tainted 5.1.0-rc7+ #97 [ 923.264499][ T7873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 923.274559][ T7873] Call Trace: [ 923.277864][ T7873] dump_stack+0x172/0x1f0 [ 923.282211][ T7873] dump_header+0x10f/0xb6c [ 923.286650][ T7873] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 923.292473][ T7873] ? ___ratelimit+0x60/0x595 [ 923.297078][ T7873] ? do_raw_spin_unlock+0x57/0x270 [ 923.302202][ T7873] oom_kill_process.cold+0x10/0x15 [ 923.307328][ T7873] out_of_memory+0x79a/0x1280 [ 923.312018][ T7873] ? oom_killer_disable+0x280/0x280 [ 923.317223][ T7873] ? find_held_lock+0x35/0x130 [ 923.322003][ T7873] mem_cgroup_out_of_memory+0x1ca/0x230 [ 923.327551][ T7873] ? memcg_event_wake+0x230/0x230 [ 923.332590][ T7873] ? do_raw_spin_unlock+0x57/0x270 [ 923.337734][ T7873] ? _raw_spin_unlock+0x2d/0x50 [ 923.342598][ T7873] try_charge+0x102c/0x15c0 [ 923.347146][ T7873] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 923.353393][ T7873] ? should_fail+0x1de/0x852 [ 923.357995][ T7873] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 923.363553][ T7873] ? rcu_read_lock_sched_held+0x110/0x130 [ 923.369280][ T7873] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 923.374841][ T7873] __memcg_kmem_charge_memcg+0x7c/0x130 [ 923.380398][ T7873] ? memcg_kmem_put_cache+0xb0/0xb0 [ 923.385603][ T7873] ? cache_grow_begin+0x594/0x860 [ 923.390679][ T7873] ? lockdep_hardirqs_on+0x418/0x5d0 [ 923.395967][ T7873] ? trace_hardirqs_on+0x67/0x230 [ 923.401001][ T7873] cache_grow_begin+0x5c0/0x860 [ 923.405858][ T7873] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 923.412103][ T7873] ? __cpuset_node_allowed+0x136/0x540 [ 923.417597][ T7873] fallback_alloc+0x1fd/0x2d0 [ 923.422314][ T7873] ____cache_alloc_node+0x1be/0x1e0 [ 923.427519][ T7873] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 923.433944][ T7873] kmem_cache_alloc+0x1e8/0x6f0 [ 923.438818][ T7873] __alloc_file+0x27/0x300 [ 923.443240][ T7873] alloc_empty_file+0x72/0x170 [ 923.448012][ T7873] alloc_file+0x5e/0x4d0 [ 923.452264][ T7873] alloc_file_pseudo+0x189/0x280 [ 923.457214][ T7873] ? alloc_file+0x4d0/0x4d0 [ 923.461728][ T7873] ? __alloc_fd+0x44d/0x560 [ 923.466245][ T7873] sock_alloc_file+0x4d/0x170 [ 923.470932][ T7873] __sys_socket+0x150/0x220 [ 923.475447][ T7873] ? move_addr_to_kernel+0x80/0x80 [ 923.480593][ T7873] ? do_syscall_64+0x26/0x610 [ 923.485293][ T7873] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 923.491367][ T7873] ? do_syscall_64+0x26/0x610 [ 923.496055][ T7873] __x64_sys_socket+0x73/0xb0 [ 923.500825][ T7873] do_syscall_64+0x103/0x610 [ 923.505425][ T7873] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 923.511318][ T7873] RIP: 0033:0x45b917 [ 923.515217][ T7873] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 923.534931][ T7873] RSP: 002b:0000000000a4f628 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 923.543352][ T7873] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b917 [ 923.551322][ T7873] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 923.559316][ T7873] RBP: 0000000000000706 R08: 0000000000a4f6ac R09: 000000000000000a [ 923.567293][ T7873] R10: 0000000000a4f6b0 R11: 0000000000000246 R12: 0000000000000000 [ 923.575271][ T7873] R13: 0000000000a4fdb0 R14: 00000000000dd7eb R15: 0000000000a4fdc0 [ 923.591766][T22063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 923.619779][T22063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 923.630280][T26863] 8021q: adding VLAN 0 to HW filter on device team0 [ 923.650208][T22063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 923.666598][T22063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 923.675416][T22063] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.682554][T22063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 923.737647][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 923.746194][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 923.762175][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 923.779514][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.786584][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 923.802539][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 923.820057][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 923.828745][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 923.837856][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 923.849719][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 923.858344][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 923.886186][T26863] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 923.898149][T26863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 923.910502][T22064] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 923.918364][T22064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 923.939701][T22064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 923.948213][T22064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 923.957194][T22064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 923.965866][ T7873] memory: usage 23112kB, limit 0kB, failcnt 63 [ 923.976536][T26863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 923.989475][T22064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 923.995348][ T7873] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 924.016141][ T7873] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 924.039111][ T7873] Memory cgroup stats for /syz4: cache:76KB rss:19520KB rss_huge:18432KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:19496KB inactive_file:0KB active_file:0KB unevictable:0KB [ 924.148320][ T7873] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16345,uid=0 [ 924.167159][ T7873] Memory cgroup out of memory: Killed process 16345 (syz-executor.4) total-vm:72580kB, anon-rss:2212kB, file-rss:35812kB, shmem-rss:0kB [ 924.198325][ T7860] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 924.212976][ T7860] CPU: 1 PID: 7860 Comm: syz-executor.0 Not tainted 5.1.0-rc7+ #97 [ 924.220883][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 924.230948][ T7860] Call Trace: [ 924.234254][ T7860] dump_stack+0x172/0x1f0 [ 924.238597][ T7860] dump_header+0x10f/0xb6c [ 924.243039][ T7860] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 924.248859][ T7860] ? ___ratelimit+0x60/0x595 [ 924.253459][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 924.258584][ T7860] oom_kill_process.cold+0x10/0x15 [ 924.264532][ T7860] out_of_memory+0x79a/0x1280 [ 924.270083][ T7860] ? oom_killer_disable+0x280/0x280 [ 924.275291][ T7860] ? find_held_lock+0x35/0x130 [ 924.280080][ T7860] mem_cgroup_out_of_memory+0x1ca/0x230 [ 924.285648][ T7860] ? memcg_event_wake+0x230/0x230 [ 924.290717][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 924.295836][ T7860] ? _raw_spin_unlock+0x2d/0x50 [ 924.300699][ T7860] try_charge+0x102c/0x15c0 [ 924.305210][ T7860] ? find_held_lock+0x35/0x130 [ 924.310086][ T7860] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 924.315642][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 924.321196][ T7860] ? find_held_lock+0x35/0x130 [ 924.325971][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 924.331534][ T7860] __memcg_kmem_charge_memcg+0x7c/0x130 [ 924.337082][ T7860] ? memcg_kmem_put_cache+0xb0/0xb0 [ 924.342287][ T7860] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 924.347846][ T7860] __memcg_kmem_charge+0x136/0x300 [ 924.352970][ T7860] __alloc_pages_nodemask+0x4bf/0x8d0 [ 924.358349][ T7860] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 924.364600][ T7860] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 924.370343][ T7860] ? copy_process.part.0+0x1d08/0x7980 [ 924.376818][ T7860] copy_process.part.0+0x3e0/0x7980 [ 924.382026][ T7860] ? __lock_acquire+0x548/0x3fb0 [ 924.386979][ T7860] ? wp_page_reuse+0x159/0x1d0 [ 924.391760][ T7860] ? __might_fault+0x12b/0x1e0 [ 924.396534][ T7860] ? __cleanup_sighand+0x60/0x60 [ 924.401478][ T7860] ? lock_downgrade+0x880/0x880 [ 924.406350][ T7860] _do_fork+0x257/0xfd0 [ 924.410520][ T7860] ? fork_idle+0x1d0/0x1d0 [ 924.414951][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 924.420415][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 924.425877][ T7860] ? do_syscall_64+0x26/0x610 [ 924.430562][ T7860] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 924.436642][ T7860] ? do_syscall_64+0x26/0x610 [ 924.441333][ T7860] __x64_sys_clone+0xbf/0x150 [ 924.446107][ T7860] do_syscall_64+0x103/0x610 [ 924.450711][ T7860] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 924.456604][ T7860] RIP: 0033:0x45737a [ 924.460521][ T7860] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 924.480132][ T7860] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 924.488563][ T7860] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 924.496543][ T7860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 924.504522][ T7860] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 00000000022b4940 [ 924.512502][ T7860] R10: 00000000022b4c10 R11: 0000000000000246 R12: 0000000000000001 [ 924.520481][ T7860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 924.534662][ T7860] memory: usage 35124kB, limit 0kB, failcnt 209 [ 924.541055][ T7860] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 924.548579][ T7860] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 924.555846][ T7860] Memory cgroup stats for /syz0: cache:44KB rss:30308KB rss_huge:28672KB shmem:80KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:30284KB inactive_file:0KB active_file:0KB unevictable:0KB [ 924.578787][ T7860] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=16935,uid=0 [ 924.594639][ T7860] Memory cgroup out of memory: Killed process 16935 (syz-executor.0) total-vm:72448kB, anon-rss:2200kB, file-rss:35840kB, shmem-rss:0kB [ 924.609951][ T7876] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 924.616135][ T1043] oom_reaper: reaped process 16935 (syz-executor.0), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 924.624250][ T7876] CPU: 1 PID: 7876 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 924.640814][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 924.650867][ T7876] Call Trace: [ 924.650892][ T7876] dump_stack+0x172/0x1f0 [ 924.650911][ T7876] dump_header+0x10f/0xb6c [ 924.650928][ T7876] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 924.650943][ T7876] ? ___ratelimit+0x60/0x595 [ 924.650966][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 924.678432][ T7876] oom_kill_process.cold+0x10/0x15 [ 924.678457][ T7876] out_of_memory+0x79a/0x1280 [ 924.688269][ T7876] ? oom_killer_disable+0x280/0x280 [ 924.693471][ T7876] ? find_held_lock+0x35/0x130 [ 924.698249][ T7876] mem_cgroup_out_of_memory+0x1ca/0x230 [ 924.698264][ T7876] ? memcg_event_wake+0x230/0x230 [ 924.698285][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 924.713937][ T7876] ? _raw_spin_unlock+0x2d/0x50 [ 924.718806][ T7876] try_charge+0x102c/0x15c0 [ 924.718821][ T7876] ? find_held_lock+0x35/0x130 [ 924.718843][ T7876] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 924.733898][ T7876] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 924.733914][ T7876] ? find_held_lock+0x35/0x130 [ 924.733933][ T7876] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 924.750266][ T7876] __memcg_kmem_charge_memcg+0x7c/0x130 [ 924.750283][ T7876] ? memcg_kmem_put_cache+0xb0/0xb0 [ 924.750309][ T7876] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 924.761046][ T7876] __memcg_kmem_charge+0x136/0x300 [ 924.761074][ T7876] __alloc_pages_nodemask+0x4bf/0x8d0 [ 924.771711][ T7876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 924.771732][ T7876] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 924.771749][ T7876] ? copy_process.part.0+0x1d08/0x7980 [ 924.771773][ T7876] ? lockdep_hardirqs_on+0x418/0x5d0 [ 924.800095][ T7876] ? trace_hardirqs_on+0x67/0x230 [ 924.805146][ T7876] copy_process.part.0+0x3e0/0x7980 [ 924.810352][ T7876] ? __lock_acquire+0x548/0x3fb0 [ 924.815298][ T7876] ? wp_page_reuse+0x159/0x1d0 [ 924.820078][ T7876] ? __might_fault+0x12b/0x1e0 [ 924.824857][ T7876] ? __cleanup_sighand+0x60/0x60 [ 924.829806][ T7876] ? lock_downgrade+0x880/0x880 [ 924.834682][ T7876] _do_fork+0x257/0xfd0 [ 924.838850][ T7876] ? fork_idle+0x1d0/0x1d0 [ 924.843284][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 924.848751][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 924.854222][ T7876] ? do_syscall_64+0x26/0x610 [ 924.858911][ T7876] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 924.864980][ T7876] ? do_syscall_64+0x26/0x610 [ 924.869670][ T7876] __x64_sys_clone+0xbf/0x150 [ 924.874457][ T7876] do_syscall_64+0x103/0x610 [ 924.879063][ T7876] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 924.884965][ T7876] RIP: 0033:0x45737a [ 924.888863][ T7876] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 924.908471][ T7876] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 924.916888][ T7876] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 924.924864][ T7876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 924.932835][ T7876] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 000000000275d940 [ 924.940805][ T7876] R10: 000000000275dc10 R11: 0000000000000246 R12: 0000000000000001 [ 924.948776][ T7876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 924.963955][ T7876] memory: usage 37568kB, limit 0kB, failcnt 209 [ 924.970361][ T7876] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 924.977830][ T7876] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 924.985257][ T7876] Memory cgroup stats for /syz5: cache:16KB rss:32372KB rss_huge:30720KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:32348KB inactive_file:0KB active_file:0KB unevictable:0KB [ 925.008216][ T7876] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16913,uid=0 [ 925.024734][ T7876] Memory cgroup out of memory: Killed process 16913 (syz-executor.5) total-vm:72448kB, anon-rss:2200kB, file-rss:35856kB, shmem-rss:0kB [ 925.053811][ T7865] syz-executor.2 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 925.067338][ T7865] CPU: 1 PID: 7865 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 925.075235][ T7865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 925.085292][ T7865] Call Trace: [ 925.088598][ T7865] dump_stack+0x172/0x1f0 [ 925.092954][ T7865] dump_header+0x10f/0xb6c [ 925.097384][ T7865] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 925.103197][ T7865] ? ___ratelimit+0x60/0x595 [ 925.107795][ T7865] ? do_raw_spin_unlock+0x57/0x270 [ 925.112914][ T7865] oom_kill_process.cold+0x10/0x15 [ 925.118031][ T7865] out_of_memory+0x79a/0x1280 [ 925.122727][ T7865] ? oom_killer_disable+0x280/0x280 [ 925.127929][ T7865] ? find_held_lock+0x35/0x130 [ 925.132712][ T7865] mem_cgroup_out_of_memory+0x1ca/0x230 [ 925.138262][ T7865] ? memcg_event_wake+0x230/0x230 [ 925.143306][ T7865] ? do_raw_spin_unlock+0x57/0x270 [ 925.148428][ T7865] ? _raw_spin_unlock+0x2d/0x50 [ 925.153295][ T7865] try_charge+0x102c/0x15c0 [ 925.157816][ T7865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 925.163375][ T7865] ? rcu_read_lock_sched_held+0x110/0x130 [ 925.169101][ T7865] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 925.174671][ T7865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 925.180227][ T7865] ? memcg_kmem_put_cache+0xb0/0xb0 [ 925.185434][ T7865] ? cache_grow_begin+0x594/0x860 [ 925.190468][ T7865] ? lockdep_hardirqs_on+0x418/0x5d0 [ 925.195760][ T7865] ? trace_hardirqs_on+0x67/0x230 [ 925.200792][ T7865] cache_grow_begin+0x5c0/0x860 [ 925.205663][ T7865] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 925.211911][ T7865] ? __cpuset_node_allowed+0x136/0x540 [ 925.217384][ T7865] fallback_alloc+0x1fd/0x2d0 [ 925.222079][ T7865] ____cache_alloc_node+0x1be/0x1e0 [ 925.227280][ T7865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 925.233532][ T7865] kmem_cache_alloc+0x1e8/0x6f0 [ 925.238389][ T7865] ? inet_create+0x2f4/0xe10 [ 925.242989][ T7865] sk_prot_alloc+0x67/0x2e0 [ 925.247494][ T7865] ? lock_downgrade+0x880/0x880 [ 925.252354][ T7865] sk_alloc+0x39/0xf70 [ 925.256432][ T7865] inet_create+0x36a/0xe10 [ 925.260861][ T7865] __sock_create+0x3e6/0x750 [ 925.265465][ T7865] __sys_socket+0x103/0x220 [ 925.269975][ T7865] ? move_addr_to_kernel+0x80/0x80 [ 925.275096][ T7865] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 925.280571][ T7865] ? do_syscall_64+0x26/0x610 [ 925.285265][ T7865] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 925.291335][ T7865] ? do_syscall_64+0x26/0x610 [ 925.296027][ T7865] __x64_sys_socket+0x73/0xb0 [ 925.300714][ T7865] do_syscall_64+0x103/0x610 [ 925.305315][ T7865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 925.311209][ T7865] RIP: 0033:0x45b917 [ 925.315111][ T7865] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 925.334729][ T7865] RSP: 002b:0000000000a4f698 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 925.343155][ T7865] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b917 [ 925.351141][ T7865] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 925.359120][ T7865] RBP: 000000000000182d R08: 0000000000000000 R09: 000000000000000a [ 925.367195][ T7865] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 925.375174][ T7865] R13: 0000000000a4fdb0 R14: 000000000100099b R15: 0000000000a4fdc0 [ 925.391652][ T7865] memory: usage 57748kB, limit 0kB, failcnt 75 [ 925.397834][ T7865] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 925.405538][ T7865] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 925.414164][ T7865] Memory cgroup stats for /syz2: cache:124KB rss:51492KB rss_huge:49152KB shmem:0KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:51468KB inactive_file:0KB active_file:0KB unevictable:0KB [ 925.436311][ T7865] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=8127,uid=0 [ 925.459429][ T7865] Memory cgroup out of memory: Killed process 8127 (syz-executor.2) total-vm:72448kB, anon-rss:4236kB, file-rss:35828kB, shmem-rss:0kB [ 925.503296][ T7867] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 925.525235][ T7867] CPU: 1 PID: 7867 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #97 [ 925.533152][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 925.543310][ T7867] Call Trace: [ 925.546626][ T7867] dump_stack+0x172/0x1f0 [ 925.550967][ T7867] dump_header+0x10f/0xb6c [ 925.555393][ T7867] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 925.561209][ T7867] ? ___ratelimit+0x60/0x595 [ 925.565807][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 925.570930][ T7867] oom_kill_process.cold+0x10/0x15 [ 925.576048][ T7867] out_of_memory+0x79a/0x1280 [ 925.580740][ T7867] ? oom_killer_disable+0x280/0x280 [ 925.585943][ T7867] ? find_held_lock+0x35/0x130 [ 925.590725][ T7867] mem_cgroup_out_of_memory+0x1ca/0x230 [ 925.596275][ T7867] ? memcg_event_wake+0x230/0x230 [ 925.601315][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 925.606439][ T7867] ? _raw_spin_unlock+0x2d/0x50 [ 925.611305][ T7867] try_charge+0x102c/0x15c0 [ 925.615827][ T7867] ? find_held_lock+0x35/0x130 [ 925.620624][ T7867] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 925.626181][ T7867] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 925.631743][ T7867] ? find_held_lock+0x35/0x130 [ 925.636519][ T7867] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 925.642085][ T7867] __memcg_kmem_charge_memcg+0x7c/0x130 [ 925.647654][ T7867] ? memcg_kmem_put_cache+0xb0/0xb0 [ 925.652866][ T7867] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 925.658421][ T7867] __memcg_kmem_charge+0x136/0x300 [ 925.663541][ T7867] __alloc_pages_nodemask+0x4bf/0x8d0 [ 925.668923][ T7867] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 925.675180][ T7867] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 925.680910][ T7867] ? copy_process.part.0+0x1d08/0x7980 [ 925.686393][ T7867] copy_process.part.0+0x3e0/0x7980 [ 925.691599][ T7867] ? __lock_acquire+0x548/0x3fb0 [ 925.696569][ T7867] ? wp_page_reuse+0x159/0x1d0 [ 925.701366][ T7867] ? __might_fault+0x12b/0x1e0 [ 925.706161][ T7867] ? __cleanup_sighand+0x60/0x60 [ 925.711124][ T7867] ? lock_downgrade+0x880/0x880 [ 925.716005][ T7867] _do_fork+0x257/0xfd0 [ 925.720179][ T7867] ? fork_idle+0x1d0/0x1d0 [ 925.724629][ T7867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 925.730101][ T7867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 925.735579][ T7867] ? do_syscall_64+0x26/0x610 [ 925.740268][ T7867] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 925.746338][ T7867] ? do_syscall_64+0x26/0x610 [ 925.751028][ T7867] __x64_sys_clone+0xbf/0x150 [ 925.755714][ T7867] do_syscall_64+0x103/0x610 [ 925.760319][ T7867] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 925.766284][ T7867] RIP: 0033:0x45737a [ 925.770187][ T7867] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 925.789805][ T7867] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 925.798226][ T7867] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 925.806207][ T7867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 925.814204][ T7867] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 000000000139f940 [ 925.822181][ T7867] R10: 000000000139fc10 R11: 0000000000000246 R12: 0000000000000001 [ 925.830167][ T7867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 925.852256][ T7867] memory: usage 37960kB, limit 0kB, failcnt 89 [ 925.858446][ T7867] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 925.873680][ T7867] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 925.883715][ T7867] Memory cgroup stats for /syz3: cache:0KB rss:32516KB rss_huge:30720KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:32492KB inactive_file:0KB active_file:0KB unevictable:0KB [ 925.914242][ T7867] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16953,uid=0 [ 925.936877][ T7867] Memory cgroup out of memory: Killed process 16953 (syz-executor.3) total-vm:72448kB, anon-rss:2204kB, file-rss:35852kB, shmem-rss:0kB [ 925.970680][ T7867] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 925.993856][ T7867] CPU: 0 PID: 7867 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #97 [ 926.001768][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 926.011824][ T7867] Call Trace: [ 926.015124][ T7867] dump_stack+0x172/0x1f0 [ 926.019478][ T7867] dump_header+0x10f/0xb6c [ 926.023899][ T7867] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 926.029709][ T7867] ? ___ratelimit+0x60/0x595 [ 926.034308][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 926.039428][ T7867] oom_kill_process.cold+0x10/0x15 [ 926.044546][ T7867] out_of_memory+0x79a/0x1280 [ 926.049234][ T7867] ? lock_downgrade+0x880/0x880 [ 926.054084][ T7867] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 926.060331][ T7867] ? oom_killer_disable+0x280/0x280 [ 926.065531][ T7867] ? find_held_lock+0x35/0x130 [ 926.070308][ T7867] mem_cgroup_out_of_memory+0x1ca/0x230 [ 926.075860][ T7867] ? memcg_event_wake+0x230/0x230 [ 926.080899][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 926.086024][ T7867] ? _raw_spin_unlock+0x2d/0x50 [ 926.090888][ T7867] try_charge+0x102c/0x15c0 [ 926.095395][ T7867] ? find_held_lock+0x35/0x130 [ 926.100178][ T7867] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 926.105724][ T7867] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 926.111279][ T7867] ? find_held_lock+0x35/0x130 [ 926.116055][ T7867] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 926.121645][ T7867] __memcg_kmem_charge_memcg+0x7c/0x130 [ 926.127197][ T7867] ? memcg_kmem_put_cache+0xb0/0xb0 [ 926.132405][ T7867] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 926.137959][ T7867] __memcg_kmem_charge+0x136/0x300 [ 926.143084][ T7867] __alloc_pages_nodemask+0x4bf/0x8d0 [ 926.148471][ T7867] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 926.154731][ T7867] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 926.160460][ T7867] ? copy_process.part.0+0x1d08/0x7980 [ 926.165934][ T7867] copy_process.part.0+0x3e0/0x7980 [ 926.171138][ T7867] ? __lock_acquire+0x548/0x3fb0 [ 926.176082][ T7867] ? wp_page_reuse+0x159/0x1d0 [ 926.180885][ T7867] ? __might_fault+0x12b/0x1e0 [ 926.185672][ T7867] ? __cleanup_sighand+0x60/0x60 [ 926.190644][ T7867] ? lock_downgrade+0x880/0x880 [ 926.195520][ T7867] _do_fork+0x257/0xfd0 [ 926.199689][ T7867] ? fork_idle+0x1d0/0x1d0 [ 926.204118][ T7867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 926.209587][ T7867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 926.215058][ T7867] ? do_syscall_64+0x26/0x610 [ 926.219748][ T7867] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 926.225822][ T7867] ? do_syscall_64+0x26/0x610 [ 926.230698][ T7867] __x64_sys_clone+0xbf/0x150 [ 926.235380][ T7867] do_syscall_64+0x103/0x610 [ 926.239983][ T7867] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 926.245873][ T7867] RIP: 0033:0x45737a [ 926.249772][ T7867] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 926.270126][ T7867] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 926.278551][ T7867] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 926.286523][ T7867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 926.294492][ T7867] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 000000000139f940 [ 926.302463][ T7867] R10: 000000000139fc10 R11: 0000000000000246 R12: 0000000000000001 [ 926.310437][ T7867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 926.343014][ T7867] memory: usage 35684kB, limit 0kB, failcnt 95 [ 926.353186][ T7867] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 926.365138][ T7867] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 926.381251][ T7867] Memory cgroup stats for /syz3: cache:0KB rss:30364KB rss_huge:28672KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:30348KB inactive_file:0KB active_file:0KB unevictable:0KB [ 926.403086][ T7867] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17004,uid=0 [ 926.419271][ T7867] Memory cgroup out of memory: Killed process 17004 (syz-executor.3) total-vm:72448kB, anon-rss:2204kB, file-rss:35848kB, shmem-rss:0kB [ 926.450008][T26873] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 926.462887][T26873] CPU: 0 PID: 26873 Comm: syz-executor.1 Not tainted 5.1.0-rc7+ #97 [ 926.470881][T26873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 926.480941][T26873] Call Trace: [ 926.484251][T26873] dump_stack+0x172/0x1f0 [ 926.488597][T26873] dump_header+0x10f/0xb6c [ 926.493043][T26873] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 926.498858][T26873] ? ___ratelimit+0x60/0x595 [ 926.503456][T26873] ? do_raw_spin_unlock+0x57/0x270 [ 926.508571][T26873] oom_kill_process.cold+0x10/0x15 [ 926.513706][T26873] out_of_memory+0x79a/0x1280 [ 926.518396][T26873] ? oom_killer_disable+0x280/0x280 [ 926.523625][T26873] mem_cgroup_out_of_memory+0x1ca/0x230 [ 926.529183][T26873] ? memcg_event_wake+0x230/0x230 [ 926.534218][T26873] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 926.540032][T26873] ? cgroup_file_notify+0x140/0x1b0 [ 926.545238][T26873] memory_max_write+0x169/0x300 [ 926.550098][T26873] ? mem_cgroup_write+0x360/0x360 [ 926.555134][T26873] cgroup_file_write+0x245/0x7a0 [ 926.560079][T26873] ? mem_cgroup_write+0x360/0x360 [ 926.565106][T26873] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 926.570758][T26873] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 926.576398][T26873] kernfs_fop_write+0x2ba/0x480 [ 926.581261][T26873] __vfs_write+0x8d/0x110 [ 926.585593][T26873] ? kernfs_fop_open+0xd90/0xd90 [ 926.590557][T26873] vfs_write+0x20c/0x580 [ 926.594808][T26873] ksys_write+0x14f/0x2d0 [ 926.599144][T26873] ? __ia32_sys_read+0xb0/0xb0 [ 926.603925][T26873] __x64_sys_write+0x73/0xb0 [ 926.608519][T26873] ? do_syscall_64+0x5b/0x610 [ 926.613201][T26873] do_syscall_64+0x103/0x610 [ 926.617801][T26873] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 926.623692][T26873] RIP: 0033:0x458da9 [ 926.627594][T26873] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 926.647222][T26873] RSP: 002b:00007fb1e1e1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 926.655653][T26873] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9 [ 926.663650][T26873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 926.671649][T26873] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 926.679633][T26873] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb1e1e1c6d4 [ 926.687625][T26873] R13: 00000000004c880e R14: 00000000004def78 R15: 00000000ffffffff [ 926.697895][T26873] memory: usage 3588kB, limit 0kB, failcnt 208 [ 926.705824][T26873] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 926.720363][T26873] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 926.727547][T26873] Memory cgroup stats for /syz1: cache:20KB rss:2192KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2164KB inactive_file:0KB active_file:0KB unevictable:0KB [ 926.755899][T26873] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=26872,uid=0 [ 926.780477][T26873] Memory cgroup out of memory: Killed process 26872 (syz-executor.1) total-vm:72584kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB [ 926.803784][ T1043] oom_reaper: reaped process 26872 (syz-executor.1), now anon-rss:0kB, file-rss:34804kB, shmem-rss:0kB [ 926.818094][ T7873] syz-executor.4 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=0, oom_score_adj=0 [ 926.879902][ T7873] CPU: 1 PID: 7873 Comm: syz-executor.4 Not tainted 5.1.0-rc7+ #97 [ 926.887916][ T7873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 926.897980][ T7873] Call Trace: [ 926.901289][ T7873] dump_stack+0x172/0x1f0 [ 926.905641][ T7873] dump_header+0x10f/0xb6c [ 926.910074][ T7873] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 926.915887][ T7873] ? ___ratelimit+0x60/0x595 [ 926.920486][ T7873] ? do_raw_spin_unlock+0x57/0x270 [ 926.925607][ T7873] oom_kill_process.cold+0x10/0x15 [ 926.930740][ T7873] out_of_memory+0x79a/0x1280 [ 926.935438][ T7873] ? oom_killer_disable+0x280/0x280 [ 926.940651][ T7873] ? find_held_lock+0x35/0x130 [ 926.945434][ T7873] mem_cgroup_out_of_memory+0x1ca/0x230 [ 926.950986][ T7873] ? memcg_event_wake+0x230/0x230 [ 926.956027][ T7873] ? do_raw_spin_unlock+0x57/0x270 [ 926.961152][ T7873] ? _raw_spin_unlock+0x2d/0x50 [ 926.966022][ T7873] try_charge+0x102c/0x15c0 [ 926.971065][ T7873] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 926.977315][ T7873] ? should_fail+0x1de/0x852 [ 926.981921][ T7873] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 926.987479][ T7873] ? rcu_read_lock_sched_held+0x110/0x130 [ 926.993213][ T7873] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 926.998780][ T7873] __memcg_kmem_charge_memcg+0x7c/0x130 [ 927.004366][ T7873] ? memcg_kmem_put_cache+0xb0/0xb0 [ 927.009569][ T7873] ? cache_grow_begin+0x594/0x860 [ 927.014619][ T7873] ? lockdep_hardirqs_on+0x418/0x5d0 [ 927.019912][ T7873] ? trace_hardirqs_on+0x67/0x230 [ 927.024947][ T7873] cache_grow_begin+0x5c0/0x860 [ 927.029803][ T7873] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 927.036048][ T7873] ? __cpuset_node_allowed+0x136/0x540 [ 927.041520][ T7873] fallback_alloc+0x1fd/0x2d0 [ 927.046220][ T7873] ____cache_alloc_node+0x1be/0x1e0 [ 927.051424][ T7873] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 927.057670][ T7873] kmem_cache_alloc+0x1e8/0x6f0 [ 927.062537][ T7873] __alloc_file+0x27/0x300 [ 927.066970][ T7873] alloc_empty_file+0x72/0x170 [ 927.071743][ T7873] alloc_file+0x5e/0x4d0 [ 927.075993][ T7873] alloc_file_pseudo+0x189/0x280 [ 927.080938][ T7873] ? alloc_file+0x4d0/0x4d0 [ 927.085450][ T7873] ? __alloc_fd+0x44d/0x560 [ 927.089969][ T7873] sock_alloc_file+0x4d/0x170 [ 927.094658][ T7873] __sys_socket+0x150/0x220 [ 927.099177][ T7873] ? move_addr_to_kernel+0x80/0x80 [ 927.104296][ T7873] ? do_syscall_64+0x26/0x610 [ 927.108977][ T7873] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 927.115061][ T7873] ? do_syscall_64+0x26/0x610 [ 927.119769][ T7873] __x64_sys_socket+0x73/0xb0 [ 927.124455][ T7873] do_syscall_64+0x103/0x610 [ 927.129053][ T7873] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 927.134948][ T7873] RIP: 0033:0x45b917 [ 927.138846][ T7873] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 927.158449][ T7873] RSP: 002b:0000000000a4f628 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 927.166861][ T7873] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b917 [ 927.174918][ T7873] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 927.182893][ T7873] RBP: 0000000000000706 R08: 0000000000a4f6ac R09: 000000000000000a [ 927.190864][ T7873] R10: 0000000000a4f6b0 R11: 0000000000000246 R12: 0000000000000000 [ 927.198838][ T7873] R13: 0000000000a4fdb0 R14: 00000000000dd7eb R15: 0000000000a4fdc0 [ 927.299071][ T7873] memory: usage 20748kB, limit 0kB, failcnt 69 [ 927.305255][ T7873] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 927.339053][ T7873] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 927.345919][ T7873] Memory cgroup stats for /syz4: cache:76KB rss:17356KB rss_huge:16384KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:17324KB inactive_file:0KB active_file:0KB unevictable:0KB [ 927.439083][ T7873] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=9405,uid=0 [ 927.499133][ T7873] Memory cgroup out of memory: Killed process 9405 (syz-executor.4) total-vm:72580kB, anon-rss:2204kB, file-rss:35816kB, shmem-rss:0kB [ 927.579375][ T7860] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 927.599117][ T7860] CPU: 1 PID: 7860 Comm: syz-executor.0 Not tainted 5.1.0-rc7+ #97 [ 927.607021][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 927.617066][ T7860] Call Trace: [ 927.620362][ T7860] dump_stack+0x172/0x1f0 [ 927.624701][ T7860] dump_header+0x10f/0xb6c [ 927.629209][ T7860] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 927.635021][ T7860] ? ___ratelimit+0x60/0x595 [ 927.639629][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 927.644750][ T7860] oom_kill_process.cold+0x10/0x15 [ 927.649867][ T7860] out_of_memory+0x79a/0x1280 [ 927.654558][ T7860] ? oom_killer_disable+0x280/0x280 [ 927.659755][ T7860] ? find_held_lock+0x35/0x130 [ 927.664532][ T7860] mem_cgroup_out_of_memory+0x1ca/0x230 [ 927.670101][ T7860] ? memcg_event_wake+0x230/0x230 [ 927.675136][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 927.680259][ T7860] ? _raw_spin_unlock+0x2d/0x50 [ 927.685110][ T7860] try_charge+0x102c/0x15c0 [ 927.689631][ T7860] ? find_held_lock+0x35/0x130 [ 927.694406][ T7860] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 927.699954][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 927.705514][ T7860] ? find_held_lock+0x35/0x130 [ 927.710282][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 927.715846][ T7860] __memcg_kmem_charge_memcg+0x7c/0x130 [ 927.721398][ T7860] ? memcg_kmem_put_cache+0xb0/0xb0 [ 927.726602][ T7860] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 927.732175][ T7860] __memcg_kmem_charge+0x136/0x300 [ 927.737296][ T7860] __alloc_pages_nodemask+0x4bf/0x8d0 [ 927.742682][ T7860] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 927.748935][ T7860] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 927.754664][ T7860] ? copy_process.part.0+0x1d08/0x7980 [ 927.760148][ T7860] copy_process.part.0+0x3e0/0x7980 [ 927.765365][ T7860] ? __lock_acquire+0x548/0x3fb0 [ 927.770316][ T7860] ? wp_page_reuse+0x159/0x1d0 [ 927.775098][ T7860] ? __might_fault+0x12b/0x1e0 [ 927.779886][ T7860] ? __cleanup_sighand+0x60/0x60 [ 927.784849][ T7860] ? lock_downgrade+0x880/0x880 [ 927.789726][ T7860] _do_fork+0x257/0xfd0 [ 927.793893][ T7860] ? fork_idle+0x1d0/0x1d0 [ 927.798323][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 927.803787][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 927.809251][ T7860] ? do_syscall_64+0x26/0x610 [ 927.813942][ T7860] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 927.820007][ T7860] ? do_syscall_64+0x26/0x610 [ 927.824692][ T7860] __x64_sys_clone+0xbf/0x150 [ 927.829375][ T7860] do_syscall_64+0x103/0x610 [ 927.833972][ T7860] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 927.839871][ T7860] RIP: 0033:0x45737a [ 927.843769][ T7860] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 927.863372][ T7860] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 927.871784][ T7860] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 927.879764][ T7860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 927.887743][ T7860] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 00000000022b4940 [ 927.895715][ T7860] R10: 00000000022b4c10 R11: 0000000000000246 R12: 0000000000000001 [ 927.903690][ T7860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 927.925754][ T7860] memory: usage 32792kB, limit 0kB, failcnt 215 [ 927.939115][ T7860] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 927.946585][ T7860] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 927.973851][ T7860] Memory cgroup stats for /syz0: cache:44KB rss:28156KB rss_huge:26624KB shmem:80KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:28140KB inactive_file:0KB active_file:0KB unevictable:0KB [ 928.031063][ T7860] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=17075,uid=0 [ 928.072991][ T7860] Memory cgroup out of memory: Killed process 17075 (syz-executor.0) total-vm:72448kB, anon-rss:2200kB, file-rss:35840kB, shmem-rss:0kB [ 928.125778][ T7876] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 928.151774][ T7876] CPU: 0 PID: 7876 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 928.159674][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 928.169730][ T7876] Call Trace: [ 928.173025][ T7876] dump_stack+0x172/0x1f0 [ 928.177367][ T7876] dump_header+0x10f/0xb6c [ 928.181789][ T7876] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 928.187596][ T7876] ? ___ratelimit+0x60/0x595 [ 928.192202][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 928.197318][ T7876] oom_kill_process.cold+0x10/0x15 [ 928.202437][ T7876] out_of_memory+0x79a/0x1280 [ 928.207119][ T7876] ? oom_killer_disable+0x280/0x280 [ 928.212314][ T7876] ? find_held_lock+0x35/0x130 [ 928.217085][ T7876] mem_cgroup_out_of_memory+0x1ca/0x230 [ 928.222796][ T7876] ? memcg_event_wake+0x230/0x230 [ 928.231142][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 928.236256][ T7876] ? _raw_spin_unlock+0x2d/0x50 [ 928.241112][ T7876] try_charge+0x102c/0x15c0 [ 928.245619][ T7876] ? find_held_lock+0x35/0x130 [ 928.250400][ T7876] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 928.255953][ T7876] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 928.261504][ T7876] ? find_held_lock+0x35/0x130 [ 928.266995][ T7876] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 928.272583][ T7876] __memcg_kmem_charge_memcg+0x7c/0x130 [ 928.278138][ T7876] ? memcg_kmem_put_cache+0xb0/0xb0 [ 928.283338][ T7876] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 928.288890][ T7876] __memcg_kmem_charge+0x136/0x300 [ 928.294013][ T7876] __alloc_pages_nodemask+0x4bf/0x8d0 [ 928.299384][ T7876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 928.305634][ T7876] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 928.311363][ T7876] ? copy_process.part.0+0x1d08/0x7980 [ 928.316830][ T7876] ? lockdep_hardirqs_on+0x418/0x5d0 [ 928.322119][ T7876] ? trace_hardirqs_on+0x67/0x230 [ 928.327148][ T7876] copy_process.part.0+0x3e0/0x7980 [ 928.332350][ T7876] ? __lock_acquire+0x548/0x3fb0 [ 928.337287][ T7876] ? wp_page_reuse+0x159/0x1d0 [ 928.342065][ T7876] ? __might_fault+0x12b/0x1e0 [ 928.346843][ T7876] ? __cleanup_sighand+0x60/0x60 [ 928.351790][ T7876] ? lock_downgrade+0x880/0x880 [ 928.356668][ T7876] _do_fork+0x257/0xfd0 [ 928.360831][ T7876] ? fork_idle+0x1d0/0x1d0 [ 928.365255][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 928.371052][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 928.376500][ T7876] ? do_syscall_64+0x26/0x610 [ 928.381182][ T7876] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 928.387246][ T7876] ? do_syscall_64+0x26/0x610 [ 928.391929][ T7876] __x64_sys_clone+0xbf/0x150 [ 928.396607][ T7876] do_syscall_64+0x103/0x610 [ 928.401217][ T7876] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 928.407111][ T7876] RIP: 0033:0x45737a [ 928.411006][ T7876] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 928.430605][ T7876] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 928.439036][ T7876] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 928.447007][ T7876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 928.454974][ T7876] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 000000000275d940 [ 928.462944][ T7876] R10: 000000000275dc10 R11: 0000000000000246 R12: 0000000000000001 [ 928.470916][ T7876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 928.699172][ T7876] memory: usage 35240kB, limit 0kB, failcnt 215 [ 928.705458][ T7876] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 928.734803][ T7876] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 928.741765][ T7876] Memory cgroup stats for /syz5: cache:16KB rss:30220KB rss_huge:28672KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:30204KB inactive_file:0KB active_file:0KB unevictable:0KB [ 928.784088][ T7876] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17020,uid=0 [ 928.809323][ T7876] Memory cgroup out of memory: Killed process 17020 (syz-executor.5) total-vm:72448kB, anon-rss:2200kB, file-rss:35848kB, shmem-rss:0kB [ 928.849387][ T7865] syz-executor.2 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 928.886021][ T7865] CPU: 1 PID: 7865 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 928.893929][ T7865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 928.903989][ T7865] Call Trace: [ 928.907287][ T7865] dump_stack+0x172/0x1f0 [ 928.911639][ T7865] dump_header+0x10f/0xb6c [ 928.916064][ T7865] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 928.921908][ T7865] ? ___ratelimit+0x60/0x595 [ 928.926498][ T7865] ? do_raw_spin_unlock+0x57/0x270 [ 928.931635][ T7865] oom_kill_process.cold+0x10/0x15 [ 928.936764][ T7865] out_of_memory+0x79a/0x1280 [ 928.941448][ T7865] ? oom_killer_disable+0x280/0x280 [ 928.946649][ T7865] ? find_held_lock+0x35/0x130 [ 928.951429][ T7865] mem_cgroup_out_of_memory+0x1ca/0x230 [ 928.956974][ T7865] ? memcg_event_wake+0x230/0x230 [ 928.962007][ T7865] ? do_raw_spin_unlock+0x57/0x270 [ 928.967120][ T7865] ? _raw_spin_unlock+0x2d/0x50 [ 928.971984][ T7865] try_charge+0x102c/0x15c0 [ 928.976498][ T7865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 928.982057][ T7865] ? rcu_read_lock_sched_held+0x110/0x130 [ 928.987781][ T7865] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 928.993339][ T7865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 928.998902][ T7865] ? memcg_kmem_put_cache+0xb0/0xb0 [ 929.004108][ T7865] ? cache_grow_begin+0x594/0x860 [ 929.009149][ T7865] ? lockdep_hardirqs_on+0x418/0x5d0 [ 929.014449][ T7865] ? trace_hardirqs_on+0x67/0x230 [ 929.019481][ T7865] cache_grow_begin+0x5c0/0x860 [ 929.024339][ T7865] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 929.030589][ T7865] ? __cpuset_node_allowed+0x136/0x540 [ 929.036062][ T7865] fallback_alloc+0x1fd/0x2d0 [ 929.040747][ T7865] ____cache_alloc_node+0x1be/0x1e0 [ 929.045946][ T7865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 929.052191][ T7865] kmem_cache_alloc+0x1e8/0x6f0 [ 929.057046][ T7865] ? inet_create+0x2f4/0xe10 [ 929.061658][ T7865] sk_prot_alloc+0x67/0x2e0 [ 929.066176][ T7865] ? lock_downgrade+0x880/0x880 [ 929.071031][ T7865] sk_alloc+0x39/0xf70 [ 929.075107][ T7865] inet_create+0x36a/0xe10 [ 929.079539][ T7865] __sock_create+0x3e6/0x750 [ 929.084145][ T7865] __sys_socket+0x103/0x220 [ 929.088657][ T7865] ? move_addr_to_kernel+0x80/0x80 [ 929.093772][ T7865] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 929.099235][ T7865] ? do_syscall_64+0x26/0x610 [ 929.104006][ T7865] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 929.110075][ T7865] ? do_syscall_64+0x26/0x610 [ 929.114762][ T7865] __x64_sys_socket+0x73/0xb0 [ 929.119446][ T7865] do_syscall_64+0x103/0x610 [ 929.124044][ T7865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 929.129936][ T7865] RIP: 0033:0x45b917 [ 929.133831][ T7865] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 929.153446][ T7865] RSP: 002b:0000000000a4f698 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 929.161856][ T7865] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b917 [ 929.169828][ T7865] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 929.177800][ T7865] RBP: 000000000000182d R08: 0000000000000000 R09: 000000000000000a [ 929.185769][ T7865] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 929.193742][ T7865] R13: 0000000000a4fdb0 R14: 000000000100099b R15: 0000000000a4fdc0 [ 929.210223][ T7865] memory: usage 53324kB, limit 0kB, failcnt 81 [ 929.216402][ T7865] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 929.224425][ T7865] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 929.232370][ T7865] Memory cgroup stats for /syz2: cache:124KB rss:47284KB rss_huge:45056KB shmem:0KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:47260KB inactive_file:0KB active_file:0KB unevictable:0KB [ 929.256042][ T7865] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=8157,uid=0 [ 929.271934][ T7865] Memory cgroup out of memory: Killed process 8157 (syz-executor.2) total-vm:72448kB, anon-rss:4236kB, file-rss:35828kB, shmem-rss:0kB [ 929.286385][ T7867] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 929.288102][ T1043] oom_reaper: reaped process 8157 (syz-executor.2), now anon-rss:0kB, file-rss:34868kB, shmem-rss:0kB [ 929.300432][ T7867] CPU: 1 PID: 7867 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #97 [ 929.317052][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 929.327113][ T7867] Call Trace: [ 929.330415][ T7867] dump_stack+0x172/0x1f0 [ 929.334753][ T7867] dump_header+0x10f/0xb6c [ 929.339181][ T7867] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 929.344999][ T7867] ? ___ratelimit+0x60/0x595 [ 929.349591][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 929.354716][ T7867] oom_kill_process.cold+0x10/0x15 [ 929.359854][ T7867] out_of_memory+0x79a/0x1280 [ 929.364546][ T7867] ? oom_killer_disable+0x280/0x280 [ 929.369748][ T7867] ? find_held_lock+0x35/0x130 [ 929.374521][ T7867] mem_cgroup_out_of_memory+0x1ca/0x230 [ 929.380066][ T7867] ? memcg_event_wake+0x230/0x230 [ 929.385103][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 929.390222][ T7867] ? _raw_spin_unlock+0x2d/0x50 [ 929.395080][ T7867] try_charge+0x102c/0x15c0 [ 929.399580][ T7867] ? find_held_lock+0x35/0x130 [ 929.404374][ T7867] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 929.409956][ T7867] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 929.415506][ T7867] ? find_held_lock+0x35/0x130 [ 929.420274][ T7867] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 929.425834][ T7867] __memcg_kmem_charge_memcg+0x7c/0x130 [ 929.431386][ T7867] ? memcg_kmem_put_cache+0xb0/0xb0 [ 929.436587][ T7867] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 929.442151][ T7867] __memcg_kmem_charge+0x136/0x300 [ 929.447271][ T7867] __alloc_pages_nodemask+0x4bf/0x8d0 [ 929.452652][ T7867] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 929.458903][ T7867] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 929.464638][ T7867] ? copy_process.part.0+0x1d08/0x7980 [ 929.470115][ T7867] copy_process.part.0+0x3e0/0x7980 [ 929.475324][ T7867] ? __lock_acquire+0x548/0x3fb0 [ 929.480264][ T7867] ? wp_page_reuse+0x159/0x1d0 [ 929.485045][ T7867] ? __might_fault+0x12b/0x1e0 [ 929.489822][ T7867] ? __cleanup_sighand+0x60/0x60 [ 929.494770][ T7867] ? lock_downgrade+0x880/0x880 [ 929.499651][ T7867] _do_fork+0x257/0xfd0 [ 929.503823][ T7867] ? fork_idle+0x1d0/0x1d0 [ 929.508252][ T7867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 929.513713][ T7867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 929.519179][ T7867] ? do_syscall_64+0x26/0x610 [ 929.523861][ T7867] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 929.529927][ T7867] ? do_syscall_64+0x26/0x610 [ 929.534627][ T7867] __x64_sys_clone+0xbf/0x150 [ 929.539310][ T7867] do_syscall_64+0x103/0x610 [ 929.543905][ T7867] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 929.549796][ T7867] RIP: 0033:0x45737a [ 929.553691][ T7867] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 929.573292][ T7867] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 929.581704][ T7867] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 929.589674][ T7867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 929.597644][ T7867] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 000000000139f940 [ 929.605629][ T7867] R10: 000000000139fc10 R11: 0000000000000246 R12: 0000000000000001 [ 929.613632][ T7867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 929.626007][ T7867] memory: usage 33316kB, limit 0kB, failcnt 101 [ 929.632833][ T7867] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 929.640706][ T7867] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 929.647560][ T7867] Memory cgroup stats for /syz3: cache:0KB rss:28220KB rss_huge:26624KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:28204KB inactive_file:0KB active_file:0KB unevictable:0KB [ 929.669419][ T7867] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17086,uid=0 [ 929.685269][ T7867] Memory cgroup out of memory: Killed process 17086 (syz-executor.3) total-vm:72448kB, anon-rss:2204kB, file-rss:35848kB, shmem-rss:0kB [ 929.699720][T26863] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 929.700975][ T1043] oom_reaper: reaped process 17086 (syz-executor.3), now anon-rss:0kB, file-rss:34888kB, shmem-rss:0kB [ 929.712121][T26863] CPU: 1 PID: 26863 Comm: syz-executor.1 Not tainted 5.1.0-rc7+ #97 [ 929.728719][T26863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 929.738768][T26863] Call Trace: [ 929.742063][T26863] dump_stack+0x172/0x1f0 [ 929.746403][T26863] dump_header+0x10f/0xb6c [ 929.750850][T26863] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 929.756661][T26863] ? ___ratelimit+0x60/0x595 [ 929.761251][T26863] ? do_raw_spin_unlock+0x57/0x270 [ 929.766372][T26863] oom_kill_process.cold+0x10/0x15 [ 929.771490][T26863] out_of_memory+0x79a/0x1280 [ 929.776180][T26863] ? oom_killer_disable+0x280/0x280 [ 929.781372][T26863] ? find_held_lock+0x35/0x130 [ 929.786153][T26863] mem_cgroup_out_of_memory+0x1ca/0x230 [ 929.791699][T26863] ? memcg_event_wake+0x230/0x230 [ 929.796729][T26863] ? do_raw_spin_unlock+0x57/0x270 [ 929.801846][T26863] ? _raw_spin_unlock+0x2d/0x50 [ 929.806695][T26863] try_charge+0x102c/0x15c0 [ 929.811202][T26863] ? find_held_lock+0x35/0x130 [ 929.815976][T26863] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 929.821526][T26863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 929.827768][T26863] ? kasan_check_read+0x11/0x20 [ 929.832631][T26863] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 929.838185][T26863] mem_cgroup_try_charge+0x24d/0x5e0 [ 929.843480][T26863] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 929.849118][T26863] wp_page_copy+0x408/0x1740 [ 929.853715][T26863] ? find_held_lock+0x35/0x130 [ 929.858486][T26863] ? pmd_pfn+0x1d0/0x1d0 [ 929.862745][T26863] ? lock_downgrade+0x880/0x880 [ 929.867597][T26863] ? swp_swapcount+0x540/0x540 [ 929.872377][T26863] ? kasan_check_read+0x11/0x20 [ 929.877235][T26863] ? do_raw_spin_unlock+0x57/0x270 [ 929.882355][T26863] do_wp_page+0x48e/0x1500 [ 929.886773][T26863] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 929.892156][T26863] __handle_mm_fault+0x22e8/0x3ec0 [ 929.897270][T26863] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 929.902815][T26863] ? find_held_lock+0x35/0x130 [ 929.907572][T26863] ? handle_mm_fault+0x322/0xb30 [ 929.912517][T26863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 929.918754][T26863] ? kasan_check_read+0x11/0x20 [ 929.923606][T26863] handle_mm_fault+0x43f/0xb30 [ 929.928378][T26863] __do_page_fault+0x5ef/0xda0 [ 929.933152][T26863] do_page_fault+0x71/0x581 [ 929.937650][T26863] ? page_fault+0x8/0x30 [ 929.941890][T26863] page_fault+0x1e/0x30 [ 929.946039][T26863] RIP: 0033:0x43191e [ 929.949930][T26863] Code: 00 00 00 48 89 d0 48 83 c4 08 5b 5d c3 0f 1f 80 00 00 00 00 be 01 00 00 00 83 3d 34 4e 62 00 00 74 08 f0 0f b1 33 75 07 eb 1b <0f> b1 33 74 16 48 8d 3b 48 81 ec 80 00 00 00 e8 ee 0e fe ff 48 81 [ 929.969527][T26863] RSP: 002b:0000000000a4fcb0 EFLAGS: 00010246 [ 929.975586][T26863] RAX: 0000000000000000 RBX: 0000000000713640 RCX: 0000000000458114 [ 929.983560][T26863] RDX: 0000000000a4fcd0 RSI: 0000000000000001 RDI: 0000000000008030 [ 929.991521][T26863] RBP: 0000000000008030 R08: 0000000000000001 R09: 00000000013dd940 [ 929.999481][T26863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 930.007441][T26863] R13: 0000000000a4fdb0 R14: 00000000000e199d R15: 0000000000a4fdc0 [ 930.019751][T26863] memory: usage 1012kB, limit 0kB, failcnt 219 [ 930.025920][T26863] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 930.034042][T26863] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 930.052499][T26863] Memory cgroup stats for /syz1: cache:20KB rss:48KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 930.073387][T26863] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=26863,uid=0 [ 930.089207][T26863] Memory cgroup out of memory: Killed process 26863 (syz-executor.1) total-vm:72320kB, anon-rss:76kB, file-rss:34824kB, shmem-rss:0kB [ 930.103868][ T1043] oom_reaper: reaped process 26863 (syz-executor.1), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 930.103946][ T7873] syz-executor.4 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=0, oom_score_adj=0 [ 930.126345][ T7873] CPU: 1 PID: 7873 Comm: syz-executor.4 Not tainted 5.1.0-rc7+ #97 [ 930.134241][ T7873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 930.144297][ T7873] Call Trace: [ 930.147599][ T7873] dump_stack+0x172/0x1f0 [ 930.151950][ T7873] dump_header+0x10f/0xb6c [ 930.156375][ T7873] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 930.162185][ T7873] ? ___ratelimit+0x60/0x595 [ 930.166783][ T7873] ? do_raw_spin_unlock+0x57/0x270 [ 930.171906][ T7873] oom_kill_process.cold+0x10/0x15 [ 930.177027][ T7873] out_of_memory+0x79a/0x1280 [ 930.181737][ T7873] ? oom_killer_disable+0x280/0x280 [ 930.186936][ T7873] ? find_held_lock+0x35/0x130 [ 930.191729][ T7873] mem_cgroup_out_of_memory+0x1ca/0x230 [ 930.197279][ T7873] ? memcg_event_wake+0x230/0x230 [ 930.202319][ T7873] ? do_raw_spin_unlock+0x57/0x270 [ 930.207432][ T7873] ? _raw_spin_unlock+0x2d/0x50 [ 930.212290][ T7873] try_charge+0x102c/0x15c0 [ 930.217054][ T7873] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 930.223295][ T7873] ? should_fail+0x1de/0x852 [ 930.227897][ T7873] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 930.233448][ T7873] ? rcu_read_lock_sched_held+0x110/0x130 [ 930.239253][ T7873] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 930.244809][ T7873] __memcg_kmem_charge_memcg+0x7c/0x130 [ 930.250381][ T7873] ? memcg_kmem_put_cache+0xb0/0xb0 [ 930.255584][ T7873] ? cache_grow_begin+0x594/0x860 [ 930.260642][ T7873] ? lockdep_hardirqs_on+0x418/0x5d0 [ 930.266373][ T7873] ? trace_hardirqs_on+0x67/0x230 [ 930.271410][ T7873] cache_grow_begin+0x5c0/0x860 [ 930.276264][ T7873] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 930.282509][ T7873] ? __cpuset_node_allowed+0x136/0x540 [ 930.287973][ T7873] fallback_alloc+0x1fd/0x2d0 [ 930.292667][ T7873] ____cache_alloc_node+0x1be/0x1e0 [ 930.297870][ T7873] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 930.304115][ T7873] kmem_cache_alloc+0x1e8/0x6f0 [ 930.308984][ T7873] __alloc_file+0x27/0x300 [ 930.313404][ T7873] alloc_empty_file+0x72/0x170 [ 930.318175][ T7873] alloc_file+0x5e/0x4d0 [ 930.322511][ T7873] alloc_file_pseudo+0x189/0x280 [ 930.327470][ T7873] ? alloc_file+0x4d0/0x4d0 [ 930.331978][ T7873] ? __alloc_fd+0x44d/0x560 [ 930.336492][ T7873] sock_alloc_file+0x4d/0x170 [ 930.341182][ T7873] __sys_socket+0x150/0x220 [ 930.345690][ T7873] ? move_addr_to_kernel+0x80/0x80 [ 930.350813][ T7873] ? do_syscall_64+0x26/0x610 [ 930.355492][ T7873] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 930.361563][ T7873] ? do_syscall_64+0x26/0x610 [ 930.366253][ T7873] __x64_sys_socket+0x73/0xb0 [ 930.371489][ T7873] do_syscall_64+0x103/0x610 [ 930.376092][ T7873] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 930.381992][ T7873] RIP: 0033:0x45b917 [ 930.385892][ T7873] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 930.405495][ T7873] RSP: 002b:0000000000a4f628 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 930.413906][ T7873] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b917 [ 930.421881][ T7873] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 930.429853][ T7873] RBP: 0000000000000706 R08: 0000000000a4f6ac R09: 000000000000000a [ 930.437824][ T7873] R10: 0000000000a4f6b0 R11: 0000000000000246 R12: 0000000000000000 [ 930.445796][ T7873] R13: 0000000000a4fdb0 R14: 00000000000dd7eb R15: 0000000000a4fdc0 [ 930.465165][ T7873] memory: usage 18328kB, limit 0kB, failcnt 75 [ 930.484879][ T7873] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 930.509786][ T7873] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 930.529561][ T7873] Memory cgroup stats for /syz4: cache:76KB rss:15184KB rss_huge:14336KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:15152KB inactive_file:0KB active_file:0KB unevictable:0KB [ 930.594897][ T7873] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=12000,uid=0 [ 930.624302][ T7873] Memory cgroup out of memory: Killed process 12000 (syz-executor.4) total-vm:72448kB, anon-rss:2204kB, file-rss:35812kB, shmem-rss:0kB [ 930.664943][ T7860] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 930.699058][ T7860] CPU: 0 PID: 7860 Comm: syz-executor.0 Not tainted 5.1.0-rc7+ #97 [ 930.706957][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 930.717008][ T7860] Call Trace: [ 930.720306][ T7860] dump_stack+0x172/0x1f0 [ 930.724655][ T7860] dump_header+0x10f/0xb6c [ 930.729075][ T7860] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 930.734882][ T7860] ? ___ratelimit+0x60/0x595 [ 930.739478][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 930.744593][ T7860] oom_kill_process.cold+0x10/0x15 [ 930.749718][ T7860] out_of_memory+0x79a/0x1280 [ 930.754404][ T7860] ? oom_killer_disable+0x280/0x280 [ 930.759600][ T7860] ? find_held_lock+0x35/0x130 [ 930.764387][ T7860] mem_cgroup_out_of_memory+0x1ca/0x230 [ 930.769932][ T7860] ? memcg_event_wake+0x230/0x230 [ 930.774963][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 930.780076][ T7860] ? _raw_spin_unlock+0x2d/0x50 [ 930.784928][ T7860] try_charge+0x102c/0x15c0 [ 930.789427][ T7860] ? find_held_lock+0x35/0x130 [ 930.794198][ T7860] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 930.799744][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 930.805289][ T7860] ? find_held_lock+0x35/0x130 [ 930.810057][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 930.815625][ T7860] __memcg_kmem_charge_memcg+0x7c/0x130 [ 930.821181][ T7860] ? memcg_kmem_put_cache+0xb0/0xb0 [ 930.826382][ T7860] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 930.831918][ T7860] __memcg_kmem_charge+0x136/0x300 [ 930.837009][ T7860] __alloc_pages_nodemask+0x4bf/0x8d0 [ 930.842419][ T7860] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 930.848648][ T7860] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 930.854348][ T7860] ? copy_process.part.0+0x1d08/0x7980 [ 930.859792][ T7860] copy_process.part.0+0x3e0/0x7980 [ 930.865005][ T7860] ? __lock_acquire+0x548/0x3fb0 [ 930.869938][ T7860] ? wp_page_reuse+0x159/0x1d0 [ 930.874697][ T7860] ? __might_fault+0x12b/0x1e0 [ 930.880138][ T7860] ? __cleanup_sighand+0x60/0x60 [ 930.885060][ T7860] ? lock_downgrade+0x880/0x880 [ 930.889920][ T7860] _do_fork+0x257/0xfd0 [ 930.894073][ T7860] ? fork_idle+0x1d0/0x1d0 [ 930.898477][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 930.903917][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 930.909374][ T7860] ? do_syscall_64+0x26/0x610 [ 930.914043][ T7860] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 930.920085][ T7860] ? do_syscall_64+0x26/0x610 [ 930.924741][ T7860] __x64_sys_clone+0xbf/0x150 [ 930.929412][ T7860] do_syscall_64+0x103/0x610 [ 930.933995][ T7860] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 930.939870][ T7860] RIP: 0033:0x45737a [ 930.943743][ T7860] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 930.963328][ T7860] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 930.971718][ T7860] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 930.979667][ T7860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 930.987622][ T7860] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 00000000022b4940 [ 930.995575][ T7860] R10: 00000000022b4c10 R11: 0000000000000246 R12: 0000000000000001 [ 931.003546][ T7860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 931.011806][ T7860] memory: usage 30408kB, limit 0kB, failcnt 221 [ 931.018059][ T7860] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 931.018076][ T7860] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 931.032503][ T7860] Memory cgroup stats for /syz0: cache:44KB rss:26004KB rss_huge:24576KB shmem:80KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:25988KB inactive_file:0KB active_file:0KB [ 931.032582][ T7860] unevictable:0KB [ 931.056684][ T7860] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=9443,uid=0 [ 931.074413][ T7860] Memory cgroup out of memory: Killed process 9443 (syz-executor.0) total-vm:72580kB, anon-rss:2200kB, file-rss:35836kB, shmem-rss:0kB [ 931.089870][ T1043] oom_reaper: reaped process 9443 (syz-executor.0), now anon-rss:0kB, file-rss:34876kB, shmem-rss:0kB [ 931.100991][ T7876] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 931.115269][ T7876] CPU: 0 PID: 7876 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 931.123162][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 931.133211][ T7876] Call Trace: [ 931.133235][ T7876] dump_stack+0x172/0x1f0 [ 931.133253][ T7876] dump_header+0x10f/0xb6c [ 931.133269][ T7876] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 931.133284][ T7876] ? ___ratelimit+0x60/0x595 [ 931.133298][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 931.133316][ T7876] oom_kill_process.cold+0x10/0x15 [ 931.133332][ T7876] out_of_memory+0x79a/0x1280 [ 931.133353][ T7876] ? oom_killer_disable+0x280/0x280 [ 931.133365][ T7876] ? find_held_lock+0x35/0x130 [ 931.133387][ T7876] mem_cgroup_out_of_memory+0x1ca/0x230 [ 931.133401][ T7876] ? memcg_event_wake+0x230/0x230 [ 931.133421][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 931.145424][ T7876] ? _raw_spin_unlock+0x2d/0x50 [ 931.155803][ T7876] try_charge+0x102c/0x15c0 [ 931.165999][ T7876] ? find_held_lock+0x35/0x130 [ 931.175853][ T7876] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 931.186141][ T7876] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 931.196276][ T7876] ? find_held_lock+0x35/0x130 [ 931.210356][ T7876] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 931.210383][ T7876] __memcg_kmem_charge_memcg+0x7c/0x130 [ 931.210398][ T7876] ? memcg_kmem_put_cache+0xb0/0xb0 [ 931.210416][ T7876] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 931.210433][ T7876] __memcg_kmem_charge+0x136/0x300 [ 931.210455][ T7876] __alloc_pages_nodemask+0x4bf/0x8d0 [ 931.226286][ T7876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 931.237354][ T7876] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 931.248081][ T7876] ? copy_process.part.0+0x1d08/0x7980 [ 931.258543][ T7876] ? lockdep_hardirqs_on+0x418/0x5d0 [ 931.275922][ T7876] ? trace_hardirqs_on+0x67/0x230 [ 931.286219][ T7876] copy_process.part.0+0x3e0/0x7980 [ 931.291421][ T7876] ? __lock_acquire+0x548/0x3fb0 [ 931.296364][ T7876] ? wp_page_reuse+0x159/0x1d0 [ 931.301141][ T7876] ? __might_fault+0x12b/0x1e0 [ 931.305902][ T7876] ? __cleanup_sighand+0x60/0x60 [ 931.310833][ T7876] ? lock_downgrade+0x880/0x880 [ 931.315683][ T7876] _do_fork+0x257/0xfd0 [ 931.319861][ T7876] ? fork_idle+0x1d0/0x1d0 [ 931.324274][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 931.329726][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 931.335175][ T7876] ? do_syscall_64+0x26/0x610 [ 931.339842][ T7876] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 931.345900][ T7876] ? do_syscall_64+0x26/0x610 [ 931.350571][ T7876] __x64_sys_clone+0xbf/0x150 [ 931.355241][ T7876] do_syscall_64+0x103/0x610 [ 931.359830][ T7876] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 931.365708][ T7876] RIP: 0033:0x45737a [ 931.369592][ T7876] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 931.389206][ T7876] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 931.397639][ T7876] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 931.405620][ T7876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 931.413581][ T7876] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 000000000275d940 [ 931.421541][ T7876] R10: 000000000275dc10 R11: 0000000000000246 R12: 0000000000000001 [ 931.429510][ T7876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 931.437900][ T7876] memory: usage 32824kB, limit 0kB, failcnt 221 [ 931.444270][ T7876] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 931.451825][ T7876] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 931.458692][ T7876] Memory cgroup stats for /syz5: cache:16KB rss:28076KB rss_huge:26624KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:28060KB inactive_file:0KB active_file:0KB unevictable:0KB [ 931.480114][ T7876] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17045,uid=0 [ 931.495557][ T7876] Memory cgroup out of memory: Killed process 17045 (syz-executor.5) total-vm:72448kB, anon-rss:2200kB, file-rss:35848kB, shmem-rss:0kB [ 931.511875][ T7876] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 931.523743][ T7876] CPU: 0 PID: 7876 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 931.531646][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 931.541699][ T7876] Call Trace: [ 931.544988][ T7876] dump_stack+0x172/0x1f0 [ 931.549325][ T7876] dump_header+0x10f/0xb6c [ 931.553746][ T7876] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 931.559558][ T7876] ? ___ratelimit+0x60/0x595 [ 931.559574][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 931.559592][ T7876] oom_kill_process.cold+0x10/0x15 [ 931.559608][ T7876] out_of_memory+0x79a/0x1280 [ 931.559636][ T7876] ? lock_downgrade+0x880/0x880 [ 931.559658][ T7876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 931.559674][ T7876] ? oom_killer_disable+0x280/0x280 [ 931.559686][ T7876] ? find_held_lock+0x35/0x130 [ 931.559709][ T7876] mem_cgroup_out_of_memory+0x1ca/0x230 [ 931.569388][ T7876] ? memcg_event_wake+0x230/0x230 [ 931.569410][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 931.569426][ T7876] ? _raw_spin_unlock+0x2d/0x50 [ 931.569444][ T7876] try_charge+0x102c/0x15c0 [ 931.569456][ T7876] ? find_held_lock+0x35/0x130 [ 931.569479][ T7876] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 931.569493][ T7876] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 931.569507][ T7876] ? find_held_lock+0x35/0x130 [ 931.569522][ T7876] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 931.569547][ T7876] __memcg_kmem_charge_memcg+0x7c/0x130 [ 931.584149][ T7876] ? memcg_kmem_put_cache+0xb0/0xb0 [ 931.615927][ T7876] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 931.625254][ T7876] __memcg_kmem_charge+0x136/0x300 [ 931.656859][ T7876] __alloc_pages_nodemask+0x4bf/0x8d0 [ 931.678022][ T7876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 931.684267][ T7876] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 931.684286][ T7876] ? copy_process.part.0+0x1d08/0x7980 [ 931.684303][ T7876] ? lockdep_hardirqs_on+0x418/0x5d0 [ 931.684328][ T7876] ? trace_hardirqs_on+0x67/0x230 [ 931.705764][ T7876] copy_process.part.0+0x3e0/0x7980 [ 931.710970][ T7876] ? __lock_acquire+0x548/0x3fb0 [ 931.715911][ T7876] ? wp_page_reuse+0x159/0x1d0 [ 931.720708][ T7876] ? __might_fault+0x12b/0x1e0 [ 931.720732][ T7876] ? __cleanup_sighand+0x60/0x60 [ 931.720749][ T7876] ? lock_downgrade+0x880/0x880 [ 931.720778][ T7876] _do_fork+0x257/0xfd0 [ 931.739525][ T7876] ? fork_idle+0x1d0/0x1d0 [ 931.743956][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 931.743976][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 931.754876][ T7876] ? do_syscall_64+0x26/0x610 [ 931.759556][ T7876] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 931.765624][ T7876] ? do_syscall_64+0x26/0x610 [ 931.770313][ T7876] __x64_sys_clone+0xbf/0x150 [ 931.774996][ T7876] do_syscall_64+0x103/0x610 [ 931.775017][ T7876] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 931.785480][ T7876] RIP: 0033:0x45737a [ 931.789377][ T7876] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 931.808993][ T7876] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 931.809007][ T7876] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 931.809015][ T7876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 931.809024][ T7876] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 000000000275d940 [ 931.809031][ T7876] R10: 000000000275dc10 R11: 0000000000000246 R12: 0000000000000001 [ 931.809039][ T7876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 931.811022][ T7876] memory: usage 30552kB, limit 0kB, failcnt 263 [ 931.833579][ T7876] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 931.849604][ T7876] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 931.849622][ T7876] Memory cgroup stats for /syz5: cache:16KB rss:25932KB rss_huge:24576KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:25916KB inactive_file:0KB active_file:0KB unevictable:0KB [ 931.863925][ T7876] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16943,uid=0 [ 931.864033][ T7876] Memory cgroup out of memory: Killed process 16943 (syz-executor.5) total-vm:72448kB, anon-rss:2200kB, file-rss:35844kB, shmem-rss:0kB [ 931.929990][ T7865] syz-executor.2 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 931.942314][ T1043] oom_reaper: reaped process 16943 (syz-executor.5), now anon-rss:0kB, file-rss:34884kB, shmem-rss:0kB [ 931.943573][ T7865] CPU: 0 PID: 7865 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 931.961219][ T7865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 931.961225][ T7865] Call Trace: [ 931.961247][ T7865] dump_stack+0x172/0x1f0 [ 931.961276][ T7865] dump_header+0x10f/0xb6c [ 931.974600][ T7865] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 931.983318][ T7865] ? ___ratelimit+0x60/0x595 [ 931.983334][ T7865] ? do_raw_spin_unlock+0x57/0x270 [ 931.983352][ T7865] oom_kill_process.cold+0x10/0x15 [ 931.983369][ T7865] out_of_memory+0x79a/0x1280 [ 931.983389][ T7865] ? oom_killer_disable+0x280/0x280 [ 931.983401][ T7865] ? find_held_lock+0x35/0x130 [ 931.983424][ T7865] mem_cgroup_out_of_memory+0x1ca/0x230 [ 931.998893][ T7865] ? memcg_event_wake+0x230/0x230 [ 932.008666][ T7865] ? do_raw_spin_unlock+0x57/0x270 [ 932.024118][ T7865] ? _raw_spin_unlock+0x2d/0x50 [ 932.039065][ T7865] try_charge+0x102c/0x15c0 [ 932.039089][ T7865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 932.039110][ T7865] ? rcu_read_lock_sched_held+0x110/0x130 [ 932.039127][ T7865] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 932.039150][ T7865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 932.049195][ T7865] ? memcg_kmem_put_cache+0xb0/0xb0 19:35:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000240)=0x8000) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x1c6, 0x0, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000180)) [ 932.049211][ T7865] ? cache_grow_begin+0x594/0x860 [ 932.049226][ T7865] ? lockdep_hardirqs_on+0x418/0x5d0 [ 932.049242][ T7865] ? trace_hardirqs_on+0x67/0x230 [ 932.049261][ T7865] cache_grow_begin+0x5c0/0x860 [ 932.049279][ T7865] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 932.049294][ T7865] ? __cpuset_node_allowed+0x136/0x540 [ 932.049311][ T7865] fallback_alloc+0x1fd/0x2d0 [ 932.049332][ T7865] ____cache_alloc_node+0x1be/0x1e0 [ 932.113050][ T7865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 932.119302][ T7865] kmem_cache_alloc+0x1e8/0x6f0 [ 932.124152][ T7865] ? inet_create+0x2f4/0xe10 [ 932.128747][ T7865] sk_prot_alloc+0x67/0x2e0 [ 932.133248][ T7865] ? lock_downgrade+0x880/0x880 [ 932.138097][ T7865] sk_alloc+0x39/0xf70 [ 932.142169][ T7865] inet_create+0x36a/0xe10 [ 932.146590][ T7865] __sock_create+0x3e6/0x750 [ 932.151195][ T7865] __sys_socket+0x103/0x220 [ 932.155696][ T7865] ? move_addr_to_kernel+0x80/0x80 [ 932.160807][ T7865] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 932.166262][ T7865] ? do_syscall_64+0x26/0x610 [ 932.170936][ T7865] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 932.177009][ T7865] ? do_syscall_64+0x26/0x610 [ 932.181686][ T7865] __x64_sys_socket+0x73/0xb0 [ 932.186361][ T7865] do_syscall_64+0x103/0x610 [ 932.190953][ T7865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 932.196841][ T7865] RIP: 0033:0x45b917 [ 932.200735][ T7865] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 932.220331][ T7865] RSP: 002b:0000000000a4f698 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 932.228736][ T7865] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b917 [ 932.236704][ T7865] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 932.244669][ T7865] RBP: 000000000000182d R08: 0000000000000000 R09: 000000000000000a [ 932.252648][ T7865] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 932.260702][ T7865] R13: 0000000000a4fdb0 R14: 000000000100099b R15: 0000000000a4fdc0 [ 932.271126][ T7865] memory: usage 48828kB, limit 0kB, failcnt 87 [ 932.277288][ T7865] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 932.285014][ T7865] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 932.292005][ T7865] Memory cgroup stats for /syz2: cache:124KB rss:43076KB rss_huge:40960KB shmem:0KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:43060KB inactive_file:0KB active_file:0KB unevictable:0KB [ 932.292082][ T7865] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=8286,uid=0 [ 932.292180][ T7865] Memory cgroup out of memory: Killed process 8286 (syz-executor.2) total-vm:72448kB, anon-rss:4236kB, file-rss:35828kB, shmem-rss:0kB 19:35:19 executing program 1: syz_execute_func(&(0x7f0000000180)="1c03b5b598cd801b69e4f56962f5696200d9d9d017795bf9f2680c0000008fe9589b26c7e4c753fbc4e101edfec4427d82663ed107c4c2b90a23f2168f4808eebce00000802000c422b18cb6070000005151c4a27d181ec1ea01eff265dc5f00c35b5b304545e269a841000fc4c2559c3766030faee42c240f5463805bdedec4a1e1e0ef26400f0d18c401fe5ff6e30fad6736660fd2938c000000c4c1f913376666450f17720d2e440fc7bf0d00008066660f3a0b0865") [ 932.397754][ T7867] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 932.418827][ T7867] CPU: 1 PID: 7867 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #97 [ 932.426733][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 932.436788][ T7867] Call Trace: [ 932.440088][ T7867] dump_stack+0x172/0x1f0 [ 932.444428][ T7867] dump_header+0x10f/0xb6c [ 932.448845][ T7867] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 932.454655][ T7867] ? ___ratelimit+0x60/0x595 [ 932.459252][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 932.464364][ T7867] oom_kill_process.cold+0x10/0x15 [ 932.469490][ T7867] out_of_memory+0x79a/0x1280 [ 932.474167][ T7867] ? oom_killer_disable+0x280/0x280 [ 932.479345][ T7867] ? find_held_lock+0x35/0x130 [ 932.484098][ T7867] mem_cgroup_out_of_memory+0x1ca/0x230 [ 932.489630][ T7867] ? memcg_event_wake+0x230/0x230 [ 932.494645][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 932.499736][ T7867] ? _raw_spin_unlock+0x2d/0x50 [ 932.504570][ T7867] try_charge+0x102c/0x15c0 [ 932.509053][ T7867] ? find_held_lock+0x35/0x130 [ 932.513798][ T7867] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 932.519319][ T7867] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 932.524841][ T7867] ? find_held_lock+0x35/0x130 [ 932.529625][ T7867] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 932.535163][ T7867] __memcg_kmem_charge_memcg+0x7c/0x130 [ 932.540689][ T7867] ? memcg_kmem_put_cache+0xb0/0xb0 [ 932.545864][ T7867] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 932.551387][ T7867] __memcg_kmem_charge+0x136/0x300 [ 932.556478][ T7867] __alloc_pages_nodemask+0x4bf/0x8d0 [ 932.561826][ T7867] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 932.568043][ T7867] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 932.573743][ T7867] ? copy_process.part.0+0x1d08/0x7980 [ 932.579200][ T7867] copy_process.part.0+0x3e0/0x7980 [ 932.584376][ T7867] ? __lock_acquire+0x548/0x3fb0 [ 932.589291][ T7867] ? wp_page_reuse+0x159/0x1d0 [ 932.594035][ T7867] ? __might_fault+0x12b/0x1e0 [ 932.598786][ T7867] ? __cleanup_sighand+0x60/0x60 [ 932.603703][ T7867] ? lock_downgrade+0x880/0x880 [ 932.608537][ T7867] _do_fork+0x257/0xfd0 [ 932.612684][ T7867] ? fork_idle+0x1d0/0x1d0 [ 932.617082][ T7867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 932.622521][ T7867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 932.627957][ T7867] ? do_syscall_64+0x26/0x610 [ 932.632622][ T7867] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 932.638671][ T7867] ? do_syscall_64+0x26/0x610 [ 932.643330][ T7867] __x64_sys_clone+0xbf/0x150 [ 932.647984][ T7867] do_syscall_64+0x103/0x610 [ 932.652572][ T7867] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 932.658440][ T7867] RIP: 0033:0x45737a [ 932.662315][ T7867] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 932.681894][ T7867] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 932.690283][ T7867] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 932.698230][ T7867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 932.706178][ T7867] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 000000000139f940 [ 932.714126][ T7867] R10: 000000000139fc10 R11: 0000000000000246 R12: 0000000000000001 [ 932.722077][ T7867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 932.732022][ T7867] memory: usage 30876kB, limit 0kB, failcnt 107 [ 932.738277][ T7867] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 932.750150][ T7867] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 932.757002][ T7867] Memory cgroup stats for [ 932.757012][ T7867] /syz3: cache:0KB rss:26076KB rss_huge:24576KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:26060KB inactive_file:0KB active_file:0KB unevictable:0KB [ 932.781124][ T7867] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17107,uid=0 [ 932.796572][ T7867] Memory cgroup out of memory: Killed process 17107 (syz-executor.3) total-vm:72448kB, anon-rss:2204kB, file-rss:35848kB, shmem-rss:0kB [ 932.810874][ T7873] syz-executor.4 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=0, oom_score_adj=0 [ 932.817253][ T1043] oom_reaper: reaped process 17107 (syz-executor.3), now anon-rss:0kB, file-rss:34888kB, shmem-rss:0kB [ 932.824176][ T7873] CPU: 0 PID: 7873 Comm: syz-executor.4 Not tainted 5.1.0-rc7+ #97 [ 932.840942][ T7873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 932.840955][ T7873] Call Trace: [ 932.854292][ T7873] dump_stack+0x172/0x1f0 [ 932.858638][ T7873] dump_header+0x10f/0xb6c [ 932.858660][ T7873] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 932.868860][ T7873] ? ___ratelimit+0x60/0x595 [ 932.873454][ T7873] ? do_raw_spin_unlock+0x57/0x270 [ 932.878575][ T7873] oom_kill_process.cold+0x10/0x15 [ 932.878593][ T7873] out_of_memory+0x79a/0x1280 [ 932.888372][ T7873] ? oom_killer_disable+0x280/0x280 [ 932.893568][ T7873] ? find_held_lock+0x35/0x130 [ 932.898342][ T7873] mem_cgroup_out_of_memory+0x1ca/0x230 [ 932.898360][ T7873] ? memcg_event_wake+0x230/0x230 [ 932.908909][ T7873] ? do_raw_spin_unlock+0x57/0x270 [ 932.914021][ T7873] ? _raw_spin_unlock+0x2d/0x50 [ 932.914041][ T7873] try_charge+0x102c/0x15c0 [ 932.914056][ T7873] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 932.914069][ T7873] ? should_fail+0x1de/0x852 [ 932.914090][ T7873] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 932.914111][ T7873] ? rcu_read_lock_sched_held+0x110/0x130 [ 932.914127][ T7873] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 932.914151][ T7873] __memcg_kmem_charge_memcg+0x7c/0x130 [ 932.914167][ T7873] ? memcg_kmem_put_cache+0xb0/0xb0 [ 932.914182][ T7873] ? cache_grow_begin+0x594/0x860 [ 932.914202][ T7873] ? lockdep_hardirqs_on+0x418/0x5d0 [ 932.929758][ T7873] ? trace_hardirqs_on+0x67/0x230 [ 932.929779][ T7873] cache_grow_begin+0x5c0/0x860 [ 932.929796][ T7873] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 932.929816][ T7873] ? __cpuset_node_allowed+0x136/0x540 [ 932.939922][ T7873] fallback_alloc+0x1fd/0x2d0 [ 932.939945][ T7873] ____cache_alloc_node+0x1be/0x1e0 [ 932.939958][ T7873] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 932.939977][ T7873] kmem_cache_alloc+0x1e8/0x6f0 [ 932.940000][ T7873] __alloc_file+0x27/0x300 [ 932.940015][ T7873] alloc_empty_file+0x72/0x170 [ 932.940030][ T7873] alloc_file+0x5e/0x4d0 [ 932.940046][ T7873] alloc_file_pseudo+0x189/0x280 [ 932.940058][ T7873] ? alloc_file+0x4d0/0x4d0 [ 932.940079][ T7873] ? __alloc_fd+0x44d/0x560 [ 932.951322][ T7873] sock_alloc_file+0x4d/0x170 [ 932.962026][ T7873] __sys_socket+0x150/0x220 [ 932.962043][ T7873] ? move_addr_to_kernel+0x80/0x80 [ 932.962060][ T7873] ? do_syscall_64+0x26/0x610 [ 932.962075][ T7873] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 932.962089][ T7873] ? do_syscall_64+0x26/0x610 [ 932.962116][ T7873] __x64_sys_socket+0x73/0xb0 [ 932.972406][ T7873] do_syscall_64+0x103/0x610 [ 932.982255][ T7873] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 932.982267][ T7873] RIP: 0033:0x45b917 [ 932.982281][ T7873] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 932.982289][ T7873] RSP: 002b:0000000000a4f628 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 932.982302][ T7873] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b917 [ 932.982310][ T7873] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 932.982318][ T7873] RBP: 0000000000000706 R08: 0000000000a4f6ac R09: 000000000000000a [ 932.982334][ T7873] R10: 0000000000a4f6b0 R11: 0000000000000246 R12: 0000000000000000 [ 932.993997][ T7873] R13: 0000000000a4fdb0 R14: 00000000000dd7eb R15: 0000000000a4fdc0 [ 932.996484][ T7873] memory: usage 16020kB, limit 0kB, failcnt 93 [ 933.165423][ T7873] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 933.172962][ T7873] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 933.179919][ T7873] Memory cgroup stats for /syz4: cache:76KB rss:13032KB rss_huge:12288KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB [ 933.179972][ T7873] swap:0KB inactive_anon:0KB active_anon:13008KB inactive_file:0KB active_file:0KB unevictable:0KB [ 933.203571][ T7873] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=12017,uid=0 [ 933.219625][ T7873] Memory cgroup out of memory: Killed process 12017 (syz-executor.4) total-vm:72448kB, anon-rss:2204kB, file-rss:35812kB, shmem-rss:0kB [ 933.247254][ T7860] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 933.265969][ T7860] CPU: 0 PID: 7860 Comm: syz-executor.0 Not tainted 5.1.0-rc7+ #97 [ 933.273863][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 933.273869][ T7860] Call Trace: [ 933.273891][ T7860] dump_stack+0x172/0x1f0 [ 933.273911][ T7860] dump_header+0x10f/0xb6c [ 933.273927][ T7860] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 933.273943][ T7860] ? ___ratelimit+0x60/0x595 [ 933.273965][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 933.291612][ T7860] oom_kill_process.cold+0x10/0x15 [ 933.301814][ T7860] out_of_memory+0x79a/0x1280 [ 933.301837][ T7860] ? oom_killer_disable+0x280/0x280 [ 933.301850][ T7860] ? find_held_lock+0x35/0x130 [ 933.301874][ T7860] mem_cgroup_out_of_memory+0x1ca/0x230 [ 933.301888][ T7860] ? memcg_event_wake+0x230/0x230 [ 933.301911][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 933.301928][ T7860] ? _raw_spin_unlock+0x2d/0x50 [ 933.301947][ T7860] try_charge+0x102c/0x15c0 [ 933.316739][ T7860] ? find_held_lock+0x35/0x130 [ 933.326605][ T7860] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 933.336893][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 933.347005][ T7860] ? find_held_lock+0x35/0x130 [ 933.356341][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 933.382443][ T7860] __memcg_kmem_charge_memcg+0x7c/0x130 [ 933.387970][ T7860] ? memcg_kmem_put_cache+0xb0/0xb0 [ 933.393152][ T7860] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 933.398679][ T7860] __memcg_kmem_charge+0x136/0x300 [ 933.403778][ T7860] __alloc_pages_nodemask+0x4bf/0x8d0 [ 933.409143][ T7860] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 933.415379][ T7860] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 933.421099][ T7860] ? copy_process.part.0+0x1d08/0x7980 [ 933.426543][ T7860] copy_process.part.0+0x3e0/0x7980 [ 933.431731][ T7860] ? __lock_acquire+0x548/0x3fb0 [ 933.436666][ T7860] ? wp_page_reuse+0x159/0x1d0 [ 933.441416][ T7860] ? __might_fault+0x12b/0x1e0 [ 933.446165][ T7860] ? __cleanup_sighand+0x60/0x60 [ 933.451093][ T7860] ? lock_downgrade+0x880/0x880 [ 933.455942][ T7860] _do_fork+0x257/0xfd0 [ 933.460094][ T7860] ? fork_idle+0x1d0/0x1d0 [ 933.464506][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 933.469956][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 933.475418][ T7860] ? do_syscall_64+0x26/0x610 [ 933.480111][ T7860] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 933.486183][ T7860] ? do_syscall_64+0x26/0x610 [ 933.490879][ T7860] __x64_sys_clone+0xbf/0x150 [ 933.495572][ T7860] do_syscall_64+0x103/0x610 [ 933.500181][ T7860] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 933.506076][ T7860] RIP: 0033:0x45737a [ 933.509975][ T7860] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 933.529584][ T7860] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 933.538015][ T7860] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 933.545998][ T7860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 933.553977][ T7860] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 00000000022b4940 [ 933.561961][ T7860] R10: 00000000022b4c10 R11: 0000000000000246 R12: 0000000000000001 [ 933.569944][ T7860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 933.578096][ T7860] memory: usage 28088kB, limit 0kB, failcnt 227 [ 933.584394][ T7860] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 933.588976][T26876] IPVS: ftp: loaded support on port[0] = 21 [ 933.592216][ T7860] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 933.605133][ T7860] Memory cgroup stats for /syz0: cache:44KB rss:23856KB rss_huge:22528KB shmem:80KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:23832KB inactive_file:0KB active_file:0KB unevictable:0KB [ 933.627598][ T7860] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=16331,uid=0 [ 933.643530][ T7860] Memory cgroup out of memory: Killed process 16331 (syz-executor.0) total-vm:72580kB, anon-rss:2208kB, file-rss:35812kB, shmem-rss:0kB [ 933.665872][ T7876] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 933.677772][ T7876] CPU: 0 PID: 7876 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 933.685658][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 933.695695][ T7876] Call Trace: [ 933.698969][ T7876] dump_stack+0x172/0x1f0 [ 933.703305][ T7876] dump_header+0x10f/0xb6c [ 933.707721][ T7876] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 933.713509][ T7876] ? ___ratelimit+0x60/0x595 [ 933.718077][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 933.723189][ T7876] oom_kill_process.cold+0x10/0x15 [ 933.728295][ T7876] out_of_memory+0x79a/0x1280 [ 933.732963][ T7876] ? oom_killer_disable+0x280/0x280 [ 933.738139][ T7876] ? find_held_lock+0x35/0x130 [ 933.742903][ T7876] mem_cgroup_out_of_memory+0x1ca/0x230 [ 933.748435][ T7876] ? memcg_event_wake+0x230/0x230 [ 933.753442][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 933.758530][ T7876] ? _raw_spin_unlock+0x2d/0x50 [ 933.763374][ T7876] try_charge+0x102c/0x15c0 [ 933.767868][ T7876] ? find_held_lock+0x35/0x130 [ 933.772620][ T7876] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 933.778148][ T7876] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 933.783681][ T7876] ? find_held_lock+0x35/0x130 [ 933.788423][ T7876] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 933.793966][ T7876] __memcg_kmem_charge_memcg+0x7c/0x130 [ 933.799503][ T7876] ? memcg_kmem_put_cache+0xb0/0xb0 [ 933.804693][ T7876] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 933.810219][ T7876] __memcg_kmem_charge+0x136/0x300 [ 933.815311][ T7876] __alloc_pages_nodemask+0x4bf/0x8d0 [ 933.820674][ T7876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 933.826911][ T7876] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 933.832612][ T7876] ? copy_process.part.0+0x1d08/0x7980 [ 933.838059][ T7876] ? lockdep_hardirqs_on+0x418/0x5d0 [ 933.843335][ T7876] ? trace_hardirqs_on+0x67/0x230 [ 933.848356][ T7876] copy_process.part.0+0x3e0/0x7980 [ 933.853534][ T7876] ? __lock_acquire+0x548/0x3fb0 [ 933.858453][ T7876] ? wp_page_reuse+0x159/0x1d0 [ 933.863215][ T7876] ? __might_fault+0x12b/0x1e0 [ 933.867973][ T7876] ? __cleanup_sighand+0x60/0x60 [ 933.872901][ T7876] ? lock_downgrade+0x880/0x880 [ 933.877763][ T7876] _do_fork+0x257/0xfd0 [ 933.881918][ T7876] ? fork_idle+0x1d0/0x1d0 [ 933.886333][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 933.891772][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 933.897233][ T7876] ? do_syscall_64+0x26/0x610 [ 933.902949][ T7876] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 933.909008][ T7876] ? do_syscall_64+0x26/0x610 [ 933.913690][ T7876] __x64_sys_clone+0xbf/0x150 [ 933.918346][ T7876] do_syscall_64+0x103/0x610 [ 933.922931][ T7876] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 933.928811][ T7876] RIP: 0033:0x45737a [ 933.932692][ T7876] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 933.952273][ T7876] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 933.960678][ T7876] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 933.968646][ T7876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 933.976613][ T7876] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 000000000275d940 [ 933.984579][ T7876] R10: 000000000275dc10 R11: 0000000000000246 R12: 0000000000000001 [ 933.992529][ T7876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 934.001101][ T7876] memory: usage 28192kB, limit 0kB, failcnt 269 [ 934.007356][ T7876] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 934.014885][ T7876] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 934.014896][ T7876] Memory cgroup stats for /syz5: cache:16KB rss:23788KB rss_huge:22528KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:23772KB inactive_file:0KB active_file:0KB unevictable:0KB [ 934.043471][ T7876] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16893,uid=0 [ 934.058914][ T7876] Memory cgroup out of memory: Killed process 16893 (syz-executor.5) total-vm:72448kB, anon-rss:2200kB, file-rss:35836kB, shmem-rss:0kB [ 934.073217][ T7865] Memory cgroup out of memory: Killed process 8261 (syz-executor.2) total-vm:72448kB, anon-rss:4236kB, file-rss:35824kB, shmem-rss:0kB [ 934.074247][ T1043] oom_reaper: reaped process 16893 (syz-executor.5), now anon-rss:0kB, file-rss:34876kB, shmem-rss:0kB [ 934.089864][ T7867] Memory cgroup out of memory: Killed process 17076 (syz-executor.3) total-vm:72448kB, anon-rss:2204kB, file-rss:35840kB, shmem-rss:0kB [ 934.128539][ T7873] Memory cgroup out of memory: Killed process 28395 (syz-executor.4) total-vm:72580kB, anon-rss:2212kB, file-rss:35792kB, shmem-rss:0kB [ 934.172733][ T7860] Memory cgroup out of memory: Killed process 16353 (syz-executor.0) total-vm:72580kB, anon-rss:2208kB, file-rss:35812kB, shmem-rss:0kB [ 934.190073][ T7876] Memory cgroup out of memory: Killed process 17001 (syz-executor.5) total-vm:72448kB, anon-rss:2200kB, file-rss:35836kB, shmem-rss:0kB [ 934.191199][ T1043] oom_reaper: reaped process 16353 (syz-executor.0), now anon-rss:0kB, file-rss:34852kB, shmem-rss:0kB [ 934.220652][ T7865] Memory cgroup out of memory: Killed process 16987 (syz-executor.2) total-vm:72580kB, anon-rss:2204kB, file-rss:35848kB, shmem-rss:0kB [ 934.259314][ T7867] Memory cgroup out of memory: Killed process 16869 (syz-executor.3) total-vm:72448kB, anon-rss:2204kB, file-rss:35832kB, shmem-rss:0kB [ 934.290991][ T1043] oom_reaper: reaped process 16869 (syz-executor.3), now anon-rss:0kB, file-rss:34872kB, shmem-rss:0kB [ 934.299255][ T7873] Memory cgroup out of memory: Killed process 24729 (syz-executor.4) total-vm:72448kB, anon-rss:2204kB, file-rss:35796kB, shmem-rss:0kB [ 934.328418][ T7860] Memory cgroup out of memory: Killed process 9437 (syz-executor.0) total-vm:72580kB, anon-rss:2200kB, file-rss:35816kB, shmem-rss:0kB [ 934.343586][ T1043] oom_reaper: reaped process 24729 (syz-executor.4), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 934.345024][ T7876] Memory cgroup out of memory: Killed process 17068 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35828kB, shmem-rss:0kB [ 934.408229][ T7865] Memory cgroup out of memory: Killed process 17042 (syz-executor.2) total-vm:72580kB, anon-rss:2204kB, file-rss:35848kB, shmem-rss:0kB [ 934.447818][T26876] chnl_net:caif_netlink_parms(): no params data found [ 934.455832][ T7867] Memory cgroup out of memory: Killed process 17383 (syz-executor.3) total-vm:72448kB, anon-rss:2204kB, file-rss:35804kB, shmem-rss:0kB [ 934.481903][ T7873] Memory cgroup out of memory: Killed process 3044 (syz-executor.4) total-vm:72448kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 934.524476][ T7860] Memory cgroup out of memory: Killed process 9533 (syz-executor.0) total-vm:72580kB, anon-rss:2200kB, file-rss:35816kB, shmem-rss:0kB [ 934.552945][ T7876] Memory cgroup out of memory: Killed process 17108 (syz-executor.5) total-vm:72448kB, anon-rss:2200kB, file-rss:35832kB, shmem-rss:0kB [ 934.571562][ T7865] Memory cgroup out of memory: Killed process 16907 (syz-executor.2) total-vm:72448kB, anon-rss:2196kB, file-rss:35848kB, shmem-rss:0kB [ 934.597026][ T7865] Memory cgroup out of memory: Killed process 17024 (syz-executor.2) total-vm:72580kB, anon-rss:2204kB, file-rss:35840kB, shmem-rss:0kB [ 934.621892][ T1043] oom_reaper: reaped process 17024 (syz-executor.2), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 934.633132][ T7867] Memory cgroup out of memory: Killed process 17401 (syz-executor.3) total-vm:72448kB, anon-rss:2204kB, file-rss:35804kB, shmem-rss:0kB [ 934.675401][T26876] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.684637][T26876] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.689555][ T7873] Memory cgroup out of memory: Killed process 4041 (syz-executor.4) total-vm:72448kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 934.706288][T26876] device bridge_slave_0 entered promiscuous mode [ 934.722123][T26876] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.735701][T26876] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.745019][T26876] device bridge_slave_1 entered promiscuous mode [ 934.751684][ T7860] oom_kill_process: 19 callbacks suppressed [ 934.751701][ T7860] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 934.798324][ T7860] CPU: 1 PID: 7860 Comm: syz-executor.0 Not tainted 5.1.0-rc7+ #97 [ 934.806237][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 934.816283][ T7860] Call Trace: [ 934.819578][ T7860] dump_stack+0x172/0x1f0 [ 934.823918][ T7860] dump_header+0x10f/0xb6c [ 934.828333][ T7860] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 934.834140][ T7860] ? ___ratelimit+0x60/0x595 [ 934.838743][ T7860] oom_kill_process.cold+0x10/0x15 [ 934.843861][ T7860] out_of_memory+0x79a/0x1280 [ 934.848542][ T7860] ? oom_killer_disable+0x280/0x280 [ 934.853837][ T7860] ? find_held_lock+0x35/0x130 [ 934.858611][ T7860] mem_cgroup_out_of_memory+0x1ca/0x230 [ 934.864171][ T7860] ? memcg_event_wake+0x230/0x230 [ 934.869201][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 934.874314][ T7860] ? _raw_spin_unlock+0x2d/0x50 [ 934.879175][ T7860] try_charge+0x102c/0x15c0 [ 934.883678][ T7860] ? find_held_lock+0x35/0x130 [ 934.888451][ T7860] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 934.893994][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 934.899537][ T7860] ? find_held_lock+0x35/0x130 [ 934.904303][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 934.909861][ T7860] __memcg_kmem_charge_memcg+0x7c/0x130 [ 934.915402][ T7860] ? memcg_kmem_put_cache+0xb0/0xb0 [ 934.920604][ T7860] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 934.926182][ T7860] __memcg_kmem_charge+0x136/0x300 [ 934.931300][ T7860] __alloc_pages_nodemask+0x4bf/0x8d0 [ 934.936671][ T7860] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 934.942916][ T7860] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 934.948643][ T7860] ? copy_process.part.0+0x1d08/0x7980 [ 934.954117][ T7860] copy_process.part.0+0x3e0/0x7980 [ 934.959322][ T7860] ? __lock_acquire+0x548/0x3fb0 [ 934.964258][ T7860] ? wp_page_reuse+0x159/0x1d0 [ 934.969029][ T7860] ? __might_fault+0x12b/0x1e0 [ 934.973805][ T7860] ? __cleanup_sighand+0x60/0x60 [ 934.978748][ T7860] ? lock_downgrade+0x880/0x880 [ 934.983622][ T7860] _do_fork+0x257/0xfd0 [ 934.987786][ T7860] ? fork_idle+0x1d0/0x1d0 [ 934.992213][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 934.997672][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 935.003132][ T7860] ? do_syscall_64+0x26/0x610 [ 935.007811][ T7860] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 935.013877][ T7860] ? do_syscall_64+0x26/0x610 [ 935.018558][ T7860] __x64_sys_clone+0xbf/0x150 [ 935.023236][ T7860] do_syscall_64+0x103/0x610 [ 935.027828][ T7860] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 935.033714][ T7860] RIP: 0033:0x45737a [ 935.037609][ T7860] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 935.057248][ T7860] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 935.065658][ T7860] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 935.073636][ T7860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 935.081610][ T7860] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 00000000022b4940 [ 935.089701][ T7860] R10: 00000000022b4c10 R11: 0000000000000246 R12: 0000000000000001 [ 935.097668][ T7860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 935.112662][T26876] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 935.115407][ T7860] memory: usage 18764kB, limit 0kB, failcnt 251 [ 935.137279][T26876] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 935.139053][ T7860] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 935.169097][ T7860] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 935.176006][ T7860] Memory cgroup stats for /syz0: cache:44KB rss:15196KB rss_huge:14336KB shmem:80KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:15164KB inactive_file:0KB active_file:0KB unevictable:0KB [ 935.177743][T26876] team0: Port device team_slave_0 added [ 935.212554][T26876] team0: Port device team_slave_1 added [ 935.219067][ T7860] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=17419,uid=0 [ 935.249157][ T7860] Memory cgroup out of memory: Killed process 17419 (syz-executor.0) total-vm:72580kB, anon-rss:2208kB, file-rss:35804kB, shmem-rss:0kB [ 935.275249][ T7876] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 935.276479][ T1043] oom_reaper: reaped process 17419 (syz-executor.0), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 935.296774][ T7876] CPU: 1 PID: 7876 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 935.306041][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 935.316205][ T7876] Call Trace: [ 935.319503][ T7876] dump_stack+0x172/0x1f0 [ 935.323838][ T7876] dump_header+0x10f/0xb6c [ 935.328262][ T7876] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 935.334070][ T7876] ? ___ratelimit+0x60/0x595 [ 935.338658][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 935.343783][ T7876] oom_kill_process.cold+0x10/0x15 [ 935.348897][ T7876] out_of_memory+0x79a/0x1280 [ 935.353676][ T7876] ? oom_killer_disable+0x280/0x280 [ 935.358872][ T7876] ? find_held_lock+0x35/0x130 [ 935.363652][ T7876] mem_cgroup_out_of_memory+0x1ca/0x230 [ 935.369770][ T7876] ? memcg_event_wake+0x230/0x230 [ 935.374911][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 935.380024][ T7876] ? _raw_spin_unlock+0x2d/0x50 [ 935.385275][ T7876] try_charge+0x102c/0x15c0 [ 935.390192][ T7876] ? find_held_lock+0x35/0x130 [ 935.395118][ T7876] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 935.400668][ T7876] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 935.406561][ T7876] ? find_held_lock+0x35/0x130 [ 935.411700][ T7876] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 935.417478][ T7876] __memcg_kmem_charge_memcg+0x7c/0x130 [ 935.423028][ T7876] ? memcg_kmem_put_cache+0xb0/0xb0 [ 935.428231][ T7876] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 935.436171][ T7876] __memcg_kmem_charge+0x136/0x300 [ 935.442431][ T7876] __alloc_pages_nodemask+0x4bf/0x8d0 [ 935.447803][ T7876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 935.454049][ T7876] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 935.459894][ T7876] ? copy_process.part.0+0x1d08/0x7980 [ 935.465351][ T7876] ? lockdep_hardirqs_on+0x418/0x5d0 [ 935.470678][ T7876] ? trace_hardirqs_on+0x67/0x230 [ 935.475713][ T7876] copy_process.part.0+0x3e0/0x7980 [ 935.480913][ T7876] ? __lock_acquire+0x548/0x3fb0 [ 935.485851][ T7876] ? wp_page_reuse+0x159/0x1d0 [ 935.490658][ T7876] ? __might_fault+0x12b/0x1e0 [ 935.495560][ T7876] ? __cleanup_sighand+0x60/0x60 [ 935.500742][ T7876] ? lock_downgrade+0x880/0x880 [ 935.505724][ T7876] _do_fork+0x257/0xfd0 [ 935.509997][ T7876] ? fork_idle+0x1d0/0x1d0 [ 935.514425][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 935.519885][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 935.525519][ T7876] ? do_syscall_64+0x26/0x610 [ 935.530298][ T7876] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 935.536579][ T7876] ? do_syscall_64+0x26/0x610 [ 935.541514][ T7876] __x64_sys_clone+0xbf/0x150 [ 935.546195][ T7876] do_syscall_64+0x103/0x610 [ 935.550787][ T7876] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 935.556677][ T7876] RIP: 0033:0x45737a [ 935.560568][ T7876] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 935.582065][ T7876] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 935.590472][ T7876] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 935.598808][ T7876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 935.606887][ T7876] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 000000000275d940 [ 935.614984][ T7876] R10: 000000000275dc10 R11: 0000000000000246 R12: 0000000000000001 [ 935.623036][ T7876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 935.646744][ T7876] memory: usage 18872kB, limit 0kB, failcnt 293 [ 935.659196][ T7876] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 935.666669][ T7876] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 935.666682][ T7876] Memory cgroup stats for /syz5: cache:16KB rss:15208KB rss_huge:14336KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:15184KB inactive_file:0KB active_file:0KB unevictable:0KB [ 935.695028][ T7876] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=11969,uid=0 [ 935.710519][ T7876] Memory cgroup out of memory: Killed process 11969 (syz-executor.5) total-vm:72448kB, anon-rss:2200kB, file-rss:35812kB, shmem-rss:0kB [ 935.725935][ T1043] oom_reaper: reaped process 11969 (syz-executor.5), now anon-rss:0kB, file-rss:34852kB, shmem-rss:0kB [ 935.737176][ T7865] syz-executor.2 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 935.750757][ T7865] CPU: 0 PID: 7865 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 935.758671][ T7865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 935.758882][T26876] device hsr_slave_0 entered promiscuous mode [ 935.768724][ T7865] Call Trace: [ 935.768747][ T7865] dump_stack+0x172/0x1f0 [ 935.768767][ T7865] dump_header+0x10f/0xb6c [ 935.768783][ T7865] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 935.768799][ T7865] ? ___ratelimit+0x60/0x595 [ 935.768814][ T7865] ? do_raw_spin_unlock+0x57/0x270 [ 935.768831][ T7865] oom_kill_process.cold+0x10/0x15 [ 935.768846][ T7865] out_of_memory+0x79a/0x1280 [ 935.768864][ T7865] ? oom_killer_disable+0x280/0x280 [ 935.768874][ T7865] ? find_held_lock+0x35/0x130 [ 935.768897][ T7865] mem_cgroup_out_of_memory+0x1ca/0x230 [ 935.768909][ T7865] ? memcg_event_wake+0x230/0x230 [ 935.768933][ T7865] ? do_raw_spin_unlock+0x57/0x270 [ 935.837670][ T7865] ? _raw_spin_unlock+0x2d/0x50 [ 935.842504][ T7865] try_charge+0x102c/0x15c0 [ 935.846991][ T7865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 935.852535][ T7865] ? rcu_read_lock_sched_held+0x110/0x130 [ 935.858245][ T7865] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 935.863776][ T7865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 935.869316][ T7865] ? memcg_kmem_put_cache+0xb0/0xb0 [ 935.874506][ T7865] ? cache_grow_begin+0x594/0x860 [ 935.879522][ T7865] ? lockdep_hardirqs_on+0x418/0x5d0 [ 935.884798][ T7865] ? trace_hardirqs_on+0x67/0x230 [ 935.889818][ T7865] cache_grow_begin+0x5c0/0x860 [ 935.894665][ T7865] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 935.900903][ T7865] ? __cpuset_node_allowed+0x136/0x540 [ 935.906393][ T7865] fallback_alloc+0x1fd/0x2d0 [ 935.911089][ T7865] ____cache_alloc_node+0x1be/0x1e0 [ 935.916288][ T7865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 935.922515][ T7865] kmem_cache_alloc+0x1e8/0x6f0 [ 935.927344][ T7865] ? inet_create+0x2f4/0xe10 [ 935.931928][ T7865] sk_prot_alloc+0x67/0x2e0 [ 935.936421][ T7865] ? lock_downgrade+0x880/0x880 [ 935.941262][ T7865] sk_alloc+0x39/0xf70 [ 935.945326][ T7865] inet_create+0x36a/0xe10 [ 935.949748][ T7865] __sock_create+0x3e6/0x750 [ 935.954353][ T7865] __sys_socket+0x103/0x220 [ 935.958838][ T7865] ? move_addr_to_kernel+0x80/0x80 [ 935.963936][ T7865] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 935.969385][ T7865] ? do_syscall_64+0x26/0x610 [ 935.974076][ T7865] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 935.980136][ T7865] ? do_syscall_64+0x26/0x610 [ 935.984809][ T7865] __x64_sys_socket+0x73/0xb0 [ 935.989483][ T7865] do_syscall_64+0x103/0x610 [ 935.994068][ T7865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 935.999948][ T7865] RIP: 0033:0x45b917 [ 936.003859][ T7865] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 936.023450][ T7865] RSP: 002b:0000000000a4f698 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 936.031849][ T7865] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b917 [ 936.039824][ T7865] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 936.047801][ T7865] RBP: 000000000000182d R08: 0000000000000000 R09: 000000000000000a [ 936.055786][ T7865] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 936.063748][ T7865] R13: 0000000000a4fdb0 R14: 000000000100099b R15: 0000000000a4fdc0 [ 936.072121][ T7865] memory: usage 30716kB, limit 0kB, failcnt 123 [ 936.078394][ T7865] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 936.085916][ T7865] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 936.089534][T26876] device hsr_slave_1 entered promiscuous mode [ 936.092803][ T7865] Memory cgroup stats for /syz2: cache:124KB rss:26064KB rss_huge:24576KB shmem:0KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:26032KB inactive_file:0KB active_file:0KB unevictable:0KB [ 936.120495][ T7865] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17007,uid=0 [ 936.135914][ T7865] Memory cgroup out of memory: Killed process 17007 (syz-executor.2) total-vm:72448kB, anon-rss:2196kB, file-rss:35844kB, shmem-rss:0kB [ 936.150155][ T7867] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 936.151409][ T1043] oom_reaper: reaped process 17007 (syz-executor.2), now anon-rss:0kB, file-rss:34884kB, shmem-rss:0kB [ 936.164112][ T7867] CPU: 0 PID: 7867 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #97 [ 936.180907][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 936.190961][ T7867] Call Trace: [ 936.194259][ T7867] dump_stack+0x172/0x1f0 [ 936.198683][ T7867] dump_header+0x10f/0xb6c [ 936.203104][ T7867] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 936.208903][ T7867] ? ___ratelimit+0x60/0x595 [ 936.213474][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 936.218565][ T7867] oom_kill_process.cold+0x10/0x15 [ 936.223676][ T7867] out_of_memory+0x79a/0x1280 [ 936.228347][ T7867] ? oom_killer_disable+0x280/0x280 [ 936.234045][ T7867] ? find_held_lock+0x35/0x130 [ 936.238793][ T7867] mem_cgroup_out_of_memory+0x1ca/0x230 [ 936.244327][ T7867] ? memcg_event_wake+0x230/0x230 [ 936.249360][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 936.254466][ T7867] ? _raw_spin_unlock+0x2d/0x50 [ 936.259312][ T7867] try_charge+0x102c/0x15c0 [ 936.263815][ T7867] ? find_held_lock+0x35/0x130 [ 936.268574][ T7867] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 936.274127][ T7867] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 936.279678][ T7867] ? find_held_lock+0x35/0x130 [ 936.284446][ T7867] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 936.290007][ T7867] __memcg_kmem_charge_memcg+0x7c/0x130 [ 936.295562][ T7867] ? memcg_kmem_put_cache+0xb0/0xb0 [ 936.300757][ T7867] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 936.306318][ T7867] __memcg_kmem_charge+0x136/0x300 [ 936.311430][ T7867] __alloc_pages_nodemask+0x4bf/0x8d0 [ 936.316782][ T7867] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 936.323019][ T7867] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 936.328730][ T7867] ? copy_process.part.0+0x1d08/0x7980 [ 936.334182][ T7867] copy_process.part.0+0x3e0/0x7980 [ 936.339381][ T7867] ? __lock_acquire+0x548/0x3fb0 [ 936.344314][ T7867] ? wp_page_reuse+0x159/0x1d0 [ 936.349864][ T7867] ? __might_fault+0x12b/0x1e0 [ 936.354651][ T7867] ? __cleanup_sighand+0x60/0x60 [ 936.359585][ T7867] ? lock_downgrade+0x880/0x880 [ 936.364445][ T7867] _do_fork+0x257/0xfd0 [ 936.368583][ T7867] ? fork_idle+0x1d0/0x1d0 [ 936.373678][ T7867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 936.379127][ T7867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 936.384579][ T7867] ? do_syscall_64+0x26/0x610 [ 936.389249][ T7867] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 936.395304][ T7867] ? do_syscall_64+0x26/0x610 [ 936.399984][ T7867] __x64_sys_clone+0xbf/0x150 [ 936.404659][ T7867] do_syscall_64+0x103/0x610 [ 936.409247][ T7867] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 936.415127][ T7867] RIP: 0033:0x45737a [ 936.419004][ T7867] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 936.438631][ T7867] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 936.447116][ T7867] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 936.455077][ T7867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 936.463043][ T7867] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 000000000139f940 [ 936.471015][ T7867] R10: 000000000139fc10 R11: 0000000000000246 R12: 0000000000000001 [ 936.478973][ T7867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 936.488868][ T7867] memory: usage 19256kB, limit 0kB, failcnt 185 [ 936.495262][ T7867] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 936.502820][ T7867] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 936.509758][ T7867] Memory cgroup stats for /syz3: cache:0KB rss:15356KB rss_huge:14336KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:15340KB inactive_file:0KB active_file:0KB unevictable:0KB [ 936.531123][ T7867] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15829,uid=0 [ 936.546680][ T7867] Memory cgroup out of memory: Killed process 15829 (syz-executor.3) total-vm:72712kB, anon-rss:2220kB, file-rss:35784kB, shmem-rss:0kB [ 936.562246][ T7873] syz-executor.4 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=0, oom_score_adj=0 [ 936.563654][ T1043] oom_reaper: reaped process 15829 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 936.575443][ T7873] CPU: 0 PID: 7873 Comm: syz-executor.4 Not tainted 5.1.0-rc7+ #97 [ 936.592389][ T7873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 936.602449][ T7873] Call Trace: [ 936.605753][ T7873] dump_stack+0x172/0x1f0 [ 936.610095][ T7873] dump_header+0x10f/0xb6c [ 936.614505][ T7873] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 936.620309][ T7873] ? ___ratelimit+0x60/0x595 [ 936.624890][ T7873] ? do_raw_spin_unlock+0x57/0x270 [ 936.629993][ T7873] oom_kill_process.cold+0x10/0x15 [ 936.635095][ T7873] out_of_memory+0x79a/0x1280 [ 936.639774][ T7873] ? oom_killer_disable+0x280/0x280 [ 936.644984][ T7873] ? find_held_lock+0x35/0x130 [ 936.649782][ T7873] mem_cgroup_out_of_memory+0x1ca/0x230 [ 936.655337][ T7873] ? memcg_event_wake+0x230/0x230 [ 936.660363][ T7873] ? do_raw_spin_unlock+0x57/0x270 [ 936.665488][ T7873] ? _raw_spin_unlock+0x2d/0x50 [ 936.670334][ T7873] try_charge+0x102c/0x15c0 [ 936.674830][ T7873] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 936.681059][ T7873] ? should_fail+0x1de/0x852 [ 936.685654][ T7873] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 936.691195][ T7873] ? rcu_read_lock_sched_held+0x110/0x130 [ 936.696925][ T7873] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 936.702459][ T7873] __memcg_kmem_charge_memcg+0x7c/0x130 [ 936.707984][ T7873] ? memcg_kmem_put_cache+0xb0/0xb0 [ 936.713166][ T7873] ? cache_grow_begin+0x594/0x860 [ 936.718172][ T7873] ? lockdep_hardirqs_on+0x418/0x5d0 [ 936.723437][ T7873] ? trace_hardirqs_on+0x67/0x230 [ 936.728442][ T7873] cache_grow_begin+0x5c0/0x860 [ 936.733272][ T7873] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 936.739502][ T7873] ? __cpuset_node_allowed+0x136/0x540 [ 936.744973][ T7873] fallback_alloc+0x1fd/0x2d0 [ 936.749672][ T7873] ____cache_alloc_node+0x1be/0x1e0 [ 936.754861][ T7873] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 936.761101][ T7873] kmem_cache_alloc+0x1e8/0x6f0 [ 936.765949][ T7873] __alloc_file+0x27/0x300 [ 936.770358][ T7873] alloc_empty_file+0x72/0x170 [ 936.775113][ T7873] alloc_file+0x5e/0x4d0 [ 936.779351][ T7873] alloc_file_pseudo+0x189/0x280 [ 936.784282][ T7873] ? alloc_file+0x4d0/0x4d0 [ 936.788769][ T7873] ? __alloc_fd+0x44d/0x560 [ 936.793259][ T7873] sock_alloc_file+0x4d/0x170 [ 936.797916][ T7873] __sys_socket+0x150/0x220 [ 936.802402][ T7873] ? move_addr_to_kernel+0x80/0x80 [ 936.807491][ T7873] ? do_syscall_64+0x26/0x610 [ 936.812159][ T7873] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 936.818215][ T7873] ? do_syscall_64+0x26/0x610 [ 936.822875][ T7873] __x64_sys_socket+0x73/0xb0 [ 936.827531][ T7873] do_syscall_64+0x103/0x610 [ 936.832117][ T7873] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 936.838000][ T7873] RIP: 0033:0x45b917 [ 936.841877][ T7873] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 936.861471][ T7873] RSP: 002b:0000000000a4f628 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 936.869878][ T7873] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b917 [ 936.877860][ T7873] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 936.885812][ T7873] RBP: 0000000000000706 R08: 0000000000a4f6ac R09: 000000000000000a [ 936.893761][ T7873] R10: 0000000000a4f6b0 R11: 0000000000000246 R12: 0000000000000000 [ 936.901717][ T7873] R13: 0000000000a4fdb0 R14: 00000000000dd7eb R15: 0000000000a4fdc0 [ 936.910983][ T7873] memory: usage 4396kB, limit 0kB, failcnt 124 [ 936.917171][ T7873] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 936.924818][ T7873] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 936.931854][ T7873] Memory cgroup stats for /syz4: cache:76KB rss:2244KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2228KB inactive_file:0KB active_file:0KB unevictable:0KB [ 936.953182][ T7873] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=4485,uid=0 [ 936.968832][ T7873] Memory cgroup out of memory: Killed process 4485 (syz-executor.4) total-vm:72448kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 936.997016][ T7860] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 937.015412][ T7860] CPU: 0 PID: 7860 Comm: syz-executor.0 Not tainted 5.1.0-rc7+ #97 [ 937.023310][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 937.027460][T26876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 937.033356][ T7860] Call Trace: [ 937.033379][ T7860] dump_stack+0x172/0x1f0 [ 937.033400][ T7860] dump_header+0x10f/0xb6c [ 937.033417][ T7860] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 937.033432][ T7860] ? ___ratelimit+0x60/0x595 [ 937.033447][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 937.033464][ T7860] oom_kill_process.cold+0x10/0x15 [ 937.033481][ T7860] out_of_memory+0x79a/0x1280 [ 937.033501][ T7860] ? oom_killer_disable+0x280/0x280 [ 937.033512][ T7860] ? find_held_lock+0x35/0x130 [ 937.033535][ T7860] mem_cgroup_out_of_memory+0x1ca/0x230 [ 937.033548][ T7860] ? memcg_event_wake+0x230/0x230 [ 937.033566][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 937.033581][ T7860] ? _raw_spin_unlock+0x2d/0x50 [ 937.033599][ T7860] try_charge+0x102c/0x15c0 [ 937.033611][ T7860] ? find_held_lock+0x35/0x130 [ 937.033654][ T7860] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 937.033674][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 937.087800][T26876] 8021q: adding VLAN 0 to HW filter on device team0 [ 937.092898][ T7860] ? find_held_lock+0x35/0x130 [ 937.092916][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 937.092943][ T7860] __memcg_kmem_charge_memcg+0x7c/0x130 [ 937.092959][ T7860] ? memcg_kmem_put_cache+0xb0/0xb0 [ 937.092977][ T7860] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 937.092995][ T7860] __memcg_kmem_charge+0x136/0x300 [ 937.093014][ T7860] __alloc_pages_nodemask+0x4bf/0x8d0 [ 937.093028][ T7860] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 937.093046][ T7860] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 937.093064][ T7860] ? copy_process.part.0+0x1d08/0x7980 [ 937.093096][ T7860] copy_process.part.0+0x3e0/0x7980 [ 937.099175][T22063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 937.103242][ T7860] ? __lock_acquire+0x548/0x3fb0 [ 937.108596][T22063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 937.112566][ T7860] ? wp_page_reuse+0x159/0x1d0 [ 937.112589][ T7860] ? __might_fault+0x12b/0x1e0 [ 937.112612][ T7860] ? __cleanup_sighand+0x60/0x60 [ 937.112639][ T7860] ? lock_downgrade+0x880/0x880 [ 937.112674][ T7860] _do_fork+0x257/0xfd0 [ 937.146256][T22063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 937.150875][ T7860] ? fork_idle+0x1d0/0x1d0 [ 937.150900][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 937.150915][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 937.150930][ T7860] ? do_syscall_64+0x26/0x610 [ 937.150945][ T7860] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 937.150958][ T7860] ? do_syscall_64+0x26/0x610 [ 937.150977][ T7860] __x64_sys_clone+0xbf/0x150 [ 937.150995][ T7860] do_syscall_64+0x103/0x610 [ 937.151012][ T7860] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 937.151022][ T7860] RIP: 0033:0x45737a [ 937.151036][ T7860] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 937.151043][ T7860] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 937.151055][ T7860] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 937.151063][ T7860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 937.151070][ T7860] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 00000000022b4940 [ 937.151079][ T7860] R10: 00000000022b4c10 R11: 0000000000000246 R12: 0000000000000001 [ 937.151085][ T7860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 937.153155][ T7860] memory: usage 16440kB, limit 0kB, failcnt 257 [ 937.157046][T22063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 937.162241][ T7860] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 937.174226][T22063] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.179069][ T7860] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 937.184678][T22063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 937.190951][ T7860] Memory cgroup stats for /syz0: cache:44KB rss:13040KB rss_huge:12288KB shmem:80KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:13008KB inactive_file:0KB active_file:0KB unevictable:0KB [ 937.207885][T22063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 937.215146][ T7860] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=17371,uid=0 [ 937.226771][T22063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 937.229992][ T7860] Memory cgroup out of memory: Killed process 17371 (syz-executor.0) total-vm:72448kB, anon-rss:2200kB, file-rss:35804kB, shmem-rss:0kB [ 937.239567][T22063] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.260973][ T7876] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 937.262161][T22063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.267253][ T7876] CPU: 0 PID: 7876 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 937.281654][T22063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 937.282629][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 937.288090][T22063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 937.293077][ T7876] Call Trace: [ 937.293100][ T7876] dump_stack+0x172/0x1f0 [ 937.293120][ T7876] dump_header+0x10f/0xb6c [ 937.293136][ T7876] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 937.293151][ T7876] ? ___ratelimit+0x60/0x595 [ 937.293166][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 937.293184][ T7876] oom_kill_process.cold+0x10/0x15 [ 937.293199][ T7876] out_of_memory+0x79a/0x1280 [ 937.293225][ T7876] ? oom_killer_disable+0x280/0x280 [ 937.304216][T22063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 937.316706][ T7876] ? find_held_lock+0x35/0x130 [ 937.316732][ T7876] mem_cgroup_out_of_memory+0x1ca/0x230 [ 937.316746][ T7876] ? memcg_event_wake+0x230/0x230 [ 937.316767][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 937.316782][ T7876] ? _raw_spin_unlock+0x2d/0x50 [ 937.316799][ T7876] try_charge+0x102c/0x15c0 [ 937.316812][ T7876] ? find_held_lock+0x35/0x130 [ 937.316833][ T7876] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 937.336242][T22063] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 937.341174][ T7876] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 937.341190][ T7876] ? find_held_lock+0x35/0x130 [ 937.341205][ T7876] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 937.341232][ T7876] __memcg_kmem_charge_memcg+0x7c/0x130 [ 937.341252][ T7876] ? memcg_kmem_put_cache+0xb0/0xb0 [ 937.356487][T22063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 937.357202][ T7876] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 937.365942][T22063] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 937.371393][ T7876] __memcg_kmem_charge+0x136/0x300 [ 937.371414][ T7876] __alloc_pages_nodemask+0x4bf/0x8d0 [ 937.371428][ T7876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 937.371448][ T7876] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 937.371466][ T7876] ? copy_process.part.0+0x1d08/0x7980 [ 937.371483][ T7876] ? lockdep_hardirqs_on+0x418/0x5d0 [ 937.371500][ T7876] ? trace_hardirqs_on+0x67/0x230 [ 937.371518][ T7876] copy_process.part.0+0x3e0/0x7980 [ 937.371542][ T7876] ? __lock_acquire+0x548/0x3fb0 [ 937.396003][T22064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 937.400787][ T7876] ? wp_page_reuse+0x159/0x1d0 [ 937.400813][ T7876] ? __might_fault+0x12b/0x1e0 [ 937.400837][ T7876] ? __cleanup_sighand+0x60/0x60 [ 937.400856][ T7876] ? lock_downgrade+0x880/0x880 [ 937.400886][ T7876] _do_fork+0x257/0xfd0 [ 937.400914][ T7876] ? fork_idle+0x1d0/0x1d0 [ 937.415135][T22064] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 937.429705][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 937.429720][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 937.429735][ T7876] ? do_syscall_64+0x26/0x610 [ 937.429751][ T7876] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 937.429763][ T7876] ? do_syscall_64+0x26/0x610 [ 937.429783][ T7876] __x64_sys_clone+0xbf/0x150 [ 937.429799][ T7876] do_syscall_64+0x103/0x610 [ 937.429816][ T7876] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 937.429826][ T7876] RIP: 0033:0x45737a [ 937.429839][ T7876] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 937.429847][ T7876] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 937.429860][ T7876] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 937.429867][ T7876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 937.429875][ T7876] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 000000000275d940 [ 937.429882][ T7876] R10: 000000000275dc10 R11: 0000000000000246 R12: 0000000000000001 [ 937.429890][ T7876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 937.434710][ T7876] memory: usage 16536kB, limit 0kB, failcnt 299 [ 937.476872][T22064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 937.483128][ T7876] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 937.522544][T22064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 937.528195][ T7876] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 937.563455][T22064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 937.591507][ T7876] Memory cgroup stats for /syz5: cache:16KB rss:13040KB rss_huge:12288KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:13016KB inactive_file:0KB active_file:0KB unevictable:0KB [ 937.604272][T22064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 937.607780][ T7876] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17376,uid=0 [ 937.615767][T26876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 937.617079][ T7876] Memory cgroup out of memory: Killed process 17376 (syz-executor.5) total-vm:72448kB, anon-rss:2200kB, file-rss:35804kB, shmem-rss:0kB [ 937.652892][T26876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 937.670210][ T7865] syz-executor.2 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 937.688079][ T7865] CPU: 0 PID: 7865 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 938.024343][ T7865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 938.034385][ T7865] Call Trace: [ 938.037664][ T7865] dump_stack+0x172/0x1f0 [ 938.041977][ T7865] dump_header+0x10f/0xb6c [ 938.046371][ T7865] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 938.052169][ T7865] ? ___ratelimit+0x60/0x595 [ 938.056752][ T7865] ? do_raw_spin_unlock+0x57/0x270 [ 938.061850][ T7865] oom_kill_process.cold+0x10/0x15 [ 938.066942][ T7865] out_of_memory+0x79a/0x1280 [ 938.071626][ T7865] ? oom_killer_disable+0x280/0x280 [ 938.076842][ T7865] ? find_held_lock+0x35/0x130 [ 938.081591][ T7865] mem_cgroup_out_of_memory+0x1ca/0x230 [ 938.087120][ T7865] ? memcg_event_wake+0x230/0x230 [ 938.092138][ T7865] ? do_raw_spin_unlock+0x57/0x270 [ 938.097241][ T7865] ? _raw_spin_unlock+0x2d/0x50 [ 938.102072][ T7865] try_charge+0x102c/0x15c0 [ 938.106557][ T7865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 938.112099][ T7865] ? rcu_read_lock_sched_held+0x110/0x130 [ 938.117812][ T7865] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 938.123344][ T7865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 938.128867][ T7865] ? memcg_kmem_put_cache+0xb0/0xb0 [ 938.134045][ T7865] ? cache_grow_begin+0x594/0x860 [ 938.139057][ T7865] ? lockdep_hardirqs_on+0x418/0x5d0 [ 938.144435][ T7865] ? trace_hardirqs_on+0x67/0x230 [ 938.149452][ T7865] cache_grow_begin+0x5c0/0x860 [ 938.154301][ T7865] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 938.160536][ T7865] ? __cpuset_node_allowed+0x136/0x540 [ 938.166018][ T7865] fallback_alloc+0x1fd/0x2d0 [ 938.170700][ T7865] ____cache_alloc_node+0x1be/0x1e0 [ 938.175888][ T7865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 938.182110][ T7865] kmem_cache_alloc+0x1e8/0x6f0 [ 938.186940][ T7865] ? inet_create+0x2f4/0xe10 [ 938.191524][ T7865] sk_prot_alloc+0x67/0x2e0 [ 938.196018][ T7865] ? lock_downgrade+0x880/0x880 [ 938.200857][ T7865] sk_alloc+0x39/0xf70 [ 938.204936][ T7865] inet_create+0x36a/0xe10 [ 938.209353][ T7865] __sock_create+0x3e6/0x750 [ 938.213937][ T7865] __sys_socket+0x103/0x220 [ 938.218418][ T7865] ? move_addr_to_kernel+0x80/0x80 [ 938.226281][ T7865] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 938.232170][ T7865] ? do_syscall_64+0x26/0x610 [ 938.236843][ T7865] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 938.242890][ T7865] ? do_syscall_64+0x26/0x610 [ 938.247547][ T7865] __x64_sys_socket+0x73/0xb0 [ 938.252220][ T7865] do_syscall_64+0x103/0x610 [ 938.256805][ T7865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 938.262692][ T7865] RIP: 0033:0x45b917 [ 938.266566][ T7865] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 938.286663][ T7865] RSP: 002b:0000000000a4f698 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 938.295075][ T7865] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b917 [ 938.303027][ T7865] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 938.310987][ T7865] RBP: 000000000000182d R08: 0000000000000000 R09: 000000000000000a [ 938.318946][ T7865] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 938.326896][ T7865] R13: 0000000000a4fdb0 R14: 000000000100099b R15: 0000000000a4fdc0 19:35:25 executing program 1: syz_execute_func(&(0x7f0000000180)="1c03b5b598cd801b69e4f56962f5696200d9d9d017795bf9f2680c0000008fe9589b26c7e4c753fbc4e101edfec4427d82663ed107c4c2b90a23f2168f4808eebce00000802000c422b18cb6070000005151c4a27d181ec1ea01eff265dc5f00c35b5b304545e269a841000fc4c2559c3766030faee42c240f5463805bdedec4a1e1e0ef26400f0d18c401fe5ff6e30fad6736660fd2938c000000c4c1f913376666450f17720d2e440fc7bf0d00008066660f3a0b0865") [ 938.408292][ T7865] memory: usage 28380kB, limit 0kB, failcnt 129 [ 938.418972][ T7865] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 938.434476][ T7865] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 938.442347][ T7865] Memory cgroup stats for /syz2: cache:124KB rss:23888KB rss_huge:22528KB shmem:0KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:23864KB inactive_file:0KB active_file:0KB unevictable:0KB [ 938.464487][ T7865] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=9562,uid=0 [ 938.483103][ T7865] Memory cgroup out of memory: Killed process 9562 (syz-executor.2) total-vm:72580kB, anon-rss:2196kB, file-rss:35816kB, shmem-rss:0kB 19:35:25 executing program 1: syz_execute_func(&(0x7f0000000180)="1c03b5b598cd801b69e4f56962f5696200d9d9d017795bf9f2680c0000008fe9589b26c7e4c753fbc4e101edfec4427d82663ed107c4c2b90a23f2168f4808eebce00000802000c422b18cb6070000005151c4a27d181ec1ea01eff265dc5f00c35b5b304545e269a841000fc4c2559c3766030faee42c240f5463805bdedec4a1e1e0ef26400f0d18c401fe5ff6e30fad6736660fd2938c000000c4c1f913376666450f17720d2e440fc7bf0d00008066660f3a0b0865") [ 938.517998][ T7867] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 938.559242][ T7867] CPU: 0 PID: 7867 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #97 [ 938.567155][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 938.577211][ T7867] Call Trace: [ 938.580514][ T7867] dump_stack+0x172/0x1f0 [ 938.584855][ T7867] dump_header+0x10f/0xb6c [ 938.589276][ T7867] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 938.595077][ T7867] ? ___ratelimit+0x60/0x595 [ 938.599672][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 938.604789][ T7867] oom_kill_process.cold+0x10/0x15 [ 938.609891][ T7867] out_of_memory+0x79a/0x1280 [ 938.614571][ T7867] ? oom_killer_disable+0x280/0x280 [ 938.619767][ T7867] ? find_held_lock+0x35/0x130 [ 938.624540][ T7867] mem_cgroup_out_of_memory+0x1ca/0x230 [ 938.630073][ T7867] ? memcg_event_wake+0x230/0x230 [ 938.635269][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 938.640371][ T7867] ? _raw_spin_unlock+0x2d/0x50 [ 938.645228][ T7867] try_charge+0x102c/0x15c0 [ 938.649723][ T7867] ? find_held_lock+0x35/0x130 [ 938.654466][ T7867] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 938.659998][ T7867] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 938.665541][ T7867] ? find_held_lock+0x35/0x130 [ 938.670312][ T7867] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 938.675878][ T7867] __memcg_kmem_charge_memcg+0x7c/0x130 [ 938.681417][ T7867] ? memcg_kmem_put_cache+0xb0/0xb0 [ 938.686636][ T7867] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 938.692178][ T7867] __memcg_kmem_charge+0x136/0x300 [ 938.697271][ T7867] __alloc_pages_nodemask+0x4bf/0x8d0 [ 938.702642][ T7867] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 938.708885][ T7867] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 938.714587][ T7867] ? copy_process.part.0+0x1d08/0x7980 [ 938.720049][ T7867] copy_process.part.0+0x3e0/0x7980 [ 938.725251][ T7867] ? __lock_acquire+0x548/0x3fb0 [ 938.730193][ T7867] ? wp_page_reuse+0x159/0x1d0 [ 938.734940][ T7867] ? __might_fault+0x12b/0x1e0 [ 938.739701][ T7867] ? __cleanup_sighand+0x60/0x60 [ 938.744654][ T7867] ? lock_downgrade+0x880/0x880 [ 938.749524][ T7867] _do_fork+0x257/0xfd0 [ 938.753681][ T7867] ? fork_idle+0x1d0/0x1d0 [ 938.758081][ T7867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 938.763525][ T7867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 938.768974][ T7867] ? do_syscall_64+0x26/0x610 [ 938.773674][ T7867] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 938.779737][ T7867] ? do_syscall_64+0x26/0x610 [ 938.784420][ T7867] __x64_sys_clone+0xbf/0x150 [ 938.789102][ T7867] do_syscall_64+0x103/0x610 [ 938.793691][ T7867] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 938.799571][ T7867] RIP: 0033:0x45737a [ 938.803469][ T7867] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 938.823069][ T7867] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 938.831471][ T7867] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 938.839428][ T7867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 938.847386][ T7867] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 000000000139f940 [ 938.855353][ T7867] R10: 000000000139fc10 R11: 0000000000000246 R12: 0000000000000001 [ 938.863314][ T7867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 938.873606][ T7867] memory: usage 16836kB, limit 0kB, failcnt 191 [ 938.879912][ T7867] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 938.887362][ T7867] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 938.894397][ T7867] Memory cgroup stats for /syz3: cache:0KB rss:13208KB rss_huge:12288KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:13176KB inactive_file:0KB active_file:0KB unevictable:0KB [ 938.915708][ T7867] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17417,uid=0 [ 938.931111][ T7867] Memory cgroup out of memory: Killed process 17417 (syz-executor.3) total-vm:72448kB, anon-rss:2204kB, file-rss:35800kB, shmem-rss:0kB [ 938.945268][ T7873] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 938.950480][ T1043] oom_reaper: reaped process 17417 (syz-executor.3), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 938.959246][ T7873] CPU: 0 PID: 7873 Comm: syz-executor.4 Not tainted 5.1.0-rc7+ #97 [ 938.975966][ T7873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 938.986016][ T7873] Call Trace: [ 938.989315][ T7873] dump_stack+0x172/0x1f0 [ 938.993667][ T7873] dump_header+0x10f/0xb6c [ 938.998096][ T7873] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 939.003887][ T7873] ? ___ratelimit+0x60/0x595 [ 939.008457][ T7873] ? do_raw_spin_unlock+0x57/0x270 [ 939.013563][ T7873] oom_kill_process.cold+0x10/0x15 [ 939.018668][ T7873] out_of_memory+0x79a/0x1280 [ 939.023331][ T7873] ? oom_killer_disable+0x280/0x280 [ 939.028531][ T7873] ? find_held_lock+0x35/0x130 [ 939.033296][ T7873] mem_cgroup_out_of_memory+0x1ca/0x230 [ 939.038848][ T7873] ? memcg_event_wake+0x230/0x230 [ 939.043892][ T7873] ? do_raw_spin_unlock+0x57/0x270 [ 939.049009][ T7873] ? _raw_spin_unlock+0x2d/0x50 [ 939.053876][ T7873] try_charge+0x102c/0x15c0 [ 939.058383][ T7873] ? find_held_lock+0x35/0x130 [ 939.063176][ T7873] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 939.068702][ T7873] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 939.074227][ T7873] ? find_held_lock+0x35/0x130 [ 939.078967][ T7873] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 939.084500][ T7873] __memcg_kmem_charge_memcg+0x7c/0x130 [ 939.090037][ T7873] ? memcg_kmem_put_cache+0xb0/0xb0 [ 939.095244][ T7873] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 939.100787][ T7873] __memcg_kmem_charge+0x136/0x300 [ 939.105896][ T7873] __alloc_pages_nodemask+0x4bf/0x8d0 [ 939.111261][ T7873] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 939.117497][ T7873] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 939.123202][ T7873] ? copy_process.part.0+0x1d08/0x7980 [ 939.128655][ T7873] copy_process.part.0+0x3e0/0x7980 [ 939.133836][ T7873] ? __lock_acquire+0x548/0x3fb0 [ 939.138774][ T7873] ? wp_page_reuse+0x159/0x1d0 [ 939.143525][ T7873] ? __might_fault+0x12b/0x1e0 [ 939.148287][ T7873] ? __cleanup_sighand+0x60/0x60 [ 939.153216][ T7873] ? lock_downgrade+0x880/0x880 [ 939.158063][ T7873] _do_fork+0x257/0xfd0 [ 939.162205][ T7873] ? fork_idle+0x1d0/0x1d0 [ 939.166602][ T7873] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 939.172053][ T7873] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 939.177500][ T7873] ? do_syscall_64+0x26/0x610 [ 939.182159][ T7873] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 939.188211][ T7873] ? do_syscall_64+0x26/0x610 [ 939.192883][ T7873] __x64_sys_clone+0xbf/0x150 [ 939.197565][ T7873] do_syscall_64+0x103/0x610 [ 939.202137][ T7873] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 939.208021][ T7873] RIP: 0033:0x45737a [ 939.211905][ T7873] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 939.231515][ T7873] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 939.239925][ T7873] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 939.247908][ T7873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 939.255876][ T7873] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000001ce1940 [ 939.263831][ T7873] R10: 0000000001ce1c10 R11: 0000000000000246 R12: 0000000000000001 [ 939.271792][ T7873] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 939.280418][ T7873] memory: usage 2008kB, limit 0kB, failcnt 132 [ 939.286583][ T7873] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 939.294123][ T7873] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 939.301015][ T7873] Memory cgroup stats for /syz4: cache:76KB rss:76KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:60KB inactive_file:0KB active_file:0KB unevictable:0KB [ 939.321575][ T7873] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=7873,uid=0 [ 939.337053][ T7873] Memory cgroup out of memory: Killed process 7873 (syz-executor.4) total-vm:72316kB, anon-rss:112kB, file-rss:35712kB, shmem-rss:0kB [ 939.352026][ T7860] Memory cgroup out of memory: Killed process 17392 (syz-executor.0) total-vm:72448kB, anon-rss:2200kB, file-rss:35800kB, shmem-rss:0kB [ 939.352440][ T1043] oom_reaper: reaped process 7873 (syz-executor.4), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 939.366707][ T7876] Memory cgroup out of memory: Killed process 15894 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35788kB, shmem-rss:0kB [ 939.394167][ T7865] Memory cgroup out of memory: Killed process 22257 (syz-executor.2) total-vm:72712kB, anon-rss:2212kB, file-rss:35800kB, shmem-rss:0kB [ 939.447757][ T7867] Memory cgroup out of memory: Killed process 15878 (syz-executor.3) total-vm:72580kB, anon-rss:2212kB, file-rss:35788kB, shmem-rss:0kB [ 939.480668][ T7867] Memory cgroup out of memory: Killed process 15917 (syz-executor.3) total-vm:72580kB, anon-rss:2212kB, file-rss:35788kB, shmem-rss:0kB [ 939.520984][ T7860] Memory cgroup out of memory: Killed process 28378 (syz-executor.0) total-vm:72448kB, anon-rss:2200kB, file-rss:35788kB, shmem-rss:0kB [ 939.558774][ T7876] Memory cgroup out of memory: Killed process 15927 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35788kB, shmem-rss:0kB [ 939.579248][ T1043] oom_reaper: reaped process 15927 (syz-executor.5), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 939.589320][ T7865] Memory cgroup out of memory: Killed process 8085 (syz-executor.2) total-vm:72448kB, anon-rss:2188kB, file-rss:35820kB, shmem-rss:0kB [ 939.636441][ T7867] Memory cgroup out of memory: Killed process 15952 (syz-executor.3) total-vm:72580kB, anon-rss:2212kB, file-rss:35788kB, shmem-rss:0kB [ 939.667521][ T7860] Memory cgroup out of memory: Killed process 1500 (syz-executor.0) total-vm:72580kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 939.689754][ T7876] Memory cgroup out of memory: Killed process 15959 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35788kB, shmem-rss:0kB [ 939.718809][ T1043] oom_reaper: reaped process 15959 (syz-executor.5), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 939.737379][ T7865] Memory cgroup out of memory: Killed process 8183 (syz-executor.2) total-vm:72448kB, anon-rss:2188kB, file-rss:35820kB, shmem-rss:0kB [ 939.781838][ T7867] oom_kill_process: 12 callbacks suppressed [ 939.781864][ T7867] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 939.813839][ T7867] CPU: 1 PID: 7867 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #97 [ 939.821743][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 939.831795][ T7867] Call Trace: [ 939.835097][ T7867] dump_stack+0x172/0x1f0 [ 939.839436][ T7867] dump_header+0x10f/0xb6c [ 939.843853][ T7867] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 939.849661][ T7867] ? ___ratelimit+0x60/0x595 [ 939.854260][ T7867] oom_kill_process.cold+0x10/0x15 [ 939.859372][ T7867] out_of_memory+0x79a/0x1280 [ 939.864056][ T7867] ? oom_killer_disable+0x280/0x280 [ 939.869250][ T7867] ? find_held_lock+0x35/0x130 [ 939.874023][ T7867] mem_cgroup_out_of_memory+0x1ca/0x230 [ 939.879565][ T7867] ? memcg_event_wake+0x230/0x230 [ 939.884603][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 939.889730][ T7867] ? _raw_spin_unlock+0x2d/0x50 [ 939.894582][ T7867] try_charge+0x102c/0x15c0 [ 939.899089][ T7867] ? find_held_lock+0x35/0x130 [ 939.903865][ T7867] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 939.909410][ T7867] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 939.914956][ T7867] ? find_held_lock+0x35/0x130 [ 939.919727][ T7867] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 939.925298][ T7867] __memcg_kmem_charge_memcg+0x7c/0x130 [ 939.930844][ T7867] ? memcg_kmem_put_cache+0xb0/0xb0 [ 939.936048][ T7867] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 939.941595][ T7867] __memcg_kmem_charge+0x136/0x300 [ 939.946721][ T7867] __alloc_pages_nodemask+0x4bf/0x8d0 [ 939.952094][ T7867] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 939.958337][ T7867] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 939.964056][ T7867] ? copy_process.part.0+0x1d08/0x7980 [ 939.969501][ T7867] copy_process.part.0+0x3e0/0x7980 [ 939.974680][ T7867] ? __lock_acquire+0x548/0x3fb0 [ 939.979601][ T7867] ? wp_page_reuse+0x159/0x1d0 [ 939.984351][ T7867] ? __might_fault+0x12b/0x1e0 [ 939.989097][ T7867] ? __cleanup_sighand+0x60/0x60 [ 939.994015][ T7867] ? lock_downgrade+0x880/0x880 [ 939.998848][ T7867] _do_fork+0x257/0xfd0 [ 940.002984][ T7867] ? fork_idle+0x1d0/0x1d0 [ 940.007385][ T7867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 940.012830][ T7867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 940.018268][ T7867] ? do_syscall_64+0x26/0x610 [ 940.022928][ T7867] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 940.028989][ T7867] ? do_syscall_64+0x26/0x610 [ 940.033665][ T7867] __x64_sys_clone+0xbf/0x150 [ 940.038328][ T7867] do_syscall_64+0x103/0x610 [ 940.042904][ T7867] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 940.048775][ T7867] RIP: 0033:0x45737a [ 940.052659][ T7867] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 940.072266][ T7867] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 940.080675][ T7867] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 940.088638][ T7867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 940.096604][ T7867] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 000000000139f940 [ 940.105887][ T7867] R10: 000000000139fc10 R11: 0000000000000246 R12: 0000000000000001 [ 940.113866][ T7867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 940.123270][ T7867] memory: usage 7520kB, limit 0kB, failcnt 215 [ 940.129674][ T7867] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 940.137188][ T7867] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 940.144143][ T7867] Memory cgroup stats for /syz3: cache:0KB rss:4540KB rss_huge:4096KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:4516KB inactive_file:0KB active_file:0KB unevictable:0KB [ 940.144236][ T7867] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=9400,uid=0 [ 940.180685][ T7867] Memory cgroup out of memory: Killed process 9400 (syz-executor.3) total-vm:72448kB, anon-rss:2196kB, file-rss:35800kB, shmem-rss:0kB [ 940.195171][ T7860] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 940.196358][ T1043] oom_reaper: reaped process 9400 (syz-executor.3), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 940.209487][ T7860] CPU: 1 PID: 7860 Comm: syz-executor.0 Not tainted 5.1.0-rc7+ #97 [ 940.226166][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 940.226179][ T7860] Call Trace: [ 940.239536][ T7860] dump_stack+0x172/0x1f0 [ 940.239556][ T7860] dump_header+0x10f/0xb6c [ 940.239578][ T7860] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 940.248313][ T7860] ? ___ratelimit+0x60/0x595 [ 940.258710][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 940.264534][ T7860] oom_kill_process.cold+0x10/0x15 [ 940.269661][ T7860] out_of_memory+0x79a/0x1280 [ 940.269681][ T7860] ? oom_killer_disable+0x280/0x280 [ 940.269694][ T7860] ? find_held_lock+0x35/0x130 [ 940.269717][ T7860] mem_cgroup_out_of_memory+0x1ca/0x230 [ 940.279683][ T7860] ? memcg_event_wake+0x230/0x230 [ 940.279704][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 940.279720][ T7860] ? _raw_spin_unlock+0x2d/0x50 [ 940.279740][ T7860] try_charge+0x102c/0x15c0 [ 940.290045][ T7860] ? find_held_lock+0x35/0x130 [ 940.290067][ T7860] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 940.290079][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 940.290105][ T7860] ? find_held_lock+0x35/0x130 [ 940.300736][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 940.300759][ T7860] __memcg_kmem_charge_memcg+0x7c/0x130 [ 940.300774][ T7860] ? memcg_kmem_put_cache+0xb0/0xb0 [ 940.300795][ T7860] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 940.310162][ T7860] __memcg_kmem_charge+0x136/0x300 [ 940.310184][ T7860] __alloc_pages_nodemask+0x4bf/0x8d0 [ 940.310206][ T7860] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 940.320499][ T7860] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 940.320516][ T7860] ? copy_process.part.0+0x1d08/0x7980 [ 940.320545][ T7860] copy_process.part.0+0x3e0/0x7980 [ 940.330940][ T7860] ? __lock_acquire+0x548/0x3fb0 [ 940.330955][ T7860] ? wp_page_reuse+0x159/0x1d0 [ 940.330978][ T7860] ? __might_fault+0x12b/0x1e0 [ 940.331002][ T7860] ? __cleanup_sighand+0x60/0x60 [ 940.342087][ T7860] ? lock_downgrade+0x880/0x880 [ 940.342114][ T7860] _do_fork+0x257/0xfd0 [ 940.342142][ T7860] ? fork_idle+0x1d0/0x1d0 [ 940.352898][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 940.352911][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 940.352925][ T7860] ? do_syscall_64+0x26/0x610 [ 940.352939][ T7860] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 940.352960][ T7860] ? do_syscall_64+0x26/0x610 [ 940.363437][ T7860] __x64_sys_clone+0xbf/0x150 [ 940.363456][ T7860] do_syscall_64+0x103/0x610 [ 940.363476][ T7860] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 940.363494][ T7860] RIP: 0033:0x45737a [ 940.376398][ T7860] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 940.387049][ T7860] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 940.396748][ T7860] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 940.406454][ T7860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 940.415467][ T7860] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 00000000022b4940 [ 940.425315][ T7860] R10: 00000000022b4c10 R11: 0000000000000246 R12: 0000000000000001 [ 940.524866][ T7860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 940.535707][ T7860] memory: usage 7144kB, limit 0kB, failcnt 281 [ 940.542133][ T7860] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 940.552129][ T7860] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 940.559082][ T7860] Memory cgroup stats for /syz0: cache:44KB rss:4396KB rss_huge:4096KB shmem:80KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:4372KB inactive_file:0KB active_file:0KB unevictable:0KB [ 940.580851][ T7860] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1765,uid=0 [ 940.596271][ T7860] Memory cgroup out of memory: Killed process 1765 (syz-executor.0) total-vm:72448kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 940.610423][ T7876] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 940.611590][ T1043] oom_reaper: reaped process 1765 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 940.624871][ T7876] CPU: 1 PID: 7876 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 940.641320][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 940.651380][ T7876] Call Trace: [ 940.654694][ T7876] dump_stack+0x172/0x1f0 [ 940.659036][ T7876] dump_header+0x10f/0xb6c [ 940.663465][ T7876] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 940.669303][ T7876] ? ___ratelimit+0x60/0x595 [ 940.673908][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 940.679032][ T7876] oom_kill_process.cold+0x10/0x15 [ 940.684164][ T7876] out_of_memory+0x79a/0x1280 [ 940.688853][ T7876] ? oom_killer_disable+0x280/0x280 [ 940.694056][ T7876] ? find_held_lock+0x35/0x130 [ 940.698843][ T7876] mem_cgroup_out_of_memory+0x1ca/0x230 [ 940.704406][ T7876] ? memcg_event_wake+0x230/0x230 [ 940.709450][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 940.714585][ T7876] ? _raw_spin_unlock+0x2d/0x50 [ 940.719437][ T7876] try_charge+0x102c/0x15c0 [ 940.723929][ T7876] ? find_held_lock+0x35/0x130 [ 940.728690][ T7876] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 940.734240][ T7876] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 940.739802][ T7876] ? find_held_lock+0x35/0x130 [ 940.744556][ T7876] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 940.750117][ T7876] __memcg_kmem_charge_memcg+0x7c/0x130 [ 940.755763][ T7876] ? memcg_kmem_put_cache+0xb0/0xb0 [ 940.760951][ T7876] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 940.766479][ T7876] __memcg_kmem_charge+0x136/0x300 [ 940.771600][ T7876] __alloc_pages_nodemask+0x4bf/0x8d0 [ 940.777068][ T7876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 940.783312][ T7876] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 940.789050][ T7876] ? copy_process.part.0+0x1d08/0x7980 [ 940.794511][ T7876] ? lockdep_hardirqs_on+0x418/0x5d0 [ 940.799799][ T7876] ? trace_hardirqs_on+0x67/0x230 [ 940.804814][ T7876] copy_process.part.0+0x3e0/0x7980 [ 940.810004][ T7876] ? __lock_acquire+0x548/0x3fb0 [ 940.814929][ T7876] ? wp_page_reuse+0x159/0x1d0 [ 940.819776][ T7876] ? __might_fault+0x12b/0x1e0 [ 940.824544][ T7876] ? __cleanup_sighand+0x60/0x60 [ 940.829471][ T7876] ? lock_downgrade+0x880/0x880 [ 940.834322][ T7876] _do_fork+0x257/0xfd0 [ 940.838464][ T7876] ? fork_idle+0x1d0/0x1d0 [ 940.842875][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 940.848326][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 940.853771][ T7876] ? do_syscall_64+0x26/0x610 [ 940.858433][ T7876] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 940.864494][ T7876] ? do_syscall_64+0x26/0x610 [ 940.869178][ T7876] __x64_sys_clone+0xbf/0x150 [ 940.873841][ T7876] do_syscall_64+0x103/0x610 [ 940.878427][ T7876] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 940.884302][ T7876] RIP: 0033:0x45737a [ 940.888178][ T7876] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 940.907783][ T7876] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 940.916197][ T7876] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 940.924176][ T7876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 940.932138][ T7876] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 000000000275d940 [ 940.940104][ T7876] R10: 000000000275dc10 R11: 0000000000000246 R12: 0000000000000001 [ 940.948068][ T7876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 940.957803][ T7876] memory: usage 7196kB, limit 0kB, failcnt 371 [ 940.964079][ T7876] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 940.971639][ T7876] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 940.971647][ T7876] Memory cgroup stats for /syz5: cache:16KB rss:4420KB rss_huge:4096KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:4388KB inactive_file:0KB active_file:0KB unevictable:0KB [ 940.999929][ T7876] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17400,uid=0 [ 941.015389][ T7876] Memory cgroup out of memory: Killed process 17400 (syz-executor.5) total-vm:72448kB, anon-rss:2200kB, file-rss:35796kB, shmem-rss:0kB [ 941.029663][ T7865] syz-executor.2 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 941.030930][ T1043] oom_reaper: reaped process 17400 (syz-executor.5), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 941.043178][ T7865] CPU: 1 PID: 7865 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 941.059729][ T7865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 941.059735][ T7865] Call Trace: [ 941.059757][ T7865] dump_stack+0x172/0x1f0 [ 941.059777][ T7865] dump_header+0x10f/0xb6c [ 941.059793][ T7865] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 941.059807][ T7865] ? ___ratelimit+0x60/0x595 [ 941.059822][ T7865] ? do_raw_spin_unlock+0x57/0x270 [ 941.059839][ T7865] oom_kill_process.cold+0x10/0x15 [ 941.059855][ T7865] out_of_memory+0x79a/0x1280 [ 941.059875][ T7865] ? oom_killer_disable+0x280/0x280 [ 941.059887][ T7865] ? find_held_lock+0x35/0x130 [ 941.059911][ T7865] mem_cgroup_out_of_memory+0x1ca/0x230 [ 941.059924][ T7865] ? memcg_event_wake+0x230/0x230 [ 941.059945][ T7865] ? do_raw_spin_unlock+0x57/0x270 [ 941.073281][ T7865] ? _raw_spin_unlock+0x2d/0x50 [ 941.082000][ T7865] try_charge+0x102c/0x15c0 [ 941.082024][ T7865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 941.082046][ T7865] ? rcu_read_lock_sched_held+0x110/0x130 [ 941.082067][ T7865] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 941.102636][ T7865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 941.112484][ T7865] ? memcg_kmem_put_cache+0xb0/0xb0 [ 941.112499][ T7865] ? cache_grow_begin+0x594/0x860 [ 941.112513][ T7865] ? lockdep_hardirqs_on+0x418/0x5d0 [ 941.112528][ T7865] ? trace_hardirqs_on+0x67/0x230 [ 941.112545][ T7865] cache_grow_begin+0x5c0/0x860 [ 941.112566][ T7865] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 941.122870][ T7865] ? __cpuset_node_allowed+0x136/0x540 [ 941.132980][ T7865] fallback_alloc+0x1fd/0x2d0 [ 941.133002][ T7865] ____cache_alloc_node+0x1be/0x1e0 [ 941.133016][ T7865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 941.133035][ T7865] kmem_cache_alloc_node_trace+0xec/0x720 [ 941.133056][ T7865] ? lock_downgrade+0x880/0x880 [ 941.142484][ T7865] __kmalloc_node+0x3d/0x70 [ 941.153772][ T7865] kvmalloc_node+0x68/0x100 [ 941.153827][ T7865] xt_alloc_table_info+0x41/0xa0 [ 941.164930][ T7865] do_ipt_set_ctl+0x25a/0x492 [ 941.175101][ T7865] ? compat_do_ipt_set_ctl+0x160/0x160 [ 941.185406][ T7865] ? mutex_unlock+0xd/0x10 [ 941.196536][ T7865] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 941.206613][ T7865] nf_setsockopt+0x7d/0xd0 [ 941.218106][ T7865] ip_setsockopt+0xdf/0x100 [ 941.228608][ T7865] tcp_setsockopt+0x95/0xf0 [ 941.237610][ T7865] sock_common_setsockopt+0x9a/0xe0 [ 941.247346][ T7865] __sys_setsockopt+0x180/0x280 [ 941.257206][ T7865] ? kernel_accept+0x310/0x310 [ 941.267592][ T7865] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 941.276673][ T7865] ? do_syscall_64+0x26/0x610 [ 941.276695][ T7865] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 941.286734][ T7865] ? do_syscall_64+0x26/0x610 [ 941.296933][ T7865] __x64_sys_setsockopt+0xbe/0x150 [ 941.307686][ T7865] do_syscall_64+0x103/0x610 [ 941.317460][ T7865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 941.327918][ T7865] RIP: 0033:0x45b8fa [ 941.331814][ T7865] Code: 49 89 ca b8 37 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 941.331822][ T7865] RSP: 002b:0000000000a4f5e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 941.331835][ T7865] RAX: ffffffffffffffda RBX: 0000000000a4f610 RCX: 000000000045b8fa [ 941.331842][ T7865] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 941.331850][ T7865] RBP: 0000000000712e80 R08: 00000000000002d8 R09: 0000000000004000 [ 941.331858][ T7865] R10: 0000000000712820 R11: 0000000000000206 R12: 0000000000000003 [ 941.331865][ T7865] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000007127c0 [ 941.333362][ T7865] memory: usage 19036kB, limit 0kB, failcnt 159 [ 941.368076][ T7865] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 941.384756][ T7865] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 941.401332][ T7865] Memory cgroup stats for /syz2: cache:124KB rss:15236KB rss_huge:14336KB shmem:0KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:15204KB inactive_file:0KB active_file:0KB unevictable:0KB [ 941.415295][ T7865] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=22394,uid=0 [ 941.443997][ T7865] Memory cgroup out of memory: Killed process 22394 (syz-executor.2) total-vm:72448kB, anon-rss:2196kB, file-rss:35808kB, shmem-rss:0kB [ 941.458013][ T7867] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 941.482927][ T7867] CPU: 1 PID: 7867 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #97 [ 941.493347][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 941.493354][ T7867] Call Trace: [ 941.493379][ T7867] dump_stack+0x172/0x1f0 [ 941.493398][ T7867] dump_header+0x10f/0xb6c [ 941.493412][ T7867] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 941.493427][ T7867] ? ___ratelimit+0x60/0x595 [ 941.493442][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 941.493462][ T7867] oom_kill_process.cold+0x10/0x15 [ 941.506848][ T7867] out_of_memory+0x79a/0x1280 [ 941.515586][ T7867] ? oom_killer_disable+0x280/0x280 [ 941.525965][ T7867] ? find_held_lock+0x35/0x130 [ 941.536188][ T7867] mem_cgroup_out_of_memory+0x1ca/0x230 [ 941.546055][ T7867] ? memcg_event_wake+0x230/0x230 [ 941.556359][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 941.566480][ T7867] ? _raw_spin_unlock+0x2d/0x50 [ 941.571348][ T7867] try_charge+0x102c/0x15c0 [ 941.571362][ T7867] ? find_held_lock+0x35/0x130 [ 941.571390][ T7867] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 941.571403][ T7867] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 941.571424][ T7867] ? find_held_lock+0x35/0x130 [ 941.580784][ T7867] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 941.580811][ T7867] __memcg_kmem_charge_memcg+0x7c/0x130 [ 941.580825][ T7867] ? memcg_kmem_put_cache+0xb0/0xb0 [ 941.580850][ T7867] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 941.591965][ T7867] __memcg_kmem_charge+0x136/0x300 [ 941.591986][ T7867] __alloc_pages_nodemask+0x4bf/0x8d0 [ 941.592001][ T7867] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 941.592023][ T7867] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 941.602788][ T7867] ? copy_process.part.0+0x1d08/0x7980 [ 941.602814][ T7867] copy_process.part.0+0x3e0/0x7980 [ 941.602832][ T7867] ? __lock_acquire+0x548/0x3fb0 [ 941.602855][ T7867] ? wp_page_reuse+0x159/0x1d0 [ 941.613616][ T7867] ? __might_fault+0x12b/0x1e0 [ 941.624292][ T7867] ? __cleanup_sighand+0x60/0x60 [ 941.635916][ T7867] ? lock_downgrade+0x880/0x880 [ 941.647099][ T7867] _do_fork+0x257/0xfd0 [ 941.657299][ T7867] ? fork_idle+0x1d0/0x1d0 [ 941.666817][ T7867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 941.676594][ T7867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 941.685160][ T7867] ? do_syscall_64+0x26/0x610 [ 941.696072][ T7867] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 941.706804][ T7867] ? do_syscall_64+0x26/0x610 [ 941.711496][ T7867] __x64_sys_clone+0xbf/0x150 [ 941.711515][ T7867] do_syscall_64+0x103/0x610 [ 941.711534][ T7867] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 941.711545][ T7867] RIP: 0033:0x45737a [ 941.711559][ T7867] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 941.711574][ T7867] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 941.758559][ T7867] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 941.766524][ T7867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 941.774494][ T7867] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 000000000139f940 [ 941.782459][ T7867] R10: 000000000139fc10 R11: 0000000000000246 R12: 0000000000000001 [ 941.790422][ T7867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 941.799983][ T7867] memory: usage 5196kB, limit 0kB, failcnt 221 [ 941.806159][ T7867] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 941.818979][ T7867] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 941.826120][ T7867] Memory cgroup stats for /syz3: cache:0KB rss:2380KB rss_huge:2048KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2356KB inactive_file:0KB active_file:0KB unevictable:0KB [ 941.853867][ T7867] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=1495,uid=0 [ 941.876821][ T7867] Memory cgroup out of memory: Killed process 1495 (syz-executor.3) total-vm:72448kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 941.920065][ T7860] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 941.943001][ T7860] CPU: 1 PID: 7860 Comm: syz-executor.0 Not tainted 5.1.0-rc7+ #97 [ 941.950938][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 941.961008][ T7860] Call Trace: [ 941.964319][ T7860] dump_stack+0x172/0x1f0 [ 941.968688][ T7860] dump_header+0x10f/0xb6c [ 941.973129][ T7860] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 941.978951][ T7860] ? ___ratelimit+0x60/0x595 [ 941.983541][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 941.988738][ T7860] oom_kill_process.cold+0x10/0x15 [ 941.993854][ T7860] out_of_memory+0x79a/0x1280 [ 941.998536][ T7860] ? oom_killer_disable+0x280/0x280 [ 942.003814][ T7860] ? find_held_lock+0x35/0x130 [ 942.008752][ T7860] mem_cgroup_out_of_memory+0x1ca/0x230 [ 942.014314][ T7860] ? memcg_event_wake+0x230/0x230 [ 942.019354][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 942.024462][ T7860] ? _raw_spin_unlock+0x2d/0x50 [ 942.029308][ T7860] try_charge+0x102c/0x15c0 [ 942.033804][ T7860] ? find_held_lock+0x35/0x130 [ 942.038567][ T7860] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 942.044108][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 942.049653][ T7860] ? find_held_lock+0x35/0x130 [ 942.054423][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 942.059971][ T7860] __memcg_kmem_charge_memcg+0x7c/0x130 [ 942.065513][ T7860] ? memcg_kmem_put_cache+0xb0/0xb0 [ 942.070723][ T7860] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 942.076266][ T7860] __memcg_kmem_charge+0x136/0x300 [ 942.081373][ T7860] __alloc_pages_nodemask+0x4bf/0x8d0 [ 942.086747][ T7860] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 942.092988][ T7860] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 942.098717][ T7860] ? copy_process.part.0+0x1d08/0x7980 [ 942.104188][ T7860] copy_process.part.0+0x3e0/0x7980 [ 942.109384][ T7860] ? __lock_acquire+0x548/0x3fb0 [ 942.114315][ T7860] ? wp_page_reuse+0x159/0x1d0 [ 942.119090][ T7860] ? __might_fault+0x12b/0x1e0 [ 942.124631][ T7860] ? __cleanup_sighand+0x60/0x60 [ 942.129576][ T7860] ? lock_downgrade+0x880/0x880 [ 942.134434][ T7860] _do_fork+0x257/0xfd0 [ 942.138605][ T7860] ? fork_idle+0x1d0/0x1d0 [ 942.143030][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 942.148497][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 942.154039][ T7860] ? do_syscall_64+0x26/0x610 [ 942.158746][ T7860] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 942.164811][ T7860] ? do_syscall_64+0x26/0x610 [ 942.169485][ T7860] __x64_sys_clone+0xbf/0x150 [ 942.174164][ T7860] do_syscall_64+0x103/0x610 [ 942.178763][ T7860] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 942.184663][ T7860] RIP: 0033:0x45737a [ 942.188546][ T7860] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 942.208156][ T7860] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 942.216578][ T7860] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 942.224738][ T7860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 942.232726][ T7860] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 00000000022b4940 [ 942.240982][ T7860] R10: 00000000022b4c10 R11: 0000000000000246 R12: 0000000000000001 [ 942.248945][ T7860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 942.259213][ T7860] memory: usage 4832kB, limit 0kB, failcnt 287 [ 942.265387][ T7860] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 942.273319][ T7860] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 942.282578][ T7860] Memory cgroup stats for /syz0: cache:44KB rss:2244KB rss_huge:2048KB shmem:80KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2228KB inactive_file:0KB active_file:0KB unevictable:0KB [ 942.304769][ T7860] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=2073,uid=0 [ 942.320728][ T7860] Memory cgroup out of memory: Killed process 2073 (syz-executor.0) total-vm:72448kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 942.335530][ T7876] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 942.337571][ T1043] oom_reaper: reaped process 2073 (syz-executor.0), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 942.349924][ T7876] CPU: 0 PID: 7876 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 942.366519][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 942.377589][ T7876] Call Trace: [ 942.377618][ T7876] dump_stack+0x172/0x1f0 [ 942.385265][ T7876] dump_header+0x10f/0xb6c [ 942.389687][ T7876] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 942.389702][ T7876] ? ___ratelimit+0x60/0x595 [ 942.389717][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 942.389732][ T7876] oom_kill_process.cold+0x10/0x15 [ 942.389747][ T7876] out_of_memory+0x79a/0x1280 [ 942.389768][ T7876] ? oom_killer_disable+0x280/0x280 [ 942.400144][ T7876] ? find_held_lock+0x35/0x130 [ 942.400168][ T7876] mem_cgroup_out_of_memory+0x1ca/0x230 [ 942.400181][ T7876] ? memcg_event_wake+0x230/0x230 [ 942.400200][ T7876] ? do_raw_spin_unlock+0x57/0x270 [ 942.400214][ T7876] ? _raw_spin_unlock+0x2d/0x50 [ 942.400232][ T7876] try_charge+0x102c/0x15c0 [ 942.400244][ T7876] ? find_held_lock+0x35/0x130 [ 942.400266][ T7876] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 942.400279][ T7876] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 942.400293][ T7876] ? find_held_lock+0x35/0x130 [ 942.400309][ T7876] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 942.400336][ T7876] __memcg_kmem_charge_memcg+0x7c/0x130 [ 942.400356][ T7876] ? memcg_kmem_put_cache+0xb0/0xb0 [ 942.410564][ T7876] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 942.420583][ T7876] __memcg_kmem_charge+0x136/0x300 [ 942.420604][ T7876] __alloc_pages_nodemask+0x4bf/0x8d0 [ 942.420618][ T7876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 942.420654][ T7876] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 942.420673][ T7876] ? copy_process.part.0+0x1d08/0x7980 [ 942.420690][ T7876] ? lockdep_hardirqs_on+0x418/0x5d0 [ 942.420711][ T7876] ? trace_hardirqs_on+0x67/0x230 [ 942.431008][ T7876] copy_process.part.0+0x3e0/0x7980 [ 942.431025][ T7876] ? __lock_acquire+0x548/0x3fb0 [ 942.431040][ T7876] ? wp_page_reuse+0x159/0x1d0 [ 942.431064][ T7876] ? __might_fault+0x12b/0x1e0 [ 942.431088][ T7876] ? __cleanup_sighand+0x60/0x60 [ 942.431107][ T7876] ? lock_downgrade+0x880/0x880 [ 942.441239][ T7876] _do_fork+0x257/0xfd0 [ 942.441258][ T7876] ? fork_idle+0x1d0/0x1d0 [ 942.441282][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 942.441297][ T7876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 942.441311][ T7876] ? do_syscall_64+0x26/0x610 [ 942.441326][ T7876] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 942.441346][ T7876] ? do_syscall_64+0x26/0x610 [ 942.455487][ T7876] __x64_sys_clone+0xbf/0x150 [ 942.466570][ T7876] do_syscall_64+0x103/0x610 [ 942.476873][ T7876] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 942.487606][ T7876] RIP: 0033:0x45737a [ 942.498251][ T7876] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 942.509840][ T7876] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 942.509854][ T7876] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 942.509862][ T7876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 942.509870][ T7876] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 000000000275d940 [ 942.509878][ T7876] R10: 000000000275dc10 R11: 0000000000000246 R12: 0000000000000001 [ 942.509885][ T7876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 942.519266][ T7876] memory: usage 4848kB, limit 0kB, failcnt 377 [ 942.526715][ T7876] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 942.538049][ T7876] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 942.549764][ T7876] Memory cgroup stats for /syz5: cache:16KB rss:2244KB rss_huge:2048KB shmem:16KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2220KB inactive_file:0KB active_file:0KB unevictable:0KB [ 942.560076][ T7876] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=9497,uid=0 [ 942.567612][ T7876] Memory cgroup out of memory: Killed process 9497 (syz-executor.5) total-vm:72448kB, anon-rss:2192kB, file-rss:35796kB, shmem-rss:0kB [ 942.774187][ T7865] syz-executor.2 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 942.785482][ T7865] CPU: 1 PID: 7865 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 942.793477][ T7865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 942.803546][ T7865] Call Trace: [ 942.806850][ T7865] dump_stack+0x172/0x1f0 [ 942.811171][ T7865] dump_header+0x10f/0xb6c [ 942.815584][ T7865] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 942.821379][ T7865] ? ___ratelimit+0x60/0x595 [ 942.825965][ T7865] ? do_raw_spin_unlock+0x57/0x270 [ 942.831060][ T7865] oom_kill_process.cold+0x10/0x15 [ 942.836161][ T7865] out_of_memory+0x79a/0x1280 [ 942.840837][ T7865] ? oom_killer_disable+0x280/0x280 [ 942.846016][ T7865] ? find_held_lock+0x35/0x130 [ 942.850768][ T7865] mem_cgroup_out_of_memory+0x1ca/0x230 [ 942.856297][ T7865] ? memcg_event_wake+0x230/0x230 [ 942.861308][ T7865] ? do_raw_spin_unlock+0x57/0x270 [ 942.866405][ T7865] ? _raw_spin_unlock+0x2d/0x50 [ 942.871242][ T7865] try_charge+0x102c/0x15c0 [ 942.875752][ T7865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 942.881289][ T7865] ? rcu_read_lock_sched_held+0x110/0x130 [ 942.886991][ T7865] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 942.892546][ T7865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 942.898092][ T7865] ? memcg_kmem_put_cache+0xb0/0xb0 [ 942.903395][ T7865] ? cache_grow_begin+0x594/0x860 [ 942.908405][ T7865] ? lockdep_hardirqs_on+0x418/0x5d0 [ 942.913678][ T7865] ? trace_hardirqs_on+0x67/0x230 [ 942.918695][ T7865] cache_grow_begin+0x5c0/0x860 [ 942.923547][ T7865] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 942.929771][ T7865] ? __cpuset_node_allowed+0x136/0x540 [ 942.935214][ T7865] fallback_alloc+0x1fd/0x2d0 [ 942.939875][ T7865] ____cache_alloc_node+0x1be/0x1e0 [ 942.945058][ T7865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 942.951309][ T7865] kmem_cache_alloc_node_trace+0xec/0x720 [ 942.957035][ T7865] ? lock_downgrade+0x880/0x880 [ 942.961871][ T7865] __kmalloc_node+0x3d/0x70 [ 942.966368][ T7865] kvmalloc_node+0x68/0x100 [ 942.970856][ T7865] xt_alloc_table_info+0x41/0xa0 [ 942.975791][ T7865] do_ipt_set_ctl+0x25a/0x492 [ 942.980456][ T7865] ? compat_do_ipt_set_ctl+0x160/0x160 [ 942.985903][ T7865] ? mutex_unlock+0xd/0x10 [ 942.990300][ T7865] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 942.996284][ T7865] nf_setsockopt+0x7d/0xd0 [ 943.000699][ T7865] ip_setsockopt+0xdf/0x100 [ 943.005190][ T7865] tcp_setsockopt+0x95/0xf0 [ 943.009686][ T7865] sock_common_setsockopt+0x9a/0xe0 [ 943.014887][ T7865] __sys_setsockopt+0x180/0x280 [ 943.019725][ T7865] ? kernel_accept+0x310/0x310 [ 943.024473][ T7865] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 943.029916][ T7865] ? do_syscall_64+0x26/0x610 [ 943.034577][ T7865] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 943.040640][ T7865] ? do_syscall_64+0x26/0x610 [ 943.045307][ T7865] __x64_sys_setsockopt+0xbe/0x150 [ 943.050405][ T7865] do_syscall_64+0x103/0x610 [ 943.054992][ T7865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 943.060871][ T7865] RIP: 0033:0x45b8fa [ 943.064749][ T7865] Code: 49 89 ca b8 37 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 943.084343][ T7865] RSP: 002b:0000000000a4f5e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 943.092742][ T7865] RAX: ffffffffffffffda RBX: 0000000000a4f610 RCX: 000000000045b8fa [ 943.100698][ T7865] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 943.108653][ T7865] RBP: 0000000000712e80 R08: 00000000000002d8 R09: 0000000000004000 [ 943.118476][ T7865] R10: 0000000000712820 R11: 0000000000000206 R12: 0000000000000003 [ 943.126433][ T7865] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000007127c0 [ 943.149520][ T7865] memory: usage 16684kB, limit 0kB, failcnt 165 [ 943.155805][ T7865] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 943.163398][ T7865] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 943.170311][ T7865] Memory cgroup stats for /syz2: cache:124KB rss:13084KB rss_huge:12288KB shmem:0KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:13052KB inactive_file:0KB active_file:0KB unevictable:0KB [ 943.192114][ T7865] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12018,uid=0 [ 943.207678][ T7865] Memory cgroup out of memory: Killed process 12018 (syz-executor.2) total-vm:72580kB, anon-rss:2204kB, file-rss:35796kB, shmem-rss:0kB [ 943.236805][ T7867] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 943.251205][ T7867] CPU: 1 PID: 7867 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #97 [ 943.259128][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 943.269190][ T7867] Call Trace: [ 943.272488][ T7867] dump_stack+0x172/0x1f0 [ 943.276838][ T7867] dump_header+0x10f/0xb6c [ 943.281273][ T7867] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 943.287335][ T7867] ? ___ratelimit+0x60/0x595 [ 943.292780][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 943.297882][ T7867] oom_kill_process.cold+0x10/0x15 [ 943.302983][ T7867] out_of_memory+0x79a/0x1280 [ 943.307654][ T7867] ? oom_killer_disable+0x280/0x280 [ 943.312945][ T7867] ? find_held_lock+0x35/0x130 [ 943.317802][ T7867] mem_cgroup_out_of_memory+0x1ca/0x230 [ 943.323341][ T7867] ? memcg_event_wake+0x230/0x230 [ 943.328363][ T7867] ? do_raw_spin_unlock+0x57/0x270 [ 943.333474][ T7867] ? _raw_spin_unlock+0x2d/0x50 [ 943.338669][ T7867] try_charge+0x102c/0x15c0 [ 943.343176][ T7867] ? find_held_lock+0x35/0x130 [ 943.347963][ T7867] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 943.353527][ T7867] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 943.359071][ T7867] ? find_held_lock+0x35/0x130 [ 943.363828][ T7867] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 943.369387][ T7867] __memcg_kmem_charge_memcg+0x7c/0x130 [ 943.374926][ T7867] ? memcg_kmem_put_cache+0xb0/0xb0 [ 943.380141][ T7867] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 943.385859][ T7867] __memcg_kmem_charge+0x136/0x300 [ 943.390963][ T7867] __alloc_pages_nodemask+0x4bf/0x8d0 [ 943.396339][ T7867] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 943.402570][ T7867] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 943.408295][ T7867] ? copy_process.part.0+0x1d08/0x7980 [ 943.413752][ T7867] copy_process.part.0+0x3e0/0x7980 [ 943.418969][ T7867] ? __lock_acquire+0x548/0x3fb0 [ 943.423905][ T7867] ? wp_page_reuse+0x159/0x1d0 [ 943.428660][ T7867] ? __might_fault+0x12b/0x1e0 [ 943.433413][ T7867] ? __cleanup_sighand+0x60/0x60 [ 943.438335][ T7867] ? lock_downgrade+0x880/0x880 [ 943.443179][ T7867] _do_fork+0x257/0xfd0 [ 943.447321][ T7867] ? fork_idle+0x1d0/0x1d0 [ 943.451732][ T7867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 943.457193][ T7867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 943.462666][ T7867] ? do_syscall_64+0x26/0x610 [ 943.467329][ T7867] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 943.473664][ T7867] ? do_syscall_64+0x26/0x610 [ 943.478346][ T7867] __x64_sys_clone+0xbf/0x150 [ 943.483125][ T7867] do_syscall_64+0x103/0x610 [ 943.487725][ T7867] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 943.493637][ T7867] RIP: 0033:0x45737a [ 943.497527][ T7867] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 943.517136][ T7867] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 943.525551][ T7867] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 943.533516][ T7867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 943.541479][ T7867] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 000000000139f940 [ 943.549524][ T7867] R10: 000000000139fc10 R11: 0000000000000246 R12: 0000000000000001 [ 943.557486][ T7867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 943.566758][ T7867] memory: usage 2852kB, limit 0kB, failcnt 227 [ 943.573130][ T7867] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 943.580799][ T7867] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 943.587700][ T7867] Memory cgroup stats for [ 943.587712][ T7867] /syz3: cache:0KB rss:208KB rss_huge:0KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:192KB inactive_file:0KB active_file:0KB unevictable:0KB [ 943.610773][ T7867] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=2663,uid=0 [ 943.610888][ T7867] Memory cgroup out of memory: Killed process 2663 (syz-executor.3) total-vm:72580kB, anon-rss:168kB, file-rss:35716kB, shmem-rss:0kB [ 943.611794][ T1043] oom_reaper: reaped process 2663 (syz-executor.3), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB [ 943.640392][ T7860] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 943.665560][ T7860] CPU: 1 PID: 7860 Comm: syz-executor.0 Not tainted 5.1.0-rc7+ #97 [ 943.673469][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 943.673475][ T7860] Call Trace: [ 943.673500][ T7860] dump_stack+0x172/0x1f0 [ 943.673518][ T7860] dump_header+0x10f/0xb6c [ 943.673533][ T7860] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 943.673548][ T7860] ? ___ratelimit+0x60/0x595 [ 943.673571][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 943.686946][ T7860] oom_kill_process.cold+0x10/0x15 [ 943.695699][ T7860] out_of_memory+0x79a/0x1280 [ 943.706079][ T7860] ? oom_killer_disable+0x280/0x280 [ 943.716307][ T7860] ? find_held_lock+0x35/0x130 [ 943.716332][ T7860] mem_cgroup_out_of_memory+0x1ca/0x230 [ 943.726239][ T7860] ? memcg_event_wake+0x230/0x230 [ 943.736806][ T7860] ? do_raw_spin_unlock+0x57/0x270 [ 943.746936][ T7860] ? _raw_spin_unlock+0x2d/0x50 [ 943.751805][ T7860] try_charge+0x102c/0x15c0 [ 943.751820][ T7860] ? find_held_lock+0x35/0x130 [ 943.751839][ T7860] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 943.751852][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 943.751865][ T7860] ? find_held_lock+0x35/0x130 [ 943.751886][ T7860] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 943.761238][ T7860] __memcg_kmem_charge_memcg+0x7c/0x130 [ 943.761255][ T7860] ? memcg_kmem_put_cache+0xb0/0xb0 [ 943.761273][ T7860] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 943.761292][ T7860] __memcg_kmem_charge+0x136/0x300 [ 943.772399][ T7860] __alloc_pages_nodemask+0x4bf/0x8d0 [ 943.772414][ T7860] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 943.772442][ T7860] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 943.782769][ T7860] ? copy_process.part.0+0x1d08/0x7980 [ 943.782795][ T7860] copy_process.part.0+0x3e0/0x7980 [ 943.782818][ T7860] ? __lock_acquire+0x548/0x3fb0 [ 943.793659][ T7860] ? wp_page_reuse+0x159/0x1d0 [ 943.804404][ T7860] ? __might_fault+0x12b/0x1e0 [ 943.816004][ T7860] ? __cleanup_sighand+0x60/0x60 [ 943.827167][ T7860] ? lock_downgrade+0x880/0x880 [ 943.837291][ T7860] _do_fork+0x257/0xfd0 [ 943.846799][ T7860] ? fork_idle+0x1d0/0x1d0 [ 943.856582][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 943.865129][ T7860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 943.876125][ T7860] ? do_syscall_64+0x26/0x610 [ 943.880824][ T7860] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 943.880839][ T7860] ? do_syscall_64+0x26/0x610 [ 943.880859][ T7860] __x64_sys_clone+0xbf/0x150 [ 943.880877][ T7860] do_syscall_64+0x103/0x610 [ 943.880897][ T7860] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 943.891657][ T7860] RIP: 0033:0x45737a [ 943.891672][ T7860] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 943.891679][ T7860] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 943.891691][ T7860] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 943.891699][ T7860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 943.891714][ T7860] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 00000000022b4940 [ 943.900953][ T7860] R10: 00000000022b4c10 R11: 0000000000000246 R12: 0000000000000001 [ 943.900961][ T7860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 943.902119][ T7860] memory: usage 2452kB, limit 0kB, failcnt 293 [ 943.938943][ T7860] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 943.955210][ T7860] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 943.971036][ T7860] Memory cgroup stats for /syz0: cache:44KB rss:76KB rss_huge:0KB shmem:80KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:60KB inactive_file:0KB active_file:0KB unevictable:0KB [ 943.985187][ T7860] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=7860,uid=0 [ 943.985281][ T7860] Memory cgroup out of memory: Killed process 7860 (syz-executor.0) total-vm:72316kB, anon-rss:108kB, file-rss:35712kB, shmem-rss:0kB [ 944.000426][ T1043] oom_reaper: reaped process 7860 (syz-executor.0), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 944.049144][ T7876] Memory cgroup out of memory: Killed process 7876 (syz-executor.5) total-vm:72316kB, anon-rss:108kB, file-rss:35712kB, shmem-rss:0kB [ 944.061945][ T1043] oom_reaper: reaped process 7876 (syz-executor.5), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 944.086923][ T7865] Memory cgroup out of memory: Killed process 11981 (syz-executor.2) total-vm:72580kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB [ 944.109206][ T7865] Memory cgroup out of memory: Killed process 22634 (syz-executor.2) total-vm:72448kB, anon-rss:2196kB, file-rss:35800kB, shmem-rss:0kB [ 944.127520][ T7867] Memory cgroup out of memory: Killed process 7867 (syz-executor.3) total-vm:72316kB, anon-rss:112kB, file-rss:35712kB, shmem-rss:0kB [ 944.144512][ T1043] oom_reaper: reaped process 22634 (syz-executor.2), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 944.170582][ T7865] Memory cgroup out of memory: Killed process 9567 (syz-executor.2) total-vm:72448kB, anon-rss:2188kB, file-rss:35796kB, shmem-rss:0kB [ 944.229412][ T7865] Memory cgroup out of memory: Killed process 2291 (syz-executor.2) total-vm:72448kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 944.261098][ T7865] Memory cgroup out of memory: Killed process 22201 (syz-executor.2) total-vm:72448kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 944.295188][ T7865] Memory cgroup out of memory: Killed process 7865 (syz-executor.2) total-vm:72316kB, anon-rss:104kB, file-rss:35712kB, shmem-rss:0kB 19:35:31 executing program 4: socket$kcm(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffd95) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="9e4301000080000000021fe4ac14140ceb", 0x11}], 0x1}, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c00000024000000060000006f3096d2a59598e5735de07300de"], 0x0, 0x26, 0x0, 0x1}, 0x20) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 19:35:31 executing program 0: socket$kcm(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffd95) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="9e4301000080000000021fe4ac14140ceb", 0x11}], 0x1}, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c00000024000000060000006f3096d2a59598e5735de07300de"], 0x0, 0x26, 0x0, 0x1}, 0x20) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 19:35:31 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00') ioctl$int_out(r0, 0x5460, &(0x7f0000000080)) 19:35:31 executing program 1: syz_execute_func(&(0x7f0000000180)="1c03b5b598cd801b69e4f56962f5696200d9d9d017795bf9f2680c0000008fe9589b26c7e4c753fbc4e101edfec4427d82663ed107c4c2b90a23f2168f4808eebce00000802000c422b18cb6070000005151c4a27d181ec1ea01eff265dc5f00c35b5b304545e269a841000fc4c2559c3766030faee42c240f5463805bdedec4a1e1e0ef26400f0d18c401fe5ff6e30fad6736660fd2938c000000c4c1f913376666450f17720d2e440fc7bf0d00008066660f3a0b0865") 19:35:31 executing program 1: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f00000000c0)={0xffffffffffffffd2, 0x0}, 0x3a1701314c0235c4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) 19:35:31 executing program 2: socket$kcm(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffd95) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="9e4301000080000000021fe4ac14140ceb", 0x11}], 0x1}, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c00000024000000060000006f3096d2a59598e5735de07300de"], 0x0, 0x26, 0x0, 0x1}, 0x20) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 19:35:31 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xc0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) close(r1) 19:35:31 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) syz_execute_func(&(0x7f0000000200)="b13691cd806969ef69dc00d9d0d0c44139fd5bf91cc1c7c7e4c653fb0fc4014c5868f4a95ff9c44149f2168f4808eebce00000802000c421fc51c1ea01efc48192558dc3c366450f186746f3400faee47c7c730f5726400f0d18c401fe5ff6e3df646736676666430fefb3000000000804f4f30f1a1254111d54111d00") 19:35:31 executing program 1: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f00000000c0)={0xffffffffffffffd2, 0x0}, 0x3a1701314c0235c4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) 19:35:31 executing program 3: socket$kcm(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffd95) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="9e4301000080000000021fe4ac14140ceb", 0x11}], 0x1}, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c00000024000000060000006f3096d2a59598e5735de07300de"], 0x0, 0x26, 0x0, 0x1}, 0x20) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 19:35:31 executing program 1: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f00000000c0)={0xffffffffffffffd2, 0x0}, 0x3a1701314c0235c4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) 19:35:31 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f00000000c0)={0xffffffffffffffd2, 0x0}, 0x3a1701314c0235c4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) [ 945.830634][ T7908] device bridge_slave_1 left promiscuous mode [ 945.836855][ T7908] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.891241][ T7908] device bridge_slave_0 left promiscuous mode [ 945.897449][ T7908] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.124816][T26907] IPVS: ftp: loaded support on port[0] = 21 [ 946.487831][T26912] IPVS: ftp: loaded support on port[0] = 21 [ 946.612669][T26914] IPVS: ftp: loaded support on port[0] = 21 [ 946.613879][T26913] IPVS: ftp: loaded support on port[0] = 21 [ 946.633898][T26915] IPVS: ftp: loaded support on port[0] = 21 [ 947.842788][ T7908] device hsr_slave_1 left promiscuous mode [ 947.884031][ T7908] device hsr_slave_0 left promiscuous mode [ 947.923926][ T7908] team0 (unregistering): Port device team_slave_1 removed [ 947.936626][ T7908] team0 (unregistering): Port device team_slave_0 removed [ 947.950046][ T7908] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 948.022875][ T7908] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 948.094812][ T7908] bond0 (unregistering): Released all slaves [ 948.513932][T26907] chnl_net:caif_netlink_parms(): no params data found [ 948.536010][T26914] chnl_net:caif_netlink_parms(): no params data found [ 948.596592][T26913] chnl_net:caif_netlink_parms(): no params data found [ 948.613679][T26912] chnl_net:caif_netlink_parms(): no params data found [ 948.687183][T26907] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.696127][T26907] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.704405][T26907] device bridge_slave_0 entered promiscuous mode [ 948.718743][T26907] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.725940][T26907] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.734080][T26907] device bridge_slave_1 entered promiscuous mode [ 948.768874][T26914] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.779972][T26914] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.787593][T26914] device bridge_slave_0 entered promiscuous mode [ 948.806191][T26914] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.815105][T26914] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.823685][T26914] device bridge_slave_1 entered promiscuous mode [ 948.860654][T26907] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 948.876873][T26913] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.885018][T26913] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.893054][T26913] device bridge_slave_0 entered promiscuous mode [ 948.900611][T26912] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.907703][T26912] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.916257][T26912] device bridge_slave_0 entered promiscuous mode [ 948.931786][T26914] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 948.942166][T26915] chnl_net:caif_netlink_parms(): no params data found [ 948.952669][T26907] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 948.972584][T26913] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.980107][T26913] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.988121][T26913] device bridge_slave_1 entered promiscuous mode [ 948.996329][T26912] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.003783][T26912] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.012150][T26912] device bridge_slave_1 entered promiscuous mode [ 949.021214][T26914] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 949.044082][T26907] team0: Port device team_slave_0 added [ 949.079691][T26907] team0: Port device team_slave_1 added [ 949.093202][T26913] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 949.110548][T26914] team0: Port device team_slave_0 added [ 949.117909][T26913] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 949.131233][T26912] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 949.150139][T26912] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 949.230769][T26914] team0: Port device team_slave_1 added [ 949.296602][T26915] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.304680][T26915] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.313487][T26915] device bridge_slave_0 entered promiscuous mode [ 949.322238][T26915] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.330001][T26915] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.337997][T26915] device bridge_slave_1 entered promiscuous mode [ 949.402737][T26907] device hsr_slave_0 entered promiscuous mode [ 949.459506][T26907] device hsr_slave_1 entered promiscuous mode [ 949.519879][T26912] team0: Port device team_slave_0 added [ 949.526670][T26913] team0: Port device team_slave_0 added [ 949.548518][T26912] team0: Port device team_slave_1 added [ 949.556588][T26913] team0: Port device team_slave_1 added [ 949.573713][T26915] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 949.671926][T26914] device hsr_slave_0 entered promiscuous mode [ 949.709609][T26914] device hsr_slave_1 entered promiscuous mode [ 949.782425][T26915] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 949.841892][T26912] device hsr_slave_0 entered promiscuous mode [ 949.899523][T26912] device hsr_slave_1 entered promiscuous mode [ 950.061962][T26913] device hsr_slave_0 entered promiscuous mode [ 950.099379][T26913] device hsr_slave_1 entered promiscuous mode [ 950.178323][T26915] team0: Port device team_slave_0 added [ 950.203500][T26915] team0: Port device team_slave_1 added [ 950.265147][T26907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 950.351912][T26915] device hsr_slave_0 entered promiscuous mode [ 950.389512][T26915] device hsr_slave_1 entered promiscuous mode [ 950.455899][T26914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 950.476331][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 950.485248][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 950.498205][T26907] 8021q: adding VLAN 0 to HW filter on device team0 [ 950.532277][T16854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 950.541433][T16854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 950.550614][T16854] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.557695][T16854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 950.570312][T26912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 950.579206][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 950.621914][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 950.639885][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 950.648295][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.655426][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.664192][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 950.697777][T26912] 8021q: adding VLAN 0 to HW filter on device team0 [ 950.725442][T26914] 8021q: adding VLAN 0 to HW filter on device team0 [ 950.748547][T26913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 950.769456][T16854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 950.777356][T16854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 950.796785][T16854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 950.817274][T16854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 950.839205][T16854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 950.847753][T16854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 950.866697][T16854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 950.886542][T26907] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 950.910444][T26907] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 950.949802][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 950.957558][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 950.970017][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 950.978542][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 950.987335][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 950.995810][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 951.004370][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 951.012831][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 951.021618][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 951.030164][T26892] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.037225][T26892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.045257][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 951.054047][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 951.062491][T26892] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.069598][T26892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.077236][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 951.085888][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 951.095013][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 951.102933][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 951.129835][T26913] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.140078][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 951.148796][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 951.158801][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.165973][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.174344][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 951.183526][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 951.192165][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.199296][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.207239][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 951.216362][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 951.224791][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 951.232571][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 951.240327][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 951.248863][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 951.259484][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 951.267423][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 951.296749][T26907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 951.325246][T26915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.341736][T21697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 951.360037][T21697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 951.368849][T21697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 951.388906][T21697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 951.398178][T21697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 951.406942][T21697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 951.416789][T21697] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.423942][T21697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.431766][T21697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 951.440288][T21697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 951.448497][T21697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 951.456975][T21697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 951.466878][T21697] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 951.474972][T21697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 951.483060][T21697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 951.491981][T21697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 951.511030][T21697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 951.519892][T21697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 951.528319][T21697] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.535652][T21697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.543795][T21697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 951.553588][T21697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 951.567439][T26912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 951.600222][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 951.608973][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 951.617964][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 951.627599][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 951.636648][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 951.647678][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 951.656542][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 951.675299][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 951.713396][T26923] oom_kill_process: 8 callbacks suppressed [ 951.713465][T26923] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 951.723118][T26915] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.741132][T26923] CPU: 1 PID: 26923 Comm: syz-executor.4 Not tainted 5.1.0-rc7+ #97 [ 951.749151][T26923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 951.759253][T26923] Call Trace: [ 951.762577][T26923] dump_stack+0x172/0x1f0 [ 951.766931][T26923] dump_header+0x10f/0xb6c [ 951.771372][T26923] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 951.777206][T26923] ? ___ratelimit+0x60/0x595 [ 951.781810][T26923] oom_kill_process.cold+0x10/0x15 [ 951.787107][T26923] out_of_memory+0x79a/0x1280 [ 951.791787][T26923] ? retint_kernel+0x2d/0x2d [ 951.796386][T26923] ? oom_killer_disable+0x280/0x280 [ 951.801597][T26923] mem_cgroup_out_of_memory+0x1ca/0x230 [ 951.807271][T26923] ? memcg_event_wake+0x230/0x230 [ 951.812321][T26923] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 951.818126][T26923] ? cgroup_file_notify+0x140/0x1b0 [ 951.823337][T26923] memory_max_write+0x169/0x300 [ 951.828317][T26923] ? retint_kernel+0x2d/0x2d [ 951.832901][T26923] ? mem_cgroup_write+0x360/0x360 [ 951.837917][T26923] cgroup_file_write+0x245/0x7a0 [ 951.842860][T26923] ? mem_cgroup_write+0x360/0x360 [ 951.847896][T26923] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 951.853535][T26923] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 951.859261][T26923] kernfs_fop_write+0x2ba/0x480 [ 951.864229][T26923] __vfs_write+0x8d/0x110 [ 951.868584][T26923] ? kernfs_fop_open+0xd90/0xd90 [ 951.873535][T26923] vfs_write+0x20c/0x580 [ 951.877787][T26923] ksys_write+0x14f/0x2d0 [ 951.882126][T26923] ? __ia32_sys_read+0xb0/0xb0 [ 951.886910][T26923] __x64_sys_write+0x73/0xb0 [ 951.891509][T26923] do_syscall_64+0x103/0x610 [ 951.896104][T26923] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 951.901993][T26923] RIP: 0033:0x458da9 [ 951.905898][T26923] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 951.925514][T26923] RSP: 002b:00007fecff289c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 951.933959][T26923] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9 [ 951.941953][T26923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 951.949935][T26923] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 951.957909][T26923] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fecff28a6d4 [ 951.965879][T26923] R13: 00000000004c880e R14: 00000000004def78 R15: 00000000ffffffff [ 951.977134][T26923] memory: usage 4220kB, limit 0kB, failcnt 143 [ 951.977221][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 951.989758][T26923] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 951.992210][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 951.998714][T26923] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 952.006830][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 952.007339][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 952.026253][T26923] Memory cgroup stats for /syz4: cache:76KB rss:2228KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2160KB inactive_file:0KB active_file:0KB unevictable:0KB [ 952.031329][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 952.045592][T26913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 952.080414][T26923] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=26922,uid=0 [ 952.087815][T26912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 952.100487][T26923] Memory cgroup out of memory: Killed process 26922 (syz-executor.4) total-vm:72584kB, anon-rss:2136kB, file-rss:34816kB, shmem-rss:0kB [ 952.121861][T26914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 952.133807][T26914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 952.176479][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 952.185856][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 952.187572][ T1043] oom_reaper: reaped process 26922 (syz-executor.4), now anon-rss:0kB, file-rss:34868kB, shmem-rss:0kB [ 952.196316][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 952.215143][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 952.224993][T26892] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.232127][T26892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 952.240339][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 952.249870][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 952.258427][T26892] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.267148][T26892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 952.275950][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 952.322833][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 952.341019][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 952.360536][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 952.380722][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 952.398389][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 952.417437][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 19:35:39 executing program 1: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f00000000c0)={0xffffffffffffffd2, 0x0}, 0x3a1701314c0235c4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) 19:35:39 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80, 0x110) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 952.440523][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 952.466469][T26907] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 952.493790][T26907] CPU: 1 PID: 26907 Comm: syz-executor.4 Not tainted 5.1.0-rc7+ #97 [ 952.501808][T26907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 952.511874][T26907] Call Trace: [ 952.515191][T26907] dump_stack+0x172/0x1f0 [ 952.519563][T26907] dump_header+0x10f/0xb6c [ 952.523992][T26907] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 952.529804][T26907] ? ___ratelimit+0x60/0x595 [ 952.534402][T26907] ? do_raw_spin_unlock+0x57/0x270 [ 952.539561][T26907] oom_kill_process.cold+0x10/0x15 [ 952.544687][T26907] out_of_memory+0x79a/0x1280 [ 952.549376][T26907] ? lock_downgrade+0x880/0x880 [ 952.554244][T26907] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 952.560494][T26907] ? oom_killer_disable+0x280/0x280 [ 952.565697][T26907] ? find_held_lock+0x35/0x130 [ 952.570481][T26907] mem_cgroup_out_of_memory+0x1ca/0x230 [ 952.576034][T26907] ? memcg_event_wake+0x230/0x230 [ 952.581071][T26907] ? do_raw_spin_unlock+0x57/0x270 [ 952.586195][T26907] ? _raw_spin_unlock+0x2d/0x50 [ 952.591057][T26907] try_charge+0x102c/0x15c0 [ 952.595565][T26907] ? find_held_lock+0x35/0x130 [ 952.600344][T26907] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 952.605899][T26907] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 952.612165][T26907] ? kasan_check_read+0x11/0x20 [ 952.617031][T26907] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 952.622590][T26907] mem_cgroup_try_charge+0x24d/0x5e0 [ 952.627890][T26907] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 952.633539][T26907] __handle_mm_fault+0x1e1f/0x3ec0 [ 952.638671][T26907] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 952.644225][T26907] ? find_held_lock+0x35/0x130 [ 952.648996][T26907] ? handle_mm_fault+0x322/0xb30 [ 952.653963][T26907] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 952.660217][T26907] ? kasan_check_read+0x11/0x20 [ 952.665083][T26907] handle_mm_fault+0x43f/0xb30 [ 952.669879][T26907] __do_page_fault+0x5ef/0xda0 [ 952.674662][T26907] do_page_fault+0x71/0x581 [ 952.679267][T26907] ? page_fault+0x8/0x30 [ 952.683783][T26907] page_fault+0x1e/0x30 [ 952.687940][T26907] RIP: 0033:0x4032a2 [ 952.691839][T26907] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 49 85 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 f9 3a 05 00 48 [ 952.713443][T26907] RSP: 002b:0000000000a4ec90 EFLAGS: 00010246 [ 952.719517][T26907] RAX: 0000000000000000 RBX: 00000000000e8561 RCX: 0000000000412a80 [ 952.727498][T26907] RDX: 000000000000000c RSI: 0000000000000002 RDI: 0000000000a4fdc0 [ 952.735506][T26907] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000002663940 [ 952.743572][T26907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fdc0 [ 952.751551][T26907] R13: 0000000000a4fdb0 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 952.768364][T26914] 8021q: adding VLAN 0 to HW filter on device batadv0 19:35:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/keycreate\x00', 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000000), 0x4) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) [ 952.806109][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 952.817448][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 952.820984][T26907] memory: usage 1860kB, limit 0kB, failcnt 152 [ 952.835232][T26907] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 952.843361][T26907] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 952.856333][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 952.859350][T26907] Memory cgroup stats for /syz4: cache:76KB rss:48KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 952.879599][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 952.918281][T26907] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=26907,uid=0 [ 952.934368][T26907] Memory cgroup out of memory: Killed process 26907 (syz-executor.4) total-vm:72320kB, anon-rss:72kB, file-rss:34824kB, shmem-rss:0kB [ 952.949400][ T1043] oom_reaper: reaped process 26907 (syz-executor.4), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 19:35:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/keycreate\x00', 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000000), 0x4) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) [ 952.972070][T26932] vivid-000: kernel_thread() failed 19:35:39 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xc0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) close(r1) 19:35:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/keycreate\x00', 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000000), 0x4) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) 19:35:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/keycreate\x00', 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000000), 0x4) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) [ 953.642090][T26913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.661947][T26915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 19:35:40 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xc0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) close(r1) 19:35:40 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xc0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) close(r1) [ 954.531909][T26915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.895627][T26971] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 954.906595][T26971] CPU: 0 PID: 26971 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #97 [ 954.914591][T26971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 954.924667][T26971] Call Trace: [ 954.927975][T26971] dump_stack+0x172/0x1f0 [ 954.932318][T26971] dump_header+0x10f/0xb6c [ 954.936749][T26971] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 954.942568][T26971] ? ___ratelimit+0x60/0x595 [ 954.947172][T26971] ? do_raw_spin_unlock+0x57/0x270 [ 954.952303][T26971] oom_kill_process.cold+0x10/0x15 [ 954.957510][T26971] out_of_memory+0x79a/0x1280 [ 954.962204][T26971] ? __sched_text_start+0x8/0x8 [ 954.967067][T26971] ? oom_killer_disable+0x280/0x280 [ 954.972286][T26971] mem_cgroup_out_of_memory+0x1ca/0x230 [ 954.977843][T26971] ? memcg_event_wake+0x230/0x230 [ 954.982893][T26971] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 954.988718][T26971] ? cgroup_file_notify+0x140/0x1b0 [ 954.993933][T26971] memory_max_write+0x169/0x300 [ 954.998798][T26971] ? mem_cgroup_write+0x360/0x360 [ 955.003837][T26971] cgroup_file_write+0x245/0x7a0 [ 955.008786][T26971] ? mem_cgroup_write+0x360/0x360 [ 955.013821][T26971] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 955.019466][T26971] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 955.025194][T26971] kernfs_fop_write+0x2ba/0x480 [ 955.030065][T26971] __vfs_write+0x8d/0x110 [ 955.034402][T26971] ? kernfs_fop_open+0xd90/0xd90 [ 955.039453][T26971] vfs_write+0x20c/0x580 [ 955.043715][T26971] ksys_write+0x14f/0x2d0 [ 955.048061][T26971] ? __ia32_sys_read+0xb0/0xb0 [ 955.052838][T26971] ? do_syscall_64+0x26/0x610 [ 955.057534][T26971] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 955.063615][T26971] ? do_syscall_64+0x26/0x610 [ 955.068334][T26971] __x64_sys_write+0x73/0xb0 [ 955.072946][T26971] do_syscall_64+0x103/0x610 [ 955.077728][T26971] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 955.083644][T26971] RIP: 0033:0x458da9 [ 955.087550][T26971] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 955.107184][T26971] RSP: 002b:00007fa7cb951c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 955.115609][T26971] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9 [ 955.123605][T26971] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 955.131606][T26971] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 955.139692][T26971] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa7cb9526d4 [ 955.147694][T26971] R13: 00000000004c880e R14: 00000000004def78 R15: 00000000ffffffff [ 955.190227][T26971] memory: usage 4672kB, limit 0kB, failcnt 244 [ 955.196627][T26971] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 955.204588][T26971] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 955.215512][T26971] Memory cgroup stats for /syz3: cache:0KB rss:2188KB rss_huge:2048KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2160KB inactive_file:0KB active_file:0KB unevictable:0KB [ 955.243592][T26971] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=26970,uid=0 [ 955.260270][T26971] Memory cgroup out of memory: Killed process 26970 (syz-executor.3) total-vm:72584kB, anon-rss:2136kB, file-rss:34816kB, shmem-rss:0kB [ 955.282397][ T1043] oom_reaper: reaped process 26970 (syz-executor.3), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB 19:35:42 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xc0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) close(r1) 19:35:42 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) syz_execute_func(&(0x7f0000000200)="b13691cd806969ef69dc00d9d0d0c44139fd5bf91cc1c7c7e4c653fb0fc4014c5868f4a95ff9c44149f2168f4808eebce00000802000c421fc51c1ea01efc48192558dc3c366450f186746f3400faee47c7c730f5726400f0d18c401fe5ff6e3df646736676666430fefb3000000000804f4f30f1a1254111d54111d00") 19:35:42 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f00000000c0)={0xffffffffffffffd2, 0x0}, 0x3a1701314c0235c4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) 19:35:42 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xc0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) close(r1) 19:35:42 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xc0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) close(r1) [ 955.491321][T26915] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 955.524651][T26915] CPU: 1 PID: 26915 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #97 [ 955.532696][T26915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 955.542772][T26915] Call Trace: [ 955.546079][T26915] dump_stack+0x172/0x1f0 [ 955.550431][T26915] dump_header+0x10f/0xb6c [ 955.554865][T26915] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 955.560697][T26915] ? ___ratelimit+0x60/0x595 [ 955.565298][T26915] ? do_raw_spin_unlock+0x57/0x270 [ 955.570419][T26915] oom_kill_process.cold+0x10/0x15 [ 955.575538][T26915] out_of_memory+0x79a/0x1280 [ 955.580224][T26915] ? lock_downgrade+0x880/0x880 [ 955.585083][T26915] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 955.591337][T26915] ? oom_killer_disable+0x280/0x280 [ 955.596537][T26915] ? find_held_lock+0x35/0x130 [ 955.601317][T26915] mem_cgroup_out_of_memory+0x1ca/0x230 [ 955.606870][T26915] ? memcg_event_wake+0x230/0x230 [ 955.611909][T26915] ? do_raw_spin_unlock+0x57/0x270 [ 955.617023][T26915] ? _raw_spin_unlock+0x2d/0x50 [ 955.621970][T26915] try_charge+0x102c/0x15c0 [ 955.626472][T26915] ? find_held_lock+0x35/0x130 [ 955.631249][T26915] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 955.636802][T26915] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 955.643058][T26915] ? kasan_check_read+0x11/0x20 [ 955.647928][T26915] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 955.653500][T26915] mem_cgroup_try_charge+0x24d/0x5e0 [ 955.658818][T26915] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 955.664470][T26915] __handle_mm_fault+0x1e1f/0x3ec0 [ 955.669622][T26915] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 955.675184][T26915] ? find_held_lock+0x35/0x130 [ 955.679964][T26915] ? handle_mm_fault+0x322/0xb30 [ 955.685094][T26915] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 955.691347][T26915] ? kasan_check_read+0x11/0x20 [ 955.696211][T26915] handle_mm_fault+0x43f/0xb30 [ 955.700989][T26915] __do_page_fault+0x5ef/0xda0 [ 955.705764][T26915] do_page_fault+0x71/0x581 [ 955.710278][T26915] ? page_fault+0x8/0x30 [ 955.714526][T26915] page_fault+0x1e/0x30 [ 955.718689][T26915] RIP: 0033:0x4032a2 [ 955.722584][T26915] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 49 85 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 f9 3a 05 00 48 19:35:42 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xc0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) close(r1) [ 955.742195][T26915] RSP: 002b:0000000000a4ec90 EFLAGS: 00010246 [ 955.748283][T26915] RAX: 0000000000000000 RBX: 00000000000e91e6 RCX: 0000000000412a80 [ 955.756259][T26915] RDX: 000000000000000c RSI: 0000000000000002 RDI: 0000000000a4fdc0 [ 955.764231][T26915] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000ff7940 [ 955.772204][T26915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fdc0 [ 955.780183][T26915] R13: 0000000000a4fdb0 R14: 0000000000000000 R15: 0000000000a4fdc0 19:35:42 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f00000000c0)={0xffffffffffffffd2, 0x0}, 0x3a1701314c0235c4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) 19:35:42 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) syz_execute_func(&(0x7f0000000200)="b13691cd806969ef69dc00d9d0d0c44139fd5bf91cc1c7c7e4c653fb0fc4014c5868f4a95ff9c44149f2168f4808eebce00000802000c421fc51c1ea01efc48192558dc3c366450f186746f3400faee47c7c730f5726400f0d18c401fe5ff6e3df646736676666430fefb3000000000804f4f30f1a1254111d54111d00") 19:35:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xc0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) close(r1) 19:35:42 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xc0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) close(r1) 19:35:42 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) syz_execute_func(&(0x7f0000000200)="b13691cd806969ef69dc00d9d0d0c44139fd5bf91cc1c7c7e4c653fb0fc4014c5868f4a95ff9c44149f2168f4808eebce00000802000c421fc51c1ea01efc48192558dc3c366450f186746f3400faee47c7c730f5726400f0d18c401fe5ff6e3df646736676666430fefb3000000000804f4f30f1a1254111d54111d00") 19:35:42 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xc0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) close(r1) [ 956.133853][T26915] memory: usage 2352kB, limit 0kB, failcnt 257 [ 956.140360][T26915] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 956.148057][T26915] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 956.155696][T26915] Memory cgroup stats for /syz3: cache:0KB rss:72KB rss_huge:0KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 956.243787][T26915] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=26915,uid=0 [ 956.277692][T26915] Memory cgroup out of memory: Killed process 26915 (syz-executor.3) total-vm:72320kB, anon-rss:72kB, file-rss:34824kB, shmem-rss:0kB [ 956.305142][ T1043] oom_reaper: reaped process 26915 (syz-executor.3), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 956.988894][T27010] IPVS: ftp: loaded support on port[0] = 21 [ 957.243258][T27010] chnl_net:caif_netlink_parms(): no params data found [ 957.280386][T27010] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.287548][T27010] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.295420][T27010] device bridge_slave_0 entered promiscuous mode [ 957.516365][T27010] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.523593][T27010] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.531736][T27010] device bridge_slave_1 entered promiscuous mode [ 957.552531][T27010] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 957.564805][T27010] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 957.585675][T27010] team0: Port device team_slave_0 added [ 957.592855][T27010] team0: Port device team_slave_1 added [ 957.660771][T27010] device hsr_slave_0 entered promiscuous mode [ 957.729698][T27010] device hsr_slave_1 entered promiscuous mode [ 957.800032][T27010] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.807120][T27010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 957.814610][T27010] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.821743][T27010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 957.895468][ T3480] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.903624][ T3480] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.998714][T27010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 958.012663][T21697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 958.020459][T21697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 958.075658][T27010] 8021q: adding VLAN 0 to HW filter on device team0 [ 958.085507][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 958.094595][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 958.103533][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.110669][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.183886][T16854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 958.193000][T16854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 958.201600][T16854] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.208654][T16854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 958.217121][T16854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 958.226101][T16854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 958.279932][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 958.288690][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 958.297199][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 958.306003][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 958.315522][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 958.377230][T27010] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 958.389117][T27010] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 958.402361][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 958.411313][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 958.420168][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 958.428439][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 958.512877][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 958.528702][T27010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 958.602790][ T7908] device bridge_slave_1 left promiscuous mode [ 958.610192][ T7908] bridge0: port 2(bridge_slave_1) entered disabled state 19:35:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xc0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) close(r1) 19:35:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xc0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) close(r1) 19:35:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xc0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) close(r1) 19:35:45 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xc0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) close(r1) 19:35:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/keycreate\x00', 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000000), 0x4) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) 19:35:45 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xc0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) close(r1) [ 958.660394][ T7908] device bridge_slave_0 left promiscuous mode [ 958.666768][ T7908] bridge0: port 1(bridge_slave_0) entered disabled state 19:35:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xc0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) close(r1) [ 958.730753][ T7908] device bridge_slave_1 left promiscuous mode [ 958.766213][ T7908] bridge0: port 2(bridge_slave_1) entered disabled state 19:35:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xc0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) close(r1) [ 958.837442][ T7908] device bridge_slave_0 left promiscuous mode [ 958.864534][ T7908] bridge0: port 1(bridge_slave_0) entered disabled state 19:35:45 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xc0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) close(r1) 19:35:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xc0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) close(r1) 19:35:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/keycreate\x00', 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000000), 0x4) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) 19:35:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/keycreate\x00', 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000000), 0x4) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) 19:35:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xc0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) close(r1) [ 958.955091][ T7908] device bridge_slave_1 left promiscuous mode [ 958.984543][ T7908] bridge0: port 2(bridge_slave_1) entered disabled state 19:35:45 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc074510c, &(0x7f0000000100)={{}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 19:35:45 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1000000000005}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendto(r1, &(0x7f0000000200), 0x40060, 0x0, 0x0, 0x3f00) [ 959.100945][ T7908] device bridge_slave_0 left promiscuous mode [ 959.107249][ T7908] bridge0: port 1(bridge_slave_0) entered disabled state 19:35:45 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc074510c, &(0x7f0000000100)={{}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 19:35:45 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc074510c, &(0x7f0000000100)={{}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) [ 959.990682][T27070] IPVS: ftp: loaded support on port[0] = 21 [ 965.034094][ T7908] bond4 (unregistering): Released all slaves [ 965.047513][ T7908] bond3 (unregistering): Released all slaves [ 965.062630][ T7908] bond2 (unregistering): Released all slaves [ 965.077305][ T7908] bond1 (unregistering): Released all slaves [ 965.142757][ T7908] device hsr_slave_1 left promiscuous mode [ 965.205141][ T7908] device hsr_slave_0 left promiscuous mode [ 965.267399][ T7908] team0 (unregistering): Port device team_slave_1 removed [ 965.282175][ T7908] team0 (unregistering): Port device team_slave_0 removed [ 965.296412][ T7908] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 965.378116][ T7908] bond0 (unregistering): Released all slaves [ 965.495248][ T7908] bond6 (unregistering): Released all slaves [ 965.506834][ T7908] bond5 (unregistering): Released all slaves [ 965.526268][ T7908] bond4 (unregistering): Released all slaves [ 965.546600][ T7908] bond3 (unregistering): Released all slaves [ 965.566299][ T7908] bond2 (unregistering): Released all slaves [ 965.578407][ T7908] bond1 (unregistering): Released all slaves [ 965.633979][ T7908] device hsr_slave_1 left promiscuous mode [ 965.694885][ T7908] device hsr_slave_0 left promiscuous mode [ 965.755088][ T7908] team0 (unregistering): Port device team_slave_1 removed [ 965.768017][ T7908] team0 (unregistering): Port device team_slave_0 removed [ 965.781628][ T7908] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 965.833426][ T7908] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 965.947824][ T7908] bond0 (unregistering): Released all slaves [ 966.112735][ T7908] device hsr_slave_1 left promiscuous mode [ 966.163404][ T7908] device hsr_slave_0 left promiscuous mode [ 966.223249][ T7908] team0 (unregistering): Port device team_slave_1 removed [ 966.241190][ T7908] team0 (unregistering): Port device team_slave_0 removed [ 966.254473][ T7908] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 966.307860][ T7908] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 966.377541][ T7908] bond0 (unregistering): Released all slaves [ 966.597849][T27070] chnl_net:caif_netlink_parms(): no params data found [ 966.630771][T27070] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.637939][T27070] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.645861][T27070] device bridge_slave_0 entered promiscuous mode [ 966.653705][T27070] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.660890][T27070] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.668776][T27070] device bridge_slave_1 entered promiscuous mode [ 966.690229][T27070] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 966.700558][T27070] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 966.717464][T27070] team0: Port device team_slave_0 added [ 966.724833][T27070] team0: Port device team_slave_1 added [ 966.782078][T27070] device hsr_slave_0 entered promiscuous mode [ 966.819860][T27070] device hsr_slave_1 entered promiscuous mode [ 966.870758][T27070] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.877850][T27070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 966.885296][T27070] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.892411][T27070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 966.936975][T27070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 966.952565][T21697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 966.961236][T21697] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.968901][T21697] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.982410][T27070] 8021q: adding VLAN 0 to HW filter on device team0 [ 966.993432][T21697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 967.002330][T21697] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.009456][T21697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 967.029701][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 967.038035][T26892] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.045138][T26892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 967.066118][T27070] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 967.076738][T27070] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 967.091525][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 967.100705][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 967.109101][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 967.117537][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 967.137573][T27070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 967.145350][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 967.154170][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 19:35:53 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xc0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) close(r1) 19:35:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1000000000005}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendto(r1, &(0x7f0000000200), 0x40060, 0x0, 0x0, 0x3f00) 19:35:53 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc074510c, &(0x7f0000000100)={{}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 19:35:53 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc074510c, &(0x7f0000000100)={{}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 19:35:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/keycreate\x00', 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000000), 0x4) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) 19:35:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/keycreate\x00', 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000000), 0x4) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) 19:35:53 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc074510c, &(0x7f0000000100)={{}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 19:35:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/keycreate\x00', 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000000), 0x4) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) 19:35:54 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, r0) keyctl$link(0x8, r0, r1) 19:35:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1000000000005}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendto(r1, &(0x7f0000000200), 0x40060, 0x0, 0x0, 0x3f00) 19:35:54 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc074510c, &(0x7f0000000100)={{}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 19:35:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18}, 0x18) 19:35:54 executing program 0: r0 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x1de) socket$nl_xfrm(0x10, 0x3, 0x6) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x21) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) 19:35:54 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, r0) keyctl$link(0x8, r0, r1) 19:35:54 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r0, &(0x7f0000001380)=[{&(0x7f0000001100)="d2", 0x1}], 0x1) recvfrom(r0, 0x0, 0xffffffffffffffc9, 0x0, 0x0, 0xfffffffffffffd5f) 19:35:54 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20100, 0x0) connect(r0, &(0x7f0000000180)=@generic={0x0, "a0dda56f686a1f1cab1bed278b99ebcddfa8159061d13690183156e3b6f22e1ff8e0e4525295bf9ca0577ee45e5389f4183a8f830902d1a89a478efb4a5e08d08f8dce9f91637cf526216bacc050f8978416f2dda6a866fc300c4d60d6cb945f1c1a9ebf0303f0849a579adb1140816c544266ce6659a1d5290cba27a637"}, 0x80) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511", 0x4e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x81, 0x0, 0x9, 0x0, 0x3ef3a25a}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x40, &(0x7f0000001fde)=0x5000000, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0) r4 = dup3(r2, r0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, 0x0) 19:35:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1000000000005}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendto(r1, &(0x7f0000000200), 0x40060, 0x0, 0x0, 0x3f00) 19:35:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18}, 0x18) 19:35:54 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r0, &(0x7f0000001380)=[{&(0x7f0000001100)="d2", 0x1}], 0x1) recvfrom(r0, 0x0, 0xffffffffffffffc9, 0x0, 0x0, 0xfffffffffffffd5f) 19:35:54 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, r0) keyctl$link(0x8, r0, r1) 19:35:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18}, 0x18) 19:35:54 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r0, &(0x7f0000001380)=[{&(0x7f0000001100)="d2", 0x1}], 0x1) recvfrom(r0, 0x0, 0xffffffffffffffc9, 0x0, 0x0, 0xfffffffffffffd5f) 19:35:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18}, 0x18) 19:35:54 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, r0) keyctl$link(0x8, r0, r1) 19:35:57 executing program 0: r0 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x1de) socket$nl_xfrm(0x10, 0x3, 0x6) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x21) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) 19:35:57 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r0, &(0x7f0000001380)=[{&(0x7f0000001100)="d2", 0x1}], 0x1) recvfrom(r0, 0x0, 0xffffffffffffffc9, 0x0, 0x0, 0xfffffffffffffd5f) 19:35:57 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20100, 0x0) connect(r0, &(0x7f0000000180)=@generic={0x0, "a0dda56f686a1f1cab1bed278b99ebcddfa8159061d13690183156e3b6f22e1ff8e0e4525295bf9ca0577ee45e5389f4183a8f830902d1a89a478efb4a5e08d08f8dce9f91637cf526216bacc050f8978416f2dda6a866fc300c4d60d6cb945f1c1a9ebf0303f0849a579adb1140816c544266ce6659a1d5290cba27a637"}, 0x80) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511", 0x4e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x81, 0x0, 0x9, 0x0, 0x3ef3a25a}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x40, &(0x7f0000001fde)=0x5000000, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0) r4 = dup3(r2, r0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, 0x0) 19:35:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18}, 0x18) 19:35:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18}, 0x18) 19:35:57 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20100, 0x0) connect(r0, &(0x7f0000000180)=@generic={0x0, "a0dda56f686a1f1cab1bed278b99ebcddfa8159061d13690183156e3b6f22e1ff8e0e4525295bf9ca0577ee45e5389f4183a8f830902d1a89a478efb4a5e08d08f8dce9f91637cf526216bacc050f8978416f2dda6a866fc300c4d60d6cb945f1c1a9ebf0303f0849a579adb1140816c544266ce6659a1d5290cba27a637"}, 0x80) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511", 0x4e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x81, 0x0, 0x9, 0x0, 0x3ef3a25a}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x40, &(0x7f0000001fde)=0x5000000, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0) r4 = dup3(r2, r0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, 0x0) 19:35:57 executing program 2: r0 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x1de) socket$nl_xfrm(0x10, 0x3, 0x6) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x21) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) 19:35:57 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20100, 0x0) connect(r0, &(0x7f0000000180)=@generic={0x0, "a0dda56f686a1f1cab1bed278b99ebcddfa8159061d13690183156e3b6f22e1ff8e0e4525295bf9ca0577ee45e5389f4183a8f830902d1a89a478efb4a5e08d08f8dce9f91637cf526216bacc050f8978416f2dda6a866fc300c4d60d6cb945f1c1a9ebf0303f0849a579adb1140816c544266ce6659a1d5290cba27a637"}, 0x80) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511", 0x4e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x81, 0x0, 0x9, 0x0, 0x3ef3a25a}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x40, &(0x7f0000001fde)=0x5000000, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0) r4 = dup3(r2, r0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, 0x0) 19:35:57 executing program 0: r0 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x1de) socket$nl_xfrm(0x10, 0x3, 0x6) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x21) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) 19:35:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18}, 0x18) 19:35:57 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20100, 0x0) connect(r0, &(0x7f0000000180)=@generic={0x0, "a0dda56f686a1f1cab1bed278b99ebcddfa8159061d13690183156e3b6f22e1ff8e0e4525295bf9ca0577ee45e5389f4183a8f830902d1a89a478efb4a5e08d08f8dce9f91637cf526216bacc050f8978416f2dda6a866fc300c4d60d6cb945f1c1a9ebf0303f0849a579adb1140816c544266ce6659a1d5290cba27a637"}, 0x80) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511", 0x4e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x81, 0x0, 0x9, 0x0, 0x3ef3a25a}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x40, &(0x7f0000001fde)=0x5000000, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0) r4 = dup3(r2, r0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, 0x0) 19:35:57 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20100, 0x0) connect(r0, &(0x7f0000000180)=@generic={0x0, "a0dda56f686a1f1cab1bed278b99ebcddfa8159061d13690183156e3b6f22e1ff8e0e4525295bf9ca0577ee45e5389f4183a8f830902d1a89a478efb4a5e08d08f8dce9f91637cf526216bacc050f8978416f2dda6a866fc300c4d60d6cb945f1c1a9ebf0303f0849a579adb1140816c544266ce6659a1d5290cba27a637"}, 0x80) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511", 0x4e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x81, 0x0, 0x9, 0x0, 0x3ef3a25a}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x40, &(0x7f0000001fde)=0x5000000, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0) r4 = dup3(r2, r0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, 0x0) 19:35:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18}, 0x18) 19:35:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18}, 0x18) 19:35:57 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20100, 0x0) connect(r0, &(0x7f0000000180)=@generic={0x0, "a0dda56f686a1f1cab1bed278b99ebcddfa8159061d13690183156e3b6f22e1ff8e0e4525295bf9ca0577ee45e5389f4183a8f830902d1a89a478efb4a5e08d08f8dce9f91637cf526216bacc050f8978416f2dda6a866fc300c4d60d6cb945f1c1a9ebf0303f0849a579adb1140816c544266ce6659a1d5290cba27a637"}, 0x80) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511", 0x4e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x81, 0x0, 0x9, 0x0, 0x3ef3a25a}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x40, &(0x7f0000001fde)=0x5000000, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0) r4 = dup3(r2, r0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, 0x0) 19:35:57 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20100, 0x0) connect(r0, &(0x7f0000000180)=@generic={0x0, "a0dda56f686a1f1cab1bed278b99ebcddfa8159061d13690183156e3b6f22e1ff8e0e4525295bf9ca0577ee45e5389f4183a8f830902d1a89a478efb4a5e08d08f8dce9f91637cf526216bacc050f8978416f2dda6a866fc300c4d60d6cb945f1c1a9ebf0303f0849a579adb1140816c544266ce6659a1d5290cba27a637"}, 0x80) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511", 0x4e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x81, 0x0, 0x9, 0x0, 0x3ef3a25a}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x40, &(0x7f0000001fde)=0x5000000, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0) r4 = dup3(r2, r0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, 0x0) 19:35:57 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20100, 0x0) connect(r0, &(0x7f0000000180)=@generic={0x0, "a0dda56f686a1f1cab1bed278b99ebcddfa8159061d13690183156e3b6f22e1ff8e0e4525295bf9ca0577ee45e5389f4183a8f830902d1a89a478efb4a5e08d08f8dce9f91637cf526216bacc050f8978416f2dda6a866fc300c4d60d6cb945f1c1a9ebf0303f0849a579adb1140816c544266ce6659a1d5290cba27a637"}, 0x80) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511", 0x4e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x81, 0x0, 0x9, 0x0, 0x3ef3a25a}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x40, &(0x7f0000001fde)=0x5000000, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0) r4 = dup3(r2, r0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, 0x0) 19:35:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18}, 0x18) 19:36:00 executing program 2: r0 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x1de) socket$nl_xfrm(0x10, 0x3, 0x6) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x21) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) 19:36:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18}, 0x18) 19:36:00 executing program 0: r0 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x1de) socket$nl_xfrm(0x10, 0x3, 0x6) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x21) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) 19:36:00 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f0000000040)) 19:36:00 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20100, 0x0) connect(r0, &(0x7f0000000180)=@generic={0x0, "a0dda56f686a1f1cab1bed278b99ebcddfa8159061d13690183156e3b6f22e1ff8e0e4525295bf9ca0577ee45e5389f4183a8f830902d1a89a478efb4a5e08d08f8dce9f91637cf526216bacc050f8978416f2dda6a866fc300c4d60d6cb945f1c1a9ebf0303f0849a579adb1140816c544266ce6659a1d5290cba27a637"}, 0x80) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511", 0x4e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x81, 0x0, 0x9, 0x0, 0x3ef3a25a}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x40, &(0x7f0000001fde)=0x5000000, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0) r4 = dup3(r2, r0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, 0x0) 19:36:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:36:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18}, 0x18) 19:36:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18}, 0x18) 19:36:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:36:00 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) 19:36:00 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f0000000040)) 19:36:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 975.566596][ T7908] WARNING: CPU: 1 PID: 7908 at net/xfrm/xfrm_state.c:2389 xfrm_state_fini+0x218/0x280 [ 975.576172][ T7908] Kernel panic - not syncing: panic_on_warn set ... [ 975.582750][ T7908] CPU: 1 PID: 7908 Comm: kworker/u4:5 Not tainted 5.1.0-rc7+ #97 [ 975.590443][ T7908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 975.600542][ T7908] Workqueue: netns cleanup_net [ 975.605353][ T7908] Call Trace: [ 975.608631][ T7908] dump_stack+0x172/0x1f0 [ 975.612957][ T7908] ? xfrm_state_fini+0x1d0/0x280 [ 975.617883][ T7908] panic+0x2cb/0x65c [ 975.621779][ T7908] ? __warn_printk+0xf3/0xf3 [ 975.626382][ T7908] ? xfrm_state_fini+0x218/0x280 [ 975.631321][ T7908] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 975.637557][ T7908] ? __warn.cold+0x5/0x45 [ 975.641885][ T7908] ? __warn+0xe8/0x1d0 [ 975.645943][ T7908] ? xfrm_state_fini+0x218/0x280 [ 975.650863][ T7908] __warn.cold+0x20/0x45 [ 975.655095][ T7908] ? xfrm_state_fini+0x218/0x280 [ 975.660053][ T7908] report_bug+0x263/0x2b0 [ 975.664430][ T7908] do_error_trap+0x11b/0x200 [ 975.669021][ T7908] do_invalid_op+0x37/0x50 [ 975.673438][ T7908] ? xfrm_state_fini+0x218/0x280 [ 975.678361][ T7908] invalid_op+0x14/0x20 [ 975.682501][ T7908] RIP: 0010:xfrm_state_fini+0x218/0x280 [ 975.688044][ T7908] Code: 41 5e 5d c3 e8 89 a3 66 fb 0f 0b e9 09 ff ff ff e8 7d a3 66 fb 0f 0b e9 68 ff ff ff e8 71 a3 66 fb 0f 0b eb c6 e8 68 a3 66 fb <0f> 0b e9 52 fe ff ff e8 fc b9 9e fb e9 75 fe ff ff e8 12 ba 9e fb [ 975.707641][ T7908] RSP: 0018:ffff88808ac8fbd0 EFLAGS: 00010293 [ 975.713811][ T7908] RAX: ffff8880a4872600 RBX: ffff88806cf701c0 RCX: ffffffff86088ac9 [ 975.721799][ T7908] RDX: 0000000000000000 RSI: ffffffff8609e948 RDI: 0000000000000005 [ 975.729782][ T7908] RBP: ffff88808ac8fbf0 R08: ffff8880a4872600 R09: ffff8880a4872ef0 [ 975.737782][ T7908] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88806cf71c00 [ 975.745759][ T7908] R13: ffff88808ac8fcc8 R14: ffffffff893eaad8 R15: dffffc0000000000 [ 975.753768][ T7908] ? xfrm_state_flush+0x5a9/0x660 [ 975.758807][ T7908] ? xfrm_state_fini+0x218/0x280 [ 975.763734][ T7908] ? xfrm_policy_fini+0x3a0/0x3a0 [ 975.768753][ T7908] xfrm_net_exit+0x25/0x70 [ 975.773158][ T7908] ops_exit_list.isra.0+0xb0/0x160 [ 975.778277][ T7908] cleanup_net+0x3fb/0x960 [ 975.782700][ T7908] ? netns_install+0x1d0/0x1d0 [ 975.787545][ T7908] process_one_work+0x98e/0x1790 [ 975.792481][ T7908] ? pwq_dec_nr_in_flight+0x320/0x320 [ 975.797871][ T7908] ? lock_acquire+0x16f/0x3f0 [ 975.802548][ T7908] worker_thread+0x98/0xe40 [ 975.807093][ T7908] kthread+0x357/0x430 [ 975.811153][ T7908] ? process_one_work+0x1790/0x1790 [ 975.816341][ T7908] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 975.822574][ T7908] ret_from_fork+0x3a/0x50 [ 975.828576][ T7908] Kernel Offset: disabled [ 975.836956][ T7908] Rebooting in 86400 seconds..