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", 0x1000}], 0x5, &(0x7f0000009f00)=[@cred={0x20, 0x1, 0x2, r29, r30, r31}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r32, r33, r34}], 0x68, 0x800}, {&(0x7f0000009f80)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f000000b340)=[{&(0x7f000000a000)="0cd39ba11982bb0857a7627e94617b6bdd9f9a4808ff21bde166d472bb2d5945b8090f8dc4a15a336a843c0a95ec8119a599f084f52cc6c5b8b8989b4e3f355d6e1fe7e21048026b656eb6eafd85fca9f514ac5f8b48eea10bf9252df14357b38f5781dbdbb4aa158ca416c4f77638cf7dcc1ca9c751ef948d86b3a229fc05edab0b5e98e6731e9c1420a3e75bccf0846880d23a2e4af0827428ed2b932ff0007573856153493c3f9ee9484299de23b7440065577cba09", 0xb7}, {&(0x7f000000a0c0)="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", 0x1000}, {&(0x7f000000b0c0)="7c66d3cbd89e2781755aa05f67d28adf485217e69037840f5cc977e702bdde49729033c04e6c0fc86f1a775d1fa14fd17c34403fc03745c3a917869042e3e249fe822f36dbb636b0c1e747797f1d2a4b00e0f70b09e65fd2b0e93e5103edbdadb803db83d412e71bcc165fd6c9d1a6dc276343fe0c773ce0698e9263b126b6faa8f34e04824009b309bde584e671041759b923", 0x93}, {&(0x7f000000b180)="bed28f910b0be360191d4bd9753646a90ae712549ac38c7c2e82af7ff3f89d5a09598815b7d99aea6af30110e356a26099cb1a65cd0f81e63eb154f3243fa0073adea703857a9fe04b662eee6f579d507d176094c3d59c850eaa3b374530c20d02c0cd9eacd26e0298db9bb8f079fe6cf6e272ea32a734d3cdd746a536f37fb855a1e9cd08c2ab25ccf2d0e9254fb734fdd1e06c85b912f64a32162fc2ceb329fb6c8b1319a07e53ac4c12fa159d8fbf73aba042e3f8f211e5d091317b7d8bf307f2c8", 0xc3}, {&(0x7f000000b280)="159716ef7f2432438ded502bc07bcbeca33ad3f1056cc8ce099a2ec6f6423696662dfd47b865342fdf211a92c37518d23a147b65efe2d95494f60f3a6970020d7a43c236a5995cec547847cd8f0707bdb9ea2abff41424493ebedb9e42f338b89829c90dfa23e839087998f2068477bbc18a2183377c08044530284f720b8a113619e9b9435817f0c8e2327b5b4cef4525c85894b63acd23", 0x98}], 0x5, &(0x7f000000b780)=[@cred={0x20, 0x1, 0x2, r35, r36, r37}, @cred={0x20, 0x1, 0x2, r38, r39, r40}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r41, r42, r43}, @cred={0x20, 0x1, 0x2, r44, r45, r46}], 0xd0, 0x80}, {&(0x7f000000b880)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f000000bcc0)=[{&(0x7f000000b900)="c8764a2a1d24d53b1d4442d4a5f8b13a77fcfc8f57063d8e665cadf386cf4d18349a746ea0585f566c8c9f637cf85eafed65088a70ad45eb2b574a87fa60ed82a57954f75e5fa79f3ff1450fbdd7e86cac17ffcc13d0c3ba0f0a978f62fb70e922862b3814f0d5d36f12091f72b0d87de0705708c87131037bc870951d8beed19c113b818ca1050aec58fa2886e175df8fb0036a849a8315b05a34f529c40e5112349e60e10c31666d68d0411816077a3924fc3ef368d762cac950063a0769c835d9c3e011aa99112777767ea50546", 0xcf}, {&(0x7f000000ba00)="004697accd2d9c8dbe59b8f3d50b128c06d7159b", 0x14}, {&(0x7f000000ba40)="fba37f7c22d7e89944a6f58b0ae3516400846f10e34c9078101e84ec84ffaacb03566fe6421e495c71b9edc6015e1bf6b6a8a3fe54cbf02ac86a3acbafb95373c8a27ffc2c47321c60124a37042d130400984f84917462c9f0e068e2937e779f0ee1c46de19eeae012b4e90641488920226a2c9480e2aedc55357a209afad9c705f1a570c58ca9b3d51e51654c52a7b44aeb424d1e9bd89fba5734044d1802dba1058943b4585330882d8866b4c959300c12aa12e55345d68903d9eec14622dd774e69f35ebf36bf32394c3c18f9d312b5de29295a639b4d83823d692c6643dbe2ecdb0069f0f44ac1", 0xe9}, {&(0x7f000000bb40)="a2a6138d05e5016c9d3ed639bb805437dbd633af29ed0df66bef4495684cb84f8ddaec7aad", 0x25}, {&(0x7f000000bb80)="4aad28365012daea43885b162bb5604009c3da9bc0d22d945e8e5b3e69cebdff3534a022776fed60b34916189a14f139c410c5b6a244ec6fbcc81ed8e658467256544deaf02120721fc19286bbae416947c947323edb17e8e4af38bd9801063178bcea4b3fbaa889ff1324651ec53e67ac003a7894e95451320a78a138682d629e99f694dac1e86f92c005a5b2fd20d68aa5ca17f9878d1f5fbf75fa5eed06f94f113e1446d6d5018180c41471f96ffd57b9cfbc3cb282a103a6029209ddec82e6f8555a3020e1b864855109cfa681c8e8489c0b3b192df3da46329d974657ab5c711df5dfc5e7d31ca72e481898f13efb95", 0xf2}, {&(0x7f000000bc80)="4c184b3157a26071b7c5da4842ec94b352e67b8056af6fe71de01a02c28cc53e", 0x20}], 0x6, &(0x7f000000c480)=[@cred={0x20, 0x1, 0x2, r47, r48, r49}, @cred={0x20, 0x1, 0x2, r50, r51, r52}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r53, r54, r55}, @cred={0x20, 0x1, 0x2, r56, r57, r58}, @cred={0x20, 0x1, 0x2, r59, r60, r61}], 0xe0, 0x4}, {&(0x7f000000c580)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f000000c900)=[{&(0x7f000000c600)="db5a0fce92f3ab85fe0d053e321eb1d7f8bd1992c41506e474abf57062f8285f3479394ce0ef10ca702567f26f39d071887824aa9b50e1e868f6d61c242019e8824e2e13433ba1accb72851fc8bd6fa943f9d2bf442b1def608cc04d896813e8bf9fd17a5c29fafff22cc6692da8ff522e0bbd7c62d2b48b1361e953bbca7d7ea60c3344981b82c199040d6c208021bede215bd4467217ae7b485e1f0b9e5940d0", 0xa1}, {&(0x7f000000c6c0)="fb3c7454c5d6a9d7e4582a30a818b1469b8daab8de53a4961126df65190c554d0d31f22cb76d6f8fcc10573bbaaa245a746001acb5d24ad1adf3f4391da9c7eb1cdd38a24e5907f7d24ca53a", 0x4c}, {&(0x7f000000c740)="eea09d4887517defe39ee28ad12d28e71373fb109ccc502f67eee319073a3fd94487726d2cea405fc0f675d1f324568af6ddf01d6adf1eddfb3815d0216e23bd227f339cf22d251147fa6974f0fee5e281e8220254209e241b797720cb22abf2603bb0f93c90fbdcec533d844d0e7878ea7b9aa78cc8282a79bab427d09ab18006f67cd6ce47efdeb7139985d5d7476ac6fcfc78f7f6d4d72bac1bab5e2aee366be77c8684b03514807f8ec3d0f008dcbf3b5d96d33855eb46935d068c1a1d2f5d1a768c4b7236ca5eb0de3d98cb368094a77c1042", 0xd5}, {&(0x7f000000c840)="47512884b771d6495f42f7fda0aef7c77922408213e1bbaf7b8c202063d82ce23a0712e7ac1d991d0964fa9b96074e79f9a90193a6b5541d3a714616b504638525a05634328b436e83bb8055611268f7f48cbb7c00fbcb0653da4e34d1", 0x5d}, {&(0x7f000000c8c0)="13f19995291c67e13dff3c8c4d4c", 0xe}], 0x5, &(0x7f000000d140)=[@cred={0x20, 0x1, 0x2, r62, r63, r64}, @cred={0x20, 0x1, 0x2, r65, r66, r67}, @rights={0x10}, @cred={0x20, 0x1, 0x2, r68, r69, r70}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r71, r72, r73}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r74, r75, r76}], 0xe8, 0x40000}], 0x8, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x2}) r77 = syz_open_pts(r0, 0x0) ioctl$TIOCGPGRP(r77, 0x540f, &(0x7f0000000500)) [ 313.208368] EXT4-fs (sda1): re-mounted. Opts: delalloc,,errors=continue 03:35:11 executing program 7: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0xb, 0x7, 0x6, 0x9, 0x1, 0xffffffffffffffff, 0x0, [0x10]}, 0x1) 03:35:11 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xc868) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000180)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1'}, 0xffcf) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x501000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000080)={0x4, 0x8b1, 0x2}) [ 313.321991] binder: 21787:21789 unknown command -755501835 [ 313.338899] binder: 21787:21789 ioctl c0306201 20000040 returned -22 [ 313.939208] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 313.948645] CPU: 0 PID: 21757 Comm: syz-executor2 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 313.957122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.966478] Call Trace: [ 313.969060] dump_stack+0x1c9/0x2b4 [ 313.972678] ? dump_stack_print_info.cold.2+0x52/0x52 [ 313.977853] ? trace_hardirqs_on+0x10/0x10 [ 313.982068] ? lock_downgrade+0x8f0/0x8f0 [ 313.986215] dump_header+0x246/0x123c [ 313.990000] ? percpu_ref_put_many+0x131/0x240 [ 313.994573] ? trace_hardirqs_on+0x10/0x10 [ 313.998792] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 314.003708] ? trace_hardirqs_on+0x10/0x10 [ 314.007924] ? mem_cgroup_iter+0x517/0x10c0 [ 314.012225] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 314.017743] ? css_next_child+0x1c3/0x620 [ 314.021871] ? trace_hardirqs_on+0x10/0x10 [ 314.026094] ? trace_hardirqs_on+0x10/0x10 [ 314.030309] ? trace_hardirqs_on+0x10/0x10 [ 314.034529] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 314.040052] ? css_next_child+0x1c3/0x620 [ 314.044178] ? find_lock_task_mm+0x230/0x4d0 [ 314.048584] ? cgroup_get_tree+0xb20/0xb20 [ 314.052814] ? lock_acquire+0x1e4/0x540 [ 314.057476] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 314.062993] ? task_will_free_mem+0x239/0xb70 [ 314.067470] ? lock_release+0xa30/0xa30 [ 314.071425] ? oom_badness+0x7d1/0xb00 [ 314.075293] ? ___ratelimit+0x36f/0x655 [ 314.079254] ? lock_downgrade+0x8f0/0x8f0 [ 314.083385] ? kasan_check_read+0x11/0x20 [ 314.087521] ? do_raw_spin_unlock+0xa7/0x2f0 [ 314.091916] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 314.096474] ? do_raw_spin_lock+0x200/0x200 [ 314.100774] ? oom_kill_process+0x24d/0x280 [ 314.105079] ? lock_downgrade+0x8f0/0x8f0 [ 314.109225] ? trace_hardirqs_on+0xd/0x10 [ 314.113361] ? ___ratelimit+0xaa/0x655 [ 314.117226] ? idr_get_free+0x10c0/0x10c0 [ 314.121352] ? kasan_check_write+0x14/0x20 [ 314.125573] ? do_raw_spin_lock+0xc1/0x200 [ 314.129792] oom_kill_process.cold.29+0x10/0x660 [ 314.134539] ? trace_hardirqs_on+0xd/0x10 [ 314.138675] ? _raw_spin_unlock_irq+0x27/0x70 [ 314.143148] ? css_task_iter_end+0x2ce/0x490 [ 314.147540] ? oom_evaluate_task+0x540/0x540 [ 314.151933] ? trace_hardirqs_on+0xd/0x10 [ 314.156058] ? _raw_spin_unlock_irq+0x27/0x70 [ 314.160533] ? oom_badness+0xb00/0xb00 [ 314.164409] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 314.169145] ? mem_cgroup_iter_break+0x30/0x30 [ 314.173720] out_of_memory+0x86d/0x1ad0 [ 314.177693] ? oom_killer_disable+0x3a0/0x3a0 [ 314.182177] ? kasan_check_read+0x11/0x20 [ 314.186304] ? do_raw_spin_unlock+0xa7/0x2f0 [ 314.190689] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 314.195255] ? kasan_check_write+0x14/0x20 [ 314.199470] ? do_raw_spin_lock+0xc1/0x200 [ 314.203687] mem_cgroup_out_of_memory+0x15e/0x210 [ 314.208516] ? memcg_memory_event+0x40/0x40 [ 314.212821] ? page_counter_try_charge+0x1c7/0x220 [ 314.217731] try_charge+0x720/0x1680 [ 314.221429] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 314.228163] ? lock_downgrade+0x8f0/0x8f0 [ 314.232291] ? lock_release+0xa30/0xa30 [ 314.236243] ? __anon_vma_prepare+0xc4/0x720 [ 314.240642] ? handle_mm_fault+0x53e/0xc80 [ 314.244857] ? fs_reclaim_acquire+0x20/0x20 [ 314.249156] ? lock_downgrade+0x8f0/0x8f0 [ 314.253291] ? percpu_ref_put_many+0x119/0x240 [ 314.257853] ? get_mem_cgroup_from_mm+0x209/0x440 [ 314.262675] ? get_mem_cgroup_from_page+0x190/0x190 [ 314.267672] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 314.272494] ? lock_acquire+0x1e4/0x540 [ 314.276457] mem_cgroup_try_charge+0x4ff/0xa70 [ 314.281018] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 314.286033] ? mem_cgroup_protected+0xa60/0xa60 [ 314.290690] ? up_write+0x7b/0x220 [ 314.294211] ? up_read+0x110/0x110 [ 314.297736] ? __anon_vma_prepare+0x36d/0x720 [ 314.302217] ? pmd_val+0x88/0x100 [ 314.305654] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 314.311174] mem_cgroup_try_charge_delay+0x1d/0x90 [ 314.316089] __handle_mm_fault+0x25ba/0x4470 [ 314.320477] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 314.325311] ? cap_mmap_addr+0x52/0x130 [ 314.329266] ? userfaultfd_unmap_complete+0x32a/0x510 [ 314.334446] ? security_mmap_addr+0x80/0xa0 [ 314.338750] ? lock_acquire+0x1e4/0x540 [ 314.342705] ? handle_mm_fault+0x417/0xc80 [ 314.346921] ? lock_downgrade+0x8f0/0x8f0 [ 314.351049] ? lock_release+0xa30/0xa30 [ 314.355003] ? lock_release+0xa30/0xa30 [ 314.358963] ? down_read_killable+0x200/0x200 [ 314.363447] ? mem_cgroup_from_task+0xcb/0x1f0 [ 314.368018] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 314.372758] handle_mm_fault+0x53e/0xc80 [ 314.376801] ? __handle_mm_fault+0x4470/0x4470 [ 314.381366] ? find_vma+0x34/0x190 [ 314.384888] __do_page_fault+0x620/0xe50 [ 314.388932] ? mm_fault_error+0x380/0x380 [ 314.393061] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 314.398577] ? __x64_sys_clock_gettime+0x170/0x250 [ 314.403498] ? __ia32_sys_clock_settime+0x290/0x290 [ 314.408502] do_page_fault+0xf6/0x8c0 [ 314.412292] ? vmalloc_sync_all+0x30/0x30 [ 314.416424] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 314.421950] ? do_syscall_64+0x497/0x820 [ 314.425996] ? syscall_slow_exit_work+0x500/0x500 [ 314.430823] ? syscall_return_slowpath+0x5e0/0x5e0 [ 314.435736] ? syscall_return_slowpath+0x31d/0x5e0 [ 314.440648] ? prepare_exit_to_usermode+0x291/0x3b0 [ 314.445647] ? page_fault+0x8/0x30 [ 314.449179] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 314.454004] ? page_fault+0x8/0x30 [ 314.457525] page_fault+0x1e/0x30 [ 314.460960] RIP: 0033:0x40e16f [ 314.464142] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 314.483032] RSP: 002b:00007ffe1f3c3010 EFLAGS: 00010206 [ 314.488378] RAX: 00007f91cf350000 RBX: 0000000000020000 RCX: 00000000004569aa [ 314.495636] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 314.502904] RBP: 00007ffe1f3c30f0 R08: ffffffffffffffff R09: 0000000000000000 [ 314.510171] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1f3c31e0 [ 314.517426] R13: 00007f91cf370700 R14: 000000000072bf2c R15: 0000000000000001 [ 314.525052] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor2,pid=21757,uid=0 [ 314.539436] memory: usage 308kB, limit 0kB, failcnt 102 [ 314.544903] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 314.551702] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 314.557854] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 314.577416] Tasks state (memory values in pages): [ 314.582270] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name 03:35:13 executing program 4: bpf$PROG_LOAD(0x2, &(0x7f000000e000)={0x0, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000000000000025000000950000000000000000040000"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 03:35:13 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/54, 0x36}, {&(0x7f0000000140)=""/229, 0xe5}], 0x2, &(0x7f0000000280)=""/19, 0x13, 0x8b7}, 0x2) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000300)={r1, 0x1, 0x8001, 0x0, 0xfffffffffffffffb, 0x41, 0x86}) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) 03:35:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x20) setsockopt$inet_dccp_buf(r4, 0x21, 0xf, &(0x7f00000003c0)="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", 0x1000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e22, @dev}]}, &(0x7f0000000200)=0x10) listen(r3, 0x2) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r6 = accept4(r3, &(0x7f0000c71ff0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000f5effc)=0x10, 0x0) recvfrom$packet(r6, &(0x7f0000000300)=""/89, 0x59, 0x0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x703000) ioctl$sock_bt(r6, 0x8906, &(0x7f0000000480)) setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xb) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="0f01b80040ce743e0f3802b4c705000000660f51710765650fc758676666e7330f2304666466f20f01c9c4c179117e85fdea010000003300", 0x38}], 0x1, 0x0, &(0x7f0000000180), 0x10000000000000c4) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000040)={0xe0001}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 03:35:13 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000440)={0x0, 0x0, 0x10}, 0xc) r2 = getpgid(0x0) prctl$setptracer(0x59616d61, r2) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 03:35:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0213e30a2b165f8f762070") syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3, 0x402) write$binfmt_elf32(r1, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x38}, [{}]}, 0x58) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200010081000000"], 0x18) write$binfmt_elf64(r1, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 03:35:13 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f00000002c0), 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) connect$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback}}, 0x1e) 03:35:13 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = msgget(0x1, 0x80) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000240)=""/175) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) r4 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000000380)=""/4096) close(r0) 03:35:13 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x40044590, &(0x7f0000000380)=""/4096) close(r0) [ 314.591148] [ 21757] 0 21757 17618 8218 126976 0 0 syz-executor2 [ 314.600165] Memory cgroup out of memory: Kill process 21757 (syz-executor2) score 8249000 or sacrifice child [ 314.610176] Killed process 21757 (syz-executor2) total-vm:70472kB, anon-rss:104kB, file-rss:32768kB, shmem-rss:0kB [ 314.621165] oom_reaper: reaped process 21757 (syz-executor2), now anon-rss:0kB, file-rss:32788kB, shmem-rss:0kB 03:35:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)={&(0x7f0000000800)='./file0\x00', 0x0, 0x10}, 0x10) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0xffff, 0x4080) r4 = epoll_create(0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/net/tun\x00', 0x8000, 0x0) socketpair$inet6(0xa, 0xf, 0x7, &(0x7f0000000900)={0xffffffffffffffff}) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000940)='/dev/audio\x00', 0x800, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/vhost-net\x00', 0x2, 0x0) r10 = syz_open_dev$mice(&(0x7f0000000a00)='/dev/input/mice\x00', 0x0, 0x0) r11 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000a40)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000a80)=0x1c, 0x80800) r12 = userfaultfd(0x800) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/kvm\x00', 0x101800, 0x0) r15 = accept$unix(0xffffffffffffff9c, 0x0, &(0x7f0000000b00)) r16 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000d80)='syz1\x00', 0x200002, 0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/loop-control\x00', 0x200, 0x0) r19 = openat$full(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/full\x00', 0x12380, 0x0) r20 = socket$bt_hidp(0x1f, 0x3, 0x6) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000e80)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = socket$nl_netfilter(0x10, 0x3, 0xc) r23 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/vcs\x00', 0x200, 0x0) r24 = syz_open_dev$adsp(&(0x7f0000000f00)='/dev/adsp#\x00', 0x7f, 0x410200) r25 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000f80)=0x14, 0x80000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000fc0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000001000)={{{@in6=@mcast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@rand_addr}}, &(0x7f0000001100)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001140)={0x0, 0x0, 0x0}, &(0x7f0000001180)=0xc) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000001a80)=0x0) stat(&(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000004600)=[{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000200)="2cbee6346c0e0c7efb7a2518519e5a8d65c644724f2131bda3e8c9e8e3bc910f8161cbc099602c9dac6da32b926dca08c742b0d12718d39ddbdb6136eb6c2e3db52435b4caf25fa26f76aa79d8a073abb5575a441b95ebad95cc571100ec3c9db7810f3089431a02ea5bddb2d08047e527b20451e0e17ac88f73cff2", 0x7c}, {&(0x7f0000000280)="3bbd646d0852638ed2aa2c006210534f6d7664c15fb3d053c9620082a14440c9bfd8dad117c76b5d9f074ce47f1f59fb93341fa984784cc441526119dbaf396cc15a6b08348de1a2befcdaea2321f1c61db386743b09e222fdce4b3170eadcb5dc0eeaf5eb8283676324d9d684dbad0db85814dbe6db58d3166f288e13c18a22e2e3", 0x82}, {&(0x7f0000000340)="380322949f8d9fb796f0c210fef7ac54510814a3de742b63cc8d532a242d136bc7abab4e4e0fe1f7af32f85e4d6065edbd9e7e17ec453ec41207a5f573081e3aa618", 0x42}, {&(0x7f00000003c0)="77ec13961b556443e51dc7ab596bcccb17272c3796492bf03d6dabc813bddcf314fe6bc0cc952bf675bc806eef510582948e35962efa1e837ae84f1ef0f09f63cf6dc9de0ec4cc2f6fae24563118970f33a6a94619895f1c0cbfa561b24bcb0f2eef5af341504380296ffb7ba26cd6f59e50ead88a7a833445326574260f9261b5101a4e89ed4f5b237e45756ef77f932668428e05cf45f2ee7b05446469985787b0877bcd", 0xa5}, {&(0x7f0000000480)="7f4909d9775eca7700ce9d49838d3d14f561816cf6b419c405b56e838abff13284c2c064eb64545c337055f44f50e9bca512631079c65f6f652731ef952f87fc413182c325f240b777b00ae35f59c6cbfe21d75457", 0x55}, {&(0x7f00000000c0)}], 0x6, 0x0, 0x0, 0x4}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000600)="d33b7858debef6876f7bb4a05fbf12dcaee0c579d84913a1514fe7e8857da233ef3b63df0eb0b8e635a9af52bd05f61d4b2f89b1322041fbd9c2c067e88c422bffef18087300ab492b15fa31", 0x4c}, {&(0x7f0000000680)="25d25a0bfc0af6b2a21d53bff129d3c8c216ffa5cde1b6bcc3bcb105413c801de1f10aac2caff1f789abc78b5afbcb1a6de569c607f00c2a4483ea4199708b1888ec4dc7d186513d5369a59f591eb369523c65f835bd61ba883228bf0dc6155723daf03fca2716071b82c8a3e6", 0x6d}, {&(0x7f0000000700)="29812af16e01de065717875e3af95ef3df2ec8987845f61a2f4b3f187041b0da5999d84b83a9816c33736360800c3dd9501b77afa875a81a9b89e1683b07d3845635b23b3252199aa6fb79e2d17f25319d289d84d75e0cf76c5ead1e603dc59f576c662db6f569584d75766edea3120db3900efa9be7b12d1e92af9668a20e9f1e6be3dbeaada09d775e050de067b5dbf0aa7cd11704be7f5f14416580793d171935d12cc6d7c722", 0xa8}], 0x3, &(0x7f0000000b40)=[@rights={0x30, 0x1, 0x1, [r1, r2, r3, r4, r5, r6, r7]}, @rights={0x30, 0x1, 0x1, [r8, r9, r10, r11, r12, r13, r14, r15]}], 0x60, 0x20000080}, {&(0x7f0000000bc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000c40)="6ea550fc3505c32c6754f758cf", 0xd}, {&(0x7f0000000c80)="8639d40304e7f1011302d933917d4d61adfe081ce3d80367e52d8d255a90893d0ba5f5dbe5438f76b600", 0x2a}, {&(0x7f0000000cc0)="5f623801f2095d34a02f7773c2de206ee57389466efa0f2f21f0363c7eb74a70e37c76e784bd1a21d8fd29f5e3b1f23fb01135c02f2a9b8670600a7363c68d9c9172ae9b5e2e3899ee3ea85ae97f690de3cf", 0x52}], 0x3, &(0x7f00000011c0)=[@rights={0x38, 0x1, 0x1, [r16, r17, r18, r19, r20, r21, r22, r23, r24, r25]}, @cred={0x20, 0x1, 0x2, r26, r27, r28}], 0x58}, {&(0x7f0000001240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001440)=[{&(0x7f00000012c0)="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", 0xfd}, {&(0x7f00000013c0)="689d6f8546f0d9705cd3b6ac82b59ccbc713214ca1d54a87b46a08baf02b8320edd132a2d261d574574c9b4f176884d618af49f31dfb623eb9975ff2dd9f7eec5824e0fa880f7d0d66bebb919103ec890910b5f43cfc427e1c51c02cd69a88a7", 0x60}], 0x2, 0x0, 0x0, 0x20000000}, {&(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001a00)=[{&(0x7f0000001500)="b0c001ec213b925124e9b3f1229aa718a8500da102b1f7678ffa7176b0806c695641127d35a19b8597166b403bbf93ebfbf263285820046a43c08bc721194f87299d72f3c835a161655eb4b7c986144040686df136ca8762cfa6a02c101a33a2c0c8e027d601e95187a4bab16c870af385b6fb301d4c9f35b8edc0aaa15a41d49648207c2d573865e49e4a521f65bbff3f0614b60ddc948e7a123578e6e69593e483ef16b7b02804ae2fcca64894af67dba6aa58a0ad7ef34c9160f4", 0xbc}, {&(0x7f00000015c0)="7a25f942cd375ebe4a1b70673e1249df5f2589db0191a9ff2da15b1f4e2263547ac47e41b569ea5f8eabdded76341cef6f2bfa36e938efa03eb56f2f3a61330b5bb81e6ad6689d422aa661c6f81a299f4ab893bf538ff00ed91f03589ee95029c0068f8bbd098d1c1b2578bfb369dcda2e619a90499eec38cadbffcc762a590f80e802525bb3037c26e9652281bb31b03cea2e8535707a7364af2f13f2d8a9e1f413ee7f321cf695fc4e3416e0aed69b4f06d0cb733b546189d09ad7a93cc6a0388b73329934b1ca", 0xc8}, {&(0x7f00000016c0)="e882e5e31678929e9677db95ee642111a93c5d5d03991887dcbe8e44e04172a140687af5c1093d508f3cd476fa279da22df4e37346c02b0289a05733d99c", 0x3e}, {&(0x7f0000001700)="a9bf2eaf9ea94552f0e2120e35692e909385991bbfef60d3bf3f39d05fb7c38a532833be59ac8ff1addea953d86fa67f854d4a4aeac97125c8c5fdfd5a3b421400f6e3a469edfb863c3f58a89b3f148b7bd51e45b678b7b33c69d702d8e42cd48141113549420760847be4e2e987a42aa3862672246d6c314e24995a54e175c61d7de9c8ea85e61b71a9", 0x8a}, {&(0x7f00000017c0)="648b9e33ea43da4552806dedab307157ab", 0x11}, {&(0x7f0000001800)}, {&(0x7f0000001840)="e204147250fa9d64fc2035ceeefd8c49a58d912e4205a548e348a9ddf0e621e70518e4fb5a8c347ed65bf155b635b8fe744a06fd6600bc3b096aa3ca8fc586705ef326e418d959ef49afc50e68a44148e1958a10f5acfe186f64ab77e4782447e7a64ffa51b3b0b985d1747f78d29177696ad009df7ddb9a105f40666dcf132eddd7b9807aefa0dad4f647adf4453d9d89a01aa5ef3f7375", 0x98}, {&(0x7f0000001900)="6104007354ae51f493de9a314dcb721e9eaad82f8ea660eba36de413f5c80976b666e55b85f3bae86824159e418e3efa8102068688f4cf637589c30785a13ae5ce417733811819ba436194996668375c89fb9396e4f558df1cd3453e04854811c4538f3200fae35e04e59d3900adfec06265852cc8e136cc543e335789292205ae52e913754cfc0e696b5da4a036928235e1a7cbe5ed5e2f71f47c438e86d98a5e6e7b9f9bdb802f7bb73a502e417179e5172e3ef59962369c08d82cc7d82266a55a0bb6d858298f6b265ffb7dc98cabb90c00b513fcf0246def33dd26e252ba823ff5b7bb145c4d80489b7e145375a64ea4877e78", 0xf5}], 0x8, &(0x7f0000001c40)=[@cred={0x20, 0x1, 0x2, r29, r30, r31}], 0x20, 0x4}, {&(0x7f0000001c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002f00)=[{&(0x7f0000001d00)="8463d84ed40f8a4cb23603d8db18ab209576ef0a8cd5a75885e95e80c80f5a38c590dab0278ebd2119b5b4644b8dbd3de7f6b8cf6364a50cd3b961", 0x3b}, {&(0x7f0000001d40)="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", 0x1000}, {&(0x7f0000002d40)="cfe869d361ac529e91be4f1c065e0a63c160cdd6475353f9b9a951a32571033881a4c9efb9adc40feb9d5bdde98de7182cffd7e5e5ab021d10d4a1d46c18cee26020dcafbd2e1c2fdf3f1c4876d000a3075229a452caae7c91d95bc87a600620ac789731f8a8858f08c7e7b72811fea881d94317a6fecfb5bbd4115e2bd1f3bfab99e280e8fc7f13822b9deddddc6e3593df67ebbfd9175698e7db6907e97da62aeb20414b", 0xa5}, {&(0x7f0000002e00)="7961ba60eb2fa9818f205e45efbae450e8c5a62795464f16b174412577dc5b881214bb32fb593c6aeacf67a756778f42b5aa4300000678c6c3bb28", 0x3b}, {&(0x7f0000002e40)="6ccf770e4f63dd66511a1f2f159f0a441635d888f6c9bcce5a8bda15cd45d7b0aa01ee3c390e5ebf4b344a36150ff58039d0a2f865200912e3ec115c731cd61cb1614835dc890e7c45e43e59f1cb54ff84babfb236c8bc620acc43ab037590679d249b410cca1117e7c9e02ba9657526c72ea5e6829d682d4033090488c035e19a0a10777184a3c5cc52c542", 0x8c}], 0x5, 0x0, 0x0, 0x4000}, {&(0x7f0000002f80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004540)=[{&(0x7f0000003000)="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", 0x1000}, {&(0x7f0000004000)="682701f311f393ebe25fd6993dfbe018dd6cb5a2202286bb930efcead1bbc9ca340fd0d9cb8fd126c4f917b6f834720ca85dba3e7779104fb227bdffed19de7f44ce191388272cc34ecfa3591b6408a1e93d9c302b3d50b788", 0x59}, {&(0x7f0000004080)="934aaba43cc6325085e6f3d83c24b036341d74ca398ae32792d0c57e21c0e9f17205e70d1026f31c43d6138026868e8122bf022a83bda1c4ed003e48b311aabe45724866cb71c63e4cf3bbd12d0cd41dedf0451bad14", 0x56}, {&(0x7f0000004100)="8ad350c3b7cea8305563b13967b5e44b51e6980b84295a559dc769d883cb9c36a1c4aae0d26e675f368a019fe715b8440f58154c25f3e6136fa01736a90383b4845c63c9082a63e286a1c8c4c297c47539b59453f7c3d617daf263c48d231ea4f5efaad844a03203521ecde9c59318e559573411eac1e686e58ab1960110be4fd25baf96684743e8976cd3dd33cff5c24f9d91c7b9b56ee75750f5c0ae6bf2840c594046352f41d752bbd870b7f1586e2edb6befe258a895465514cb466c045fb649cb2e1a344a8349d6b51d0a23d38b3090991886f7702f0cd2ea5e93e065f9d5", 0xe1}, {&(0x7f0000004200)="dd8ff20d7d0c712ba24b044088e21cb996a384de8c8865ee6c4bb7c1ad5d917b3707f4740c1e3b1fdc974cad0578cb3c2e719e468fdbac1c93e4e85e198f350fdbabd76a53d58775a9fb7a19e8fd36", 0x4f}, {&(0x7f0000004280)="d1183bbeb7239294a23461bda184835b49729868eb70296d7380e43dbad5982b7d2cbe7331e2975246749bb0980a9ab48e8ccb70e48ec6ff1749574aedc76eb02feb8655e962188d67ac2fd365c72bb98d7c39143cc23c8129a6b1938d2ed90947310bff3f25ab34bfba36261fff1aa14665abcce6ecdc4e29d66de69600ed2c289405da154d9bf04e23a7fa8e50622783f154936601", 0x96}, {&(0x7f0000004340)="ff553ddd2a451af2f2144c007c7d48c1c567de1102aaa0e8cbaeb5701d25b169a361fa7981fdfa122b5e9667997079cc8b88a071b3206d701e1fdb71d7330a2b327d0847945169b75bb72ba929930659677a733fd53e495dee5b8fb994c3ba2cbad804a2f0a3b635613a588c13d7b1f8669d3e06e93c7f27a87cd68130008a5d056872aeb05d56b1671e8f8558308bd7810e616f110a9850f9265d13d6e31bfe082ac0ed9731151edee9e168374d6749cbb47ff90f97a7401f974abddfea0100a220f13e2b7b1451ac748fa8b554f8e584ad5b35eff1f7e134aa1392a108e9", 0xdf}, {&(0x7f0000004440)="842f70dbb45312641d7c86bf4ab16971477b62d641d831cd5a9858f9e337608466080051c3614ce969773a1d17971fefbda51039d9dc823935fce36d4f5b7b91bb2a2dae94715a9e39960cc012e65fd495e607d3c24330416c36e82271e030bee4f7cf4c1f1050c9c7b421c6ebff509837ddbe90607f84eba53b747fdfb0107d3a06a4d06e56d0555f8a9c8b7e224d0d1fd2da713f8145276fb865fe3e7afdfda7252123a2d223ac86085ee61f6dd515c716d03f2b945da5dc2baec0780c23232f13da3a4d380aef40b538", 0xcb}], 0x8, &(0x7f00000045c0), 0x0, 0x20040000}], 0x7, 0x4000000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r32 = memfd_create(&(0x7f0000000100)="575e3eef3db62f994be589caa03f871b80d69d906e8fb20743e480318a71ea03e2e8626cddbc3bf8c686ce3871f229a7dba560efaa7ca2cc09e4aede9746c2453fcca21e311cca40b963701b5b0a1403ea", 0x6) fallocate(r32, 0x3, 0x0, 0x400004b) 03:35:13 executing program 7: r0 = socket$inet6(0xa, 0x1000003, 0x40000009) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0xb00, 0x0) accept4$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x80800) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0xb2bf, 0x3, 0x7ff}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000240)={r2, 0x7}, &(0x7f0000000280)=0x8) socketpair$inet6(0xa, 0x80f, 0x1, &(0x7f0000000140)) ioctl(r0, 0x8912, &(0x7f0000000180)="025c3f0a00145f8f764070") r3 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000000)=0x800) 03:35:13 executing program 1: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) fcntl$setflags(r0, 0x2, 0x1) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0xc4080, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f00000001c0)='bridge_slave_1\x00') ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000600)={0x1, {0x2, 0x0, @rand_addr}, {}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x0, 0x5, 0x7fff, 0x9976, 0x0, &(0x7f0000000480)='bridge_slave_1\x00', 0x4, 0x7}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {}, {0x2, 0x40000000, @dev}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x3, 0xfd, 0x0, 0x0, 0x80000001}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000005c0), 0x4) r3 = memfd_create(&(0x7f0000000200)='ppp1^$vmnet1\x00', 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@loopback, @in6=@mcast1}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f00000007c0)=0xe8) r4 = geteuid() getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x5, 0x5, 0x7}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000002c0)={r5, 0x5}, &(0x7f0000000300)=0x8) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x202100, 0x0) getpeername$packet(r6, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000440)=0x14) fcntl$getflags(r1, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) getdents(r7, &(0x7f0000000000)=""/127, 0x2fb) setresuid(r4, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000008c0)="2f991461c8eac6571e27d9da8e9f983ba2f888dd28b4e928d1434006fdd37213214185ab884b00dd178dfe0979d18c26c47f1fb021eaeb2b5d08ca3b719bc02c50800a50da9e7a6a3eb21bb33baeafd549ea7cf54035792d707a", 0x5a, 0x0, &(0x7f0000000400)={0x2, 0x4e23}, 0x10) 03:35:13 executing program 5: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$inet_int(r0, 0x0, 0x40000000000c9, &(0x7f0000000140), 0xe6178cf508d0511d) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xffff, 0x40000) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000100)={0x4, 0xa93, 0x100000000}) 03:35:13 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r2, 0x40044590, &(0x7f0000000380)=""/4096) close(0xffffffffffffffff) 03:35:13 executing program 7: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000002c0)) r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000340)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000280)="b1"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x48, 0x0, &(0x7f0000000140)="5e28a928ceb064604e0e287107006f8a7abef62c37949a152c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5dda005eff57bae345cf40c5"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x31, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12634840000000000000000000000085ef3096004709e00000000000000000e4ffffffffffffff0000000000000000", @ANYRES16=r2], 0x0, 0x0, &(0x7f0000000240)}) 03:35:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, {0xfffffffffffbffff, 0x800000, 0xfff}, 0x4}, 0xfffffffffffffd91) write$FUSE_DIRENT(r1, &(0x7f0000000200)={0xc8, 0xfffffffffffffffe, 0x2, [{0x3, 0x2, 0xf, 0x7f, '}])cgroup-[eth0'}, {0x3, 0x8a, 0x12, 0x7fffffff, '\\cgroupsecurity*]\''}, {0x3, 0x6, 0xb, 0x40, '$ppp1ppp1\'.'}, {0x0, 0x8, 0x2, 0x100, '(:'}, {0x5, 0x81, 0x0, 0x936}]}, 0xc8) 03:35:13 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = epoll_create(0x1000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) epoll_create(0x7) 03:35:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xe, 0x3, 0x2}, 0x2c) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)=0x53) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080)='0J', &(0x7f00000002c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f000051e000)={r1, &(0x7f00000002c0), &(0x7f0000950000)}, 0x20) 03:35:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fd\x00') sendfile(r2, r3, &(0x7f0000000080), 0x1) r4 = getpgrp(0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000000)=r4) [ 315.543974] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 315.553471] CPU: 0 PID: 21828 Comm: syz-executor3 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 315.561973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.571335] Call Trace: [ 315.573949] dump_stack+0x1c9/0x2b4 [ 315.577590] ? dump_stack_print_info.cold.2+0x52/0x52 [ 315.582778] ? trace_hardirqs_on+0x10/0x10 [ 315.587007] ? lock_downgrade+0x8f0/0x8f0 [ 315.591145] dump_header+0x246/0x123c [ 315.594929] ? percpu_ref_put_many+0x131/0x240 [ 315.599493] ? trace_hardirqs_on+0x10/0x10 [ 315.603714] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 315.608701] ? trace_hardirqs_on+0x10/0x10 [ 315.612921] ? mem_cgroup_iter+0x517/0x10c0 [ 315.617226] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 315.622746] ? css_next_child+0x1c3/0x620 [ 315.626880] ? trace_hardirqs_on+0x10/0x10 [ 315.631098] ? trace_hardirqs_on+0x10/0x10 [ 315.635329] ? trace_hardirqs_on+0x10/0x10 [ 315.639554] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 315.645070] ? css_next_child+0x1c3/0x620 [ 315.649198] ? find_lock_task_mm+0x230/0x4d0 [ 315.653590] ? cgroup_get_tree+0xb20/0xb20 [ 315.657808] ? lock_acquire+0x1e4/0x540 [ 315.661762] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 315.666116] binder: 21849:21874 ERROR: BC_REGISTER_LOOPER called without request [ 315.667288] ? task_will_free_mem+0x239/0xb70 [ 315.667305] ? lock_release+0xa30/0xa30 [ 315.667316] ? oom_badness+0x7d1/0xb00 [ 315.667330] ? ___ratelimit+0x36f/0x655 [ 315.667350] ? lock_downgrade+0x8f0/0x8f0 [ 315.677513] binder_alloc: 21849: binder_alloc_buf, no vma [ 315.679353] ? kasan_check_read+0x11/0x20 [ 315.679367] ? do_raw_spin_unlock+0xa7/0x2f0 [ 315.679378] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 315.679393] ? do_raw_spin_lock+0x200/0x200 [ 315.683392] binder: 21849:21874 transaction failed 29189/-3, size 16777215-335544320 line 2967 [ 315.687214] ? oom_kill_process+0x24d/0x280 [ 315.687229] ? lock_downgrade+0x8f0/0x8f0 [ 315.687247] ? trace_hardirqs_on+0xd/0x10 [ 315.691210] binder: send failed reply for transaction 71 to 21849:21852 [ 315.695322] ? ___ratelimit+0xaa/0x655 [ 315.695344] ? idr_get_free+0x10c0/0x10c0 [ 315.705338] binder_alloc: binder_alloc_mmap_handler: 21849 20001000-20004000 already mapped failed -16 [ 315.709380] ? kasan_check_write+0x14/0x20 [ 315.709393] ? do_raw_spin_lock+0xc1/0x200 [ 315.709410] oom_kill_process.cold.29+0x10/0x660 [ 315.709424] ? trace_hardirqs_on+0xd/0x10 [ 315.709442] ? _raw_spin_unlock_irq+0x27/0x70 [ 315.717533] binder: BINDER_SET_CONTEXT_MGR already set [ 315.718342] ? css_task_iter_end+0x2ce/0x490 [ 315.718366] ? oom_evaluate_task+0x540/0x540 [ 315.727432] binder_alloc: 21849: binder_alloc_buf, no vma [ 315.731403] ? trace_hardirqs_on+0xd/0x10 [ 315.731416] ? _raw_spin_unlock_irq+0x27/0x70 [ 315.731430] ? oom_badness+0xb00/0xb00 [ 315.731445] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 315.731456] ? mem_cgroup_iter_break+0x30/0x30 [ 315.731475] out_of_memory+0x86d/0x1ad0 [ 315.735637] binder: 21849:21874 transaction failed 29189/-3, size 0-0 line 2967 [ 315.739732] ? oom_killer_disable+0x3a0/0x3a0 [ 315.739743] ? kasan_check_read+0x11/0x20 [ 315.739760] ? do_raw_spin_unlock+0xa7/0x2f0 [ 315.747729] binder: 21849:21852 ioctl 40046207 0 returned -16 [ 315.750384] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 315.750398] ? kasan_check_write+0x14/0x20 [ 315.750410] ? do_raw_spin_lock+0xc1/0x200 [ 315.750424] mem_cgroup_out_of_memory+0x15e/0x210 [ 315.750440] ? memcg_memory_event+0x40/0x40 [ 315.755848] binder: 21849:21876 ERROR: BC_REGISTER_LOOPER called without request [ 315.764067] ? page_counter_try_charge+0x1c7/0x220 [ 315.764079] try_charge+0x720/0x1680 [ 315.764098] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 315.764114] ? lock_downgrade+0x8f0/0x8f0 [ 315.764126] ? lock_release+0xa30/0xa30 [ 315.764144] ? __anon_vma_prepare+0xc4/0x720 [ 315.771859] binder: undelivered TRANSACTION_ERROR: 29189 [ 315.772604] ? handle_mm_fault+0x53e/0xc80 [ 315.772624] ? fs_reclaim_acquire+0x20/0x20 [ 315.777717] binder: undelivered TRANSACTION_ERROR: 29190 [ 315.781484] ? lock_downgrade+0x8f0/0x8f0 [ 315.781498] ? percpu_ref_put_many+0x119/0x240 [ 315.781511] ? get_mem_cgroup_from_mm+0x209/0x440 [ 315.781527] ? get_mem_cgroup_from_page+0x190/0x190 [ 315.954489] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 315.959315] ? lock_acquire+0x1e4/0x540 [ 315.963276] mem_cgroup_try_charge+0x4ff/0xa70 [ 315.967839] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 315.972836] ? mem_cgroup_protected+0xa60/0xa60 [ 315.977493] ? up_write+0x7b/0x220 [ 315.981016] ? up_read+0x110/0x110 [ 315.984544] ? __anon_vma_prepare+0x36d/0x720 [ 315.989023] ? pmd_val+0x88/0x100 [ 315.992458] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 315.997975] mem_cgroup_try_charge_delay+0x1d/0x90 [ 316.002885] __handle_mm_fault+0x25ba/0x4470 [ 316.007278] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 316.012103] ? cap_mmap_addr+0x52/0x130 [ 316.016059] ? userfaultfd_unmap_complete+0x32a/0x510 [ 316.021229] ? security_mmap_addr+0x80/0xa0 [ 316.025537] ? lock_acquire+0x1e4/0x540 [ 316.029495] ? handle_mm_fault+0x417/0xc80 [ 316.033709] ? lock_downgrade+0x8f0/0x8f0 [ 316.037834] ? lock_release+0xa30/0xa30 [ 316.041860] ? lock_release+0xa30/0xa30 [ 316.045819] ? down_read_killable+0x200/0x200 [ 316.050296] ? mem_cgroup_from_task+0xcb/0x1f0 [ 316.054868] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 316.059616] handle_mm_fault+0x53e/0xc80 [ 316.063660] ? __handle_mm_fault+0x4470/0x4470 [ 316.068224] ? find_vma+0x34/0x190 [ 316.071745] __do_page_fault+0x620/0xe50 [ 316.075791] ? mm_fault_error+0x380/0x380 [ 316.079919] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 316.085435] ? __x64_sys_clock_gettime+0x170/0x250 [ 316.090347] ? __ia32_sys_clock_settime+0x290/0x290 [ 316.095346] do_page_fault+0xf6/0x8c0 [ 316.099127] ? vmalloc_sync_all+0x30/0x30 [ 316.103256] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 316.108772] ? do_syscall_64+0x497/0x820 [ 316.112817] ? syscall_return_slowpath+0x5e0/0x5e0 [ 316.117728] ? syscall_return_slowpath+0x31d/0x5e0 [ 316.122638] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 316.127647] ? prepare_exit_to_usermode+0x291/0x3b0 [ 316.132646] ? page_fault+0x8/0x30 [ 316.136169] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 316.140993] ? page_fault+0x8/0x30 [ 316.144510] page_fault+0x1e/0x30 [ 316.147943] RIP: 0033:0x40e16f [ 316.151120] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 316.170010] RSP: 002b:00007ffd8c7205b0 EFLAGS: 00010206 [ 316.175357] RAX: 00007f3313243000 RBX: 0000000000020000 RCX: 00000000004569aa [ 316.182607] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 316.189864] RBP: 00007ffd8c720690 R08: ffffffffffffffff R09: 0000000000000000 [ 316.197114] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8c720780 [ 316.204372] R13: 00007f3313263700 R14: 000000000072bf2c R15: 0000000000000001 [ 316.212108] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor3,pid=21828,uid=0 [ 316.226452] memory: usage 292kB, limit 0kB, failcnt 119 [ 316.231873] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 316.238646] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 316.244796] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 316.264289] Tasks state (memory values in pages): [ 316.269153] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 316.278040] [ 21828] 0 21828 17618 8221 126976 0 0 syz-executor3 [ 316.287065] [ 21848] 0 21848 17618 8218 126976 0 0 syz-executor2 [ 316.296075] Memory cgroup out of memory: Kill process 21828 (syz-executor3) score 8252000 or sacrifice child [ 316.306077] Killed process 21828 (syz-executor3) total-vm:70472kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 316.317119] oom_reaper: reaped process 21828 (syz-executor3), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB [ 316.328255] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 316.337680] CPU: 1 PID: 21848 Comm: syz-executor2 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 316.346165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.355502] Call Trace: [ 316.358075] dump_stack+0x1c9/0x2b4 [ 316.361685] ? dump_stack_print_info.cold.2+0x52/0x52 [ 316.366858] ? trace_hardirqs_on+0x10/0x10 [ 316.371071] ? do_raw_spin_unlock+0xa7/0x2f0 [ 316.375463] dump_header+0x246/0x123c [ 316.379250] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 316.384159] ? trace_hardirqs_on+0x10/0x10 [ 316.388375] ? trace_hardirqs_on+0x10/0x10 [ 316.392595] ? trace_hardirqs_on+0x10/0x10 [ 316.396831] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 316.402354] ? css_next_child+0x1c3/0x620 [ 316.406482] ? find_lock_task_mm+0x230/0x4d0 [ 316.410875] ? cgroup_get_tree+0xb20/0xb20 [ 316.415095] ? lock_acquire+0x1e4/0x540 [ 316.419052] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 316.424581] ? task_will_free_mem+0x239/0xb70 [ 316.429066] ? lock_release+0xa30/0xa30 [ 316.433021] ? oom_badness+0x7d1/0xb00 [ 316.436892] ? ___ratelimit+0x36f/0x655 [ 316.440855] ? lock_downgrade+0x8f0/0x8f0 [ 316.444993] ? kasan_check_read+0x11/0x20 [ 316.449125] ? do_raw_spin_unlock+0xa7/0x2f0 [ 316.453522] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 316.458086] ? do_raw_spin_lock+0x200/0x200 [ 316.462398] ? oom_kill_process+0x24d/0x280 [ 316.466700] ? lock_downgrade+0x8f0/0x8f0 [ 316.470831] ? trace_hardirqs_on+0xd/0x10 [ 316.474963] ? ___ratelimit+0xaa/0x655 [ 316.478841] ? idr_get_free+0x10c0/0x10c0 [ 316.482986] ? kasan_check_write+0x14/0x20 [ 316.487202] ? do_raw_spin_lock+0xc1/0x200 [ 316.491427] oom_kill_process.cold.29+0x10/0x660 [ 316.496167] ? trace_hardirqs_on+0xd/0x10 [ 316.500296] ? _raw_spin_unlock_irq+0x27/0x70 [ 316.504773] ? css_task_iter_end+0x2ce/0x490 [ 316.509163] ? oom_evaluate_task+0x540/0x540 [ 316.513556] ? trace_hardirqs_on+0xd/0x10 [ 316.517684] ? _raw_spin_unlock_irq+0x27/0x70 [ 316.522171] ? oom_badness+0xb00/0xb00 [ 316.526044] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 316.530786] ? mem_cgroup_iter_break+0x30/0x30 [ 316.535359] out_of_memory+0x86d/0x1ad0 [ 316.539321] ? oom_killer_disable+0x3a0/0x3a0 [ 316.543801] ? do_raw_spin_unlock+0xa7/0x2f0 [ 316.548197] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 316.552764] ? kasan_check_write+0x14/0x20 [ 316.557068] ? do_raw_spin_lock+0xc1/0x200 [ 316.561293] mem_cgroup_out_of_memory+0x15e/0x210 [ 316.566117] ? memcg_memory_event+0x40/0x40 [ 316.570426] ? page_counter_try_charge+0x1c7/0x220 [ 316.575341] try_charge+0x720/0x1680 [ 316.579040] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 316.585778] ? lock_downgrade+0x8f0/0x8f0 [ 316.589909] ? lock_release+0xa30/0xa30 [ 316.593866] ? __anon_vma_prepare+0xc4/0x720 [ 316.598259] ? handle_mm_fault+0x53e/0xc80 [ 316.602478] ? fs_reclaim_acquire+0x20/0x20 [ 316.606785] ? lock_downgrade+0x8f0/0x8f0 [ 316.610915] ? percpu_ref_put_many+0x119/0x240 [ 316.615483] ? get_mem_cgroup_from_mm+0x209/0x440 [ 316.620402] ? get_mem_cgroup_from_page+0x190/0x190 [ 316.625416] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 316.630240] ? lock_acquire+0x1e4/0x540 [ 316.634202] mem_cgroup_try_charge+0x4ff/0xa70 [ 316.638770] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 316.643772] ? mem_cgroup_protected+0xa60/0xa60 [ 316.648430] ? up_write+0x7b/0x220 [ 316.651952] ? up_read+0x110/0x110 [ 316.655494] ? __anon_vma_prepare+0x36d/0x720 [ 316.659971] ? pmd_val+0x88/0x100 [ 316.663410] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 316.668934] mem_cgroup_try_charge_delay+0x1d/0x90 [ 316.673861] __handle_mm_fault+0x25ba/0x4470 [ 316.678252] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 316.683077] ? cap_mmap_addr+0x52/0x130 [ 316.687034] ? userfaultfd_unmap_complete+0x32a/0x510 [ 316.692203] ? security_mmap_addr+0x80/0xa0 [ 316.696514] ? lock_acquire+0x1e4/0x540 [ 316.700469] ? handle_mm_fault+0x417/0xc80 [ 316.704688] ? lock_downgrade+0x8f0/0x8f0 [ 316.708825] ? lock_release+0xa30/0xa30 [ 316.712820] ? lock_release+0xa30/0xa30 [ 316.716792] ? down_read_killable+0x200/0x200 [ 316.721281] ? mem_cgroup_from_task+0xcb/0x1f0 [ 316.725849] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 316.730593] handle_mm_fault+0x53e/0xc80 [ 316.734640] ? __handle_mm_fault+0x4470/0x4470 [ 316.739207] ? find_vma+0x34/0x190 [ 316.742751] __do_page_fault+0x620/0xe50 [ 316.746802] ? mm_fault_error+0x380/0x380 [ 316.750940] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 316.756464] ? __x64_sys_clock_gettime+0x170/0x250 [ 316.761376] ? __ia32_sys_clock_settime+0x290/0x290 [ 316.766376] do_page_fault+0xf6/0x8c0 [ 316.770156] ? vmalloc_sync_all+0x30/0x30 [ 316.774286] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 316.779811] ? do_syscall_64+0x497/0x820 [ 316.783853] ? syscall_slow_exit_work+0x500/0x500 [ 316.788678] ? syscall_return_slowpath+0x5e0/0x5e0 [ 316.793590] ? syscall_return_slowpath+0x31d/0x5e0 [ 316.798500] ? prepare_exit_to_usermode+0x291/0x3b0 [ 316.803502] ? page_fault+0x8/0x30 [ 316.807027] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 316.811854] ? page_fault+0x8/0x30 [ 316.815376] page_fault+0x1e/0x30 [ 316.818816] RIP: 0033:0x40e16f [ 316.821993] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 316.840879] RSP: 002b:00007ffe1f3c3010 EFLAGS: 00010206 [ 316.846229] RAX: 00007f91cf350000 RBX: 0000000000020000 RCX: 00000000004569aa [ 316.853482] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 316.860737] RBP: 00007ffe1f3c30f0 R08: ffffffffffffffff R09: 0000000000000000 [ 316.868000] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1f3c31e0 [ 316.875254] R13: 00007f91cf370700 R14: 000000000072bf2c R15: 0000000000000001 [ 316.883145] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor2,pid=21848,uid=0 [ 316.897364] memory: usage 296kB, limit 0kB, failcnt 130 [ 316.902767] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 316.909565] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 316.915754] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 316.935335] Tasks state (memory values in pages): [ 316.940218] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name 03:35:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="08000000f300000000000000028000007a0a00fffffffffd630148"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) getcwd(&(0x7f0000000640)=""/83, 0x53) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f00000006c0)={0x0, 0x6, 0xffffffff7fffffff, 0x8001, 0x4}) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000500)=0xdb) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@loopback, @in=@loopback, 0x4e21, 0x414102b5, 0x4e21, 0x0, 0x2, 0x80, 0x0, 0x73, r3, r4}, {0x3ff, 0x9, 0x3ff, 0x8, 0x1, 0x3f, 0x2, 0x1e}, {0x711, 0x0, 0x3, 0x1}, 0x1f, 0x0, 0x1, 0x0, 0x1, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4d5, 0xff}, 0xa, @in6=@ipv4={[], [], @loopback}, 0x3503, 0x7, 0x3, 0x7fff, 0x20, 0x8001, 0x7f}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000000500e9ff0000000000000000000000009500000000200000"], &(0x7f0000000200)='syzkaller\x00', 0x84000000, 0xbb, &(0x7f0000000300)=""/187, 0x8000000000000000}, 0x48) pipe2(&(0x7f0000000700)={0xffffffffffffffff}, 0x800) ioctl$EVIOCSKEYCODE(r5, 0x40084504, &(0x7f0000000740)=[0x5, 0x4]) 03:35:15 executing program 5: r0 = getpid() capset(&(0x7f00000000c0)={0x39980732, r0}, &(0x7f0000000200)={0x4, 0x200, 0x1000, 0x319, 0x0, 0x3}) sched_setaffinity(r0, 0xffffffffffffff99, &(0x7f0000000080)=0x1ffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000380)='/dev/snd/pcmC#D#p\x00', 0xb85, 0x40000) write$FUSE_IOCTL(r1, &(0x7f00000003c0)={0x20, 0x0, 0x6, {0x6aa4, 0x0, 0xffff, 0xfffffffffffffffb}}, 0x20) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f00000018c0)='./file0/file1\x00', &(0x7f0000001900)) read$FUSE(r2, &(0x7f00000070c0), 0x8c0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x80, 0x0) write$cgroup_type(r3, &(0x7f0000000340)='threaded\x00', 0x9) read$FUSE(r2, &(0x7f0000000640), 0x1000) mount$fuse(0x0, &(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f00000005c0)=ANY=[]) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x2004c810) write$FUSE_DIRENT(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="9000000000000000020000100000100001000000004500000000000000000000ce656d316e6f646576656d31000035000000000001000000000000002c00000000000000000000000000000000000000000000001c000000000000002b73796374656dcc6370757365746367726f757024676700000000000000000019f2457a15ff140e2094dfb57e5d3c31cdb5"], 0x90) 03:35:15 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x9d, 0x40) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000002c0)=0xa70, 0x2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000240), &(0x7f0000000040)=0x60) r4 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x400445a0, &(0x7f0000013000)) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000300)) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000000380)=""/4096) close(r0) 03:35:15 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:15 executing program 7: r0 = gettid() ioprio_set$pid(0x1, r0, 0x20c) setrlimit(0x7, &(0x7f0000000000)) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) 03:35:15 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x3, 0x101, 0x3ef, 0x7, 0xeb, {0x0, @in6={{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, [], 0x19}, 0x100000001}}, 0x5, 0x2, 0x5, 0xff, 0x7}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, [], 0x18}, 0x9}}, [0x7, 0xde, 0x4, 0x100000, 0x168, 0x10000, 0xffffffff, 0x8001, 0x3, 0x0, 0x8001, 0x9f, 0x7, 0x2, 0xfffffffffffffff8]}, &(0x7f0000000440)=0x100) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) 03:35:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) io_getevents(r3, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000)={0x77359400}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x6, 0x400000) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, &(0x7f00000001c0), 0x8) r5 = socket$inet6(0xa, 0x1, 0x0) dup2(r1, r5) io_submit(r3, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r2, &(0x7f0000000140)}]) clock_gettime(0x2, &(0x7f0000000080)) 03:35:15 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r2, 0x40044590, &(0x7f0000000380)=""/4096) close(0xffffffffffffffff) [ 316.949136] [ 21848] 0 21848 17618 8218 126976 0 0 syz-executor2 [ 316.958186] Memory cgroup out of memory: Kill process 21848 (syz-executor2) score 8249000 or sacrifice child [ 316.968215] Killed process 21848 (syz-executor2) total-vm:70472kB, anon-rss:104kB, file-rss:32768kB, shmem-rss:0kB [ 316.979360] oom_reaper: reaped process 21848 (syz-executor2), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB 03:35:15 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x200) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x202, 0x3, 0x4, 0xffffffffffff5e0f, 0x3}, 0x14) dup3(r1, r0, 0x0) 03:35:15 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x2, 0x0, 0x871a}}) poll(&(0x7f00000000c0)=[{r0, 0x21}, {0xffffffffffffff9c, 0x24}, {r1, 0x408}, {r1, 0x80}, {r1, 0x4000}], 0x5, 0xffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000100)) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000140)=0x7ff, 0x4) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) close(r1) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000001c0)={'filter\x00', 0x5, "cedeee9982"}, &(0x7f0000000200)=0x29) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000240)) recvfrom(r0, &(0x7f0000000280)=""/11, 0xb, 0x10100, &(0x7f00000002c0)=@ax25={0x3, {"e4215f25db3ca4"}, 0x9}, 0x80) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000380)={0x2, 0x0, [{}, {}]}) openat$cgroup_ro(r0, &(0x7f00000003c0)='pids.events\x00', 0x0, 0x0) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000400)) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000440)=0x1, 0x4) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000000480)) r2 = socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getgid() ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000880)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/rtc0\x00', 0x24000, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000900), 0x4) ioctl(r2, 0xfc0000000, &(0x7f0000000940)="78278f1505c44f615c4231efc9fee3463b3c00973b66b01e04ce0cd82b04de8fb3211b05b765b97b728235226cbeab067b329f1cba08d6653c0a3ce25bfc4f5ae435a78bea31551a2d36cc97b59b2b740bc37ad0510fc4784495c215a05b913d463d766603e1169bcb6180605ffc3030c13c145e8b26b9a176c5c61696d93349d565cf5a50010a914c9fadc13328f79b5652") ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000a00)={0xb, 0x26, 0x1, 0x9, 0x5, 0x4, 0x4, 0x82}) 03:35:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") madvise(&(0x7f0000004000/0x1000)=nil, 0x1000, 0xa) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'os2.', ':\x00'}, &(0x7f0000000080)='/bdevGPL)/eth0cgroup&ppp1procem0\x00', 0x21, 0x1) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0xb) 03:35:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x6, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0xc0000103, 0x0, 0x4b564d02]}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl(r4, 0x8000000000009374, &(0x7f00000000c0)="01000000000000001804000000010800000000000000426d0270ec78dfd849832f") [ 317.111321] syz-executor0 invoked oom-killer: gfp_mask=0x6040d0(GFP_KERNEL|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 317.123367] CPU: 0 PID: 21902 Comm: syz-executor0 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 317.131868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.141238] Call Trace: [ 317.143823] dump_stack+0x1c9/0x2b4 [ 317.147437] ? dump_stack_print_info.cold.2+0x52/0x52 [ 317.152613] ? trace_hardirqs_on+0x10/0x10 [ 317.156833] dump_header+0x246/0x123c [ 317.160614] ? lock_downgrade+0x8f0/0x8f0 [ 317.164746] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 317.169658] ? trace_hardirqs_on+0x10/0x10 [ 317.173874] ? mem_cgroup_iter+0x517/0x10c0 [ 317.178183] ? trace_hardirqs_on+0x10/0x10 [ 317.182403] ? trace_hardirqs_on+0x10/0x10 [ 317.186628] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 317.192148] ? css_next_child+0x1c3/0x620 [ 317.196282] ? find_lock_task_mm+0x230/0x4d0 [ 317.200675] ? cgroup_get_tree+0xb20/0xb20 [ 317.204917] ? lock_acquire+0x1e4/0x540 [ 317.208879] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 317.214400] ? task_will_free_mem+0x239/0xb70 [ 317.218882] ? lock_release+0xa30/0xa30 [ 317.222839] ? oom_badness+0x7d1/0xb00 [ 317.226711] ? lock_downgrade+0x8f0/0x8f0 [ 317.230845] ? ___ratelimit+0x36f/0x655 [ 317.234803] ? lock_downgrade+0x8f0/0x8f0 [ 317.238937] ? kasan_check_read+0x11/0x20 [ 317.243065] ? do_raw_spin_unlock+0xa7/0x2f0 [ 317.247455] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 317.252018] ? do_raw_spin_lock+0x200/0x200 [ 317.256328] ? oom_kill_process+0x24d/0x280 [ 317.260638] ? lock_downgrade+0x8f0/0x8f0 [ 317.264772] ? trace_hardirqs_on+0xd/0x10 [ 317.268906] ? ___ratelimit+0xaa/0x655 [ 317.272776] ? idr_get_free+0x10c0/0x10c0 [ 317.276905] ? kasan_check_write+0x14/0x20 [ 317.281119] ? do_raw_spin_lock+0xc1/0x200 [ 317.285342] oom_kill_process.cold.29+0x10/0x660 [ 317.290085] ? trace_hardirqs_on+0xd/0x10 [ 317.294214] ? _raw_spin_unlock_irq+0x27/0x70 [ 317.298689] ? css_task_iter_end+0x2ce/0x490 [ 317.303081] ? oom_evaluate_task+0x540/0x540 [ 317.307473] ? trace_hardirqs_on+0xd/0x10 [ 317.311608] ? _raw_spin_unlock_irq+0x27/0x70 [ 317.316088] ? oom_badness+0xb00/0xb00 [ 317.319972] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 317.324710] ? mem_cgroup_iter_break+0x30/0x30 [ 317.329313] out_of_memory+0x86d/0x1ad0 [ 317.333282] ? oom_killer_disable+0x3a0/0x3a0 [ 317.337759] ? kasan_check_read+0x11/0x20 [ 317.341890] ? do_raw_spin_unlock+0xa7/0x2f0 [ 317.346285] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 317.350850] ? kasan_check_write+0x14/0x20 [ 317.355083] ? do_raw_spin_lock+0xc1/0x200 [ 317.359303] mem_cgroup_out_of_memory+0x15e/0x210 [ 317.364128] ? memcg_memory_event+0x40/0x40 [ 317.368440] ? page_counter_try_charge+0x1c7/0x220 [ 317.373355] try_charge+0x720/0x1680 [ 317.377050] ? lock_acquire+0x1e4/0x540 [ 317.381008] ? fs_reclaim_acquire+0x20/0x20 [ 317.385314] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 317.392050] ? rcu_note_context_switch+0x730/0x730 [ 317.396968] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 317.401795] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 317.406809] memcg_kmem_charge_memcg+0x7c/0x120 [ 317.411583] ? memcg_kmem_put_cache+0xb0/0xb0 [ 317.416066] ? __free_pages+0x10a/0x190 [ 317.420030] cache_grow_begin+0x207/0x710 [ 317.424161] ? do_raw_spin_unlock+0xa7/0x2f0 [ 317.428562] fallback_alloc+0x203/0x2c0 [ 317.432527] ____cache_alloc_node+0x1c7/0x1e0 [ 317.437014] kmem_cache_alloc+0x1e5/0x760 [ 317.441164] alloc_inode+0xb2/0x190 [ 317.444777] new_inode_pseudo+0x71/0x1a0 [ 317.448820] ? prune_icache_sb+0x1c0/0x1c0 [ 317.453040] ? down_read+0x1d0/0x1d0 [ 317.456739] ? mntput+0x74/0xa0 [ 317.460004] new_inode+0x1c/0x40 [ 317.463355] debugfs_get_inode+0x19/0x120 [ 317.467490] debugfs_create_dir+0x75/0x3c0 [ 317.471714] kvm_dev_ioctl+0x97e/0x1b10 [ 317.475675] ? kvm_debugfs_release+0x90/0x90 [ 317.480071] ? do_futex+0x249/0x27d0 [ 317.483772] ? kasan_check_read+0x11/0x20 [ 317.487901] ? rcu_is_watching+0x8c/0x150 [ 317.492032] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 317.497682] ? exit_robust_list+0x290/0x290 [ 317.501996] ? kernel_text_address+0x79/0xf0 [ 317.506390] ? lock_acquire+0x1e4/0x540 [ 317.510348] ? __fget+0x4ac/0x740 [ 317.513784] ? lock_downgrade+0x8f0/0x8f0 [ 317.517916] ? lock_release+0xa30/0xa30 [ 317.521880] ? save_stack+0x43/0xd0 [ 317.525492] ? __kasan_slab_free+0x11a/0x170 [ 317.529883] ? __fget+0x4d5/0x740 [ 317.533323] ? ksys_dup3+0x690/0x690 [ 317.537020] ? kasan_check_write+0x14/0x20 [ 317.541240] ? do_raw_spin_lock+0xc1/0x200 [ 317.546331] ? trace_hardirqs_off_caller+0x250/0x2c0 [ 317.551419] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 317.556509] ? kvm_debugfs_release+0x90/0x90 [ 317.560902] do_vfs_ioctl+0x1de/0x1720 [ 317.564776] ? ioctl_preallocate+0x300/0x300 [ 317.569167] ? __fget_light+0x2f7/0x440 [ 317.573126] ? fget_raw+0x20/0x20 [ 317.576565] ? trace_hardirqs_on+0xd/0x10 [ 317.580698] ? kmem_cache_free+0x22e/0x2d0 [ 317.584927] ? __x64_sys_futex+0x47f/0x6a0 [ 317.589145] ? do_futex+0x27d0/0x27d0 [ 317.592941] ? security_file_ioctl+0x94/0xc0 [ 317.597336] ksys_ioctl+0xa9/0xd0 [ 317.600774] __x64_sys_ioctl+0x73/0xb0 [ 317.604644] do_syscall_64+0x1b9/0x820 [ 317.608525] ? finish_task_switch+0x1d3/0x870 [ 317.613011] ? syscall_return_slowpath+0x5e0/0x5e0 [ 317.617926] ? syscall_return_slowpath+0x31d/0x5e0 [ 317.622851] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 317.627862] ? prepare_exit_to_usermode+0x291/0x3b0 [ 317.632860] ? perf_trace_sys_enter+0xb10/0xb10 [ 317.637522] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 317.642354] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 317.647525] RIP: 0033:0x456959 [ 317.650707] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 317.669591] RSP: 002b:00007f1a35d50c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.677285] RAX: ffffffffffffffda RBX: 00007f1a35d516d4 RCX: 0000000000456959 [ 317.684537] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000015 [ 317.691791] RBP: 000000000072be80 R08: 0000000000000000 R09: 0000000000000000 [ 317.699044] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 317.706297] R13: 00000000004cdaf8 R14: 00000000004c447e R15: 0000000000000000 [ 317.713637] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor0,pid=21895,uid=0 [ 317.728029] memory: usage 244kB, limit 0kB, failcnt 143 [ 317.733477] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 317.740243] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 317.746399] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 317.765937] Tasks state (memory values in pages): [ 317.770789] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 317.779721] [ 21895] 0 21895 17585 8732 131072 0 0 syz-executor0 [ 317.788750] Memory cgroup out of memory: Kill process 21895 (syz-executor0) score 8764000 or sacrifice child [ 317.798758] Killed process 21895 (syz-executor0) total-vm:70340kB, anon-rss:2160kB, file-rss:32768kB, shmem-rss:0kB 03:35:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000140)="025cc80700145f8f764070") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x40, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) exit_group(0x4) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xe167, 0x101080) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$pppoe(0x18, 0x1, 0x0) r5 = dup2(r4, r1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000001c0)={0x5000, &(0x7f0000000180), 0x31617a9d0a8d99bb, r2, 0x8}) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000480)="b95d030000b800800000ba000000000f302e0f890038000066ba4000b840f90000efc4814d5863ab3e8197fd4300008fbc0000673667674d0fc79bc2c1f8640f323e400f0766baa000b000eeb9a5030000b89e4a0000ba000000000f30", 0x5d}], 0x1, 0x0, &(0x7f0000000500), 0x0) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x400) 03:35:16 executing program 0: r0 = creat(&(0x7f0000000140)='./bus/../file0\x00', 0xbcac41e0af6b0fb2) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r1, 0x4}, &(0x7f0000000100)=0x8) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) getegid() fallocate(r0, 0x2, 0x2, 0xfd) chmod(&(0x7f0000000000)='./bus\x00', 0x42) [ 317.810449] oom_reaper: reaped process 21895 (syz-executor0), now anon-rss:0kB, file-rss:32784kB, shmem-rss:0kB [ 317.904665] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 317.914132] CPU: 1 PID: 21903 Comm: syz-executor2 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 317.922629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.931996] Call Trace: [ 317.934596] dump_stack+0x1c9/0x2b4 [ 317.938233] ? dump_stack_print_info.cold.2+0x52/0x52 [ 317.943429] ? trace_hardirqs_on+0x10/0x10 [ 317.947669] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 317.952520] dump_header+0x246/0x123c [ 317.956318] ? perf_trace_lock+0x920/0x920 [ 317.960552] ? perf_trace_lock+0x920/0x920 [ 317.964783] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 317.969618] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 317.974537] ? trace_hardirqs_on+0x10/0x10 [ 317.978778] ? perf_trace_lock+0x920/0x920 [ 317.983010] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 317.987842] ? css_next_child+0x1c3/0x620 [ 317.991977] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 317.996808] ? perf_trace_lock+0x920/0x920 [ 318.001031] ? trace_hardirqs_on+0x10/0x10 [ 318.005258] ? perf_trace_lock+0x920/0x920 [ 318.009496] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 318.015043] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 318.019893] ? cgroup_get_tree+0xb20/0xb20 [ 318.024140] ? perf_trace_lock+0x920/0x920 [ 318.028371] ? lock_acquire+0x1e4/0x540 [ 318.032357] ? task_will_free_mem+0x239/0xb70 [ 318.036851] ? lock_release+0xa30/0xa30 [ 318.040823] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 318.045668] ? ___ratelimit+0x36f/0x655 [ 318.049642] ? lock_downgrade+0x8f0/0x8f0 [ 318.053784] ? kasan_check_read+0x11/0x20 [ 318.057931] ? do_raw_spin_unlock+0xa7/0x2f0 [ 318.062340] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 318.066926] ? do_raw_spin_lock+0x200/0x200 [ 318.071263] ? oom_kill_process+0x24d/0x280 [ 318.075594] ? lock_downgrade+0x8f0/0x8f0 [ 318.079738] ? trace_hardirqs_on+0xd/0x10 [ 318.083881] ? ___ratelimit+0xaa/0x655 [ 318.087770] ? idr_get_free+0x10c0/0x10c0 [ 318.091915] ? kasan_check_write+0x14/0x20 [ 318.096135] ? do_raw_spin_lock+0xc1/0x200 [ 318.100374] oom_kill_process.cold.29+0x10/0x660 [ 318.105132] ? trace_hardirqs_on+0xd/0x10 [ 318.109275] ? _raw_spin_unlock_irq+0x27/0x70 [ 318.113770] ? css_task_iter_end+0x2ce/0x490 [ 318.118168] ? oom_evaluate_task+0x540/0x540 [ 318.122571] ? trace_hardirqs_on+0xd/0x10 [ 318.126710] ? _raw_spin_unlock_irq+0x27/0x70 [ 318.131215] ? oom_badness+0xb00/0xb00 [ 318.135105] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 318.139860] ? mem_cgroup_iter_break+0x30/0x30 [ 318.144449] out_of_memory+0x86d/0x1ad0 [ 318.148424] ? oom_killer_disable+0x3a0/0x3a0 [ 318.152916] ? kasan_check_read+0x11/0x20 [ 318.157061] ? do_raw_spin_unlock+0xa7/0x2f0 [ 318.161458] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 318.166047] ? kasan_check_write+0x14/0x20 [ 318.170268] ? do_raw_spin_lock+0xc1/0x200 [ 318.174489] mem_cgroup_out_of_memory+0x15e/0x210 [ 318.179325] ? memcg_memory_event+0x40/0x40 [ 318.183634] ? page_counter_try_charge+0x1c7/0x220 [ 318.188567] try_charge+0x720/0x1680 [ 318.192270] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 318.199010] ? lock_downgrade+0x8f0/0x8f0 [ 318.203149] ? lock_release+0xa30/0xa30 [ 318.207108] ? fs_reclaim_acquire+0x20/0x20 [ 318.211410] ? lock_downgrade+0x8f0/0x8f0 [ 318.215543] ? get_mem_cgroup_from_mm+0x209/0x440 [ 318.220376] ? get_mem_cgroup_from_page+0x190/0x190 [ 318.225380] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 318.230210] ? lock_acquire+0x1e4/0x540 [ 318.234175] mem_cgroup_try_charge+0x4ff/0xa70 [ 318.238743] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 318.243753] ? mem_cgroup_protected+0xa60/0xa60 [ 318.248419] ? up_write+0x7b/0x220 [ 318.251948] ? up_read+0x110/0x110 [ 318.255480] ? __anon_vma_prepare+0x36d/0x720 [ 318.259969] ? pmd_val+0x88/0x100 [ 318.263424] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 318.268953] mem_cgroup_try_charge_delay+0x1d/0x90 [ 318.273874] __handle_mm_fault+0x25ba/0x4470 [ 318.278269] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 318.283096] ? cap_mmap_addr+0x52/0x130 [ 318.287062] ? userfaultfd_unmap_complete+0x32a/0x510 [ 318.292236] ? security_mmap_addr+0x80/0xa0 [ 318.296555] ? lock_acquire+0x1e4/0x540 [ 318.300534] ? handle_mm_fault+0x417/0xc80 [ 318.304770] ? lock_downgrade+0x8f0/0x8f0 [ 318.308924] ? lock_release+0xa30/0xa30 [ 318.312897] ? down_read_killable+0x200/0x200 [ 318.317381] ? mem_cgroup_from_task+0xcb/0x1f0 [ 318.321951] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 318.326701] handle_mm_fault+0x53e/0xc80 [ 318.330756] ? __handle_mm_fault+0x4470/0x4470 [ 318.335321] ? find_vma+0x34/0x190 [ 318.338846] __do_page_fault+0x620/0xe50 [ 318.342893] ? mm_fault_error+0x380/0x380 [ 318.347028] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 318.352554] ? __x64_sys_clock_gettime+0x170/0x250 [ 318.357468] ? __ia32_sys_clock_settime+0x290/0x290 [ 318.362476] do_page_fault+0xf6/0x8c0 [ 318.366261] ? vmalloc_sync_all+0x30/0x30 [ 318.370392] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 318.375913] ? do_syscall_64+0x497/0x820 [ 318.379958] ? syscall_slow_exit_work+0x500/0x500 [ 318.384784] ? syscall_return_slowpath+0x5e0/0x5e0 [ 318.389698] ? syscall_return_slowpath+0x31d/0x5e0 [ 318.394611] ? prepare_exit_to_usermode+0x291/0x3b0 [ 318.399609] ? page_fault+0x8/0x30 [ 318.403224] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 318.408050] ? page_fault+0x8/0x30 [ 318.411575] page_fault+0x1e/0x30 [ 318.415009] RIP: 0033:0x40e16f [ 318.418186] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 318.437071] RSP: 002b:00007ffe1f3c3010 EFLAGS: 00010206 [ 318.442420] RAX: 00007f91cf350000 RBX: 0000000000020000 RCX: 00000000004569aa [ 318.449678] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 318.456930] RBP: 00007ffe1f3c30f0 R08: ffffffffffffffff R09: 0000000000000000 [ 318.464180] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1f3c31e0 [ 318.471437] R13: 00007f91cf370700 R14: 000000000072bf2c R15: 0000000000000001 [ 318.479131] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor3,pid=21901,uid=0 [ 318.493353] memory: usage 312kB, limit 0kB, failcnt 192 [ 318.498746] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 03:35:16 executing program 7: r0 = socket$unix(0x1, 0xfffffffffffffffe, 0x0) bind$unix(r0, &(0x7f000093f000)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x40) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000040)={{0x4, 0x7, 0xffff, 0x16e, 0x7}, 0xfffffffffffffffb, 0xfffffffffffffffb, 0x5, 0x4, 0xb5a, "daff95265a0cb527eb661d58a09b913ec689c1048b5eec9270dbbc6ec83599740c94db4ed960e252603bf5bc1b18516404b265513a46afee9c720e9d45ea1e8fca408afd95cc5d9ba464f6210783f3cd760fddc3420ee3584222134e9fccda4810295d2dfd80eb535ad1eb26ba78edbc39f757f72e323a7455dab2992e9ce86e"}) [ 318.505508] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 318.511677] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 318.531240] Tasks state (memory values in pages): [ 318.536208] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 318.545101] [ 21901] 0 21901 17618 8221 126976 0 0 syz-executor3 [ 318.554182] [ 21903] 0 21903 17618 8218 126976 0 0 syz-executor2 [ 318.563236] Memory cgroup out of memory: Kill process 21901 (syz-executor3) score 8252000 or sacrifice child [ 318.573269] Killed process 21901 (syz-executor3) total-vm:70472kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 318.584404] oom_reaper: reaped process 21901 (syz-executor3), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB [ 318.592902] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 318.604083] CPU: 1 PID: 21903 Comm: syz-executor2 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 318.612575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.621937] Call Trace: [ 318.624536] dump_stack+0x1c9/0x2b4 [ 318.628160] ? dump_stack_print_info.cold.2+0x52/0x52 [ 318.633351] ? trace_hardirqs_on+0x10/0x10 [ 318.637571] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 318.642397] dump_header+0x246/0x123c [ 318.646181] ? perf_trace_lock+0x920/0x920 [ 318.650399] ? perf_trace_lock+0x920/0x920 [ 318.654618] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 318.659444] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 318.664363] ? trace_hardirqs_on+0x10/0x10 [ 318.668581] ? perf_trace_lock+0x920/0x920 [ 318.672800] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 318.677636] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 318.682461] ? perf_trace_lock+0x920/0x920 [ 318.686691] ? perf_trace_lock+0x920/0x920 [ 318.690912] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 318.696446] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 318.701273] ? cgroup_get_tree+0xb20/0xb20 [ 318.705502] ? perf_trace_lock+0x920/0x920 [ 318.709724] ? lock_acquire+0x1e4/0x540 [ 318.713692] ? task_will_free_mem+0x239/0xb70 [ 318.718175] ? lock_release+0xa30/0xa30 [ 318.722143] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 318.726971] ? ___ratelimit+0x36f/0x655 [ 318.730929] ? lock_downgrade+0x8f0/0x8f0 [ 318.735065] ? kasan_check_read+0x11/0x20 [ 318.739193] ? do_raw_spin_unlock+0xa7/0x2f0 [ 318.743586] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 318.748236] ? do_raw_spin_lock+0x200/0x200 [ 318.752540] ? oom_kill_process+0x24d/0x280 [ 318.756934] ? lock_downgrade+0x8f0/0x8f0 [ 318.761067] ? trace_hardirqs_on+0xd/0x10 [ 318.765197] ? ___ratelimit+0xaa/0x655 [ 318.769078] ? idr_get_free+0x10c0/0x10c0 [ 318.773210] ? kasan_check_write+0x14/0x20 [ 318.777436] ? do_raw_spin_lock+0xc1/0x200 [ 318.781655] oom_kill_process.cold.29+0x10/0x660 [ 318.786395] ? trace_hardirqs_on+0xd/0x10 [ 318.790536] ? _raw_spin_unlock_irq+0x27/0x70 [ 318.795020] ? css_task_iter_end+0x2ce/0x490 [ 318.799416] ? oom_evaluate_task+0x540/0x540 [ 318.803807] ? trace_hardirqs_on+0xd/0x10 [ 318.807945] ? _raw_spin_unlock_irq+0x27/0x70 [ 318.812424] ? oom_badness+0xb00/0xb00 [ 318.816295] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 318.821034] ? mem_cgroup_iter_break+0x30/0x30 [ 318.825605] ? wake_up_q+0xb3/0x100 [ 318.829226] out_of_memory+0x86d/0x1ad0 [ 318.833200] ? oom_killer_disable+0x3a0/0x3a0 [ 318.837679] ? kasan_check_read+0x11/0x20 [ 318.841818] ? do_raw_spin_unlock+0xa7/0x2f0 [ 318.846214] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 318.850781] ? kasan_check_write+0x14/0x20 [ 318.854995] ? do_raw_spin_lock+0xc1/0x200 [ 318.859216] mem_cgroup_out_of_memory+0x15e/0x210 [ 318.864040] ? memcg_memory_event+0x40/0x40 [ 318.868351] ? page_counter_try_charge+0x1c7/0x220 [ 318.873266] try_charge+0x720/0x1680 [ 318.876970] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 318.883712] ? lock_downgrade+0x8f0/0x8f0 [ 318.887845] ? lock_release+0xa30/0xa30 [ 318.891816] ? fs_reclaim_acquire+0x20/0x20 [ 318.896130] ? lock_downgrade+0x8f0/0x8f0 [ 318.900265] ? get_mem_cgroup_from_mm+0x209/0x440 [ 318.905098] ? get_mem_cgroup_from_page+0x190/0x190 [ 318.910198] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 318.915027] ? lock_acquire+0x1e4/0x540 [ 318.918988] mem_cgroup_try_charge+0x4ff/0xa70 [ 318.923556] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 318.928560] ? mem_cgroup_protected+0xa60/0xa60 [ 318.933213] ? up_write+0x7b/0x220 [ 318.936737] ? up_read+0x110/0x110 [ 318.940264] ? __anon_vma_prepare+0x36d/0x720 [ 318.944745] ? pmd_val+0x88/0x100 [ 318.948187] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 318.953726] mem_cgroup_try_charge_delay+0x1d/0x90 [ 318.958676] __handle_mm_fault+0x25ba/0x4470 [ 318.963070] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 318.967895] ? cap_mmap_addr+0x52/0x130 [ 318.971854] ? userfaultfd_unmap_complete+0x32a/0x510 [ 318.977027] ? security_mmap_addr+0x80/0xa0 [ 318.981348] ? lock_acquire+0x1e4/0x540 [ 318.985306] ? handle_mm_fault+0x417/0xc80 [ 318.989524] ? lock_downgrade+0x8f0/0x8f0 [ 318.993660] ? lock_release+0xa30/0xa30 [ 318.997621] ? down_read_killable+0x200/0x200 [ 319.002101] ? mem_cgroup_from_task+0xcb/0x1f0 [ 319.006666] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 319.011413] handle_mm_fault+0x53e/0xc80 [ 319.015460] ? __handle_mm_fault+0x4470/0x4470 [ 319.020032] ? find_vma+0x34/0x190 [ 319.023561] __do_page_fault+0x620/0xe50 [ 319.027610] ? mm_fault_error+0x380/0x380 [ 319.031743] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 319.037265] ? __x64_sys_clock_gettime+0x170/0x250 [ 319.042182] ? __ia32_sys_clock_settime+0x290/0x290 [ 319.047196] do_page_fault+0xf6/0x8c0 [ 319.050982] ? vmalloc_sync_all+0x30/0x30 [ 319.055113] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 319.060635] ? do_syscall_64+0x497/0x820 [ 319.064688] ? syscall_slow_exit_work+0x500/0x500 [ 319.069524] ? syscall_return_slowpath+0x5e0/0x5e0 [ 319.074453] ? syscall_return_slowpath+0x31d/0x5e0 [ 319.079379] ? prepare_exit_to_usermode+0x291/0x3b0 [ 319.084381] ? page_fault+0x8/0x30 [ 319.087914] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 319.092745] ? page_fault+0x8/0x30 [ 319.096269] page_fault+0x1e/0x30 [ 319.099710] RIP: 0033:0x40e16f [ 319.102888] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 319.121863] RSP: 002b:00007ffe1f3c3010 EFLAGS: 00010206 [ 319.127216] RAX: 00007f91cf350000 RBX: 0000000000020000 RCX: 00000000004569aa [ 319.134470] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 319.141728] RBP: 00007ffe1f3c30f0 R08: ffffffffffffffff R09: 0000000000000000 [ 319.148984] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1f3c31e0 [ 319.156237] R13: 00007f91cf370700 R14: 000000000072bf2c R15: 0000000000000001 [ 319.163866] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor2,pid=21903,uid=0 [ 319.178068] memory: usage 316kB, limit 0kB, failcnt 213 [ 319.183432] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 319.190189] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:35:17 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) write$P9_RLERROR(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1300000024fe000a0029736563750800747950dd031eef6a9330a0d5f1b100"], 0x13) 03:35:17 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value, 0x8) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402f, 0x0, @local, @dev, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x22201, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000080)=0x1ff, 0x4) 03:35:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000000)={0x100002, 0xd001, 0x0, 0x9, 0x6}) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000180)={0x79}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r3, 0x0) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0), &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:35:17 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000240)={r2, 0x19, "b9dbe20947da0052b6c5239c7bb5095ba5c8cdc6025e1ee50e"}, &(0x7f0000000280)=0x21) mkdir(&(0x7f00000002c0)='./file0\x00', 0x84) r3 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) r5 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r5, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r5, 0x80084503, &(0x7f0000000380)=""/4096) close(r0) [ 319.196351] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 319.215986] Tasks state (memory values in pages): [ 319.220853] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 319.229796] [ 21903] 0 21903 17618 8218 126976 0 0 syz-executor2 [ 319.238872] Memory cgroup out of memory: Kill process 21903 (syz-executor2) score 8249000 or sacrifice child [ 319.248912] Killed process 21903 (syz-executor2) total-vm:70472kB, anon-rss:104kB, file-rss:32768kB, shmem-rss:0kB 03:35:17 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r2, 0x40044590, &(0x7f0000000380)=""/4096) close(0xffffffffffffffff) 03:35:17 executing program 6: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) lseek(r0, 0x1f, 0x3) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x7, 0x80000) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f00000000c0)) fcntl$setstatus(r1, 0x4, 0x0) r2 = getpid() r3 = syz_open_procfs(r2, &(0x7f0000000140)='net/udplite6\x00') ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) unshare(0x400) pread64(r3, &(0x7f0000000000)=""/92, 0x5c, 0x0) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000100)) 03:35:17 executing program 1: syz_read_part_table(0x0, 0xaaaaaaaaaaaad53, &(0x7f0000001ac0)=[{&(0x7f0000000200)="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", 0xfffffffffffffff1}]) 03:35:17 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [0x1d9, 0x1]}) r4 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x6}}, 0x1c) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x1, r1, 0x1}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x4080, 0x0) [ 319.358854] sctp: [Deprecated]: syz-executor4 (pid 21938) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.358854] Use struct sctp_sack_info instead 03:35:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x20}, 0x2c) ftruncate(r1, 0xaa) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) [ 319.460483] sctp: [Deprecated]: syz-executor4 (pid 21938) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.460483] Use struct sctp_sack_info instead [ 319.489039] *** Guest State *** [ 319.492378] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 319.501272] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 319.510131] CR3 = 0x0000000000000000 [ 319.513900] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 319.519933] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 319.525934] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 319.532665] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 319.540689] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 319.549130] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 319.557145] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 319.565165] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 319.573183] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 319.581190] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 319.589205] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 319.597215] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 319.605237] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 319.613280] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 319.619742] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 319.627266] Interruptibility = 00000000 ActivityState = 00000000 [ 319.633563] *** Host State *** [ 319.636807] RIP = 0xffffffff811f4764 RSP = 0xffff880192cc7350 [ 319.642826] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 319.649265] FSBase=00007fc337905700 GSBase=ffff8801db100000 TRBase=fffffe0000034000 [ 319.657091] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 319.663017] CR0=0000000080050033 CR3=00000001cd8ad000 CR4=00000000001426e0 [ 319.670065] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff86c01380 [ 319.676758] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 319.682835] *** Control State *** [ 319.686386] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 319.693069] EntryControls=0000d1ff ExitControls=0023efff [ 319.698545] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 03:35:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) 03:35:18 executing program 5: mprotect(&(0x7f00006b9000/0x2000)=nil, 0x2000, 0x200000d) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000006c0)={@broadcast}, &(0x7f0000000000)=0xc) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c2a0871c51de850d00000000000000"], 0x78) 03:35:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) clone(0x0, &(0x7f0000b53000), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) write$FUSE_GETXATTR(r1, &(0x7f0000000000)={0x18, 0x0, 0x6, {0x1}}, 0x18) ioctl$RTC_WIE_OFF(r1, 0x7010) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xffff, 0x10, 0x0, 0xffffffffffffff9c}) getsockopt$inet_mreq(r1, 0x0, 0x27, &(0x7f00000000c0)={@local}, &(0x7f0000000100)=0x8) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x4, 0xff}) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8008700b, &(0x7f00000002c0)) [ 319.705507] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 319.712200] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 319.718805] reason=80000021 qualification=0000000000000000 [ 319.725148] IDTVectoring: info=00000000 errcode=00000000 [ 319.730616] TSC Offset = 0xffffff52efc109f0 [ 319.734963] TPR Threshold = 0x00 [ 319.738356] EPT pointer = 0x000000019a69001e 03:35:18 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x10000001}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000011000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x13) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000040)=0xe000000) 03:35:18 executing program 6: syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") 03:35:18 executing program 5: r0 = memfd_create(&(0x7f0000000040)="51656c2a6e75787b2577ba610000000000000005786e65747b24008951", 0x1) fallocate(r0, 0xb, 0x0, 0xfa) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000080)={0x2, r0}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0xe5}, &(0x7f0000000100)=0x8) 03:35:18 executing program 6: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) r0 = semget(0x1, 0x3, 0x108) semtimedop(r0, &(0x7f00000002c0)=[{0x0, 0x7}, {0x4, 0x7, 0x1800}, {0x0, 0x3fb, 0x1000}, {0x3, 0x80000000, 0x800}, {0x4, 0xf, 0x1800}, {0x800007, 0x100}], 0x6, &(0x7f0000000300)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xba01, 0x20000) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) semtimedop(0x0, &(0x7f0000000040), 0x3ae, &(0x7f0000000040)) clone(0xa00100, &(0x7f00000000c0)="edb2834f756f2ec7f6ac4de9da030c54b8f356717058ea53d70a96256be265f79437939fac1f049424ddbf75cc9c7064403b99ef35c16418fff0a0000aa19c64d89ce142fcff71245bfdf6e783413e7d262ee61f0f21e07c6ed3169f36f973078d47e54d08c58d1df6e269f37569c9f3503c5f50cf1a7161df7f6336e2daad333014012f2592b5db6f5ba4f3e57091ff425de02422f55e52fa03e88fb1a17d2573845a4bfc2285421cac89ff7ffdc91237e73f5070bfa9377ab55e5a41a5a220faecdb542f2acbd6681bc43bd4e1de8cb5178a327a0923a12c50d667b0abe20274ed1b1f645c21fc930ea2b6b230a932910674cc54d62cb6", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="7ae97ca215c9d3f8a4429d4b4cf3f4429936403cb3606fc28142f473df6ec0ba6e38ea74057b9c80dd3b34e69cdd3a9666a3d32c92b005362c656039fd205c96e4bda1aefe") 03:35:18 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000200)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2, 0x0) r1 = semget$private(0x0, 0x3, 0x81) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000080)={0x1, 0x0, @ioapic={0xf000, 0x2, 0x2, 0x800000, 0x0, [{0x7, 0x5, 0x2, [], 0xffffffffffffffff}, {0x9, 0x2, 0x9, [], 0x8}, {0x0, 0x2, 0x0, [], 0xffffffffffffff80}, {0x80, 0x2, 0x2, [], 0x4}, {0xfffffffffffffff8, 0xfb26, 0x8001, [], 0x5}, {0xfffffffffffffffb, 0x7, 0x7, [], 0x7}, {0x1, 0xfffffffffffffff7, 0xffff, [], 0x6}, {0x6, 0x200, 0x81, [], 0x2}, {0x6, 0x10000, 0x1, [], 0xffff}, {0x1b8, 0xfffffffffffffe01, 0x3f, [], 0x7}, {0x0, 0x80000000, 0x80000001, [], 0x7ff}, {0x14, 0x1ff, 0x7ff, [], 0xfffffffffffffffd}, {0x8, 0x20, 0x4, [], 0xfffffffffffffff9}, {0x9, 0x4, 0x9, [], 0x9}, {0x5, 0xffffffffffffffc0, 0xffffffffffffff7f, [], 0x3}, {0x0, 0x7, 0x3ff, [], 0x5}, {0x10f0, 0x7ff, 0xda04, [], 0xfffffffffffffff7}, {0x1000, 0x2, 0x40, [], 0xffffffffffffffff}, {0x8bcd, 0x1000, 0x2, [], 0x4}, {0x624a54fc, 0x3, 0x7}, {0x4, 0x3, 0x4, [], 0x3}, {0x7ff, 0x6, 0x7ff, [], 0x8a}, {0x8, 0x7ff, 0x7, [], 0x5d3}, {0x3ff, 0x401, 0x1, [], 0x80}]}}) semctl$SEM_INFO(r1, 0x1, 0x13, &(0x7f0000000000)=""/50) 03:35:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000010000000000000018000000ff"]) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000001e00fb014d564b0000000001c2a96a23b0e4770d6ed33209c11f476c1cfef168d4ee65e5b3883f4ba08139f4aa7b41d5c7dde7724d087a4cf2002a51005cd32e411b6ecb79708c453e856ff38a05082d5d7babfcbd53b30c1842e1aa9469fb026a3dcc28a6bed03ae184c79349a220f15066723f2e7515426d7d5518cd8b4eaefcbc542bd57409d4782bf563f98b08f94ddbfa8657a9c2c0662f1762246dc92b8d9261484bbd724f407b68ded543845708000000519f61f92db8ece74762f32cf76007a21f656605359b58f654f1ce4026e97111bfc33e5fbb0794c441c77422d02b52d8c28f6319920e8f8292dc1b67e267cebb32550b1c82e531ccd6feec48e51324f7db200fbede25155da22732e9c06689995429c42a113932f5f6b6874c529ad59d0c65578ee6c11c1763e8101592ebd163f998d565c1786db851c53c8a75d812daab7001df40146c8ab93c800388aec80d293d9f3fc9691b2a55d742e13227069ce7fa73c8069b4036c273e30a2b5515371d41fc06780e576dd547a5686918f1e03dadd9dc4895f00329fa8fd89b5c"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x490, 0x1, 0x2]}) [ 319.925995] kvm [21952]: vcpu0, guest rIP: 0x0 kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop 03:35:18 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400000, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000100)=0x8) setsockopt$inet_int(r1, 0x0, 0x40000000000, &(0x7f00000000c0)=0xfffffffffffffffd, 0x400) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0xfffffffffffffffd, 0x4) connect$pppoe(r1, &(0x7f0000000280)={0x18, 0x0, {0x2, @remote, 'vlan0\x00'}}, 0x1e) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0x8}], 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000340)=0x9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in={0x2, 0x0, @multicast2}], 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f00000002c0)={0x0, 0x6, 0x8, 0x4, 0xb9, 0x800}) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000180)=""/205) [ 319.986738] kvm [21952]: vcpu0, guest rIP: 0xfff0 kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop [ 320.236350] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 320.245763] CPU: 0 PID: 21945 Comm: syz-executor3 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 320.254250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.263592] Call Trace: [ 320.266176] dump_stack+0x1c9/0x2b4 [ 320.269791] ? dump_stack_print_info.cold.2+0x52/0x52 [ 320.274967] ? trace_hardirqs_on+0x10/0x10 [ 320.279190] ? lock_downgrade+0x8f0/0x8f0 [ 320.283327] dump_header+0x246/0x123c [ 320.287131] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 320.292054] ? trace_hardirqs_on+0x10/0x10 [ 320.296287] ? kasan_check_read+0x11/0x20 [ 320.300429] ? do_raw_spin_unlock+0xa7/0x2f0 [ 320.304821] ? trace_hardirqs_on+0x10/0x10 [ 320.309041] ? trace_hardirqs_on+0x10/0x10 [ 320.313261] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 320.318794] ? css_next_child+0x1c3/0x620 [ 320.322930] ? find_lock_task_mm+0x230/0x4d0 [ 320.327325] ? cgroup_get_tree+0xb20/0xb20 [ 320.331548] ? lock_acquire+0x1e4/0x540 [ 320.335514] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 320.341044] ? task_will_free_mem+0x239/0xb70 [ 320.345532] ? lock_release+0xa30/0xa30 [ 320.349490] ? oom_badness+0x7d1/0xb00 [ 320.353361] ? ___ratelimit+0x36f/0x655 [ 320.357321] ? lock_downgrade+0x8f0/0x8f0 [ 320.361454] ? kasan_check_read+0x11/0x20 [ 320.365625] ? do_raw_spin_unlock+0xa7/0x2f0 [ 320.370015] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 320.374577] ? do_raw_spin_lock+0x200/0x200 [ 320.378880] ? oom_kill_process+0x24d/0x280 [ 320.383204] ? lock_downgrade+0x8f0/0x8f0 [ 320.387336] ? trace_hardirqs_on+0xd/0x10 [ 320.391470] ? ___ratelimit+0xaa/0x655 [ 320.395341] ? idr_get_free+0x10c0/0x10c0 [ 320.399472] ? kasan_check_write+0x14/0x20 [ 320.403689] ? do_raw_spin_lock+0xc1/0x200 [ 320.407919] oom_kill_process.cold.29+0x10/0x660 [ 320.412662] ? trace_hardirqs_on+0xd/0x10 [ 320.416802] ? _raw_spin_unlock_irq+0x27/0x70 [ 320.421289] ? css_task_iter_end+0x2ce/0x490 [ 320.425687] ? oom_evaluate_task+0x540/0x540 [ 320.430088] ? trace_hardirqs_on+0xd/0x10 [ 320.434224] ? _raw_spin_unlock_irq+0x27/0x70 [ 320.438702] ? oom_badness+0xb00/0xb00 [ 320.442576] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 320.447323] ? mem_cgroup_iter_break+0x30/0x30 [ 320.451897] out_of_memory+0x86d/0x1ad0 [ 320.455858] ? oom_killer_disable+0x3a0/0x3a0 [ 320.460334] ? kasan_check_read+0x11/0x20 [ 320.464473] ? do_raw_spin_unlock+0xa7/0x2f0 [ 320.468885] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 320.473469] ? kasan_check_write+0x14/0x20 [ 320.477709] ? do_raw_spin_lock+0xc1/0x200 [ 320.481940] mem_cgroup_out_of_memory+0x15e/0x210 [ 320.486779] ? memcg_memory_event+0x40/0x40 [ 320.491119] ? page_counter_try_charge+0x1c7/0x220 [ 320.496049] try_charge+0x720/0x1680 [ 320.499757] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 320.506530] ? lock_downgrade+0x8f0/0x8f0 [ 320.510675] ? lock_release+0xa30/0xa30 [ 320.514632] ? __anon_vma_prepare+0xc4/0x720 [ 320.519027] ? handle_mm_fault+0x53e/0xc80 [ 320.523250] ? fs_reclaim_acquire+0x20/0x20 [ 320.527570] ? lock_downgrade+0x8f0/0x8f0 [ 320.531702] ? percpu_ref_put_many+0x119/0x240 [ 320.536284] ? get_mem_cgroup_from_mm+0x209/0x440 [ 320.541114] ? get_mem_cgroup_from_page+0x190/0x190 [ 320.546131] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 320.550962] ? lock_acquire+0x1e4/0x540 [ 320.554931] mem_cgroup_try_charge+0x4ff/0xa70 [ 320.559504] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 320.564506] ? mem_cgroup_protected+0xa60/0xa60 [ 320.569163] ? up_write+0x7b/0x220 [ 320.572689] ? up_read+0x110/0x110 [ 320.576223] ? __anon_vma_prepare+0x36d/0x720 [ 320.580708] ? pmd_val+0x88/0x100 [ 320.584155] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 320.589694] mem_cgroup_try_charge_delay+0x1d/0x90 [ 320.594635] __handle_mm_fault+0x25ba/0x4470 [ 320.599038] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 320.603869] ? cap_mmap_addr+0x52/0x130 [ 320.607833] ? userfaultfd_unmap_complete+0x32a/0x510 [ 320.613009] ? security_mmap_addr+0x80/0xa0 [ 320.617342] ? lock_acquire+0x1e4/0x540 [ 320.621316] ? handle_mm_fault+0x417/0xc80 [ 320.625535] ? lock_downgrade+0x8f0/0x8f0 [ 320.629764] ? lock_release+0xa30/0xa30 [ 320.633727] ? lock_release+0xa30/0xa30 [ 320.637694] ? down_read_killable+0x200/0x200 [ 320.642180] ? mem_cgroup_from_task+0xcb/0x1f0 [ 320.646754] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 320.651510] handle_mm_fault+0x53e/0xc80 [ 320.655569] ? __handle_mm_fault+0x4470/0x4470 [ 320.660143] ? find_vma+0x34/0x190 [ 320.663665] __do_page_fault+0x620/0xe50 [ 320.667711] ? mm_fault_error+0x380/0x380 [ 320.671851] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 320.677375] ? __x64_sys_clock_gettime+0x170/0x250 [ 320.682287] ? __ia32_sys_clock_settime+0x290/0x290 [ 320.687286] do_page_fault+0xf6/0x8c0 [ 320.691076] ? vmalloc_sync_all+0x30/0x30 [ 320.695208] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 320.700728] ? do_syscall_64+0x497/0x820 [ 320.704780] ? syscall_slow_exit_work+0x500/0x500 [ 320.709608] ? syscall_return_slowpath+0x5e0/0x5e0 [ 320.714535] ? syscall_return_slowpath+0x31d/0x5e0 [ 320.719455] ? prepare_exit_to_usermode+0x291/0x3b0 [ 320.724468] ? page_fault+0x8/0x30 [ 320.727997] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 320.732826] ? page_fault+0x8/0x30 [ 320.736370] page_fault+0x1e/0x30 [ 320.739821] RIP: 0033:0x40e16f [ 320.743010] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 320.761902] RSP: 002b:00007ffd8c7205b0 EFLAGS: 00010206 [ 320.767250] RAX: 00007f3313243000 RBX: 0000000000020000 RCX: 00000000004569aa [ 320.774508] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 320.781774] RBP: 00007ffd8c720690 R08: ffffffffffffffff R09: 0000000000000000 [ 320.789038] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8c720780 [ 320.796296] R13: 00007f3313263700 R14: 000000000072bf2c R15: 0000000000000001 [ 320.803816] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor3,pid=21945,uid=0 [ 320.818234] memory: usage 316kB, limit 0kB, failcnt 230 [ 320.823637] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 320.830397] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 320.836564] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 320.856086] Tasks state (memory values in pages): [ 320.860942] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 320.869835] [ 21945] 0 21945 17618 8221 126976 0 0 syz-executor3 [ 320.878873] [ 21953] 0 21953 17618 8218 126976 0 0 syz-executor2 [ 320.887912] Memory cgroup out of memory: Kill process 21945 (syz-executor3) score 8252000 or sacrifice child [ 320.897951] Killed process 21945 (syz-executor3) total-vm:70472kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 320.908953] oom_reaper: reaped process 21945 (syz-executor3), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB [ 320.909320] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 320.928686] CPU: 0 PID: 21953 Comm: syz-executor2 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 320.937170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.946503] Call Trace: [ 320.949076] dump_stack+0x1c9/0x2b4 [ 320.952695] ? dump_stack_print_info.cold.2+0x52/0x52 [ 320.957883] ? trace_hardirqs_on+0x10/0x10 [ 320.962112] ? do_raw_spin_unlock+0xa7/0x2f0 [ 320.966507] dump_header+0x246/0x123c [ 320.970303] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 320.975214] ? trace_hardirqs_on+0x10/0x10 [ 320.979440] ? trace_hardirqs_on+0x10/0x10 [ 320.983662] ? trace_hardirqs_on+0x10/0x10 [ 320.987877] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 320.993396] ? css_next_child+0x1c3/0x620 [ 320.997523] ? find_lock_task_mm+0x230/0x4d0 [ 321.001915] ? cgroup_get_tree+0xb20/0xb20 [ 321.006135] ? lock_acquire+0x1e4/0x540 [ 321.010091] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 321.015610] ? task_will_free_mem+0x239/0xb70 [ 321.020090] ? lock_release+0xa30/0xa30 [ 321.024045] ? oom_badness+0x7d1/0xb00 [ 321.027916] ? ___ratelimit+0x36f/0x655 [ 321.031878] ? lock_downgrade+0x8f0/0x8f0 [ 321.036008] ? kasan_check_read+0x11/0x20 [ 321.040143] ? do_raw_spin_unlock+0xa7/0x2f0 [ 321.044531] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 321.049101] ? do_raw_spin_lock+0x200/0x200 [ 321.053424] ? oom_kill_process+0x24d/0x280 [ 321.057727] ? lock_downgrade+0x8f0/0x8f0 [ 321.061857] ? trace_hardirqs_on+0xd/0x10 [ 321.065987] ? ___ratelimit+0xaa/0x655 [ 321.069854] ? idr_get_free+0x10c0/0x10c0 [ 321.073982] ? kasan_check_write+0x14/0x20 [ 321.078195] ? do_raw_spin_lock+0xc1/0x200 [ 321.082413] oom_kill_process.cold.29+0x10/0x660 [ 321.087152] ? trace_hardirqs_on+0xd/0x10 [ 321.091284] ? _raw_spin_unlock_irq+0x27/0x70 [ 321.095761] ? css_task_iter_end+0x2ce/0x490 [ 321.100151] ? oom_evaluate_task+0x540/0x540 [ 321.104546] ? trace_hardirqs_on+0xd/0x10 [ 321.108686] ? _raw_spin_unlock_irq+0x27/0x70 [ 321.113166] ? oom_badness+0xb00/0xb00 [ 321.117041] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 321.121785] ? mem_cgroup_iter_break+0x30/0x30 [ 321.126354] ? lock_downgrade+0x8f0/0x8f0 [ 321.130493] out_of_memory+0x86d/0x1ad0 [ 321.134449] ? oom_killer_disable+0x3a0/0x3a0 [ 321.138936] ? do_raw_spin_unlock+0xa7/0x2f0 [ 321.143329] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 321.147894] ? kasan_check_write+0x14/0x20 [ 321.152117] ? do_raw_spin_lock+0xc1/0x200 [ 321.156344] mem_cgroup_out_of_memory+0x15e/0x210 [ 321.161171] ? memcg_memory_event+0x40/0x40 [ 321.165485] ? page_counter_try_charge+0x1c7/0x220 [ 321.170397] try_charge+0x720/0x1680 [ 321.174095] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 321.180844] ? lock_downgrade+0x8f0/0x8f0 [ 321.184975] ? lock_release+0xa30/0xa30 [ 321.188937] ? __anon_vma_prepare+0xc4/0x720 [ 321.193329] ? handle_mm_fault+0x53e/0xc80 [ 321.197555] ? fs_reclaim_acquire+0x20/0x20 [ 321.201880] ? lock_downgrade+0x8f0/0x8f0 [ 321.206016] ? percpu_ref_put_many+0x119/0x240 [ 321.210584] ? get_mem_cgroup_from_mm+0x209/0x440 [ 321.215407] ? get_mem_cgroup_from_page+0x190/0x190 [ 321.220414] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 321.225238] ? lock_acquire+0x1e4/0x540 [ 321.229196] mem_cgroup_try_charge+0x4ff/0xa70 [ 321.233765] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 321.238770] ? mem_cgroup_protected+0xa60/0xa60 [ 321.243419] ? up_write+0x7b/0x220 [ 321.246948] ? up_read+0x110/0x110 [ 321.250479] ? __anon_vma_prepare+0x36d/0x720 [ 321.254957] ? pmd_val+0x88/0x100 [ 321.258394] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 321.263921] mem_cgroup_try_charge_delay+0x1d/0x90 [ 321.268833] __handle_mm_fault+0x25ba/0x4470 [ 321.273224] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 321.278050] ? cap_mmap_addr+0x52/0x130 [ 321.282009] ? userfaultfd_unmap_complete+0x32a/0x510 [ 321.287186] ? security_mmap_addr+0x80/0xa0 [ 321.291490] ? lock_acquire+0x1e4/0x540 [ 321.295456] ? handle_mm_fault+0x417/0xc80 [ 321.299678] ? lock_downgrade+0x8f0/0x8f0 [ 321.303811] ? lock_release+0xa30/0xa30 [ 321.307774] ? lock_release+0xa30/0xa30 [ 321.311729] ? down_read_killable+0x200/0x200 [ 321.316209] ? mem_cgroup_from_task+0xcb/0x1f0 [ 321.320769] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 321.325508] handle_mm_fault+0x53e/0xc80 [ 321.329569] ? __handle_mm_fault+0x4470/0x4470 [ 321.334141] ? find_vma+0x34/0x190 [ 321.337662] __do_page_fault+0x620/0xe50 [ 321.341704] ? mm_fault_error+0x380/0x380 [ 321.345845] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 321.351383] ? __x64_sys_clock_gettime+0x170/0x250 [ 321.356296] ? __ia32_sys_clock_settime+0x290/0x290 [ 321.361295] do_page_fault+0xf6/0x8c0 [ 321.365078] ? vmalloc_sync_all+0x30/0x30 [ 321.369210] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 321.374730] ? do_syscall_64+0x497/0x820 [ 321.378774] ? syscall_slow_exit_work+0x500/0x500 [ 321.383602] ? syscall_return_slowpath+0x5e0/0x5e0 [ 321.388511] ? syscall_return_slowpath+0x31d/0x5e0 [ 321.393430] ? prepare_exit_to_usermode+0x291/0x3b0 [ 321.398430] ? page_fault+0x8/0x30 [ 321.401950] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 321.406774] ? page_fault+0x8/0x30 [ 321.410304] page_fault+0x1e/0x30 [ 321.413743] RIP: 0033:0x40e16f [ 321.416918] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 321.435804] RSP: 002b:00007ffe1f3c3010 EFLAGS: 00010206 [ 321.441153] RAX: 00007f91cf350000 RBX: 0000000000020000 RCX: 00000000004569aa [ 321.448417] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 321.455683] RBP: 00007ffe1f3c30f0 R08: ffffffffffffffff R09: 0000000000000000 [ 321.462939] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1f3c31e0 [ 321.470191] R13: 00007f91cf370700 R14: 000000000072bf2c R15: 0000000000000001 [ 321.477607] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor2,pid=21953,uid=0 [ 321.491834] memory: usage 308kB, limit 0kB, failcnt 239 [ 321.497212] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 321.504813] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 321.510969] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 321.530497] Tasks state (memory values in pages): 03:35:20 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x28) fchdir(r1) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000380)=""/4096) close(r0) 03:35:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x2000400) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) 03:35:20 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080), 0x4) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040), 0x8001) 03:35:20 executing program 1: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f00000000c0)={0x80000001}) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x11930f16, 0xc00) 03:35:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000080)=""/216, 0xd8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) shutdown(r0, 0x0) 03:35:20 executing program 4: r0 = getpgid(0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x80011, r1, 0x0) futex(&(0x7f0000001ac0), 0x3, 0x0, &(0x7f0000000080), &(0x7f0000001c40), 0x0) 03:35:20 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x40044590, &(0x7f0000000380)=""/4096) close(r0) 03:35:20 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fstatfs(r1, &(0x7f0000000300)=""/115) [ 321.535349] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 321.544226] [ 21953] 0 21953 17618 8218 126976 0 0 syz-executor2 [ 321.553271] Memory cgroup out of memory: Kill process 21953 (syz-executor2) score 8249000 or sacrifice child [ 321.563292] Killed process 21953 (syz-executor2) total-vm:70472kB, anon-rss:104kB, file-rss:32768kB, shmem-rss:0kB [ 321.574434] oom_reaper: reaped process 21953 (syz-executor2), now anon-rss:0kB, file-rss:32788kB, shmem-rss:0kB 03:35:20 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) r0 = epoll_create1(0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') r1 = timerfd_create(0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000)) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0xffffffff80000001) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x7}) 03:35:20 executing program 7: r0 = socket$unix(0x2c, 0x3, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs, 0x6e) mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x200000, &(0x7f0000000140)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@fscache='fscache'}]}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8000, 0x0) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/160, 0xa0}, {&(0x7f0000000280)=""/131, 0x83}, {&(0x7f0000000340)=""/216, 0xd8}, {&(0x7f0000000440)=""/46, 0x2e}, {&(0x7f0000000480)=""/33, 0x21}, {&(0x7f00000004c0)=""/62, 0x3e}, {&(0x7f0000000500)=""/20, 0x14}], 0x7, &(0x7f00000005c0)=""/187, 0xbb, 0x2}, 0x43) 03:35:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x80000100008912, &(0x7f0000000100)="025cc80700145f8f764070") getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x1, 0x668, 0x8000, 0x8, 0x4, 0xfffffffffffffffd, 0x7, 0x0, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e22, 0x1, @ipv4={[], [], @rand_addr=0x80}, 0x4}}, [0x8001, 0xfffffffffffff2ac, 0x4, 0x4, 0xffffffff00000000, 0x80000000, 0x3, 0x80, 0x0, 0x1, 0x0, 0x16, 0x7, 0x6, 0x7]}, &(0x7f00000000c0)=0x100) rt_sigpending(&(0x7f0000000440), 0x8) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0) keyctl$describe(0x6, 0x0, &(0x7f0000000480)=""/159, 0xfffffffffffffec8) 03:35:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair(0xa, 0x7, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x48, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x84}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") syz_mount_image$hfs(&(0x7f00000000c0)='hfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x20, &(0x7f0000000000)=ANY=[@ANYBLOB="00901ec99ef2777205518a9008378872a7e093f919b0f2252d4ade6bf669f202eb6147189d92b513c13c916d3fd3e413ca61a6885a36e2c841ac030aec0d4d109e2168b6d42db33468627aca629ee54a1072b99ae91ace97afe80e0f77df5b53a00c2c9acfca2eadc570c5547a6d54d2cb7bca5b0d7e2561c305e1d2ddd1232c8b6879fa14ecb6c3d2778c3e60910f2c19b8"]) 03:35:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="025cc83d56ec5f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x2, 0x0) r2 = dup(r0) r3 = getpgrp(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000240)={{0x0, 0x3, 0x7, 0x55, 'syz0\x00', 0x101}, 0x5, 0x20000400, 0x2, r3, 0x2, 0x4, 'syz1\x00', &(0x7f0000000000)=['/dev/input/event#\x00', '(em0ppp1vboxnet1vboxnet1\x00'], 0x2b, [], [0x1, 0x3, 0x2, 0x10001]}) ioctl$VT_WAITACTIVE(r2, 0x5607) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000100)=""/202) epoll_create(0x2) 03:35:20 executing program 6: setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e00000027f000001000000920a000000000000bb"], 0x14) r0 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x6, &(0x7f0000000140)={0x14, 0x0, 0x1, 0x25}, 0x14) 03:35:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)="728d01c8d87c29f7770e", &(0x7f0000000000), 0xa}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="757466383dbd"]) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$addseals(r0, 0x409, 0x4) 03:35:20 executing program 7: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x1, 0x40, 0x2000000000000, 0x0, 0xe5aa}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r1, &(0x7f0000000180)=0x4) ioctl$TIOCGLCKTRMIOS(r0, 0x400c55cb, &(0x7f0000000280)={0xffffffffffffffff}) r2 = semget$private(0x0, 0x3, 0x29) dup2(r0, r0) semctl$GETNCNT(r2, 0x0, 0xe, &(0x7f00000001c0)=""/116) [ 321.953082] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 321.973069] ntfs: (device loop1): parse_options(): The utf8 option requires a boolean argument. [ 322.016817] kvm [22076]: vcpu0, guest rIP: 0x90c2 Hyper-V uhandled wrmsr: 0x40000067 data 0x0 [ 322.026208] kvm: pic: non byte read [ 322.030288] kvm: pic: non byte read [ 322.034257] kvm: pic: non byte read [ 322.047517] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 322.067386] ntfs: (device loop1): parse_options(): The utf8 option requires a boolean argument. [ 322.524836] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 322.534273] CPU: 0 PID: 22038 Comm: syz-executor3 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 322.542759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 322.552125] Call Trace: [ 322.554712] dump_stack+0x1c9/0x2b4 [ 322.558339] ? dump_stack_print_info.cold.2+0x52/0x52 [ 322.563535] ? trace_hardirqs_on+0x10/0x10 [ 322.567770] dump_header+0x246/0x123c [ 322.571560] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 322.576473] ? trace_hardirqs_on+0x10/0x10 [ 322.580691] ? kasan_check_read+0x11/0x20 [ 322.584827] ? do_raw_spin_unlock+0xa7/0x2f0 [ 322.589232] ? trace_hardirqs_on+0x10/0x10 [ 322.593454] ? trace_hardirqs_on+0x10/0x10 [ 322.597679] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 322.603214] ? css_next_child+0x1c3/0x620 [ 322.607344] ? find_lock_task_mm+0x230/0x4d0 [ 322.611733] ? cgroup_get_tree+0xb20/0xb20 [ 322.615949] ? lock_acquire+0x1e4/0x540 [ 322.619990] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 322.625507] ? task_will_free_mem+0x239/0xb70 [ 322.629992] ? lock_release+0xa30/0xa30 [ 322.633958] ? oom_badness+0x7d1/0xb00 [ 322.637827] ? ___ratelimit+0x36f/0x655 [ 322.641782] ? lock_downgrade+0x8f0/0x8f0 [ 322.645926] ? kasan_check_read+0x11/0x20 [ 322.650054] ? do_raw_spin_unlock+0xa7/0x2f0 [ 322.654448] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 322.659081] ? do_raw_spin_lock+0x200/0x200 [ 322.663391] ? oom_kill_process+0x24d/0x280 [ 322.667699] ? lock_downgrade+0x8f0/0x8f0 [ 322.671843] ? trace_hardirqs_on+0xd/0x10 [ 322.675976] ? ___ratelimit+0xaa/0x655 [ 322.679845] ? idr_get_free+0x10c0/0x10c0 [ 322.683975] ? kasan_check_write+0x14/0x20 [ 322.688193] ? do_raw_spin_lock+0xc1/0x200 [ 322.692410] oom_kill_process.cold.29+0x10/0x660 [ 322.697157] ? trace_hardirqs_on+0xd/0x10 [ 322.701291] ? _raw_spin_unlock_irq+0x27/0x70 [ 322.705766] ? css_task_iter_end+0x2ce/0x490 [ 322.710163] ? oom_evaluate_task+0x540/0x540 [ 322.714570] ? trace_hardirqs_on+0xd/0x10 [ 322.718715] ? _raw_spin_unlock_irq+0x27/0x70 [ 322.723199] ? oom_badness+0xb00/0xb00 [ 322.727082] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 322.731821] ? mem_cgroup_iter_break+0x30/0x30 [ 322.736398] out_of_memory+0x86d/0x1ad0 [ 322.740363] ? oom_killer_disable+0x3a0/0x3a0 [ 322.744856] ? kasan_check_read+0x11/0x20 [ 322.749000] ? do_raw_spin_unlock+0xa7/0x2f0 [ 322.753389] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 322.757954] ? kasan_check_write+0x14/0x20 [ 322.762171] ? do_raw_spin_lock+0xc1/0x200 [ 322.766392] mem_cgroup_out_of_memory+0x15e/0x210 [ 322.771226] ? memcg_memory_event+0x40/0x40 [ 322.775531] ? page_counter_try_charge+0x1c7/0x220 [ 322.780451] try_charge+0x720/0x1680 [ 322.784335] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 322.791074] ? lock_downgrade+0x8f0/0x8f0 [ 322.795215] ? lock_release+0xa30/0xa30 [ 322.799182] ? __anon_vma_prepare+0xc4/0x720 [ 322.803579] ? handle_mm_fault+0x53e/0xc80 [ 322.807796] ? fs_reclaim_acquire+0x20/0x20 [ 322.812108] ? lock_downgrade+0x8f0/0x8f0 [ 322.816238] ? percpu_ref_put_many+0x119/0x240 [ 322.820804] ? get_mem_cgroup_from_mm+0x209/0x440 [ 322.825626] ? get_mem_cgroup_from_page+0x190/0x190 [ 322.830626] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 322.835451] ? lock_acquire+0x1e4/0x540 [ 322.839411] mem_cgroup_try_charge+0x4ff/0xa70 [ 322.843976] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 322.849078] ? mem_cgroup_protected+0xa60/0xa60 [ 322.853732] ? up_write+0x7b/0x220 [ 322.857254] ? up_read+0x110/0x110 [ 322.860794] ? __anon_vma_prepare+0x36d/0x720 [ 322.865284] ? pmd_val+0x88/0x100 [ 322.868722] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 322.874246] mem_cgroup_try_charge_delay+0x1d/0x90 [ 322.879180] __handle_mm_fault+0x25ba/0x4470 [ 322.883602] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 322.888437] ? cap_mmap_addr+0x52/0x130 [ 322.892403] ? userfaultfd_unmap_complete+0x32a/0x510 [ 322.897593] ? security_mmap_addr+0x80/0xa0 [ 322.901913] ? lock_acquire+0x1e4/0x540 [ 322.905872] ? handle_mm_fault+0x417/0xc80 [ 322.910092] ? lock_downgrade+0x8f0/0x8f0 [ 322.914225] ? lock_release+0xa30/0xa30 [ 322.918186] ? lock_release+0xa30/0xa30 [ 322.922148] ? down_read_killable+0x200/0x200 [ 322.926641] ? mem_cgroup_from_task+0xcb/0x1f0 [ 322.931214] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 322.935963] handle_mm_fault+0x53e/0xc80 [ 322.940032] ? __handle_mm_fault+0x4470/0x4470 [ 322.944611] ? find_vma+0x34/0x190 [ 322.948149] __do_page_fault+0x620/0xe50 [ 322.952198] ? mm_fault_error+0x380/0x380 [ 322.956331] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 322.961862] ? __x64_sys_clock_gettime+0x170/0x250 [ 322.966788] ? __ia32_sys_clock_settime+0x290/0x290 [ 322.971811] do_page_fault+0xf6/0x8c0 [ 322.975599] ? vmalloc_sync_all+0x30/0x30 [ 322.979731] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 322.985259] ? do_syscall_64+0x497/0x820 [ 322.989651] ? syscall_slow_exit_work+0x500/0x500 [ 322.994497] ? syscall_return_slowpath+0x5e0/0x5e0 [ 322.999433] ? syscall_return_slowpath+0x31d/0x5e0 [ 323.004360] ? prepare_exit_to_usermode+0x291/0x3b0 [ 323.009367] ? page_fault+0x8/0x30 [ 323.012900] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 323.017725] ? page_fault+0x8/0x30 [ 323.021253] page_fault+0x1e/0x30 [ 323.024697] RIP: 0033:0x40e16f [ 323.027872] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 323.046767] RSP: 002b:00007ffd8c7205b0 EFLAGS: 00010206 [ 323.052128] RAX: 00007f3313243000 RBX: 0000000000020000 RCX: 00000000004569aa [ 323.059397] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 323.066668] RBP: 00007ffd8c720690 R08: ffffffffffffffff R09: 0000000000000000 [ 323.073922] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8c720780 [ 323.081182] R13: 00007f3313263700 R14: 000000000072bf2c R15: 0000000000000001 [ 323.088700] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor2,pid=22054,uid=0 [ 323.102933] memory: usage 308kB, limit 0kB, failcnt 256 [ 323.108371] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 323.115206] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 323.121364] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 323.141047] Tasks state (memory values in pages): [ 323.145900] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 323.154783] [ 22038] 0 22038 17618 8221 126976 0 0 syz-executor3 [ 323.163843] [ 22054] 0 22054 17618 8730 126976 0 0 syz-executor2 [ 323.172878] Memory cgroup out of memory: Kill process 22054 (syz-executor2) score 8761000 or sacrifice child [ 323.182916] Killed process 22054 (syz-executor2) total-vm:70472kB, anon-rss:2152kB, file-rss:32768kB, shmem-rss:0kB [ 323.195072] oom_reaper: reaped process 22054 (syz-executor2), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB [ 323.205402] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 323.214832] CPU: 1 PID: 22054 Comm: syz-executor2 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 323.223331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.232683] Call Trace: [ 323.235275] dump_stack+0x1c9/0x2b4 [ 323.238906] ? dump_stack_print_info.cold.2+0x52/0x52 [ 323.244105] ? trace_hardirqs_on+0x10/0x10 [ 323.248351] ? do_raw_spin_unlock+0xa7/0x2f0 [ 323.252759] dump_header+0x246/0x123c [ 323.256569] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 323.261930] ? trace_hardirqs_on+0x10/0x10 [ 323.266175] ? trace_hardirqs_on+0x10/0x10 [ 323.270425] ? trace_hardirqs_on+0x10/0x10 [ 323.274654] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 323.280199] ? css_next_child+0x1c3/0x620 [ 323.284343] ? find_lock_task_mm+0x230/0x4d0 [ 323.288767] ? cgroup_get_tree+0xb20/0xb20 [ 323.293007] ? lock_acquire+0x1e4/0x540 [ 323.297006] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 323.302577] ? task_will_free_mem+0x239/0xb70 [ 323.307076] ? lock_release+0xa30/0xa30 [ 323.311054] ? oom_badness+0x7d1/0xb00 [ 323.314949] ? ___ratelimit+0x36f/0x655 [ 323.318935] ? lock_downgrade+0x8f0/0x8f0 [ 323.323077] ? kasan_check_read+0x11/0x20 [ 323.327233] ? do_raw_spin_unlock+0xa7/0x2f0 [ 323.332489] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 323.337078] ? do_raw_spin_lock+0x200/0x200 [ 323.341393] ? oom_kill_process+0x24d/0x280 [ 323.345703] ? lock_downgrade+0x8f0/0x8f0 [ 323.349845] ? trace_hardirqs_on+0xd/0x10 [ 323.353989] ? ___ratelimit+0xaa/0x655 [ 323.357861] ? idr_get_free+0x10c0/0x10c0 [ 323.361994] ? kasan_check_write+0x14/0x20 [ 323.366215] ? do_raw_spin_lock+0xc1/0x200 [ 323.370435] oom_kill_process.cold.29+0x10/0x660 [ 323.375176] ? trace_hardirqs_on+0xd/0x10 [ 323.379305] ? _raw_spin_unlock_irq+0x27/0x70 [ 323.383780] ? css_task_iter_end+0x2ce/0x490 [ 323.388181] ? oom_evaluate_task+0x540/0x540 [ 323.392578] ? trace_hardirqs_on+0xd/0x10 [ 323.396713] ? _raw_spin_unlock_irq+0x27/0x70 [ 323.401216] ? oom_badness+0xb00/0xb00 [ 323.405096] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 323.409843] ? mem_cgroup_iter_break+0x30/0x30 [ 323.414415] out_of_memory+0x86d/0x1ad0 [ 323.418384] ? oom_killer_disable+0x3a0/0x3a0 [ 323.422865] ? do_raw_spin_unlock+0xa7/0x2f0 [ 323.427266] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 323.431832] ? kasan_check_write+0x14/0x20 [ 323.436061] ? do_raw_spin_lock+0xc1/0x200 [ 323.440283] mem_cgroup_out_of_memory+0x15e/0x210 [ 323.445134] ? memcg_memory_event+0x40/0x40 [ 323.449452] ? page_counter_try_charge+0x1c7/0x220 [ 323.454366] try_charge+0x720/0x1680 [ 323.458073] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 323.464813] ? lock_downgrade+0x8f0/0x8f0 [ 323.468960] ? lock_release+0xa30/0xa30 [ 323.472925] ? __anon_vma_prepare+0xc4/0x720 [ 323.477319] ? handle_mm_fault+0x53e/0xc80 [ 323.481560] ? fs_reclaim_acquire+0x20/0x20 [ 323.485882] ? lock_downgrade+0x8f0/0x8f0 [ 323.490014] ? percpu_ref_put_many+0x119/0x240 [ 323.494581] ? get_mem_cgroup_from_mm+0x209/0x440 [ 323.499424] ? get_mem_cgroup_from_page+0x190/0x190 [ 323.504449] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 323.509278] ? lock_acquire+0x1e4/0x540 [ 323.513238] mem_cgroup_try_charge+0x4ff/0xa70 [ 323.517822] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 323.522830] ? mem_cgroup_protected+0xa60/0xa60 [ 323.527482] ? up_write+0x7b/0x220 [ 323.531006] ? up_read+0x110/0x110 [ 323.534556] ? __anon_vma_prepare+0x36d/0x720 [ 323.539039] ? pmd_val+0x88/0x100 [ 323.542474] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 323.547996] mem_cgroup_try_charge_delay+0x1d/0x90 [ 323.552921] __handle_mm_fault+0x25ba/0x4470 [ 323.557317] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 323.562147] ? cap_mmap_addr+0x52/0x130 [ 323.566108] ? userfaultfd_unmap_complete+0x32a/0x510 [ 323.571283] ? security_mmap_addr+0x80/0xa0 [ 323.575605] ? lock_acquire+0x1e4/0x540 [ 323.579738] ? handle_mm_fault+0x417/0xc80 [ 323.583961] ? lock_downgrade+0x8f0/0x8f0 [ 323.588097] ? lock_release+0xa30/0xa30 [ 323.592052] ? lock_release+0xa30/0xa30 [ 323.596020] ? down_read_killable+0x200/0x200 [ 323.600504] ? mem_cgroup_from_task+0xcb/0x1f0 [ 323.605072] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 323.609818] handle_mm_fault+0x53e/0xc80 [ 323.613867] ? __handle_mm_fault+0x4470/0x4470 [ 323.618436] ? find_vma+0x34/0x190 [ 323.621968] __do_page_fault+0x620/0xe50 [ 323.626024] ? mm_fault_error+0x380/0x380 [ 323.630163] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 323.635692] ? __x64_sys_clock_gettime+0x170/0x250 [ 323.640610] ? __ia32_sys_clock_settime+0x290/0x290 [ 323.645614] do_page_fault+0xf6/0x8c0 [ 323.649399] ? vmalloc_sync_all+0x30/0x30 [ 323.653544] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 323.659074] ? do_syscall_64+0x497/0x820 [ 323.663118] ? syscall_slow_exit_work+0x500/0x500 [ 323.667957] ? syscall_return_slowpath+0x5e0/0x5e0 [ 323.672879] ? syscall_return_slowpath+0x31d/0x5e0 [ 323.677798] ? prepare_exit_to_usermode+0x291/0x3b0 [ 323.682802] ? page_fault+0x8/0x30 [ 323.686321] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 323.691153] ? page_fault+0x8/0x30 [ 323.694679] page_fault+0x1e/0x30 [ 323.698114] RIP: 0033:0x40e16f [ 323.701291] Code: Bad RIP value. [ 323.704641] RSP: 002b:00007ffe1f3c3010 EFLAGS: 00010206 [ 323.709984] RAX: 00007f91cf350000 RBX: 0000000000020000 RCX: 00000000004569aa [ 323.717231] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 323.724480] RBP: 00007ffe1f3c30f0 R08: ffffffffffffffff R09: 0000000000000000 [ 323.731764] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1f3c31e0 [ 323.739031] R13: 00007f91cf370700 R14: 000000000072bf2c R15: 0000000000000001 [ 323.746451] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor3,pid=22038,uid=0 [ 323.760742] memory: usage 272kB, limit 0kB, failcnt 530 [ 323.766171] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 323.772985] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 323.779169] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 323.798813] Tasks state (memory values in pages): [ 323.803701] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 323.812664] [ 22038] 0 22038 17618 8221 126976 0 0 syz-executor3 [ 323.821725] [ 22054] 0 22054 17618 8000 126976 0 0 syz-executor2 03:35:22 executing program 6: mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = accept$nfc_llcp(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f00000000c0)=0x60) recvfrom(r0, &(0x7f0000000000)=""/40, 0x28, 0x2000, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x2, 0x0, 0x3}}, 0x80) memfd_create(&(0x7f0000f9dffe)="c403", 0x0) 03:35:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000000)={0x4000, 0x2, 0x9, 0x1, 0xffe000000000000}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)=0x0) ptrace$peekuser(0x3, r4, 0x9faf) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f00000000c0)="b9800000c00f3235008000000f30b9b8080000b8c897c43eba000000000f30f2420f330f090f00e466b83b010f00d00f20d835080000000f22d8b9800000c00f3235001000000f30660f6138c403295e7bf027", 0x53}], 0x1, 0x0, &(0x7f0000000200), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:35:22 executing program 4: r0 = socket$packet(0x11, 0x40000000000a, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x10000000000006, 0x0, 0x0, 0xe362}]}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="025cc83d6d345f8f762070") socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000080)) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000e77fff), 0xfffffffffffffe64, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:35:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") getrlimit(0x0, &(0x7f0000002ff2)) pkey_mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x5, 0xffffffffffffffff) select(0x40, &(0x7f0000000fc0)={0x8}, &(0x7f0000000180), &(0x7f0000002000), &(0x7f0000003000)={0x77359400}) r1 = request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000080)='em1cgroup\x00', 0xfffffffffffffff8) keyctl$clear(0x7, r1) 03:35:22 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) mmap(&(0x7f0000e16000/0x4000)=nil, 0x4000, 0x3, 0x10, r1, 0x4d) getsockname$packet(0xffffffffffffff9c, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000240)={r2, @broadcast, @multicast2}, 0xc) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xd0, &(0x7f0000000000), 0x4) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)=""/181, &(0x7f0000000140)=0xb5) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000180)=0x80, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r4}) 03:35:22 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000840)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x80000) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000140)=0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r2}}, 0x48) 03:35:22 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x40044590, &(0x7f0000000380)=""/4096) close(r0) 03:35:22 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10080, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140), &(0x7f0000000340)=0x8) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) r4 = syz_open_dev$evdev(&(0x7f0000002c00)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x1) epoll_create1(0x80000) ioctl$EVIOCGMTSLOTS(r4, 0x400445a0, &(0x7f0000013000)) syz_mount_image$ceph(&(0x7f0000001380)='ceph\x00', &(0x7f00000013c0)='./file0//ile0\x00', 0x4, 0x6, &(0x7f00000026c0)=[{&(0x7f0000001400), 0x0, 0x9}, {&(0x7f0000001440)="0d627ab47aeaf85849560d22097293e65f61cd69515761096b522a2642d468a4c8a1d989e1bf4b9d18d1f52387b92f775a7b5b73016ac03f775799e4909c8eef9a9c14f18d8df47fe766c36a677868a849036ddef0908efe066fa55dc28ae6b5a1bf16a4149be3847cbb5bf5ec28c63e", 0x70, 0x80000000}, {&(0x7f00000014c0)="12ba15f3453db94f74c8907d02a4448bea1f39fdeaa0ab82afa47e0e8e935b5812213cb015e0cadd6c16bc41b88fe8be2b5188226631cd768f1502b331a45e173e46c105759a27396453559c51defe98f7b7c272f5ea6d2720f8e15e19d7c3b580ab3162549afd3febf580eee3cef2cfb77e39e642948bb85e8b8a9b6a627f194c8163e65073de147cd0339c1832541580dc5cf808296dbce093094e7dd1854dc52b61196f54eea0553b1f03eef8226f6ce12ad9a25caf7c28542667b37c428c41fddfface23b91a4397e4d3f3e1305d46258b574e4396b2a20ebf1f60d78a6125d3b0ef670b0e0877289ca78fc360bdad7ff85838c41ef2df1ed7a2e8d3d0cbe89f7fd33fb9d2e45fe81379de3f977b504b19229e6797e8eef4e8b35b6b73d5739164cb20503d4182ba1a1dd52a0ace6c6073fd5f6de19e151de101b3e5fad566c5b34bc754bd16e35ff9b320cce563bde8b0dabf507d31803e53a85216019a14acc01d18bdb8342a7f16c76df3357b3df1801276937ca969734ddad4a6cffe87d7615f8f6f31b76be8e5b1d86f45cfcc1583334879db603ceb910886c64e99cdb7d42cd70987c38a819409cb38266371ce77d0141d3a1eecad3db7836d529dcccf6a3cea7c397d334456492be8d5b90228877094290a7a376b7c1ce285ffb7c1595cda40efb3a3151dc3390a5830d4b832f6b962fbf16e694592eefef0cccc10d8a53a2ca169e793b8a7b8623371e89ddec3068c6f302d60ba5c15e39f7f0ed3ea30a9be2d57328403e5764150eb5b3c36fccc4488f98644ef990aad6329113e12be36874522825e2bc1f69c976a7691c1bb9f748e9383fc207a940d7445f81ed3dbf51878a0f1f911bc564c97a2ecba4ea9abbec33f67d9a88da55ac84b489d7aa196f34170e9c025b5066abd65fb4f10fac7905ce5c1cd6d9c1756368783158e1bf9ce70b23fb49187e2e6845f45508f2ac9174431a8bb6cdfade08feea70fa230cc6a115d25146d9b2185753c0a1b06b5acd075359808bee0c1abab01213b650ed8e3733d874b6a08954e379a80941e516404aeab93371f6b400b8fa6f500194c660e519b46a9884980e7206039ae3ab14897dc1d913cb9205b34a4c0b2e67cd8912a468974c4458e4ff714fdc5335e417fed54dff9404322454dccb2112eed2664d7539071afe19628ce0e21d791366af6faa63801a135ceaaca6d6352161095fa584773f26c109959d3a4ef964437f57a5cb0618ee5e1c517c2c06d157e1e19cafbfb04c122f3c563d06597b8a811780103d5df8606a22769ec6592ccc0035bc21c4e73c820c721bde33c9a446cc568da494ba1337e0739daf9e81f73f211ad4286cf795b27d2344ca1160b2c988fb5a75fe6bbc699614870c85573c4e27d65441b022da181ee6fb831f07ace37be995652bfd47972dc738e5c9dd06738694a286e8c713615cb28377932f217c477e96083487087f4e740ccee39be2d0818779cc5d15950d693024b430a5ec3db6eec6dba34c1c0e0416170d5f7cbbe1e9039826ea0f8f517037d2c9e7da06a4324a7885fc9c1fab641d094199bda31af37719797648dcbba49ee31de3b560030d91722698974d4adc8267df853b3c28075e1b4a7b4e2e591cb570768ae1ba94c7aeb5d53f58249b1bbfe72c6f977d5cb6747004725583eb2c798c40056dc248e7ca2cf50afd270e99a5b2e312935b91848bb8153ea3c9a453a5e86719cd5d9c19cbc6b05c6375203b5778e15ec5ea8a73a25a9e8d0cf7bec4e68b22d2d51c3d4dd44f6a101c3fb0e1e05c6efb874905c53b767c604ff880afabf5a13bbe221f76232626d9f352da3f47908c668d902baf4435472e16e84f48f08c6412b44da33bec44712fb6a610eb654adf7452c9928e946d0e1f7bc0c2ae8d6b0a7707860dd6ff43d311a342f14834488bc4573a084908bb5d9fa0f6b83ffc2b7b579d4886c617f0973b4f6c984daa423d59eee3c7c096b4169f3fe38193b181e91f618e721c1f4ce0987ae2329b411a5d31abf4a9772dec3b0e366312b47e3cd81e8d0080b365d42a67f27f9738071633163a9f2342376fb17c4a23e8182f32fd321bf79f10dc21831b478217c0b522046deb153f8da67b8670a885945c81847f4aca507b91f3c297ec856d61d14b75417c0fa12c7309f614414cae3c230dbe9028afde056c52e01b268387d9044d4b943322ed532a4a4b932e6fa5cffd7411a1ed19571916f9ca23a2da807e63c00d01cb5ef27579903df49409cec507e6e869e72136458c240998fb5712fe99e77324d78d8b0c9289862caa25149fb3cbabdbaaf5c37186df10efe4a820352c3ccb0f173a6dda1e3fe45dbcc05cd5c8726e82d3462c9aa687726762ab3de797aaced165db536775a44636f017cc527a7e1af227385036f3efa3d8c71dd1c73fbdcfd685b1a80407dcdf4a7344ae24262b14f9f8863d9cb4b45e0858b984f06a800ec8287e43fefd2c16acc149a0aedd312bbce6288fdcde438baade9543915443bdf406c81706e011f834fd606089db6d8b8aaf3e4888e6900f0101685b37e1e5f0c1237431528114681ecef027eb8eeca4655180cf072ef10aa7f6939fe12766656077d7a3cacb71885730aa894564eef2dfe6d79c4049c8fa4e00d3bab0a55445e3e120270b71029069e8e3e7b29a8f88aee3099cf12fc8a0602ffd0f43e7444812694b1162c5bc163ef6cce76935a890edc354eda9c652b1040452e1483b1351d2e59cd8bb3f139581d3236dec7502a545e8ebd92a66c98757ea33090486b309ef596140a93faf4d4389cdd601c35b392763de486e1bf8640a99dfecfbce78587ee8dc4e0e3378daed383c3b18b1fc791e29b6f0501e4a1caf17a37c4bffe79e5d68dac1f70aba7e99e131b7f80f911bcc811758da7cc43c60376d07a890f19091c53e618ac046517b4b3550635714e332ed2b13422ea29773664107e890a0e1124076b05cbd9a777b408c37fc72bbd5b02ad85345be8e0974ec9e0c6a80ea307eef87f40f5a3fdd4b9aaf0fddbe63e46e83bf25935e612dc6ed60ccec0fe623bbd1d06cb74b7b5bdecfd5ccfcc7f8f6353bb064386c9fefc919874b5b3942ba5c4cb5da5739f457550dd317e93f238d49042bd264df38ac80e8f621f7c3e8378cc363e87ba3fcf6218cfec2ccc0329ea4d51ce2c788409f21ebaa02f24e9e6a4061d1b8569df04610caf6a5b57e3d0b2bb51576f495a5d03d987623d2c380dddef98d2e760464710cc6e405f6ba0ad9c585c911c5e6be9335b7b308f7b5df67918e292b50a74c1eafb4e5813dc3b5fb891802db264f2e5eba34d035baf365ed0ba1212a007e455f68bd06ffd529bc6dd73ad0538e9039355610841d9c3020bfec7841ef4357b6c306e55d27e7d81c64dfbd2810daaf6930eeb3e5e6e1c3bf2517e2c511b6b7c67fecb7154c4bc8a44b853c90d78bb8461352626fb6e4533d596e0cef7b2fb9e4e71073a2dca04a3c129123d906141034325828c883cd3d75176e693b2753676fa28574d0b8bc875c871a8650651834545d161e8c42aa011854f7fff68fa873ae8f95fed30348aadf7c2da54f8b7eb95f045a73bc3ee0d8c01ff0b89dc0a6082b37b360f65298d578c6b6bad2a7953f8bcc5b4fdfe89ca9b3fa2326d662417533f21cf38dc4dc42eef6db7fd68737491b46b88fa1e15fb61c24e46566010e9f1a1b86e66ff8e7b76c7416c2a181484a9af4671c3952efbcb809c6b20cc75e490ec31697d88c2d2d4bfd3103c11c5c0784270a63ecf5b8e968ae3a1e1eb2d12100d48c1404594e06a6e21232f60730595f39e63dbefdecfcb9c69bfbeced85163fc163deaa5c39a038ed8446602539bdc369c3ae700d6d8a7aaaf21927e85043fd8fdd0738a6422121e39b2d9ece85b495369ff631bcb8a2ab0868eae317a08390232cfbeb891aa2f75d80b8543efc385367991d3a2e4c8b553bb8e37f96c56300a4122d9b956e145609141c9b029feeb4bc20a982ee26710cf58a2aa34e5b8235ad495a129cb8cf4868cf40099dea920455edb6f670036abd2f58bd282d25379f2c11af25675f9cb147e9f9dc6a96b46f57a3fd0a32bc78853b6d93e11785accb97cb4b12200cfa967d9f8fc3d2be0cdc347ad9a0c031fc94dd7b5a2f11b3982633dbeff51ac96ed4f1c63ce94501ff7fbb096c49cf5ca3f3b293436cf68585a8b7f6fd2d9427995a80f16c4f7b8dbe5b85d1f7fc468c6a502565c625a37ce080ca4f10c667d579ff4a582a3a0297b984dc43c2ee2a69f15639d6503f45864c3481eda5328d856cfe303509b26ecfe6a6f2958ca2dfdc480c655a602383e8e12f73db3be9ea78789de65f91e983b6f9a568ccdaa158d2e32bc4724f43ee6a0f813a20f1524f657308177bda8fcb82afdf4bcbd59ccc9dd1144058c5dfb2018911aa54b0ca3f2ae2e6eac49838a6e6844bf99fcdde16402faca20087ba8262c1ec12b89a5f9318253f3bf6304b7657116926e79b33aed9b0e4c9a465e20547e20ee93808ae7d1320e3605d41e1666aceeedeb38dc154c0e593b9573c3df7d42c0b069179553176b9180a7534c4a541108a1fc430400d50dfa311330e33adb48c81722daa741963c857812926d271bb01178b3e2c168f414e28296876dd0b23989e10f0481c2c2100d3787ccc677faed5861abfaca31f7a3f238a2c21f73784ffb81ad14fd8ec70153580abca956d31ac4af3225b494774e323900f878a49d7a48972600570e389f4d6b6e2011dc9a30f36113062ae0ae2108b61026ee2205f22d30c47b75eb76f952ea4f8acf4cbfa64e0aab78eef16ba701e9fce443efe09e7285e172b634c2a9638c0ce9b8a5a71277e1cbc4b787614152ab956a98e96f88cceb270fa27fc7e2229a419be03cca74c37fca03e88b1e7c0404c1d757f16ae09faf07de8e520e1822d7da33396d4ac3373aef3abbc01aa0bf4859e565c5a520cb8456ae6504d07f75d42a0f6d0e1ba80c10c5bce7ab60608a5d2eb58389609d144e36b2346effe263fee6641bbdefaa343a77d3a1768c014b366bbd9c2ed05579d7d07dd40cab8d4c024f67b9d74f5e0858a02cd865546c03a9b46c16e024db2668a03f8b32eb1743d8bca398a12035c70cd355e2fdae4e02ead1721569405d78113b662e03367e040c06ab4dda21706156888fa873aff6bfa89152c20ddad19d8cbe6a179578f58667e31b7c7e5e7bf4ff528c884362f566aab100289f459f261af0e0e8aedf91c3c9683e6650146d7d89a981dc6c5cd92727279f9600545b8f69cbd6a6da394cebb14d4562c559ae9f39ace5c0f25409e343df56dc6099698563c39434ec436d937eac5d9cca37bcb339fd09e953a0decc0f1b8830c18c3c979f904fa4b8dd6f978f324dcbea364f8aff8613c7817d581df972aa4399ffb05a9e520c27b9e21e82f28ab808f040d8f6751ad47ea91aa5bf603232a2941f18762b33486e6ea1d9e5153b229432913553d94b62a78046cd9ad96029744bdba916d6105518a40dbb8589b798e90f5798bf230c069826a628b6a7ce251fc62a1cf10f6a851d6f74024fca643aa896289f81cfb272fe8ee4ab2f875f5bbf19f8a7131bffa99bc1e3b061d5cbc3dcc3cf390139201bc197cfe748d3f057606c42419d41041f6c5366aec377b2f6ec56a7a3663ae1b9c812823b36e79590344264cc3380ac6319839cb795ef2d97fb8372114a50277b1c952e951929e944470b5303a8db49a089b036c2790eaafbc5fa3650bb61a278dbc335e27359678a3e35ca", 0x1000, 0x8}, {&(0x7f00000024c0)="d699a02ff82cab178e5c37ea4ad90dcd4259a167dcd7ef7dad110b5c4d2480d94e298f7ae9709f40bd3d2c283be81af3cecf2b3713cabfabf5d0a5848a8c7fd1a662aacc803e7ce764f510e48eaab2cca5a659f2f04753c7b964d07090a1e01244b4f32a06", 0x65, 0xa6}, {&(0x7f0000002540)="3c42eb71db77ab04377b1acd714f08210f3ea4eaa52783eb2bf7fcdf4fc0b3e771e1a7490fe59a3247e12c1d20484b3da04f1ef715d3f34f7f3d3182dca49725d0ac921c49265754c97504c627453024a5f94f410809a21902120f93be58cb850d35a77c78026247f055364123992b3b310f29fb27f15f826750955b79d08d515d250de5895deaa0ad41fc1956c5b98638", 0x91, 0x8000}, {&(0x7f0000002600)="c95097e4690fab779e07b9df7de30f4e090cb1f7e19aaedf0dfa11b0ed20133974bab469c5455a570dd47a2cf69f9571a061cdf9d4cbb98a8cd3d03d66bb696096a9e2445aa50b9d54004efe80a43f2a8215e71450ae369ad26caec3284b7ca84f4407925b468b64208a2cea73535d38b11d1c889a5da9d9aab18c4bc08de726ccadab03c5285384b6beebb83f00e315a043d7896596c43d8986b505956f", 0x9e, 0x10000}], 0x880, &(0x7f0000002780)='/dev/input/event#\x00') ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000000380)=""/4096) writev(r0, &(0x7f0000002b80)=[{&(0x7f00000027c0)="a815e297a48733ec38900274c22c083ad174cb2fa8f68a2cd9d82e0acc18067a24d24b56f3a7f9e36fc54fd9c8bcd89c17129170c97873944dd49d979997a4bdbc009b40005cd55046072951d20cb46317eabb0f9022a471756d10a74a8c7fc34232c229fca2", 0x66}, {&(0x7f0000002840)="c916095781800db812a08efbe0bd0a3ca6044991379b981db5356e32665008b2b0bf23f49ecc73b843ec8320032a9aee2e79d0eb4210721fff9b88446814c6502a05236c26fc5612efa86a0b3e6eb3bb645dc3fd796e5a48b1d646c4cd7880b882d458a6d2c17d518850b5d3555d219685c03f5ffd0439e76ef44176092e2d0ef786b6a592ea555526700d37557d2ab84bd2894a720e288f145ff044965ff77eca9c2836a940", 0xa6}, {&(0x7f0000002900)="6eca24203c8e2d5b7024bcfa70a27bc8edb9e5acd7f10670c70c1f0f37ea394ec562729b75ebbdcdd7be448d0b4a987d333de33e03e6c299eba29d129b60bfe9eee1a594904164def35f0a3c6165cb0d2f9df7f1b60c9aa7d4bc5d66de8bb018ee7d64d253f8c91a064b7e59eddcf9de4563fdb408c547672746b2", 0x7b}, {&(0x7f0000002980)="50f15ed63c6eb8857b602846715dec4436b0ddc7ef642228bc0a17d13ec8d9f7f30853b9ad7a953e79c4b3703e3e9726db661b5749ff78dfb89ba95bfacf645e47682e146a61d2979db6e674ec34ee4fb405d8f693ee09d4a45ba23ac4eac175e5188996a58e13e2b8f2565a742e05e9997cb19bb1d52dc282679e0ba80b3a678f96c3edbe389af523aab80bb1", 0x8d}, {&(0x7f0000002a40)="e4554343a4c14fdbdf27476d5b53395c3d482ce15fb1f66f338cf69bdf18d75000bba019ba1da5ab113a0b89489934e39167ea663135e8d05a09055b8aa630101dc8c668ffd078491bc42e9d6ef5d3cd68699f9c81facd9fe74039747f02c72a7ee505d5ea3ad457794cdb39df56254615c57810f0d7d4c72d7c5a943bc4dd4c22310eae5e717c6e145acba63070c32ff9f89ac7c783fff444cc2e8084e2e6126677b64b867cd7763866208eca7996c018349478bbe645e036e9f541aea48b06fff7641d64839cc723a05067a697e0d3bac36c49c579b4f1346e928a1b0baf2cd1e70418251ee9f728a8091d5b7de0550240ab6c", 0xf4}, {&(0x7f0000002b40)="bd139c753ecb", 0x6}], 0x6) close(r1) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000001400)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002cc0)={{{@in=@multicast1, @in6=@remote}}, {{@in=@dev}}}, &(0x7f0000002c80)=0xffffffffffffff8a) [ 323.830884] Memory cgroup out of memory: Kill process 22038 (syz-executor3) score 8252000 or sacrifice child [ 323.840924] Killed process 22038 (syz-executor3) total-vm:70472kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 323.852249] oom_reaper: reaped process 22038 (syz-executor3), now anon-rss:0kB, file-rss:32788kB, shmem-rss:0kB 03:35:22 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x20, 0x40000) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) 03:35:22 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x123000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000080)={0x6, 0x1, {0x0, 0x3, 0x1, 0x1, 0x2}}) flock(r0, 0x8) r4 = socket$alg(0x26, 0x5, 0x0) close(r4) r5 = socket$alg(0x26, 0x5, 0x0) r6 = gettid() r7 = gettid() kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r1, &(0x7f0000000140)={r3, r3, 0x4}) bind$alg(r5, &(0x7f0000f05000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x0, @random="0514a3d81b4a", "69713667726f30000000000000000200"}}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="c7beef9f5dd8b05b5ec261bfff35f6ac9acb926d529d3e26a9fc8b26856b520d838f04ed5f2de7acba1fb22ff576dfe4ad6f76e1ca0988d6099ea80968739df642f6fe032652d85b1f6bd5", 0x8) r8 = accept$alg(r4, 0x0, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) io_submit(r9, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r8, &(0x7f000007d000)="b3", 0x1}]) flock(r1, 0x8) dup3(r1, r2, 0x0) r10 = getegid() setgid(r10) 03:35:22 executing program 4: r0 = memfd_create(&(0x7f00000000c0)="23656d31232b007300b9e336747e88cb0ddb6d61575787a158486f11e136de47017c0a0b9f2643c9b02dfa63284e611a25eeec5d8b1aa01cc0887520074c1865b4cb2c8c34b40c7beed31d1faf764912e9eaeb324da35c56dbd3aaabb51515b2da08de33d3eb379f6d4dc80e2558b933eb1085a329cff61fbf4cbf7ba2564b", 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000000000), 0xffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x80000000004, 0x11, r0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000080)=0xe8) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000380)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f00000004c0)=0xe8) setresuid(r1, r2, r3) r4 = socket$kcm(0x2, 0x6, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r4) getsockopt$bt_hci(r4, 0x10d, 0x1, &(0x7f0000000200)=""/86, &(0x7f0000000140)=0x56) 03:35:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x40) r2 = socket$inet(0x2, 0x80002, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000040)={{0x2, 0x4e23, @remote}, {0x1, @remote}, 0x48, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 'lo\x00'}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) sendto$inet6(r3, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x1) 03:35:22 executing program 7: sched_setattr(0x0, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x6, 0x4, 0x4, 0x40, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x2c) [ 324.008437] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 324.017939] CPU: 1 PID: 22123 Comm: syz-executor3 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 324.026429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.035778] Call Trace: [ 324.038365] dump_stack+0x1c9/0x2b4 [ 324.041983] ? dump_stack_print_info.cold.2+0x52/0x52 [ 324.047167] ? trace_hardirqs_on+0x10/0x10 [ 324.051400] ? lock_downgrade+0x8f0/0x8f0 [ 324.055542] dump_header+0x246/0x123c [ 324.059330] ? percpu_ref_put_many+0x131/0x240 [ 324.063910] ? trace_hardirqs_on+0x10/0x10 [ 324.068132] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 324.073061] ? trace_hardirqs_on+0x10/0x10 [ 324.077282] ? mem_cgroup_iter+0x517/0x10c0 [ 324.081589] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 324.087112] ? css_next_child+0x1c3/0x620 [ 324.091244] ? trace_hardirqs_on+0x10/0x10 [ 324.095465] ? trace_hardirqs_on+0x10/0x10 [ 324.099686] ? trace_hardirqs_on+0x10/0x10 [ 324.103906] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 324.109704] ? css_next_child+0x1c3/0x620 [ 324.113836] ? find_lock_task_mm+0x230/0x4d0 [ 324.118239] ? cgroup_get_tree+0xb20/0xb20 [ 324.122637] ? lock_acquire+0x1e4/0x540 [ 324.126596] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 324.132118] ? task_will_free_mem+0x239/0xb70 [ 324.136600] ? lock_release+0xa30/0xa30 [ 324.140556] ? oom_badness+0x7d1/0xb00 [ 324.144430] ? ___ratelimit+0x36f/0x655 [ 324.148398] ? lock_downgrade+0x8f0/0x8f0 [ 324.152531] ? kasan_check_read+0x11/0x20 [ 324.156668] ? do_raw_spin_unlock+0xa7/0x2f0 [ 324.161074] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 324.165647] ? do_raw_spin_lock+0x200/0x200 [ 324.169953] ? oom_kill_process+0x24d/0x280 [ 324.174261] ? lock_downgrade+0x8f0/0x8f0 [ 324.178396] ? trace_hardirqs_on+0xd/0x10 [ 324.182528] ? ___ratelimit+0xaa/0x655 [ 324.186403] ? idr_get_free+0x10c0/0x10c0 [ 324.190536] ? kasan_check_write+0x14/0x20 [ 324.194756] ? do_raw_spin_lock+0xc1/0x200 [ 324.198976] oom_kill_process.cold.29+0x10/0x660 [ 324.203717] ? trace_hardirqs_on+0xd/0x10 [ 324.209417] ? _raw_spin_unlock_irq+0x27/0x70 [ 324.213893] ? css_task_iter_end+0x2ce/0x490 [ 324.218293] ? oom_evaluate_task+0x540/0x540 [ 324.222686] ? trace_hardirqs_on+0xd/0x10 [ 324.226817] ? _raw_spin_unlock_irq+0x27/0x70 [ 324.231294] ? oom_badness+0xb00/0xb00 [ 324.235177] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 324.239914] ? mem_cgroup_iter_break+0x30/0x30 [ 324.244487] out_of_memory+0x86d/0x1ad0 [ 324.248448] ? oom_killer_disable+0x3a0/0x3a0 [ 324.252933] ? kasan_check_read+0x11/0x20 [ 324.257061] ? do_raw_spin_unlock+0xa7/0x2f0 [ 324.261451] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 324.266019] ? kasan_check_write+0x14/0x20 [ 324.270238] ? do_raw_spin_lock+0xc1/0x200 [ 324.274459] mem_cgroup_out_of_memory+0x15e/0x210 [ 324.279292] ? memcg_memory_event+0x40/0x40 [ 324.283601] ? page_counter_try_charge+0x1c7/0x220 [ 324.288513] try_charge+0x720/0x1680 [ 324.292215] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 324.299127] ? lock_downgrade+0x8f0/0x8f0 [ 324.303268] ? lock_release+0xa30/0xa30 [ 324.307225] ? balance_dirty_pages+0x37b0/0x37b0 [ 324.313530] ? fs_reclaim_acquire+0x20/0x20 [ 324.317850] ? lock_downgrade+0x8f0/0x8f0 [ 324.322699] ? get_mem_cgroup_from_mm+0x209/0x440 [ 324.327537] ? get_mem_cgroup_from_page+0x190/0x190 [ 324.332553] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 324.337383] mem_cgroup_try_charge+0x4ff/0xa70 [ 324.341949] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 324.347473] ? mem_cgroup_protected+0xa60/0xa60 [ 324.352141] ? unlock_page+0x1d1/0x2c0 [ 324.356014] ? wake_up_page_bit+0x5b0/0x5b0 [ 324.360319] ? vm_mmap+0xc0/0xc0 [ 324.363676] ? up_read+0x1a/0x110 [ 324.367112] ? kasan_check_read+0x11/0x20 [ 324.371264] ? ext4_change_inode_journal_flag+0x3e0/0x3e0 [ 324.376797] ? pmd_val+0x88/0x100 [ 324.380241] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 324.385764] mem_cgroup_try_charge_delay+0x1d/0x90 [ 324.390687] __handle_mm_fault+0x25ba/0x4470 [ 324.395091] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 324.399923] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 324.405011] ? to_ratio+0x20/0x20 [ 324.408451] ? lock_acquire+0x1e4/0x540 [ 324.412418] ? handle_mm_fault+0x417/0xc80 [ 324.416637] ? lock_downgrade+0x8f0/0x8f0 [ 324.420769] ? lock_release+0xa30/0xa30 [ 324.424731] ? lock_release+0xa30/0xa30 [ 324.428689] ? pvclock_read_flags+0x160/0x160 [ 324.433168] ? lock_acquire+0x1e4/0x540 [ 324.437126] ? mem_cgroup_from_task+0xcb/0x1f0 [ 324.441705] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 324.446449] handle_mm_fault+0x53e/0xc80 [ 324.450499] ? __handle_mm_fault+0x4470/0x4470 [ 324.455067] ? find_vma+0x34/0x190 [ 324.458602] __do_page_fault+0x620/0xe50 [ 324.462652] ? mm_fault_error+0x380/0x380 [ 324.466802] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 324.472328] ? __x64_sys_clock_gettime+0x170/0x250 [ 324.477253] ? __ia32_sys_clock_settime+0x290/0x290 [ 324.482260] do_page_fault+0xf6/0x8c0 [ 324.486064] ? vmalloc_sync_all+0x30/0x30 [ 324.490194] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 324.495723] ? do_syscall_64+0x497/0x820 [ 324.499773] ? syscall_slow_exit_work+0x500/0x500 [ 324.504599] ? syscall_return_slowpath+0x5e0/0x5e0 [ 324.509513] ? syscall_return_slowpath+0x31d/0x5e0 [ 324.514430] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 324.519950] ? prepare_exit_to_usermode+0x291/0x3b0 [ 324.524950] ? page_fault+0x8/0x30 [ 324.528474] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 324.533300] ? page_fault+0x8/0x30 [ 324.536831] page_fault+0x1e/0x30 [ 324.540265] RIP: 0033:0x43dd41 03:35:23 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req={0x4df4, 0x5, 0x0, 0x1000}, 0x10) write$P9_RWRITE(r0, &(0x7f0000000040)={0x23632c1444759cc}, 0x7) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 324.543444] Code: 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e 88 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e <66> 89 0f 48 83 c6 02 48 83 c7 02 0f 1f 40 00 f6 c2 04 74 0c 8b 0e [ 324.562326] RSP: 002b:00007ffd8c720698 EFLAGS: 00010202 [ 324.567679] RAX: 0000000020002c00 RBX: fffffffffffffffe RCX: 000000000000642f [ 324.574941] RDX: 0000000000000012 RSI: 00000000007307e8 RDI: 0000000020002c00 [ 324.582192] RBP: 000000000072be80 R08: 0000000000000000 R09: 00000000000001da [ 324.589442] R10: 00007ffd8c720770 R11: 0000000000000246 R12: 00007ffd8c720770 [ 324.596690] R13: 0000004b6f17c15d R14: 000000000072be8c R15: 0000000000000000 [ 324.604193] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor2,pid=22122,uid=0 [ 324.618416] memory: usage 272kB, limit 0kB, failcnt 548 [ 324.623832] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 324.630612] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 324.636789] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 324.656347] Tasks state (memory values in pages): 03:35:23 executing program 5: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)="0200000001000000000000000200f30000000000", 0xfffffffffffffed9, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x181200) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x40, "2caaa207dc3cf28de01217b93feae4c1cc952146b665686ee9faeb481647e42ef2867a4bb3f9578fb89a0624bd46ca9b7980e002c5feacf6ba82a633f6de4ee7"}, &(0x7f0000000100)=0x48) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)={r1, 0x74, "a81d3ef9322a4d0cac5850df7a33f7810332cda5d45102ba953bff25cf474f0ef4ca80478deceebc086dc4a82e08407e22585e1471c2cf6289ce4dcb06a19ffc81a46e65938c140c231b59aec1ed90b14d4feeee2794e490fbbc7b9e070aab7733cca672e55c595706ce3a0bcf6ff6ddeace1215"}, &(0x7f00000001c0)=0x7c) [ 324.661229] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 324.670327] [ 22122] 0 22122 17585 8730 126976 0 0 syz-executor2 [ 324.679384] [ 22123] 0 22123 17585 8221 126976 0 0 syz-executor3 [ 324.688457] Memory cgroup out of memory: Kill process 22122 (syz-executor2) score 8761000 or sacrifice child [ 324.698498] Killed process 22122 (syz-executor2) total-vm:70340kB, anon-rss:2152kB, file-rss:32768kB, shmem-rss:0kB [ 324.711491] oom_reaper: reaped process 22122 (syz-executor2), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB 03:35:23 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x4) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") unshare(0x40000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) r1 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x9, 0x101040) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000180)) getpgrp(0xffffffffffffffff) r2 = getpid() r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netstat\x00') read(r3, &(0x7f00000002c0)=""/184, 0xb8) getsockopt$inet6_int(r3, 0x29, 0xff, &(0x7f0000000040), &(0x7f0000000140)=0x4) 03:35:23 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) getrusage(0xffffffffffffffff, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) prctl$getreaper(0x2d, &(0x7f0000000100)) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x0, &(0x7f0000000a00)=""/36) 03:35:23 executing program 6: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000440)={0x20000000}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000100)={0x2, 0xffffffffffffffff, 0x1}) accept4$alg(0xffffffffffffff9c, 0x0, 0x0, 0x800) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x400000, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_destroy(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x6, &(0x7f0000000180)=@raw=[@map={0x18, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @alu={0x7, 0x4, 0xd, 0x0, 0xb, 0xffffffffffffffe4}], &(0x7f00000001c0)='GPL\x00', 0x5, 0x5b, &(0x7f0000000200)=""/91, 0x41100, 0x1, [], 0x0, 0x7}, 0x48) ppoll(&(0x7f00000004c0), 0x397, &(0x7f0000000380), &(0x7f00000003c0)={0x8}, 0x8) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f000082f000)='./control\x00', 0xc0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000e4c000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r6, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r7 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000480)={0x7, 0x800, 0x10001, 0xffffffff}, 0x6) lseek(r6, 0xffffffffffffff7f, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) mlock2(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x1) tkill(r7, 0x1004000000016) close(r5) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000340)={0x1, 0x80000000}) 03:35:23 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x40044590, &(0x7f0000000380)=""/4096) close(r0) [ 324.833201] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 324.842875] CPU: 0 PID: 22123 Comm: syz-executor3 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 324.851376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.860727] Call Trace: [ 324.863351] dump_stack+0x1c9/0x2b4 [ 324.866987] ? dump_stack_print_info.cold.2+0x52/0x52 [ 324.872182] ? trace_hardirqs_on+0x10/0x10 [ 324.876419] dump_header+0x246/0x123c [ 324.880224] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 324.885152] ? trace_hardirqs_on+0x10/0x10 [ 324.889382] ? kasan_check_read+0x11/0x20 [ 324.893527] ? do_raw_spin_unlock+0xa7/0x2f0 [ 324.897940] ? trace_hardirqs_on+0x10/0x10 [ 324.902192] ? trace_hardirqs_on+0x10/0x10 [ 324.906437] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 324.911991] ? css_next_child+0x1c3/0x620 [ 324.916145] ? find_lock_task_mm+0x230/0x4d0 [ 324.920563] ? cgroup_get_tree+0xb20/0xb20 [ 324.924825] ? lock_acquire+0x1e4/0x540 [ 324.926288] IPVS: ftp: loaded support on port[0] = 21 [ 324.928803] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 324.928817] ? task_will_free_mem+0x239/0xb70 [ 324.928832] ? lock_release+0xa30/0xa30 [ 324.928849] ? oom_badness+0x7d1/0xb00 [ 324.951873] ? ___ratelimit+0x36f/0x655 [ 324.955856] ? lock_downgrade+0x8f0/0x8f0 [ 324.960010] ? kasan_check_read+0x11/0x20 [ 324.964164] ? do_raw_spin_unlock+0xa7/0x2f0 [ 324.968575] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 324.973161] ? do_raw_spin_lock+0x200/0x200 [ 324.977485] ? oom_kill_process+0x24d/0x280 [ 324.981808] ? lock_downgrade+0x8f0/0x8f0 [ 324.985971] ? trace_hardirqs_on+0xd/0x10 [ 324.990122] ? ___ratelimit+0xaa/0x655 [ 324.994014] ? idr_get_free+0x10c0/0x10c0 [ 324.998164] ? kasan_check_write+0x14/0x20 [ 325.002410] ? do_raw_spin_lock+0xc1/0x200 [ 325.006650] oom_kill_process.cold.29+0x10/0x660 [ 325.011409] ? trace_hardirqs_on+0xd/0x10 [ 325.015653] ? _raw_spin_unlock_irq+0x27/0x70 [ 325.020152] ? css_task_iter_end+0x2ce/0x490 [ 325.024564] ? oom_evaluate_task+0x540/0x540 [ 325.028116] IPVS: ftp: loaded support on port[0] = 21 [ 325.028978] ? trace_hardirqs_on+0xd/0x10 [ 325.028992] ? _raw_spin_unlock_irq+0x27/0x70 [ 325.029005] ? oom_badness+0xb00/0xb00 [ 325.029024] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 325.051508] ? mem_cgroup_iter_break+0x30/0x30 [ 325.056102] out_of_memory+0x86d/0x1ad0 [ 325.060084] ? oom_killer_disable+0x3a0/0x3a0 [ 325.064585] ? kasan_check_read+0x11/0x20 [ 325.068736] ? do_raw_spin_unlock+0xa7/0x2f0 [ 325.073146] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 325.077730] ? kasan_check_write+0x14/0x20 [ 325.081975] ? do_raw_spin_lock+0xc1/0x200 [ 325.086214] mem_cgroup_out_of_memory+0x15e/0x210 [ 325.091063] ? memcg_memory_event+0x40/0x40 [ 325.095398] ? page_counter_try_charge+0x1c7/0x220 [ 325.100327] try_charge+0x720/0x1680 [ 325.104047] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 325.110799] ? lock_downgrade+0x8f0/0x8f0 [ 325.114951] ? lock_release+0xa30/0xa30 [ 325.118930] ? balance_dirty_pages+0x37b0/0x37b0 [ 325.123687] ? fs_reclaim_acquire+0x20/0x20 [ 325.128013] ? lock_downgrade+0x8f0/0x8f0 [ 325.132161] ? get_mem_cgroup_from_mm+0x209/0x440 [ 325.137002] ? get_mem_cgroup_from_page+0x190/0x190 [ 325.142108] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 325.146956] mem_cgroup_try_charge+0x4ff/0xa70 [ 325.151539] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 325.156553] ? mem_cgroup_protected+0xa60/0xa60 [ 325.161225] ? unlock_page+0x1d1/0x2c0 [ 325.165111] ? wake_up_page_bit+0x5b0/0x5b0 [ 325.169432] ? vm_mmap+0xc0/0xc0 [ 325.172799] ? up_read+0x1a/0x110 [ 325.176250] ? kasan_check_read+0x11/0x20 03:35:23 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000000c0)={@empty, @local}, &(0x7f0000000100)=0xc) mount(&(0x7f0000000140)='./file0//ile0\x00', &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)=@known='trusted.syz\x00', &(0x7f0000000080)='cgroup2\x00', 0x8, 0x0) [ 325.180399] ? ext4_change_inode_journal_flag+0x3e0/0x3e0 [ 325.185936] ? pmd_val+0x88/0x100 [ 325.189399] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 325.194947] mem_cgroup_try_charge_delay+0x1d/0x90 [ 325.199893] __handle_mm_fault+0x25ba/0x4470 [ 325.204301] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 325.209145] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 325.214245] ? to_ratio+0x20/0x20 [ 325.217700] ? lock_acquire+0x1e4/0x540 [ 325.221675] ? handle_mm_fault+0x417/0xc80 [ 325.225912] ? lock_downgrade+0x8f0/0x8f0 [ 325.230064] ? lock_release+0xa30/0xa30 [ 325.234038] ? lock_release+0xa30/0xa30 [ 325.238014] ? pvclock_read_flags+0x160/0x160 [ 325.242505] ? lock_acquire+0x1e4/0x540 [ 325.246478] ? mem_cgroup_from_task+0xcb/0x1f0 [ 325.251054] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 325.255816] handle_mm_fault+0x53e/0xc80 [ 325.259877] ? __handle_mm_fault+0x4470/0x4470 [ 325.264463] ? find_vma+0x34/0x190 [ 325.268008] __do_page_fault+0x620/0xe50 [ 325.272167] ? mm_fault_error+0x380/0x380 [ 325.276316] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 325.281854] ? __x64_sys_clock_gettime+0x170/0x250 [ 325.286783] ? __ia32_sys_clock_settime+0x290/0x290 [ 325.291798] do_page_fault+0xf6/0x8c0 [ 325.295596] ? vmalloc_sync_all+0x30/0x30 [ 325.299753] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 325.305288] ? do_syscall_64+0x497/0x820 [ 325.309345] ? syscall_slow_exit_work+0x500/0x500 [ 325.314186] ? syscall_return_slowpath+0x5e0/0x5e0 [ 325.319115] ? syscall_return_slowpath+0x31d/0x5e0 [ 325.324043] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 325.329579] ? prepare_exit_to_usermode+0x291/0x3b0 [ 325.334595] ? page_fault+0x8/0x30 [ 325.338138] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 325.342983] ? page_fault+0x8/0x30 [ 325.346521] page_fault+0x1e/0x30 [ 325.349969] RIP: 0033:0x43dd41 [ 325.353157] Code: 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e 88 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e <66> 89 0f 48 83 c6 02 48 83 c7 02 0f 1f 40 00 f6 c2 04 74 0c 8b 0e [ 325.372059] RSP: 002b:00007ffd8c720698 EFLAGS: 00010202 [ 325.377421] RAX: 0000000020002c00 RBX: fffffffffffffffe RCX: 000000000000642f [ 325.384687] RDX: 0000000000000012 RSI: 00000000007307e8 RDI: 0000000020002c00 [ 325.391956] RBP: 000000000072be80 R08: 0000000000000000 R09: 00000000000001da [ 325.399222] R10: 00007ffd8c720770 R11: 0000000000000246 R12: 00007ffd8c720770 [ 325.406506] R13: 0000004b6f17c15d R14: 000000000072be8c R15: 0000000000000000 [ 325.414243] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor3,pid=22123,uid=0 [ 325.428518] memory: usage 272kB, limit 0kB, failcnt 554 [ 325.433907] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 325.440671] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 325.446829] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 325.466459] Tasks state (memory values in pages): [ 325.471318] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name 03:35:23 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x100, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000040)) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) r4 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000000380)=""/4096) close(r0) [ 325.476651] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 325.480214] [ 22123] 0 22123 17585 8221 126976 0 0 syz-executor3 [ 325.497393] Memory cgroup out of memory: Kill process 22123 (syz-executor3) score 8252000 or sacrifice child [ 325.507418] Killed process 22123 (syz-executor3) total-vm:70340kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 325.518466] oom_reaper: reaped process 22123 (syz-executor3), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB 03:35:24 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = shmget(0x0, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000000140)="580000001400192300bb4b80040d8c562806f0e67445ae9c85106a9643c218fe59a2e04a03ca8164243e800000000a215a0004fbf50dfff90003ed5e0000000000221f100001000700f8ffff0000ec6b0f536e0000000000", 0x58}], 0x1) 03:35:24 executing program 1: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) [ 325.617743] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app 03:35:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x10402, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x75, &(0x7f0000000000), 0x8) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x280000, 0x0) close(r2) close(r1) 03:35:24 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x8140, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = socket(0x10, 0x80002, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x10440) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000001c0)={0x0, 0x0, @pic={0x10000, 0x4, 0x4, 0xfffffffffffff001, 0x2, 0x0, 0x6, 0x3, 0x6, 0x4, 0x4, 0xf9, 0x5, 0x7ff, 0x0, 0x1ff}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv6_deladdr={0x2c, 0x15, 0x111, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @remote}}]}, 0x2c}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:35:24 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x40044590, &(0x7f0000000380)=""/4096) close(r0) 03:35:24 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a", 0x4) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1a1481) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21000400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000282600400000020ee020000000800010002000000080003005c0000000800030032a9ba1f7a71855c370000000400054d4d0001004e200000"], 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x4000084) r3 = accept$alg(r0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000200)={0x7, 0x1, 0xc6, 0x7, 0x3ff, 0xfffffffffffff6dd, 0x4, 0x1, 0x1000, 0x9, 0x2, 0x7fff}) poll(&(0x7f00000012c0)=[{r3}], 0x1, 0x318000000) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x1) recvmsg(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000001400)=""/123, 0x7b}, 0x0) [ 325.732380] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:35:24 executing program 5: r0 = socket$inet6(0xa, 0x4, 0x2) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000280), 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x4, 0x0, @ipv4=@multicast2=0xe0000014}]}]}, 0x20}}, 0x0) 03:35:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) socketpair(0x4, 0x80000, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000080)={r0}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000925000)=[{0x0, 0x0, &(0x7f00007e0000), 0x0, &(0x7f00001d7fd0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) read(r2, &(0x7f0000000140)=""/158, 0x9e) 03:35:24 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0xa, 0x0, 0xffffffffffffffff}, 0x2c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socketpair$inet(0x2, 0x5, 0x401, &(0x7f00000000c0)) socket$kcm(0xa, 0x5, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x410440, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000080)={0x95, 0x2}) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, &(0x7f0000000180), 0x84) 03:35:24 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x2, {0x2, 0x101, "8423b26bc26a7b7f925cec8e9328e4ae3a8e240eab05779f2cbe0ba92a8f6f157fb62253508ef5daac2237638756d0fa14741df9ea944c7b26679858d9c53ddca897a17ed6ebda2f2440526279c0da792c323bed07082960602652282b5c40cd74a1572d96d7e7139ac04abcd572d2d865272160aa62cfad7729602ef167d03e0662993d7f2e0ad467ea7f72d2045a0da97c0a3927da1b3912ea9c2468f60495ea42e583ee6424963aa57103a7337ade46bcc55b9f9fb2804e3ef8fa182aa3e2b806feace40ec2d59fce550b9de242a6ee9cfb4c59784b87933332fc09661fd0f89d36d6e7065d35483c5c79422958711f9a34dc453fa5dc2159dc300ccbad34", 0xb8, 0x8, 0x200, 0xd67, 0x7ff, 0xd737, 0x0, 0x1}, r1}}, 0x128) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000200)={0x4, [0x0, 0x0, 0x0, 0x0]}) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) vmsplice(r0, &(0x7f0000001400)=[{&(0x7f0000000240)="608d34ccc4db0efd70ed71f4f600939ada20d13699f4c5a2e12ae634eed311adea2106e1ad993a555f9b8af41ad4a334bf60060b57045c25f97955e9dcf01b41b2f75ce742a56653b5604fb2f32704ac267b6774c21437e5847cc0217e5b4931d8aab5a2779629b0a81fd77b7b90dc419fce01cbd571ab5d561789d24b898d2ca930f4720f7af42d7e290c381008408aa8d0b9c196f76bf72566c6531cca9f0e035c43cbfe6a54e7953d485036bef15be86f4881d66a825bb3b1f94474fd2ce73aad64", 0xc3}, {&(0x7f0000000340)="be037a13b63f7ee587bc774e06196ee5c11927cc2afc93dd62135bdb87db67dba027351c309ec217b59124d7094ac155f04fe68a4bab2b615ee85d839c7359667940261d3286f5be61e30f578871e20753001ca876641121b40c3cc56a90e7b5501619f3701fc1e1110a753440f200f621b63340f3e8051a826dfb0e849de2b3eea5dbfce454850d1c437eba73d2d61475e1535abd8ab0121a7a2dd882bc35e8646c657c5c63d3bb3fa505064b7c8e089fb88a5b0aef", 0xb6}, {&(0x7f0000000400)="a5f10a32079f40d1380be8dc84225e39350900ffad8a011c8c842d545944454afba564f29ed54fabd9dceee6898a5c8ec23ca3b537d72111ba30b08734f0c89f75b7ec7312122a3adc692f40c274cee4425338851cf00a9253ba50d48c02c71118b9b981b526ea6782f8f00ed28831dc19be8c9d04e04c8776d4037b5bd67ae37091c131a2b67e409583c3ea4aa3a75ab125b9fdfa31f5015d37fabdeb0e048e905ebd977e739cf13fdeaa574295aa755e6f9d4aadb4070603dd2be5ebd0ca5727095c65360cde692a4b408109f5b8537ec5c81ff367f3706d496ee77211587c8ee0a30bee4097b122735140ccb280b0a6b5554ea9b95629ae074d90629151a7cded90270c2d292742f51726e5fe0a5995d9b16b3812f6442e5e0461326dff4e5476bcf85c95cda782df3a8ea40b386d4fa8cbe05a139864e3be606aa6ab09b7d8f4144d6bd94fb83b6bd8d05eb06c597bb657ba75dde79ce53abf47ca94bf58726ffc68798fff8486803879e0c513d051a3628a3b76bde1d2791d56d426a4fb7c28c2e8e0cfdeb7dc5e6a41c4ac0d38d5cc793079248de8c3f13774e38f17a486996067629ee7b305d74bb0fd69f38c4b08adc4b0ec585d0b67aad553d5730d88b94a25261490a82d39fa5c83aee780e84be065aff861ceb910d68c2d3557173bdb4865924dcd6cb19467a16e68cfba609d372c7cd147eab23f1bc7a5ddd335bde37abfde906fa63fc8fabeb0237262b14221d0190c234bde76350b0eea198cc691e735091bc5e5ea095ae9b5b77a1b92d2302fcb32aa4288d63af818541d53e77d804e9c8ffcfcd0483abdce7966495ddefa60c9fae1ee71c6c6e2bfe3a2114a86e85e5ab5af20a8ce16436a28cef562736eaaf27aab8b09b4d591be25100e75b695015f8a2296bdc15fa7e131b467371fddf9bf02e199e78ce59f318c4b82f0c1408c43a35e6a51f232fae8b1745af8be1e7d576c303b6d55acd7b3c47b0c46048a63ea9a54da56fb767d5d84b18ccb14564f05729c067d31b55533fe915811aa7c831c2d39f6527cfa202fd490083df5d94396874e2aa4ab5153af72f660191e35b59f19c287c95c965e5d4f5331a55a2e2774e69773846baee68f7a7b996c0ea858ddf7764d961ef83f00c73d98528fb0db9dfc8c332f58f1cdfa0e3409fc36de1f6f62e4cdb6da1707aa9805c4083ccb2907f3b9ab031ed99d4e20203336ed05078ef32124e388ecabe1c93d37ebfbf2207050fadd7eac3048b06977226b1e6bca3fbf212e6b4442799df79360b64197f014f7ee05541e2c0552ebe88c5c4c6c48d20eba1c04bf5c444f9ee5c739477cb56a2b4044a4113afc8ea80ae6c9f527970d56f1b7bba5cf8c9dc694cdafa88fc5daa87b275474524ba302802db48dfd371ee4297864e7727902403767248bdbf6a7a916fce889f1ddb0467916a29d5c3be17e3a5402ef5c4ebca2fe4269c6e2e6a2f776ceef7332ea33d05cdbeaef7f543c058ec5ac7ec8329476fa63e54c7457513ec5305e6caa257558de79749bf443286b683dc796f95f35cac994a634625af1b74c960cd2a2bde47ecec2a783fca9ba7699f873fedc89c1c083d27658be1e14b13f009a1894fb96fb5504c9d231fb3b3636e4e7d996e6ff2b850af59c4d36fcea02aa05a53c5acebb4a7add378f348011f3be4e8fdcfa7fb934466a57ad3642b4fd2be2caa21b28f1af304e21a5d66b194be812ba54a4245d9d6c59389f1911b8e1fb6b90378db2add40a8445a9ee4ffc3e39e9b31b337c576ab84d9287bd39ff7d11054a86a4054dc3272965171e9a051468ef1a84da8f24a172d5c01ab3a812b9a7a9aec70f1238af4447f32acd81f7d2ccc965f18f6fe55d28f0413e85c6d80c0bf661d3fb3026cf0c0d62cf90858a3518ac588ddafa05611b6e4ede8aca77960ce818e9a8d12c2be2b3dce90173b43e15f3a330ff0c38af731dd5aa709052e91d6321e46b043c5aefe01eb19b168bffd51e935895c2d493a7937aaecef7c86a653dd8a691f533348240d3bbbd98e1b7b8841dace6f3d37f53b7a861972739bcf7dc272c2a1ba0ed6b33705e3b2a64d8e1b4cf7684e565299b2c4042162766f7c9954203050e9c80098ac503dfd933e74d3fad0ad484450d8b4c1b36bee53d02935816b96e1f64e4c604bada59ccf31c81d1628fd542eb15fc6ea61b8249da4ab879291712829a0b6a67fd5728099ac9744d783b64d5a7055eecd6b90475fc1f26401bb09491f01312b6ee785d69f05171f369dbd53c678df498e858763a9c871da29e363d21741c03b9ca89bf0805cb98fc4566a64bd06f94a996c28cf9ea822e89258e63d069139a639d2ae6761f17969b2c5478e2fea03f3b557502d9dcbb5e42c9b8cdeda14e084287bdd63a600531fb3737dc5bbec8dbb6a22ead74e577c38b27da9164c19627d6b3521b0dc03230f5b8b0edeb9e7263c4f28e73ec696473f948ca0d7f3b69f26d5e3b7e4d5d4bdea22c28033194a675a5d8fb00c9dcddecf37b08d890cfc0ebc2db50b7cfd9fc50233410382753aa4e1db1f01d0eca1ffe4c747eb7c7f21b631e137d869b95c35c73cece3c70200664a3071769e0eb9534058506ee11aab28aa496c40901b43608da5c4f2cecfba860a43dabb25ce70257bb790ee123ff8eb759b007f27c4e0476382678c662c2e6f2c3d47e32d2c2ad7447c35479defa14b688d3634384ccb74b937ab4fd492d9204dca223f1bf822b0ef86f27849fb10bada20be6fb8c0ef468b7cfa4b3d24ebdbc562112884dd06dee4ae5df090886a07cb7a0a4a261b3fb6a66bb26e7c91435b4fc8024e26df7de9651d924b429458d5381758da5feec3e830652dd8ce113e3fd6d1c2d3346b7c288b749bd1d376516e649619594e180956209a062fcac0f227793237377f08bd1d8784f5e2bd814bfdebe7bec1a81e6abd3cdc3f8631df08d48a3602aa4ed925f599f76d3ddd8f029912aa6e6f09cc838d5e2105a8b341f36fea5da54aa4603488e1e94ca6e91d0c1ac1a7f9778a67869d3b94b4f51cc38fbfd5d743251cdc7067ea04f39fb606d2d4def1afc87cc9b37fbed82272a21e459018c41d7d940a3f3f867430f46ed5c4048f355ff8ce110f31e78d34563ec2da6a396fa822097132c9706ed0dc527ee517687e0e01b8d19686933b08b2bd9771a4a12792c9e8ce3e18590f41ff750ddaf985127679a02858d79c2a55206b3ca85c9a9f7776781ba4a814dbf1fcb2e2f1b25852af267934be8bebfee2519dc0041cc89770e0a7a58442089e431c7be4336f92be63f803823bbc691293d4aca4b7883d04defd984e65aa51c97d0789e87e3fba6dfdf770238710285c87a04717f65ce6926a6b0cd7ab42b50ebe9ea5af40af9daf591248443546bc22fccf2c23b1fde5e0b9ca542c577b54737031643e89b1a10dafbcde690237a4c6e8ba91b66d2d0540684dd7361d03c81f47139d5d36efe98514ad88e76accd54b770fb4295bde4859f075c74e467af9886b468637be400549eecff6f9b8a64bd7eb470880de0154b0512b3dd3b8eb02c882a6a26ee2ea31d76bdb16a442f750045f26824e2e28b3a7418261c2d9385e9ea2af1b8bf7727d48ff3047676220150f172f11aecec724797b34037013a32a39ff82e9f7c7cf86c2d196fbe76c3aadbb0cbfbdbf3f7337a4fc9ad7716b90da0b5de6790579ffaf85df3eec6c26a60f7fa24b28b82845017d313252ec5c1284b43e6b16a8765af2fffba873162ddbecbb3e796fa7d6b9e1d4d6d82af551cccbb215ba506821ade5a4b261e8bed994579409b2107d1303f7a3b7fe96045e9c3f11f4b649944f7fc763bf621a5ac36b24ddb7fa5580bd214d8ecfc91dcd605cb611f2601cc0442d8641c17add4ddb721fae7d781a05f78427486efbac676192ab4f67914deb55bcf30478dde4e14367b3354b34b4f80efbbe4f54ffd545d3c97b90f8be0c5642bd5e03901f9370f4b0b592e4d161e5e630e2257af8a18a20d28ef5eb79ae06b63735228b24159a06a6de32fcbd1a6bac78e7299cba6529ffb549ffaa71cd98a8b495ae1eacb3205907cb3f3bc9231162148f170c574a81143b72016c653e2a7a8097b0a3aa77117848017715cc2b1ab54ee263e0a35e0758366a2fd7aa5d9317797845ccea5a66b1caef6f86c26f17f05ea2c4a24aa05e692b6dd49b83aa8eacdd71f59b28221d1476f8b6b24bde3ff1361221cebc49b5ad7879d37c6da996204ad0a6a1181d43041c8fb2e11e83dece3a1e301c159734c93ff59fdfe1b693c79881d7054d64ae9f0669940a0947bb085afd6b42400401f51b870a48d881fbe7e880c2ecedd74012b904e290bce768349b074e89575de9fbfe3910d96b091035fb7ad0f561e26a207caa7a4cf3fa7c181ae7964db8f7ce75097f50e9af1c0d45de4042f4b35ea8215fb999163ccfebc16c5bd720807f8c58a7966dee47451a93df6d7e4743bebcb1294a99208e03fce1aefa12e4a72a8ab4a28200f9ffc3f2ea4c11b40adc8aba31f5f176ef95598d164f1e64e0946bc5f79bd63d460fc7d9079fe481f38eb6d6f4789b102fc44bc2d3be5aa327fe148e2fa93b2721d8e4449ae4360dda41c277818a33a85cdc058050021fb77ecc1d6f1fdfcea56d4186a57ca3eec091f4d470d910c3ff41e05ed9a7bf3c39d59b41c34ade185e5a539d973adfbeacdd5caac77d19e93ef49e694f2d2567509c0aab479cc8db0752ad8d2b85badcd8c966a5395c0b9cb698e37100945d43e9dc91c9440cdbbc120b9adf40291b1f6064329a4b36383eca959ea71b09042d9542c9f932719ce0b257129312991f7ffbf6c401744d1e3a8b4f403d3b5b85f4d876f8cddf8f402f3602de84ca2426c175470a31213192d58ebe146b706bc165be7e7ff68a6f7bf5abf8ad3e0241abfd2d11a3c4b4ddb2db0206691129fd96b6e0d94e0fcb127679f7755deeb6437b7efe5d9f0f8cc6311040e34ce3a9937d5816a138491aadfbba1b52aa6f1cf9c857eca1d922cf39ff3f5567cc5977041f78811b42533d9c36f56f82fc7efbb719b4d761f7b8663a3394caaa28838edd5d018d691712484ff6fd55acae34998a0ddc0868a94daf541c7bcc15e68c4b6593faf8fe509b7e7951ab7c985f873899262449273130685a666fc61b5345d79b267661b078348f56bd3277a3179a8ef389d71a832a0a1beb868f716f3e7ac7ada06df95354adfd62863f13f648606326d656fa3a5952fe4c39ba6c29fd4a9cd50bcd1f2e4ec8b62ab0f3bf2dda11b15ebc146a61cd2817da29151bd8b898ff7e9d831dbd81301d6c7420b9594b83a5095b050e2487fac0f45d0faa85795ad0553d8e63a57829c42f48421a40b74fdde5a53162e33be28b109f62a9b0bc37756c083d38810daf2a6b002c75552fa56116e8916c0fc21947b637471533cebf42ba01ccdcc57675e81f756ab6a38e7d1e73036aebcf3b8e93c2839f5a31b22e949ba9b55ad476186d7f22b1e90dac9bf8ff44649cfdd2d1648f3d50ed6ce7292ef7c56ff9e478f48b3662c4ba19b8fa80b759c343be5b3fb1a94ffc27160c56b7b46ada63152e61a6e4c68dd22efc6a00828a892760088e0a08ff3cc7f7675904c06ab0238bf3ad5fca084bc606f94d73b7f47c3141b88a0eee597b895dd4f51ab57c5167245b0f99b4badb6c3e7bcb320eee9979e1bef57d2ba6ff60098686ef3b0e338bf6f2677a01239312790a338f0726a2c56dd6995b5704c7003eac27bbaf5b53bfe2e9b65207163b5b46eebe7911593", 0x1000}], 0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000001440)=""/46) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000001580)={{&(0x7f0000001480)=""/151, 0x97}, &(0x7f0000001540), 0x4}, 0x20) r2 = getgid() setfsgid(r2) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x4) r3 = socket$netlink(0x10, 0x3, 0x12) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001600)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000015c0), 0x13f}}, 0x20) getpeername$unix(r0, &(0x7f0000001640), &(0x7f00000016c0)=0x6e) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000001700)) ioctl(r0, 0x1, &(0x7f0000001740)="f3ececb3d6ee2ad47c7ddc8d73c5ad0938fa8a6a598c55a95e0c58073331c62ddc5b36082a3b8ab37cfa48d7377880b76f76ba47bc5277eafe23af4b3e764cc5c07c629de67294cd0e89a2e562ca98647e0bc10d12e90f853f8a48c86d4913e76eb10342c4aaab93378e27ce7ecde9fac58035abae5b879f9adb591f86de549e0b3a3bb8fcd1fc3a7189ad435d104368cb40c4ab3f4da506d7667b3b5b58d0b01808b1c221413dfde3d16a476e2d01c632ee10def6b7e621b530e0ccbfdf2a4d08178cdcab435cdf2da404c9c959") ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000001880)={r3, r3, 0x9345, 0x4, &(0x7f0000001840)="a3c1764d331a052892", 0x3f, 0x72c5, 0x100000000, 0xf72, 0x0, 0x0, 0x436a1fb6, "60347f0d74af3ef319a7adb57a924c04cf87549804044a43714091a615a59600634bc91d8bc50ada7b79aee98605947926a8ae3f81013dd98326d621477e937f120b847f72af"}) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000001900)=r0) r4 = getpgrp(0x0) setpriority(0x1, r4, 0x2a0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000001940)={{0x8001, 0x7f}, 'port0\x00', 0xa, 0x4, 0x200, 0x2ec, 0x101, 0x4fa7, 0x4, 0x0, 0x1, 0x86c}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001a40)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x38001}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x14, r6, 0x0, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000001b40)={0x0, 0xfffffffffffffffd, 0x0, 0x7, 0x6210f2a8}, &(0x7f0000001b80)=0x18) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000001bc0)=@assoc_id=r7, 0x4) mount$9p_rdma(&(0x7f0000001c00)='127.0.0.1\x00', &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)='9p\x00', 0x400, &(0x7f0000001cc0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@sq={'sq', 0x3d, 0xd95b}}, {@timeout={'timeout', 0x3d, 0x40}}, {@common=@cachetag={'cachetag', 0x3d, 'port0\x00'}}]}}) openat$audio(0xffffffffffffff9c, &(0x7f0000001d40)='/dev/audio\x00', 0xd0000, 0x0) r8 = openat$cgroup_ro(r5, &(0x7f0000001d80)='cgroup.events\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r8, 0x0, 0x487, &(0x7f0000001dc0), &(0x7f0000001e00)=0x30) 03:35:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000200)={0x3000, 0x5000}) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x6c, 0x9d2, 0xffffffffffffff7f, 0x2, 0x273c, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x273, 0x3, 0x800, 0x1f}, &(0x7f0000000180)=0x14) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/93) timerfd_settime(r0, 0x1, &(0x7f0000000340)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) flock(r0, 0x1) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x21d) getegid() perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, &(0x7f0000000040)=0x46b, 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) syz_open_dev$ndb(&(0x7f0000000500)='/dev/nbd#\x00', 0x0, 0x2400) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e23, 0x3, @mcast2, 0x6}, {0xa, 0x4e20, 0x412, @mcast1, 0x100}, 0x8, [0x6, 0x1, 0x3ffffffffffffe, 0x2, 0x203, 0xfffffffffffffffc, 0x9955, 0x40]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0xfffffffffffffffc, @ipv4={[], [], @multicast1}}, {0xa, 0x0, 0x0, @remote}}, 0x5c) [ 325.904323] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 03:35:24 executing program 7: r0 = socket$inet6(0xa, 0x800, 0x200) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @mcast1, 0xffffffff}, 0x1c) r1 = socket(0x8, 0x0, 0x82b1) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r3 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0x5452, &(0x7f00000002c0)={0x9, 0x0, 0x0, 0x0, &(0x7f0000000340)}) socketpair(0xf, 0x1, 0x1000, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000100)) 03:35:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100), r2, 0x0, 0x0, 0x1}}, 0x28) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x420382, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") unshare(0x3ffffffd) 03:35:24 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000040)="d6", 0x1) write(r2, &(0x7f0000000140), 0xff4b) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e21, 0x0, @remote, 0x7f}, {0xa, 0x4e23, 0xfffffffffffffffa, @empty, 0x100}, 0x5c, [0x1f, 0x7, 0x7ff, 0x80, 0x7fffffff, 0x2, 0x1ff, 0x7fffffff]}, 0x5c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e24, 0xbd9, @dev={0xfe, 0x80, [], 0x1b}, 0x81}}, 0x8, 0x3, 0x2, 0xb4ab4fa, 0x5}, &(0x7f0000000240)=0x98) 03:35:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x800, 0x0) accept$packet(r0, 0x0, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00009f2000)={&(0x7f000007cff4), 0xc, &(0x7f0000226000)={&(0x7f0000000000)={0x14, 0x18, 0x2ff, 0x0, 0x0, {0xa, 0x0, 0x4b9}}, 0x14}}, 0x0) [ 326.508098] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 326.517651] CPU: 1 PID: 22183 Comm: syz-executor3 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 326.526133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 326.535470] Call Trace: [ 326.538053] dump_stack+0x1c9/0x2b4 [ 326.541666] ? dump_stack_print_info.cold.2+0x52/0x52 [ 326.546836] ? trace_hardirqs_on+0x10/0x10 [ 326.551059] ? lock_downgrade+0x8f0/0x8f0 [ 326.555196] dump_header+0x246/0x123c [ 326.558982] ? percpu_ref_put_many+0x131/0x240 [ 326.563559] ? trace_hardirqs_on+0x10/0x10 [ 326.567785] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 326.572699] ? trace_hardirqs_on+0x10/0x10 [ 326.576920] ? mem_cgroup_iter+0x517/0x10c0 [ 326.581236] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 326.586766] ? css_next_child+0x1c3/0x620 [ 326.590902] ? trace_hardirqs_on+0x10/0x10 [ 326.595132] ? trace_hardirqs_on+0x10/0x10 [ 326.599355] ? trace_hardirqs_on+0x10/0x10 [ 326.603577] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 326.609100] ? css_next_child+0x1c3/0x620 [ 326.613237] ? find_lock_task_mm+0x230/0x4d0 [ 326.617638] ? cgroup_get_tree+0xb20/0xb20 [ 326.621883] ? lock_acquire+0x1e4/0x540 [ 326.625858] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 326.631394] ? task_will_free_mem+0x239/0xb70 [ 326.635892] ? lock_release+0xa30/0xa30 [ 326.639857] ? oom_badness+0x7d1/0xb00 [ 326.643738] ? ___ratelimit+0x36f/0x655 [ 326.647708] ? lock_downgrade+0x8f0/0x8f0 [ 326.651848] ? kasan_check_read+0x11/0x20 [ 326.655992] ? do_raw_spin_unlock+0xa7/0x2f0 [ 326.660411] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 326.664994] ? do_raw_spin_lock+0x200/0x200 [ 326.669316] ? oom_kill_process+0x24d/0x280 [ 326.673984] ? lock_downgrade+0x8f0/0x8f0 [ 326.679786] ? trace_hardirqs_on+0xd/0x10 [ 326.683937] ? ___ratelimit+0xaa/0x655 [ 326.687825] ? idr_get_free+0x10c0/0x10c0 [ 326.691977] ? kasan_check_write+0x14/0x20 [ 326.696220] ? do_raw_spin_lock+0xc1/0x200 [ 326.700468] oom_kill_process.cold.29+0x10/0x660 [ 326.705235] ? trace_hardirqs_on+0xd/0x10 [ 326.709389] ? _raw_spin_unlock_irq+0x27/0x70 [ 326.713906] ? css_task_iter_end+0x2ce/0x490 [ 326.718321] ? oom_evaluate_task+0x540/0x540 [ 326.722742] ? trace_hardirqs_on+0xd/0x10 [ 326.726895] ? _raw_spin_unlock_irq+0x27/0x70 [ 326.731399] ? oom_badness+0xb00/0xb00 [ 326.735293] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 326.740059] ? mem_cgroup_iter_break+0x30/0x30 [ 326.744656] out_of_memory+0x86d/0x1ad0 [ 326.748631] ? oom_killer_disable+0x3a0/0x3a0 [ 326.753116] ? kasan_check_read+0x11/0x20 [ 326.757255] ? do_raw_spin_unlock+0xa7/0x2f0 [ 326.761646] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 326.766219] ? kasan_check_write+0x14/0x20 [ 326.770440] ? do_raw_spin_lock+0xc1/0x200 [ 326.774656] mem_cgroup_out_of_memory+0x15e/0x210 [ 326.779480] ? memcg_memory_event+0x40/0x40 [ 326.783788] ? page_counter_try_charge+0x1c7/0x220 [ 326.788702] try_charge+0x720/0x1680 [ 326.792422] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 326.799164] ? lock_downgrade+0x8f0/0x8f0 [ 326.803303] ? lock_release+0xa30/0xa30 [ 326.808237] ? __anon_vma_prepare+0xc4/0x720 [ 326.812634] ? handle_mm_fault+0x53e/0xc80 [ 326.816854] ? fs_reclaim_acquire+0x20/0x20 [ 326.821166] ? lock_downgrade+0x8f0/0x8f0 [ 326.825302] ? percpu_ref_put_many+0x119/0x240 [ 326.829882] ? get_mem_cgroup_from_mm+0x209/0x440 [ 326.834711] ? get_mem_cgroup_from_page+0x190/0x190 [ 326.839717] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 326.844546] ? lock_acquire+0x1e4/0x540 [ 326.848523] mem_cgroup_try_charge+0x4ff/0xa70 [ 326.853093] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 326.858103] ? mem_cgroup_protected+0xa60/0xa60 [ 326.862757] ? up_write+0x7b/0x220 [ 326.866285] ? up_read+0x110/0x110 [ 326.869821] ? __anon_vma_prepare+0x36d/0x720 [ 326.874309] ? pmd_val+0x88/0x100 [ 326.877758] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 326.883285] mem_cgroup_try_charge_delay+0x1d/0x90 [ 326.888212] __handle_mm_fault+0x25ba/0x4470 [ 326.892619] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 326.897463] ? cap_mmap_addr+0x52/0x130 [ 326.901428] ? userfaultfd_unmap_complete+0x32a/0x510 [ 326.906605] ? security_mmap_addr+0x80/0xa0 [ 326.910914] ? lock_acquire+0x1e4/0x540 [ 326.914874] ? handle_mm_fault+0x417/0xc80 [ 326.919102] ? lock_downgrade+0x8f0/0x8f0 [ 326.923235] ? lock_release+0xa30/0xa30 [ 326.927196] ? lock_release+0xa30/0xa30 [ 326.931175] ? down_read_killable+0x200/0x200 [ 326.935652] ? mem_cgroup_from_task+0xcb/0x1f0 [ 326.940404] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 326.945152] handle_mm_fault+0x53e/0xc80 [ 326.949198] ? __handle_mm_fault+0x4470/0x4470 [ 326.953774] ? find_vma+0x34/0x190 [ 326.957298] __do_page_fault+0x620/0xe50 [ 326.961355] ? mm_fault_error+0x380/0x380 [ 326.965486] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 326.971009] ? __x64_sys_clock_gettime+0x170/0x250 [ 326.975923] ? __ia32_sys_clock_settime+0x290/0x290 [ 326.980923] do_page_fault+0xf6/0x8c0 [ 326.984706] ? vmalloc_sync_all+0x30/0x30 [ 326.988838] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 326.994356] ? do_syscall_64+0x497/0x820 [ 326.998414] ? syscall_return_slowpath+0x5e0/0x5e0 [ 327.003328] ? syscall_return_slowpath+0x31d/0x5e0 [ 327.008342] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 327.013396] ? prepare_exit_to_usermode+0x291/0x3b0 [ 327.018404] ? page_fault+0x8/0x30 [ 327.021934] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 327.026758] ? page_fault+0x8/0x30 [ 327.030296] page_fault+0x1e/0x30 [ 327.033746] RIP: 0033:0x40e16f [ 327.036995] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 327.055892] RSP: 002b:00007ffd8c7205b0 EFLAGS: 00010206 [ 327.061243] RAX: 00007f3313243000 RBX: 0000000000020000 RCX: 00000000004569aa [ 327.068502] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 327.075756] RBP: 00007ffd8c720690 R08: ffffffffffffffff R09: 0000000000000000 [ 327.083011] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8c720780 [ 327.090265] R13: 00007f3313263700 R14: 000000000072bf2c R15: 0000000000000001 [ 327.097732] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor3,pid=22183,uid=0 [ 327.112086] memory: usage 272kB, limit 0kB, failcnt 573 [ 327.117479] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 327.124273] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 327.130445] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 327.149981] Tasks state (memory values in pages): [ 327.154861] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 327.163740] [ 22183] 0 22183 17618 8221 126976 0 0 syz-executor3 [ 327.172800] [ 22201] 0 22201 17618 8218 126976 0 0 syz-executor2 [ 327.181933] Memory cgroup out of memory: Kill process 22183 (syz-executor3) score 8252000 or sacrifice child [ 327.191956] Killed process 22183 (syz-executor3) total-vm:70472kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 327.203045] oom_reaper: reaped process 22183 (syz-executor3), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB [ 327.213398] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 327.222840] CPU: 0 PID: 22201 Comm: syz-executor2 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 327.231317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 327.240927] Call Trace: [ 327.243502] dump_stack+0x1c9/0x2b4 [ 327.247116] ? dump_stack_print_info.cold.2+0x52/0x52 [ 327.252293] ? trace_hardirqs_on+0x10/0x10 [ 327.256520] ? do_raw_spin_unlock+0xa7/0x2f0 [ 327.260919] dump_header+0x246/0x123c [ 327.264715] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 327.269648] ? trace_hardirqs_on+0x10/0x10 [ 327.273870] ? trace_hardirqs_on+0x10/0x10 [ 327.278095] ? trace_hardirqs_on+0x10/0x10 [ 327.282316] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 327.287837] ? css_next_child+0x1c3/0x620 [ 327.291968] ? find_lock_task_mm+0x230/0x4d0 [ 327.296361] ? cgroup_get_tree+0xb20/0xb20 [ 327.300589] ? lock_acquire+0x1e4/0x540 [ 327.304563] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 327.310086] ? task_will_free_mem+0x239/0xb70 [ 327.314573] ? lock_release+0xa30/0xa30 [ 327.318531] ? oom_badness+0x7d1/0xb00 [ 327.322416] ? ___ratelimit+0x36f/0x655 [ 327.326375] ? lock_downgrade+0x8f0/0x8f0 [ 327.330519] ? kasan_check_read+0x11/0x20 [ 327.334650] ? do_raw_spin_unlock+0xa7/0x2f0 [ 327.339051] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 327.343614] ? do_raw_spin_lock+0x200/0x200 [ 327.348008] ? oom_kill_process+0x24d/0x280 [ 327.352319] ? lock_downgrade+0x8f0/0x8f0 [ 327.356451] ? trace_hardirqs_on+0xd/0x10 [ 327.360589] ? ___ratelimit+0xaa/0x655 [ 327.364462] ? idr_get_free+0x10c0/0x10c0 [ 327.368595] ? kasan_check_write+0x14/0x20 [ 327.372821] ? do_raw_spin_lock+0xc1/0x200 [ 327.377068] oom_kill_process.cold.29+0x10/0x660 [ 327.381811] ? trace_hardirqs_on+0xd/0x10 [ 327.385953] ? _raw_spin_unlock_irq+0x27/0x70 [ 327.390434] ? css_task_iter_end+0x2ce/0x490 [ 327.394826] ? oom_evaluate_task+0x540/0x540 [ 327.399217] ? trace_hardirqs_on+0xd/0x10 [ 327.403348] ? _raw_spin_unlock_irq+0x27/0x70 [ 327.407829] ? oom_badness+0xb00/0xb00 [ 327.411817] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 327.416579] ? mem_cgroup_iter_break+0x30/0x30 [ 327.421153] out_of_memory+0x86d/0x1ad0 [ 327.425122] ? oom_killer_disable+0x3a0/0x3a0 [ 327.429602] ? do_raw_spin_unlock+0xa7/0x2f0 [ 327.434011] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 327.438583] ? kasan_check_write+0x14/0x20 [ 327.442811] ? do_raw_spin_lock+0xc1/0x200 [ 327.447040] mem_cgroup_out_of_memory+0x15e/0x210 [ 327.451878] ? memcg_memory_event+0x40/0x40 [ 327.456187] ? page_counter_try_charge+0x1c7/0x220 [ 327.461100] try_charge+0x720/0x1680 [ 327.464821] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 327.471563] ? lock_downgrade+0x8f0/0x8f0 [ 327.475696] ? lock_release+0xa30/0xa30 [ 327.479654] ? __anon_vma_prepare+0xc4/0x720 [ 327.484046] ? handle_mm_fault+0x53e/0xc80 [ 327.488267] ? fs_reclaim_acquire+0x20/0x20 [ 327.492590] ? lock_downgrade+0x8f0/0x8f0 [ 327.497476] ? percpu_ref_put_many+0x119/0x240 [ 327.502062] ? get_mem_cgroup_from_mm+0x209/0x440 [ 327.506900] ? get_mem_cgroup_from_page+0x190/0x190 [ 327.511917] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 327.516739] ? lock_acquire+0x1e4/0x540 [ 327.520699] mem_cgroup_try_charge+0x4ff/0xa70 [ 327.525265] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 327.530275] ? mem_cgroup_protected+0xa60/0xa60 [ 327.534933] ? up_write+0x7b/0x220 [ 327.538452] ? up_read+0x110/0x110 [ 327.541976] ? __anon_vma_prepare+0x36d/0x720 [ 327.546455] ? pmd_val+0x88/0x100 [ 327.549893] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 327.555413] mem_cgroup_try_charge_delay+0x1d/0x90 [ 327.560327] __handle_mm_fault+0x25ba/0x4470 [ 327.564720] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 327.569548] ? cap_mmap_addr+0x52/0x130 [ 327.573511] ? userfaultfd_unmap_complete+0x32a/0x510 [ 327.578699] ? security_mmap_addr+0x80/0xa0 [ 327.583024] ? lock_acquire+0x1e4/0x540 [ 327.586982] ? handle_mm_fault+0x417/0xc80 [ 327.591208] ? lock_downgrade+0x8f0/0x8f0 [ 327.595337] ? lock_release+0xa30/0xa30 [ 327.599297] ? lock_release+0xa30/0xa30 [ 327.603256] ? down_read_killable+0x200/0x200 [ 327.607740] ? mem_cgroup_from_task+0xcb/0x1f0 [ 327.612306] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 327.617048] handle_mm_fault+0x53e/0xc80 [ 327.621109] ? __handle_mm_fault+0x4470/0x4470 [ 327.625674] ? find_vma+0x34/0x190 [ 327.629207] __do_page_fault+0x620/0xe50 [ 327.633253] ? mm_fault_error+0x380/0x380 [ 327.637384] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 327.642908] ? __x64_sys_clock_gettime+0x170/0x250 [ 327.647821] ? __ia32_sys_clock_settime+0x290/0x290 [ 327.652840] do_page_fault+0xf6/0x8c0 [ 327.656652] ? vmalloc_sync_all+0x30/0x30 [ 327.660789] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 327.666322] ? do_syscall_64+0x497/0x820 [ 327.670364] ? syscall_slow_exit_work+0x500/0x500 [ 327.675187] ? syscall_return_slowpath+0x5e0/0x5e0 [ 327.680104] ? syscall_return_slowpath+0x31d/0x5e0 [ 327.685016] ? prepare_exit_to_usermode+0x291/0x3b0 [ 327.690015] ? page_fault+0x8/0x30 [ 327.693552] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 327.698379] ? page_fault+0x8/0x30 [ 327.701907] page_fault+0x1e/0x30 [ 327.705341] RIP: 0033:0x40e16f [ 327.708516] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 327.727411] RSP: 002b:00007ffe1f3c3010 EFLAGS: 00010206 [ 327.732754] RAX: 00007f91cf350000 RBX: 0000000000020000 RCX: 00000000004569aa [ 327.740001] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 327.747250] RBP: 00007ffe1f3c30f0 R08: ffffffffffffffff R09: 0000000000000000 [ 327.754499] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1f3c31e0 [ 327.761759] R13: 00007f91cf370700 R14: 000000000072bf2c R15: 0000000000000001 [ 327.769447] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor2,pid=22201,uid=0 [ 327.783727] memory: usage 272kB, limit 0kB, failcnt 582 [ 327.789107] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 327.795869] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 327.802022] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 327.821555] Tasks state (memory values in pages): [ 327.826397] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 327.835262] [ 22201] 0 22201 17618 8218 126976 0 0 syz-executor2 [ 327.844273] Memory cgroup out of memory: Kill process 22201 (syz-executor2) score 8249000 or sacrifice child 03:35:26 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x200000000800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000380)=""/4096) close(r0) 03:35:26 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x21100) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0x101}}, 0x0, 0xfff, 0x0, "019f39dcabde648f53e18863259d1775aae826918e3687b5bcdadd7ead0bbac43757802a76f821a1f0ad88c583523526284a6509afe6b980e6e6ca6cba6b0f00c990d61aad5bc52138ffd45268c032c5"}, 0xd8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 03:35:26 executing program 0: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x400000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3, 0x402) write$binfmt_elf32(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="d5454c4e00000000000000000000ab973ed78489e77d0000000000003800000000000000010000000000200000000000000000008a983105b4ab735d000000000000000000000000040000000000000000000000000000004d2b50218c7d2c66cb7bb171400ec95cc576b090c6"], 0x58) ioctl$VT_WAITACTIVE(r2, 0x5607) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000006840)={'ifb0\x00'}) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000040)={0x0, @multicast2, 0x4e21, 0x0, 'dh\x00', 0x4, 0x2831, 0x5e}, 0x2c) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r2) 03:35:26 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x240000, 0x0) epoll_pwait(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000f52ff8), 0x8) mount$9p_virtio(&(0x7f0000000000)='self.mime_type+\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x40, &(0x7f00000000c0)={'trans=virtio,', {[{@cache_loose='cache=loose'}, {@cache_fscache='cache=fscache'}, {@debug={'debug', 0x3d, 0x6}}, {@privport='privport'}]}}) 03:35:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1d}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x5d}, [@ldst={0x7}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x450, &(0x7f000000cf3d)=""/195}, 0x48) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040), 0x10) 03:35:26 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x40044590, &(0x7f0000000380)=""/4096) close(r0) 03:35:26 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x3, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) fcntl$setown(r0, 0x8, r1) 03:35:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0xc0000100, 0x0, 0x40000108]}) r3 = memfd_create(&(0x7f0000000040)='/dev/kvm\x00', 0x2) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000080)) [ 327.854277] Killed process 22201 (syz-executor2) total-vm:70472kB, anon-rss:104kB, file-rss:32768kB, shmem-rss:0kB [ 327.865268] oom_reaper: reaped process 22201 (syz-executor2), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB 03:35:26 executing program 1: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x3, &(0x7f00000010c0)=""/4096, &(0x7f0000000000)=0x10dc) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x3, 0x2a001) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000001c0), 0x2) write$P9_RXATTRWALK(r1, &(0x7f0000000200)={0xf, 0x1f, 0x1, 0x9}, 0xf) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x9, 0x0, 0x3b2, 0x3, 0xffffffffffffffba, 0x1, 0x1, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000100)={r2, 0x62, "f5df879bf9e6d7672becae24b317bfe14c22314d33c12fbddc6b557ca4e3c3fef88d7265102a6f405c001a659717c28989d9c01210272e0643e5b20df1dc11e05b48213aaa5e8776df83d75b36298b1fbabb1aade949b44ad54cd83886ff4fab8826"}, &(0x7f0000000180)=0x6a) 03:35:26 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x0) ioctl(r0, 0x8000000000008912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x7, &(0x7f0000ad2000), &(0x7f0000000080)=0x23c) 03:35:26 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x20, 0x800) mknodat(r0, &(0x7f0000000080)='./file1\x00', 0x21, 0x81) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x3000000000000, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000540)="edab22010b42c3877649dc677d987b3dc3fb9f6f61179ed31cd58d11125ce05d9e58ca8fc42ba459d4e17a3c5abbb5f708813ffb7d676a3e10010c5e4b2faf639708a53ee0ed6815aeb1", 0x4a, 0x7}], 0x8004, &(0x7f0000000680)) 03:35:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f00000001c0)="baf80c66b8348d5d8c66efbafc0c66b80050000066efbaf80c66b894d7388e66efbafc0ced0f2241660fd4b8479f66b9800000c00f326635008000000f300f01f00f6fd2d35ceb66b9150200000f320f01b00000", 0x54}], 0x1, 0x0, &(0x7f0000000e40), 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000f00)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000080)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f00000000c0)) 03:35:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0x400, 0x3, 0x80, 0x10000, 0x1, 0x3, 0x9, 0x5, 0x100, 0x4}) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 03:35:26 executing program 1: socket$inet(0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001700), 0x0, &(0x7f00000017c0)=""/83, 0x53}, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x2}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xc2) getsockname$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00003e2000/0x2000)=nil, 0x2000}, 0x1}) clone(0x0, &(0x7f0000000480), &(0x7f0000000080), &(0x7f0000001000), &(0x7f0000000200)) read(r0, &(0x7f0000000400)=""/100, 0x64) 03:35:26 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000)={0xfffffffffffffeff}, 0x8) 03:35:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000200)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000dc0000)) fcntl$setstatus(r0, 0x4, 0x42c00) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000939ff4)={0x2000201f}) [ 328.810793] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 328.820226] CPU: 1 PID: 22274 Comm: syz-executor3 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 328.828716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.838053] Call Trace: [ 328.840634] dump_stack+0x1c9/0x2b4 [ 328.844248] ? dump_stack_print_info.cold.2+0x52/0x52 [ 328.849424] ? trace_hardirqs_on+0x10/0x10 [ 328.853642] ? lock_downgrade+0x8f0/0x8f0 [ 328.857776] dump_header+0x246/0x123c [ 328.861567] ? percpu_ref_put_many+0x131/0x240 [ 328.866144] ? trace_hardirqs_on+0x10/0x10 [ 328.870378] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 328.875304] ? trace_hardirqs_on+0x10/0x10 [ 328.879544] ? mem_cgroup_iter+0x517/0x10c0 [ 328.883867] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 328.889404] ? css_next_child+0x1c3/0x620 [ 328.893569] ? trace_hardirqs_on+0x10/0x10 [ 328.897816] ? trace_hardirqs_on+0x10/0x10 [ 328.902039] ? trace_hardirqs_on+0x10/0x10 [ 328.906278] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 328.911826] ? css_next_child+0x1c3/0x620 [ 328.915976] ? find_lock_task_mm+0x230/0x4d0 [ 328.920385] ? cgroup_get_tree+0xb20/0xb20 [ 328.924615] ? lock_acquire+0x1e4/0x540 [ 328.928586] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 328.934113] ? task_will_free_mem+0x239/0xb70 [ 328.938612] ? lock_release+0xa30/0xa30 [ 328.942580] ? oom_badness+0x7d1/0xb00 [ 328.946452] ? ___ratelimit+0x36f/0x655 [ 328.950410] ? lock_downgrade+0x8f0/0x8f0 [ 328.954542] ? kasan_check_read+0x11/0x20 [ 328.958678] ? do_raw_spin_unlock+0xa7/0x2f0 [ 328.963074] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 328.967642] ? do_raw_spin_lock+0x200/0x200 [ 328.971949] ? oom_kill_process+0x24d/0x280 [ 328.976268] ? lock_downgrade+0x8f0/0x8f0 [ 328.980420] ? trace_hardirqs_on+0xd/0x10 [ 328.984571] ? ___ratelimit+0xaa/0x655 [ 328.988454] ? idr_get_free+0x10c0/0x10c0 [ 328.992594] ? kasan_check_write+0x14/0x20 [ 328.996832] ? do_raw_spin_lock+0xc1/0x200 [ 329.001070] oom_kill_process.cold.29+0x10/0x660 [ 329.005845] ? trace_hardirqs_on+0xd/0x10 [ 329.009989] ? _raw_spin_unlock_irq+0x27/0x70 [ 329.014471] ? css_task_iter_end+0x2ce/0x490 [ 329.018867] ? oom_evaluate_task+0x540/0x540 [ 329.023272] ? trace_hardirqs_on+0xd/0x10 [ 329.027405] ? _raw_spin_unlock_irq+0x27/0x70 [ 329.031884] ? oom_badness+0xb00/0xb00 [ 329.035765] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 329.040504] ? mem_cgroup_iter_break+0x30/0x30 [ 329.045082] out_of_memory+0x86d/0x1ad0 [ 329.049040] ? oom_killer_disable+0x3a0/0x3a0 [ 329.053516] ? kasan_check_read+0x11/0x20 [ 329.057647] ? do_raw_spin_unlock+0xa7/0x2f0 [ 329.062051] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 329.066616] ? kasan_check_write+0x14/0x20 [ 329.070831] ? do_raw_spin_lock+0xc1/0x200 [ 329.075057] mem_cgroup_out_of_memory+0x15e/0x210 [ 329.079889] ? memcg_memory_event+0x40/0x40 [ 329.084201] ? page_counter_try_charge+0x1c7/0x220 [ 329.089125] try_charge+0x720/0x1680 [ 329.092838] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 329.099583] ? lock_downgrade+0x8f0/0x8f0 [ 329.103717] ? lock_release+0xa30/0xa30 [ 329.107681] ? __anon_vma_prepare+0xc4/0x720 [ 329.112093] ? handle_mm_fault+0x53e/0xc80 [ 329.116333] ? fs_reclaim_acquire+0x20/0x20 [ 329.120663] ? lock_downgrade+0x8f0/0x8f0 [ 329.124815] ? percpu_ref_put_many+0x119/0x240 [ 329.129402] ? get_mem_cgroup_from_mm+0x209/0x440 [ 329.134247] ? get_mem_cgroup_from_page+0x190/0x190 [ 329.139267] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 329.144107] ? lock_acquire+0x1e4/0x540 [ 329.148090] mem_cgroup_try_charge+0x4ff/0xa70 [ 329.152691] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 329.157742] ? mem_cgroup_protected+0xa60/0xa60 [ 329.162420] ? up_write+0x7b/0x220 [ 329.165966] ? up_read+0x110/0x110 [ 329.169515] ? __anon_vma_prepare+0x36d/0x720 [ 329.174016] ? pmd_val+0x88/0x100 [ 329.177476] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 329.183029] mem_cgroup_try_charge_delay+0x1d/0x90 [ 329.187971] __handle_mm_fault+0x25ba/0x4470 [ 329.192386] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 329.197213] ? cap_mmap_addr+0x52/0x130 [ 329.201172] ? userfaultfd_unmap_complete+0x32a/0x510 [ 329.206343] ? security_mmap_addr+0x80/0xa0 [ 329.210669] ? lock_acquire+0x1e4/0x540 [ 329.214637] ? handle_mm_fault+0x417/0xc80 [ 329.218865] ? lock_downgrade+0x8f0/0x8f0 [ 329.223003] ? lock_release+0xa30/0xa30 [ 329.226971] ? lock_release+0xa30/0xa30 [ 329.230931] ? down_read_killable+0x200/0x200 [ 329.235410] ? mem_cgroup_from_task+0xcb/0x1f0 [ 329.239985] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 329.244758] handle_mm_fault+0x53e/0xc80 [ 329.248810] ? __handle_mm_fault+0x4470/0x4470 [ 329.253379] ? find_vma+0x34/0x190 [ 329.256904] __do_page_fault+0x620/0xe50 [ 329.260958] ? mm_fault_error+0x380/0x380 [ 329.265102] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 329.270621] ? __x64_sys_clock_gettime+0x170/0x250 [ 329.275540] ? __ia32_sys_clock_settime+0x290/0x290 [ 329.280566] do_page_fault+0xf6/0x8c0 [ 329.284362] ? vmalloc_sync_all+0x30/0x30 [ 329.288493] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 329.294027] ? do_syscall_64+0x497/0x820 [ 329.298160] ? syscall_return_slowpath+0x5e0/0x5e0 [ 329.303082] ? syscall_return_slowpath+0x31d/0x5e0 [ 329.308004] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 329.313005] ? prepare_exit_to_usermode+0x291/0x3b0 [ 329.318015] ? page_fault+0x8/0x30 [ 329.321542] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 329.326376] ? page_fault+0x8/0x30 [ 329.330547] page_fault+0x1e/0x30 [ 329.333987] RIP: 0033:0x40e16f [ 329.337161] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 329.356055] RSP: 002b:00007ffd8c7205b0 EFLAGS: 00010206 [ 329.361399] RAX: 00007f3313243000 RBX: 0000000000020000 RCX: 00000000004569aa [ 329.368655] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 329.375914] RBP: 00007ffd8c720690 R08: ffffffffffffffff R09: 0000000000000000 [ 329.383164] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8c720780 [ 329.390416] R13: 00007f3313263700 R14: 000000000072bf2c R15: 0000000000000001 [ 329.398139] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor3,pid=22274,uid=0 [ 329.412412] memory: usage 244kB, limit 0kB, failcnt 599 [ 329.417819] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 329.424605] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 329.430800] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 329.450362] Tasks state (memory values in pages): [ 329.455224] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 329.464113] [ 22274] 0 22274 17618 8221 126976 0 0 syz-executor3 [ 329.473161] [ 22290] 0 22290 17618 8218 126976 0 0 syz-executor2 [ 329.482204] Memory cgroup out of memory: Kill process 22274 (syz-executor3) score 8252000 or sacrifice child [ 329.492231] Killed process 22274 (syz-executor3) total-vm:70472kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 329.504016] oom_reaper: reaped process 22274 (syz-executor3), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB [ 329.514488] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 329.524027] CPU: 0 PID: 22290 Comm: syz-executor2 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 329.532501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.541854] Call Trace: [ 329.544432] dump_stack+0x1c9/0x2b4 [ 329.548045] ? dump_stack_print_info.cold.2+0x52/0x52 [ 329.553223] ? trace_hardirqs_on+0x10/0x10 [ 329.557452] ? lock_downgrade+0x8f0/0x8f0 [ 329.561612] dump_header+0x246/0x123c [ 329.565428] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 329.570343] ? trace_hardirqs_on+0x10/0x10 [ 329.574567] ? kasan_check_read+0x11/0x20 [ 329.578707] ? do_raw_spin_unlock+0xa7/0x2f0 [ 329.583109] ? trace_hardirqs_on+0x10/0x10 [ 329.587330] ? trace_hardirqs_on+0x10/0x10 [ 329.591567] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 329.597097] ? css_next_child+0x1c3/0x620 [ 329.601226] ? find_lock_task_mm+0x230/0x4d0 [ 329.605617] ? cgroup_get_tree+0xb20/0xb20 [ 329.609836] ? lock_acquire+0x1e4/0x540 [ 329.613818] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 329.619347] ? task_will_free_mem+0x239/0xb70 [ 329.623835] ? lock_release+0xa30/0xa30 [ 329.627797] ? oom_badness+0x7d1/0xb00 [ 329.631668] ? ___ratelimit+0x36f/0x655 [ 329.635634] ? lock_downgrade+0x8f0/0x8f0 [ 329.639793] ? kasan_check_read+0x11/0x20 [ 329.643944] ? do_raw_spin_unlock+0xa7/0x2f0 [ 329.648347] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 329.652915] ? do_raw_spin_lock+0x200/0x200 [ 329.657234] ? oom_kill_process+0x24d/0x280 [ 329.661554] ? lock_downgrade+0x8f0/0x8f0 [ 329.665690] ? trace_hardirqs_on+0xd/0x10 [ 329.669822] ? ___ratelimit+0xaa/0x655 [ 329.673706] ? idr_get_free+0x10c0/0x10c0 [ 329.677841] ? kasan_check_write+0x14/0x20 [ 329.682080] ? do_raw_spin_lock+0xc1/0x200 [ 329.686322] oom_kill_process.cold.29+0x10/0x660 [ 329.691066] ? trace_hardirqs_on+0xd/0x10 [ 329.695200] ? _raw_spin_unlock_irq+0x27/0x70 [ 329.699677] ? css_task_iter_end+0x2ce/0x490 [ 329.704078] ? oom_evaluate_task+0x540/0x540 [ 329.708477] ? trace_hardirqs_on+0xd/0x10 [ 329.712618] ? _raw_spin_unlock_irq+0x27/0x70 [ 329.717095] ? oom_badness+0xb00/0xb00 [ 329.720965] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 329.725718] ? mem_cgroup_iter_break+0x30/0x30 [ 329.730291] out_of_memory+0x86d/0x1ad0 [ 329.734369] ? oom_killer_disable+0x3a0/0x3a0 [ 329.738878] ? kasan_check_read+0x11/0x20 [ 329.743030] ? do_raw_spin_unlock+0xa7/0x2f0 [ 329.747433] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 329.752007] ? kasan_check_write+0x14/0x20 [ 329.756224] ? do_raw_spin_lock+0xc1/0x200 [ 329.760454] mem_cgroup_out_of_memory+0x15e/0x210 [ 329.765281] ? memcg_memory_event+0x40/0x40 [ 329.769591] ? page_counter_try_charge+0x1c7/0x220 [ 329.774504] try_charge+0x720/0x1680 [ 329.778207] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 329.784946] ? lock_downgrade+0x8f0/0x8f0 [ 329.789083] ? lock_release+0xa30/0xa30 [ 329.793052] ? __anon_vma_prepare+0xc4/0x720 [ 329.797454] ? handle_mm_fault+0x53e/0xc80 [ 329.801674] ? fs_reclaim_acquire+0x20/0x20 [ 329.805993] ? lock_downgrade+0x8f0/0x8f0 [ 329.810132] ? percpu_ref_put_many+0x119/0x240 [ 329.814719] ? get_mem_cgroup_from_mm+0x209/0x440 [ 329.819550] ? get_mem_cgroup_from_page+0x190/0x190 [ 329.824566] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 329.829401] ? lock_acquire+0x1e4/0x540 [ 329.833357] mem_cgroup_try_charge+0x4ff/0xa70 [ 329.837923] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 329.842924] ? mem_cgroup_protected+0xa60/0xa60 [ 329.847580] ? up_write+0x7b/0x220 [ 329.851108] ? up_read+0x110/0x110 [ 329.854635] ? __anon_vma_prepare+0x36d/0x720 [ 329.859122] ? pmd_val+0x88/0x100 [ 329.862587] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 329.868144] mem_cgroup_try_charge_delay+0x1d/0x90 [ 329.873071] __handle_mm_fault+0x25ba/0x4470 [ 329.877465] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 329.882300] ? cap_mmap_addr+0x52/0x130 [ 329.886289] ? userfaultfd_unmap_complete+0x32a/0x510 [ 329.891472] ? security_mmap_addr+0x80/0xa0 [ 329.896400] ? lock_acquire+0x1e4/0x540 [ 329.900358] ? handle_mm_fault+0x417/0xc80 [ 329.904578] ? lock_downgrade+0x8f0/0x8f0 [ 329.908710] ? lock_release+0xa30/0xa30 [ 329.912667] ? lock_release+0xa30/0xa30 [ 329.916626] ? down_read_killable+0x200/0x200 [ 329.921106] ? mem_cgroup_from_task+0xcb/0x1f0 [ 329.925671] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 329.930413] handle_mm_fault+0x53e/0xc80 [ 329.934466] ? __handle_mm_fault+0x4470/0x4470 [ 329.939034] ? find_vma+0x34/0x190 [ 329.942743] __do_page_fault+0x620/0xe50 [ 329.946806] ? mm_fault_error+0x380/0x380 [ 329.950940] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 329.956457] ? __x64_sys_clock_gettime+0x170/0x250 [ 329.961379] ? __ia32_sys_clock_settime+0x290/0x290 [ 329.966384] do_page_fault+0xf6/0x8c0 [ 329.970169] ? vmalloc_sync_all+0x30/0x30 [ 329.974311] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 329.979839] ? do_syscall_64+0x497/0x820 [ 329.983890] ? syscall_slow_exit_work+0x500/0x500 [ 329.988734] ? syscall_return_slowpath+0x5e0/0x5e0 [ 329.993662] ? syscall_return_slowpath+0x31d/0x5e0 [ 329.998586] ? prepare_exit_to_usermode+0x291/0x3b0 [ 330.003589] ? page_fault+0x8/0x30 [ 330.007139] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 330.011973] ? page_fault+0x8/0x30 [ 330.015497] page_fault+0x1e/0x30 [ 330.018940] RIP: 0033:0x40e16f [ 330.022116] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 330.041010] RSP: 002b:00007ffe1f3c3010 EFLAGS: 00010206 [ 330.046358] RAX: 00007f91cf350000 RBX: 0000000000020000 RCX: 00000000004569aa [ 330.053612] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 330.061920] RBP: 00007ffe1f3c30f0 R08: ffffffffffffffff R09: 0000000000000000 [ 330.069182] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1f3c31e0 [ 330.076435] R13: 00007f91cf370700 R14: 000000000072bf2c R15: 0000000000000001 [ 330.083739] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor2,pid=22290,uid=0 [ 330.098011] memory: usage 244kB, limit 0kB, failcnt 822 [ 330.103381] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 330.110310] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 330.116469] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 330.136018] Tasks state (memory values in pages): [ 330.140870] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 330.149761] [ 22290] 0 22290 17618 8218 126976 0 0 syz-executor2 03:35:28 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) recvfrom$packet(r1, &(0x7f0000000000), 0x0, 0x10041, &(0x7f0000000140)={0x11, 0x1f, r4, 0x1, 0x1, 0x6, @local}, 0x14) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000380)=""/4096) close(r0) 03:35:28 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118a0"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000c8277b7aca000000000000000000000000000500000000000000d9950000000000000000000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 03:35:28 executing program 5: r0 = socket$inet6(0xa, 0x80000, 0x8000000) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") shmget(0x2, 0x2000, 0x5400124a, &(0x7f0000ffe000/0x2000)=nil) 03:35:28 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="2835d1eba5155f79bb5c79a29889709cfcdcbdc8b92663b17bf2df2cb3"], 0x1) 03:35:28 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000034000)={0x2, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000000ffc)=0x90) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68) 03:35:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000032000103000000000000000000003f99b157ddff349c00000b00020000000000000000000c0002000000000000000000"], 0x2c}}, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x200400, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880200000a0120002dbd7000fddbdf25050000045c020d00259c7c322ad105c7149bd8b655898d1bd9e385ba11dd3e68a4efcbecee5baa232f347ed8cf210052f3e60cbff16ff8ea5edea8541ff1b89c01684e415b2f77f7693583cb22588a0ed1ef72d3eb445650b60f3fee52a4d88aa5b1421b923bfaa04825bbf14aa7ad817f66d360d961919010280c1784b82109ec969afad9860d3b6bacca00824d1da8ab2242efc7f483df8eaf622726ba69bcd07bb2cc5475e3d88facac01da161ba89492cbc471b5e5d1fb9a0f08003700", @ANYRES32=r0, @ANYBLOB="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"], 0x288}, 0x1, 0x0, 0x0, 0x4000000}, 0x48080) 03:35:28 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x40044590, &(0x7f0000000380)=""/4096) close(r0) 03:35:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x10, &(0x7f000079bffc), &(0x7f0000000000)=0x4) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0xe0, 0x420001) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="88000000", @ANYRES16=r3, @ANYBLOB="00022dbd7000fcdbdf250b00000008000600000000000c000200080006007f0000001400010008000500020000000800090037000000080004004000000044000100080004004e200000080009000600000008000b007369700014000300ac1414bb00000000000000000000000014000300fe8000000000000000000000000000aada6c4e7aeb525d2ad2999f7a62b5a6e83e3c8e2faa8f8432b27c799b3f4446c27a5fdeb4cbe6baa1a2424edec10721b510deb12884c924a31a87c31797b9149c824961492f6c1975270f592af3d2a81c"], 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x20040080) writev(r0, &(0x7f0000000200), 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x7f, @loopback, 0x4}, {0xa, 0x4e23, 0xb0f, @local, 0x100000000}, r4, 0x6}}, 0x48) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40, 0x0) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000080)={0xcaa, 0x8}) [ 330.158791] Memory cgroup out of memory: Kill process 22290 (syz-executor2) score 8249000 or sacrifice child [ 330.168817] Killed process 22290 (syz-executor2) total-vm:70472kB, anon-rss:104kB, file-rss:32768kB, shmem-rss:0kB [ 330.179808] oom_reaper: reaped process 22290 (syz-executor2), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB 03:35:28 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000000)=""/226) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000001c40), 0xc, &(0x7f0000001c80)={&(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000000000fa0000007f000000629053d9d2caeca356dabbe749e489021aa0ffe5cfdb0541b38d3d7a1d72756c1af57417fccfd1a948810a53bc09c4a9c5bbcb1da81691fe4e5e43ae9a561827f043d2a32ad2c3", @ANYRES32=0x0, @ANYBLOB="000000000000000010001200080001007369740004000200"], 0x30}}, 0x0) 03:35:28 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100c0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x98, r1, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1d000) poll(&(0x7f0000000080), 0x0, 0x0) socketpair(0x8, 0x6, 0x300000000, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000002c0)={{0x2, 0x1a}, 0x2}, 0x10) 03:35:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x2, 0x800) ioctl$RTC_AIE_OFF(r0, 0x7002) r1 = syz_open_dev$mouse(&(0x7f00000003c0)='/dev/input/mouse#\x00', 0x1, 0x3fe) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) socket$netlink(0x10, 0x3, 0x400400000) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) 03:35:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d66593ae164c990a0028e", 0x10) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xc5c3b6aa) write$P9_RSYMLINK(r1, &(0x7f0000000080)={0x14, 0x11, 0x2, {0x20, 0x4, 0x7}}, 0x14) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/4096, 0x1002}], 0x34, &(0x7f0000001400)=""/123, 0x2000147b}, 0x0) 03:35:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/168, 0xa8}, {&(0x7f0000000140)=""/229, 0xe5}], 0x2, 0x0, 0x0, 0xfffffffffffffffb}, 0x81}], 0x1, 0x40002000, &(0x7f00000002c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = fcntl$dupfd(r1, 0x406, r1) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x4}}, 0xa) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000340)={@multicast1, @broadcast, 0x0}, &(0x7f0000000380)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x3, 0x27}}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000240)=""/153, 0x4, 0x0, [], r3}, 0x48) recvmmsg(r1, &(0x7f00000032c0)=[{{&(0x7f0000003000)=@pptp={0x0, 0x0, {0x0, @rand_addr}}, 0x80, &(0x7f0000003280)}}], 0x1, 0x0, &(0x7f0000003400)) syz_open_dev$mice(&(0x7f0000000400)='/dev/input/mice\x00', 0x0, 0x200) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000300)=0x7, 0x4) 03:35:28 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="020b00000400000000000000feffffff02001800000004d59d4d7f0000000000fe5b5064fac4c9f1c5446de0b47bd02f06cc9ea3877ae4ccd3576b5750ca10e5170418a3e89d7351a2f8bdb25bd58bed57675a05fbc669b3f4077fb953b7d2f32a8f0bbfb60c3d40a6dc77376237ed86c9af1d2883199bf8a8"], 0x20}}, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xe02c, 0x20000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) [ 330.245297] netlink: 24 bytes leftover after parsing attributes in process `syz-executor4'. [ 330.253924] tc_dump_action: action bad kind [ 330.259925] netlink: 24 bytes leftover after parsing attributes in process `syz-executor4'. [ 330.268498] tc_dump_action: action bad kind 03:35:28 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@generic={0x3, 0x2}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair(0xf, 0x2, 0x148c000000000000, &(0x7f0000000040)={0xffffffffffffffff}) read$FUSE(r2, &(0x7f00000003c0), 0x1000) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha256_mb\x00'}, 0x58) r3 = accept4(r0, 0x0, &(0x7f0000000000)=0xffffffffffffff91, 0x0) recvmmsg(r3, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:35:28 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5b5f, 0x1}) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x1000) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x80, 0x0) [ 331.141973] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 331.151434] CPU: 0 PID: 22361 Comm: syz-executor3 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 331.159940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.169285] Call Trace: [ 331.171871] dump_stack+0x1c9/0x2b4 [ 331.175495] ? dump_stack_print_info.cold.2+0x52/0x52 [ 331.180676] ? trace_hardirqs_on+0x10/0x10 [ 331.184897] ? lock_downgrade+0x8f0/0x8f0 [ 331.189035] dump_header+0x246/0x123c [ 331.192829] ? percpu_ref_put_many+0x131/0x240 [ 331.197407] ? trace_hardirqs_on+0x10/0x10 [ 331.201651] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 331.206593] ? trace_hardirqs_on+0x10/0x10 [ 331.210835] ? mem_cgroup_iter+0x517/0x10c0 [ 331.215142] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 331.220661] ? css_next_child+0x1c3/0x620 [ 331.224815] ? trace_hardirqs_on+0x10/0x10 [ 331.229044] ? trace_hardirqs_on+0x10/0x10 [ 331.233261] ? trace_hardirqs_on+0x10/0x10 [ 331.237477] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 331.243023] ? css_next_child+0x1c3/0x620 [ 331.247157] ? find_lock_task_mm+0x230/0x4d0 [ 331.251558] ? cgroup_get_tree+0xb20/0xb20 [ 331.255786] ? lock_acquire+0x1e4/0x540 [ 331.259744] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 331.265277] ? task_will_free_mem+0x239/0xb70 [ 331.269766] ? lock_release+0xa30/0xa30 [ 331.273728] ? oom_badness+0x7d1/0xb00 [ 331.277607] ? ___ratelimit+0x36f/0x655 [ 331.281575] ? lock_downgrade+0x8f0/0x8f0 [ 331.285715] ? kasan_check_read+0x11/0x20 [ 331.289846] ? do_raw_spin_unlock+0xa7/0x2f0 [ 331.294238] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 331.298804] ? do_raw_spin_lock+0x200/0x200 [ 331.303108] ? oom_kill_process+0x24d/0x280 [ 331.307427] ? lock_downgrade+0x8f0/0x8f0 [ 331.311571] ? trace_hardirqs_on+0xd/0x10 [ 331.315716] ? ___ratelimit+0xaa/0x655 [ 331.319591] ? idr_get_free+0x10c0/0x10c0 [ 331.323822] ? kasan_check_write+0x14/0x20 [ 331.328038] ? do_raw_spin_lock+0xc1/0x200 [ 331.332269] oom_kill_process.cold.29+0x10/0x660 [ 331.337027] ? trace_hardirqs_on+0xd/0x10 [ 331.341158] ? _raw_spin_unlock_irq+0x27/0x70 [ 331.345644] ? css_task_iter_end+0x2ce/0x490 [ 331.350050] ? oom_evaluate_task+0x540/0x540 [ 331.354455] ? trace_hardirqs_on+0xd/0x10 [ 331.358592] ? _raw_spin_unlock_irq+0x27/0x70 [ 331.363075] ? oom_badness+0xb00/0xb00 [ 331.366945] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 331.371688] ? mem_cgroup_iter_break+0x30/0x30 [ 331.376259] out_of_memory+0x86d/0x1ad0 [ 331.380217] ? oom_killer_disable+0x3a0/0x3a0 [ 331.384715] ? kasan_check_read+0x11/0x20 [ 331.388850] ? do_raw_spin_unlock+0xa7/0x2f0 [ 331.393241] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 331.397809] ? kasan_check_write+0x14/0x20 [ 331.402028] ? do_raw_spin_lock+0xc1/0x200 [ 331.406258] mem_cgroup_out_of_memory+0x15e/0x210 [ 331.411084] ? memcg_memory_event+0x40/0x40 [ 331.415391] ? page_counter_try_charge+0x1c7/0x220 [ 331.420318] try_charge+0x720/0x1680 [ 331.424043] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 331.430805] ? lock_downgrade+0x8f0/0x8f0 [ 331.434951] ? lock_release+0xa30/0xa30 [ 331.438913] ? __anon_vma_prepare+0xc4/0x720 [ 331.443307] ? handle_mm_fault+0x53e/0xc80 [ 331.447531] ? fs_reclaim_acquire+0x20/0x20 [ 331.451840] ? lock_downgrade+0x8f0/0x8f0 [ 331.455980] ? percpu_ref_put_many+0x119/0x240 [ 331.460562] ? get_mem_cgroup_from_mm+0x209/0x440 [ 331.465391] ? get_mem_cgroup_from_page+0x190/0x190 [ 331.470391] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 331.475216] ? lock_acquire+0x1e4/0x540 [ 331.479176] mem_cgroup_try_charge+0x4ff/0xa70 [ 331.483752] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 331.488762] ? mem_cgroup_protected+0xa60/0xa60 [ 331.493414] ? up_write+0x7b/0x220 [ 331.496936] ? up_read+0x110/0x110 [ 331.501337] ? __anon_vma_prepare+0x36d/0x720 [ 331.505826] ? pmd_val+0x88/0x100 [ 331.509274] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 331.514817] mem_cgroup_try_charge_delay+0x1d/0x90 [ 331.519747] __handle_mm_fault+0x25ba/0x4470 [ 331.524235] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 331.529059] ? cap_mmap_addr+0x52/0x130 [ 331.533031] ? userfaultfd_unmap_complete+0x32a/0x510 [ 331.538206] ? security_mmap_addr+0x80/0xa0 [ 331.542527] ? lock_acquire+0x1e4/0x540 [ 331.546497] ? handle_mm_fault+0x417/0xc80 [ 331.550734] ? lock_downgrade+0x8f0/0x8f0 [ 331.554865] ? lock_release+0xa30/0xa30 [ 331.558844] ? lock_release+0xa30/0xa30 [ 331.562807] ? down_read_killable+0x200/0x200 [ 331.567287] ? mem_cgroup_from_task+0xcb/0x1f0 [ 331.571861] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 331.576607] handle_mm_fault+0x53e/0xc80 [ 331.580673] ? __handle_mm_fault+0x4470/0x4470 [ 331.585263] ? find_vma+0x34/0x190 [ 331.588785] __do_page_fault+0x620/0xe50 [ 331.592838] ? mm_fault_error+0x380/0x380 [ 331.596974] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 331.602495] ? __x64_sys_clock_gettime+0x170/0x250 [ 331.607407] ? __ia32_sys_clock_settime+0x290/0x290 [ 331.612427] do_page_fault+0xf6/0x8c0 [ 331.616225] ? vmalloc_sync_all+0x30/0x30 [ 331.620356] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 331.625883] ? do_syscall_64+0x497/0x820 [ 331.629949] ? syscall_slow_exit_work+0x500/0x500 [ 331.634783] ? syscall_return_slowpath+0x5e0/0x5e0 [ 331.639704] ? syscall_return_slowpath+0x31d/0x5e0 [ 331.644625] ? prepare_exit_to_usermode+0x291/0x3b0 [ 331.649634] ? page_fault+0x8/0x30 [ 331.653160] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 331.657997] ? page_fault+0x8/0x30 [ 331.661537] page_fault+0x1e/0x30 [ 331.664980] RIP: 0033:0x40e16f [ 331.668174] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 331.687067] RSP: 002b:00007ffd8c7205b0 EFLAGS: 00010206 [ 331.692416] RAX: 00007f3313243000 RBX: 0000000000020000 RCX: 00000000004569aa [ 331.699675] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 331.706933] RBP: 00007ffd8c720690 R08: ffffffffffffffff R09: 0000000000000000 [ 331.714186] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8c720780 [ 331.721451] R13: 00007f3313263700 R14: 000000000072bf2c R15: 0000000000000001 [ 331.729475] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor3,pid=22361,uid=0 [ 331.744129] memory: usage 236kB, limit 0kB, failcnt 839 [ 331.749645] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 331.756441] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 331.762596] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 331.782642] Tasks state (memory values in pages): [ 331.787734] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 331.796648] [ 22361] 0 22361 17618 8221 126976 0 0 syz-executor3 [ 331.805700] [ 22374] 0 22374 17618 8218 126976 0 0 syz-executor2 [ 331.814746] Memory cgroup out of memory: Kill process 22361 (syz-executor3) score 8252000 or sacrifice child [ 331.824763] Killed process 22361 (syz-executor3) total-vm:70472kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 331.835809] oom_reaper: reaped process 22361 (syz-executor3), now anon-rss:0kB, file-rss:32788kB, shmem-rss:0kB [ 331.837161] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 331.855823] CPU: 0 PID: 22374 Comm: syz-executor2 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 331.864303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.873754] Call Trace: [ 331.876348] dump_stack+0x1c9/0x2b4 [ 331.879962] ? dump_stack_print_info.cold.2+0x52/0x52 [ 331.885133] ? trace_hardirqs_on+0x10/0x10 [ 331.889350] ? do_raw_spin_unlock+0xa7/0x2f0 [ 331.893745] dump_header+0x246/0x123c [ 331.897538] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 331.902457] ? trace_hardirqs_on+0x10/0x10 [ 331.906675] ? trace_hardirqs_on+0x10/0x10 [ 331.910899] ? trace_hardirqs_on+0x10/0x10 [ 331.915119] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 331.920638] ? css_next_child+0x1c3/0x620 [ 331.924767] ? find_lock_task_mm+0x230/0x4d0 [ 331.929180] ? cgroup_get_tree+0xb20/0xb20 [ 331.933410] ? lock_acquire+0x1e4/0x540 [ 331.937380] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 331.942903] ? task_will_free_mem+0x239/0xb70 [ 331.947381] ? lock_release+0xa30/0xa30 [ 331.951339] ? oom_badness+0x7d1/0xb00 [ 331.955224] ? ___ratelimit+0x36f/0x655 [ 331.959182] ? lock_downgrade+0x8f0/0x8f0 [ 331.963313] ? kasan_check_read+0x11/0x20 [ 331.967447] ? do_raw_spin_unlock+0xa7/0x2f0 [ 331.971837] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 331.976400] ? do_raw_spin_lock+0x200/0x200 [ 331.980718] ? oom_kill_process+0x24d/0x280 [ 331.985026] ? lock_downgrade+0x8f0/0x8f0 [ 331.989156] ? trace_hardirqs_on+0xd/0x10 [ 331.993292] ? ___ratelimit+0xaa/0x655 [ 331.997161] ? idr_get_free+0x10c0/0x10c0 [ 332.001298] ? kasan_check_write+0x14/0x20 [ 332.005512] ? do_raw_spin_lock+0xc1/0x200 [ 332.009728] oom_kill_process.cold.29+0x10/0x660 [ 332.014473] ? trace_hardirqs_on+0xd/0x10 [ 332.018600] ? _raw_spin_unlock_irq+0x27/0x70 [ 332.023076] ? css_task_iter_end+0x2ce/0x490 [ 332.027463] ? oom_evaluate_task+0x540/0x540 [ 332.031862] ? trace_hardirqs_on+0xd/0x10 [ 332.035987] ? _raw_spin_unlock_irq+0x27/0x70 [ 332.040471] ? oom_badness+0xb00/0xb00 [ 332.044353] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 332.049102] ? mem_cgroup_iter_break+0x30/0x30 [ 332.053699] ? lock_downgrade+0x8f0/0x8f0 [ 332.057855] out_of_memory+0x86d/0x1ad0 [ 332.061909] ? oom_killer_disable+0x3a0/0x3a0 [ 332.066385] ? do_raw_spin_unlock+0xa7/0x2f0 [ 332.070769] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 332.075335] ? kasan_check_write+0x14/0x20 [ 332.079556] ? do_raw_spin_lock+0xc1/0x200 [ 332.083778] mem_cgroup_out_of_memory+0x15e/0x210 [ 332.088604] ? memcg_memory_event+0x40/0x40 [ 332.093430] ? page_counter_try_charge+0x1c7/0x220 [ 332.098341] try_charge+0x720/0x1680 [ 332.102059] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 332.108794] ? lock_downgrade+0x8f0/0x8f0 [ 332.112923] ? lock_release+0xa30/0xa30 [ 332.116876] ? __anon_vma_prepare+0xc4/0x720 [ 332.121265] ? handle_mm_fault+0x53e/0xc80 [ 332.125489] ? fs_reclaim_acquire+0x20/0x20 [ 332.129800] ? lock_downgrade+0x8f0/0x8f0 [ 332.133927] ? percpu_ref_put_many+0x119/0x240 [ 332.138499] ? get_mem_cgroup_from_mm+0x209/0x440 [ 332.143327] ? get_mem_cgroup_from_page+0x190/0x190 [ 332.148327] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 332.153149] ? lock_acquire+0x1e4/0x540 [ 332.157126] mem_cgroup_try_charge+0x4ff/0xa70 [ 332.161695] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 332.166707] ? mem_cgroup_protected+0xa60/0xa60 [ 332.171445] ? up_write+0x7b/0x220 [ 332.174965] ? up_read+0x110/0x110 [ 332.178488] ? __anon_vma_prepare+0x36d/0x720 [ 332.182973] ? pmd_val+0x88/0x100 [ 332.186409] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 332.191933] mem_cgroup_try_charge_delay+0x1d/0x90 [ 332.196846] __handle_mm_fault+0x25ba/0x4470 [ 332.201237] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 332.206061] ? cap_mmap_addr+0x52/0x130 [ 332.210016] ? userfaultfd_unmap_complete+0x32a/0x510 [ 332.215185] ? security_mmap_addr+0x80/0xa0 [ 332.219489] ? lock_acquire+0x1e4/0x540 [ 332.223468] ? handle_mm_fault+0x417/0xc80 [ 332.227688] ? lock_downgrade+0x8f0/0x8f0 [ 332.231814] ? lock_release+0xa30/0xa30 [ 332.235769] ? lock_release+0xa30/0xa30 [ 332.239731] ? down_read_killable+0x200/0x200 [ 332.244208] ? mem_cgroup_from_task+0xcb/0x1f0 [ 332.248783] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 332.253528] handle_mm_fault+0x53e/0xc80 [ 332.257584] ? __handle_mm_fault+0x4470/0x4470 [ 332.262156] ? find_vma+0x34/0x190 [ 332.265681] __do_page_fault+0x620/0xe50 [ 332.269723] ? mm_fault_error+0x380/0x380 [ 332.273853] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 332.279379] ? __x64_sys_clock_gettime+0x170/0x250 [ 332.284290] ? __ia32_sys_clock_settime+0x290/0x290 [ 332.289307] do_page_fault+0xf6/0x8c0 [ 332.293090] ? vmalloc_sync_all+0x30/0x30 [ 332.297224] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 332.302752] ? do_syscall_64+0x497/0x820 [ 332.306806] ? syscall_slow_exit_work+0x500/0x500 [ 332.311638] ? syscall_return_slowpath+0x5e0/0x5e0 [ 332.316570] ? syscall_return_slowpath+0x31d/0x5e0 [ 332.321489] ? prepare_exit_to_usermode+0x291/0x3b0 [ 332.326490] ? page_fault+0x8/0x30 [ 332.330013] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 332.334834] ? page_fault+0x8/0x30 [ 332.338353] page_fault+0x1e/0x30 [ 332.341785] RIP: 0033:0x40e16f [ 332.344958] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 332.363841] RSP: 002b:00007ffe1f3c3010 EFLAGS: 00010206 [ 332.369186] RAX: 00007f91cf350000 RBX: 0000000000020000 RCX: 00000000004569aa [ 332.376445] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 332.383695] RBP: 00007ffe1f3c30f0 R08: ffffffffffffffff R09: 0000000000000000 [ 332.390953] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1f3c31e0 [ 332.398205] R13: 00007f91cf370700 R14: 000000000072bf2c R15: 0000000000000001 [ 332.405715] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor2,pid=22374,uid=0 [ 332.419923] memory: usage 212kB, limit 0kB, failcnt 840 [ 332.425313] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 332.432075] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 332.438246] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 332.458216] Tasks state (memory values in pages): [ 332.463073] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 332.471970] [ 22374] 0 22374 17618 8218 126976 0 0 syz-executor2 [ 332.480988] Memory cgroup out of memory: Kill process 22374 (syz-executor2) score 8249000 or sacrifice child 03:35:30 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x1ff, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000380)=""/4096) close(r0) 03:35:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socket$inet6(0xa, 0x2, 0x7) r2 = add_key(&(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$revoke(0x3, r2) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d040000000bcf", 0x9545) r3 = accept4(r1, &(0x7f0000000200)=@l2, &(0x7f00000000c0)=0x80, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000280)=0x4) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 03:35:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000440)=""/83) 03:35:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0x97df}, 0x8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, &(0x7f0000f6affd)="cf", 0x1, 0x0, &(0x7f00007dc000)={0x2, 0x3, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000a68000)={0x0, @in={{0x2, 0x3, @local={0xac, 0x14, 0xffffffffffffffff}}}}, &(0x7f000044fffc)=0xa0) 03:35:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000), 0x0, 0x0, 0xfffffffffffffffb) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) keyctl$chown(0xb, r1, r2, 0x0) 03:35:30 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000000)=0x10000, 0x4) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000000440)={0x1, {&(0x7f0000000040)=""/80, 0xffffffffffffff45, &(0x7f00000001c0)=""/142, 0x0, 0x2}}, 0x217) 03:35:30 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x40044590, &(0x7f0000000380)=""/4096) close(r0) [ 332.491002] Killed process 22374 (syz-executor2) total-vm:70472kB, anon-rss:104kB, file-rss:32768kB, shmem-rss:0kB [ 332.502074] oom_reaper: reaped process 22374 (syz-executor2), now anon-rss:0kB, file-rss:32788kB, shmem-rss:0kB 03:35:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000002ac0)="ea", 0x1}], 0x1, &(0x7f0000000100)}], 0x1, 0x0) 03:35:31 executing program 0: r0 = semget$private(0x0, 0x5, 0x0) socketpair(0x11, 0x0, 0x4, &(0x7f0000000000)={0xffffffffffffffff}) openat(r1, &(0x7f0000000040)='./file0\x00', 0x381000, 0x1c) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4000000d70b}, {0x0, 0x0, 0x800}], 0x2) semctl$GETNCNT(r0, 0x1, 0xe, &(0x7f00000001c0)=""/22) 03:35:31 executing program 6: r0 = socket(0x50000000010, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='devpts\x00', 0x0, &(0x7f0000000300)) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) r1 = add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000440)="95e950a7cf9ae1fe8a9bdcf62f1397c25e8909ecf6a083d97b8067ea0c71d1723def47c0345c51f4c41587d60268a108ad145c0339516709b358a0f6effd81e5115c691b89e3a195b871e6f4d1eefa8e0dfa3c102ab62a112c63cd6368973af70ab3e104f7a3963ab88dfb1445f7dd24b8d9a91213a66348487f1567be9b3df2ed330140a8203e65446178f629dff6aaf5a1e3daaee8350372e4ad0a5f486341dab9298333ca321d006a363e578f8eaa54b410371d5cbc72", 0xb8, 0x0) r2 = add_key(&(0x7f0000000240)='rxrpc\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000380)="61d18817719c2a4b3c198200940d65daff08a646aa1844dc8bd6cd2f4b86e20054bab8c6896c0146f627e44469d73a596e0d11b27165387fde56f73720050a77a38cea2a2cfa86ec0c6507424e167df3362a7689ddbcdc3234ace764d983bb7b259f61bdd0ad4da93dc1ab87ba7bc75db50238b70f8a46e9a38cadc8d59abb30", 0x80, 0xffffffffffffffff) syz_mount_image$ntfs(&(0x7f0000000580)='ntfs\x00', &(0x7f00000005c0)='./file0\x00', 0x1, 0x8, &(0x7f0000000c00)=[{&(0x7f0000000600)="46145fc7000b709150978fd1b62613a1d825984c513a2ac505f23337c1576943e00d63a881df4f6af3aa51567745ac5aef562d7af8f1a853cbac1e5af3a3f76e7644619c68ed7d5c2fa99430478d02cf0a4a06946e837de210453ce90091ab85070bc02b63036b109bde894a6b8b70fc7b01b22f5a86576910e7e613c97e509cbaa24b3e86112a565903ab", 0x8b, 0xfffffffffffffffd}, {&(0x7f00000006c0)="9665faf4452f28c0efa0016d87fba1ce50e660b9824894c81a73da895e9c3bbaa902ee4f7ee554c6e9a2e6ca3b5b0c6fb0605b46384cfc4ac49277e3690058772026be3f76ecd82db0170ab8c76e28de14f2efd84c9c6e38a8d8a20519cd554e939d3357cc94eac5c114498785598122e89de98ea9204d0eb0712c634e383f9fb555b7fd8d56a2ad00aa5a9ac7a85a4a0c8d1e4035b9d2002e446277827a6f44dbc71019194775a78b564e1bdbe7127d5242bff0cecc0ca455316d9a073fb6f559c95b042b704963aad4d967cc68136bc3fcbd4d7927d7b2291697", 0xdb, 0xffff}, {&(0x7f00000007c0)="ab66acea55070c7d36bd8efde637f187ea1502bec5f81d30263ac2ceecfa5d7f2a00db88b282fa72418452d8fb3d67ee1165e25974fd0922020294617ccd588da7639b8d7054f14109d4e57e3b0f63bbb4d8ebe79abc10872b34139666ddbd720eb79e857b281b89ae036f0bd01aac11e86c7172c539161f4c06deeb1c143e6978b50979a06d54c006de9c", 0x8b, 0xc2a}, {&(0x7f0000000880)="940383c0d0410120dfd7ead5a09e336737b13d1ff538e8f36f71f18cea41d1b612e71e90ca380ae15609d042f750e458beac93d956524fa7226bc0c232c6f0c1c8bcb78bb3d8e748d9647749d78fc8207b9767179c254e5415bd5ad4cc957b07d93461fbec09a58dacb71537e8127f190beaeb6e002ca8bc5b943aaada165a573cac7e512a90ade42b6030e22f3ee0aedd1fecc12794b0073089634bfd862f851ce2c98775108f9cde90abea6bf37627965dfd9bcd880a9f22a8315bf9b7ff7917bbbf7db10650e7316b69ea131ee8d3cdae868fd8c8eeb6e1a464cf9c6511a1304b", 0xe2, 0x200}, {&(0x7f0000000980)="15a05618943262653b83a748a8ac3b0275f8ecc14ad2941447dd1fa21a5732d362827dd67c40cb36ea4efb2c4e70d03f33300eed9a", 0x35, 0x1f}, {&(0x7f00000009c0)="6014952f3002d71afe672af1d7583861e8f548f8a98f94be1d00974f98f323a89e3ac09e178ec7b0b583dd063e100c590a31774d06f2f7ddd6d1edc3ca65d464ed096b74586222372808838ffcc39564ef9939d5566ca2e580484f4c63f07b9cec9723a554c4228b01e392fa992d11a32a376d1f20b1fc4b85040e8d86c8674aa661f9e467766dd09230f1bc3154dd23fa", 0x91, 0x4}, {&(0x7f0000000a80)="cb2850acf5e7627c7ff658ed33ddc2a6a154812338f63b4003361f23f354ff16ddadcbebdeacca9b96dab03f248fcf78edc3232abeebef90707a88092326053871082f6b883e853ba9257a94901c5c874fba26865550b204215666968f175a69bd17fcdcbe15820fc2b54e8eb142e8ac7215a64753d623f801617bc0a6189c7449e0387d4a3ede37247dfc34b2715f980d5f8a", 0x93, 0x8}, {&(0x7f0000000b40)="79126ebf8f4008a944b9069dd780122c38e11b4deea4255e14870e0db9034ec8d45ffaf75f9933d94a1026145a35cd76baf86a7ccda650faa42ddc29a2b54022bf5758e5d71ab4e354bd9a1dad7115597d8faeb6f6b0791dc61c6b2629ab17bb6063bbceb0fdf274a9c691eca83bf96bcfb27513370be3add6123b1bf5130b38db8b92980ef31cfdde0100756387e8252f974f062392e0c4bbcdb7ac06407ba2c763148a2116fefd09a6edb234", 0xad, 0x200}], 0x0, &(0x7f0000000cc0)={[{@errors_remount='errors=remount-ro'}]}) keyctl$negate(0xd, r1, 0x4, r2) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x80000, &(0x7f0000000140)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f00000001c0)='mslos\x00', 0x5010, &(0x7f0000000200)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000540)) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000180)="025c3f0a00145f8f764070") mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000d00)) getpid() ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000d40)=0x0) r6 = syz_open_procfs(r5, &(0x7f0000000d00)="6d6f756e63690200200599df3b9061fc3031a6407502fe6dab467300757ba4559903cf83f578154c0000") sendfile(r0, r6, &(0x7f0000000500), 0x100) 03:35:31 executing program 5: syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x101, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x2) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x88000, 0x0) r3 = request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000280)='{\x00', 0xfffffffffffffffe) r4 = add_key(&(0x7f0000000340)='.dead\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000003c0)="1b89156c164593a2a1263623a176460ba920b10079ec3d98d77759b8612a9024fb3e33bc9e66b228c2c943b01410f57107f2f1646241007eab9e3b3322015aa0299d3707f4e436f4333c34e5c19039466d9aa345e3d4440af42edc58a3247c4286b33ba312d15f42dc95484f7a0a908f06a2abaf448c7a970c1f3f619c481bad0be7242966caa126ffd2ba25d52600", 0x8f, 0xffffffffffffffff) r5 = shmget$private(0x0, 0x4000, 0x54000302, &(0x7f0000ffa000/0x4000)=nil) shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x5000) keyctl$search(0xa, r3, &(0x7f00000002c0)='id_resolver\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x0}, r4) write$FUSE_DIRENT(r2, &(0x7f00000000c0)={0x108, 0x0, 0x8, [{0x2, 0xa7b, 0x9, 0x2, '/dev/ion\x00'}, {0x5, 0x9, 0x9, 0xfffffffffffffffe, '/dev/ion\x00'}, {0x5, 0x4427a136, 0x11, 0x3, '\\:wlan0vboxnet0[-'}, {0x2, 0x8000, 0x18, 0x101, 'nodevppp0vboxnet0#+user)'}, {0x0, 0x17, 0x9, 0x2, '/dev/ion\x00'}, {0x0, 0x40, 0x1, 0x6, '\x00'}]}, 0x108) 03:35:31 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102c}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xa, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000eab7525ba2b6485018b04000000000000000006110500000000000000000000000956fe8bfbb041045340a260ff347329dea8409c900097c94ade47aab387a8861fd8e875d00f5874933c9a664a07de0b5577df34396fb51931e158485082561996364f2666a6d7d932d1391c4de0606816b80cde40a9bcfa3765682f3051490b51680fa9af156e09c359a5d"], &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 03:35:31 executing program 5: socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000780)={0xffffffffffffffff}) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000005804000058020000580200000000000070030000700300007003000004000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="0000000000001b0d2dda374025300000000000000000000000190000000000000000000000000000007467807a00000000000000000000000000000000000000"], @ANYBLOB="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"], 0x4a8) pwritev(r0, &(0x7f00000006c0)=[{&(0x7f0000000600)="230eeed4f55d79c0f47d3f2f2b2f45c9aada13578f7fb2630205bcc0161bb019e897bb02ba670b445f6d4181df9402a3f21b741a7a0e1d0e2946b0cea9a8085b3c51e1b12f9db59cf266111371e5ba0d97864c250305a3c4e515c918f404cba62c7987371f9f9637b3811241cf37fbeae5d37e6b8a20743de88281e90154c18c9f3644f5542bcc72ccf6e5e6a5f823aee7be2d795a94dad0183adca39803a5341b31", 0xa2}], 0x1, 0x0) shmctl$IPC_STAT(0x0, 0xf, &(0x7f0000000000)=""/190) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000700)=0x7fff) 03:35:31 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x40044590, &(0x7f0000000380)=""/4096) close(r0) [ 332.713581] ntfs: (device loop6): parse_options(): Unrecognized mount option . [ 332.767634] devpts: called with bogus options [ 332.804065] ntfs: (device loop6): parse_options(): Unrecognized mount option . 03:35:31 executing program 7: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x8) 03:35:31 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x80, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x400b, 0x5, 0x2000000a9, 0xa3b, 0x1, r0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x27}], &(0x7f0000000140)='GPL\x00', 0x9, 0x10196, &(0x7f00000004c0)=""/167}, 0x48) [ 333.392728] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 333.402202] CPU: 1 PID: 22425 Comm: syz-executor3 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 333.410687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.420023] Call Trace: [ 333.422667] dump_stack+0x1c9/0x2b4 [ 333.426298] ? dump_stack_print_info.cold.2+0x52/0x52 [ 333.431472] ? trace_hardirqs_on+0x10/0x10 [ 333.435705] dump_header+0x246/0x123c [ 333.439505] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 333.444425] ? trace_hardirqs_on+0x10/0x10 [ 333.448649] ? kasan_check_read+0x11/0x20 [ 333.452795] ? do_raw_spin_unlock+0xa7/0x2f0 [ 333.457202] ? trace_hardirqs_on+0x10/0x10 [ 333.461466] ? trace_hardirqs_on+0x10/0x10 [ 333.465703] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 333.471235] ? css_next_child+0x1c3/0x620 [ 333.475378] ? find_lock_task_mm+0x230/0x4d0 [ 333.479781] ? cgroup_get_tree+0xb20/0xb20 [ 333.484011] ? lock_acquire+0x1e4/0x540 [ 333.487988] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 333.493523] ? task_will_free_mem+0x239/0xb70 [ 333.498026] ? lock_release+0xa30/0xa30 [ 333.502005] ? oom_badness+0x7d1/0xb00 [ 333.505891] ? ___ratelimit+0x36f/0x655 [ 333.509860] ? lock_downgrade+0x8f0/0x8f0 [ 333.513990] ? kasan_check_read+0x11/0x20 [ 333.518116] ? do_raw_spin_unlock+0xa7/0x2f0 [ 333.522528] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 333.527098] ? do_raw_spin_lock+0x200/0x200 [ 333.531404] ? oom_kill_process+0x24d/0x280 [ 333.535710] ? lock_downgrade+0x8f0/0x8f0 [ 333.539840] ? trace_hardirqs_on+0xd/0x10 [ 333.543975] ? ___ratelimit+0xaa/0x655 [ 333.547854] ? idr_get_free+0x10c0/0x10c0 [ 333.551988] ? kasan_check_write+0x14/0x20 [ 333.556220] ? do_raw_spin_lock+0xc1/0x200 [ 333.560438] oom_kill_process.cold.29+0x10/0x660 [ 333.565176] ? trace_hardirqs_on+0xd/0x10 [ 333.569307] ? _raw_spin_unlock_irq+0x27/0x70 [ 333.573799] ? css_task_iter_end+0x2ce/0x490 [ 333.578189] ? oom_evaluate_task+0x540/0x540 [ 333.582582] ? trace_hardirqs_on+0xd/0x10 [ 333.586714] ? _raw_spin_unlock_irq+0x27/0x70 [ 333.591203] ? oom_badness+0xb00/0xb00 [ 333.595081] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 333.599818] ? mem_cgroup_iter_break+0x30/0x30 [ 333.604385] out_of_memory+0x86d/0x1ad0 [ 333.608341] ? oom_killer_disable+0x3a0/0x3a0 [ 333.612818] ? kasan_check_read+0x11/0x20 [ 333.616954] ? do_raw_spin_unlock+0xa7/0x2f0 [ 333.621353] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 333.625924] ? kasan_check_write+0x14/0x20 [ 333.630146] ? do_raw_spin_lock+0xc1/0x200 [ 333.634391] mem_cgroup_out_of_memory+0x15e/0x210 [ 333.639222] ? memcg_memory_event+0x40/0x40 [ 333.643528] ? page_counter_try_charge+0x1c7/0x220 [ 333.648445] try_charge+0x720/0x1680 [ 333.652161] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 333.658917] ? lock_downgrade+0x8f0/0x8f0 [ 333.663048] ? lock_release+0xa30/0xa30 [ 333.667009] ? __anon_vma_prepare+0xc4/0x720 [ 333.671402] ? handle_mm_fault+0x53e/0xc80 [ 333.675638] ? fs_reclaim_acquire+0x20/0x20 [ 333.679950] ? lock_downgrade+0x8f0/0x8f0 [ 333.684085] ? percpu_ref_put_many+0x119/0x240 [ 333.688659] ? get_mem_cgroup_from_mm+0x209/0x440 [ 333.693493] ? get_mem_cgroup_from_page+0x190/0x190 [ 333.698509] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 333.703357] ? lock_acquire+0x1e4/0x540 [ 333.707336] mem_cgroup_try_charge+0x4ff/0xa70 [ 333.711926] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 333.716943] ? mem_cgroup_protected+0xa60/0xa60 [ 333.721633] ? up_write+0x7b/0x220 [ 333.725175] ? up_read+0x110/0x110 [ 333.728744] ? __anon_vma_prepare+0x36d/0x720 [ 333.733237] ? pmd_val+0x88/0x100 [ 333.736679] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 333.742198] mem_cgroup_try_charge_delay+0x1d/0x90 [ 333.747116] __handle_mm_fault+0x25ba/0x4470 [ 333.751519] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 333.756343] ? cap_mmap_addr+0x52/0x130 [ 333.760306] ? userfaultfd_unmap_complete+0x32a/0x510 [ 333.765484] ? security_mmap_addr+0x80/0xa0 [ 333.769804] ? lock_acquire+0x1e4/0x540 [ 333.773766] ? handle_mm_fault+0x417/0xc80 [ 333.777981] ? lock_downgrade+0x8f0/0x8f0 [ 333.782105] ? lock_release+0xa30/0xa30 [ 333.786070] ? lock_release+0xa30/0xa30 [ 333.790033] ? down_read_killable+0x200/0x200 [ 333.794508] ? mem_cgroup_from_task+0xcb/0x1f0 [ 333.799067] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 333.803805] handle_mm_fault+0x53e/0xc80 [ 333.807847] ? __handle_mm_fault+0x4470/0x4470 [ 333.812418] ? find_vma+0x34/0x190 [ 333.816207] __do_page_fault+0x620/0xe50 [ 333.820250] ? mm_fault_error+0x380/0x380 [ 333.824380] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 333.829896] ? __x64_sys_clock_gettime+0x170/0x250 [ 333.834805] ? __ia32_sys_clock_settime+0x290/0x290 [ 333.839810] do_page_fault+0xf6/0x8c0 [ 333.843602] ? vmalloc_sync_all+0x30/0x30 [ 333.847733] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 333.853251] ? do_syscall_64+0x497/0x820 [ 333.857310] ? syscall_slow_exit_work+0x500/0x500 [ 333.862132] ? syscall_return_slowpath+0x5e0/0x5e0 [ 333.867041] ? syscall_return_slowpath+0x31d/0x5e0 [ 333.871954] ? prepare_exit_to_usermode+0x291/0x3b0 [ 333.876960] ? page_fault+0x8/0x30 [ 333.880481] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 333.885303] ? page_fault+0x8/0x30 [ 333.891436] page_fault+0x1e/0x30 [ 333.894875] RIP: 0033:0x40e16f [ 333.898052] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 333.916946] RSP: 002b:00007ffd8c7205b0 EFLAGS: 00010206 [ 333.922306] RAX: 00007f3313243000 RBX: 0000000000020000 RCX: 00000000004569aa [ 333.929573] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 333.936836] RBP: 00007ffd8c720690 R08: ffffffffffffffff R09: 0000000000000000 [ 333.944096] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8c720780 [ 333.951354] R13: 00007f3313263700 R14: 000000000072bf2c R15: 0000000000000001 [ 333.959008] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor3,pid=22425,uid=0 [ 333.973383] memory: usage 212kB, limit 0kB, failcnt 849 [ 333.978780] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 333.985575] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 333.991752] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 334.011293] Tasks state (memory values in pages): [ 334.016159] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 334.025073] [ 22425] 0 22425 17618 8221 126976 0 0 syz-executor3 [ 334.034113] Memory cgroup out of memory: Kill process 22425 (syz-executor3) score 8252000 or sacrifice child 03:35:32 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0xfdffffffffffffbf) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000380)=""/4096) close(r0) 03:35:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3) ioctl$TCSETAF(r1, 0x541b, &(0x7f0000000000)) 03:35:32 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2, 0x400001) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000180)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000040)=[@cr4={0x1, 0x100000}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:35:32 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x40044590, &(0x7f0000000380)=""/4096) close(r0) 03:35:32 executing program 4: perf_event_open(&(0x7f0000007000)={0x0, 0x70, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2285, &(0x7f0000007000)='S') r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='\x00', 0xffffffffffffff9c}, 0x10) accept$packet(0xffffffffffffff9c, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000200)={@empty, 0x7e, r2}) 03:35:32 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r1, 0x0, r1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000080)=0x1e) ioctl$sock_bt_hci(r2, 0x0, &(0x7f0000000080)) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x2}}, 0xa) getsockopt$inet6_int(r0, 0x29, 0x7f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 03:35:32 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x800000000000) socket$kcm(0x29, 0x7, 0x0) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x80000003, @multicast1}}, 0x1e) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000100)=0x2b3) 03:35:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mmap(&(0x7f0000dd3000/0x4000)=nil, 0x4000, 0xfffffffffffffffd, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x100) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000080)=0x800, 0x8) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f00000000c0), 0x4) [ 334.044139] Killed process 22425 (syz-executor3) total-vm:70472kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 334.055542] oom_reaper: reaped process 22425 (syz-executor3), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB 03:35:32 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001140)='/dev/snd/controlC#\x00', 0x7, 0xa0040) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x1000, "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"}, &(0x7f0000000000)=0x1008) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0xffffffff, 0x6, [0xa830, 0x81, 0xffffffff, 0x20, 0x9, 0xffffffffffffffff]}, 0x14) ioctl$BLKRRPART(r0, 0x125f, 0x0) 03:35:32 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vhost-vsock\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)="d15c48ac527fc650a62152c597db487d52742a83c009899c8da0e9c71c813fbca10ef0c84f1cd7cf1540eb4fba9682b67589e7f6ef8016feacf686026ce1ceb2e47fb1f91eb6a7f5cd3845d91fe07d11bbfffef436667e0f43f67f220f123ddfcdb35641f881d88939ac72467d69f0d4a6e7799111fcfbffd0e232f923f65a05855df48d42014f579e91919843a1647a98cafdf4343426221e947211965be76979a301692fa5e8a47b2163ebacf02795afc886b10761c9", 0xb7) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x5d, "a6442c34b31beff6fdcdeb00a68d32d9d3ca869aca1afc3c7aee4efa7a42a9adf4d4367c2f73e3f8acb8b8dd9fec5947831e75bf55d3b3faaf051bd6e62e5beda32bb9c99640c17de3a35aaae40e177038c960ba231ad740dfe59a14fb"}, &(0x7f0000000200)=0x65) r2 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0xfc5, 0x4000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000003c0)={r1, 0x80, &(0x7f0000000280)=[@in={0x2, 0x4e20}, @in6={0xa, 0x4e21, 0x5, @mcast2, 0x7}, @in6={0xa, 0x4e23, 0x4283, @loopback, 0x8}, @in6={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x10}, 0x3}, @in6={0xa, 0x4e24, 0x7fff, @ipv4={[], [], @rand_addr=0x9}, 0x97b3}]}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x42, 0x606, 0x772, 0xc53, 0x5, 0x5, 0x8, {r1, @in={{0x2, 0x4e23}}, 0x7, 0x800, 0x0, 0x5a59, 0x40}}, &(0x7f0000001e80)=0x1f1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000001ec0)={r3, 0x1, 0x8, 0x3fe, 0x100, 0x9}, 0x14) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000001f80)={0x2, 0x4e20, @local}, 0x10) socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="66000000130047f10701c1b00e000007000640040100000009ef18ffff00fd32050014006e35c59de1bbab4d87577e11df1ee55f9e924cae41a17556779be0c39cbbc7de2c1655206e8f9d11cec081af70392b4fc36140cf1442eb383c1483efcf4114d6f71b", 0x4f) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001f00)='/dev/mixer\x00', 0x680000, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000001fc0)={0x1f, {0x0, 0xebce, 0x8, 0xfffffffffffffffc, 0x8, 0xfffffffffffffff9}, 0x8}, 0xa) ioctl$KVM_S390_INTERRUPT_CPU(r4, 0x4010ae94, &(0x7f0000001f40)={0x1, 0x8}) 03:35:32 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x800000000001, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000340)=0x7f92a687, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r3, 0x1}}, 0x10) write$P9_RVERSION(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="130050b2303030"], 0x13) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000300)=r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="b8010000000f01d90f22db0f20d835080000000f22d8f26db9004d564bb84b000000ba000000000f30ea00300000a6000fc72d0000000026f30f01c966b850008ee0b8070000000f23d00f21f8353000000a0f23f8", 0x55}], 0x1, 0x0, &(0x7f0000000140), 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f00000002c0)=0x8, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000380)={@hyper}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 03:35:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) r2 = gettid() openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4000, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000040)={0x13, 0x7, 0x0, {{0x6, 'ramfs\x00'}}}, 0x13) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) r3 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) dup2(r3, r1) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 03:35:32 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x40044590, &(0x7f0000000380)=""/4096) close(r0) 03:35:32 executing program 1: r0 = eventfd2(0x0, 0x800) writev(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)="a0", 0x1}], 0x1) 03:35:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x45b, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x7, 0xfffffffffffffffd, 0xc, r4, 0x81}, 0x2c) r5 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xe52, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000140)=0x80, 0x4) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) semget(0x0, 0x4, 0x1) mq_getsetattr(r5, &(0x7f0000000080)={0x5, 0x4, 0x81, 0x8000, 0x4, 0x40, 0x82d0, 0xf37}, 0x0) r6 = eventfd(0x0) socket(0x9, 0x7, 0x5) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r6}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000040)={r6, 0x0, 0x1}) [ 334.213257] nullb0: [POWERTEC] p1 p2 p3 p4 [ 334.226950] nullb0: p3 start 3096866854 is beyond EOD, truncated [ 334.230630] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 334.233217] nullb0: p4 start 3149524337 is beyond EOD, truncated [ 334.242587] CPU: 0 PID: 22507 Comm: syz-executor3 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 334.242605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.266914] Call Trace: [ 334.269516] dump_stack+0x1c9/0x2b4 [ 334.273158] ? dump_stack_print_info.cold.2+0x52/0x52 [ 334.278361] ? trace_hardirqs_on+0x10/0x10 [ 334.282618] ? lock_downgrade+0x8f0/0x8f0 [ 334.286785] dump_header+0x246/0x123c [ 334.290602] ? percpu_ref_put_many+0x131/0x240 [ 334.295197] ? trace_hardirqs_on+0x10/0x10 [ 334.299440] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 334.304368] ? trace_hardirqs_on+0x10/0x10 [ 334.308586] ? mem_cgroup_iter+0x517/0x10c0 [ 334.312905] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 334.318437] ? css_next_child+0x1c3/0x620 [ 334.322574] ? trace_hardirqs_on+0x10/0x10 [ 334.326794] ? trace_hardirqs_on+0x10/0x10 [ 334.331014] ? trace_hardirqs_on+0x10/0x10 [ 334.335234] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 334.340760] ? css_next_child+0x1c3/0x620 [ 334.344892] ? find_lock_task_mm+0x230/0x4d0 [ 334.349298] ? cgroup_get_tree+0xb20/0xb20 [ 334.353544] ? lock_acquire+0x1e4/0x540 [ 334.357518] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 334.363040] ? task_will_free_mem+0x239/0xb70 [ 334.367520] ? lock_release+0xa30/0xa30 [ 334.371480] ? oom_badness+0x7d1/0xb00 [ 334.375355] ? ___ratelimit+0x36f/0x655 [ 334.379314] ? lock_downgrade+0x8f0/0x8f0 [ 334.383446] ? kasan_check_read+0x11/0x20 [ 334.387577] ? do_raw_spin_unlock+0xa7/0x2f0 [ 334.391974] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 334.396538] ? do_raw_spin_lock+0x200/0x200 [ 334.400846] ? oom_kill_process+0x24d/0x280 [ 334.405150] ? lock_downgrade+0x8f0/0x8f0 [ 334.409284] ? trace_hardirqs_on+0xd/0x10 [ 334.413426] ? ___ratelimit+0xaa/0x655 [ 334.417298] ? idr_get_free+0x10c0/0x10c0 [ 334.421425] ? kasan_check_write+0x14/0x20 [ 334.425644] ? do_raw_spin_lock+0xc1/0x200 [ 334.429863] oom_kill_process.cold.29+0x10/0x660 [ 334.434609] ? trace_hardirqs_on+0xd/0x10 [ 334.438757] ? _raw_spin_unlock_irq+0x27/0x70 [ 334.443762] ? css_task_iter_end+0x2ce/0x490 [ 334.448156] ? oom_evaluate_task+0x540/0x540 [ 334.452552] ? trace_hardirqs_on+0xd/0x10 [ 334.456683] ? _raw_spin_unlock_irq+0x27/0x70 [ 334.461161] ? oom_badness+0xb00/0xb00 [ 334.465038] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 334.469782] ? mem_cgroup_iter_break+0x30/0x30 [ 334.474355] out_of_memory+0x86d/0x1ad0 [ 334.478316] ? oom_killer_disable+0x3a0/0x3a0 [ 334.482795] ? kasan_check_read+0x11/0x20 [ 334.486929] ? do_raw_spin_unlock+0xa7/0x2f0 [ 334.491319] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 334.495885] ? kasan_check_write+0x14/0x20 [ 334.500102] ? do_raw_spin_lock+0xc1/0x200 [ 334.504322] mem_cgroup_out_of_memory+0x15e/0x210 [ 334.509149] ? memcg_memory_event+0x40/0x40 [ 334.513459] ? page_counter_try_charge+0x1c7/0x220 [ 334.518375] try_charge+0x720/0x1680 [ 334.522076] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 334.528813] ? lock_downgrade+0x8f0/0x8f0 [ 334.532947] ? lock_release+0xa30/0xa30 [ 334.536904] ? __anon_vma_prepare+0xc4/0x720 [ 334.541314] ? handle_mm_fault+0x53e/0xc80 [ 334.545538] ? fs_reclaim_acquire+0x20/0x20 [ 334.549862] ? lock_downgrade+0x8f0/0x8f0 [ 334.554004] ? percpu_ref_put_many+0x119/0x240 [ 334.558591] ? get_mem_cgroup_from_mm+0x209/0x440 [ 334.563431] ? get_mem_cgroup_from_page+0x190/0x190 [ 334.568452] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 334.573282] ? lock_acquire+0x1e4/0x540 [ 334.577242] mem_cgroup_try_charge+0x4ff/0xa70 [ 334.581821] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 334.586826] ? mem_cgroup_protected+0xa60/0xa60 [ 334.591490] ? up_write+0x7b/0x220 [ 334.595016] ? up_read+0x110/0x110 [ 334.598550] ? __anon_vma_prepare+0x36d/0x720 [ 334.603035] ? pmd_val+0x88/0x100 [ 334.606474] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 334.612015] mem_cgroup_try_charge_delay+0x1d/0x90 [ 334.616932] __handle_mm_fault+0x25ba/0x4470 [ 334.621330] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 334.626159] ? cap_mmap_addr+0x52/0x130 [ 334.630119] ? userfaultfd_unmap_complete+0x32a/0x510 [ 334.635310] ? security_mmap_addr+0x80/0xa0 [ 334.639632] ? lock_acquire+0x1e4/0x540 [ 334.643597] ? handle_mm_fault+0x417/0xc80 [ 334.647818] ? lock_downgrade+0x8f0/0x8f0 [ 334.651950] ? lock_release+0xa30/0xa30 [ 334.655911] ? lock_release+0xa30/0xa30 [ 334.659872] ? down_read_killable+0x200/0x200 [ 334.664355] ? mem_cgroup_from_task+0xcb/0x1f0 [ 334.668923] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 334.673672] handle_mm_fault+0x53e/0xc80 [ 334.677722] ? __handle_mm_fault+0x4470/0x4470 [ 334.682288] ? find_vma+0x34/0x190 [ 334.685816] __do_page_fault+0x620/0xe50 [ 334.689866] ? mm_fault_error+0x380/0x380 [ 334.694013] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 334.699552] ? __x64_sys_clock_gettime+0x170/0x250 [ 334.704472] ? __ia32_sys_clock_settime+0x290/0x290 [ 334.709476] do_page_fault+0xf6/0x8c0 [ 334.713274] ? vmalloc_sync_all+0x30/0x30 [ 334.717405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 334.722930] ? do_syscall_64+0x497/0x820 [ 334.726987] ? syscall_return_slowpath+0x5e0/0x5e0 [ 334.731912] ? syscall_return_slowpath+0x31d/0x5e0 [ 334.736828] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 334.741828] ? prepare_exit_to_usermode+0x291/0x3b0 [ 334.746829] ? page_fault+0x8/0x30 [ 334.750352] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 334.755179] ? page_fault+0x8/0x30 [ 334.758703] page_fault+0x1e/0x30 [ 334.762141] RIP: 0033:0x40e16f [ 334.765350] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 334.784238] RSP: 002b:00007ffd8c7205b0 EFLAGS: 00010206 [ 334.789592] RAX: 00007f3313243000 RBX: 0000000000020000 RCX: 00000000004569aa [ 334.796854] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 334.804108] RBP: 00007ffd8c720690 R08: ffffffffffffffff R09: 0000000000000000 [ 334.811361] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8c720780 [ 334.818712] R13: 00007f3313263700 R14: 000000000072bf2c R15: 0000000000000001 [ 334.826865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor3,pid=22507,uid=0 [ 334.841308] memory: usage 212kB, limit 0kB, failcnt 858 [ 334.846754] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 334.853561] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 334.859743] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 334.879290] Tasks state (memory values in pages): [ 334.884173] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 334.893083] [ 22507] 0 22507 17618 8221 126976 0 0 syz-executor3 [ 334.902120] Memory cgroup out of memory: Kill process 22507 (syz-executor3) score 8252000 or sacrifice child 03:35:33 executing program 5: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0x201) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)="6c6f00966f380f64a1e3d75d627d1fa159ad34909d60d298000000202759175d1563ca52dd984f43891be784e2058077d27c448d4b144278cb7548c2ee63bf3c3e591afc1f394f4281891836c571406eb4b673b00000000000080000daefec45ecd549b29bfe8d903f00e9e47e673ac1b2616a96bba7e2c0dcf95108eb167f5411d30d37e62266cf8eab640f747082aed2158e2b63f6bfe1343ea62da563ded7abea1ff873329c5646d518fe0e8f20010000792efc2a82a5a17035c87b276dabe899eb77238a741c80fcb095a2a7d72c595d45388358f546dc882df5b0b55edb1ab6aa14e20d685e4a2dd1ba556e04276c1be06fdbc891251cb5bfb690b4c27f5d2fb3e7c92794cf496fdf0495b506841f483edac504209488eb27d43b367fd9992d1b7c478dd4b925aa51a04b100393e1cce76d8027f0a5ed280da80f26b1f3ff300c82255f928b44b9d9e7f2e4c16923dc8741b9c70d92fa1111b51f039ddd1b6adfac67e3a053d38ae16e97eaf5a0270be9a0f12066aa6ecfb569b664bc920bd5381608b35f3aa4210a79c4260a574d4da8c40b9f016ff4ab26b6170250c3214ea18622d704f1c021edffee24c8398c4230d1") 03:35:33 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x12000, 0x0) faccessat(r1, &(0x7f0000000140)='./file0\x00', 0x4, 0x1000) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000280)='./file0//ile0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) r4 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000000)) ioctl$EVIOCGMTSLOTS(r4, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000000380)=""/4096) bind$bt_rfcomm(r1, &(0x7f0000000240)={0x1f, {0x1, 0xffff, 0x99, 0x800, 0x8001, 0x4}, 0x101}, 0xa) close(r0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000002c0)={0x5, 0x70, 0x100000000, 0x4, 0x0, 0x83, 0x0, 0x3ff, 0x101, 0x6, 0x5, 0x401, 0x2, 0x401, 0x4, 0xb4, 0x8, 0x4d4a, 0x20, 0x7f, 0xa19, 0xe80, 0x3, 0x9, 0xdf77, 0x75, 0xffffffffffffffe0, 0x100, 0x400, 0xffffffffffff8000, 0x9f, 0x4, 0x1, 0xffff, 0x1, 0x1, 0x2, 0x1000, 0x0, 0x6de, 0x1, @perf_config_ext={0x100000001, 0x4}, 0x400, 0x4, 0x0, 0x7, 0x4, 0x8001, 0x5}) [ 334.912132] Killed process 22507 (syz-executor3) total-vm:70472kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 334.923253] oom_reaper: reaped process 22507 (syz-executor3), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB 03:35:33 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58) close(r1) 03:35:33 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x40044590, &(0x7f0000000380)=""/4096) close(r0) [ 335.042131] device lo entered promiscuous mode 03:35:33 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) openat$cgroup_subtree(r1, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0) 03:35:33 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a80)="880f", 0x2}], 0x1, &(0x7f0000000140), 0xe9}, 0xc100) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="d09a0e63c947", 0x6}], 0x1, &(0x7f0000003b40)}, 0x0) 03:35:33 executing program 6: unshare(0x400) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x80, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r1, r0}}, 0x18) 03:35:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet(0x10, 0x3, 0x0) read(r1, &(0x7f00000002c0)=""/233, 0xe9) read(r1, &(0x7f0000000100)=""/94, 0x5e) fcntl$addseals(r0, 0x409, 0x2) read(r1, &(0x7f0000000000)=""/240, 0xf0) sendmsg(r1, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000005200030f07fffd946fa283bc04eee6d87986c497271d85", 0x1b}], 0x1}, 0x0) 03:35:33 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f000068b000)='io\x00') bind$alg(r0, &(0x7f0000d59fa8)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040), 0x4) sendfile(r2, r1, &(0x7f0000000140)=0x45, 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200040, 0x0) 03:35:33 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={"64756d6d79fc0e00"}) r1 = semget(0x2, 0x3, 0x80) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000100)={0x9, 0x1, 0x0, 0x100000000, 0x9}, 0xc) semop(r1, &(0x7f00000000c0)=[{0x3, 0xf2f7, 0x1800}], 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000080)=0x30) 03:35:33 executing program 6: r0 = socket$inet6(0xa, 0x80001, 0x1) setsockopt$inet6_buf(r0, 0x29, 0x10000000000012, &(0x7f0000000000), 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x102) write$P9_RREADDIR(r1, &(0x7f0000000040)={0x49, 0x29, 0x2, {0x9, [{{0x4d, 0x4}, 0x3ff, 0x6, 0x7, './file0'}, {{0x5, 0x3, 0x3}, 0x4, 0x2, 0x7, './file0'}]}}, 0x49) setsockopt$inet6_int(r1, 0x29, 0xdf, &(0x7f00000000c0)=0x6, 0x4) 03:35:33 executing program 7: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000240)={0x1d, r1}, 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x440000, 0x0) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000000c0)="c4e1f64e08c456a36447bc9e5c17326a", 0x10) 03:35:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) write$sndseq(r0, &(0x7f0000000300)=[{0xfff, 0x7, 0x3, 0x7fffffff, @tick=0xffffffffc48df8c1, {0x9, 0x1}, {0x4, 0x3}, @queue={0x1, {0x8, 0xa2c6}}}, {0x3, 0x7fff, 0x400, 0x5578, @tick=0x6, {0x9, 0x3ff}, {0x20, 0x80000001}, @addr={0xfffffffffffffffe, 0x401}}, {0x4000000, 0x5, 0x1, 0xfffffffffffffffb, @time, {0x3f, 0x100}, {0x1, 0x8001}, @addr={0xa4a1, 0xf8f}}, {0x3ff, 0x4, 0x9, 0x4, @tick=0x8, {0x6, 0x20000000000}, {0x80000000, 0x1}, @queue={0x3, {0x2, 0xfffffffffffffff9}}}, {0x8, 0x22c3, 0x100, 0x4, @time={0x0, 0x989680}, {0x1000, 0x8}, {0x3, 0x1}, @time=@tick=0x74d}, {0xff, 0x80000000, 0x290, 0x0, @time, {0x80000001, 0xbe}, {0x0, 0x4}, @quote={{0x1f, 0x100000001}, 0x8, &(0x7f0000000000)={0x4, 0x81, 0x1, 0x7, @tick=0x10001, {0x26096126, 0x5}, {0x6, 0x20}, @time=@tick=0x4}}}], 0x120) getrandom(&(0x7f0000000080)=""/205, 0xcd, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000180)) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x8}]}, 0x2a}}, 0x0) 03:35:34 executing program 4: socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140), 0x10) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fdatasync(r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$VT_RESIZE(r2, 0x800442d3, &(0x7f00000000c0)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) wait4(r3, &(0x7f0000000080), 0x40000001, &(0x7f0000000200)) 03:35:34 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)="2f70726f632f76657273696f6e005aa2ac0000b8b5a28a29aecbf843385a51250398ce12d984f52a149eaf9866f3c33828fe73d4f319528bbd89fcefb625adac46df7522ebb23c98ad69bdc82509df6f43791702000000ca02988905b672c3a20d10f890b9f57724340b384eca6136eae4fd4a015e073076b8f1cde45eea0f0f0c3ca64ebdd0cefc0d9e8ea91d0bbba500000000000000000000000000000000", 0x2, 0x0) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000640)=""/43, 0x2b}], 0x1) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x1, 0x2) 03:35:34 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="fe0f0110"]) ioctl$RTC_PIE_OFF(r2, 0x7006) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x45d) r4 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet6_int(r2, 0x29, 0x5f, &(0x7f0000000100)=0x8, 0x4) connect$l2tp(r4, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x8}}, 0x2e) getpeername(r2, &(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f00000001c0)=0x80) [ 335.751782] netlink: 'syz-executor0': attribute type 21 has an invalid length. [ 335.788083] netlink: 'syz-executor0': attribute type 21 has an invalid length. [ 335.843457] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 335.852887] CPU: 1 PID: 22534 Comm: syz-executor3 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 335.861360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.870709] Call Trace: [ 335.873293] dump_stack+0x1c9/0x2b4 [ 335.876910] ? dump_stack_print_info.cold.2+0x52/0x52 [ 335.882091] ? trace_hardirqs_on+0x10/0x10 [ 335.886327] ? lock_downgrade+0x8f0/0x8f0 [ 335.890466] dump_header+0x246/0x123c [ 335.894440] ? percpu_ref_put_many+0x131/0x240 [ 335.899008] ? trace_hardirqs_on+0x10/0x10 [ 335.903228] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 335.908145] ? trace_hardirqs_on+0x10/0x10 [ 335.912384] ? mem_cgroup_iter+0x517/0x10c0 [ 335.916689] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 335.922212] ? css_next_child+0x1c3/0x620 [ 335.926341] ? trace_hardirqs_on+0x10/0x10 [ 335.930566] ? trace_hardirqs_on+0x10/0x10 [ 335.934798] ? trace_hardirqs_on+0x10/0x10 [ 335.939017] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 335.944541] ? css_next_child+0x1c3/0x620 [ 335.948678] ? find_lock_task_mm+0x230/0x4d0 [ 335.953072] ? cgroup_get_tree+0xb20/0xb20 [ 335.957287] ? lock_acquire+0x1e4/0x540 [ 335.961241] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 335.966759] ? task_will_free_mem+0x239/0xb70 [ 335.971235] ? lock_release+0xa30/0xa30 [ 335.975189] ? oom_badness+0x7d1/0xb00 [ 335.979058] ? ___ratelimit+0x36f/0x655 [ 335.983035] ? lock_downgrade+0x8f0/0x8f0 [ 335.987173] ? kasan_check_read+0x11/0x20 [ 335.991308] ? do_raw_spin_unlock+0xa7/0x2f0 [ 335.995695] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 336.000253] ? do_raw_spin_lock+0x200/0x200 [ 336.004561] ? oom_kill_process+0x24d/0x280 [ 336.008868] ? lock_downgrade+0x8f0/0x8f0 [ 336.013006] ? trace_hardirqs_on+0xd/0x10 [ 336.017143] ? ___ratelimit+0xaa/0x655 [ 336.021015] ? idr_get_free+0x10c0/0x10c0 [ 336.025151] ? kasan_check_write+0x14/0x20 [ 336.029375] ? do_raw_spin_lock+0xc1/0x200 [ 336.033593] oom_kill_process.cold.29+0x10/0x660 [ 336.038331] ? trace_hardirqs_on+0xd/0x10 [ 336.042462] ? _raw_spin_unlock_irq+0x27/0x70 [ 336.046938] ? css_task_iter_end+0x2ce/0x490 [ 336.051332] ? oom_evaluate_task+0x540/0x540 [ 336.055733] ? trace_hardirqs_on+0xd/0x10 [ 336.059866] ? _raw_spin_unlock_irq+0x27/0x70 [ 336.064343] ? oom_badness+0xb00/0xb00 [ 336.068210] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 336.072943] ? mem_cgroup_iter_break+0x30/0x30 [ 336.077525] out_of_memory+0x86d/0x1ad0 [ 336.081506] ? oom_killer_disable+0x3a0/0x3a0 [ 336.085993] ? kasan_check_read+0x11/0x20 [ 336.090119] ? do_raw_spin_unlock+0xa7/0x2f0 [ 336.094505] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 336.099074] ? kasan_check_write+0x14/0x20 [ 336.103291] ? do_raw_spin_lock+0xc1/0x200 [ 336.107509] mem_cgroup_out_of_memory+0x15e/0x210 [ 336.112345] ? memcg_memory_event+0x40/0x40 [ 336.116672] ? page_counter_try_charge+0x1c7/0x220 [ 336.121595] try_charge+0x720/0x1680 [ 336.125296] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 336.132058] ? lock_downgrade+0x8f0/0x8f0 [ 336.136187] ? lock_release+0xa30/0xa30 [ 336.140144] ? __anon_vma_prepare+0xc4/0x720 [ 336.144537] ? handle_mm_fault+0x53e/0xc80 [ 336.148762] ? fs_reclaim_acquire+0x20/0x20 [ 336.153065] ? lock_downgrade+0x8f0/0x8f0 [ 336.157192] ? percpu_ref_put_many+0x119/0x240 [ 336.161761] ? get_mem_cgroup_from_mm+0x209/0x440 [ 336.166588] ? get_mem_cgroup_from_page+0x190/0x190 [ 336.171599] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 336.176459] ? lock_acquire+0x1e4/0x540 [ 336.180432] mem_cgroup_try_charge+0x4ff/0xa70 [ 336.185009] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 336.190039] ? mem_cgroup_protected+0xa60/0xa60 [ 336.194702] ? up_write+0x7b/0x220 [ 336.198223] ? up_read+0x110/0x110 [ 336.201747] ? __anon_vma_prepare+0x36d/0x720 [ 336.206225] ? pmd_val+0x88/0x100 [ 336.209668] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 336.215185] mem_cgroup_try_charge_delay+0x1d/0x90 [ 336.220094] __handle_mm_fault+0x25ba/0x4470 [ 336.224486] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 336.229308] ? cap_mmap_addr+0x52/0x130 [ 336.233261] ? userfaultfd_unmap_complete+0x32a/0x510 [ 336.238429] ? security_mmap_addr+0x80/0xa0 [ 336.242742] ? lock_acquire+0x1e4/0x540 [ 336.246700] ? handle_mm_fault+0x417/0xc80 [ 336.250919] ? lock_downgrade+0x8f0/0x8f0 [ 336.255046] ? lock_release+0xa30/0xa30 [ 336.259021] ? lock_release+0xa30/0xa30 [ 336.262989] ? down_read_killable+0x200/0x200 [ 336.267519] ? mem_cgroup_from_task+0xcb/0x1f0 [ 336.272098] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 336.276839] handle_mm_fault+0x53e/0xc80 [ 336.280900] ? __handle_mm_fault+0x4470/0x4470 [ 336.285462] ? find_vma+0x34/0x190 [ 336.288982] __do_page_fault+0x620/0xe50 [ 336.293027] ? mm_fault_error+0x380/0x380 [ 336.297165] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 336.302683] ? __x64_sys_clock_gettime+0x170/0x250 [ 336.307609] ? __ia32_sys_clock_settime+0x290/0x290 [ 336.312606] do_page_fault+0xf6/0x8c0 [ 336.316399] ? vmalloc_sync_all+0x30/0x30 [ 336.320530] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 336.326062] ? do_syscall_64+0x497/0x820 [ 336.330131] ? syscall_slow_exit_work+0x500/0x500 [ 336.334955] ? syscall_return_slowpath+0x5e0/0x5e0 [ 336.339868] ? syscall_return_slowpath+0x31d/0x5e0 [ 336.344780] ? prepare_exit_to_usermode+0x291/0x3b0 [ 336.349785] ? page_fault+0x8/0x30 [ 336.353305] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 336.358146] ? page_fault+0x8/0x30 [ 336.361665] page_fault+0x1e/0x30 [ 336.365103] RIP: 0033:0x40e16f [ 336.368276] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 336.387158] RSP: 002b:00007ffd8c7205b0 EFLAGS: 00010206 [ 336.392511] RAX: 00007f3313243000 RBX: 0000000000020000 RCX: 00000000004569aa [ 336.399764] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 336.407031] RBP: 00007ffd8c720690 R08: ffffffffffffffff R09: 0000000000000000 [ 336.414280] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8c720780 [ 336.421529] R13: 00007f3313263700 R14: 000000000072bf2c R15: 0000000000000001 [ 336.429167] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor3,pid=22534,uid=0 [ 336.443438] memory: usage 212kB, limit 0kB, failcnt 875 [ 336.448818] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 336.455594] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 336.461751] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 336.481298] Tasks state (memory values in pages): [ 336.486154] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 336.495065] [ 22534] 0 22534 17618 8221 126976 0 0 syz-executor3 [ 336.504120] [ 22547] 0 22547 17618 8218 126976 0 0 syz-executor2 [ 336.513169] Memory cgroup out of memory: Kill process 22534 (syz-executor3) score 8252000 or sacrifice child [ 336.523184] Killed process 22534 (syz-executor3) total-vm:70472kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 336.534282] oom_reaper: reaped process 22534 (syz-executor3), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB [ 336.535101] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 336.554016] CPU: 1 PID: 22547 Comm: syz-executor2 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 336.562504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.571854] Call Trace: [ 336.574453] dump_stack+0x1c9/0x2b4 [ 336.578092] ? dump_stack_print_info.cold.2+0x52/0x52 [ 336.583298] ? trace_hardirqs_on+0x10/0x10 [ 336.587535] ? do_raw_spin_unlock+0xa7/0x2f0 [ 336.591953] dump_header+0x246/0x123c [ 336.595757] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 336.601028] ? trace_hardirqs_on+0x10/0x10 [ 336.605257] ? trace_hardirqs_on+0x10/0x10 [ 336.609479] ? trace_hardirqs_on+0x10/0x10 [ 336.613698] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 336.619217] ? css_next_child+0x1c3/0x620 [ 336.623349] ? find_lock_task_mm+0x230/0x4d0 [ 336.627751] ? cgroup_get_tree+0xb20/0xb20 [ 336.631985] ? lock_acquire+0x1e4/0x540 [ 336.636040] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 336.641570] ? task_will_free_mem+0x239/0xb70 [ 336.646070] ? lock_release+0xa30/0xa30 [ 336.650030] ? oom_badness+0x7d1/0xb00 [ 336.653915] ? ___ratelimit+0x36f/0x655 [ 336.657907] ? lock_downgrade+0x8f0/0x8f0 [ 336.662039] ? kasan_check_read+0x11/0x20 [ 336.666177] ? do_raw_spin_unlock+0xa7/0x2f0 [ 336.670572] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 336.675135] ? do_raw_spin_lock+0x200/0x200 [ 336.679459] ? oom_kill_process+0x24d/0x280 [ 336.683774] ? lock_downgrade+0x8f0/0x8f0 [ 336.687914] ? trace_hardirqs_on+0xd/0x10 [ 336.692046] ? ___ratelimit+0xaa/0x655 [ 336.695916] ? idr_get_free+0x10c0/0x10c0 [ 336.700042] ? kasan_check_write+0x14/0x20 [ 336.704261] ? do_raw_spin_lock+0xc1/0x200 [ 336.708482] oom_kill_process.cold.29+0x10/0x660 [ 336.713221] ? trace_hardirqs_on+0xd/0x10 [ 336.717352] ? _raw_spin_unlock_irq+0x27/0x70 [ 336.721838] ? css_task_iter_end+0x2ce/0x490 [ 336.726236] ? oom_evaluate_task+0x540/0x540 [ 336.730625] ? trace_hardirqs_on+0xd/0x10 [ 336.734754] ? _raw_spin_unlock_irq+0x27/0x70 [ 336.739231] ? oom_badness+0xb00/0xb00 [ 336.743099] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 336.747835] ? mem_cgroup_iter_break+0x30/0x30 [ 336.752401] ? lock_downgrade+0x8f0/0x8f0 [ 336.756540] out_of_memory+0x86d/0x1ad0 [ 336.760504] ? oom_killer_disable+0x3a0/0x3a0 [ 336.764987] ? do_raw_spin_unlock+0xa7/0x2f0 [ 336.769386] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 336.773951] ? kasan_check_write+0x14/0x20 [ 336.778163] ? do_raw_spin_lock+0xc1/0x200 [ 336.782379] mem_cgroup_out_of_memory+0x15e/0x210 [ 336.787198] ? memcg_memory_event+0x40/0x40 [ 336.791512] ? page_counter_try_charge+0x1c7/0x220 [ 336.796421] try_charge+0x720/0x1680 [ 336.800117] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 336.806859] ? lock_downgrade+0x8f0/0x8f0 [ 336.810986] ? lock_release+0xa30/0xa30 [ 336.814945] ? __anon_vma_prepare+0xc4/0x720 [ 336.819333] ? handle_mm_fault+0x53e/0xc80 [ 336.823553] ? fs_reclaim_acquire+0x20/0x20 [ 336.827858] ? lock_downgrade+0x8f0/0x8f0 [ 336.831984] ? percpu_ref_put_many+0x119/0x240 [ 336.836565] ? get_mem_cgroup_from_mm+0x209/0x440 [ 336.841389] ? get_mem_cgroup_from_page+0x190/0x190 [ 336.846388] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 336.851210] ? lock_acquire+0x1e4/0x540 [ 336.855175] mem_cgroup_try_charge+0x4ff/0xa70 [ 336.859738] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 336.864735] ? mem_cgroup_protected+0xa60/0xa60 [ 336.869382] ? up_write+0x7b/0x220 [ 336.872901] ? up_read+0x110/0x110 [ 336.876423] ? __anon_vma_prepare+0x36d/0x720 [ 336.880900] ? pmd_val+0x88/0x100 [ 336.884332] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 336.889850] mem_cgroup_try_charge_delay+0x1d/0x90 [ 336.894760] __handle_mm_fault+0x25ba/0x4470 [ 336.899149] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 336.903975] ? cap_mmap_addr+0x52/0x130 [ 336.907941] ? userfaultfd_unmap_complete+0x32a/0x510 [ 336.913116] ? security_mmap_addr+0x80/0xa0 [ 336.917419] ? lock_acquire+0x1e4/0x540 [ 336.921375] ? handle_mm_fault+0x417/0xc80 [ 336.925590] ? lock_downgrade+0x8f0/0x8f0 [ 336.929718] ? lock_release+0xa30/0xa30 [ 336.933686] ? lock_release+0xa30/0xa30 [ 336.937644] ? down_read_killable+0x200/0x200 [ 336.942121] ? mem_cgroup_from_task+0xcb/0x1f0 [ 336.946680] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 336.951432] handle_mm_fault+0x53e/0xc80 [ 336.955479] ? __handle_mm_fault+0x4470/0x4470 [ 336.960050] ? find_vma+0x34/0x190 [ 336.963582] __do_page_fault+0x620/0xe50 [ 336.967644] ? mm_fault_error+0x380/0x380 [ 336.971781] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 336.977298] ? __x64_sys_clock_gettime+0x170/0x250 [ 336.982218] ? __ia32_sys_clock_settime+0x290/0x290 [ 336.987214] do_page_fault+0xf6/0x8c0 [ 336.990996] ? vmalloc_sync_all+0x30/0x30 [ 336.995125] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 337.000642] ? do_syscall_64+0x497/0x820 [ 337.004690] ? syscall_slow_exit_work+0x500/0x500 [ 337.009519] ? syscall_return_slowpath+0x5e0/0x5e0 [ 337.014447] ? syscall_return_slowpath+0x31d/0x5e0 [ 337.019362] ? prepare_exit_to_usermode+0x291/0x3b0 [ 337.024369] ? page_fault+0x8/0x30 [ 337.027893] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 337.032717] ? page_fault+0x8/0x30 [ 337.036238] page_fault+0x1e/0x30 [ 337.039675] RIP: 0033:0x40e16f [ 337.042858] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 337.061739] RSP: 002b:00007ffe1f3c3010 EFLAGS: 00010206 [ 337.067081] RAX: 00007f91cf350000 RBX: 0000000000020000 RCX: 00000000004569aa [ 337.074330] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 337.081580] RBP: 00007ffe1f3c30f0 R08: ffffffffffffffff R09: 0000000000000000 [ 337.088827] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1f3c31e0 [ 337.096073] R13: 00007f91cf370700 R14: 000000000072bf2c R15: 0000000000000001 [ 337.103748] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor2,pid=22547,uid=0 [ 337.118389] memory: usage 188kB, limit 0kB, failcnt 884 [ 337.123776] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 337.130570] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 337.136749] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 337.156285] Tasks state (memory values in pages): [ 337.161146] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 337.170073] [ 22547] 0 22547 17618 8218 126976 0 0 syz-executor2 [ 337.179111] Memory cgroup out of memory: Kill process 22547 (syz-executor2) score 8249000 or sacrifice child 03:35:35 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000380)=""/4096) close(r0) 03:35:35 executing program 1: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f00000002c0)=@ethtool_dump={0x28, 0x0, 0x0, 0x80000}}) close(r2) close(r1) 03:35:35 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x40044590, &(0x7f0000000380)=""/4096) close(r0) 03:35:35 executing program 6: r0 = socket$inet(0x10, 0x80005, 0x4000000000000000) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x101000, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f00000006c0), 0x1dc}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="40000000000000000a004e220004000000000000000000000000000000000001ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a0000000a004e2402000000fe8000000000000000000000000000bb05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e220008000000000000000000000000000000000000cb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e22070000000000000000000000000000000000000101000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2031260000fe8000000000000000000000000000aa2e380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e247f000000ff02000000000000000000000000000101f0ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e23ff01000000000000000000000000000000000000a0820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e24e4020000ff0200000000000000000000000000018e0f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000000000000000000000000000000000000ce660537000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400100000ff02000000000000000000000000000106000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e235d000000fe8000000000000000000000000000bbff03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x590) 03:35:35 executing program 4: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2, @remote}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0xfffffffffffffcfc) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'veth0_to_bridge\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}}) sendto$inet(r0, &(0x7f0000000140), 0x1b5, 0x0, 0x0, 0x0) 03:35:35 executing program 7: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/mnt\x00') ioctl$VHOST_GET_FEATURES(r1, 0xc0044dff, &(0x7f0000000100)) 03:35:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20000, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x7fff, 0xaf44}, 0xffb8) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000100)={0x20, 0x7}, 0x2) ioctl(r0, 0x100000008912, &(0x7f0000000240)="025cc80700145f8f764070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f0000000140)=0x1f) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_SET_PIT2(r3, 0xae60, &(0x7f00000001c0)) 03:35:35 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000001c0)={@local, 0x9, r1}) r2 = socket$inet6(0xa, 0x201000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000040)={0x0, 0x54, 0xffff, @dev, 'sit0\x00'}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 337.189164] Killed process 22547 (syz-executor2) total-vm:70472kB, anon-rss:104kB, file-rss:32768kB, shmem-rss:0kB [ 337.200184] oom_reaper: reaped process 22547 (syz-executor2), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB 03:35:35 executing program 4: r0 = accept(0xffffffffffffff9c, &(0x7f0000000040)=@nfc_llcp, &(0x7f0000000100)=0x80) fremovexattr(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="6f73322e2f6465762f70746d7804"]) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000002c0)="0a5cc80700215f857140701511b528d65759bc506a814b022d6f5f3c382e18d9b8c48ba397e75eebefc3d9d9dbe8e6bb7a311512d03e1deffa9480e43e3a1b1d32b78c40c7ea7a62221d808ba9812bc59e768b541323b7e8e970b53420384b24e70e5b2b5ea3113cf48d92762d3c3c9ea1ed047f96053d5a889e0cecdb3f32ae14e681e99d851ff9ffd032a319b84894dd3601f85c9258c08e4aea0f823bb0e8e89da3ec2160924d4c954d33fafd647f323818ef560d418862ed0ea69e5ec3e0e869ec2cda200b18fec5ef6e05000000000000001e5163be") r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x34, 0x0, @thr={&(0x7f00000003c0)="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", &(0x7f00000001c0)="313140cce1bfa5d8222b08da938e1d747e4c9200073053f33a1bfa844c8681f7f571c1fd2e36b15418fc203bf684439c7853431a47cfbe2222c530c139766329e21dc8a40c24e1976b39c6d259e9b2537829f342995df47054b3d8a226e9647362f2d0eb55de2c4e90123654352efea10e76e603bf0880524bc4e3c1c3af4bb4b419e6e6fee3ea4a59f8981c204f31efbb0eca9e50c995d664e8bcc1391f3ad5b55112"}}, &(0x7f0000000180)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x10001) r4 = syz_open_pts(r3, 0x200200) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) dup3(r4, r3, 0x0) tkill(r2, 0x1000000000016) 03:35:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000001c0)=""/156, &(0x7f0000000000)=0x9c) syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00') capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x1) syz_open_procfs(0x0, &(0x7f0000000400)='fdinfo/3\x00') 03:35:35 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, &(0x7f0000000040)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000180)=0x2eeb051b3b5b9c2f) setreuid(0x0, r1) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) lchown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:35:35 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x850}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="3e2e0f211166b93e0300000f32c120ea0f01cf3ef466b97709000066b85751000066ba000000000f300f20d86635200000000f22d8b808008ec866b9270b00000f3266b9800000c00f326635000800000f30", 0x52}], 0x1, 0x0, &(0x7f0000000580), 0x2e7) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f0000000200)) r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000140)) 03:35:35 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) fdatasync(r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) r2 = dup2(r1, r1) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$int_in(r1, 0x0, &(0x7f00000001c0)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x8c, r4, 0x802, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9e2e}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x40}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3d, 0x14}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x40}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) write$vnet(r1, &(0x7f0000000140)={0x1, {&(0x7f0000000000)=""/53, 0x35, &(0x7f0000000040)=""/82}}, 0x68) write$P9_RXATTRWALK(r1, &(0x7f0000000100)={0xf, 0x1f, 0x4000000000000}, 0xf) close(r2) 03:35:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x4, 0x1, 0xf001, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_ENABLE_CAP(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x80ffff00000000]}) 03:35:35 executing program 6: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00003e3000/0x1000)=nil, 0x1000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) read(r0, &(0x7f0000000400)=""/100, 0xffffffffffffff23) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00003e3000/0x2000)=nil, &(0x7f00003e3000/0x2000)=nil, 0x2000}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x141040, 0x0) 03:35:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c2134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa684020000", 0x0, &(0x7f0000000200)) chroot(&(0x7f00000003c0)='./file0\x00') sendfile(r1, r1, &(0x7f0000000000), 0xd4db) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x5, 0xa, &(0x7f0000001b80)=[{&(0x7f0000000780)="12e12517cd5f1552a621bd15341c21af671a69d9970c6f12b63607ddc4b5451a2cb4be21154b0596bc120f7aac7fb5a4ede4083f7c7a485212dc7dd7df6d8aac98d07818cc13326e9373287b3af35523bddcf2ae28e02868c9be512521b25f55c78e434e65a2f6f36321d874bdee18605b08b226fda40b66eff0244d0b0d1a3547756f00a4ee5766fe8f9e72dbf0ff80f1bac1ff4b90de42539a991475cb32c38bb4e17004b15876f72151abc66f65dd1c10ee014be894036ec4759985343bb0727582b2436a065190371624a6139dd1deccaaf5649669f542109dd57852fef9247e04b3e264a831950eb179e8222772742bb31ca1452a383a4359f9e42a39d6d2b12e2d45ecef5b0ae2a4882daf4f3c7cc4bc5a0a7210d08d5b610affd0ed6adb233fbb0b8eca0a5c111b5a1442b61c5867f50e1ac45e02bbe4de99e38fbb7d29582c9ec05a848162cc9743e73bf4b4bc526a380a3eed7d58620edc846388efb686e12d2ee26210cc388ab79c5e6f978516ff3908a353183af1a952474990187ec9bbdbb869f130625797e9d7ee708c09cea25f9a4b6ac72117c04e348e0d21b24768456119228958a238eecc87668b54be2a8d682a287aa8dfad67f05b44d4c528115692c48989ac7a26d5c0e64534f00036785df1b0b95016babfa0078f983e0a654024a2ce2ca7272a7c641025e94454c13828b5011f9d32bdb0a6fcde7e3d5b9f5bd0bf19dab2f5e932f034ddaf09c1673016b89289e5b285a8604aa896622ad4b597765d528caf187e0f74efa9ccae1bcb14fe1fb847eabf62cee03e4fe19d631fcf213e5c2a07bc5fb3e2690accb3e87e140d7dc832e25bcd54730d0695e26a37982090939f167842f8a513ef091f60783a9ef41947d3154e6de2789c4b433814850e39102b4a6c56d1fded7efc8708385601bb030ddf2f7756629b095c81e66f73cdbafd3b4a93fb428ab1cbfda4f591258a81eb48aac759a12cdd2e19970d90305f1e8c9c80546a5509bca0dc784f0efb9e2a7979d0c732e3da1b8daa5f00db66b558af49ef8996b09f888052000ab1d002e522c6413ca04896d3b09e26c5c6e9812cf941efdd83200cdafa8e2c5deb4364c2889f278f6f672be450258b74aa9a1d0a23c0fcd72bbcfd1c87620d1f394c006b9f622a8590d10e6d1428d062fe2fbd2fb4c7f863a884f552b37a94b90465f95978a08400a08aecb93cbbfae12d6b046987abd76b897da4b08aca523c74aaa8f01eee00217713e610ee1249db6c0704a9502a632d2a9124fed103405153d9e310f4f40ae350e68d7a17d62925c992da821ed0a42317b24a16575cc7baf1ad604b13604926175fca7a6851ded22373889a4e24d26264b710c3624519d116338377587d46d39bb4e6213b6a97540777edce8dd111ba9f215467255b4cbe9b26d07d7ac60a3ebe24bec03bc7ba456bcaf38c3dc4ff2f0928af21286fc9b42df112fcd4d8ee56cddf64e0a023a083f0afcdee6e02c6fd4f55ac60d5505b04d29c4bd65b397bbb77334b955a91c74d44db1a2c13c78da7e9a0f6f7b269e9088bb330dccde685a909a46273900f19ef8ac47fd40c6e8ab7f1d4689cc2fe222af7e6fd8d4f3a3180cbd4253a13b49f08d3ea07fb7cce067f31ec0290dd9d2e14ef6b26bdf03beac5fc0acf73e06f6660207517403afcb06996324f9747cbbfa83ad710a3b5002c71788bc051ac3ac6ff52113ef3ea29d98c1fbd72ba8487b2570cc267a1e2223921cf4630ac0fa57d2e56246c94a3a2ea9ca598a2641ec272cfaa0933f1dc6c00881002bc5ec4a741bb3169e0ceb8c459058049d689bedfbc4b6bf54cdfd4e88c58d13505dd3bc07c59e58d0f9e98552c58abd79b05bc1872ae7e8ed946683fcaf8e12a71390b3451376a87f5fa204ac3126c17bccbe85b9c791e46c03df354032eef7f74a796d92eb0f20de0291dbcc408c9157e5d02bc6d0433ef86087334fef91e1db9b9c14d72cdc514f0214e4b115c3dc9f0ad9d21d4d854d455a75da75397513f5917b8ad002c43ad9adb85e99e9249f15d83ee75296bc61ace90e0bffc51f482eb8b5342acec133f40974e8d6bb6ef1c3c4a1cff773ba9fb015de2eb4a509f05ce61cdcd621e5e116bb8cc455063b2f34502af4ff7d1083a346188ad853a823213b93b48e83b62858c51c18090183b5b1814ba8b62336991b4f32f02ea71644bc33edb9db1e0bef3909a03a64af110e1f968225591928c6905681cde28c70d92f9d76f546d7a266b5d661879f96a1a3692979557f3ed5e3b046fc12b8981362ad8f793a3a0074312d3fe02f2840d569fa19c17608d5ca20409b4020b1392e82ef61e81a33f5db401def50b3a314d4eca7d8e0a1d52446a11eb4b5aca068990885f4b3e656f18b36f00686feb4e3d3747370c80a2b68ce0748a68c20a92a837ac65ed920864b32f46eedbff6a76ee255d1fae89756ca3d311cd8fd27f0e378a14574ffebb074b25b1f67e2ce96a7c3da296abfffbe2528985ce5bf3b70b4c6e8267257116b01846207a6f5d39171c6dd2ca5a84faf0231272284152eef208a3fbadc54e818bb444a8859f1d088e092ed70547c68df5bea2269573bc3dc71937418e080ea083e8b6f9fda80a067bce60aff71799e22418835a5c39d318020a6cd694563fd71324563f0abd331b310aca0db397d74fee0bfd8ff1a7e68e4a55425c7cdc5c93b972e9b1a3a10a2e64bf698434b237f351beeb8d484635d6331378c00488c25b54bdcb5f0c0b961edc73a04d5447a6dade8e5f74acf4bc73193ebcabefcee5ae52a899c19ea72586135cbeb50a68a9ff0d98a3b64e610ffd63940cde16e0fbfc4332b7c3321bdae4dc4b017bc2f471d2935b1f7a5954258080bbbb97b94e59ff282600246154459249543ecb05559a9a82773215b05b2e5a8b0c9e595d1d9c31e70462530a76cfbea4e125df46c9c4c5bc35b04506688a68592e0ffd38d21529ac53cf0ddf61b90da07a0d7d433e5805728b22eb5a86569040fe0074693260821e869d0fab1eba64313d6685eb4fe1a10a7db60b3339bf1e8c96558e4b8f34892fadff8d29f44e307f5b363bc59f32ee2646dbee1abf7f33f67151625ba306a46e782949f460bf2f404d490a5799e0b549b2f8d0cecd37209f139e7944e7eb47e221a03273aee6418070dd5e48062e730bf4ada275a1b33819fc8ab4d48b0be95cc19981ac599b414bb25f896c20fd4e40ae44a20f8de6e16d6dd460c7005ae0ea47ca20e3c84073bdb803f2a33af1108b099a8a8d235ed73b8001a3b9975dff4eb2bd20f0b0c6a448b069be07e79309d4ba162fe3dcf6def52ff67c2f4585cc10e1e6a7c43251f4e496d0a5a837cef77c36d99e69d218c4590ffc74a2b454091db8ab9c5ab7bf6eacaed0cbcfee2d50a530f9c551fd0dad6cd439144b39d06d564e263caa50414e28bb6d5ad6111c2a47d2d49400e631164ab79cc544d340b5d6dd40d89724c5fb015721487af5862bbcf1d28682c878c239ac24de609671f4da9ff1038d02e8682a6a2052101b36d952dfb091d9593d3196c2cc593ba49ae8e5f4a6504480cf18f78280be670b7f5da7484ee1c7e12fcf54c37263122f7c520b0c0d50aea6abc2550eba28a86ddb386e4abc7714a03c59b17a63f2c089e943b925ca3932b2aa7234fa360b0c63966a98f1680b82ffad2a38548f7f9e03e3d73c8c7e494bbdc0d229f6aab970a11819272f5c40fce9b2d2b0a02d8af40236f71d7c5a3af2ae65621997da01ca3d4ed78050ce5cf888124a7a4b072ee86b1f14550784033c21bcb18f91b480de10ff8da206942ca434b89b7c37b8a52ceb3bc97d16e0b3f6baf3d2905735df039cd8b241f8c89a5eedb505f902cb8a7ada77a4b159017da53d2caa00a0320f2d42387b7291aa243c4d2075fe7ff96ce145a46687526dda86288abd8cccfe91f96d92c12fc1e3c00fc4b3c68a48e5dc626eafedd5d19143418710701c9ececafdf3e5c50504dcdc1de5c64bd6f387fe0f93b5be5a0f7c2f26fae1bcca8fd8acf9effcf43866c840dae6eac36ebeaf0a97174cf32b317215651e40f8dc97defca09c512485802f8dd7319f2e40fd5772b9ca810261f24f40093c5d708ab393d1c5e512c201b806e75e5186a1e31a3b9499283d9d893d70bf0cbe2d5bfbe3090e157c75f4ce6c3767e032ffb1e0860ee4c563dc106f89ae585ff6299d314ddd60dcfbe3b7ff57b44a860f7e4de18cccd79458a5f66bec9523521e5c61b3c9cd9a78a82b1cd5aa1f537bb2ea987e39b57d48feb08ec999ce55757e9b49306bd9cf7efd6fec395be66dc1b83ed575299243653922689e6f9a7ae5d4bfb41eab915fd1e8996cdea758140bba494a1c407c2f616ee8c064f60769df064ef0b6f745981a466d089d0ba05689642b777f97e9135094d7e2e9dfb70cc1aafee246ef7d17151674f43c7a133af695ed95bc4ffbf12b1def5d3093d1dd3383f4f43cfa26ffdf9503f04d1d6a64e045960feaeea6545aae29cbe8ccf2399a08c3ba9c192647f73092d58ef249f3bebae866af8b63a811f953b2804cb68225a10529a88b3f7e85dd7d0340ccc9aa4112c8da3d5ed7d16213f200335991a7f8eb7197e4bc8e9715e32f264639498dab6469d6adbbf8b60698bc812459ae5b7438637a2a33ba938d488b52955ec5738a2e191780e81106bab9c7ed03190edc28b58bce2daa0895df3dec6461670af9689bdab8b6ea360c39488c4bc6e025fd51376449eb4f4faa7299ea5b510f1b43b6007b4c70af6327ddbfadf45a0ae5277e1422b8447e29e280e35506a3cca0c7d07471882a2bcce085c50349c5cebd55c106050a338b19f9e511e2f4610c6fefc3facfcae8c4f9369295535d00c94c905ec201609ec29aa04357a36232b00dcc1f84cc32794b24be5f4324be070107af12ffb2c5fe8e870445631dd833afda8db4c4cf4527fffdf94907e0def6900cd2e69f82538dd1309db775d6f4b93a41eff87f8d55b2205127bf5280b963b7f8564cd9c065bab6c90e327c8c8bed5bc18e8e74e9440038177ff76958fadb43b62569b3cb4a645d49ed029d70c644b86395eca6026c5bf9829ded85345751f68a5c17c4fc8e828485afb4656562f6e634a1af3cd0e383a0cc98a92228b3f4206490c15249acb8497ee1244cabe7504078a7dfbce997e1d6c18e1ca34cf4753e47869c90298f34bc8b9dc81f32e2f11de2c9100a50224ab0ba7b68ced147ea68764ef511eb85c12e5c137dff9df168a11fd6f58a3980f787d6eb341a398c42e9bcce771d661222f66339d4d33760391a3bfe44ff946f14f980b32134c04e6b048d0e11a8b90c404dfedd8e4df82dfc60f4ed187cae6c4134258a4be140bec0ab73dbf8bc3a296ed967485852280eabadaab710353f70f01e5fdb07852e0cd8a3dee630949d92d040b79c5c746d98c7a5eef837328d09a93c2fac01f49ea420d55f5c815d3ee629e99198801cab7a919a8436c1819baa4a7a3b8b4771e689bba541a9d913b6fb173d335ae13474be11ba93eebeda69c995c950399bec39af005f1da05c6a8b1642ea6ba0cb0807ae5c7f37af217648e0796bc8c4e6556bf8c3171b340074543c719a5b2d155229235706ac2d4e715e5b35255539d32bf4f7fb4ec89dea17427efe206a57cf8a21dd58e3b08d42e8a6913eeed6e8ffd81dfd2ef770fc044a09c8fa2ef366c40428225bdbf35008e073a2d039849172e2aaf8f749f152af19dd4d2fdbd468e1ef43726fcd789360c4efb3759297c68c7c11", 0x1000, 0x1f}, {&(0x7f0000000400)="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", 0xfa, 0x7}, {&(0x7f0000000500)="11aad8cc6b9ac4dc4a4a4bb1a1bc4c330f377f2b44d90073ca6649c1423c640b1a1290abc84e9b6a50c51cc090514626c64fff6425c86296a903523dbd15153821c96ec369a2131081bcdc4201054ff1d773c0ef8ff337e0d577c4636464bb5529f7ebcb1a9f32d2f6f6f0c0162f3093ce0b578bb84776afd254c6c07567854501d0a15d0876d17af2f3281c9ed00fc84f449f8a62ee0fd6730620a092de27cc6f150f991439c4fb18d7d6aa5549e961b3e0f5eda266c02e12a355155213e5eaf10ec0607a8f03cadb17524f8bc3664cf146168e73f573", 0xd7, 0x3}, {&(0x7f0000000180), 0x0, 0x9}, {&(0x7f0000000600)="e3bfad5db9a21937ff795ac14e9b5a2565202c8507cf6262b409fd1f6699f63f5e9694a5f8d4690db9ded85759150080c1cc44b8c10b42ba47b6ecc6152d3e2ae5f0480222cea5599ac923af07dc5496211eaaf9946299b66f6faa2f9355a2246845150cd505767ce59e8204c9adb460354fe5b3422035199af9c4ff8cf04f96652fb551999d88a9580e643f7fe6f730ec6f57f296faca6ec558d0b44c6ea8e53ead9030ce8e34191f9c841a754c7ce2f1470a4ce0ac7de4f92c20b7652963cd0d9236eae3bbf03af1bd5537dfff9ed2395d4e6915", 0xd5}, {&(0x7f0000001780)="6eb889929748c5ad183e9577985e5cb0eaccfbb69519867af05c6ec2f3a1c4a9c930b1ef6093b8bfadd50974de00b7924d346d1d22d932fcb37bfd5eb0a57f1178d8f34f619feb9f3ec93e43580a0fddac42bb58a5c559b2133c1474d25ad64a5032a7df8c20c9fefec6dc1d033a4f0c591b8ee3e88519869415aca0cf42fdbd89e4d708a197b22e7e0d2d78b89d4c584404685c6a2deb6191923231126c96655916738680ccd013c2fe8c6be7bb5745f70fc4707bda3e2f291cffe649ec947370599277a3f93b0ac2425b178aff179ef67b9b6e0c0b071027d9d2e171d734", 0xdf, 0x4}, {&(0x7f0000000240)="4b945a1ace9d89bfe5fe7b128ed8ea535d00ca17c05b80549f5679aa60d6eb69ecd98f20600beea0ce037d723dc4e01e50903b5dea925c370dc5e1f5ec9c9c13", 0x40, 0xc5}, {&(0x7f0000001880)="9271d37219755079c381c89521db2a1570dfdf5fbd497db73713f7f8cb53d40905ee68732cb8e93d0406abce516d9358aa1df4c89d507bb91f555d7cef5367c35d1e3d974179be6d00153d297ced1263c52fab9e370a64c6a733773f372fe4a0489dbe0b243ffd6dc2c437354d6f8f2dc29b6bbeddfaa7ba00c1905a65fb3febf145edbf6e16f4474d1088d5cd4046b39ea71d5b254dee556b234051f7c15880130f437a4cad2898c2a3359f24dc1286faa946324c1ebfd6522013e52d504ec60f59397b6af09ff18f31489d3b03b623b9aafe0802de6e4f82125263b448", 0xde, 0x2}, {&(0x7f0000001980)="915807d8d844cc261b2a7ab4f89eb8c9e1e5a91fcbe0c009ec1eac7bd492df5642697f8e5ba8dc38a16034900bb229389c7d435e0cf96cab5112161cd2c517be5f5b1cb715867c0cf6ac0aa856e55d21fcbe503202b21ee963c805f2b45a08c1c354e695409a45b9ebb147088707e86e4831da5125bfc31233f1cb131b577cdf0c552d3df9a3e7f23c95e08a1f5a1697ff73a19d596203017491c7993ca048ae7a369f6d13b2d5cd6ed9ce9ac23c9620664da314114b0f4fb1eb448003ab0039ea0935746ff1b756fe98919b7dd0982852544fc04bf02143cc9d95afd252ed4b9ba888edc2b3b1a6185f63bb5d75b24feff0716bc1a3f446", 0xf8, 0x7}, {&(0x7f0000001a80)="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", 0xff, 0x7}], 0x100000, &(0x7f0000001e00)=ANY=[@ANYBLOB="6461746173756d2c73706163655f63616368653d76312c6e6f7373642c636f6d70726573732d666f7263653d7a6c69622c626172746173756d2c656e6f7370635f64656275672c64617461636f772c6469736361ff642c0093b9af2312cae153252544d639c136ea2a94a0dce902b80b35ef39fc6b53feae8b4ed8c58c8fc79680d653b2b13ac4750caac8b8074401d09d229e4c5ccbc20792994577639d39808ffca8818246fc28283cd5a597ed925dddeec22d02d030893e129b8ca494157e27f7b8964099a6f6047ad9010ab91696454022ebcdfd925f51b9f4cbd6aaca01a01cb357c2ee941d74fb9eccbff22b3ae58b305a082a1a7668de2534a06d1b097376e062ed60a77d07d669612d8e558d718bc9808fd96e83666d58344fd3dc3109ec1b7388839b007af607f892ec8b01e5b0763c84207cf170f20c90976b9b6f09f748098b992aadccf15e3418d144d1902f3700000000000000"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000100)="2e650f983df3cf0f01751a6a000f320fae29670f01ca0f01dfbaf80c66b8114eeb8266efbafc0cec0f01c8", 0x2b}], 0x1, 0x0, &(0x7f0000000080), 0x0) [ 337.433740] *** Guest State *** [ 337.437149] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 337.446037] CR4: actual=0x0000000000022048, shadow=0x0000000000020008, gh_mask=ffffffffffffe871 [ 337.454906] CR3 = 0x0000000000000000 [ 337.458686] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 337.464698] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 337.470805] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 337.477544] CS: sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 337.485591] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 337.493599] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 337.502390] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 337.510393] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 337.518386] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 337.526389] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 337.534381] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 337.542366] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 337.550361] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 337.558358] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 337.564797] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 337.572312] Interruptibility = 00000000 ActivityState = 00000000 [ 337.578562] *** Host State *** [ 337.581790] RIP = 0xffffffff811f4764 RSP = 0xffff8801903ef350 [ 337.587809] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 337.594238] FSBase=00007fc337905700 GSBase=ffff8801db000000 TRBase=fffffe0000003000 [ 337.602056] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 337.607966] CR0=0000000080050033 CR3=00000001d77ca000 CR4=00000000001426f0 [ 337.615008] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff86c01380 [ 337.621786] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 337.627852] *** Control State *** [ 337.631309] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 337.637980] EntryControls=0000d1ff ExitControls=0023efff [ 337.643439] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 337.650466] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 337.657844] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 337.664424] reason=80000021 qualification=0000000000000000 [ 337.670751] IDTVectoring: info=00000000 errcode=00000000 [ 337.676202] TSC Offset = 0xffffff495a92b8c7 [ 337.680542] EPT pointer = 0x00000001adf8c01e [ 338.069833] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 338.079266] CPU: 1 PID: 22646 Comm: syz-executor3 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 338.087759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.097116] Call Trace: [ 338.099711] dump_stack+0x1c9/0x2b4 [ 338.103348] ? dump_stack_print_info.cold.2+0x52/0x52 [ 338.108545] ? trace_hardirqs_on+0x10/0x10 [ 338.112784] ? lock_downgrade+0x8f0/0x8f0 [ 338.116947] dump_header+0x246/0x123c [ 338.120750] ? percpu_ref_put_many+0x131/0x240 [ 338.125337] ? trace_hardirqs_on+0x10/0x10 [ 338.129585] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 338.134523] ? trace_hardirqs_on+0x10/0x10 [ 338.138763] ? mem_cgroup_iter+0x517/0x10c0 [ 338.143090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 338.148616] ? css_next_child+0x1c3/0x620 [ 338.152746] ? trace_hardirqs_on+0x10/0x10 [ 338.156961] ? trace_hardirqs_on+0x10/0x10 [ 338.161178] ? trace_hardirqs_on+0x10/0x10 [ 338.165405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 338.170925] ? css_next_child+0x1c3/0x620 [ 338.175067] ? find_lock_task_mm+0x230/0x4d0 [ 338.179459] ? cgroup_get_tree+0xb20/0xb20 [ 338.183681] ? lock_acquire+0x1e4/0x540 [ 338.187660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 338.193186] ? task_will_free_mem+0x239/0xb70 [ 338.197663] ? lock_release+0xa30/0xa30 [ 338.201619] ? oom_badness+0x7d1/0xb00 [ 338.205487] ? ___ratelimit+0x36f/0x655 [ 338.209441] ? lock_downgrade+0x8f0/0x8f0 [ 338.213574] ? kasan_check_read+0x11/0x20 [ 338.217715] ? do_raw_spin_unlock+0xa7/0x2f0 [ 338.222183] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 338.226741] ? do_raw_spin_lock+0x200/0x200 [ 338.231044] ? oom_kill_process+0x24d/0x280 [ 338.235355] ? lock_downgrade+0x8f0/0x8f0 [ 338.239487] ? trace_hardirqs_on+0xd/0x10 [ 338.243614] ? ___ratelimit+0xaa/0x655 [ 338.247480] ? idr_get_free+0x10c0/0x10c0 [ 338.251613] ? kasan_check_write+0x14/0x20 [ 338.255826] ? do_raw_spin_lock+0xc1/0x200 [ 338.260042] oom_kill_process.cold.29+0x10/0x660 [ 338.264782] ? trace_hardirqs_on+0xd/0x10 [ 338.268927] ? _raw_spin_unlock_irq+0x27/0x70 [ 338.273419] ? css_task_iter_end+0x2ce/0x490 [ 338.277810] ? oom_evaluate_task+0x540/0x540 [ 338.282198] ? trace_hardirqs_on+0xd/0x10 [ 338.286325] ? _raw_spin_unlock_irq+0x27/0x70 [ 338.290799] ? oom_badness+0xb00/0xb00 [ 338.294670] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 338.299408] ? mem_cgroup_iter_break+0x30/0x30 [ 338.303987] out_of_memory+0x86d/0x1ad0 [ 338.307947] ? oom_killer_disable+0x3a0/0x3a0 [ 338.312434] ? kasan_check_read+0x11/0x20 [ 338.316576] ? do_raw_spin_unlock+0xa7/0x2f0 [ 338.320964] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 338.325534] ? kasan_check_write+0x14/0x20 [ 338.329753] ? do_raw_spin_lock+0xc1/0x200 [ 338.333969] mem_cgroup_out_of_memory+0x15e/0x210 [ 338.338793] ? memcg_memory_event+0x40/0x40 [ 338.343105] ? page_counter_try_charge+0x1c7/0x220 [ 338.348013] try_charge+0x720/0x1680 [ 338.351710] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 338.358464] ? lock_downgrade+0x8f0/0x8f0 [ 338.362598] ? lock_release+0xa30/0xa30 [ 338.366563] ? __anon_vma_prepare+0xc4/0x720 [ 338.370954] ? handle_mm_fault+0x53e/0xc80 [ 338.375172] ? fs_reclaim_acquire+0x20/0x20 [ 338.379479] ? lock_downgrade+0x8f0/0x8f0 [ 338.383616] ? percpu_ref_put_many+0x119/0x240 [ 338.388189] ? get_mem_cgroup_from_mm+0x209/0x440 [ 338.393017] ? get_mem_cgroup_from_page+0x190/0x190 [ 338.398014] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 338.402838] ? lock_acquire+0x1e4/0x540 [ 338.406794] mem_cgroup_try_charge+0x4ff/0xa70 [ 338.411383] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 338.416388] ? mem_cgroup_protected+0xa60/0xa60 [ 338.421038] ? up_write+0x7b/0x220 [ 338.424570] ? up_read+0x110/0x110 [ 338.428094] ? __anon_vma_prepare+0x36d/0x720 [ 338.432570] ? pmd_val+0x88/0x100 [ 338.436005] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 338.441524] mem_cgroup_try_charge_delay+0x1d/0x90 [ 338.446437] __handle_mm_fault+0x25ba/0x4470 [ 338.450827] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 338.455649] ? cap_mmap_addr+0x52/0x130 [ 338.459607] ? userfaultfd_unmap_complete+0x32a/0x510 [ 338.464778] ? security_mmap_addr+0x80/0xa0 [ 338.469089] ? lock_acquire+0x1e4/0x540 [ 338.473048] ? handle_mm_fault+0x417/0xc80 [ 338.477263] ? lock_downgrade+0x8f0/0x8f0 [ 338.481388] ? lock_release+0xa30/0xa30 [ 338.485340] ? lock_release+0xa30/0xa30 [ 338.489303] ? down_read_killable+0x200/0x200 [ 338.493790] ? mem_cgroup_from_task+0xcb/0x1f0 [ 338.498368] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 338.503128] handle_mm_fault+0x53e/0xc80 [ 338.507192] ? __handle_mm_fault+0x4470/0x4470 [ 338.511775] ? find_vma+0x34/0x190 [ 338.515315] __do_page_fault+0x620/0xe50 [ 338.519377] ? mm_fault_error+0x380/0x380 [ 338.523523] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 338.529056] ? __x64_sys_clock_gettime+0x170/0x250 [ 338.533988] ? __ia32_sys_clock_settime+0x290/0x290 [ 338.539011] do_page_fault+0xf6/0x8c0 [ 338.542804] ? vmalloc_sync_all+0x30/0x30 [ 338.546941] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 338.552457] ? do_syscall_64+0x497/0x820 [ 338.556502] ? syscall_slow_exit_work+0x500/0x500 [ 338.561330] ? syscall_return_slowpath+0x5e0/0x5e0 [ 338.566243] ? syscall_return_slowpath+0x31d/0x5e0 [ 338.571161] ? prepare_exit_to_usermode+0x291/0x3b0 [ 338.576158] ? page_fault+0x8/0x30 [ 338.579679] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 338.584504] ? page_fault+0x8/0x30 [ 338.588023] page_fault+0x1e/0x30 [ 338.591452] RIP: 0033:0x40e16f [ 338.594625] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 338.613508] RSP: 002b:00007ffd8c7205b0 EFLAGS: 00010206 [ 338.618868] RAX: 00007f3313243000 RBX: 0000000000020000 RCX: 00000000004569aa [ 338.626123] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 338.633371] RBP: 00007ffd8c720690 R08: ffffffffffffffff R09: 0000000000000000 [ 338.640621] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8c720780 [ 338.647869] R13: 00007f3313263700 R14: 000000000072bf2c R15: 0000000000000001 [ 338.655323] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor3,pid=22646,uid=0 [ 338.669629] memory: usage 188kB, limit 0kB, failcnt 901 [ 338.675034] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 338.681812] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 338.687984] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 338.707530] Tasks state (memory values in pages): [ 338.712424] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 338.721342] [ 22646] 0 22646 17618 8221 126976 0 0 syz-executor3 [ 338.730394] [ 22648] 0 22648 17618 8218 126976 0 0 syz-executor2 [ 338.739439] Memory cgroup out of memory: Kill process 22646 (syz-executor3) score 8252000 or sacrifice child [ 338.749466] Killed process 22646 (syz-executor3) total-vm:70472kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 338.760528] oom_reaper: reaped process 22646 (syz-executor3), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB [ 338.770951] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 338.780415] CPU: 1 PID: 22648 Comm: syz-executor2 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 338.788895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.798250] Call Trace: [ 338.800841] dump_stack+0x1c9/0x2b4 [ 338.804475] ? dump_stack_print_info.cold.2+0x52/0x52 [ 338.809662] ? trace_hardirqs_on+0x10/0x10 [ 338.815616] ? do_raw_spin_unlock+0xa7/0x2f0 [ 338.820007] dump_header+0x246/0x123c [ 338.823798] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 338.828714] ? trace_hardirqs_on+0x10/0x10 [ 338.832945] ? trace_hardirqs_on+0x10/0x10 [ 338.837189] ? trace_hardirqs_on+0x10/0x10 [ 338.841413] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 338.846931] ? css_next_child+0x1c3/0x620 [ 338.851056] ? find_lock_task_mm+0x230/0x4d0 [ 338.855449] ? cgroup_get_tree+0xb20/0xb20 [ 338.859670] ? lock_acquire+0x1e4/0x540 [ 338.863625] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 338.869146] ? task_will_free_mem+0x239/0xb70 [ 338.873621] ? lock_release+0xa30/0xa30 [ 338.877584] ? oom_badness+0x7d1/0xb00 [ 338.881456] ? ___ratelimit+0x36f/0x655 [ 338.885416] ? lock_downgrade+0x8f0/0x8f0 [ 338.889548] ? kasan_check_read+0x11/0x20 [ 338.893681] ? do_raw_spin_unlock+0xa7/0x2f0 [ 338.898071] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 338.902635] ? do_raw_spin_lock+0x200/0x200 [ 338.906936] ? oom_kill_process+0x24d/0x280 [ 338.911339] ? lock_downgrade+0x8f0/0x8f0 [ 338.915476] ? trace_hardirqs_on+0xd/0x10 [ 338.919671] ? ___ratelimit+0xaa/0x655 [ 338.923542] ? idr_get_free+0x10c0/0x10c0 [ 338.927678] ? kasan_check_write+0x14/0x20 [ 338.931891] ? do_raw_spin_lock+0xc1/0x200 [ 338.936124] oom_kill_process.cold.29+0x10/0x660 [ 338.940864] ? trace_hardirqs_on+0xd/0x10 [ 338.944991] ? _raw_spin_unlock_irq+0x27/0x70 [ 338.949480] ? css_task_iter_end+0x2ce/0x490 [ 338.953872] ? oom_evaluate_task+0x540/0x540 [ 338.958261] ? trace_hardirqs_on+0xd/0x10 [ 338.962391] ? _raw_spin_unlock_irq+0x27/0x70 [ 338.966867] ? oom_badness+0xb00/0xb00 [ 338.970737] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 338.975482] ? mem_cgroup_iter_break+0x30/0x30 [ 338.980059] ? lock_downgrade+0x8f0/0x8f0 [ 338.984189] out_of_memory+0x86d/0x1ad0 [ 338.988146] ? oom_killer_disable+0x3a0/0x3a0 [ 338.992622] ? do_raw_spin_unlock+0xa7/0x2f0 [ 338.997018] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 339.001584] ? kasan_check_write+0x14/0x20 [ 339.005800] ? do_raw_spin_lock+0xc1/0x200 [ 339.010019] mem_cgroup_out_of_memory+0x15e/0x210 [ 339.015276] ? memcg_memory_event+0x40/0x40 [ 339.019588] ? page_counter_try_charge+0x1c7/0x220 [ 339.024498] try_charge+0x720/0x1680 [ 339.028194] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 339.034928] ? lock_downgrade+0x8f0/0x8f0 [ 339.039064] ? lock_release+0xa30/0xa30 [ 339.043026] ? __anon_vma_prepare+0xc4/0x720 [ 339.047428] ? handle_mm_fault+0x53e/0xc80 [ 339.051653] ? fs_reclaim_acquire+0x20/0x20 [ 339.055967] ? lock_downgrade+0x8f0/0x8f0 [ 339.060096] ? percpu_ref_put_many+0x119/0x240 [ 339.064658] ? get_mem_cgroup_from_mm+0x209/0x440 [ 339.069479] ? get_mem_cgroup_from_page+0x190/0x190 [ 339.074475] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 339.079295] ? lock_acquire+0x1e4/0x540 [ 339.083261] mem_cgroup_try_charge+0x4ff/0xa70 [ 339.087822] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 339.092821] ? mem_cgroup_protected+0xa60/0xa60 [ 339.097478] ? up_write+0x7b/0x220 [ 339.101006] ? up_read+0x110/0x110 [ 339.104534] ? __anon_vma_prepare+0x36d/0x720 [ 339.109018] ? pmd_val+0x88/0x100 [ 339.112455] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 339.117978] mem_cgroup_try_charge_delay+0x1d/0x90 [ 339.122903] __handle_mm_fault+0x25ba/0x4470 [ 339.127297] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 339.132128] ? cap_mmap_addr+0x52/0x130 [ 339.136084] ? userfaultfd_unmap_complete+0x32a/0x510 [ 339.141254] ? security_mmap_addr+0x80/0xa0 [ 339.145564] ? lock_acquire+0x1e4/0x540 [ 339.149520] ? handle_mm_fault+0x417/0xc80 [ 339.153737] ? lock_downgrade+0x8f0/0x8f0 [ 339.157871] ? lock_release+0xa30/0xa30 [ 339.161826] ? lock_release+0xa30/0xa30 [ 339.165810] ? down_read_killable+0x200/0x200 [ 339.170294] ? mem_cgroup_from_task+0xcb/0x1f0 [ 339.174870] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 339.179610] handle_mm_fault+0x53e/0xc80 [ 339.183660] ? __handle_mm_fault+0x4470/0x4470 [ 339.188229] ? find_vma+0x34/0x190 [ 339.191751] __do_page_fault+0x620/0xe50 [ 339.195795] ? mm_fault_error+0x380/0x380 [ 339.199926] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 339.205452] ? __x64_sys_clock_gettime+0x170/0x250 [ 339.210362] ? __ia32_sys_clock_settime+0x290/0x290 [ 339.215366] do_page_fault+0xf6/0x8c0 [ 339.219151] ? vmalloc_sync_all+0x30/0x30 [ 339.223293] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 339.228831] ? do_syscall_64+0x497/0x820 [ 339.232876] ? syscall_slow_exit_work+0x500/0x500 [ 339.237703] ? syscall_return_slowpath+0x5e0/0x5e0 [ 339.242628] ? syscall_return_slowpath+0x31d/0x5e0 [ 339.247556] ? prepare_exit_to_usermode+0x291/0x3b0 [ 339.252565] ? page_fault+0x8/0x30 [ 339.256096] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 339.260919] ? page_fault+0x8/0x30 [ 339.264438] page_fault+0x1e/0x30 [ 339.267882] RIP: 0033:0x40e16f [ 339.271153] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 339.290033] RSP: 002b:00007ffe1f3c3010 EFLAGS: 00010206 [ 339.295410] RAX: 00007f91cf350000 RBX: 0000000000020000 RCX: 00000000004569aa [ 339.302661] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 339.309913] RBP: 00007ffe1f3c30f0 R08: ffffffffffffffff R09: 0000000000000000 [ 339.317161] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1f3c31e0 [ 339.324420] R13: 00007f91cf370700 R14: 000000000072bf2c R15: 0000000000000001 [ 339.332291] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor2,pid=22648,uid=0 [ 339.346585] memory: usage 188kB, limit 0kB, failcnt 910 [ 339.351990] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 339.358787] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 339.364979] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 339.384520] Tasks state (memory values in pages): [ 339.389393] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 339.398324] [ 22648] 0 22648 17618 8218 126976 0 0 syz-executor2 [ 339.407373] Memory cgroup out of memory: Kill process 22648 (syz-executor2) score 8249000 or sacrifice child 03:35:37 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0//ile0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x10000, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000380)=""/4096) close(r2) close(r0) 03:35:37 executing program 7: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x608081) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000080)={0x4, 0x10000}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f00000000c0)) ioctl(r1, 0x0, &(0x7f0000000100)="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") r2 = getegid() r3 = syz_open_dev$sndpcmc(&(0x7f0000001100)='/dev/snd/pcmC#D#c\x00', 0x92, 0x0) ioctl$RTC_WIE_ON(r3, 0x700f) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001140)) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000001180)=""/200, &(0x7f0000001280)=0xc8) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000012c0)={0xa, [0xff, 0x7, 0xfff, 0x6, 0xba, 0x9, 0x400, 0x9, 0x29f, 0x72]}, &(0x7f0000001300)=0x18) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000001340)) r4 = syz_open_dev$vcsn(&(0x7f0000001400)='/dev/vcs#\x00', 0x7fff, 0x400) socketpair$inet(0x2, 0x3, 0x60ea, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r3, r4) recvfrom$inet(r7, &(0x7f0000001480)=""/157, 0x9d, 0x2141, &(0x7f0000001540)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000001580)=@sack_info={0x0, 0x4, 0x1}, &(0x7f00000015c0)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001600)={r8, @in6={{0xa, 0x4e20, 0x1, @remote, 0x7adb}}, 0x2, 0x8, 0x100, 0x7ff, 0x1}, 0x98) r9 = syz_open_pts(r7, 0x8000) readv(r9, &(0x7f0000002a40)=[{&(0x7f00000016c0)=""/90, 0x5a}, {&(0x7f0000001740)=""/20, 0x14}, {&(0x7f0000001780)=""/8, 0x8}, {&(0x7f00000017c0)=""/100, 0x64}, {&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/139, 0x8b}, {&(0x7f0000002a00)=""/56, 0x38}], 0x8) syz_open_dev$adsp(&(0x7f0000002ac0)='/dev/adsp#\x00', 0x6e, 0x400000) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000002b00)={r8, 0xa2}, 0x8) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000002bc0)={{&(0x7f0000002b40)=""/30, 0x1e}, &(0x7f0000002b80), 0x8}, 0x20) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000002c00)={'nat\x00'}, &(0x7f0000002c80)=0x54) getgroups(0x2, &(0x7f0000002cc0)=[r2, r2]) r10 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002d40)={0x0, 0x0}, &(0x7f0000002d80)=0xc) sendmsg$nl_netfilter(r0, &(0x7f0000002f80)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002dc0)={0x17c, 0x11, 0xf, 0x8, 0x70bd25, 0x25dfdbfb, {0x5, 0x0, 0xa}, [@typed={0x8, 0x84, @pid=r10}, @typed={0xc, 0x14, @u64=0x6}, @generic="ac855afb37b16ea50efa60b8ca8913a6c70540c0ddc6611561f6a77ea2e67062d96b35f25c0fbf1db51d6841d57e5bdb07654bacb325b76b9bae8fa313263b639ebbc3e7747b911fb3be5aa0433b05f3da0070bd6d4ecf6aa7616c42468680514f70bcd7bd9c1fc0e4dd2f1170054ba67059e662787f78f4738c8e0992351a", @nested={0x4, 0x22}, @nested={0xb0, 0x81, [@typed={0x8, 0xb, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}}, @typed={0x8, 0x51, @ipv4}, @generic="35de538d2eb36d81393ef34098fb0d7898c3b5564b0b85006758e40a6a25278eb3010c50a23cb1f40b201874517c71dd31f4a65b4fd37cdcc26ae1ae840f60fb1cc6d672d140157899a1656f8ac2fadc4f3c560f917b6bfa855d4c0a938ac6ddbca22874319d77cf76b0ca074fff2bd2563584f7db13fec40aac4b23dd2edfa561f18ee9e791818ab1bd30a2f6b65791ed2dc6272eef8645a0ed56"]}, @typed={0xc, 0x74, @u64=0x8001}, @nested={0x14, 0x1, [@typed={0x8, 0x3f, @uid=r11}, @typed={0x8, 0x8a, @fd=r4}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000002fc0)=@assoc_value={r8, 0x415}, &(0x7f0000003000)=0x8) fcntl$dupfd(r5, 0x0, r5) 03:35:37 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x40044590, &(0x7f0000000380)=""/4096) close(r0) 03:35:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = fcntl$getown(r0, 0x9) getpgid(r1) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg(r2, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000001ef80)=[{0x20, 0x0, 0x7, "441005f4ffef000097"}], 0x20}, 0x0) 03:35:37 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x4035e049, 0x505083) r1 = socket(0x200000000000011, 0x3, 0x0) bind$packet(r1, &(0x7f0000000000)={0x11, 0x400000000000003}, 0x14) socket$packet(0x11, 0xa, 0x300) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000280000000000009078e0000002e000000200000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0000000090eb04eecb0c272cd7e342ed00"], &(0x7f0000000240)) 03:35:37 executing program 1: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) syz_mount_image$minix(&(0x7f00000001c0)='minix\x00', &(0x7f0000000480)='./control\x00', 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r1 = fcntl$getown(r0, 0x9) write$cgroup_pid(r0, &(0x7f0000000140)=r1, 0x12) r2 = creat(&(0x7f0000000180)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0xb5584) 03:35:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x42, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaab4ff954a62a55586dd60dcd5c0000c0000fe80000000000000c032ddf5ffffffa9fe8000000000000000000000000000aa81009078000000003aa37715"], &(0x7f0000000340)) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000040)={0x5, 0xae8f}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r2, &(0x7f00000016c0)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x3, 0x0, 0x2, {0xa, 0x4e23, 0x3, @ipv4={[], [], @broadcast}, 0x6}}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000100)="51f48ffc08c0198dbd68bbcdae745fa9a9ce41f85fc99caf23460700c5d3f6cffbd889134b3c287e83e486d723801995948f53c94e774c7bba1ec6ea5f7aa87e4db0a3b83314f40c2a17f59496d386a0181af743b2185ab50100204f66892ee0cd80d9ae9658b935ff346651650095f061e9f00f5bc01ce4d7216b5c9d5f113170bce56034710aeae621fc0e0e790702163977a355ffda20b5e7f846922aecd72aa501ea40f78af82730422efccfd384b940d64c8561a9430718acd142b40e945250ebacadb8371733e91843b7adf81aff27e9c55568c8ecf7b1ca154bb462aeeeea97f97c489f38b2ba21057aa3145df2ed66de3dac549ac1daf0207f338a9be02cbe0c04f065c3202fb1afd112fcd6a29d0e8d15814b4f11cd8c35ac51c0c9f6bd8abdc9c95765debe51c3f0285ec569c34de9269d1b47e0d5029fdba1df51e92acefd569cc9ea91f2dfb3328a44b9a7cc6569d29dc1d4bc2b28b51acfba9b8d9239d81ee342369931fb59bfca188c77226b9bb4a19c3b6f73e48b70c5714581948254394390ab5e332d98d7cae48a0b3a3288cf32d5dcb2b8dd1fbcb1ba94aae2af3a1d37dcd3dccc36f95ea7f3d125090460063dc65cb06e3f59ec8a9d90b5c98c3b6012fc26fcb041442e0722982d920087afd83f9f4ae19cfd730caa05585b38517fc592ba8b8545ab3973d10089973bc89f441d3196b0733e91ea75b7cc620baf318130d243deab263ef0d88f8d4e0a8bdda345cf988a5a1f82714b4387b0bf127f1aa36b5d92abd313990eaae6ae7e75a933fb3463658c6f28503428e6fd276cddc8244da990c0810f73dad677e425c502409b587e824e72e6670995ad36c86e2aec2a7f3c77f9d62a7a786469ce8b99a2ba93667ca032c12cb59913650135b6d7dc1f201ff54a080c8a5a05d4d45dd0cc85bf4bc9241e8c137f49313aaef2669cc43efff3a84c74f34351d2afa225625378ecded3fd1b9d838c87c052ffb79bb8bf72c59117c0a559817afe7aa6d8e7fc7df7d447670cdfa33f38925512f335f9bac226c047efab767b0ec03ecffe8e505ae547a183ccd7d6264bfba68b827cc0293c4562d8de700e646e2ff8a2af9110dbc538ebf0afeddb4c852bdf78fbb84314bb78b8b0cd12cc7b8c4b6b7176147b47069a1d28a8f7877548fd957da8fbbe496caeef856b07123dae26154ddb64183262e6289ab03fb49a0fba0336f129b56803bb8730312085e23dac32bbc4def0763b3b4cc9ada528eb436f21f38c5563f9207225ce6422e98b7b03d7b2ea5b54f324fff6229526aaebdb4430a3d1b46c9570513da9d851175739f0fda018c5035e98fb2b1b5d6743addede65e97a444695ae850fcf56db679c19ffe3be9a6b3d55fae13875a3306acbc7fb92fcfb122b8c2955077400e3aa87ca43cc889ac368ce9674de9e66ac5c300fb8a3ee091cc62d2dc213d77d2a7fc9f87004abeb88ba8686edb3a232cafaabf524f985dd10a40d01c1e82d34ddf4fde4b2bee000aa9183b4055955ad411e7780e4a6a4c2f6d90d01922063d3e26a5876d195d0464740db7a025f63c3fcf188f57a8921fc0de54904a6c4d3c0ee308d2a9d090ec1cfcdfa379c46e24fb492d126c45cf2ce43f894e299cef89dc03f3796291ea06836885e2e84d7b13d8d731eb36200ff1ec7247941cd8fb6a3a59a84c253285668d4f408edefd48c1cbeb820ede726c60f43b12dded57324f288e1bb1147adf1821dffd9fc2a264191829001b07e00197572485c761ad7837dafbac5d19bd0f0cdc797ebd8f27a26011463f3b904f2bfee3787a7cd891c2b1259efad03bf5ac8505d94b20b00bf2f7401b6068a4b70bc47a4472d4c170573478b4c74aa6fcad26cd98e9be24929f50cd81d2d8f3ac5b116f96453aa754d480023bc2c37bfb3a4331350bf55a316ec3ba909b5541c5c174d07717d21dcdb3dd3d1615fb7ed1c38b20de8aa82f09774c19b3bb5b80a1504c705e38872f04c13f41c2f1e1c9235d306498bff2fffc176ef253687352ba7c69b267ff50d1e0943b950cb2144c8afdc6337f9875f696740f5573faa3fc58a1a7f1e3df8c3751f05ada1a1f5cc20a3eaa4ffb9ed692a9f21c91a73252b333b3946e517204b21f98a647b0d0c058831ea75c9666d5c6c3c6caa289b9609023fa2a43a5d083d169c5377186c9ce3b6a50b84f29520a3f8a57a925507ce8c68a8d50d96f342381bd0150adc9ed0066d090b2784fa420e848da9a4b15713703c6cc6e49866b7f1eabd29d8b760e7715bc25f747ec7fbc78913b3f55c54cce5daadbdc0f9417d81697a9316ba73012659c8489f078ef86bd57e0d08ce7d5684b172fa49561be96c6b1dcb52b599206876ea16af5889988ecc45fa551393b002c236f8cae0578c914f6295595a7dad58cafced0edb02f9f76c81cd3fabd8c09bcdeaace94980fe2d233c282f26e46a4748d44ce94d19759409576fba3f72c8b92912712e9d939c8637233ce20852094e49d3a370cf4445a423d33718d799c16e05874fb29942a73aec22df1144ac5dea3258a87698424bf711a3b8122f3859840a7db44f362073f6171d980374111916395a2af20c6fef6d5f5d61989bde4e4e06867f7d70e0705ce6080b585f7628af402c398e7c843faa6c10bf3e3caa19ec641bb196fc259585e4b4250de50a588b40a3fe1a55ac4d7e4199ef95cdc1fd4d96150fede734da107049c599554327c54f83dfd4d8f2fd3295602aa46fe3295a2d28000f13ab330ddb14461e1240cb70b5676a0c1aa0ad30a73b9d3f620fd2cab5e149f5805924d6d3aa549ea00b90aeb8069cb9d1f302eec498fec46adb9d745d4c9b51ccd68c65e11d4c8be95d8e5aeefc19bab99dc29b48ae126119908735f60f6fcaefc45164ad668c87e3f9dd891de1ea86ac20a210a22c183751efec23744cd8c6b49106c01617505ab324057a27f521b40823899e9538e6b377993c4c5173a010092cbb1066eac1dca6a7e3d67ff0fb48e4dd3cdc9852b233f4f6802aefe2d174eb84c15546bf87d7aad98dd0916f9fa32c1dc98e2a5f477b14b396c03416b1940d97e4694e57a4cc339dc76b57a13d93e729435f9d19ed77f068b364321567783b8fe3e7f0bf39e1045754851c8d9c7fd70f73bc208f09a373de25a61e7228634e982216aa3b5157b264362b92fd80508378c4f954e0b2231cf78f4121b350f3d5ba5f6e0b90eab45d8a44135f73fcf4da646458abdb735f1e99605191e7c7fa11462e12fedd076ddfc6e95131e31d4bcde8bcbee57aa63760a395ab74cacb3307aa4ec64dcb5c3e1cbb3735f7c03525e02925101885d190cc7cde2e8c9823bf47a4aac1c1d21bef0580e88520f5e36f544fd0dfe49e0299756715e95ecfa3948b8c1829ff7864f7e052e0b28297596ab6367bd3f9ffd1b710045d984d46bed5c4a013e0acc362bb8c2ecad01b5e08bd04fd0443c6afef3faa82eccdf1d61fad7457862967a8724dee1818f4916ca3e3fd7b3a4ff7affd758b1e43b9a0cd2499a56d945770469cefadcb6a66491c8d7d0f9b1663b09ad11e19afb1cd41a2eb68855d8835421a79076643bcdec4018828e5d2edf5ce35345a9786e5723b60820f9f0e72406df1fa859fe90a16b8fbf3e19abe76d64d9b1c6a7cb2909e337ad89da4f1bf8f683a194742f0524eb110849c270a99125e4b8fc71ab92f9482931202fb6c8f062e6511baed5bd7cd2ba652dc5c0a40f36fd43434808db5de958fc0d233a6b37e467025e59352f133cb48564fb52e9dbb5617afb5e7cc7554fe5a5e0dfbbdf792ea495985dc157e848d6ffac7f94e3ea9199276d955c97b1b43bb6f12eabf0d6b2d878c95e78e586cbeed1e048bb1341f7c1adc67436e4307d662e08f68bed1800f7f87a84e19eed5293f7150b76efcbfb7b8c1b1a2448c9e7cfbb19a15f40464ba546604bce01a086e7f35d291c8bc264e30916a701aa7eff42c79c3b8c9baddb4071739b1ec0c01ffd8df5a1f13ca92d077946e64c58f2889e15f4179bcd521129ff3ceceb3de239cb4cb5b1668eb136f1b5d353ed1327301010459578778a5a348ffed525fcc8f077e87ed6760c53ae2a1c52f544ead68b4f2a064228b1c3ed0774113fb69dfe7c2b3db8ebbef6598f9eca8868928fe65fd967c5ef903f4ea86b256cc711e026d1534803e3721cd1018bbd92601bb430b1cb02e426ca40f007b34827c5a3d4e9b11272bc361bb9ef209302101fcfc77b73b6182aa90a3da3497e011bcb92321c69f30cc96c5e491ca7fe03797acabb13c1be71535f0ca4fa88219744edf6c14a7fd85b8b5971937ca14aa931186a8ae0cdf8e2daa2a17f223cec17d8083890e395b9710763ef219b28db17da258f5a5accf237285c7b36b3bd86c664239cf2bd945165f6edd902085bbe3be0c7e80801fc5871c50b99f9d2d2ee923c479fbb0f7748a29e92c447c47dbd8a2977437d108ef8a8e27fbd9a1322cdd2665195f646664a7d43b2399616adaece1bec58c0812619b517f807a7eced31233ea77db77af768133a3689316523615797185a1b2840127367babc628fb752976c782d8886fb16f8d8b4cad977fd5af690209101ce42bd1f95e6a1539e5622f15b454ed3043ff92b037d82d5e304b4796f8892e781f20fd3ec853bd777c14d96513ad2b303fab15af0f842f74683bf9f3c9175a8857636d97a375a5856552a13f7a9fdf146cfafe92b85b5f376e3eab28c0eec690e59b3b2679350f7328321459ccbc46caceeb417429f4c47322f49a1e0986c66ea8d4f6b17463e1f4dbd922e87aec9989ef9ffb5aad1975c5ec5dc05493de21eaa424ee4ee1b3e622304ef21254838038d0e1cfe5ad3ac66b71a9c04b8a2aa987ed47c4e94df8f8ba7309cdbbb071a4afa4c62cf767e86b8eeee9304872bca94f79b17adb8a2be138b99b3603cbd05230ba0288159ddb70010a9c3a59cb162f413c6151d3b01669eb67f616c3646be8f7de97065fb54ed0ae32d10ab59fdd52532eda7cf0aa3acd18e4e3a21307178b9c8e53a13c75e921cd8f38edff67cef1364cefda571cb3932ff09cbd754d0766f6997e8e30f95e14978e9573a23c77179750ce7ca8235b3693ce4f4f68e2e40f8c2f1568d2ec5dc7daf30969ac06786e82e5b6017764f4436cf53b68e8fd759a6d6b2d8dab488d9bac09856d336f229ba6687ecca584c50b9993aeda40d71dec5a463c34658cd4cc98afe1cc956a49292c08f45354ad60a50244de100385595683cc03a633c6dd187e7557c7da3a30f2c3752ce27db0068599bdd80df5c26d6da1c303da6407cea72813923ecd7702a15b1f4590b010767da32de8c39f732b7a95a6e4358df64977d3c654d8d589f074fb5879e885e030cd9e814505f52c7b5402c9b00d1f593d50204ffa5c1399a8c90f9db68a1ce73c111c42b9afb5813f5760e7bb7d66a4c94b12049f05c07f5d234a216b78ed9b0e98f9fabdab27f72aa85b96e27fb38151ba66df16e548f1105d2fad2d543026a9d444eecc6e7d5931a8ad2efb6610fb9468aba7ee2e31ff58fef2d0d8c43121ee1200feaac5e8d24e3608a066108401e3fc7ad73fd79b2e9eadd2f68163ad9a9c47f5cac43b9851b013f71849687d4871d3c8f6dffc198a4bc7fe58c3b41a96a8d2f358973f41c7d3b9e2637086909626cb72f67d2ca1d3e35812c5b251bc17edf0d77706a49251f73b713cef2a3debd7e2ee4dee334dca1db267dd6ace8385ef03ebdd941088472da019c285714f6d4bbfbc88b28e77b2d6cacdb343", 0x1000}], 0x1, &(0x7f0000001200)=ANY=[], 0x0, 0x1}, 0x100000000}], 0x1, 0x8040) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001100)={'raw\x00'}, &(0x7f0000001180)=0x54) setsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000000000), 0x4) connect$llc(r2, &(0x7f0000000040)={0x1a, 0x337, 0x47, 0x4, 0x3, 0x7f, @local}, 0x10) 03:35:37 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x800) socket(0x15, 0x80005, 0x7) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x42}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="025cc80700145f8f764070") inotify_init1(0x80000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80200, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={r1, r3, 0xa, 0x2}, 0x10) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000004c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000011000/0x3000)=nil, 0x1000, 0x1}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000002c0), 0x90) close(r2) r4 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000100)=0xe8) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000400)={0xb0, 0xffffffffffffffff, 0x3, [{{0x3, 0x0, 0x0, 0x0, 0x7, 0x9, {0x5, 0x8, 0x1000, 0x86d5, 0x8001, 0x7, 0x3, 0x9, 0x6, 0x3f, 0x401, r5, r6, 0xfff, 0x3ad}}, {0x0, 0xffffffff, 0x7, 0x5, '#em1#+\x00'}}]}, 0xb0) fsetxattr(r4, &(0x7f0000000000)=@known='security.evm\x00', &(0x7f0000000080)='#em1#+\x00', 0x7, 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r4, 0x0) close(r0) [ 339.417415] Killed process 22648 (syz-executor2) total-vm:70472kB, anon-rss:104kB, file-rss:32768kB, shmem-rss:0kB [ 339.428504] oom_reaper: reaped process 22648 (syz-executor2), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB 03:35:37 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000080)={0x21, @rand_addr=0x1, 0x4e21, 0x1, 'dh\x00', 0x8, 0xffffffffffffffff, 0x63}, 0x2c) setsockopt$ALG_SET_KEY(r0, 0x117, 0xf0, &(0x7f0000000000), 0x19) 03:35:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0xff) r2 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x3f89, 0x501000) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000400)={0x14, 0x4, 0x3}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x80000, 0x0) syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x9, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000140)={0x9, 0x8, 0xb, 0x10001, 0xfffffffffffffffd, 0x632e83f8, 0x4, 0x9, r4}, &(0x7f0000000200)=0x20) sendmsg$key(r1, &(0x7f00000001c0)={0x20480, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="0200c230ff0100ffffed049c8fd5535640f1d6fdf96fd5363fac93d88eca14dca201ec65c13a069f8231e0a2e63c4bb09ed4e03a1dfb55b23aed012316"], 0x3a8}}, 0x0) getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000340)=""/114, &(0x7f0000000000)=0x72) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x4530, 0x6000) 03:35:37 executing program 6: r0 = socket(0x11, 0x4000000000080003, 0x0) pipe(&(0x7f0000000000)) mmap(&(0x7f0000399000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x4000) 03:35:38 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='fuseblk\x00', 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\b\x00\x00\x00\x00\x00\x00d=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000000,allow_other,\x00']) r1 = socket$inet(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000000)="4c0000001200ff10fffefd956fa264b724a6007e00000000000000683540150024001d001fc41180b598be593ab6821148a730bb1aa49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) [ 339.537634] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop1. 03:35:38 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="670f"], 0x2) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0xfffffffffffffffa}, 0x0, 0x2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:35:38 executing program 7: r0 = fanotify_init(0x6b, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fanotify_mark(r0, 0x80, 0x40010000, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x100000000, 0x3f, 0xffff, 0xfffffffffffffffd, 0x20, 0x1, 0x100, {0x0, @in={{0x2, 0x4e20}}, 0x3f, 0x8, 0x0, 0x6, 0x100}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={r3, @in={{0x2, 0x4e21, @rand_addr=0x2}}, 0x6, 0x9, 0xfffffffffffffff8, 0x8, 0x20}, &(0x7f0000000240)=0x98) 03:35:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x2, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], 0x1}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:35:38 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0x8, &(0x7f0000000280)=@raw=[@alu={0x7, 0xfffffffffffffffc, 0xd, 0x6, 0x6, 0xffffffffffffffe0, 0x7485cea0294bbf51}, @map={0x18, 0x7, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x4b}, @ldst={0x0, 0x3, 0x2, 0x2, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}], &(0x7f00000002c0)='GPL\x00', 0x4, 0x89, &(0x7f0000000300)=""/137, 0x41000, 0x1, [], 0x0, 0x6}, 0x48) openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x105200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r3}}, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r4, 0xa, &(0x7f0000000200)={0x3d, 0x5, 0xffffffff, 0x2}) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) [ 339.655995] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop1. 03:35:38 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = fcntl$getown(r1, 0x9) write$cgroup_pid(r1, &(0x7f0000000280)=r2, 0x12) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000500)={0x0, @broadcast, 0x0, 0x0, 'lblc\x00'}, 0x2c) getsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000000000)={@local, 0x0}, &(0x7f0000000080)=0x14) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x7, 0x694, 0x956c, {r4, r5/1000+10000}, {r6, r7/1000+30000}, {0x0, 0x7fff, 0x6}, 0x1, @canfd={{0x0, 0x8000, 0x100000001, 0x6}, 0xf, 0x0, 0x0, 0x0, "0382afa7a63334fcb08ae933dd6ee4f64589b7850434925b1ee4b3bf390ff92ad97d088d5142cb6b711d2a906b842746f043321b8af08f3b78a7d43773ccbe07"}}, 0x80}, 0x1, 0x0, 0x0, 0x40001}, 0x8090) 03:35:38 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x8) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000380)=""/4096) close(r0) 03:35:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025c3f0a00145f8f764070") r1 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000000)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000440)=""/126, 0x7e}, {&(0x7f0000000640)=""/210, 0xd2}], 0x2, &(0x7f0000004540)=""/4096, 0x1000}}, {{&(0x7f0000000800)=@pppoe={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000900)=""/145, 0x91}, {&(0x7f00000009c0)=""/77, 0x4d}, {&(0x7f0000000a40)=""/206, 0xce}, {&(0x7f0000000b40)=""/116, 0x74}], 0x4, &(0x7f0000000c40)=""/244, 0xf4}}, {{&(0x7f0000000d40)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000dc0)=""/195, 0xc3}, {&(0x7f0000000ec0)=""/168, 0xa8}, {&(0x7f0000000f80)=""/230, 0xe6}], 0x3, &(0x7f00000010c0)=""/67, 0x43}}, {{&(0x7f0000002600)=@can, 0x80, &(0x7f0000003a80)=[{&(0x7f0000002680)=""/107, 0x6b}, {&(0x7f0000002700)=""/155, 0x9b}, {&(0x7f00000027c0)=""/124, 0x7c}, {&(0x7f0000003900)=""/93, 0x5d}, {&(0x7f0000003980)=""/112, 0x70}, {&(0x7f00000028c0)=""/18, 0x12}, {&(0x7f0000003a00)=""/67, 0x43}], 0x7, &(0x7f0000003b00)=""/80, 0x50}}, {{&(0x7f0000003b80)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000004200)=[{&(0x7f0000003c00)=""/92, 0x5c}, {&(0x7f00000066c0)=""/66, 0x42}, {&(0x7f0000003d00)=""/70, 0x46}, {&(0x7f0000003d80)=""/81, 0x51}, {&(0x7f0000003ec0)=""/227, 0xe3}, {&(0x7f0000005540)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/161, 0xa1}, {&(0x7f0000004080)=""/117, 0x75}, {&(0x7f0000004100)=""/214, 0xd6}], 0x9, &(0x7f00000042c0)=""/1, 0x1}}], 0x5, 0x0, &(0x7f0000004300)={0x77359400}) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x680080, 0x0) ioctl$VT_RELDISP(r3, 0x5605) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000080)={0x8, 0x6}) r4 = accept$alg(r3, 0x0, 0x0) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f00000001c0)) sendmmsg$alg(r4, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x390, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000280)={0x5, 0x8, 0x3, 0x5, 0x2, [{0x8001, 0x200, 0x10000}, {0x7, 0x7, 0x3f}]}) recvmmsg(r4, &(0x7f0000004500)=[{{0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000004340)=""/229, 0xe5}], 0x1, &(0x7f00000044c0)=""/19, 0x13}}], 0xe000, 0x0, &(0x7f0000007380)={0x0, 0x1c9c380}) 03:35:38 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x400) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000002940)={&(0x7f0000000080)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000280)={&(0x7f0000002900)={0x1c, 0x2e, 0x119, 0x0, 0x0, {0x4}, [@nested={0x8, 0x0, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000000000000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x480500, 0x0) 03:35:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = dup3(r0, r0, 0x80000) ioctl$TIOCSTI(r1, 0x5412, 0x100000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000001c0)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x60, &(0x7f0000000180)={0x0, 'nr0\x00'}, 0x18) 03:35:38 executing program 6: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0}) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x5) ioctl$FICLONE(r0, 0x40049409, r0) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, &(0x7f0000000380)={r1}, &(0x7f00000003c0), 0x8) shutdown(r0, 0x2) 03:35:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x8200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x3, {0xa, 0x4e24, 0xaa4, @remote, 0xda}, r1}}, 0x38) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0x0, 0x1001}, 0x10) 03:35:38 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x40044590, &(0x7f0000000380)=""/4096) close(r0) 03:35:38 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000000)=0xc) keyctl$set_reqkey_keyring(0xe, 0x4) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") request_key(&(0x7f0000000440)="646e735f7265736f6c76657200501e29636aaabf09baf765b2f675534d2d6872617234c790be4a29cddeb1930c717c6dbe6147c0a82dbfd494ce1953db90c6b73b227b5d27238712f3f18514ad23e3f07a8ad63cec2a98a46e7ae9174b684157f0fd6c96dcf551ae1d9b04ea876f3e77035e73d35b1b36fcb1ccf65f40a02cd77f4ef0c387758c940e0506c3e8dd7d36f61e43f91a33dde762c71a386a39c4acac3cace8774917528c5030bc773bea869aaa4a7ea28c9e48dc1bd1548408f208bf0715479cf7b4583d911ee3bb283ef228d1a35aa679", &(0x7f0000000100)={0x73, 0x79, 0x2e}, &(0x7f00000001c0)="bc00", 0x0) 03:35:38 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0x2000ffffff93}, {0xffffff90}, 0x0, 0x2}) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000100)={0xffefffffffffffff, 0xfffffffffffffff7}) read$eventfd(r0, &(0x7f0000000000), 0x8) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) 03:35:38 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x40044590, &(0x7f0000000380)=""/4096) close(r0) [ 340.480415] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 340.506165] openvswitch: netlink: Either Ethernet header or EtherType is required. 03:35:39 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00', 0xfffffffffffffffd}, 0x18) getrlimit(0xd, &(0x7f00000000c0)) add_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040), &(0x7f0000000000), 0x1fe, 0xffffffffffffffff) 03:35:39 executing program 1: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, &(0x7f0000317000)=ANY=[], &(0x7f0000123000)) listen(r0, 0x0) sendto$inet(r0, &(0x7f00000000c0)="cf", 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000a68000)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}}}, &(0x7f000044fffc)=0xa0) 03:35:39 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/89, 0x59) ioctl$KDGKBLED(r0, 0x4004510d, &(0x7f0000a07fff)) 03:35:39 executing program 0: ustat(0x800, &(0x7f0000000280)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ff0f000000000000ff00000000b7060000ffffffff156405000000000065040400010000000404000001000000b7050000000000006a0a00fe00000000850000000b06000000000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x9, &(0x7f0000004800)=[{&(0x7f0000000440)="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", 0xfd, 0x80}, {&(0x7f0000000540)="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", 0x1000, 0x3}, {&(0x7f0000001540)="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", 0x1000, 0x4}, {&(0x7f0000002540)="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", 0x1000, 0x304}, {&(0x7f0000003540)="47e335bc58f5301a1944ce2c019f60c24e73135a351968a0bbd22b6b861294c9ae9661cabcb98082fb0f51a4ab127fd17106aa6c1da2c5136b8f196683107c667c0149adc322779a4947fc9496967c2e7d66e9cb93901db4723ea47b86ce0f317892f0f79dbf47cf28e20e9b9d85c48aa4f7d1be1de88834685429eedf16", 0x7e}, {&(0x7f00000035c0)="e5f85addf412bff9ab501459e8b97a7fe0487d23778c6c823212a24ff5caac52b3117dcc73116c76b58b12c46ddcd9f89986add251acabbed57d15bf9a033f6737577ef0f37d39", 0x47, 0x4}, {&(0x7f0000003640)="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", 0x1000, 0x8001}, {&(0x7f0000004640)="d6a37c4c187f335d215fc9b5a75faea8f63dc09341201c15bc30feaadb460b4c8b96b6fc37907f4fe33a130e5f70b0eca9207aaf6a717e3ed80bf4b6d085bea1e803a4c520431de8a5ca0b8fdb3bf2a6bd5015ef449f6f5c985bff4381d1d808d8bcc8a8ae18d577605aa1fd7289176141865cac518b3d56e44efb146e7769c7e5459e144bf7a72801177d2a01f011c14211f0adc168f304675f2466f86243d0c603ff4fac277195481f9ccd86e465db8b260fe26e849e5683003ec7c14eef89f2", 0xc1, 0x3}, {&(0x7f0000004740)="4cbbbf264a1ff28e00ee29b14cfc40b0a7940a1e4299d935a8f206ee8937c120caa2c5d082f2aed11c3849053c782a06ec1eb26e61e934e84d28d0e334f3c1685559209c8654be2e2bc8178da30a12d0caad267a0803b3ff536755517cbb09a67df567af3d9f1e6404f673c2596b371f88ea01557efa3361220867c93cb54e620abdd66498b861154cd5f0458fd4c7fe", 0x90, 0x3f}], 0x1000, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f646f74732c046f74732c646f74732c646f733178666c6f7070792c6e6f646f74732c6572726f72733d72656d6f756e742d726f2c646f74732c00"]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x77, &(0x7f0000000080)="9152de5a68beec787b8123ed14f9", &(0x7f00000002c0)=""/119, 0xc40}, 0x28) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=""/134, 0x86) r1 = fcntl$dupfd(r0, 0x406, r0) accept$packet(r1, &(0x7f0000004980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000049c0)=0x14) 03:35:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000001c0)=0x2, 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000180)=@unspec, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x2000, 0x0) getpeername$inet(r3, &(0x7f00000000c0), &(0x7f0000000140)=0x10) getpeername$netlink(r2, &(0x7f0000000100), &(0x7f0000000000)=0xc) readahead(r2, 0x80, 0x5) 03:35:39 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000240)=""/145, &(0x7f0000695ffc)=0x91) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000)=0x6, 0x8) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x40000) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x4) 03:35:39 executing program 4: syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)={[{@statfs_percent={'statfs_percent', 0x3d, 0x3f5}}]}) clock_gettime(0x0, &(0x7f000000aa00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f000000a7c0)=[{{&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/101, 0x65}, {&(0x7f00000001c0)=""/222, 0xde}, {&(0x7f00000003c0)=""/217, 0xd9}, {}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/235, 0xeb}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x7, &(0x7f00000016c0)=""/206, 0xce, 0x1}, 0xffffffff}, {{0x0, 0x0, &(0x7f000000aac0)=[{&(0x7f0000000340)=""/30, 0xe}, {&(0x7f00000017c0)=""/32, 0x20}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000004800)=""/140, 0x8c}, {&(0x7f00000048c0)=""/250, 0xfa}], 0x7, &(0x7f0000004a40)=""/208, 0xd0, 0x8c}, 0x9}, {{&(0x7f0000004b40)=@can, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004bc0)=""/29, 0x1d}, {&(0x7f0000004c00)=""/152, 0x4d}, {&(0x7f0000004cc0)=""/82, 0x52}, {&(0x7f0000004d40)=""/173, 0xad}, {&(0x7f0000004e00)=""/26, 0x1a}], 0x5, &(0x7f0000004ec0)=""/223, 0xdf, 0x3ff}, 0x3ff}, {{&(0x7f0000004fc0)=@rc, 0x80, &(0x7f00000051c0)=[{&(0x7f0000005040)=""/201, 0xc9}, {&(0x7f0000005140)=""/125, 0x7d}], 0x2, &(0x7f0000005200)=""/4096, 0x1000, 0x2}, 0x4}, {{&(0x7f0000006200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000007700)=[{&(0x7f0000006280)=""/199, 0xc7}, {&(0x7f0000006380)=""/66, 0x42}, {&(0x7f0000006400)=""/250, 0xfa}, {&(0x7f0000006500)=""/52, 0x34}, {&(0x7f0000006540)=""/4096, 0x1000}, {&(0x7f0000007540)=""/114, 0x72}, {&(0x7f00000075c0)=""/21, 0x15}, {&(0x7f0000007600)=""/4, 0x4}, {&(0x7f0000007640)=""/112, 0x70}, {&(0x7f00000076c0)=""/56, 0x38}], 0xa, &(0x7f00000077c0)=""/235, 0xeb, 0x2}, 0x800}, {{0x0, 0x0, &(0x7f00000079c0)=[{&(0x7f00000078c0)=""/110, 0x6e}, {&(0x7f0000007940)=""/62, 0x3e}, {&(0x7f0000007980)=""/27, 0x1b}], 0x3, &(0x7f0000007a00)=""/228, 0xe4, 0x341d}, 0x7}, {{&(0x7f0000007b00)=@nl=@proc, 0x80, &(0x7f0000007bc0)=[{&(0x7f0000007b80)}], 0x10000000000000b0, &(0x7f0000007c00)=""/183, 0xb7, 0x7f}, 0x5cb}, {{&(0x7f0000007cc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007d40)=""/158, 0x9e}, {&(0x7f0000007e00)=""/216, 0xd8}, {&(0x7f0000007f00)=""/131, 0x83}], 0x3, 0x0, 0x0, 0x4}, 0x9}, {{&(0x7f0000008000)=@xdp, 0x80, &(0x7f000000a600)=[{&(0x7f0000008080)=""/32, 0x20}, {&(0x7f00000080c0)=""/4096, 0x1000}, {&(0x7f00000090c0)=""/55, 0x37}, {&(0x7f0000009100)=""/193, 0xc1}, {&(0x7f0000009200)=""/4096, 0x1000}, {&(0x7f000000a200)=""/206, 0xce}, {&(0x7f000000a300)=""/112, 0x70}, {&(0x7f000000a380)=""/151, 0x97}, {&(0x7f000000a440)=""/248, 0xf8}, {&(0x7f000000a540)=""/146, 0x92}], 0xa, &(0x7f000000a6c0)=""/243, 0xf3, 0x79}, 0x8}], 0x9, 0x10000, &(0x7f000000aa40)={r0, r1+30000000}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f000000aa80)=0x9, 0x4) [ 340.764395] gfs2: statfs_percent mount option requires a numeric argument between 0 and 100 [ 340.773101] gfs2: can't parse mount arguments [ 340.792637] gfs2: statfs_percent mount option requires a numeric argument between 0 and 100 [ 340.801387] gfs2: can't parse mount arguments [ 341.289640] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 341.299073] CPU: 1 PID: 22786 Comm: syz-executor3 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 341.307556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.316995] Call Trace: [ 341.319586] dump_stack+0x1c9/0x2b4 [ 341.323213] ? dump_stack_print_info.cold.2+0x52/0x52 [ 341.329056] ? trace_hardirqs_on+0x10/0x10 [ 341.333281] ? lock_downgrade+0x8f0/0x8f0 [ 341.337417] dump_header+0x246/0x123c [ 341.341200] ? percpu_ref_put_many+0x131/0x240 [ 341.345768] ? trace_hardirqs_on+0x10/0x10 [ 341.349985] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 341.354904] ? trace_hardirqs_on+0x10/0x10 [ 341.359125] ? mem_cgroup_iter+0x517/0x10c0 [ 341.363450] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 341.368969] ? css_next_child+0x1c3/0x620 [ 341.373103] ? trace_hardirqs_on+0x10/0x10 [ 341.377335] ? trace_hardirqs_on+0x10/0x10 [ 341.381568] ? trace_hardirqs_on+0x10/0x10 [ 341.385814] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 341.391356] ? css_next_child+0x1c3/0x620 [ 341.395498] ? find_lock_task_mm+0x230/0x4d0 [ 341.399895] ? cgroup_get_tree+0xb20/0xb20 [ 341.404124] ? lock_acquire+0x1e4/0x540 [ 341.408093] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 341.413624] ? task_will_free_mem+0x239/0xb70 [ 341.418127] ? lock_release+0xa30/0xa30 [ 341.422087] ? oom_badness+0x7d1/0xb00 [ 341.426050] ? ___ratelimit+0x36f/0x655 [ 341.430020] ? lock_downgrade+0x8f0/0x8f0 [ 341.434152] ? kasan_check_read+0x11/0x20 [ 341.438287] ? do_raw_spin_unlock+0xa7/0x2f0 [ 341.442680] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 341.447261] ? do_raw_spin_lock+0x200/0x200 [ 341.451587] ? oom_kill_process+0x24d/0x280 [ 341.455903] ? lock_downgrade+0x8f0/0x8f0 [ 341.460036] ? trace_hardirqs_on+0xd/0x10 [ 341.464175] ? ___ratelimit+0xaa/0x655 [ 341.468052] ? idr_get_free+0x10c0/0x10c0 [ 341.472181] ? kasan_check_write+0x14/0x20 [ 341.476396] ? do_raw_spin_lock+0xc1/0x200 [ 341.480617] oom_kill_process.cold.29+0x10/0x660 [ 341.485357] ? trace_hardirqs_on+0xd/0x10 [ 341.489493] ? _raw_spin_unlock_irq+0x27/0x70 [ 341.493965] ? css_task_iter_end+0x2ce/0x490 [ 341.498369] ? oom_evaluate_task+0x540/0x540 [ 341.502769] ? trace_hardirqs_on+0xd/0x10 [ 341.506905] ? _raw_spin_unlock_irq+0x27/0x70 [ 341.511381] ? oom_badness+0xb00/0xb00 [ 341.515346] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 341.520085] ? mem_cgroup_iter_break+0x30/0x30 [ 341.524654] out_of_memory+0x86d/0x1ad0 [ 341.528622] ? oom_killer_disable+0x3a0/0x3a0 [ 341.533096] ? kasan_check_read+0x11/0x20 [ 341.537223] ? do_raw_spin_unlock+0xa7/0x2f0 [ 341.541614] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 341.546179] ? kasan_check_write+0x14/0x20 [ 341.550394] ? do_raw_spin_lock+0xc1/0x200 [ 341.554616] mem_cgroup_out_of_memory+0x15e/0x210 [ 341.559445] ? memcg_memory_event+0x40/0x40 [ 341.563776] ? page_counter_try_charge+0x1c7/0x220 [ 341.568707] try_charge+0x720/0x1680 [ 341.572408] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 341.579147] ? lock_downgrade+0x8f0/0x8f0 [ 341.583284] ? lock_release+0xa30/0xa30 [ 341.587245] ? __anon_vma_prepare+0xc4/0x720 [ 341.591639] ? handle_mm_fault+0x53e/0xc80 [ 341.595855] ? fs_reclaim_acquire+0x20/0x20 [ 341.600267] ? lock_downgrade+0x8f0/0x8f0 [ 341.604391] ? percpu_ref_put_many+0x119/0x240 [ 341.608955] ? get_mem_cgroup_from_mm+0x209/0x440 [ 341.613791] ? get_mem_cgroup_from_page+0x190/0x190 [ 341.618811] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 341.623634] ? lock_acquire+0x1e4/0x540 [ 341.627600] mem_cgroup_try_charge+0x4ff/0xa70 [ 341.632187] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 341.637205] ? mem_cgroup_protected+0xa60/0xa60 [ 341.641859] ? up_write+0x7b/0x220 [ 341.645382] ? up_read+0x110/0x110 [ 341.648915] ? __anon_vma_prepare+0x36d/0x720 [ 341.653410] ? pmd_val+0x88/0x100 [ 341.656845] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 341.662368] mem_cgroup_try_charge_delay+0x1d/0x90 [ 341.667287] __handle_mm_fault+0x25ba/0x4470 [ 341.671691] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 341.676525] ? cap_mmap_addr+0x52/0x130 [ 341.680484] ? userfaultfd_unmap_complete+0x32a/0x510 [ 341.685665] ? security_mmap_addr+0x80/0xa0 [ 341.689970] ? lock_acquire+0x1e4/0x540 [ 341.693926] ? handle_mm_fault+0x417/0xc80 [ 341.698146] ? lock_downgrade+0x8f0/0x8f0 [ 341.702275] ? lock_release+0xa30/0xa30 [ 341.706240] ? lock_release+0xa30/0xa30 [ 341.710207] ? down_read_killable+0x200/0x200 [ 341.714694] ? mem_cgroup_from_task+0xcb/0x1f0 [ 341.719299] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 341.724071] handle_mm_fault+0x53e/0xc80 [ 341.728132] ? __handle_mm_fault+0x4470/0x4470 [ 341.732708] ? find_vma+0x34/0x190 [ 341.736235] __do_page_fault+0x620/0xe50 [ 341.740288] ? mm_fault_error+0x380/0x380 [ 341.744512] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 341.750068] ? __x64_sys_clock_gettime+0x170/0x250 [ 341.755009] ? __ia32_sys_clock_settime+0x290/0x290 [ 341.760041] do_page_fault+0xf6/0x8c0 [ 341.763852] ? vmalloc_sync_all+0x30/0x30 [ 341.768021] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 341.773553] ? do_syscall_64+0x497/0x820 [ 341.777610] ? syscall_slow_exit_work+0x500/0x500 [ 341.782441] ? syscall_return_slowpath+0x5e0/0x5e0 [ 341.787359] ? syscall_return_slowpath+0x31d/0x5e0 [ 341.792275] ? prepare_exit_to_usermode+0x291/0x3b0 [ 341.797280] ? page_fault+0x8/0x30 [ 341.800830] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 341.805665] ? page_fault+0x8/0x30 [ 341.809195] page_fault+0x1e/0x30 [ 341.812635] RIP: 0033:0x40e16f [ 341.815811] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 341.834702] RSP: 002b:00007ffd8c7205b0 EFLAGS: 00010206 [ 341.840048] RAX: 00007f3313243000 RBX: 0000000000020000 RCX: 00000000004569aa [ 341.847309] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 341.854564] RBP: 00007ffd8c720690 R08: ffffffffffffffff R09: 0000000000000000 [ 341.861821] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8c720780 [ 341.869074] R13: 00007f3313263700 R14: 000000000072bf2c R15: 0000000000000001 [ 341.876575] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor3,pid=22786,uid=0 [ 341.890848] memory: usage 180kB, limit 0kB, failcnt 927 [ 341.896248] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 341.903023] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 341.909183] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 341.928730] Tasks state (memory values in pages): [ 341.933591] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 341.942760] [ 22786] 0 22786 17618 8221 126976 0 0 syz-executor3 [ 341.951809] [ 22798] 0 22798 17618 8218 126976 0 0 syz-executor2 [ 341.960961] Memory cgroup out of memory: Kill process 22786 (syz-executor3) score 8252000 or sacrifice child [ 341.970985] Killed process 22786 (syz-executor3) total-vm:70472kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 341.982546] oom_reaper: reaped process 22786 (syz-executor3), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB [ 341.993110] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 342.002543] CPU: 0 PID: 22798 Comm: syz-executor2 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 342.011027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 342.020359] Call Trace: [ 342.022941] dump_stack+0x1c9/0x2b4 [ 342.026571] ? dump_stack_print_info.cold.2+0x52/0x52 [ 342.031753] ? trace_hardirqs_on+0x10/0x10 [ 342.035972] ? lock_downgrade+0x8f0/0x8f0 [ 342.040100] dump_header+0x246/0x123c [ 342.043882] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 342.048789] ? trace_hardirqs_on+0x10/0x10 [ 342.053002] ? kasan_check_read+0x11/0x20 [ 342.057141] ? do_raw_spin_unlock+0xa7/0x2f0 [ 342.061530] ? trace_hardirqs_on+0x10/0x10 [ 342.065750] ? trace_hardirqs_on+0x10/0x10 [ 342.069965] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 342.075487] ? css_next_child+0x1c3/0x620 [ 342.079615] ? find_lock_task_mm+0x230/0x4d0 [ 342.084002] ? cgroup_get_tree+0xb20/0xb20 [ 342.088220] ? lock_acquire+0x1e4/0x540 [ 342.092194] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 342.097712] ? task_will_free_mem+0x239/0xb70 [ 342.102187] ? lock_release+0xa30/0xa30 [ 342.106147] ? oom_badness+0x7d1/0xb00 [ 342.110016] ? ___ratelimit+0x36f/0x655 [ 342.113971] ? lock_downgrade+0x8f0/0x8f0 [ 342.118099] ? kasan_check_read+0x11/0x20 [ 342.122223] ? do_raw_spin_unlock+0xa7/0x2f0 [ 342.126614] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 342.131178] ? do_raw_spin_lock+0x200/0x200 [ 342.135488] ? oom_kill_process+0x24d/0x280 [ 342.139790] ? lock_downgrade+0x8f0/0x8f0 [ 342.143919] ? trace_hardirqs_on+0xd/0x10 [ 342.148081] ? ___ratelimit+0xaa/0x655 [ 342.151955] ? idr_get_free+0x10c0/0x10c0 [ 342.156091] ? kasan_check_write+0x14/0x20 [ 342.160318] ? do_raw_spin_lock+0xc1/0x200 [ 342.164543] oom_kill_process.cold.29+0x10/0x660 [ 342.169321] ? trace_hardirqs_on+0xd/0x10 [ 342.173448] ? _raw_spin_unlock_irq+0x27/0x70 [ 342.177939] ? css_task_iter_end+0x2ce/0x490 [ 342.182333] ? oom_evaluate_task+0x540/0x540 [ 342.186724] ? trace_hardirqs_on+0xd/0x10 [ 342.190853] ? _raw_spin_unlock_irq+0x27/0x70 [ 342.195328] ? oom_badness+0xb00/0xb00 [ 342.199209] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 342.203943] ? mem_cgroup_iter_break+0x30/0x30 [ 342.208507] out_of_memory+0x86d/0x1ad0 [ 342.212484] ? oom_killer_disable+0x3a0/0x3a0 [ 342.216957] ? kasan_check_read+0x11/0x20 [ 342.221084] ? do_raw_spin_unlock+0xa7/0x2f0 [ 342.225481] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 342.230053] ? kasan_check_write+0x14/0x20 [ 342.234267] ? do_raw_spin_lock+0xc1/0x200 [ 342.238487] mem_cgroup_out_of_memory+0x15e/0x210 [ 342.243310] ? memcg_memory_event+0x40/0x40 [ 342.247622] ? page_counter_try_charge+0x1c7/0x220 [ 342.252540] try_charge+0x720/0x1680 [ 342.256260] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 342.263010] ? lock_downgrade+0x8f0/0x8f0 [ 342.267147] ? lock_release+0xa30/0xa30 [ 342.271101] ? __anon_vma_prepare+0xc4/0x720 [ 342.275501] ? handle_mm_fault+0x53e/0xc80 [ 342.279716] ? fs_reclaim_acquire+0x20/0x20 [ 342.284020] ? lock_downgrade+0x8f0/0x8f0 [ 342.288151] ? percpu_ref_put_many+0x119/0x240 [ 342.292719] ? get_mem_cgroup_from_mm+0x209/0x440 [ 342.297544] ? get_mem_cgroup_from_page+0x190/0x190 [ 342.302565] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 342.307390] ? lock_acquire+0x1e4/0x540 [ 342.311348] mem_cgroup_try_charge+0x4ff/0xa70 [ 342.315911] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 342.320907] ? mem_cgroup_protected+0xa60/0xa60 [ 342.325565] ? up_write+0x7b/0x220 [ 342.329087] ? up_read+0x110/0x110 [ 342.332612] ? __anon_vma_prepare+0x36d/0x720 [ 342.337091] ? pmd_val+0x88/0x100 [ 342.340537] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 342.346064] mem_cgroup_try_charge_delay+0x1d/0x90 [ 342.350985] __handle_mm_fault+0x25ba/0x4470 [ 342.355377] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 342.360198] ? cap_mmap_addr+0x52/0x130 [ 342.364154] ? userfaultfd_unmap_complete+0x32a/0x510 [ 342.369329] ? security_mmap_addr+0x80/0xa0 [ 342.373634] ? lock_acquire+0x1e4/0x540 [ 342.377588] ? handle_mm_fault+0x417/0xc80 [ 342.381803] ? lock_downgrade+0x8f0/0x8f0 [ 342.385929] ? lock_release+0xa30/0xa30 [ 342.389894] ? lock_release+0xa30/0xa30 [ 342.393859] ? down_read_killable+0x200/0x200 [ 342.398333] ? mem_cgroup_from_task+0xcb/0x1f0 [ 342.402894] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 342.407633] handle_mm_fault+0x53e/0xc80 [ 342.411685] ? __handle_mm_fault+0x4470/0x4470 [ 342.416254] ? find_vma+0x34/0x190 [ 342.419784] __do_page_fault+0x620/0xe50 [ 342.423835] ? mm_fault_error+0x380/0x380 [ 342.427965] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 342.433480] ? __x64_sys_clock_gettime+0x170/0x250 [ 342.438407] ? __ia32_sys_clock_settime+0x290/0x290 [ 342.443407] do_page_fault+0xf6/0x8c0 [ 342.447196] ? vmalloc_sync_all+0x30/0x30 [ 342.451321] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 342.456837] ? do_syscall_64+0x497/0x820 [ 342.460885] ? syscall_slow_exit_work+0x500/0x500 [ 342.465709] ? syscall_return_slowpath+0x5e0/0x5e0 [ 342.470631] ? syscall_return_slowpath+0x31d/0x5e0 [ 342.475545] ? prepare_exit_to_usermode+0x291/0x3b0 [ 342.480553] ? page_fault+0x8/0x30 [ 342.484078] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 342.488913] ? page_fault+0x8/0x30 [ 342.492437] page_fault+0x1e/0x30 [ 342.495870] RIP: 0033:0x40e16f [ 342.499045] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 342.517925] RSP: 002b:00007ffe1f3c3010 EFLAGS: 00010206 [ 342.523270] RAX: 00007f91cf350000 RBX: 0000000000020000 RCX: 00000000004569aa [ 342.530534] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 342.537790] RBP: 00007ffe1f3c30f0 R08: ffffffffffffffff R09: 0000000000000000 [ 342.545038] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1f3c31e0 [ 342.552288] R13: 00007f91cf370700 R14: 000000000072bf2c R15: 0000000000000001 [ 342.560034] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor2,pid=22798,uid=0 [ 342.574346] memory: usage 180kB, limit 0kB, failcnt 1162 [ 342.579810] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 342.586576] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 342.592733] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 342.612611] Tasks state (memory values in pages): [ 342.617459] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 342.626373] [ 22798] 0 22798 17618 8218 126976 0 0 syz-executor2 [ 342.635395] Memory cgroup out of memory: Kill process 22798 (syz-executor2) score 8249000 or sacrifice child 03:35:41 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000380)=""/4096) close(r0) 03:35:41 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000140)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00000006c0), &(0x7f0000000780), &(0x7f00000000c0), &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="00ced43a7389ac9c53"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x3c}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) recvfrom(r0, &(0x7f0000000000)=""/142, 0x8e, 0x40, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x1, @broadcast}}, 0x80) 03:35:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) r2 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r1, &(0x7f000000a000)=[{0x0, 0x3, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @result}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x12, @time={0x0, 0x989680}}) 03:35:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x8041, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)=0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000eccfa8)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000002c0)="ad56b6c5824c90c200000000000000000000000000000000", 0x18) 03:35:41 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34048}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x31, 0x829, 0x0, 0x0, {0x2801}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0xffffff7f00000000}}]}]}, 0x2c}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, r2, 0x3}, 0xc) r3 = open(&(0x7f0000000200)='./file0\x00', 0x82800, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xc000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname'}}, {@nodevmap='nodevmap'}, {@cache_loose='cache=loose'}, {@fscache='fscache'}, {@privport='privport'}, {@uname={'uname'}}, {@access_user='access=user'}, {@version_u='version=9p2000.u'}]}}) 03:35:41 executing program 6: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2000080003, 0x2) getsockopt(r0, 0x0, 0xcf, &(0x7f00000000c0)=""/8, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0xc) 03:35:41 executing program 1: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="27000800ad903537e693b9f1dd44aad78f672d611524ba08edeb1f7f0f5d480ebde1a8e0de01e79035e6cd37ee2a1a0c445d26060254216840e8c98a6074cc4a0856719b0ac7ba618e0c1c25043951fc02cdbef6deff4cb3f9bf4b170dcc9cf14d736d64d0e258fdb8cbf216880b5ad9647af23407e22cfb65a14dcf2f2915778cd6d9fe46a314105fb0b2568d814453097f2187a2411c05ce38ee3ec99c467f0fcc7fe862226982c3169ddc954e09a2f037c8ba1a1094d0fa5dc4bd296add563ff78aa61b9ce1cebbb51c6999dd644fc387c28dcb4e98ef5e13cbb130d895ff5a5c9857da96e2a961eb505e63c9389dec57998dabb341ae49eb7f662f3adec6f70fded2f4c8557e54bf280d134c430192c80d7f97e9545ad724c22ec1bf4c5612769d6312479cedd955a3d176424cec3980d3d7d184b5e7f5843d9e"]}) close(r2) close(r1) 03:35:41 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x40044590, &(0x7f0000000380)=""/4096) close(r0) [ 342.645395] Killed process 22798 (syz-executor2) total-vm:70472kB, anon-rss:104kB, file-rss:32768kB, shmem-rss:0kB [ 342.656346] oom_reaper: reaped process 22798 (syz-executor2), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB 03:35:41 executing program 6: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8800, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) r1 = socket$inet_smc(0x2b, 0x1, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0x7, 0x4d, 0x1}, 0x7) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x4000, 0x0) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f00000000c0)={0x4, 0x0, 0x81, @local, 'bridge_slave_1\x00'}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000100)="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") ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000200)='trustedppp1%\x00') setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000240), 0x4) kexec_load(0x3, 0x2, &(0x7f0000000380)=[{&(0x7f0000000280)="d369e7454e582d9d3524ff5b6d7acfb5db7bc072ee4dcecd62db23ee0daeecd7ce6b2d002b833f1aa4c889ef51107c10709662ef", 0x34, 0x3, 0x100000001}, {&(0x7f00000002c0)="7550ea2fa840b6e82ed43460be508a0870e4350bb5752f33d97f8222c5b041abe4ac56ede4446254a012a2a63d1333beb0f3ce668dec6a4d02b404f96997142e88a26829f2630e52b8d207b76eb43b002154053ced2f7b3b6950f9d39e901981a6e953ffb1941d7bf034aea39b2703fda5e159cdaaf88fc47f91b6d530cf778a61954563396f11eddeee1d914233429999e23a", 0x93, 0x0, 0x55d3}], 0x140000) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e22, 0x1ff, @ipv4={[], [], @multicast1}, 0xfffffffffffff58e}, 0x1c) fchdir(r1) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0x4, {{0xa, 0x4e22, 0x51, @local, 0x3}}, 0x0, 0x5, [{{0xa, 0x4e22, 0x80, @dev={0xfe, 0x80, [], 0x18}, 0x3}}, {{0xa, 0x4e23, 0x80000001, @mcast2, 0x5}}, {{0xa, 0x4e22, 0x7d, @mcast2, 0x81}}, {{0xa, 0x4e20, 0x100000001, @mcast2}}, {{0xa, 0x4e23, 0x8, @mcast2, 0x2}}]}, 0x310) openat$nullb(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/nullb0\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000800)='/dev/sequencer\x00', 0x302, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000840), &(0x7f0000000880)=0x4) accept4$packet(r0, &(0x7f0000000d00)={0x11, 0x0, 0x0}, &(0x7f0000000d40)=0x14, 0x800) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000d80)=r4) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000dc0)={0xffffffffffffffff}) fallocate(r5, 0x1a, 0x5, 0x100000001) fcntl$setsig(r2, 0xa, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000e00)={0x48000, 0x1f, 0x4, 0x100000001, 0x0, 0x100, 0x3, 0x7, 0x865, 0x7fff}) getresuid(&(0x7f0000000e40)=0x0, &(0x7f0000000e80), &(0x7f0000000ec0)) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000f00)={{{@in=@loopback, @in=@rand_addr=0x10001, 0x4e22, 0x20, 0x4e23, 0x1, 0xa, 0x20, 0xa0, 0xc, r4, r6}, {0x8, 0xd11, 0x9, 0x5, 0xfff, 0x8001, 0x1, 0x8}, {0x1, 0x401, 0x80000000, 0x1ff}, 0x0, 0x6e6bb4, 0x1, 0x0, 0x2, 0x1}, {{@in6=@ipv4={[], [], @multicast1}, 0x4d4}, 0xa, @in6=@loopback, 0x3504, 0x2, 0x1, 0x1000, 0x81, 0x9, 0xfffffffffffff000}}, 0xe8) fcntl$addseals(r3, 0x409, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000010c0)={0x1, 0x10, 0xfa00, {&(0x7f0000001000), r7}}, 0x18) 03:35:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet(0x10, 0x3, 0x40000000000010) recvmmsg(r1, &(0x7f0000000080)=[{{&(0x7f0000000500)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000640)=""/71, 0x47}}], 0x1, 0x0, &(0x7f0000001b80)) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000017000)=[{&(0x7f0000004000)="240000001d0003ffff3cc0023da2830101eee6cd7986c436271d8568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={r2, 0x1}, &(0x7f00000001c0)=0x8) 03:35:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f00000001c0)={0x8f59, 0x7}) r1 = socket$inet6(0xa, 0x801, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000100)=""/100) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"00ac730000000000ec973f820f7c4000", 0x102}) socket$l2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10) 03:35:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x80, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0xa8d, 0x2, r0}) 03:35:41 executing program 7: syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0xaaaaaaaaaaaa9d1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d4b66732e666174000204010001000270fff8", 0x4966b0268831b776}], 0x41000, &(0x7f00000004c0)=ANY=[@ANYBLOB="cb3c3a170c4933461a24df396952f749037697441c1595f2cbd01d2eb51a0de2cf6a69c5038cbd26ada7e06353c43fc650194e45ffd3a3b17fb20bf87cedcf86830667a3c38f63d00772f87067b3151ac4d7614b601bfbdfe2698d2a3bd6404cc66889275da6747f2bc030a059c591dc764a2f0a3f726d6202395d2cf76a06410e230aa0e3f2a1b7feb8eb146c82cfb409b0fe6fc2033c2ba28204af21bf78ab2b7be3d95b95ced8985316f7361fac1a20b8d0ff66eca3116de7ba9c42f1e4be68abcc0bc2e6f4460d123e4545eab33080abea572d6606a78628de20e7f4ea5d128ae2", @ANYPTR64, @ANYRESDEC, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYRES64, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYPTR, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRESDEC, @ANYRESHEX=0x0, @ANYPTR], @ANYRESDEC, @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRES16], @ANYRESDEC, @ANYPTR, @ANYRESDEC]]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f0000000000/0xc72000)=nil, 0xc72000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x10000000003, &(0x7f0000000040)="f0000003", 0x4) fchdir(r0) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x140ffe, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2efe2ee52e7a300062872ad0bd27e530037b1ed7667c8a62f33e4320aeffae869468d920944daa07ccd7919fe0b019b3e2458ee32043f7e1571abc455e9e2b58f6e1b8bfe1cd420fc5994a000000000068242f33772b70c2f1f3824d4a12", 0x1ff) pwritev(r3, &(0x7f0000002800)=[{&(0x7f0000001780)="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", 0xc01}], 0x1, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4c002, 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000001200)="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", 0xe00}], 0x1, 0x0) [ 342.705333] netlink: zone id is out of range [ 342.710018] netlink: set zone limit has 4 unknown bytes [ 342.744432] netlink: zone id is out of range [ 342.748980] netlink: set zone limit has 4 unknown bytes 03:35:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x15, 0x80005, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000080)={@broadcast, @multicast1, r2}, 0xc) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in=@local, @in=@remote}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, 0xe8) getsockopt(r1, 0x200000000114, 0x2717, &(0x7f00000000c0)=""/1, &(0x7f0000000040)=0x1) 03:35:41 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='fusectl\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x7) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[{0x3, 0x7fffffff}, {0x576db0cc21edab73, 0xe3}], 0x2) 03:35:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fdatasync(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) lseek(r0, 0x0, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000e80)="66b88c008ec8430f01d10f20a03e66d17293c4e1fc117bd2660fe590387e000066baf80cb8e42ede86ef66bafc0cb806e60000efc4c20bf7b7004800000f00180f20d835200000000f22d8", 0x4b}], 0x1, 0x0, &(0x7f0000000e40), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000f00)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000080)=0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x40) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000100)="9473eb6bc52a6b4fd1e54f7a6ecb0000000000bf550d84dc5b10196aa9d4172184c9df6edb2f69e51b92c9451802a65e05e24a72b7ec326de9ecd56d2b73c769c3b15b2ced8464e2") [ 343.593136] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 343.602598] CPU: 0 PID: 22885 Comm: syz-executor3 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 343.611078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 343.620412] Call Trace: [ 343.622989] dump_stack+0x1c9/0x2b4 [ 343.626610] ? dump_stack_print_info.cold.2+0x52/0x52 [ 343.631797] ? trace_hardirqs_on+0x10/0x10 [ 343.636027] ? lock_downgrade+0x8f0/0x8f0 [ 343.640161] dump_header+0x246/0x123c [ 343.643956] ? percpu_ref_put_many+0x131/0x240 [ 343.648527] ? trace_hardirqs_on+0x10/0x10 [ 343.652750] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 343.657690] ? trace_hardirqs_on+0x10/0x10 [ 343.661933] ? mem_cgroup_iter+0x517/0x10c0 [ 343.662624] netlink: 16 bytes leftover after parsing attributes in process `syz-executor5'. [ 343.666253] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 343.666266] ? css_next_child+0x1c3/0x620 [ 343.666285] ? trace_hardirqs_on+0x10/0x10 [ 343.688646] ? trace_hardirqs_on+0x10/0x10 [ 343.692865] ? trace_hardirqs_on+0x10/0x10 [ 343.697085] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 343.702605] ? css_next_child+0x1c3/0x620 [ 343.706733] ? find_lock_task_mm+0x230/0x4d0 [ 343.711138] ? cgroup_get_tree+0xb20/0xb20 [ 343.715363] ? lock_acquire+0x1e4/0x540 [ 343.719319] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 343.724837] ? task_will_free_mem+0x239/0xb70 [ 343.729316] ? lock_release+0xa30/0xa30 [ 343.733267] ? oom_badness+0x7d1/0xb00 [ 343.737154] ? ___ratelimit+0x36f/0x655 [ 343.741116] ? lock_downgrade+0x8f0/0x8f0 [ 343.745264] ? kasan_check_read+0x11/0x20 [ 343.749395] ? do_raw_spin_unlock+0xa7/0x2f0 [ 343.753786] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 343.758356] ? do_raw_spin_lock+0x200/0x200 [ 343.762676] ? oom_kill_process+0x24d/0x280 [ 343.766981] ? lock_downgrade+0x8f0/0x8f0 [ 343.771113] ? trace_hardirqs_on+0xd/0x10 [ 343.775245] ? ___ratelimit+0xaa/0x655 [ 343.779124] ? idr_get_free+0x10c0/0x10c0 [ 343.783259] ? kasan_check_write+0x14/0x20 [ 343.787489] ? do_raw_spin_lock+0xc1/0x200 [ 343.791722] oom_kill_process.cold.29+0x10/0x660 [ 343.796462] ? trace_hardirqs_on+0xd/0x10 [ 343.800589] ? _raw_spin_unlock_irq+0x27/0x70 [ 343.805065] ? css_task_iter_end+0x2ce/0x490 [ 343.809466] ? oom_evaluate_task+0x540/0x540 [ 343.813870] ? trace_hardirqs_on+0xd/0x10 [ 343.818000] ? _raw_spin_unlock_irq+0x27/0x70 [ 343.822482] ? oom_badness+0xb00/0xb00 [ 343.826354] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 343.831092] ? mem_cgroup_iter_break+0x30/0x30 [ 343.835659] out_of_memory+0x86d/0x1ad0 [ 343.839619] ? oom_killer_disable+0x3a0/0x3a0 [ 343.844096] ? kasan_check_read+0x11/0x20 [ 343.848244] ? do_raw_spin_unlock+0xa7/0x2f0 [ 343.852640] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 343.857201] ? kasan_check_write+0x14/0x20 [ 343.861423] ? do_raw_spin_lock+0xc1/0x200 [ 343.865644] mem_cgroup_out_of_memory+0x15e/0x210 [ 343.870467] ? memcg_memory_event+0x40/0x40 [ 343.874774] ? page_counter_try_charge+0x1c7/0x220 [ 343.879690] try_charge+0x720/0x1680 [ 343.883396] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 343.890130] ? lock_downgrade+0x8f0/0x8f0 [ 343.894277] ? lock_release+0xa30/0xa30 [ 343.898251] ? __anon_vma_prepare+0xc4/0x720 [ 343.902673] ? handle_mm_fault+0x53e/0xc80 [ 343.906906] ? fs_reclaim_acquire+0x20/0x20 [ 343.911228] ? lock_downgrade+0x8f0/0x8f0 [ 343.915368] ? percpu_ref_put_many+0x119/0x240 [ 343.919934] ? get_mem_cgroup_from_mm+0x209/0x440 [ 343.924770] ? get_mem_cgroup_from_page+0x190/0x190 [ 343.929770] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 343.934604] ? lock_acquire+0x1e4/0x540 [ 343.938568] mem_cgroup_try_charge+0x4ff/0xa70 [ 343.943158] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 343.948167] ? mem_cgroup_protected+0xa60/0xa60 [ 343.952819] ? up_write+0x7b/0x220 [ 343.956337] ? up_read+0x110/0x110 [ 343.959859] ? __anon_vma_prepare+0x36d/0x720 [ 343.964339] ? pmd_val+0x88/0x100 [ 343.967777] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 343.973305] mem_cgroup_try_charge_delay+0x1d/0x90 [ 343.978218] __handle_mm_fault+0x25ba/0x4470 [ 343.982629] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 343.987454] ? cap_mmap_addr+0x52/0x130 [ 343.991418] ? userfaultfd_unmap_complete+0x32a/0x510 [ 343.996598] ? security_mmap_addr+0x80/0xa0 [ 344.000903] ? lock_acquire+0x1e4/0x540 [ 344.004861] ? handle_mm_fault+0x417/0xc80 [ 344.009087] ? lock_downgrade+0x8f0/0x8f0 [ 344.013230] ? lock_release+0xa30/0xa30 [ 344.017191] ? lock_release+0xa30/0xa30 [ 344.021161] ? down_read_killable+0x200/0x200 [ 344.025637] ? mem_cgroup_from_task+0xcb/0x1f0 [ 344.030204] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 344.034952] handle_mm_fault+0x53e/0xc80 [ 344.039001] ? __handle_mm_fault+0x4470/0x4470 [ 344.043566] ? find_vma+0x34/0x190 [ 344.047087] __do_page_fault+0x620/0xe50 [ 344.051130] ? mm_fault_error+0x380/0x380 [ 344.055262] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 344.060788] ? __x64_sys_clock_gettime+0x170/0x250 [ 344.065709] ? __ia32_sys_clock_settime+0x290/0x290 [ 344.070714] do_page_fault+0xf6/0x8c0 [ 344.074507] ? vmalloc_sync_all+0x30/0x30 [ 344.078634] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 344.084153] ? do_syscall_64+0x497/0x820 [ 344.088195] ? syscall_return_slowpath+0x5e0/0x5e0 [ 344.093109] ? syscall_return_slowpath+0x31d/0x5e0 [ 344.098018] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 344.103015] ? prepare_exit_to_usermode+0x291/0x3b0 [ 344.108025] ? page_fault+0x8/0x30 [ 344.111552] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 344.116380] ? page_fault+0x8/0x30 [ 344.119901] page_fault+0x1e/0x30 [ 344.123348] RIP: 0033:0x40e16f [ 344.126525] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 344.145412] RSP: 002b:00007ffd8c7205b0 EFLAGS: 00010206 [ 344.150775] RAX: 00007f3313243000 RBX: 0000000000020000 RCX: 00000000004569aa [ 344.158027] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 344.165285] RBP: 00007ffd8c720690 R08: ffffffffffffffff R09: 0000000000000000 [ 344.172552] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8c720780 [ 344.179813] R13: 00007f3313263700 R14: 000000000072bf2c R15: 0000000000000001 [ 344.187397] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor3,pid=22885,uid=0 [ 344.201726] memory: usage 180kB, limit 0kB, failcnt 1179 [ 344.207203] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 344.213963] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 344.220124] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 344.239648] Tasks state (memory values in pages): [ 344.244496] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 344.253378] [ 22885] 0 22885 17618 8221 126976 0 0 syz-executor3 [ 344.262398] [ 22889] 0 22889 17618 8218 126976 0 0 syz-executor2 [ 344.271415] Memory cgroup out of memory: Kill process 22885 (syz-executor3) score 8252000 or sacrifice child [ 344.281416] Killed process 22885 (syz-executor3) total-vm:70472kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 344.292445] oom_reaper: reaped process 22885 (syz-executor3), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB [ 344.299254] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 344.312251] CPU: 0 PID: 22889 Comm: syz-executor2 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 344.320738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.330078] Call Trace: [ 344.332657] dump_stack+0x1c9/0x2b4 [ 344.336282] ? dump_stack_print_info.cold.2+0x52/0x52 [ 344.341456] ? trace_hardirqs_on+0x10/0x10 [ 344.345672] ? do_raw_spin_unlock+0xa7/0x2f0 [ 344.350066] dump_header+0x246/0x123c [ 344.353858] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 344.358770] ? trace_hardirqs_on+0x10/0x10 [ 344.362986] ? trace_hardirqs_on+0x10/0x10 [ 344.367207] ? trace_hardirqs_on+0x10/0x10 [ 344.371423] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 344.376938] ? css_next_child+0x1c3/0x620 [ 344.381063] ? find_lock_task_mm+0x230/0x4d0 [ 344.385448] ? cgroup_get_tree+0xb20/0xb20 [ 344.389661] ? lock_acquire+0x1e4/0x540 [ 344.393616] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 344.399139] ? task_will_free_mem+0x239/0xb70 [ 344.403615] ? lock_release+0xa30/0xa30 [ 344.407572] ? oom_badness+0x7d1/0xb00 [ 344.411442] ? ___ratelimit+0x36f/0x655 [ 344.415396] ? lock_downgrade+0x8f0/0x8f0 [ 344.419523] ? kasan_check_read+0x11/0x20 [ 344.423650] ? do_raw_spin_unlock+0xa7/0x2f0 [ 344.428036] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 344.432598] ? do_raw_spin_lock+0x200/0x200 [ 344.436901] ? oom_kill_process+0x24d/0x280 [ 344.441227] ? lock_downgrade+0x8f0/0x8f0 [ 344.445359] ? trace_hardirqs_on+0xd/0x10 [ 344.449488] ? ___ratelimit+0xaa/0x655 [ 344.453353] ? idr_get_free+0x10c0/0x10c0 [ 344.457479] ? kasan_check_write+0x14/0x20 [ 344.461696] ? do_raw_spin_lock+0xc1/0x200 [ 344.465919] oom_kill_process.cold.29+0x10/0x660 [ 344.470653] ? trace_hardirqs_on+0xd/0x10 [ 344.474793] ? _raw_spin_unlock_irq+0x27/0x70 [ 344.479275] ? css_task_iter_end+0x2ce/0x490 [ 344.483676] ? oom_evaluate_task+0x540/0x540 [ 344.488067] ? trace_hardirqs_on+0xd/0x10 [ 344.492200] ? _raw_spin_unlock_irq+0x27/0x70 [ 344.496677] ? oom_badness+0xb00/0xb00 [ 344.500563] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 344.505305] ? mem_cgroup_iter_break+0x30/0x30 [ 344.509870] out_of_memory+0x86d/0x1ad0 [ 344.513835] ? oom_killer_disable+0x3a0/0x3a0 [ 344.518315] ? do_raw_spin_unlock+0xa7/0x2f0 [ 344.522705] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 344.527281] ? kasan_check_write+0x14/0x20 [ 344.531501] ? do_raw_spin_lock+0xc1/0x200 [ 344.535718] mem_cgroup_out_of_memory+0x15e/0x210 [ 344.540547] ? memcg_memory_event+0x40/0x40 [ 344.545119] ? page_counter_try_charge+0x1c7/0x220 [ 344.550035] try_charge+0x720/0x1680 [ 344.553733] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 344.560465] ? lock_downgrade+0x8f0/0x8f0 [ 344.564592] ? lock_release+0xa30/0xa30 [ 344.568558] ? __anon_vma_prepare+0xc4/0x720 [ 344.572966] ? handle_mm_fault+0x53e/0xc80 [ 344.577186] ? fs_reclaim_acquire+0x20/0x20 [ 344.581488] ? lock_downgrade+0x8f0/0x8f0 [ 344.585614] ? percpu_ref_put_many+0x119/0x240 [ 344.590183] ? get_mem_cgroup_from_mm+0x209/0x440 [ 344.595008] ? get_mem_cgroup_from_page+0x190/0x190 [ 344.600005] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 344.604827] ? lock_acquire+0x1e4/0x540 [ 344.608782] mem_cgroup_try_charge+0x4ff/0xa70 [ 344.613343] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 344.618339] ? mem_cgroup_protected+0xa60/0xa60 [ 344.622985] ? up_write+0x7b/0x220 [ 344.626502] ? up_read+0x110/0x110 [ 344.630022] ? __anon_vma_prepare+0x36d/0x720 [ 344.634496] ? pmd_val+0x88/0x100 [ 344.637935] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 344.643452] mem_cgroup_try_charge_delay+0x1d/0x90 [ 344.648363] __handle_mm_fault+0x25ba/0x4470 [ 344.652750] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 344.657574] ? cap_mmap_addr+0x52/0x130 [ 344.661531] ? userfaultfd_unmap_complete+0x32a/0x510 [ 344.666704] ? security_mmap_addr+0x80/0xa0 [ 344.671006] ? lock_acquire+0x1e4/0x540 [ 344.674960] ? handle_mm_fault+0x417/0xc80 [ 344.679181] ? lock_downgrade+0x8f0/0x8f0 [ 344.683315] ? lock_release+0xa30/0xa30 [ 344.687278] ? lock_release+0xa30/0xa30 [ 344.691249] ? down_read_killable+0x200/0x200 [ 344.695724] ? mem_cgroup_from_task+0xcb/0x1f0 [ 344.700286] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 344.705023] handle_mm_fault+0x53e/0xc80 [ 344.709064] ? __handle_mm_fault+0x4470/0x4470 [ 344.713634] ? find_vma+0x34/0x190 [ 344.717155] __do_page_fault+0x620/0xe50 [ 344.721221] ? mm_fault_error+0x380/0x380 [ 344.725352] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 344.730868] ? __x64_sys_clock_gettime+0x170/0x250 [ 344.735777] ? __ia32_sys_clock_settime+0x290/0x290 [ 344.740779] do_page_fault+0xf6/0x8c0 [ 344.744566] ? vmalloc_sync_all+0x30/0x30 [ 344.748703] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 344.754232] ? do_syscall_64+0x497/0x820 [ 344.758280] ? syscall_slow_exit_work+0x500/0x500 [ 344.763110] ? syscall_return_slowpath+0x5e0/0x5e0 [ 344.768022] ? syscall_return_slowpath+0x31d/0x5e0 [ 344.772939] ? prepare_exit_to_usermode+0x291/0x3b0 [ 344.777935] ? page_fault+0x8/0x30 [ 344.781466] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 344.786295] ? page_fault+0x8/0x30 [ 344.789816] page_fault+0x1e/0x30 [ 344.793260] RIP: 0033:0x40e16f [ 344.796434] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 344.815317] RSP: 002b:00007ffe1f3c3010 EFLAGS: 00010206 [ 344.820659] RAX: 00007f91cf350000 RBX: 0000000000020000 RCX: 00000000004569aa [ 344.827906] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 344.835159] RBP: 00007ffe1f3c30f0 R08: ffffffffffffffff R09: 0000000000000000 [ 344.842414] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1f3c31e0 [ 344.849672] R13: 00007f91cf370700 R14: 000000000072bf2c R15: 0000000000000001 [ 344.857007] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor2,pid=22889,uid=0 [ 344.871269] memory: usage 180kB, limit 0kB, failcnt 1188 [ 344.876738] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 344.883498] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 344.889645] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 344.909177] Tasks state (memory values in pages): [ 344.914037] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 344.922915] [ 22889] 0 22889 17618 8218 126976 0 0 syz-executor2 [ 344.931948] Memory cgroup out of memory: Kill process 22889 (syz-executor2) score 8249000 or sacrifice child 03:35:43 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@ipx, &(0x7f0000000140)=0x80) accept4$alg(r1, 0x0, 0x0, 0x80800) r2 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) r4 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000000380)=""/4096) close(r0) 03:35:43 executing program 4: r0 = memfd_create(&(0x7f0000000300)="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", 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eebf000e0e281ab42fb897c0d554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a984237d092ef1c00b517026f8bd7f2b0436a4c40960ab3f6bc482809f6bd82caa34799193b35445293b992ab5e44573eef5fd0f423a5cfb386f9cc996c6effde7e603fdeab448671b63bec6e9395aabab4d045f1ad982a2a897fafa710be9e681f3c6a45db03d9e6cb58fbec3d8397005f17d6f7afa102ded1837bcb805600000000000000000000") pread64(r1, &(0x7f0000000080), 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000040)=0x9, 0x4) 03:35:43 executing program 6: r0 = open(&(0x7f0000000040)='./file1\x00', 0x10000, 0x4b) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x80000) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000030c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl='posixacl'}, {@noextend='noextend'}, {@version_9p2000='version=9p2000'}, {@privport='privport'}, {@noextend='noextend'}]}}) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000340)="17b506b1b9ff2e5f53e16c6dfb91dd04e4a0c7117244b2ac6ccb3d6558da2a6b1a6e25bad6f56586ee1ef4bafccfb89a11819bd846a5b208dbcc169efec280b7f039f550785d5af29239932a3f8f5f2096f8fb702acffef8eaeef31f07d1e2c194b0148451bfb41e3aba1f4cfc1d8cac74fa8c3478a68f3b0f2c78d0744c12dfcea2a6dc4f8803b567dc") mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472613dd7c35a1d649e41121d0000", @ANYBLOB="2c7766646e6f3d181449e91e18da2d3731464b4bb373188aec83d9863ccd9c41842980237819c220d20b03b64535bf898b7e81f90000000000000069b4025d41e459bcd27100000000000000c8e7e7f2486e76520b2f62bb67cb8a6f61627ff74c0f878c91ed1b356b1f8219464f0a9baff9f8ba2b2e0475f4c1d03e707ae2e2a59a0a74d99b7d527f53f50bebc853bb0922b0abbecf5d728aea6d8bb24a9ed3f5673662053727bf639af2a27412a9bc15f66a5c9a39722b171277ffa5ab1fda6d18b376a95103a2d7db2d3dd3082255450a1dfade63633aadb830a241a7290fc197a3c4c9c2dbbe0fa4f9add8", @ANYBLOB="2c63616368653d6e4f6e652c706f736978613cbd6c636c2cfeda2f349654d1f1c07a2a7b48"]) modify_ldt$write(0x1, &(0x7f00000000c0)={0x6cf, 0x1000, 0x4400, 0x3f, 0x80000000, 0x7, 0x8, 0xe1, 0x51, 0x8a76}, 0x10) 03:35:43 executing program 0: r0 = socket(0xa, 0x3, 0xfffffffffffffffc) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) mq_notify(r1, &(0x7f00000001c0)={0x0, 0xe, 0x4, @thr={&(0x7f0000000080)="4afbb4e6f5c15545bb", &(0x7f00000000c0)="ce88dbb65aa09678fe31e179ca921e38030f2aa8b925e52f62bc2046c38605a1ced909a77045119190e561dae940ff6a9677c9a2a74ba65c7f088bb2c1a1151efc7e229bebeacc0b084b7f2abe6aeb037cf54770dfd2d145bcd73a64cba975d92ed7cc221027ca7fd1c169fdd3e01ddca774fd0164a0eda8b484dd7dd3d9f5993626a224cf36309ece5c69bd423959542748c29311751da5c9b7e8b94109e52ff19a18262c94869180290a48957c67a9bf4c59f495b8858bb86d7ff478172aff12ed6152362dce757c38b83a1353ece66c9052d2dba99ae211"}}) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000003800000000010084200000001"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 03:35:43 executing program 7: socketpair$inet6(0xa, 0x80000, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$rds(0x15, 0x5, 0x0) ioctl(r1, 0x5, &(0x7f0000000240)="546a39b9636e6df6364db71764dc6b5ec841f2e89780cd9f0dbc53106f0f063eacb03b2142ce019d1f40a0a27843ba60299a0a68aa1d9c3bf4e062f715768cc407418763fc6c5efcddbe94e46727fc02e92f3d8a80e6e8bd85d1627783c40d563948e4ef") syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x1fffe) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) dup(r2) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0xffffffffffd) syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6c6f636b7461626c653d74727573746564656d312c6c6f636b70726f746c6f636b2c80000000000000000000"]) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1}) 03:35:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x1c) bind$alg(r1, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0xfffffffffffffd7c) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005", 0x5) r3 = accept$alg(r2, 0x0, 0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0x10000, 0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000340)={0x6, {{0x2, 0x4e21, @multicast2}}}, 0x88) sendmmsg$alg(r3, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f00000023c0), 0x218, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000000)={&(0x7f0000000040)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000002840)=""/4096, 0x7ffff000}], 0x1, &(0x7f00000000c0)=""/87, 0x57}, 0x0) 03:35:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101000, 0x0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x2) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) quotactl(0x81, &(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000440)="e0d313ba09c5b8d9b7fc4a7f61ed2ca75a1253e72016a9057439413e664697213a19f9c722bdd0110e1e0d1c9ce18432ab91b8d573830367b9d267bd884c440f43de9b2f0a4327a797ab746761") r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000000c0)="260f0d95060000002e650f320f32c4c2e102fd0f9e8200000000b8ef0000000f23d00f21f8350000000d0f23f86565660f3880140866b84a000f00d8660f1ae2b8010000000f23d00f21f8350000000d0f23f8", 0x53}], 0x1, 0x3, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:35:43 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x40044590, &(0x7f0000000380)=""/4096) close(r0) [ 344.941983] Killed process 22889 (syz-executor2) total-vm:70472kB, anon-rss:104kB, file-rss:32768kB, shmem-rss:0kB [ 344.953001] oom_reaper: reaped process 22889 (syz-executor2), now anon-rss:0kB, file-rss:32788kB, shmem-rss:0kB 03:35:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x808410, &(0x7f0000000340)=ANY=[]) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x3) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) mknodat(r1, &(0x7f00000000c0)='.//ile0\x00', 0x0, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x36, 0x0, @thr={&(0x7f00000003c0)="2b465b944d4706d6631a72156724de5564fbb8e8544832c2114e0aab5fce270fdf864faa011741507f1c93a8752a62c9ed74fc7e7705a27581d3be23fafe0cc7cf412c39d5b376232a9731a2e656f260b921c0f3a77015f670740503b8436e8f047e64bc788c6c5abe40a4468bffb7c4e0d946d4b4c9e5374923c1841614cd29cc25627462dad8d876de630124f5b8ef750f38f110af9f913f7148878d30cfaabb22322b83c562370e1e4c28aac5e5ccced6b9f6f57228af11eec7b07c869fe10614a016fdbf4d9c5e3d9986c44a811c9460d3c179cb85232ddfe307a57f83df987d014dffcba417f720b7560c8c9fc6ba", &(0x7f00000004c0)="abe19a25abafb123e31377969a846bde9cd8743a066a33de7ed6a1b0efdc13f3a2b81335910de3083d4896ad5f302cdbfd136c6ac18c60845f5fd92b2236e9306780b975798e528d609fde22d1db01d3e19399abf349b36d6045ca2bd711ded0c90ef644441cc085de4a30abe0217ce12a61034b956447f44c0c5c358de758e969ab6a3ba944372d85ca637ba9cdee1992d48e79983fcc3f38397a42c9fa836922c698d2f16331a411275a6b301be856a128a7c7e464cb2706aee2c9f4b56cacace9c95e0b3bc3a9cce6d56db4064f44abb7f04d0b9c898c14420fa32106592125bc87c515f00e0c54e583a2fb253dda8e3199b070a3a51930"}}, &(0x7f00000001c0)=0x0) timer_gettime(r2, &(0x7f0000000200)) renameat(r1, &(0x7f0000000240)='.//ile0\x00', r1, &(0x7f0000000280)="2e2f66696c65302f66692e4530eb") 03:35:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000080)="025cc80700145f8f764070") mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x14) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000200)=""/9) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x0, 0xffffffffffffff9c, 0x1}) clone(0x0, &(0x7f0000000100)="ee4b962915d872f744d8d1df16fdbaed98cbf5e5a6e97a49cb2379ab7f", &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000000c0)) [ 345.018971] gfs2: invalid mount option: lockprotlock [ 345.024172] gfs2: can't parse mount arguments [ 345.054072] 9pnet_virtio: no channels available for device (null) 03:35:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000080)={'broute\x00'}, &(0x7f0000000000)=0x78) 03:35:43 executing program 7: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000003c0), &(0x7f0000000340)=0x14) openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000000)={r0, 0x1, 0x7, r0}) close(r0) finit_module(0xffffffffffffffff, &(0x7f00000001c0)='!self\x00', 0x3) 03:35:43 executing program 6: r0 = getpgid(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) sched_setaffinity(r0, 0x1cd, &(0x7f0000da3000)=0x2) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)={0x20, 0x4, 0xff, 0xe50000000000, 0x7}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x5}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_getparam(r0, &(0x7f0000000100)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000cd8ff4)) epoll_wait(r4, &(0x7f0000000000)=[{}], 0x1, 0x0) dup2(r2, r3) epoll_wait(r4, &(0x7f00000000c0)=[{}], 0x1, 0x0) sendfile(r4, r4, &(0x7f0000000040), 0xc62) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 03:35:43 executing program 4: alarm(0x1000) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000b94000)=""/246) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/185, 0xb9}], 0x1) pwritev(r0, &(0x7f0000000040), 0x19d, 0x0) [ 345.067479] gfs2: invalid mount option: lockprotlock [ 345.072680] gfs2: can't parse mount arguments [ 345.086935] 9pnet_virtio: no channels available for device (null) 03:35:43 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {0x0, 0x0, 0x7fffffff}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x200000, 0x0) openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.memory_spread_page\x00', 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x7}]}, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000380)={'bridge0\x00', &(0x7f0000000040)=ANY=[]}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000140)={0x3, r1}) 03:35:43 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0xa, 0x1, 0x0) r2 = getpgid(0x0) prlimit64(r2, 0xf, 0x0, &(0x7f0000000000)) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000140), 0x3) [ 345.918141] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 345.927580] CPU: 0 PID: 22970 Comm: syz-executor3 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 345.936079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.945429] Call Trace: [ 345.948002] dump_stack+0x1c9/0x2b4 [ 345.951612] ? dump_stack_print_info.cold.2+0x52/0x52 [ 345.956824] ? trace_hardirqs_on+0x10/0x10 [ 345.961050] dump_header+0x246/0x123c [ 345.964841] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 345.969754] ? trace_hardirqs_on+0x10/0x10 [ 345.973969] ? kasan_check_read+0x11/0x20 [ 345.978106] ? do_raw_spin_unlock+0xa7/0x2f0 [ 345.982515] ? trace_hardirqs_on+0x10/0x10 [ 345.986743] ? trace_hardirqs_on+0x10/0x10 [ 345.990968] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 345.996494] ? css_next_child+0x1c3/0x620 [ 346.000633] ? find_lock_task_mm+0x230/0x4d0 [ 346.005020] ? cgroup_get_tree+0xb20/0xb20 [ 346.009236] ? lock_acquire+0x1e4/0x540 [ 346.013191] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.018708] ? task_will_free_mem+0x239/0xb70 [ 346.023184] ? lock_release+0xa30/0xa30 [ 346.027137] ? oom_badness+0x7d1/0xb00 [ 346.031005] ? ___ratelimit+0x36f/0x655 [ 346.034968] ? lock_downgrade+0x8f0/0x8f0 [ 346.039097] ? kasan_check_read+0x11/0x20 [ 346.043226] ? do_raw_spin_unlock+0xa7/0x2f0 [ 346.047612] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 346.052290] ? do_raw_spin_lock+0x200/0x200 [ 346.056595] ? oom_kill_process+0x24d/0x280 [ 346.060906] ? lock_downgrade+0x8f0/0x8f0 [ 346.065034] ? trace_hardirqs_on+0xd/0x10 [ 346.069163] ? ___ratelimit+0xaa/0x655 [ 346.073033] ? idr_get_free+0x10c0/0x10c0 [ 346.077165] ? kasan_check_write+0x14/0x20 [ 346.081382] ? do_raw_spin_lock+0xc1/0x200 [ 346.085609] oom_kill_process.cold.29+0x10/0x660 [ 346.090348] ? trace_hardirqs_on+0xd/0x10 [ 346.094484] ? _raw_spin_unlock_irq+0x27/0x70 [ 346.098958] ? css_task_iter_end+0x2ce/0x490 [ 346.103348] ? oom_evaluate_task+0x540/0x540 [ 346.107741] ? trace_hardirqs_on+0xd/0x10 [ 346.111869] ? _raw_spin_unlock_irq+0x27/0x70 [ 346.116342] ? oom_badness+0xb00/0xb00 [ 346.120210] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 346.124948] ? mem_cgroup_iter_break+0x30/0x30 [ 346.129515] out_of_memory+0x86d/0x1ad0 [ 346.133480] ? oom_killer_disable+0x3a0/0x3a0 [ 346.137956] ? kasan_check_read+0x11/0x20 [ 346.142102] ? do_raw_spin_unlock+0xa7/0x2f0 [ 346.146501] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 346.151065] ? kasan_check_write+0x14/0x20 [ 346.155286] ? do_raw_spin_lock+0xc1/0x200 [ 346.159503] mem_cgroup_out_of_memory+0x15e/0x210 [ 346.164326] ? memcg_memory_event+0x40/0x40 [ 346.168630] ? page_counter_try_charge+0x1c7/0x220 [ 346.173552] try_charge+0x720/0x1680 [ 346.177262] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 346.183994] ? lock_downgrade+0x8f0/0x8f0 [ 346.188125] ? lock_release+0xa30/0xa30 [ 346.192103] ? __anon_vma_prepare+0xc4/0x720 [ 346.196501] ? handle_mm_fault+0x53e/0xc80 [ 346.200715] ? fs_reclaim_acquire+0x20/0x20 [ 346.205017] ? lock_downgrade+0x8f0/0x8f0 [ 346.209150] ? percpu_ref_put_many+0x119/0x240 [ 346.213718] ? get_mem_cgroup_from_mm+0x209/0x440 [ 346.218544] ? get_mem_cgroup_from_page+0x190/0x190 [ 346.223558] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 346.228398] ? lock_acquire+0x1e4/0x540 [ 346.232352] mem_cgroup_try_charge+0x4ff/0xa70 [ 346.236914] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 346.241916] ? mem_cgroup_protected+0xa60/0xa60 [ 346.246570] ? up_write+0x7b/0x220 [ 346.250102] ? up_read+0x110/0x110 [ 346.253636] ? __anon_vma_prepare+0x36d/0x720 [ 346.258116] ? pmd_val+0x88/0x100 [ 346.261555] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 346.267166] mem_cgroup_try_charge_delay+0x1d/0x90 [ 346.272077] __handle_mm_fault+0x25ba/0x4470 [ 346.276474] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 346.281295] ? cap_mmap_addr+0x52/0x130 [ 346.285248] ? userfaultfd_unmap_complete+0x32a/0x510 [ 346.290417] ? security_mmap_addr+0x80/0xa0 [ 346.294725] ? lock_acquire+0x1e4/0x540 [ 346.298681] ? handle_mm_fault+0x417/0xc80 [ 346.302893] ? lock_downgrade+0x8f0/0x8f0 [ 346.307018] ? lock_release+0xa30/0xa30 [ 346.310977] ? lock_release+0xa30/0xa30 [ 346.314935] ? down_read_killable+0x200/0x200 [ 346.319411] ? mem_cgroup_from_task+0xcb/0x1f0 [ 346.323973] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 346.328723] handle_mm_fault+0x53e/0xc80 [ 346.332768] ? __handle_mm_fault+0x4470/0x4470 [ 346.337328] ? find_vma+0x34/0x190 [ 346.340859] __do_page_fault+0x620/0xe50 [ 346.344911] ? mm_fault_error+0x380/0x380 [ 346.349054] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.354577] ? __x64_sys_clock_gettime+0x170/0x250 [ 346.359496] ? __ia32_sys_clock_settime+0x290/0x290 [ 346.364496] do_page_fault+0xf6/0x8c0 [ 346.368278] ? vmalloc_sync_all+0x30/0x30 [ 346.372406] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.377931] ? do_syscall_64+0x497/0x820 [ 346.381979] ? syscall_return_slowpath+0x5e0/0x5e0 [ 346.386892] ? syscall_return_slowpath+0x31d/0x5e0 [ 346.391802] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 346.396796] ? prepare_exit_to_usermode+0x291/0x3b0 [ 346.401801] ? page_fault+0x8/0x30 [ 346.405321] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 346.410143] ? page_fault+0x8/0x30 [ 346.413667] page_fault+0x1e/0x30 [ 346.417120] RIP: 0033:0x40e16f [ 346.420294] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 346.439191] RSP: 002b:00007ffd8c7205b0 EFLAGS: 00010206 [ 346.444546] RAX: 00007f3313243000 RBX: 0000000000020000 RCX: 00000000004569aa [ 346.451814] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 346.459066] RBP: 00007ffd8c720690 R08: ffffffffffffffff R09: 0000000000000000 [ 346.466315] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8c720780 [ 346.473588] R13: 00007f3313263700 R14: 000000000072bf2c R15: 0000000000000001 [ 346.481008] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor3,pid=22970,uid=0 [ 346.495402] memory: usage 168kB, limit 0kB, failcnt 1205 [ 346.500948] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 346.508045] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 346.514212] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 346.533744] Tasks state (memory values in pages): [ 346.538614] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 346.547495] [ 22970] 0 22970 17618 8221 126976 0 0 syz-executor3 [ 346.556524] [ 22983] 0 22983 17618 8218 126976 0 0 syz-executor2 [ 346.565569] Memory cgroup out of memory: Kill process 22970 (syz-executor3) score 8252000 or sacrifice child [ 346.575737] Killed process 22970 (syz-executor3) total-vm:70472kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 346.586800] oom_reaper: reaped process 22970 (syz-executor3), now anon-rss:0kB, file-rss:32788kB, shmem-rss:0kB [ 346.586920] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 346.606544] CPU: 0 PID: 22983 Comm: syz-executor2 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 346.615026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.624368] Call Trace: [ 346.626942] dump_stack+0x1c9/0x2b4 [ 346.630556] ? dump_stack_print_info.cold.2+0x52/0x52 [ 346.635750] ? trace_hardirqs_on+0x10/0x10 [ 346.639963] ? do_raw_spin_unlock+0xa7/0x2f0 [ 346.644364] dump_header+0x246/0x123c [ 346.648149] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 346.653071] ? trace_hardirqs_on+0x10/0x10 [ 346.657303] ? trace_hardirqs_on+0x10/0x10 [ 346.661526] ? trace_hardirqs_on+0x10/0x10 [ 346.665759] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.671285] ? css_next_child+0x1c3/0x620 [ 346.675418] ? find_lock_task_mm+0x230/0x4d0 [ 346.679815] ? cgroup_get_tree+0xb20/0xb20 [ 346.684034] ? lock_acquire+0x1e4/0x540 [ 346.688009] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.693538] ? task_will_free_mem+0x239/0xb70 [ 346.698031] ? lock_release+0xa30/0xa30 [ 346.702048] ? oom_badness+0x7d1/0xb00 [ 346.705933] ? ___ratelimit+0x36f/0x655 [ 346.709888] ? lock_downgrade+0x8f0/0x8f0 [ 346.714015] ? kasan_check_read+0x11/0x20 [ 346.718145] ? do_raw_spin_unlock+0xa7/0x2f0 [ 346.722543] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 346.727113] ? do_raw_spin_lock+0x200/0x200 [ 346.731415] ? oom_kill_process+0x24d/0x280 [ 346.735725] ? lock_downgrade+0x8f0/0x8f0 [ 346.739854] ? trace_hardirqs_on+0xd/0x10 [ 346.743994] ? ___ratelimit+0xaa/0x655 [ 346.747862] ? idr_get_free+0x10c0/0x10c0 [ 346.752000] ? kasan_check_write+0x14/0x20 [ 346.756217] ? do_raw_spin_lock+0xc1/0x200 [ 346.760432] oom_kill_process.cold.29+0x10/0x660 [ 346.765170] ? trace_hardirqs_on+0xd/0x10 [ 346.769309] ? _raw_spin_unlock_irq+0x27/0x70 [ 346.773788] ? css_task_iter_end+0x2ce/0x490 [ 346.778181] ? oom_evaluate_task+0x540/0x540 [ 346.782588] ? trace_hardirqs_on+0xd/0x10 [ 346.786721] ? _raw_spin_unlock_irq+0x27/0x70 [ 346.791199] ? oom_badness+0xb00/0xb00 [ 346.795082] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 346.799840] ? mem_cgroup_iter_break+0x30/0x30 [ 346.804411] out_of_memory+0x86d/0x1ad0 [ 346.808367] ? oom_killer_disable+0x3a0/0x3a0 [ 346.812852] ? do_raw_spin_unlock+0xa7/0x2f0 [ 346.817270] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 346.821843] ? kasan_check_write+0x14/0x20 [ 346.826062] ? do_raw_spin_lock+0xc1/0x200 [ 346.830282] mem_cgroup_out_of_memory+0x15e/0x210 [ 346.835124] ? memcg_memory_event+0x40/0x40 [ 346.839448] ? page_counter_try_charge+0x1c7/0x220 [ 346.844369] try_charge+0x720/0x1680 [ 346.848074] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 346.854835] ? lock_downgrade+0x8f0/0x8f0 [ 346.858967] ? lock_release+0xa30/0xa30 [ 346.862919] ? __anon_vma_prepare+0xc4/0x720 [ 346.867307] ? handle_mm_fault+0x53e/0xc80 [ 346.871522] ? fs_reclaim_acquire+0x20/0x20 [ 346.875835] ? lock_downgrade+0x8f0/0x8f0 [ 346.879959] ? percpu_ref_put_many+0x119/0x240 [ 346.884521] ? get_mem_cgroup_from_mm+0x209/0x440 [ 346.889348] ? get_mem_cgroup_from_page+0x190/0x190 [ 346.894363] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 346.899199] ? lock_acquire+0x1e4/0x540 [ 346.903161] mem_cgroup_try_charge+0x4ff/0xa70 [ 346.907730] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 346.912743] ? mem_cgroup_protected+0xa60/0xa60 [ 346.917391] ? up_write+0x7b/0x220 [ 346.920909] ? up_read+0x110/0x110 [ 346.924430] ? __anon_vma_prepare+0x36d/0x720 [ 346.928906] ? pmd_val+0x88/0x100 [ 346.932339] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 346.937860] mem_cgroup_try_charge_delay+0x1d/0x90 [ 346.942773] __handle_mm_fault+0x25ba/0x4470 [ 346.947166] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 346.951990] ? cap_mmap_addr+0x52/0x130 [ 346.955945] ? userfaultfd_unmap_complete+0x32a/0x510 [ 346.961122] ? security_mmap_addr+0x80/0xa0 [ 346.965432] ? lock_acquire+0x1e4/0x540 [ 346.969399] ? handle_mm_fault+0x417/0xc80 [ 346.973633] ? lock_downgrade+0x8f0/0x8f0 [ 346.977777] ? lock_release+0xa30/0xa30 [ 346.981732] ? lock_release+0xa30/0xa30 [ 346.985689] ? down_read_killable+0x200/0x200 [ 346.990165] ? mem_cgroup_from_task+0xcb/0x1f0 [ 346.994725] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 346.999463] handle_mm_fault+0x53e/0xc80 [ 347.003505] ? __handle_mm_fault+0x4470/0x4470 [ 347.008068] ? find_vma+0x34/0x190 [ 347.011595] __do_page_fault+0x620/0xe50 [ 347.015641] ? mm_fault_error+0x380/0x380 [ 347.019771] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 347.025291] ? __x64_sys_clock_gettime+0x170/0x250 [ 347.030199] ? __ia32_sys_clock_settime+0x290/0x290 [ 347.035196] do_page_fault+0xf6/0x8c0 [ 347.038979] ? vmalloc_sync_all+0x30/0x30 [ 347.043116] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 347.048634] ? do_syscall_64+0x497/0x820 [ 347.052674] ? syscall_slow_exit_work+0x500/0x500 [ 347.057495] ? syscall_return_slowpath+0x5e0/0x5e0 [ 347.062414] ? syscall_return_slowpath+0x31d/0x5e0 [ 347.067325] ? prepare_exit_to_usermode+0x291/0x3b0 [ 347.072334] ? page_fault+0x8/0x30 [ 347.075859] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 347.080683] ? page_fault+0x8/0x30 [ 347.084205] page_fault+0x1e/0x30 [ 347.087639] RIP: 0033:0x40e16f [ 347.090811] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 347.109693] RSP: 002b:00007ffe1f3c3010 EFLAGS: 00010206 [ 347.115036] RAX: 00007f91cf350000 RBX: 0000000000020000 RCX: 00000000004569aa [ 347.122294] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 347.129547] RBP: 00007ffe1f3c30f0 R08: ffffffffffffffff R09: 0000000000000000 [ 347.136805] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1f3c31e0 [ 347.144056] R13: 00007f91cf370700 R14: 000000000072bf2c R15: 0000000000000001 [ 347.151398] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor2,pid=22983,uid=0 [ 347.165657] memory: usage 168kB, limit 0kB, failcnt 1206 [ 347.171121] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 347.177888] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 347.184038] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 347.203572] Tasks state (memory values in pages): [ 347.208423] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name 03:35:45 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x9, 0x0, 0x8008, 0x7, 0x5, 0xdb, 0xfffffffffffffff8, 0xfb2, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={r2, @in={{0x2, 0x4e22, @multicast2}}, 0x3, 0xaae}, &(0x7f0000000140)=0x90) r3 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000300), 0x12) r4 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000000380)=""/4096) close(r0) 03:35:45 executing program 6: mmap(&(0x7f0000ad2000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x6, 0x4, 0x800, 0xb9e4}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x6d, &(0x7f0000ad2000), &(0x7f0000000080)=0x23c) 03:35:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb69, 0x2081) write$eventfd(r1, &(0x7f0000000180)=0xfffffffffffffffe, 0xfffffff4) setsockopt$llc_int(r1, 0x10c, 0xf, &(0x7f0000000000)=0x3, 0x4) 03:35:45 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0xe, 0xfffffffffffffffa) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000150007031dfffd946f61830002200a00090000e7fe1c40000c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 03:35:45 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) close(r0) 03:35:45 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @loopback}, 0xb6) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40, 0x90) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x44, "f9b03d15492f7687f3925b785a2d8360c5fc872ab760d3f0a136fbe899fed849a9c4c3e4df09361cb1721a1dc57b6f04c4ccc6f050c645e004c3ab9a239572d9745d8409"}, &(0x7f0000000180)=0x4c) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r2, 0x800}, 0x8) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1}}}, 0x90) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000200)={0x3, 0x9, 0x168, 0x7ff, 0x2, 0x4}) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) [ 347.217308] [ 22983] 0 22983 17618 8218 126976 0 0 syz-executor2 [ 347.226330] Memory cgroup out of memory: Kill process 22983 (syz-executor2) score 8249000 or sacrifice child [ 347.236353] Killed process 22983 (syz-executor2) total-vm:70472kB, anon-rss:104kB, file-rss:32768kB, shmem-rss:0kB [ 347.247365] oom_reaper: reaped process 22983 (syz-executor2), now anon-rss:0kB, file-rss:32788kB, shmem-rss:0kB 03:35:45 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x903, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x3, 0x3, 0x0, 0x7f}, 0x8) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000080)={0x5, 0x7, 0x5, 0x1}) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200)={r2, 0x10000}, 0x8) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000240)=0x800001d) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000280)={0x80, 0x0, 0x6, 0x100, 0x4}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f00000002c0)={0x0, 0x308b}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x80010, r0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000300)=""/59) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000340)={r1, 0x8450}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000003c0), &(0x7f0000000400)=0x4) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000440)={{0xa, 0x4e22, 0x4, @loopback, 0x5}, {0xa, 0x4e23, 0x9, @loopback, 0x8}, 0x8, [0x5, 0x80000000000, 0x7fff, 0x7f, 0xb438, 0x8, 0x3ff, 0x1000]}, 0x5c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000600)={0xb, 0x10, 0xfa00, {&(0x7f00000004c0), r3, 0x9}}, 0x18) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x8c, r4, 0x18, 0x4, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf1e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xac}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000800)='IPVS\x00') unlink(&(0x7f0000000840)='./file0\x00') r5 = getpgrp(0xffffffffffffffff) fstat(r0, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000001c40), &(0x7f0000001c80), &(0x7f0000001cc0)=0x0) r8 = getpgrp(0x0) r9 = geteuid() lstat(&(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f00000036c0)=[{&(0x7f0000000880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000000900)="10d744bb3a8f0c2ac3f69c65ee9096a6e018cb5dee97ccb65a06a4319b0b1fe1383241d33d611e9603d09e754ec11186f942478d483c81d83c83a2663d9f387ac9f54e5d6e09fb05eb03f518a9b332b1ca96d2eb2f40a86cf205f885fac73340eaa236280a6e0fb34390c793dec6ca2874dfb77a6b0cfc141f065d39139386502a0615c84fc546f498e886afe1ccf00a64555b3ef16ea26b7cb0c3f03704e6617aad82231b31a453803d2048c7afd1faa1df664d", 0xb4}, {&(0x7f00000009c0)="bf44b4e01a2e2f15cf0f44c93de588b2b3dd1a9c05c7b7fa91e952c3d2f8bf05622039e3169339c95abe77ce7a638a9d9eb73cb2d6439d292e57b76f014a283f52bdf1d0f1b283a652225f37e508280e961305c3782dfc6d7eebd503160ccce4c6a3e565ec659fda3876d409c25de34662", 0x71}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="c98e40995f1c15dd49e32f2c01ac5519593af4034573f7ef8f8291e4927b7df0184fc1b4a6196fc615600bab9659d0455fa4a3717ec9b923ed48276a109d24fb44ee15bef67c7d17bb5652e9c93733f553b70da2a50be12ba8e0013c161bebe5f076f061c77f3584f88f6f949dc38d9e6a4720ff8b28a368", 0x78}, {&(0x7f0000001ac0)="ce38d16a51536e4355b821a1cf8dd7ecb38950d466261bbfab80b1d7f15a0754e1abbb1dd5f291ef1ba4bc9fd7193e24e97c666250e2797c1a03847a8b02ded55f17d227747cba7868159cf40aa97796a1d1aef224b6b425d1dc2aaa9e7dc95d736c1760751c73b85a2128cd3a9145babfdbec7a12", 0x75}], 0x5, &(0x7f0000001d00)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}], 0x40, 0x20000040}, {&(0x7f0000001d40)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001dc0)="8938646692b62e253f7d55eacd4cc21b1419ab7fc14089c3cbf63efe1cfe66861def3d85b49d6ec9b16d561b33717260c63b080c1718d28821fbb548a118b159ce0be5cee5c24c2c94c9f9ab0560bb4909bc871c2ae151e4a337eff0b6cade5d518913ccab67298f2a6e57f3f15cc048586bcf7b9cd5ae8853bacb8806040e4c2ae666424063261d8967fa66d1c2bf893e", 0x91}, {&(0x7f0000001e80)="8392973fbae8f96bebe14f1cdae7fc6080764bb5dea4e50231a3d712ff532ff42f0c5de6b310f2dcc21a120490d2d4fc766e74da24521688ea1f1372d061717709bda161bedd646806f4819ea33ab32a95256e9a0ab5688fcd63c31e3268b17a1e9bc2e6676b3433bd10749b6db977abd696c7b8b2a13825bcac456b0d67579c74b092c231d69e4eda1a69d3758399274b73beb853510c8f9e1a32dcb0694c1b3f3209b6c703a5719b8f2b6101e2581f9b889409ebd7e3b05c6111dfc6bad9b77c28b508acd1373a7774be84a892312697ba4edc95d2", 0xd6}], 0x2, &(0x7f0000002080)=[@cred={0x20, 0x1, 0x2, r8, r9, r10}], 0x20, 0x4}, {&(0x7f00000020c0)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000003300)=[{&(0x7f0000002140)="2b28fe0c0aa7ede3ebadfe3eb18d8db1ddf3c79b86b154dd72d09e5066b30994321a5435dbaf4ce15077a32c979861f22b43b5bb5062d8be5653a06d1a0c65aa1651a6c1894931321e1b36457a05fbff2b163adc85d88749254f308644ba780241e890db1d927e11df5a20c5565c8b4b05e0287952", 0x75}, {&(0x7f00000021c0)="a9d8a6290e612c7d3d194a0b50b585e2f6e1e0137f442e21ae35bfb4a16ab62a8bc47d2c9e7ee31a74551eeea65df9758e60a249ab76967dbe4ea4eb1f51ad2a5d7a2280b141f85251a369ff1e40493356", 0x51}, {&(0x7f0000002240)="2a262208c437da99c23db0e8d74411a88b11b612e3d3bafe88f029287a71a90dea9c52436f71334ea43166beff6a0fdc9ab48dbeabb9945712c16860c651fa965a5e556ce64abe35e5852934893ec88ee4ed2e68576b0e2e7dda6732187e6c9c3ef6445810cadc8a8523b07785fb6aa4326fb49d9d703e55291bfd91c6fedbe0bb9ad4ebcf243454237c441be170ed0715a2315c5518d913129b5cfc243d28c93532b8e8928b019418840b29ef65c5f04dfc88706f8fdcd8b524efc00c2ccd2abdb1f88140f00e7abc8259732743b5be457b8639afbf526f73df369025c59679e6bc6ce2a739a7bed069c4f8bc5bf5cbd67d69870a192b071b96f6e875e2101c5aa66eed3ebd5f0ac09b93f0dcf588b1e678013c7298ac5d33ea8824a6909763b41aafd045bf83244ba42f5c313139adb35c38e26fd07316a7c3cdee530855e7c04a11eecf8b7f4f31c93e9015cefdcbce95d6ca2b6af250660b1ce38266d39b46dbd29b9c3805c1d2f1b86b1175fbb3d44ff3432b983305e32c0a48fe419a69e84e02bcd927761aefa41f0360c78f3f8b23206360fb4d32612d2432ffcc1eeb45c62fbe0d320ba0ae994db1d9970dc7199be6c27cc4a556caf334570b3fdc691de495ea639ad391940687c87f62806e98d8be5d2b5742b43b45cb8ba6465feb04bf818238dbd68c4cf9b7bdd94a15c6002b77e5e4e8223799edfb430a9cb515912ddaf4d210fa53816e2e48914d88392abcd3ec2b57086a5a762076e7bdd69c312ba722eba75861ff9da0b3af6a0dc30132fec9459bde72caa89da4ea92d382582af2b5a0bd755f36f871f74cce2ad6990143634072f47e6e711371e7f11627f2f09e9a010504b58e17f4f427940e5facfcedb66f56378eb1fc1932dcba83e550269362b55ee7d7374aeb09b20e1d341d760cae756e7f88dc5804e5545b5ee99ee19006ad1f3132b78a61ad71c75a03d8742e86291b60897b15cb662f46344cbd5df3f68c594e2a7a7b6aba5376e40fd8d182325aa1f0fcad92974dc75a433c096cc38e815fac65318061adfc934d748e351bd69a12eee928a8f6dcfb02144af9b8130970e67d3abca517eba8cf8c02121a9d4983aee8af78702f3b745f7846eb233d14dd39d2c4edb4e948ba9d7c1b18b86456e23d17cc40352dc57946e4f3806e15a603ed59aedc8fa15a00e05daa00c1b1fccfcbc590f62ce1e6d95cea857d08ee81219f7db51a0262ef676fa3fda0f32d1032ae63379f163b9a84bff7c2795bcd3375f37b8232e1584a64166836428809023328758e9a05393f1107f6de7e2e64db39f4bdb0521be91ab452262c7e74abbb71a070973dd46ee3144562a1deab10cbbf2fdc337b3380dddb2afa089bb0a11e8fbf5f325684c369fbeddfcc5ddb8d5b59d1bcdfa1cc95f815569ace5f29d0248ace920d9255b360791a7f933bbdf42808a6b39d82755acf7308c92de6df7b90cd153d472df1fc222b8538a9e7a70401e357407cb50039ae9df5ce111ea980696b1fee0d0ab9408f8e1a8881da993a9d32b8c963c5f8f307108e0ce41ef753fa8e2525f39cd7d3abf6b6f6efd7dab5830cc91f46ff257472346295154151f41ad92a0ad82b3b784aad3d0bd428471618b78b1062d440caeb059283f9f5782512ce5466462bd08643dc3798c060343ea9bfa887ab870cfc850d3bde90dfc192a44e2e732c22658cd00bcb7a191d1c0fadc17555feaf32c9957722a40e9dcc617f22f6bd8e2f94665d985e104a2f2e13567d7697977c428d75771921fd436a8a03c9d85a9938a6b2ea53744038afef307d44bb014997f3022427d41d58076a441d44692f2eb24ddb8916a755868bd9d607ea1c3fb7c398ab50980f95117b6ada5fa2d354ed0e4d4e0009e131d87ee23802c918841f8e6c663c23dc8f17b7f66fd4af20a1f20cbbd5ee0a24d9069d3201c3e10c60e198b3c37b7a83b8090975243932f57898b72f60e9d2ada881387e65d154abeff78c148333e72958238c8d9ef856cf57509802064332ea8603670a1e29ff270342d5cc2a87243ae2998111310d7584397dd868f3d6e2f8c05b98ce43b444cbe38d2e8554f440aec81a0c4b2d425b24acf515ebcd4d556fe41e6a6bffd7739d79ef7088dfca73009552d23830467ff304329cb6819e7d6ef79f2ba746c4f88789acb421c1663d7aa0bfad5baba11eb4533e1e05d7166a8975fb031736034d209caa62332ab7b410b0f1372cf865c7494f963b8601a73d78dcf3ec09c534305fb3f5baa4456357a3af90024e07c3d15b25177441cce056a26fcad4ab1f777a62bd2368668b48f7d452bfe518c2cfd81e548dd295d6ee01b32ca0b00e76079072712e99f0defedea0bec62bb9e8d1f142b9f9b1cda4124d70ab33bdc62ad0b020321c498b0a16d23ecfa5fabb04ad4e241aa01aa877213d1b2aba7437953ed694cb39a24cda2738780d02ac8ce81cdf4ea30ec8a6cf02314c83f1612364e5cd6c878135dfd7d2e0d869da968f7dce2cd9e3a4c0f7ccbc020cc0f58711e1f0ee069e8b3e993b8eda5cfed761be4c94f26bb3ac1241f2cc31b793bedcbc086c1673b30271e79b4e390e9813c7649758fa0aafcc3fc991c216c45bdf1f4a8376db5ee0ccd8c8fc79c15f751f5d770c8f0d8bf9eb9c6c8e98d798db5f8032cc4b7ed2a5bd0a7766f4b474fa763519c963e1aa91707143efa2f04d5bdd99bc20aceb17d517267ee56efe97c4a80a8b6d19dbe460807be7f1e7df0f783ca963bbb1e9766148651809c8eedc87622a2c9bdaf152123fd81e7a153aab446dd7fb7ee6b9ae06b253dd24f2a4f624342f9871c7334f2d82680336add4e1f94581125e3cc8ce4630234cd9b72b8970107e001bbab424bc1f843b2209bd67dbd0e4b4b87df52f1cb971ea7ef0f7e5a64206b81e5674288477f4316f1e879bb796a5a473905fd5f9e1316735327bfad1a00909fe6491c369c8ed3e35f0be1e2d027ec73c0af573fa1f551e9405c3ab172e1750900269e0907d825a677ae7b9ffa1c7a33b04169737ad0d5dd2cb13785888ba2bd4ea00d211c3c3e18ed17e2a70fd8e6b1d16847d55f4a49cfba4b3a03e920a9222e7f63aae119e272622e7db8ab1b1d0c09e798eda1a24c04b498a8fa07a8bb0278d0c0e8dd68a32f8606a5da75c0d49a4153daf767aa5646771e98d6b2a869aca56040d3cd94729cc26a6d196d542a69f013aa57dc6734601144d93a724fe69e34f7f82c8f7fdc85e2728d7bd2dd7a9d0ccdae74106ab8f51f4478c0cd68ce96107a210cf3661e90bbb0b219f1a7a9cf6f5eb3f6127c4cf59a896949d64228ec152df02e4c2880169677fffeb33c36eeeccd019449ea7c41015c927f8c392fc9568e4d918ba1621da971283a09e3ff9407f09086ccf16bee942d6e590606013372d70ca434aefff2a0482a6363445c298ea5eb4d482aa5e30c7e0163e376225c31720334a94bd355f11680e7f5edc8e08fd46d70786da9aa0e7815cfae728be5fcd29727a7686b35923e166ee20ac57fba55fb1cc984df126add465d4dc76d6ad85c0cf1fe7be950758bf456a05e7a647b66eda2563582d98cabd6a79a160b0c07be69a25f8ae652ee024c6d05088ba1accc5e0ca2d0f06904d03af39e7597283c11fed261a2526a48ca08cf9e4d20acf1bb6a8c3231486dbb0b23056cfb2eb632a4519c2c92afa7c2e898fda1e7681cb89212533080e62b995f0ef0f6933de28a3f08d39c8dacacecd7da4f8dd784b7a8b98009289a59412d27cb8c6a7575e4fb5a78d7f600186dc70dd8e7c3505d3a497036aac74b12532a6fe5446403e43262aadc77cc2c0df4fefe60d19bcff9f30b98a1b529fb2513b22bd803d97ae6d9072ded75489e1421588a181fdc18a63c37664612087d3597f6c9b3aeea84c8142fc7771748f7adbc2a4d74463624893ec310315c3c483ba39baf8fdd77597098e3df11cebc38a7e4f7fa5471c2b71214e390ac1b44ab9f9aeb86fc4405b01af4726db52b654600867fbabaa0c4631fe88c1709567cc7e8c988e190bb77f7f9d61d429f3810b4de0ac81814805987652ed9dcfc2df35102b0fc9c131b4d98759d04a0be91c30d06d89e16cae1ce71304ab028a3193e4572cbe165a897b84c7da531c9b6737f372b1501df31bd340434e533bf508b5432f5a2e72047bf29fc4c626839ae72c35761b8cb1a5e9880aae2d10f743f2662487d1f51816ded1abb994071492a2d669c08de84da55d1e7c90efec997b4aa66b47ca84eb6e31e15dd5c2913340a8ac0f86fe5d0213d26f336be56ca0b04cf31feeaaa3a2bb157cc6880caa0d644da980fae2cba2c9785bb303a007d514f8a3c55e2b66d1dba02f45e9d0ef78ab84373bfe131c901f5ee5edb3fc55a7d8a7ea044586b53b607f87821dde834890907d266186e457d384109f26c653d0ae4e56d938e5ab6aecfaea664936cdd337f5bb8e9b3e0c338f92823c93a126952bd6172c3761ba8d90a695765996c6caf0b04cb80bfcb95ea2536e4d8f97f509c45f8b4b794e61024e49eb852ba7789954b7d2df3eab89b702de9a69208f5047a8cdf03b972fb07da0b553bce9d7d000847dba41ee559f72bd0ebb49f7331f9f15242b7cfed25f65066c0576dae0a59427fbaba8f1233a627aea67e6307a59949ded1d5e34b8a45c565a13ad77920f1a682c0fb3fe3d998ab0d4d27b65b8c53429b7ec5cd23504882206100a219313e5ac6982850773b40752d962baa8ac4754d9cb0c0b947d80b8ca0d07316ef5f9cd184c3764e0082b8d80c3e2d0150a0f865d535400e09b40dd54abf9a8a8b40445ed9a12e158886551b109255b87986fd895ec40758749f77cf8d0ed83ebdbc801e8e22a77359e5c65379decc675e257375f577cca45a38ad26a5ad3eeeaf06b1efc466ad82c26d0e24b53e261d81945485c34ede20b4d754be8b7b721c3f0d95b30c5fdc0a921101d2bbd9c66c094da5b321861126dac6bf9fc389383244a50bb074c189e2d4ff05381d9ac49c52e1b9a9ddc3fda0220963fdd6c892bad57fdf47cca229379c0694946df64c2db8789530cce519785f456b06881808c106ccc58d7ff20ade9bb82aae64183a0fa0e2d8e3053d5c94f8c5e22393436387c39e088fc85db9209f280948b39417216da95a9190c6b250f84aae6a2fc8a6bdcbf1774d406d44ee3ac3d0a56b05ffd49b08a193e9160700cbf5a41f1e14e0f2c76101b5ccd273e89a4da16dbddbda1804183a0a9d3e670feead9bde5bf1f0aa4f82ae8c7dc7dde512afa5e577bf9f9b53ec11a6d5320a3bdd790bcdd36ba2c97a6ed7d3d17c28821188005dd6bf34bc3e986043247f2352263aea1c3c034f6fd875fca0b7ed16c0e260b0e4d6b86221a1953141b929892ec8f523e9d6c5ed8f03ec870516fbc7d868cd8991e77d6a9bafd9ea6c16c05b9c32a3e0aff999b4d99ac880dd0c60f3fec246614bf24cb77c0300be27c037b1f8049208916ecb85e819fa25589dbfbc7ed8aeed80ca01b67b2d6cd7d7519e3104bad4fd7ee9fe7b90525f4fdd629c06a63a90e5abb7578ef23a2f4402bc062a684e834601067ba80915c963683c01668e3c0c6ad1a549bf7bb73cbeae768d8bcbc0a5da424e20e2c96790e9bede038c67829775a81c88f3514b47f873b1cdd5e7991074f095123a2aeb983aeb57f34792b232942c6039142c4077e82697d8d4ad2199478d5cbeedf278beb6fe65cbe27d37ec9e63fb087a9d855bebf218849161099f97569205970138638505b856ac4b8bc729d9280cd37", 0x1000}, {&(0x7f0000003240)="8624a53f52c8cafcd7c050d699999a9459cf6cbf2dafdbd44769c89b005ce27307ba2632d87dec581d624d52a7efc110ec122f95a1", 0x35}, {&(0x7f0000003280)="709da162c3357d8d9d393f32c8b6fee784c9cc4596ccc8beb0ca4a4897ad5dd1b5f795b65261c3408e7900cc27c0455eb95976dc3b02895bf0fbcc404c6e4c6207931ba19307b48ebfeac689588965f442e2ffe1508c18309bfcc770c3fbe2af3c9ee9de665525062c2228a75906", 0x6e}], 0x5, &(0x7f0000003380)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}], 0x20, 0x4}, {&(0x7f00000033c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003440)="23db4f91bc16eeac306f56936c6e20aa2c9442cdccbc12ad3cafa55ebb2ca2023d869c9f669a400af751f0631a0eafd4a0a6a37c28289c49794fd44dac65dddeb2c43c67c773e04b01b42b44215d8221998b165ff44f1289760b2afc92fde3413d1339f79fe6a4f7676acdd375c209142507a5c7278e38c0af3a0ec19b26bb550d8bafee453d8abf1de7431c4087c65d578cb64e5170870fc0f62e51a0fa6fc89c49c7dc67ad69c5ce189ba7b2c2b967d278d0bc6bee958390aa0859f28954311473a2851f77f0e31befa0fdb83eeefe1971e154d3", 0xd5}, {&(0x7f0000003540)="fe138c88c51f5a4afb2af95167c369f1597dcc90d0fa570fea6d5314f1b6efa93e17acc5b9e9e0c8e86f5581567dd301ff337e6fbf0bce3184bf0a44274e78204c51545264bf02e72e4519757b9345e68a08bd783594cfe0228a79a379fddf2c485901a21405c9c732835525d8f5544bc58c3f53658f706d5c601c41c9b2998c74c4d77f1a2348e96e9080e8d586c8ce", 0x90}, {&(0x7f0000003600)="b5bcb1a66a53a1005f9b830daf809d6cd08b274488484265808c0f8ce04aaa5e42badcf88d5c4279b3ca01b7103a61806ebdddb5da1b1f2cc34be3fd2d45cf7888922fad826e7783c37ba059530587281b6b439774d2a57a020d7165d95e3225f26d3ed77f268d71463c598307fbb9af", 0x70}], 0x3, 0x0, 0x0, 0x4}], 0x4, 0x40) get_robust_list(r8, &(0x7f0000003900)=&(0x7f00000038c0)={&(0x7f0000003800)={&(0x7f00000037c0)}, 0x0, &(0x7f0000003880)={&(0x7f0000003840)}}, &(0x7f0000003940)=0x18) rt_sigsuspend(&(0x7f0000003980)={0x6}, 0x8) 03:35:45 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x40044590, &(0x7f0000000380)=""/4096) close(r0) 03:35:45 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@ipx, &(0x7f0000000140)=0x80) accept4$alg(r1, 0x0, 0x0, 0x80800) r2 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) r4 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000000380)=""/4096) close(r0) 03:35:45 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004dc0)='/dev/uinput\x00', 0x8000, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000005240)={0x7, &(0x7f0000004e00)=[{}, {}, {}, {}, {}, {}, {}]}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_dev$sndpcmp(&(0x7f00000004c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ppoll(&(0x7f00000047c0)=[{r2}, {r2}, {r1}], 0x3, &(0x7f0000004800)={0x0, 0x989680}, &(0x7f0000004840), 0x8) sendto$inet6(r2, &(0x7f0000000000)="b1133ff16592e12d8bd169dda84ab622a830c41f49c46b7ca5e5b7ab302107e294e45b9f4559a207884db0ed5cf25fbb19c44ed0add72ffe7119857bd98fe2717de9789727eb9b918d182e3a3ca9b02967315e3bb166cc5bf00481797904a286d4645bb9e78535b3971379d0ffbba32294874fd742c09a30f2c3e2c9827e", 0x7e, 0x24000040, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) [ 347.270832] netlink: 12 bytes leftover after parsing attributes in process `syz-executor1'. [ 347.290728] netlink: 12 bytes leftover after parsing attributes in process `syz-executor1'. 03:35:45 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000240)=r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"69726c61bd15000000001f0000000020", 0x1012}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'bcsh0\x00', 0x2401}) r3 = dup2(r0, r0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r4, 0x202, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 03:35:45 executing program 1: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000240)=ANY=[@ANYBLOB="000004000000000079ca12893d26778d25e72edcbac7200d25f1d9bd80b9a2918857ea08cefd12abb8dec05a83cb5b1a4e1a7b171ec1bd58363e8a5649335edd7c54f985f04f50dfcec5c36e77d36cc67c92365993b75661b3b684e149c76f1e15b8a1d12d49e58752ef1c97ae0bfc4fe015065c807ad7adb893979c8894206d1ff5c9f9fd9f5293025a0a6d7ffd9d3f689844d8c2808cc1855b1786d89514192857f6a1739e5da92f03399ae5d21e0493a0e965b272c77b"], 0x8) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)=0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x800, @dev}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000200)}, 0x0) 03:35:45 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) r1 = dup2(r0, r0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000000)) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000b40)={&(0x7f0000000040)={0x2, 0x0, @rand_addr=0xff}, 0x10, &(0x7f0000000400), 0x0, &(0x7f0000000980)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000680)=""/159, 0x9f}, &(0x7f0000000940)=[{&(0x7f0000000840)=""/245, 0xf5}], 0x1}}], 0x48}, 0x4000000) 03:35:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x7, 0x2, 0xfffffffffffffffd) r2 = socket$packet(0x11, 0x0, 0x300) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8000, 0x0) gettid() setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000180), 0x4) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0xb1bb, 0x2, 0x6, 0x4}, 0x8) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x7fff, 0x0, 0x3}, 0x4) 03:35:45 executing program 1: clock_adjtime(0x0, &(0x7f0000000000)={0x27ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe147a}) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000100)='gre0\x00') 12:13:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fcntl$setpipe(r0, 0x407, 0x80000001) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x8000, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x4) mkdir(&(0x7f0000029ff6)='./control\x00', 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0xa4000960) rename(&(0x7f0000000100)='./control\x00', &(0x7f0000000040)='./file0\x00') [ 348.222987] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 348.232474] CPU: 0 PID: 23045 Comm: syz-executor3 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 348.240951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.250308] Call Trace: [ 348.252889] dump_stack+0x1c9/0x2b4 [ 348.256514] ? dump_stack_print_info.cold.2+0x52/0x52 [ 348.261691] ? trace_hardirqs_on+0x10/0x10 [ 348.265906] ? lock_downgrade+0x8f0/0x8f0 [ 348.270056] dump_header+0x246/0x123c [ 348.273848] ? percpu_ref_put_many+0x131/0x240 [ 348.278418] ? trace_hardirqs_on+0x10/0x10 [ 348.282638] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 348.287563] ? trace_hardirqs_on+0x10/0x10 [ 348.291791] ? mem_cgroup_iter+0x517/0x10c0 [ 348.296096] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.301613] ? css_next_child+0x1c3/0x620 [ 348.305755] ? trace_hardirqs_on+0x10/0x10 [ 348.309977] ? trace_hardirqs_on+0x10/0x10 [ 348.314206] ? trace_hardirqs_on+0x10/0x10 [ 348.318437] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.323958] ? css_next_child+0x1c3/0x620 [ 348.328087] ? find_lock_task_mm+0x230/0x4d0 [ 348.332490] ? cgroup_get_tree+0xb20/0xb20 [ 348.336732] ? lock_acquire+0x1e4/0x540 [ 348.340709] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.346247] ? task_will_free_mem+0x239/0xb70 [ 348.350732] ? lock_release+0xa30/0xa30 [ 348.354687] ? oom_badness+0x7d1/0xb00 [ 348.358568] ? ___ratelimit+0x36f/0x655 [ 348.362546] ? lock_downgrade+0x8f0/0x8f0 [ 348.366696] ? kasan_check_read+0x11/0x20 [ 348.370836] ? do_raw_spin_unlock+0xa7/0x2f0 [ 348.375233] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 348.379803] ? do_raw_spin_lock+0x200/0x200 [ 348.384105] ? oom_kill_process+0x24d/0x280 [ 348.388412] ? lock_downgrade+0x8f0/0x8f0 [ 348.392554] ? trace_hardirqs_on+0xd/0x10 [ 348.396691] ? ___ratelimit+0xaa/0x655 [ 348.400571] ? idr_get_free+0x10c0/0x10c0 [ 348.404708] ? kasan_check_write+0x14/0x20 [ 348.408921] ? do_raw_spin_lock+0xc1/0x200 [ 348.413148] oom_kill_process.cold.29+0x10/0x660 [ 348.417891] ? trace_hardirqs_on+0xd/0x10 [ 348.422034] ? _raw_spin_unlock_irq+0x27/0x70 [ 348.426508] ? css_task_iter_end+0x2ce/0x490 [ 348.430896] ? oom_evaluate_task+0x540/0x540 [ 348.435284] ? trace_hardirqs_on+0xd/0x10 [ 348.439409] ? _raw_spin_unlock_irq+0x27/0x70 [ 348.443895] ? oom_badness+0xb00/0xb00 [ 348.447767] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 348.452510] ? mem_cgroup_iter_break+0x30/0x30 [ 348.457076] out_of_memory+0x86d/0x1ad0 [ 348.461049] ? oom_killer_disable+0x3a0/0x3a0 [ 348.465526] ? kasan_check_read+0x11/0x20 [ 348.469668] ? do_raw_spin_unlock+0xa7/0x2f0 [ 348.474067] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 348.478638] ? kasan_check_write+0x14/0x20 [ 348.482852] ? do_raw_spin_lock+0xc1/0x200 [ 348.487078] mem_cgroup_out_of_memory+0x15e/0x210 [ 348.491905] ? memcg_memory_event+0x40/0x40 [ 348.496214] ? page_counter_try_charge+0x1c7/0x220 [ 348.501126] try_charge+0x720/0x1680 [ 348.504827] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 348.511567] ? lock_downgrade+0x8f0/0x8f0 [ 348.515696] ? lock_release+0xa30/0xa30 [ 348.519649] ? __anon_vma_prepare+0xc4/0x720 [ 348.524052] ? handle_mm_fault+0x53e/0xc80 [ 348.528268] ? fs_reclaim_acquire+0x20/0x20 [ 348.532580] ? lock_downgrade+0x8f0/0x8f0 [ 348.536709] ? percpu_ref_put_many+0x119/0x240 [ 348.541280] ? get_mem_cgroup_from_mm+0x209/0x440 [ 348.546102] ? get_mem_cgroup_from_page+0x190/0x190 [ 348.551111] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 348.555940] ? lock_acquire+0x1e4/0x540 [ 348.559900] mem_cgroup_try_charge+0x4ff/0xa70 [ 348.564490] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 348.569501] ? mem_cgroup_protected+0xa60/0xa60 [ 348.574161] ? up_write+0x7b/0x220 [ 348.577687] ? up_read+0x110/0x110 [ 348.581211] ? __anon_vma_prepare+0x36d/0x720 [ 348.585691] ? pmd_val+0x88/0x100 [ 348.589143] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 348.594668] mem_cgroup_try_charge_delay+0x1d/0x90 [ 348.599596] __handle_mm_fault+0x25ba/0x4470 [ 348.604003] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 348.608838] ? cap_mmap_addr+0x52/0x130 [ 348.612797] ? userfaultfd_unmap_complete+0x32a/0x510 [ 348.617972] ? security_mmap_addr+0x80/0xa0 [ 348.622278] ? lock_acquire+0x1e4/0x540 [ 348.626236] ? handle_mm_fault+0x417/0xc80 [ 348.630462] ? lock_downgrade+0x8f0/0x8f0 [ 348.634591] ? lock_release+0xa30/0xa30 [ 348.638553] ? lock_release+0xa30/0xa30 [ 348.642519] ? down_read_killable+0x200/0x200 [ 348.647000] ? mem_cgroup_from_task+0xcb/0x1f0 [ 348.651574] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 348.656313] handle_mm_fault+0x53e/0xc80 [ 348.660355] ? __handle_mm_fault+0x4470/0x4470 [ 348.664917] ? find_vma+0x34/0x190 [ 348.668445] __do_page_fault+0x620/0xe50 [ 348.672495] ? mm_fault_error+0x380/0x380 [ 348.676640] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.682158] ? __x64_sys_clock_gettime+0x170/0x250 [ 348.687067] ? __ia32_sys_clock_settime+0x290/0x290 [ 348.692072] do_page_fault+0xf6/0x8c0 [ 348.695855] ? vmalloc_sync_all+0x30/0x30 [ 348.699984] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.705511] ? do_syscall_64+0x497/0x820 [ 348.709569] ? syscall_slow_exit_work+0x500/0x500 [ 348.714396] ? syscall_return_slowpath+0x5e0/0x5e0 [ 348.719405] ? syscall_return_slowpath+0x31d/0x5e0 [ 348.724316] ? prepare_exit_to_usermode+0x291/0x3b0 [ 348.729317] ? page_fault+0x8/0x30 [ 348.732847] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 348.737681] ? page_fault+0x8/0x30 [ 348.741209] page_fault+0x1e/0x30 [ 348.744643] RIP: 0033:0x40e16f [ 348.747819] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 348.766699] RSP: 002b:00007ffd8c7205b0 EFLAGS: 00010206 [ 348.772041] RAX: 00007f3313243000 RBX: 0000000000020000 RCX: 00000000004569aa [ 348.779290] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 348.786554] RBP: 00007ffd8c720690 R08: ffffffffffffffff R09: 0000000000000000 [ 348.793813] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8c720780 [ 348.801064] R13: 00007f3313263700 R14: 000000000072bf2c R15: 0000000000000001 [ 348.808433] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor3,pid=23045,uid=0 [ 348.822912] memory: usage 156kB, limit 0kB, failcnt 1223 [ 348.828476] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 348.835303] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 348.841454] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 348.860944] Tasks state (memory values in pages): [ 348.865799] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 348.874693] [ 23045] 0 23045 17618 8221 126976 0 0 syz-executor3 [ 348.883740] [ 23049] 0 23049 17618 8218 126976 0 0 syz-executor2 [ 348.892762] Memory cgroup out of memory: Kill process 23045 (syz-executor3) score 8252000 or sacrifice child [ 348.902763] Killed process 23045 (syz-executor3) total-vm:70472kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 348.913827] oom_reaper: reaped process 23045 (syz-executor3), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB [ 348.914620] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 348.933648] CPU: 0 PID: 23049 Comm: syz-executor2 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 348.942126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.951460] Call Trace: [ 348.954029] dump_stack+0x1c9/0x2b4 [ 348.957645] ? dump_stack_print_info.cold.2+0x52/0x52 [ 348.962819] ? trace_hardirqs_on+0x10/0x10 [ 348.967033] ? do_raw_spin_unlock+0xa7/0x2f0 [ 348.971422] dump_header+0x246/0x123c [ 348.975214] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 348.980124] ? trace_hardirqs_on+0x10/0x10 [ 348.984342] ? trace_hardirqs_on+0x10/0x10 [ 348.988644] ? trace_hardirqs_on+0x10/0x10 [ 348.992857] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.998372] ? css_next_child+0x1c3/0x620 [ 349.002501] ? find_lock_task_mm+0x230/0x4d0 [ 349.006900] ? cgroup_get_tree+0xb20/0xb20 [ 349.011115] ? lock_acquire+0x1e4/0x540 [ 349.015068] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 349.020582] ? task_will_free_mem+0x239/0xb70 [ 349.025058] ? lock_release+0xa30/0xa30 [ 349.029030] ? oom_badness+0x7d1/0xb00 [ 349.032902] ? ___ratelimit+0x36f/0x655 [ 349.036854] ? lock_downgrade+0x8f0/0x8f0 [ 349.040980] ? kasan_check_read+0x11/0x20 [ 349.045112] ? do_raw_spin_unlock+0xa7/0x2f0 [ 349.049499] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 349.054062] ? do_raw_spin_lock+0x200/0x200 [ 349.058366] ? oom_kill_process+0x24d/0x280 [ 349.062674] ? lock_downgrade+0x8f0/0x8f0 [ 349.066815] ? trace_hardirqs_on+0xd/0x10 [ 349.070955] ? ___ratelimit+0xaa/0x655 [ 349.074825] ? idr_get_free+0x10c0/0x10c0 [ 349.078954] ? kasan_check_write+0x14/0x20 [ 349.083171] ? do_raw_spin_lock+0xc1/0x200 [ 349.087389] oom_kill_process.cold.29+0x10/0x660 [ 349.092136] ? trace_hardirqs_on+0xd/0x10 [ 349.096266] ? _raw_spin_unlock_irq+0x27/0x70 [ 349.100751] ? css_task_iter_end+0x2ce/0x490 [ 349.105148] ? oom_evaluate_task+0x540/0x540 [ 349.109538] ? trace_hardirqs_on+0xd/0x10 [ 349.113679] ? _raw_spin_unlock_irq+0x27/0x70 [ 349.118160] ? oom_badness+0xb00/0xb00 [ 349.122036] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 349.126784] ? mem_cgroup_iter_break+0x30/0x30 [ 349.131358] out_of_memory+0x86d/0x1ad0 [ 349.135322] ? oom_killer_disable+0x3a0/0x3a0 [ 349.139802] ? do_raw_spin_unlock+0xa7/0x2f0 [ 349.144189] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 349.148760] ? kasan_check_write+0x14/0x20 [ 349.152976] ? do_raw_spin_lock+0xc1/0x200 [ 349.157202] mem_cgroup_out_of_memory+0x15e/0x210 [ 349.162031] ? memcg_memory_event+0x40/0x40 [ 349.166342] ? page_counter_try_charge+0x1c7/0x220 [ 349.171262] try_charge+0x720/0x1680 [ 349.174972] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 349.181716] ? lock_downgrade+0x8f0/0x8f0 [ 349.185852] ? lock_release+0xa30/0xa30 [ 349.189817] ? __anon_vma_prepare+0xc4/0x720 [ 349.194231] ? handle_mm_fault+0x53e/0xc80 [ 349.198450] ? fs_reclaim_acquire+0x20/0x20 [ 349.202755] ? lock_downgrade+0x8f0/0x8f0 [ 349.206890] ? percpu_ref_put_many+0x119/0x240 [ 349.211456] ? get_mem_cgroup_from_mm+0x209/0x440 [ 349.216289] ? get_mem_cgroup_from_page+0x190/0x190 [ 349.221292] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 349.226117] ? lock_acquire+0x1e4/0x540 [ 349.230083] mem_cgroup_try_charge+0x4ff/0xa70 [ 349.234662] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 349.239672] ? mem_cgroup_protected+0xa60/0xa60 [ 349.244336] ? up_write+0x7b/0x220 [ 349.247858] ? up_read+0x110/0x110 [ 349.251381] ? __anon_vma_prepare+0x36d/0x720 [ 349.255858] ? pmd_val+0x88/0x100 [ 349.259297] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 349.264822] mem_cgroup_try_charge_delay+0x1d/0x90 [ 349.269738] __handle_mm_fault+0x25ba/0x4470 [ 349.274132] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 349.278971] ? cap_mmap_addr+0x52/0x130 [ 349.282942] ? userfaultfd_unmap_complete+0x32a/0x510 [ 349.288113] ? security_mmap_addr+0x80/0xa0 [ 349.292428] ? lock_acquire+0x1e4/0x540 [ 349.296382] ? handle_mm_fault+0x417/0xc80 [ 349.300608] ? lock_downgrade+0x8f0/0x8f0 [ 349.304747] ? lock_release+0xa30/0xa30 [ 349.308704] ? lock_release+0xa30/0xa30 [ 349.312660] ? down_read_killable+0x200/0x200 [ 349.317136] ? mem_cgroup_from_task+0xcb/0x1f0 [ 349.321699] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 349.326440] handle_mm_fault+0x53e/0xc80 [ 349.330487] ? __handle_mm_fault+0x4470/0x4470 [ 349.335050] ? find_vma+0x34/0x190 [ 349.338577] __do_page_fault+0x620/0xe50 [ 349.342633] ? mm_fault_error+0x380/0x380 [ 349.346763] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 349.352287] ? __x64_sys_clock_gettime+0x170/0x250 [ 349.357199] ? __ia32_sys_clock_settime+0x290/0x290 [ 349.362196] do_page_fault+0xf6/0x8c0 [ 349.365992] ? vmalloc_sync_all+0x30/0x30 [ 349.370121] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 349.375636] ? do_syscall_64+0x497/0x820 [ 349.379685] ? syscall_return_slowpath+0x5e0/0x5e0 [ 349.384599] ? syscall_return_slowpath+0x31d/0x5e0 [ 349.389541] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 349.394552] ? prepare_exit_to_usermode+0x291/0x3b0 [ 349.399561] ? page_fault+0x8/0x30 [ 349.403085] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 349.407910] ? page_fault+0x8/0x30 [ 349.411431] page_fault+0x1e/0x30 [ 349.414863] RIP: 0033:0x40e16f [ 349.418039] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 349.436922] RSP: 002b:00007ffe1f3c3010 EFLAGS: 00010206 [ 349.442267] RAX: 00007f91cf350000 RBX: 0000000000020000 RCX: 00000000004569aa [ 349.449525] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 349.456785] RBP: 00007ffe1f3c30f0 R08: ffffffffffffffff R09: 0000000000000000 [ 349.464049] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1f3c31e0 [ 349.471317] R13: 00007f91cf370700 R14: 000000000072bf2c R15: 0000000000000001 [ 349.478701] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor2,pid=23049,uid=0 [ 349.492969] memory: usage 148kB, limit 0kB, failcnt 1232 [ 349.498437] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 349.505207] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 349.511358] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 349.530882] Tasks state (memory values in pages): [ 349.535740] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 349.544634] [ 23049] 0 23049 17618 8218 126976 0 0 syz-executor2 [ 349.553655] Memory cgroup out of memory: Kill process 23049 (syz-executor2) score 8249000 or sacrifice child [ 349.563663] Killed process 23049 (syz-executor2) total-vm:70472kB, anon-rss:104kB, file-rss:32768kB, shmem-rss:0kB 12:14:00 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) sync() mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r4 = pkey_alloc(0x0, 0x3) pkey_free(r4) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000380)=""/4096) close(r0) signalfd(r3, &(0x7f0000000000)={0x5}, 0x8) 12:14:00 executing program 5: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000700)=@broute={'%route\x00', 0x20, 0x1, 0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000780], 0x0, &(0x7f00000004c0), &(0x7f0000000580)=ANY=[@ANYPTR=&(0x7f0000000500)=ANY=[@ANYPTR, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYPTR64, @ANYRESDEC=r0], @ANYRES64=r0, @ANYRES64=r0]}, 0x90) r1 = memfd_create(&(0x7f0000000040)='$\x00', 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x1, 0x1, 0x9, &(0x7f0000000080)}, 0x20) 12:14:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(xeta-generic)\x00'}, 0x58) socket$inet6(0xa, 0x5, 0xed04) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="71e67a11cdf8311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)="f2ec0638d7899e891dcd824fc9e4e54cadcff7244bc8f5f213d715ab26e0a4e2deef87f05dfd5fba2f8b113d06e2fb0d2e85130a3d5450e22558f21c9ef7d6afe9e74beb926e195a", 0x48}], 0x1, &(0x7f0000000040)}, 0x0) recvmmsg(r1, &(0x7f000000bb40)=[{{&(0x7f0000007a00)=@hci, 0x80, &(0x7f0000007bc0)=[{&(0x7f0000007a80)=""/57, 0x39}, {&(0x7f0000007ac0)=""/222, 0xde}], 0x2, &(0x7f0000007c00)=""/214, 0xd6}}], 0x1, 0x0, &(0x7f000000bc80)) sendto$inet(r1, &(0x7f00000000c0)="d3182e5dd79e4247316e7d9120d48ff2346181873dcdf9490257055409f6f0a63b90e9f414791ae827e8f4eeb65454847c15b7ecdfe1f7eecf71d3675d8e9ff291dbd8cf41bd587ce6ef76179f0ca700ba7c7bbfa41b5f4f7e47f52f45c81d6f723f644197e397168ea2ffa49affc1189e369aa8fd3b6ef37f8d02f5232f413d73bad6af77be2bc2cfcd8a9c171a0be54760bfed337d4109fe5c4379a66a4c4555b7df132f73fbec5b4a0db4cf6c39105b", 0xb1, 0x4, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) 12:14:00 executing program 6: socket$unix(0x1, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000040)={0x32, 0x6, 0x0, {0x0, 0x0, 0x9, 0x0, '-procppp1'}}, 0xffffff5f) 12:14:00 executing program 7: syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000340)={[{@iocharset={'iocharset', 0x3d, 'cp863'}}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x84000) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000300), 0x4) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r1) open$dir(&(0x7f0000000080)='./file1\x00', 0x1ffffd, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x8800000) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000003c0)={'mangle\x00', 0x1000, "d7180a5f0e81057b775c4d4c4e18d6f7d429604bb8f8b500b07997341364e006a684cc707f425c2474f505d106ea62d33a42ed5efd734ac69056180f159250aa43c6074a91052ca69bfe922e620798fc398a8d71b7ec16afa4f866520439ca8dec292b3ad5671a0fb8dff8d851a23914adc225d75c6f850e9f1d4144e3be172adb84e55a06bf2681a7734f89852109c49722d5e1cd8dc7c15e626a1740864b959b03559d0ea4b974e7b308fc5581102d27e01301434645e99cc9f54ffb11e8d73dce36b0a02fa92fd173ac5fd237dca4eb2159ce5c0b581739a57662fa8f25fe473f617c3684167e9d7d4b01c1052cdd8e337e2cd9a55e7b048a9f40e573f5fcc6f4eae3ad97bf595050632d460b3f66452fe6e33ff656a022fd37dcbca27da9ca1860e9c2cc8b5d661e3b1a18e6a9bbd6cd4fd54d7b6ea3e0215067de80c8e1617ce959673505793329f349b221fd4e0c42999f0d935eb40bfd2125526f8c743220b9d6f50d6003ba6b5e28e0ccb287fbde5d6327840dc9b5de0f65f9a24a0b5f75609cf963c9be3419badaf4231518f34b1560957ee9ff7530f3f14f5f5ac08d1fc98f0c27a69b8b81ee23897d7a8cb156e810adb5e0c9f5382e694b9e30f176fdf889d614d019fb6b25c0d3ca74138f147431da9aac661e87092c319be6657cf4a43dd15a86db781ac94a3b760d63d7744a4169e37c78c055f2c84d4292ea5b1e9e51153d38d3e756194b6b63d6faf7e28005f8e9b488b51be36c67fdab62ad7203fa7c03a5128a926c2bb41cdff0879c3f80465177486fae69f5e77d7cd59248bc2ba079c8d3c555b443b6157e38a3bb40340912980448dd923ee31527d56716a2a820130fd511594a6f3e2966609d936c71cfab0e107c51a0728dc1d2580bc84edca583a981bfbaaf16505c75854d4cd45e0f442a59154c28d06c45ce58dffb96a765c12584fe075f56f8e75b944a1a91817b23d64b94f1d4f35c540a66b5dd90bd77c8c499a8ee117f0c85b2ddb39bd554f95b2370363caf087febf55098746f7af0001c54d96e108e4e3b607d8851d572cb981ce53ee23209d1860ca8662c1259e52257642cc95248495e70b9ca6e1fe1975b27d59ddca6145d543b14c82e922135a21885fc627ab6a444a2978307406006d51adeb800f567bada1a2630e81875055ccf15c5bab02afb135b0b09117495d1fef5cc5d649699b6ab11452d8e9eedcbc86ce955ac0ad94a237b6c044df9e19e77b431d348350611bbd23179fe7c2f3d5a08742eb86cb859367ca8255a9d9c58132789a20f228e96183dd70237a63b9315be5d830896dbf26a94da9b799aa33ac37631821f2db1c5855c8db403f1868fdb2690b6f21ab5bf0edb05441340b74285917a77b7530a22569012521437ceb8c2195789f117a42c9403e99cadd405f9d9009185cc5f60eea9fbee9d52e0e2997234a8662d05bb864b13bdfe4f3dbf0fc6ec4c9d5a329ee6794fe6b6c3f7f5f668742240c29c7adfd267ca293c5f6dbbe108370d058fac528baa1e8c284411bb8cb193f9814b30ddc83df29b7a2a825981d5906ab882fe6d8dfdb629a76289d30ad2dc2377b001fd8da60827ad9396d680502204391971d6f68529df084775e5448a3fc43f74ea22f0ab5acdb87fc280b5a3772397ae5436d50b0ff0e2863d1620e7ecdf5753d9a41450e092426baf4e2c19063a164779f0193ffbf03d21bbb74a99878acc8f6bdb2ce5fa212175c0319deca3e25765a7769167e7cd93efe63beb06503527cda36697dcdd5f26724613e21b2fa3b2c283e9fbede3e432543ac71e5efe99e4225848493d46092ed35c066fbdc8993a20621091b1c89b8f0db587d35f943baed93f23995603828b17f0511ad8ab5ef0cb1b65d423ff3e98b74f6ed836e1a61e93dde7b309326f619a10aad772ef752b8a1db7e970a31fadd40fa5b1e6015abc00cc5cde46c8254989fae4fadf6fb8ca8b0d5638a16e36bacec838ef064c847fefbdb6788d09311f684d4a0022423fb9a62ec53d17dc42e62e841f50ca6832d3c2aa6892e114206577573c0bec445176f00a84b55a7d6e302f3677ba166eb345ef919c6c864348e91fc0326c7b6cd0c0d3a127ae5d5ef99d50b21b39121b5c4f0fbedef33a8d426b2f47f96375a95f58b663bca36ede150561065cd13f9f37398db4ee7dd5895d7fd68ffe3d50e11ec696e8dda4d7f249fab563382c0074bab4efdf71ec97f6dbdb474f3a184ed64c8eb8fc95b3aca917b95acfb36b71629c7595f8b069bdbfac139eb0296e69bbad057e8287e2a1a68450443482de80d81d7be71168caa76ef35c6ce3d691fe835b8d5be745abc4fd8b1d3f7f63591d203255446bdfbd03caab95288aaa40271351142c414860961932763123dafc931bc38be984f7022fb2566d688806f5e03520b4d1303765480abc82ef4b610ee810bc0178ee972bbd822b02c706b7c8dc1ba7ccb7c5872296654b905f0404bcab40ac44aaf692d3082b17785fd068beb135b30ba34694ea022b6fc8a84668e1505500b3315a780c84012180b4b03275d77ab57fb37ecd2d79c6c67f3a8ed998c5daadae327114c39ff813bfbbe60025d0e2cc205c6671d8d46589cbc1833b406983fd1a321f9371910bcf89006db2ce9a15145ff97ef39e4da2f2014d65cf886d03a0d05dc6ccc529aad558ad4aa340a719133eddf7a31a9242fe0012f4b73525393135cc7e809cae4689a30e90993b057b11fe71aa3f02bd416362e59662e022cd32e5f214f45293067bcd86dcfb4ceb09474da8a16e67a64e5f2b7d0d39ecf63bf221812d0e7e2e6e53457cd445417da1da480fce263999f43df9cb00f6bd14619a978a6d3e152bc785b3ddaa0527ffebf953737033a9af4b1146fd7f203227e30975b50bd875ff2290e720e4525526a1cbf1bdb60fd38af23250b72c6a49e48bbfa5104fea5371c1b0e63f6dfa5505969b804f5920712198956472d62013402d32dcde3a59ab6516d0b913bbe6b0e9c9dbb37eeec20250a611318f5c3ef16ed24fa213e7fcc927aa22c8904ca21f698bca36b83b6ba3b873a48abce577a4b562ce031d4fe43b106e1e454f4c0d050c72c8ea3162322c45c500e473c1fb0b9ea2f1a6f72113fdc26a5501130f05cc9cd0d3b06779f796f81856c00109bb7b2509852e5e116b16d69aabcc0e539e377052c84d08c7d9d37cba8b92c5df2d6262b0f61fb3ee8c2a044489658375411dd16675c7d9d3ced42f5d3db6d7b8a69943c276e3d86a73625b06b87ace047401684798daa6ec712180bba57f3282f33a65e2a343df55e1cd55b5f5f9576ef447648c57766a987280b9bc510feb442aa595b1db4577e22c289d3910f534da95d148f338d52273255bd6d4df79ff7b9c3605ea7c0c0ef6fb46047127c6e1c2d2166c23510220e0157590ee295d5769e468fa173afca8ccfe0a9ccb325f71bd0a488681822b698e27b8a09939e0c88b8d76880a8cfa09c5d4c438154f005225909620b301ea24ebbf61a0b46ba366e29772d03ca03177333e2040cd71030aa549629539476226022cfe59d49abdc0c589c470a18795cb8863871a065e99235f1b33de73ae67c9f3f1496c67a76ffbe65663eb034b68dbcd2561daab2bc393d20492a28a101f8446d21ab1bb31368708f16a3c5a691908b46ba08fd400215378c370db402ab211068e7ac192aec0f94e2c09a9ff23e1e4a8ae9d473e702fbaf06c29908e054fb5aa8bdc74ae800e74540dbcb55268ede0fbe9247e66bcff5e51d0c2d8d0db3ac21dca863936c2def34c0cb6a12cc862520b34863740d469ca51bfeafe95988a56c83e20a3322fa43691d04b75b85e6165c33a8dcf71534d9baf3b773f64be0ae9cbc8246a4947df5c9117fe68705514d221b4e70bc27dfcef090201fe9a73596ce2d7f693e5582de98249ffc4633c65b10a3d3c6c771aea0acdca9636388bb8f7feb5a94d1aead15b1f6abad5cf19a589ddf0b3b3c169ba7e01b2f333beb4b3e1d2631d7a316b2ccc4e4d2a9b27b86f31ef5da8b45c873f89263f61bc05a771e0e187e75a1b67c50181da2520d25fdda19d3092bf4bf732363a6bfe6f1fc6fcb4b27ddefb84f448e86089afec0771ddba290de7e22d284e12e95675044d2c0fda521c69df23e6ee81518c36a57b14bb90a3ea1f3b2f2f1a4de8947043f9a333fac48bed428950bfadf5f7549bd9db0f6c83f1db5ab328647ecc63193eae8e80d48b1f1062aeeb52c838e64162bc71cc01e512cc96921028a12ea78422b97376f5e79745d5341fd465d471fd1838971b266bed74c2c545c9eaf4cad081468ea6f3d9c3ded6a657e275984453a0c333957ecbc2edbe9c1b3cf6ebb58b6dd6ba3e90493e91681f64cf9d1673822fd4ef2be620f2a4ebeb3476d116b0e263e38adf715dedb67d4e1a470513ebb003449a73f94369a2edb8b58a241db4b999cf3929d193e69cfa67baf3188d9e5701bb87a2cad91458892648871aedf32c3afc27f5248c43bea21363b057035393d06d6635c346f2ac3ddf453a6645c26777cf2e25c11f1eabb2eaef29687af13d7066da87dca962d22bb3b80ab0191f88e3a02891b9f75f658adac29db98b88186ba79b6f7bbdaf9d771ead4aa499fbbe123df633e9cb6b4c0258700375ade549b0eb1cc581296dce85a99dea2525be6f93b0c2eee4648c90a6f2697c5bba3f4089dfa7f4692d66924f29f3f392b11083b75ecd1d6046f02d37057c78cd0ee91dfcc3ea8c5f45304a53e51b54d89f18721da32d5c0ebe17858944181ef91a167546a0483ce9ae9a5a2e97392515cfa922e98efd9272afedb6bcd88910a98fd78a88b275c207c1469a5e632139f4cb80d115b56e69742ef78e89f55315d668178f54f36b59e58135f71b2952edd69664109877de46174b2d4cc7a5a547bb416be339d7add0c3f2b2def7aa1d2664d478615c37638f3a5a875e5720fba06b3ac90b90557ee3bac6df4192b329d4860f018c6598b676c198268ec15d0c2e9b30d0a03a26f986d7d4eba77b3173beeb0a1e2843531e178a0d16b058d6694be01d795a496ebf2f71d540e644ce57e848bed47dee17607c7f883ec9403b7cbc2b78f2723f282bcf02731286bf472e1ea775920bd76f3adf74f78a057e73b98129499c30abb4be53c7fb32da4bcf0d0212c3eb98bcd4463c15ad8c7100867aaebd592349e51c247b5d349cab53d81580fb5f1b456043f0060c4552afb9c233bf50684eb0a505e1558a67d3e379be6c242c874b7a72ded2ddb7d338b34536715700c247685533ebd88a80ed1b057d2fca6570fa04b273007e63aa8fac45b29e35b3022b7a1de4d92e694eb211859fa8168d5e660308b84ba26ffd858154f66480d7daa3d1faccce79bcb444646e079773735e97476f694cbaa5f6809d916b5bdb38dc478e8f1edbfbc0eddf416411e01964ffa55cfb72007926d13bcbc1066c1074d0d73f248a87dc392e26b5e7ee852055273704b0365c159a6ebf14df2f4aa4cb8cbf42f6f334bc09e2c610af1c5ddfa6e7b92fe16da2a3b8538cd9cdb54b68bd5104747763c9af6a7c3fdc9af47a0d60cedcdba8b33a84c24d61d3b1cf50e38ee57c17094bcf504b3c8fa694d4170b5e68da6b53d261ef14a1ed5d2791dc653f42fc911aba1bbc8b512d674b7e5b8627aae430f652c55e877737aaf48f8dd9593cfa83b628360740aa44ed1067eb930134d4402f8c4d4e5d60dd3b07d8b57e7ea5eebbf674113023a5f5a1aba7e33b173ceb3c49d812e5c5ea000c0913"}, &(0x7f00000000c0)=0x1024) setsockopt$inet_dccp_buf(r1, 0x21, 0xc, &(0x7f00000001c0)="ba2b5918d3c9228cb9723df3401bbae5bb10a63c0f81517a604f48aee148d61776d4d18ad311ce5bcb84cf632ab7d7a6fa29f97cbcefb6957fd2c9ae88d70983e403fe7a8360e123d4d87b7d3dd92d0adfedadf76242b7757c4c818cbd7d8f6ad2e86493756b528fab2b7e6305fb1b8b1a143c1dc85cca93093ab69f22472cd41499c3afbbe96f6ff3d85f3c72ddd127205d8eabbd12474bbacc65952cd671efdccb2c4c652175", 0xa7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2e2ee5917a300062872ad0bd27e530037b1ed7667c8a62f33e4320aeffae869468d920944daa07ccd7919fe0b019b3e2458ee32043f7e1571abc455e9e2b58f6e1b8bfe1cd420fc5994a000000000068242f33772b70c2f1f3824d4a12", 0x1ff) 12:14:00 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001600), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/92, 0x5c}, {&(0x7f0000000080)=""/7, 0x7}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x3, 0x0) write$P9_RREADDIR(r0, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0x103) recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{&(0x7f0000001400)=@rc, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/34, 0x22}], 0x1, &(0x7f0000001480)=""/174, 0xae}}], 0x1, 0x0, &(0x7f0000001640)) gettid() r1 = msgget$private(0x0, 0x4) msgrcv(r1, &(0x7f00000017c0)={0x0, ""/4096}, 0x1008, 0x2, 0x800) ioctl(r0, 0x20, &(0x7f0000000000)) 12:14:00 executing program 4: ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x349c1275}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x5) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0xe8) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x137}, &(0x7f0000000140)=0x8) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000440)="8e9bbceef91f34bf3f18beffa9f2e640fba1f230dd5834e198ae3cd211af5c34c242652449321debd4630fa57eab6bc8725ff9afa9b9864d83057d3956a022b20397872bc1a2ffe129d55a07ec35a90ec15ab05bf22b7de681b8314824d37d86d7771456b48a9fab837960877b69de63070845ee98fe9d92c1a05703e12cd925601bc3c128dc13cb3a798c09f638ab3606b918b4b593ee96a76c8303508e2257f95723cc5fbb3e0fc16cc00a94b7a7c1869a43230925df8ccd0c36ed22dcb7fe1cacbed1ad1886") getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000340)={r2, @in={{0x2, 0x4e22, @multicast1}}, [0xffffffffffffffff, 0x767, 0xed8, 0x8, 0x7, 0x9edb, 0x40, 0x4, 0x7, 0x0, 0x1, 0x7f, 0x3, 0x8, 0x95]}, &(0x7f0000000180)=0x100) openat$cgroup_type(r1, &(0x7f0000000280)='cgroup.type\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000540)={0xde2f, 0x10, [0x1, 0x4, 0x1, 0xfffffffffffffff8]}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c020400", @ANYRES16=0x0, @ANYBLOB="000010000000fdd9df25e8ff00000800020000000000"], 0x1c}}, 0x0) 12:14:00 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x40044590, &(0x7f0000000380)=""/4096) close(r0) [ 349.574664] oom_reaper: reaped process 23049 (syz-executor2), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB 12:14:00 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x9, 0x0, 0x8008, 0x7, 0x5, 0xdb, 0xfffffffffffffff8, 0xfb2, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={r2, @in={{0x2, 0x4e22, @multicast2}}, 0x3, 0xaae}, &(0x7f0000000140)=0x90) r3 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000300), 0x12) r4 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000000380)=""/4096) close(r0) 12:14:00 executing program 6: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x50, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xa8, 0x0, &(0x7f0000000140)=[@dead_binder_done, @clear_death={0x400c630f, 0x2, 0x4}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x18, 0x28, &(0x7f0000000040)=[@flat={0x77682a85, 0x100, r1}], &(0x7f00000000c0)=[0x38, 0x30, 0x68, 0x38, 0x40]}, 0x5}}, @clear_death={0x400c630f, 0x4, 0x1}, @enter_looper, @acquire={0x40046305, 0x2}, @clear_death={0x400c630f, 0x2, 0x4}, @clear_death={0x400c630f, 0x1, 0x2}, @exit_looper], 0x2b, 0x0, &(0x7f0000000200)="684ac00c65d87d1700f7c1e77d05dee61f7fc567563b9d129dc879620848c9bed29fa3345e8d9ae4a95cbd"}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) close(r0) 12:14:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockname(r1, &(0x7f00000006c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000680)=0x80) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x2f, "56154a49f850270fac96c1d54de7e221ec92d17048875ed032a010ab010991e3ad8844092d4511f2c900536fac4989"}, &(0x7f0000000240)=0x53) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f00000002c0)={0xeef7, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e20, @remote}}}, 0x108) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b800000022909329a77f3a190001000000000000000000ff01f9000000000000000000000001e000000100106700000000000000000000000000000000000a0000000000000088184cbd2a16fc0d4759f322a167b53a81cc71fdf06a9e82d55bfd002c22fd4b459d9e83183568bce2f92cc023c7cddd08f11e7ac926a1f412c06270c9dd8fb1ee3242", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000400)={0x3, {{0x2, 0x4e22, @rand_addr=0x8000}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x3c, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 349.629356] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 349.642392] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 349.656141] FAT-fs (loop7): bogus number of reserved sectors [ 349.662017] FAT-fs (loop7): Can't find a valid FAT filesystem 12:14:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x90) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1, 0xbf0b, 0x0, 0x8, 0x9, 0x5, 0x200, 0x9, 0x7f, 0x1, 0x1, 0x1, 0xfffffffffffffffc}, {0x8, 0x7fff, 0x3, 0x3f, 0x0, 0xfffffffffffffffd, 0x5, 0x7f, 0x5, 0x4, 0x1f, 0xfd12, 0x4}, {0x2, 0x5, 0x703f1f66, 0x59b4, 0x9, 0x4, 0x7, 0x8, 0x7, 0x3, 0x530, 0x15, 0x6}], 0x5}) r2 = socket(0x40000000002, 0x3, 0x2) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000a40)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)="7465616d5f736c6176655f313a0300"}) 12:14:00 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000140)={0x20bb, 0x0, 'client0\x00', 0x0, "205773481fd2f64c", "cd8bd92f88f5203cf6b5aa40dcd34291118db233a78e1d34f006ecbe61761e33"}) 12:14:00 executing program 4: socket$pptp(0x18, 0x1, 0x2) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x9, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000140), &(0x7f00000002c0)=0x4) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000780)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="025cc80700145f8f764070") r3 = memfd_create(&(0x7f0000000080)='&vboxnet1\x00', 0x3) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f00000001c0)="29610f3fad0b37e15e5fed6ede03d7ef6dd93074c274efa84b2da79feb78303912def75f9481daa0dae3b65315b58317f83fa9193827e6ed5443b838918ff75fad9d4e0502e0227b662b0945fcd91bfd05e4f396c2df97375b5d5b85c03e06642ac053e37d652f51441b848a87d6a6d9e613475dc8dfbe622a3b25fe812c0e5937464fbd06a598a5415d3af3f8372146f3836ed847eb87bf9f7bc601bdbd443ea0732ae14546e685bb9f2f3e4c5f6040c89ae00e716bcfb338739ab706f435d68b7b62b5da0e9527a8fb78c7a331930da67d9693628cd6afc5b402bb", 0xdc) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000000)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x22, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000000800000a00000000000000000000000000000000000000000104000000000000cd8e000000007a3daf097c7bc1848297188432b58dad000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001583dfe33bbfc061fb6c54b4b488c7875d2b5cd293870a047e8dad7ef935adb7fc75ed63bc932367"], 0x90) close(r4) r5 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r5, 0x0) close(r1) userfaultfd(0x800) [ 349.802981] attempt to access beyond end of device [ 349.809905] loop7: rw=1, want=114, limit=112 [ 349.814378] Buffer I/O error on dev loop7, logical block 113, lost async page write 12:14:00 executing program 0: r0 = memfd_create(&(0x7f0000000240)='\x00\x00\x00', 0x4) syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x0, 0x0) ftruncate(r0, 0x1000000) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x3) 12:14:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/4096, 0x1000) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001140)={&(0x7f0000000040)='./file0\x00'}, 0x10) mount(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)='./file1\x00', &(0x7f0000001200)='ubifs\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x200) dup3(r1, r0, 0x0) write(r0, &(0x7f0000000100)="06", 0x1) [ 349.884230] attempt to access beyond end of device [ 349.889261] loop7: rw=1, want=115, limit=112 [ 349.893701] Buffer I/O error on dev loop7, logical block 114, lost async page write [ 349.913226] attempt to access beyond end of device [ 349.918254] loop7: rw=1, want=116, limit=112 [ 349.922717] Buffer I/O error on dev loop7, logical block 115, lost async page write [ 349.933957] attempt to access beyond end of device [ 349.939008] loop7: rw=1, want=117, limit=112 [ 349.943442] Buffer I/O error on dev loop7, logical block 116, lost async page write [ 349.952427] attempt to access beyond end of device [ 349.957501] loop7: rw=1, want=130, limit=112 [ 349.961947] Buffer I/O error on dev loop7, logical block 129, lost async page write [ 349.970248] attempt to access beyond end of device [ 349.975250] loop7: rw=1, want=131, limit=112 [ 349.979688] Buffer I/O error on dev loop7, logical block 130, lost async page write [ 350.010369] attempt to access beyond end of device [ 350.015436] loop7: rw=1, want=132, limit=112 [ 350.020008] Buffer I/O error on dev loop7, logical block 131, lost async page write [ 350.040671] attempt to access beyond end of device [ 350.045762] loop7: rw=1, want=133, limit=112 [ 350.050214] Buffer I/O error on dev loop7, logical block 132, lost async page write [ 350.073202] attempt to access beyond end of device [ 350.078210] loop7: rw=1, want=4237, limit=112 [ 350.087650] attempt to access beyond end of device [ 350.092653] loop7: rw=1, want=8333, limit=112 [ 350.099224] attempt to access beyond end of device [ 350.104224] loop7: rw=1, want=9341, limit=112 [ 350.109652] attempt to access beyond end of device [ 350.114645] loop7: rw=2049, want=9869, limit=112 [ 350.583590] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 350.593064] CPU: 1 PID: 23120 Comm: syz-executor3 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 350.601549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.610900] Call Trace: [ 350.613506] dump_stack+0x1c9/0x2b4 [ 350.617134] ? dump_stack_print_info.cold.2+0x52/0x52 [ 350.622324] ? trace_hardirqs_on+0x10/0x10 [ 350.626553] ? lock_downgrade+0x8f0/0x8f0 [ 350.630700] dump_header+0x246/0x123c [ 350.634495] ? percpu_ref_put_many+0x131/0x240 [ 350.639074] ? trace_hardirqs_on+0x10/0x10 [ 350.643305] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 350.648231] ? trace_hardirqs_on+0x10/0x10 [ 350.652463] ? mem_cgroup_iter+0x517/0x10c0 [ 350.656785] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 350.662317] ? css_next_child+0x1c3/0x620 [ 350.666480] ? trace_hardirqs_on+0x10/0x10 [ 350.670728] ? trace_hardirqs_on+0x10/0x10 [ 350.674967] ? trace_hardirqs_on+0x10/0x10 [ 350.679206] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 350.684747] ? css_next_child+0x1c3/0x620 [ 350.688881] ? find_lock_task_mm+0x230/0x4d0 [ 350.693270] ? cgroup_get_tree+0xb20/0xb20 [ 350.697493] ? lock_acquire+0x1e4/0x540 [ 350.701465] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 350.707004] ? task_will_free_mem+0x239/0xb70 [ 350.709444] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 17) [ 350.711496] ? lock_release+0xa30/0xa30 [ 350.711509] ? oom_badness+0x7d1/0xb00 [ 350.711526] ? ___ratelimit+0x36f/0x655 [ 350.711539] ? lock_downgrade+0x8f0/0x8f0 [ 350.711556] ? kasan_check_read+0x11/0x20 [ 350.719279] FAT-fs (loop7): Filesystem has been set read-only [ 350.723201] ? do_raw_spin_unlock+0xa7/0x2f0 [ 350.723212] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 350.723222] ? do_raw_spin_lock+0x200/0x200 [ 350.723238] ? oom_kill_process+0x24d/0x280 [ 350.762790] ? lock_downgrade+0x8f0/0x8f0 [ 350.766940] ? trace_hardirqs_on+0xd/0x10 [ 350.771082] ? ___ratelimit+0xaa/0x655 [ 350.774960] ? idr_get_free+0x10c0/0x10c0 [ 350.779101] ? kasan_check_write+0x14/0x20 [ 350.783334] ? do_raw_spin_lock+0xc1/0x200 [ 350.787561] oom_kill_process.cold.29+0x10/0x660 [ 350.792311] ? trace_hardirqs_on+0xd/0x10 [ 350.796441] ? _raw_spin_unlock_irq+0x27/0x70 [ 350.800920] ? css_task_iter_end+0x2ce/0x490 [ 350.805311] ? oom_evaluate_task+0x540/0x540 [ 350.809702] ? trace_hardirqs_on+0xd/0x10 [ 350.813831] ? _raw_spin_unlock_irq+0x27/0x70 [ 350.818306] ? oom_badness+0xb00/0xb00 [ 350.822453] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 350.827189] ? mem_cgroup_iter_break+0x30/0x30 [ 350.831758] out_of_memory+0x86d/0x1ad0 [ 350.835719] ? oom_killer_disable+0x3a0/0x3a0 [ 350.840201] ? kasan_check_read+0x11/0x20 [ 350.844333] ? do_raw_spin_unlock+0xa7/0x2f0 [ 350.848726] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 350.853294] ? kasan_check_write+0x14/0x20 [ 350.857525] ? do_raw_spin_lock+0xc1/0x200 [ 350.861751] mem_cgroup_out_of_memory+0x15e/0x210 [ 350.866585] ? memcg_memory_event+0x40/0x40 [ 350.870890] ? page_counter_try_charge+0x1c7/0x220 [ 350.875798] try_charge+0x720/0x1680 [ 350.879506] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 350.886273] ? lock_downgrade+0x8f0/0x8f0 [ 350.890410] ? lock_release+0xa30/0xa30 [ 350.894369] ? __anon_vma_prepare+0xc4/0x720 [ 350.898762] ? handle_mm_fault+0x53e/0xc80 [ 350.902979] ? fs_reclaim_acquire+0x20/0x20 [ 350.907282] ? lock_downgrade+0x8f0/0x8f0 [ 350.911412] ? percpu_ref_put_many+0x119/0x240 [ 350.915992] ? get_mem_cgroup_from_mm+0x209/0x440 [ 350.920828] ? get_mem_cgroup_from_page+0x190/0x190 [ 350.925850] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 350.930691] ? lock_acquire+0x1e4/0x540 [ 350.934673] mem_cgroup_try_charge+0x4ff/0xa70 [ 350.939253] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 350.944261] ? mem_cgroup_protected+0xa60/0xa60 [ 350.948930] ? up_write+0x7b/0x220 [ 350.952473] ? up_read+0x110/0x110 [ 350.956016] ? __anon_vma_prepare+0x36d/0x720 [ 350.960516] ? pmd_val+0x88/0x100 [ 350.963979] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 350.969525] mem_cgroup_try_charge_delay+0x1d/0x90 [ 350.974446] __handle_mm_fault+0x25ba/0x4470 [ 350.978837] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 350.983663] ? cap_mmap_addr+0x52/0x130 [ 350.987617] ? userfaultfd_unmap_complete+0x32a/0x510 [ 350.992800] ? security_mmap_addr+0x80/0xa0 [ 350.997106] ? lock_acquire+0x1e4/0x540 [ 351.001075] ? handle_mm_fault+0x417/0xc80 [ 351.005291] ? lock_downgrade+0x8f0/0x8f0 [ 351.009434] ? lock_release+0xa30/0xa30 [ 351.013390] ? lock_release+0xa30/0xa30 [ 351.017348] ? down_read_killable+0x200/0x200 [ 351.021826] ? mem_cgroup_from_task+0xcb/0x1f0 [ 351.026386] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 351.031135] handle_mm_fault+0x53e/0xc80 [ 351.035184] ? __handle_mm_fault+0x4470/0x4470 [ 351.039749] ? find_vma+0x34/0x190 [ 351.043272] __do_page_fault+0x620/0xe50 [ 351.047316] ? mm_fault_error+0x380/0x380 [ 351.051446] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.056963] ? __x64_sys_clock_gettime+0x170/0x250 [ 351.061873] ? __ia32_sys_clock_settime+0x290/0x290 [ 351.066872] do_page_fault+0xf6/0x8c0 [ 351.070666] ? vmalloc_sync_all+0x30/0x30 [ 351.074805] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.080333] ? do_syscall_64+0x497/0x820 [ 351.084374] ? syscall_slow_exit_work+0x500/0x500 [ 351.089197] ? syscall_return_slowpath+0x5e0/0x5e0 [ 351.094106] ? syscall_return_slowpath+0x31d/0x5e0 [ 351.099018] ? prepare_exit_to_usermode+0x291/0x3b0 [ 351.104013] ? page_fault+0x8/0x30 [ 351.107532] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 351.112367] ? page_fault+0x8/0x30 [ 351.115894] page_fault+0x1e/0x30 [ 351.119326] RIP: 0033:0x40e16f [ 351.122521] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 351.141407] RSP: 002b:00007ffd8c7205b0 EFLAGS: 00010206 [ 351.146767] RAX: 00007f3313243000 RBX: 0000000000020000 RCX: 00000000004569aa [ 351.154027] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 351.161287] RBP: 00007ffd8c720690 R08: ffffffffffffffff R09: 0000000000000000 [ 351.168538] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8c720780 [ 351.175796] R13: 00007f3313263700 R14: 000000000072bf2c R15: 0000000000000001 [ 351.183744] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor3,pid=23120,uid=0 [ 351.197950] memory: usage 148kB, limit 0kB, failcnt 1241 [ 351.203426] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 351.210215] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 351.216374] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 351.235912] Tasks state (memory values in pages): [ 351.240774] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 351.249862] [ 23120] 0 23120 17618 8221 126976 0 0 syz-executor3 [ 351.258909] Memory cgroup out of memory: Kill process 23120 (syz-executor3) score 8252000 or sacrifice child [ 351.268925] Killed process 23120 (syz-executor3) total-vm:70472kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 351.279971] oom_reaper: reaped process 23120 (syz-executor3), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB 12:14:01 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000180)=ANY=[@ANYBLOB="3f000000000000003d840f3274fc115a600a275d16847f8a1570225326c636cbf775ef667f3f0f432be08e518202d0dc0302749683ee0d86f4393e0b6b9dc556442cd216bd3f00e5d0ca351f5ac4fffa6903a5eb2a26319006fcb0b439b71e6557e7c6f86d7fde73f52c5e057d86b1683c2fe542109c9806f70e200163d470c6839604ba71fb41a053afa88b7763"]) 12:14:01 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x9, 0x0, 0x8008, 0x7, 0x5, 0xdb, 0xfffffffffffffff8, 0xfb2, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={r2, @in={{0x2, 0x4e22, @multicast2}}, 0x3, 0xaae}, &(0x7f0000000140)=0x90) r3 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000300), 0x12) r4 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000000380)=""/4096) close(r0) 12:14:01 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000001c0)={0x2, r2, 0xfffffffffffffffd}) r3 = getpgid(0xffffffffffffffff) process_vm_writev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)=""/19, 0x13}, {&(0x7f0000000280)=""/206, 0xce}, {&(0x7f0000000040)=""/172, 0xac}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x4, &(0x7f00000013c0)=[{&(0x7f0000000180)=""/24, 0x18}], 0x1, 0x0) 12:14:01 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1fceb9aaf5c56ff678d7890000e600b300f6ffffff0000000000000000"], 0x28}}, 0x0) syncfs(r0) 12:14:01 executing program 7: syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xffffffff, 0x145800) r0 = socket(0x10, 0x802, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='cpuset\x00') ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000200)={{0x8, 0x5}, {0x4, 0x6}, 0x2, 0x1, 0x3}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x6763, 0xffffffffffffff4a}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r2, 0x7000000}, 0x8) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x800, 0x0) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f0000000080)) write(r0, &(0x7f0000000100)="220000002000070700be000009000701020000400000000000200000050013800500", 0x22) 12:14:01 executing program 4: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x39, &(0x7f0000000ffc), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) r2 = dup(r0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000040)=0x6000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000002cc0), 0x8) 12:14:01 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x40044590, &(0x7f0000000380)=""/4096) close(r0) 12:14:01 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x100, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000040)) r2 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) r4 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000000380)=""/4096) close(r0) 12:14:02 executing program 0: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='loposix_acl_access(md5sum(eth1\x00', 0xffffffffffffff9c}, 0x10) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x84000) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="0f0d530d0f3066baf80cb855093386ef66bafc0cb00cee0f01c8b9800000c00f3235001000000f30b823ff00000f23d00f21f835300000040f23f8366602e60f21e80f01df66b889008ed0", 0x4b}], 0x1, 0x20, &(0x7f0000000240)=[@cstype3={0x5, 0x8}, @dstype0={0x6, 0xa}], 0x2) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000080)=""/46) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000003000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@multicast1}}, {{@in6=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000000400)=0xe8) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000003000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000e80)="66b88c008ec8430f01d10f20a03e66d17293c4e1fc117bd2660fe590387e000066baf80cb8e42ede86ef66bafc0cb806e60000efc4c20bf7b7004800000f00180f20d835200000000f22d8", 0x4b}], 0x1, 0x0, &(0x7f0000000140), 0x1000000000000304) 12:14:02 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x10e, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4003, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="04010000008b00ddb8460900ffb25b4802938207d9033780", 0x18, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x5, @mcast1}, 0x1c) 12:14:02 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x9, 0x0, 0x8008, 0x7, 0x5, 0xdb, 0xfffffffffffffff8, 0xfb2, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={r2, @in={{0x2, 0x4e22, @multicast2}}, 0x3, 0xaae}, &(0x7f0000000140)=0x90) r3 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000300), 0x12) r4 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000000380)=""/4096) close(r0) 12:14:02 executing program 6: socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x40) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000200)) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x56f) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000040)=0x6e, 0x80000) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000180)={'bond_slave_0\x00', 0x6}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000000)={0x5, [0x8, 0xffff, 0x5, 0x2, 0x6]}, 0xe) 12:14:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000000)={0x0, 0xffff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000000c0)=r1, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) writev(r2, &(0x7f00000004c0)=[{&(0x7f00000003c0)="e2a2f40d2ae914f7f143a7c22b1e08d8ccf181cd4d560a9467dbccb76ffcc56c5f5690831c76da133123ad53f1457af2e11109c1f36cd1bbb9e875c4bc19f3f20d13d6d499d688443b5f1ecd4170045dc8293136b863988d", 0x58}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x10001}) 12:14:02 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)={0x7, 0x4, 0x10, 0x5}, 0x2c) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x80000000, 0x80) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000080)={0x9, 0x0, 0x401, 0x7, 0x9}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000100)}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000100)="2371dc20b037c4c57f66965d99c5a8d8e775523263de6326cf8a15828fa0049d96efa1e655b1112141648ead15847539eda623d4ca589491d590fa57ebe884449547a8721ba958990aea90b0509a9d9eb9c6639705ae15c74c5c35ce41071cba14c09536a390d27565412a80413fc75f5e17df16d719a9b92b59d336c2f969fdc538eb3e70c779e3d16a5b5ab029b2171bc5b206ba6961fb1fd0"}, 0x10) 12:14:02 executing program 7: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x109800) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'bcsh0\x00', {0x2, 0x4e23, @rand_addr=0x3}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x6, @multicast2}]}}}]}, 0x38}}, 0x0) 12:14:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) r3 = msgget$private(0x0, 0x40) msgctl$IPC_RMID(r3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r4 = socket(0x2000000001, 0x2, 0x0) readv(r1, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x10000000000001f4) chmod(&(0x7f0000000040)='./file0\x00', 0x80) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) dup3(r4, r1, 0x0) tkill(r2, 0x1000000000014) 12:14:02 executing program 5: sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f00000000c0)={0xd006, 0x1000}) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000003c0)=""/246) ioctl$EVIOCGREP(r0, 0x40107446, &(0x7f0000000000)=""/174) 12:14:02 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f00000001c0)=0xc) fcntl$getown(0xffffffffffffffff, 0x9) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffff) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10400, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000080)=""/89) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x80000001) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='cpuset.+mime_type\x00') 12:14:02 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xfffffffffffffdee) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x4) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x200) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f00000001c0)={0x0}) accept4$bt_l2cap(r1, &(0x7f00000000c0), &(0x7f0000000140)=0xe, 0x80800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001280)={0x68, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, &(0x7f0000000140), &(0x7f0000000180)=[0x18, 0x38, 0x40, 0x40, 0x38, 0x0]}, 0xdb}}, @decrefs, @enter_looper, @exit_looper, @free_buffer={0x40086303, r2}], 0x1000, 0x0, &(0x7f0000000280)="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"}) sendmmsg$alg(r0, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000040)}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000012c0)={r3, 0x1, 0x291}, 0x10) sched_yield() 12:14:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = dup3(r0, r0, 0x80000) write$FUSE_INTERRUPT(r1, &(0x7f00000002c0)={0x10, 0x0, 0x6}, 0x9) r2 = socket(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000004c0)=ANY=[@ANYBLOB="01001800d183084ee07527d7a54d648066d9042101000080e09eddc141951f88aa6169f2b71157234fd08f2a4586dd4c4833b17f25cff7608d8baf763b831978203dc6d017664994032daeecfa26933d19791b57dbaa64badbda997cc289ac30abcab36ebe487a267c53b18c1dcb5fdee14c217b517118616e6a", @ANYRES32=0x0], &(0x7f0000000200)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000540)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000300)={0x0, 0x3, 0xac}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000005c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x4, {0xa, 0x4e20, 0x401, @local, 0x2}, r6}}, 0x38) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000240)={r5, 0x8}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000380)=[@in6={0xa, 0x4e24, 0xd843, @mcast2, 0xfffffffffffffffb}, @in6={0xa, 0x4e20, 0xe0, @empty, 0x4}, @in6={0xa, 0x4e24, 0x1, @empty, 0x4}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e23, 0x80000001, @local, 0x6}, @in6={0xa, 0x4e24, 0x1, @remote, 0x1ff}, @in={0x2, 0x4e24, @rand_addr=0xffff}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e20, 0x9da0, @dev={0xfe, 0x80, [], 0xc}, 0x9}], 0xe8) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000600)=ANY=[@ANYRES32=r8, @ANYBLOB="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"], &(0x7f0000000140)=0x9c) ioctl$EVIOCSCLOCKID(r7, 0x400445a0, &(0x7f0000000080)=0x7) sendmsg$nl_route(r3, &(0x7f0000005700)={&(0x7f0000000040), 0xc, &(0x7f00000056c0)={&(0x7f00000008c0)=@bridge_getlink={0x28, 0x12, 0x23, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_EXT_MASK={0x8}]}, 0x28}}, 0x0) 12:14:02 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x5}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = fcntl$dupfd(r1, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000240)=0x98) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) r4 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r1, &(0x7f00000001c0)={r2, r1, 0x2}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000040)={0xe00000000000000, 0x9, 0x40}) close(r0) 12:14:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000010) socket$inet6(0xa, 0x80003, 0xfffffffffffffffb) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000023ff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003000040000000000000000000000000000000000c1b47607afb5c60e4b0cc22a55650fa45db14e7222f337b25a6eb0fafb9d908ea9717334e837304713a67ed5d8ee50e0804bd110ed8c73ea3647ebfaf06ed957ecb154dc371e3f4b73481719faae5ea467195499f763692041d59090e95f45"], 0x1}}, 0x0) [ 352.437055] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 352.446507] CPU: 1 PID: 23180 Comm: syz-executor3 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 352.455003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.464344] Call Trace: [ 352.466938] dump_stack+0x1c9/0x2b4 [ 352.470558] ? dump_stack_print_info.cold.2+0x52/0x52 [ 352.475740] ? trace_hardirqs_on+0x10/0x10 [ 352.479959] ? lock_downgrade+0x8f0/0x8f0 [ 352.484091] dump_header+0x246/0x123c [ 352.487872] ? percpu_ref_put_many+0x131/0x240 [ 352.492433] ? trace_hardirqs_on+0x10/0x10 [ 352.496650] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 352.501566] ? trace_hardirqs_on+0x10/0x10 [ 352.505795] ? mem_cgroup_iter+0x517/0x10c0 [ 352.510099] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.515619] ? css_next_child+0x1c3/0x620 [ 352.519757] ? trace_hardirqs_on+0x10/0x10 [ 352.523992] ? trace_hardirqs_on+0x10/0x10 [ 352.528222] ? trace_hardirqs_on+0x10/0x10 [ 352.532437] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.537955] ? css_next_child+0x1c3/0x620 [ 352.542090] ? find_lock_task_mm+0x230/0x4d0 [ 352.546479] ? cgroup_get_tree+0xb20/0xb20 [ 352.550693] ? lock_acquire+0x1e4/0x540 [ 352.554649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.560186] ? task_will_free_mem+0x239/0xb70 [ 352.564676] ? lock_release+0xa30/0xa30 [ 352.568643] ? oom_badness+0x7d1/0xb00 [ 352.572516] ? ___ratelimit+0x36f/0x655 [ 352.576478] ? lock_downgrade+0x8f0/0x8f0 [ 352.580624] ? kasan_check_read+0x11/0x20 [ 352.584772] ? do_raw_spin_unlock+0xa7/0x2f0 [ 352.589174] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 352.593738] ? do_raw_spin_lock+0x200/0x200 [ 352.598048] ? oom_kill_process+0x24d/0x280 [ 352.602350] ? lock_downgrade+0x8f0/0x8f0 [ 352.606482] ? trace_hardirqs_on+0xd/0x10 [ 352.610612] ? ___ratelimit+0xaa/0x655 [ 352.614487] ? idr_get_free+0x10c0/0x10c0 [ 352.618628] ? kasan_check_write+0x14/0x20 [ 352.622844] ? do_raw_spin_lock+0xc1/0x200 [ 352.627070] oom_kill_process.cold.29+0x10/0x660 [ 352.631809] ? trace_hardirqs_on+0xd/0x10 [ 352.635936] ? _raw_spin_unlock_irq+0x27/0x70 [ 352.640417] ? css_task_iter_end+0x2ce/0x490 [ 352.644807] ? oom_evaluate_task+0x540/0x540 [ 352.649198] ? trace_hardirqs_on+0xd/0x10 [ 352.653344] ? _raw_spin_unlock_irq+0x27/0x70 [ 352.657830] ? oom_badness+0xb00/0xb00 [ 352.661721] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 352.666472] ? mem_cgroup_iter_break+0x30/0x30 [ 352.671041] out_of_memory+0x86d/0x1ad0 [ 352.674999] ? oom_killer_disable+0x3a0/0x3a0 [ 352.679492] ? kasan_check_read+0x11/0x20 [ 352.683633] ? do_raw_spin_unlock+0xa7/0x2f0 [ 352.688020] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 352.692584] ? kasan_check_write+0x14/0x20 [ 352.696798] ? do_raw_spin_lock+0xc1/0x200 [ 352.701018] mem_cgroup_out_of_memory+0x15e/0x210 [ 352.705840] ? memcg_memory_event+0x40/0x40 [ 352.710167] ? page_counter_try_charge+0x1c7/0x220 [ 352.715086] try_charge+0x720/0x1680 [ 352.718801] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 352.725569] ? lock_downgrade+0x8f0/0x8f0 [ 352.729716] ? lock_release+0xa30/0xa30 [ 352.733679] ? __anon_vma_prepare+0xc4/0x720 [ 352.738072] ? handle_mm_fault+0x53e/0xc80 [ 352.742299] ? fs_reclaim_acquire+0x20/0x20 [ 352.746628] ? lock_downgrade+0x8f0/0x8f0 [ 352.750765] ? percpu_ref_put_many+0x119/0x240 [ 352.755332] ? get_mem_cgroup_from_mm+0x209/0x440 [ 352.760156] ? get_mem_cgroup_from_page+0x190/0x190 [ 352.765165] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 352.769989] ? lock_acquire+0x1e4/0x540 [ 352.773946] mem_cgroup_try_charge+0x4ff/0xa70 [ 352.778509] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 352.783505] ? mem_cgroup_protected+0xa60/0xa60 [ 352.788162] ? up_write+0x7b/0x220 [ 352.791693] ? up_read+0x110/0x110 [ 352.795218] ? __anon_vma_prepare+0x36d/0x720 [ 352.799702] ? pmd_val+0x88/0x100 [ 352.803140] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 352.808678] mem_cgroup_try_charge_delay+0x1d/0x90 [ 352.813597] __handle_mm_fault+0x25ba/0x4470 [ 352.817988] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 352.822820] ? cap_mmap_addr+0x52/0x130 [ 352.826784] ? userfaultfd_unmap_complete+0x32a/0x510 [ 352.831964] ? security_mmap_addr+0x80/0xa0 [ 352.836280] ? lock_acquire+0x1e4/0x540 [ 352.840234] ? handle_mm_fault+0x417/0xc80 [ 352.844449] ? lock_downgrade+0x8f0/0x8f0 [ 352.848579] ? lock_release+0xa30/0xa30 [ 352.852554] ? lock_release+0xa30/0xa30 [ 352.856519] ? down_read_killable+0x200/0x200 [ 352.860998] ? mem_cgroup_from_task+0xcb/0x1f0 [ 352.865582] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 352.870328] handle_mm_fault+0x53e/0xc80 [ 352.874385] ? __handle_mm_fault+0x4470/0x4470 [ 352.878971] ? find_vma+0x34/0x190 [ 352.882495] __do_page_fault+0x620/0xe50 [ 352.886549] ? mm_fault_error+0x380/0x380 [ 352.890683] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.896202] ? __x64_sys_clock_gettime+0x170/0x250 [ 352.901110] ? __ia32_sys_clock_settime+0x290/0x290 [ 352.906124] do_page_fault+0xf6/0x8c0 [ 352.909910] ? vmalloc_sync_all+0x30/0x30 [ 352.914043] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.919581] ? do_syscall_64+0x497/0x820 [ 352.923635] ? syscall_return_slowpath+0x5e0/0x5e0 [ 352.928551] ? syscall_return_slowpath+0x31d/0x5e0 [ 352.933467] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 352.938465] ? prepare_exit_to_usermode+0x291/0x3b0 [ 352.943468] ? page_fault+0x8/0x30 [ 352.946992] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 352.951815] ? page_fault+0x8/0x30 [ 352.955333] page_fault+0x1e/0x30 [ 352.958767] RIP: 0033:0x40e16f [ 352.961941] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 352.980832] RSP: 002b:00007ffd8c7205b0 EFLAGS: 00010206 [ 352.986177] RAX: 00007f3313243000 RBX: 0000000000020000 RCX: 00000000004569aa [ 352.993429] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 353.000676] RBP: 00007ffd8c720690 R08: ffffffffffffffff R09: 0000000000000000 [ 353.007929] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8c720780 [ 353.015189] R13: 00007f3313263700 R14: 000000000072bf2c R15: 0000000000000001 [ 353.022580] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor3,pid=23180,uid=0 [ 353.036815] memory: usage 136kB, limit 0kB, failcnt 1250 [ 353.042290] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 353.049075] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 353.055264] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 353.074809] Tasks state (memory values in pages): [ 353.079670] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name 12:14:03 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x40044590, &(0x7f0000000380)=""/4096) close(r0) 12:14:03 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x807fc) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f0000000000)='./file0\x00', 0x8) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0xfffffffffffffff7) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000380)=""/4096) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f00000002c0)="310000001200e7ef107b0000e623000680a11d0de64f8652b2aa129c805bef90c0c9bf1d02d7be2f3233c951a642f3bfcb", 0x31, 0x0, 0x0, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000040)) close(r0) 12:14:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000140)=0xffffffffffff7fff) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0xfffffffffffffffd) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) socket$inet6(0xa, 0xf, 0xe7f) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000080)={0x8, 0x2, {0x3, 0x2, 0x10001, 0x0, 0xfff}}) setsockopt$inet_mreqsrc(r4, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x4, &(0x7f0000000040)={0x0, 'veth1_to_bond\x00'}, 0x18) close(r4) dup3(r2, r3, 0x0) 12:14:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r2, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_AF={0x8}, @FOU_ATTR_IPPROTO={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x20000010) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f00000015c0)={r5}) r6 = eventfd(0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r5, 0x80}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000040)={r6, 0x0, 0x1}) 12:14:03 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/6) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x440800, 0x20) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000200)=""/203) 12:14:03 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) r2 = socket$inet(0x2, 0x3, 0x2000000000001) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x278, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, &(0x7f0000000000), &(0x7f0000000740)=ANY=[@ANYBLOB="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"]}, 0x2f3) 12:14:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000063ec64c5375faa54839969bea1c6e6ed8cf808b658108a5642e717e07d3fefb02ccdc4bf241e2dbde6868d6a4aaf84190f6b90", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00'], 0x14}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000018ff4), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x1c, 0x28, 0x1, 0x0, 0x0, {0x1}, [@nested={0x8, 0x0, [@generic="0180"]}]}, 0x1c}}, 0x0) [ 353.088586] [ 23180] 0 23180 17618 8221 126976 0 0 syz-executor3 [ 353.097624] Memory cgroup out of memory: Kill process 23180 (syz-executor3) score 8252000 or sacrifice child [ 353.107658] Killed process 23180 (syz-executor3) total-vm:70472kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 353.118676] oom_reaper: reaped process 23180 (syz-executor3), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB 12:14:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/raw6\x00') setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000280)={0xfff, 0x3ff, 0x7}, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x800, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000080)) r3 = semget$private(0x0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000180)) semctl$IPC_INFO(r3, 0x7, 0x3, &(0x7f00000000c0)=""/148) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) [ 353.179881] kernel msg: ebtables bug: please report to author: Wrong len argument [ 353.196441] kernel msg: ebtables bug: please report to author: Wrong len argument 12:14:03 executing program 1: mkdir(&(0x7f0000554ff8)='./file0\x00', 0x0) r0 = open(&(0x7f00006c69d0)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) r1 = open(&(0x7f0000000000)='./file0\x00', 0x1810ff, 0x100) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x1) unshare(0x40600) fcntl$notify(r1, 0x402, 0x0) 12:14:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="92db04"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0xe5, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 353.236123] syz-executor3 invoked oom-killer: gfp_mask=0x6040d0(GFP_KERNEL|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 353.248086] CPU: 1 PID: 23269 Comm: syz-executor3 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 353.256579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.265937] Call Trace: [ 353.268544] dump_stack+0x1c9/0x2b4 [ 353.272187] ? dump_stack_print_info.cold.2+0x52/0x52 [ 353.277390] ? trace_hardirqs_on+0x10/0x10 [ 353.281631] dump_header+0x246/0x123c 12:14:03 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x8000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x80000000, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x311200, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x6) clock_getres(0xfffffefffffffff2, &(0x7f0000000080)) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x6d, 0x200) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) [ 353.285441] ? lock_downgrade+0x8f0/0x8f0 [ 353.289602] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 353.294539] ? trace_hardirqs_on+0x10/0x10 [ 353.298786] ? mem_cgroup_iter+0x517/0x10c0 [ 353.303126] ? trace_hardirqs_on+0x10/0x10 [ 353.307376] ? trace_hardirqs_on+0x10/0x10 [ 353.311625] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 353.317182] ? css_next_child+0x1c3/0x620 [ 353.321371] ? find_lock_task_mm+0x230/0x4d0 [ 353.325796] ? cgroup_get_tree+0xb20/0xb20 [ 353.331109] ? lock_acquire+0x1e4/0x540 12:14:03 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) open(&(0x7f00000000c0)='./file0/file0/file0\x00', 0x0, 0x0) lstat(&(0x7f00000020c0)='./file0/file0/file0\x00', &(0x7f0000002040)) read$FUSE(r0, &(0x7f00000030c0), 0x1000) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) umount2(&(0x7f0000000040)='./file0\x00', 0xa) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f000000000000000000000000000000000000000000000000"], 0x90) 12:14:03 executing program 6: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x3}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") getsockname$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10) getsockopt$inet6_tcp_int(r0, 0x6, 0x3f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 353.335097] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 353.340650] ? task_will_free_mem+0x239/0xb70 [ 353.345159] ? lock_release+0xa30/0xa30 [ 353.349143] ? oom_badness+0x7d1/0xb00 [ 353.353045] ? lock_downgrade+0x8f0/0x8f0 [ 353.357216] ? ___ratelimit+0x36f/0x655 [ 353.361208] ? lock_downgrade+0x8f0/0x8f0 [ 353.365392] ? kasan_check_read+0x11/0x20 [ 353.369549] ? do_raw_spin_unlock+0xa7/0x2f0 [ 353.373968] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 353.378556] ? do_raw_spin_lock+0x200/0x200 [ 353.382988] ? oom_kill_process+0x24d/0x280 [ 353.387321] ? lock_downgrade+0x8f0/0x8f0 [ 353.391487] ? trace_hardirqs_on+0xd/0x10 [ 353.395724] ? ___ratelimit+0xaa/0x655 [ 353.399603] ? idr_get_free+0x10c0/0x10c0 [ 353.403742] ? kasan_check_write+0x14/0x20 [ 353.407962] ? do_raw_spin_lock+0xc1/0x200 [ 353.412188] oom_kill_process.cold.29+0x10/0x660 [ 353.416935] ? trace_hardirqs_on+0xd/0x10 [ 353.421065] ? _raw_spin_unlock_irq+0x27/0x70 [ 353.425545] ? css_task_iter_end+0x2ce/0x490 [ 353.429942] ? oom_evaluate_task+0x540/0x540 [ 353.434337] ? trace_hardirqs_on+0xd/0x10 [ 353.438475] ? _raw_spin_unlock_irq+0x27/0x70 [ 353.442955] ? oom_badness+0xb00/0xb00 [ 353.446827] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 353.451569] ? mem_cgroup_iter_break+0x30/0x30 [ 353.456151] out_of_memory+0x86d/0x1ad0 [ 353.460114] ? oom_killer_disable+0x3a0/0x3a0 [ 353.464597] ? kasan_check_read+0x11/0x20 [ 353.468725] ? do_raw_spin_unlock+0xa7/0x2f0 [ 353.473116] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 353.477681] ? kasan_check_write+0x14/0x20 [ 353.481897] ? do_raw_spin_lock+0xc1/0x200 [ 353.486128] mem_cgroup_out_of_memory+0x15e/0x210 [ 353.490963] ? memcg_memory_event+0x40/0x40 [ 353.495284] ? page_counter_try_charge+0x1c7/0x220 [ 353.500295] try_charge+0x720/0x1680 [ 353.504008] ? lock_acquire+0x1e4/0x540 [ 353.507964] ? fs_reclaim_acquire+0x20/0x20 [ 353.512283] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 353.519019] ? rcu_note_context_switch+0x730/0x730 [ 353.523938] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 353.528768] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 353.533776] memcg_kmem_charge_memcg+0x7c/0x120 [ 353.538427] ? memcg_kmem_put_cache+0xb0/0xb0 [ 353.542915] ? __free_pages+0x10a/0x190 [ 353.546874] cache_grow_begin+0x207/0x710 [ 353.551004] ? do_raw_spin_unlock+0xa7/0x2f0 [ 353.555396] fallback_alloc+0x203/0x2c0 [ 353.559353] ____cache_alloc_node+0x1c7/0x1e0 [ 353.563835] kmem_cache_alloc+0x1e5/0x760 [ 353.567966] ? wait_for_completion+0x8d0/0x8d0 [ 353.572530] ? save_stack+0xa9/0xd0 [ 353.576153] sock_alloc_inode+0x78/0x320 [ 353.580194] ? sock_destroy_inode+0x70/0x70 [ 353.584502] ? sock_destroy_inode+0x70/0x70 [ 353.588809] alloc_inode+0x63/0x190 [ 353.592415] new_inode_pseudo+0x71/0x1a0 [ 353.596458] ? prune_icache_sb+0x1c0/0x1c0 [ 353.600674] ? evdev_ioctl_handler+0x159/0x1a0 [ 353.605241] sock_alloc+0x41/0x270 [ 353.608763] __sock_create+0x175/0x940 [ 353.612632] ? __fget_light+0x2f7/0x440 [ 353.616586] ? kernel_sock_ip_overhead+0x570/0x570 [ 353.621498] ? fget_raw+0x20/0x20 [ 353.624948] ? trace_hardirqs_on+0xd/0x10 [ 353.629081] __sys_socket+0x106/0x260 [ 353.632876] ? move_addr_to_kernel+0x70/0x70 [ 353.637270] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 353.642811] ? fput+0x130/0x1a0 [ 353.646074] ? ksys_ioctl+0x81/0xd0 [ 353.649684] __x64_sys_socket+0x73/0xb0 [ 353.653643] do_syscall_64+0x1b9/0x820 [ 353.657603] ? finish_task_switch+0x1d3/0x870 [ 353.662086] ? syscall_return_slowpath+0x5e0/0x5e0 [ 353.667008] ? syscall_return_slowpath+0x31d/0x5e0 [ 353.671926] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 353.676935] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 353.681763] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 353.686946] RIP: 0033:0x456959 [ 353.690124] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 353.709021] RSP: 002b:00007f3313283c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 353.716717] RAX: ffffffffffffffda RBX: 00007f33132846d4 RCX: 0000000000456959 [ 353.723969] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 353.731227] RBP: 000000000072be80 R08: 0000000000000000 R09: 0000000000000000 [ 353.738484] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 353.745733] R13: 00000000004d4ba8 R14: 00000000004c87c2 R15: 0000000000000000 [ 353.753304] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor3,pid=23266,uid=0 [ 353.767608] memory: usage 136kB, limit 0kB, failcnt 1263 [ 353.773102] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 353.779888] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 353.786047] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 353.805620] Tasks state (memory values in pages): [ 353.810491] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 353.819410] [ 23266] 0 23266 17585 8221 126976 0 0 syz-executor3 [ 353.828477] Memory cgroup out of memory: Kill process 23266 (syz-executor3) score 8252000 or sacrifice child 12:14:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1400000000000000290000004300000004000000"], 0x14}}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 12:14:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x10000, 0x0) r2 = accept$alg(r1, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") clock_gettime(0x0, &(0x7f0000002680)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000002500)=[{{&(0x7f0000000c40)=@can, 0x80, &(0x7f0000000cc0)}}, {{&(0x7f0000001240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000024c0)}}], 0x2, 0x0, &(0x7f00000026c0)={0x0, r3+10000000}) 12:14:04 executing program 6: r0 = socket$inet6(0xa, 0xfffffffffffe, 0x8525) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") unshare(0x2000400) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x101}, &(0x7f0000000040)=0x8) r2 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x9, 0x509001) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r1, 0xfffffffffffffff8}, 0x8) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000200), 0x4) [ 353.838614] Killed process 23266 (syz-executor3) total-vm:70340kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 353.849929] oom_reaper: reaped process 23266 (syz-executor3), now anon-rss:0kB, file-rss:32788kB, shmem-rss:0kB [ 353.863194] RDS: rds_bind could not find a transport for ::ffff:0.0.0.3, load rds_tcp or rds_rdma? [ 353.878109] RDS: rds_bind could not find a transport for ::ffff:0.0.0.3, load rds_tcp or rds_rdma? 12:14:04 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x40044590, &(0x7f0000000380)=""/4096) close(r0) 12:14:04 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x2000008, &(0x7f0000000340)) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x1, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000400), &(0x7f0000000240)=[&(0x7f0000000140)='ramfs\x00', &(0x7f0000000180)='ramfs\x00', &(0x7f00000001c0)='ramfs\x00']) 12:14:04 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x2) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020907031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 12:14:04 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x2, 0x6, 0x2, 0x1, 0x1}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r1, 0x1ff, 0x2}, &(0x7f0000000200)=0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) getuid() ioctl$KVM_SET_CPUID(r4, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="beadaaaa0055148611ba00e16c553961000000030000800600008005000000230100000000000000000000010000c00500000001000000d26614f8e0c357e11487fa49d72eb6ca5a5bcaf88243e6b20755880b92b5291c6a2b2bfb784909f3290d74d20e59e02712ca1c90d72ed7c13caace7e5c297935476f218bbf872c952f25e41095d3a3bff330053f9a32a4391bf9fd537ac8"]) 12:14:04 executing program 6: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}}}, 0xa0) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000080)=@req={0x28, &(0x7f0000000000)={'veth1\x00', @ifru_mtu=0x77}}) readv(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/146, 0x92}], 0x1) write$P9_RLCREATE(r0, &(0x7f0000000200)={0x18, 0xf, 0x2, {{0x6f, 0x2, 0x1}, 0x4}}, 0x18) write$tun(r1, &(0x7f0000000240)={@val, @val={0x2, 0x85, 0x2f1, 0x0, 0x0, 0x8}, @ipv4={{0xc, 0x4, 0x2, 0x1, 0x43, 0x66, 0x101, 0x3, 0x6, 0x0, @multicast2, @loopback, {[@lsrr={0x83, 0x13, 0x1, [@dev={0xac, 0x14, 0x14, 0xa}, @local, @loopback, @broadcast]}, @ra={0x94, 0x6, 0x8}, @noop]}}, @dccp={{0x4e24, 0x4e24, 0x4, 0x1, 0x3, 0x0, 0x0, 0x7, 0x5, "8ad4f5", 0x4, '?qk'}, "eb16dc"}}}, 0x51) write$P9_RATTACH(r1, &(0x7f0000000940)={0x14}, 0x14) dup2(r0, r2) pipe2(&(0x7f00000001c0), 0x80000) 12:14:04 executing program 1: syz_emit_ethernet(0x8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="76354ff9bf13c80e864187628487b456de922fd4bf9453d348165f8503c91647d92e85d33b4db77d17e416df89ffb9c632c61cef31ce2a826bbeeed60f6772af80bb229698920af20944e6463abc5637662c889967082e3ebb14befef43c2ee976", @ANYPTR, @ANYRES64, @ANYRES16, @ANYRESDEC, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYPTR64, @ANYRESOCT, @ANYRES32, @ANYPTR, @ANYPTR, @ANYPTR]], @ANYRES16=0x0, @ANYPTR, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRESOCT], @ANYBLOB="5be7a242af64ab086108ecf54b3bf5be03f466f30b5227280d6d3eec7f4b0710b59c9963305390d973ddebb7e72118636135ffdfdf556535e60d4d4d8253a3c91b60a708c778cc21e68643f070f937416fe381e61fef6fbfbf4096adbb485a0bcb98389048aee9580927c3122fcdfa881ecaabe24546c5c2a0ede0a8e32c85d1e744b146876b9a1c0108ac6b48b4a634659b9a7aa3d7cbaceb7d5a51c9c4c4fb367675cb67025b92c4ecafd41d9c410803788c07a20ebbb270078b2463fdb7b03070c0450000000000000000000000000000", @ANYRES32=0x0], 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x8000) mq_getsetattr(r0, &(0x7f0000000040)={0x5, 0x1000, 0x7, 0x7, 0x6, 0x316, 0x5, 0x7fffffff}, &(0x7f0000000080)) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000440)=""/199) 12:14:04 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000380)=""/4096) close(r0) fchdir(r2) 12:14:04 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) poll(&(0x7f0000000040)=[{r0, 0x2}, {r0, 0x8}], 0x2, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) 12:14:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x64000400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x420000) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f00000000c0)={{0x3c, @rand_addr=0x80000001, 0x4e22, 0x1, 'sed\x00', 0x3, 0x5, 0x7}, {@multicast1, 0x4e23, 0x0, 0x9, 0x8cdc, 0x5}}, 0x44) r4 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000080)={0x0, r4}) 12:14:04 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i`=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f00000040c0), 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r1, &(0x7f00000030c0), 0x1000) read$FUSE(r1, &(0x7f0000001000), 0x1000) ioctl$FICLONE(r0, 0x40049409, r0) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280)) write$FUSE_ENTRY(r1, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) 12:14:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x2) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x7ce, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) [ 354.255299] IPVS: ftp: loaded support on port[0] = 21 [ 354.309391] IPVS: ftp: loaded support on port[0] = 21 12:14:05 executing program 0: mount(&(0x7f0000000380)='./file0//ile0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000440)="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", 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) 12:14:05 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x4) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r2 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) write(r0, &(0x7f00000001c0)="cf", 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xffea) 12:14:05 executing program 7: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7fff, 0x400) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000080)={{0x30000, 0x9}, 0x10}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000030c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000003c00)={&(0x7f0000000040), 0xc, &(0x7f0000003bc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="606900000600000000100000000000006036", @ANYRES16=r2, @ANYBLOB="075e00000000000000000100000008000100", @ANYRES32=r3, @ANYBLOB="4400020004000100240001006c6261747300000000000000000000000000000000000000080003000b000000080004000000000008000600005141bcc5b9326249291d7e3c6a0e1e2772b5b05c953e5ef3cb99a787693754bde39bb21edca29e6fc5b6019e3ee015f0a8662198abacd9dc1638182c8a5b1b6e504ef8677839024f5e224751cccf06014d38b316ca692530b3adb9509d00514c625d3ecb3141cf04310751d6f1ad739498ea3b82193d75323f791f276256f2ca1b540e82b4f1430f0138a88dcfa0a62ff64cef965c076cc027483c298015b0e391901a4015c475b7e3625f1acf8e2aaa99681c55e2810000000000000000", @ANYRES32=0x0], 0x60}}, 0x0) 12:14:05 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0xfffffffffffeffff}, 0x1c) 12:14:05 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x800, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x16, 0x2c, 0xf, 0x1e, 0x1, 0x8, 0x1, 0xc}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x200) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$RTC_WIE_OFF(r0, 0x7010) syz_open_pts(r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7f}) [ 354.933858] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 354.943506] CPU: 0 PID: 23321 Comm: syz-executor3 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 354.952007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.961364] Call Trace: [ 354.963962] dump_stack+0x1c9/0x2b4 [ 354.967592] ? dump_stack_print_info.cold.2+0x52/0x52 [ 354.972786] ? trace_hardirqs_on+0x10/0x10 [ 354.977019] ? lock_downgrade+0x8f0/0x8f0 [ 354.981164] dump_header+0x246/0x123c [ 354.984956] ? percpu_ref_put_many+0x131/0x240 [ 354.989538] ? trace_hardirqs_on+0x10/0x10 [ 354.993773] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 354.998700] ? trace_hardirqs_on+0x10/0x10 [ 355.002929] ? mem_cgroup_iter+0x517/0x10c0 [ 355.007245] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.012784] ? css_next_child+0x1c3/0x620 [ 355.016956] ? trace_hardirqs_on+0x10/0x10 [ 355.021188] ? trace_hardirqs_on+0x10/0x10 [ 355.025423] ? trace_hardirqs_on+0x10/0x10 [ 355.029658] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.035191] ? css_next_child+0x1c3/0x620 [ 355.039332] ? find_lock_task_mm+0x230/0x4d0 [ 355.043741] ? cgroup_get_tree+0xb20/0xb20 [ 355.047976] ? lock_acquire+0x1e4/0x540 [ 355.051950] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.057478] ? task_will_free_mem+0x239/0xb70 [ 355.061968] ? lock_release+0xa30/0xa30 [ 355.065934] ? oom_badness+0x7d1/0xb00 [ 355.069818] ? ___ratelimit+0x36f/0x655 [ 355.073788] ? lock_downgrade+0x8f0/0x8f0 [ 355.077931] ? kasan_check_read+0x11/0x20 [ 355.082073] ? do_raw_spin_unlock+0xa7/0x2f0 [ 355.086492] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 355.091065] ? do_raw_spin_lock+0x200/0x200 [ 355.095384] ? oom_kill_process+0x24d/0x280 [ 355.099704] ? lock_downgrade+0x8f0/0x8f0 [ 355.103849] ? trace_hardirqs_on+0xd/0x10 [ 355.108093] ? ___ratelimit+0xaa/0x655 [ 355.111978] ? idr_get_free+0x10c0/0x10c0 [ 355.116118] ? kasan_check_write+0x14/0x20 [ 355.120356] ? do_raw_spin_lock+0xc1/0x200 [ 355.124588] oom_kill_process.cold.29+0x10/0x660 [ 355.129376] ? trace_hardirqs_on+0xd/0x10 [ 355.133518] ? _raw_spin_unlock_irq+0x27/0x70 [ 355.138021] ? css_task_iter_end+0x2ce/0x490 [ 355.142427] ? oom_evaluate_task+0x540/0x540 [ 355.146832] ? trace_hardirqs_on+0xd/0x10 [ 355.150972] ? _raw_spin_unlock_irq+0x27/0x70 [ 355.155461] ? oom_badness+0xb00/0xb00 [ 355.159354] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 355.164118] ? mem_cgroup_iter_break+0x30/0x30 [ 355.168704] out_of_memory+0x86d/0x1ad0 [ 355.172676] ? oom_killer_disable+0x3a0/0x3a0 [ 355.177337] ? kasan_check_read+0x11/0x20 [ 355.181487] ? do_raw_spin_unlock+0xa7/0x2f0 [ 355.185889] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 355.190465] ? kasan_check_write+0x14/0x20 [ 355.194705] ? do_raw_spin_lock+0xc1/0x200 [ 355.198938] mem_cgroup_out_of_memory+0x15e/0x210 [ 355.203858] ? memcg_memory_event+0x40/0x40 [ 355.208182] ? page_counter_try_charge+0x1c7/0x220 [ 355.213105] try_charge+0x720/0x1680 [ 355.216819] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 355.223581] ? lock_downgrade+0x8f0/0x8f0 [ 355.227734] ? lock_release+0xa30/0xa30 [ 355.231705] ? __anon_vma_prepare+0xc4/0x720 [ 355.236108] ? handle_mm_fault+0x53e/0xc80 [ 355.240353] ? fs_reclaim_acquire+0x20/0x20 [ 355.244667] ? lock_downgrade+0x8f0/0x8f0 [ 355.248808] ? percpu_ref_put_many+0x119/0x240 [ 355.253474] ? get_mem_cgroup_from_mm+0x209/0x440 [ 355.258326] ? get_mem_cgroup_from_page+0x190/0x190 [ 355.263342] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 355.268177] ? lock_acquire+0x1e4/0x540 [ 355.272148] mem_cgroup_try_charge+0x4ff/0xa70 [ 355.276723] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 355.281737] ? mem_cgroup_protected+0xa60/0xa60 [ 355.286400] ? up_write+0x7b/0x220 [ 355.289932] ? up_read+0x110/0x110 [ 355.293474] ? __anon_vma_prepare+0x36d/0x720 [ 355.297975] ? pmd_val+0x88/0x100 [ 355.301438] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 355.306973] mem_cgroup_try_charge_delay+0x1d/0x90 [ 355.311898] __handle_mm_fault+0x25ba/0x4470 [ 355.316306] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 355.321143] ? cap_mmap_addr+0x52/0x130 [ 355.325126] ? userfaultfd_unmap_complete+0x32a/0x510 [ 355.330338] ? security_mmap_addr+0x80/0xa0 [ 355.334663] ? lock_acquire+0x1e4/0x540 [ 355.338632] ? handle_mm_fault+0x417/0xc80 [ 355.342864] ? lock_downgrade+0x8f0/0x8f0 [ 355.347020] ? lock_release+0xa30/0xa30 [ 355.351075] ? lock_release+0xa30/0xa30 [ 355.355046] ? down_read_killable+0x200/0x200 [ 355.359534] ? mem_cgroup_from_task+0xcb/0x1f0 [ 355.364109] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 355.368867] handle_mm_fault+0x53e/0xc80 [ 355.372924] ? __handle_mm_fault+0x4470/0x4470 [ 355.377497] ? find_vma+0x34/0x190 [ 355.381031] __do_page_fault+0x620/0xe50 [ 355.385107] ? mm_fault_error+0x380/0x380 [ 355.389253] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.394784] ? __x64_sys_clock_gettime+0x170/0x250 [ 355.399706] ? __ia32_sys_clock_settime+0x290/0x290 [ 355.404717] do_page_fault+0xf6/0x8c0 [ 355.408518] ? vmalloc_sync_all+0x30/0x30 [ 355.412659] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.418192] ? do_syscall_64+0x497/0x820 [ 355.422246] ? syscall_slow_exit_work+0x500/0x500 [ 355.427099] ? syscall_return_slowpath+0x5e0/0x5e0 [ 355.432028] ? syscall_return_slowpath+0x31d/0x5e0 [ 355.437739] ? prepare_exit_to_usermode+0x291/0x3b0 [ 355.442762] ? page_fault+0x8/0x30 [ 355.446297] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 355.451133] ? page_fault+0x8/0x30 [ 355.454678] page_fault+0x1e/0x30 [ 355.458124] RIP: 0033:0x40e16f [ 355.461324] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 355.480767] RSP: 002b:00007ffd8c7205b0 EFLAGS: 00010206 [ 355.486137] RAX: 00007f3313243000 RBX: 0000000000020000 RCX: 00000000004569aa [ 355.494718] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 355.501994] RBP: 00007ffd8c720690 R08: ffffffffffffffff R09: 0000000000000000 [ 355.509267] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8c720780 [ 355.516530] R13: 00007f3313263700 R14: 000000000072bf2c R15: 0000000000000001 [ 355.523998] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor3,pid=23321,uid=0 [ 355.538296] memory: usage 140kB, limit 0kB, failcnt 1272 [ 355.543868] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 355.550688] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 355.556852] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 355.576408] Tasks state (memory values in pages): 12:14:06 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x40044590, &(0x7f0000000380)=""/4096) close(r0) 12:14:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000080)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) futex(&(0x7f0000000240)=0x2, 0x4, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x1, 0x1) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="010024f60000000000"]) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001ba450d993e54affdf3f0a6c7aa81cbc2f2de963a89edc353e34b2a2123fde82a03e9e29dcd6873b71224779f379372e8db1b7f917980a2eb2c17a619"]) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x480]}) 12:14:06 executing program 7: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) clock_gettime(0x6, &(0x7f0000000000)={0x0}) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x10000, 0x10000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@dev, 0x0}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2028000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=@deltfilter={0x218, 0x2d, 0x210, 0x70bd2c, 0x25dfdbfc, {0x0, r3, {0xfff9, 0x6}, {0x0, 0xffff}, {0xffe0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x7fff}, @TCA_RATE={0x8, 0x5, {0x3, 0xffffffffffffff5e}}, @filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x20, 0x2, [@TCA_BPF_OPS={0x14, 0x5, [{0x2, 0x5, 0xfffffffffffffffa, 0x20}, {0xffff, 0xef0, 0x7fffffff, 0x521c}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}]}}, @filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x1b4, 0x2, [@TCA_BPF_ACT={0xfc, 0x1, @m_skbmod={0xf8, 0x13, {{0xc, 0x1, 'skbmod\x00'}, {0x6c, 0x2, [@TCA_SKBMOD_SMAC={0xc, 0x4, @random="9cfb2d1e3948"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x46, 0x3, 0xffffffffffffffff, 0x200, 0x7025}, 0x4}}, @TCA_SKBMOD_ETYPE={0x8, 0x5, 0x3ff}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x80, 0x1000000f, 0x100, 0x7}, 0x7}}, @TCA_SKBMOD_DMAC={0xc}]}, {0x78, 0x6, "15ad06ea36b710f54b46b1f359f3edcc8626f0cd40a9a4a13d51b5b1b1e26c8694df50310cbf95c408b68653c36e0a106bd69cfd08735fda414ee10d363212c4b7c9014ff5adcd6a14f1715ce75a9fe3a95aa25c2e04ac8e72454dec41943fa60998e0fccdcf9625b65d169e996fc54eb3"}}}}, @TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_ACT={0x84, 0x1, @m_tunnel_key={0x80, 0x15, {{0x10, 0x1, 'tunnel_key\x00'}, {0x28, 0x2, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffff, 0x2, 0x4, 0x0, 0x1}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}]}, {0x40, 0x6, "555e8d66e3779ae5250bf0d176679043ed2639341fd0bac543440659fb44769e4d698db9786fed0d254f3acbb5965d2719122d8045ea5c363ef4"}}}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0xfffb}}, @TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}]}}]}, 0x218}, 0x1, 0x0, 0x0, 0x5ac2579b8f9b31b5}, 0x40040) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x7fffffff) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, &(0x7f0000000380)={r1}, &(0x7f00000003c0), 0x8) shutdown(r0, 0x2) 12:14:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x1000}) syz_open_pts(r1, 0x80000) pwritev(r1, &(0x7f0000001680)=[{&(0x7f0000001580)="c0", 0x1}], 0x1, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) [ 355.581284] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 355.590205] [ 23321] 0 23321 17618 8221 126976 0 0 syz-executor3 [ 355.599498] Memory cgroup out of memory: Kill process 23321 (syz-executor3) score 8252000 or sacrifice child [ 355.609584] Killed process 23321 (syz-executor3) total-vm:70472kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 355.620913] oom_reaper: reaped process 23321 (syz-executor3), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB 12:14:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) r2 = semget$private(0x0, 0x3, 0x10) semctl$SETVAL(r2, 0x2, 0x10, &(0x7f0000000000)=0x7f) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @rand_addr}, 0xc) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000011000/0x1000)=nil, 0x1000}, &(0x7f0000000100)=0x10) close(r4) dup3(r1, r3, 0x0) 12:14:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f000087d000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x400000, 0x0) r2 = dup2(r0, r0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000100)={0x2, r2}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101000, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x103000) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000080)={0x3, r4}) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f000087cf79)={@in, 0x0, 0x0, 0x0, "d858834181332e435893f760968f541b42c41db0f53229e10458031e411acc910b07deaa85a7158cb72317b9229c05a260f51652df313a01eba60958f71aa48ae177e2e4fe748f1a5499840c5abde9e6"}, 0x160) 12:14:06 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x10100, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000280)) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000001600)={0x799, 0x2}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f00000002c0)=""/130) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0f630c400200000001000000000000000c63000008631040", @ANYRES64=r3, @ANYBLOB="000000000000000003630840", @ANYRES64=r4, @ANYBLOB="0e630c400000003b6659ad1317f9fb808d756411bb020000000016000082a6a9a9294e4a8f00f1298c3501bbadba66796aac26df895d016a0b90673d7044f72ebd8b11d8dba6d284bbf2a5c4eb142426c3f3a8d5bf3d5eee6f0ebdefd6571f983fd9c8b38464c205f4e353a41bebc45d6ad8533c7090c67c21acb58c00004a6630deaee04d0dc615be826d4dbdf34a7277a14e5f610873553f1b256804709a1f2bc3a2fa2ca502610fee10bb03cf0de40e1f544ac266cac298506c2964e9da17a9abf2fd309e604bf0a7a32d0857248b1a7f6a32b35f999eb285c192231bfb71e2e81233ecc912b97e880f78d1796edfd4d0d16085af91146a6fb9abe6d836683e6b86d187d16d30b5b370ec1555b0ece51f863860f0ae944b418d08c2"], 0xe3, 0x0, &(0x7f0000001380)="121bd1434c73f58b1655c88978dc21b0d8b565f4dd5256af492fe2b02b2774633435078114044277684d5c84674f377fd1ed805e2cefaa918854ac8397d910bee37cdb277933870756188796005c4ef9d16448d2faf38a3da577fabeeff42d41a64db7312727b6c312c15a999da173d18c96e7a3fc051bd5fba673ff1274774ed2cc5ef59685204649ced12617f78004f3248ecb784836f31aeff3bccd455cc5a4df06b1466a042c61b1439bcc656753b9dd9555160b2c99b2ba1dbaa2bc6073ef169aa7f46ffcf5d43aaa2d1f1ed41a33de49a901dd9657f658817d1644d9f39626d6"}) r5 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) r6 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r6, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r6, 0x80084503, &(0x7f0000000380)=""/4096) close(r1) 12:14:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e1e, @rand_addr=0x8}, 0xfffffffffffffce0) sendto$inet(r1, &(0x7f0000000300)="6d1f13b3f580a6b90a291a8a43cbc7ce193737577858b5544ab123b6829e42df4061181a2bcdbbca509bd121a96b03f290531e430e8c64f5575cfeed84afc9b545ec243f2a295716288ed7d3774765baf4f799654bcbf6fcaed6482c4a0ee61c735a4921102347a9f14bcf18f4b8f0e6ff6c31b775db974ad64aa6088e1bffc4a9346345b94c9b48b02dfeb49f58b3c38b3d571d75002d0d105351c33a8ec9b3eb62a6ffb8ef6f047ee3df4fd8", 0xad, 0x91, &(0x7f00000003c0)={0x2, 0x4e24, @remote}, 0x10) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000f59000)=0x4e8eceef, 0x4) sendto$inet(r1, &(0x7f00000000c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) ptrace$getregset(0x4204, r2, 0x206, &(0x7f00000002c0)={&(0x7f0000000200)=""/167, 0xa7}) sendto$inet(r1, &(0x7f0000000440)="ac", 0x1, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000400)=0xe8) setfsuid(r3) recvfrom(r1, &(0x7f0000000080)=""/206, 0xce, 0x0, &(0x7f0000000180)=@ax25={0x3, {"9d3f3355ac1b08"}}, 0x70a000) 12:14:06 executing program 4: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5162b57e) r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x1) accept$unix(r2, &(0x7f00000004c0), &(0x7f0000000540)=0x6e) connect$rds(r2, &(0x7f0000000300)={0x2, 0x4e20, @broadcast}, 0x10) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffffd, 0x6, 0x3}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000400)={r4, @in={{0x2, 0x4e22, @loopback}}}, 0x84) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0) 12:14:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000080)=""/9) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000140)=0x401) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)}}, 0x20) ftruncate(r2, 0x80003) sendfile(r2, r2, &(0x7f0000000040), 0x8080fffffffe) 12:14:06 executing program 0: r0 = socket$inet6(0xa, 0xa, 0x0) ioctl(r0, 0x8912, &(0x7f0000000500)="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") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x1fffe, 0xffffffffffffffe7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 12:14:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") mkdir(&(0x7f0000c92000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) lseek(r1, 0x2f, 0x0) r2 = open$dir(&(0x7f0000000180)='./file0/bus\x00', 0x0, 0x4) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000000)={0x4, [0x778e, 0x81, 0x2, 0x1]}) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x9) chroot(&(0x7f0000000080)='./file0\x00') r3 = dup(r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x2011, r3, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400000, 0x0) ioctl$int_in(r4, 0x80000080045017, &(0x7f00000000c0)) 12:14:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x402001, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x80000001) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$sock_void(r2, 0x29, 0x1, 0x0, 0x300) 12:14:06 executing program 0: clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000140)) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x40) pread64(r0, &(0x7f0000000180)=""/231, 0xe7, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f00000000c0)=""/3) timer_create(0x0, &(0x7f0000000380)={0x0, 0x2f, 0x2, @thr={&(0x7f0000000240), &(0x7f00000002c0)}}, &(0x7f00000003c0)) gettid() r1 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x2, 0x1) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x7f, @remote, 0x4e21, 0x4, 'lblcr\x00', 0x4, 0x5}, {@rand_addr=0x7f, 0x4e21, 0x0, 0x4, 0x7, 0x1}}, 0x44) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000480)={{0x0, 0x5, 0x1, 0x7, 'syz1\x00', 0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000440)=['(*eth1security\x00'], 0xf, [], [0x4, 0x0, 0x0, 0x20000000000]}) 12:14:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = open(&(0x7f0000fedff8)='./file0\x00', 0x141042, 0x0) fstat(r1, &(0x7f0000000fbc)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sigaltstack(&(0x7f0000001000/0x3000)=nil, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 12:14:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025c3f0a00145f8f764070") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000000)="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") r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x0) [ 356.563192] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 356.572659] CPU: 1 PID: 23408 Comm: syz-executor3 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 356.581151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.590502] Call Trace: [ 356.593079] dump_stack+0x1c9/0x2b4 [ 356.596725] ? dump_stack_print_info.cold.2+0x52/0x52 [ 356.601916] ? trace_hardirqs_on+0x10/0x10 [ 356.606144] ? lock_downgrade+0x8f0/0x8f0 [ 356.610282] dump_header+0x246/0x123c [ 356.614074] ? percpu_ref_put_many+0x131/0x240 [ 356.618652] ? trace_hardirqs_on+0x10/0x10 [ 356.622886] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 356.627815] ? trace_hardirqs_on+0x10/0x10 [ 356.632053] ? mem_cgroup_iter+0x517/0x10c0 [ 356.636379] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.641917] ? css_next_child+0x1c3/0x620 [ 356.646059] ? trace_hardirqs_on+0x10/0x10 [ 356.650283] ? trace_hardirqs_on+0x10/0x10 [ 356.654505] ? trace_hardirqs_on+0x10/0x10 [ 356.658744] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.664279] ? css_next_child+0x1c3/0x620 [ 356.668432] ? find_lock_task_mm+0x230/0x4d0 [ 356.672850] ? cgroup_get_tree+0xb20/0xb20 [ 356.677082] ? lock_acquire+0x1e4/0x540 [ 356.681078] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.686623] ? task_will_free_mem+0x239/0xb70 [ 356.693908] ? lock_release+0xa30/0xa30 [ 356.697892] ? oom_badness+0x7d1/0xb00 [ 356.701791] ? ___ratelimit+0x36f/0x655 [ 356.705774] ? lock_downgrade+0x8f0/0x8f0 [ 356.709930] ? kasan_check_read+0x11/0x20 [ 356.714079] ? do_raw_spin_unlock+0xa7/0x2f0 [ 356.718488] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 356.723069] ? do_raw_spin_lock+0x200/0x200 [ 356.727388] ? oom_kill_process+0x24d/0x280 [ 356.731704] ? lock_downgrade+0x8f0/0x8f0 [ 356.735850] ? trace_hardirqs_on+0xd/0x10 [ 356.740001] ? ___ratelimit+0xaa/0x655 [ 356.743908] ? idr_get_free+0x10c0/0x10c0 [ 356.748058] ? kasan_check_write+0x14/0x20 [ 356.752292] ? do_raw_spin_lock+0xc1/0x200 [ 356.756531] oom_kill_process.cold.29+0x10/0x660 [ 356.761312] ? trace_hardirqs_on+0xd/0x10 [ 356.766077] ? _raw_spin_unlock_irq+0x27/0x70 [ 356.770575] ? css_task_iter_end+0x2ce/0x490 [ 356.774992] ? oom_evaluate_task+0x540/0x540 [ 356.779404] ? trace_hardirqs_on+0xd/0x10 [ 356.783544] ? _raw_spin_unlock_irq+0x27/0x70 [ 356.788038] ? oom_badness+0xb00/0xb00 [ 356.791922] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 356.796675] ? mem_cgroup_iter_break+0x30/0x30 [ 356.801249] out_of_memory+0x86d/0x1ad0 [ 356.805231] ? oom_killer_disable+0x3a0/0x3a0 [ 356.809728] ? kasan_check_read+0x11/0x20 [ 356.813859] ? do_raw_spin_unlock+0xa7/0x2f0 [ 356.818250] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 356.822817] ? kasan_check_write+0x14/0x20 [ 356.827048] ? do_raw_spin_lock+0xc1/0x200 [ 356.831458] mem_cgroup_out_of_memory+0x15e/0x210 [ 356.836293] ? memcg_memory_event+0x40/0x40 [ 356.840599] ? page_counter_try_charge+0x1c7/0x220 [ 356.845510] try_charge+0x720/0x1680 [ 356.849216] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 356.855952] ? lock_downgrade+0x8f0/0x8f0 [ 356.860082] ? lock_release+0xa30/0xa30 [ 356.864040] ? __anon_vma_prepare+0xc4/0x720 [ 356.868443] ? handle_mm_fault+0x53e/0xc80 [ 356.872691] ? fs_reclaim_acquire+0x20/0x20 [ 356.877013] ? lock_downgrade+0x8f0/0x8f0 [ 356.881158] ? percpu_ref_put_many+0x119/0x240 [ 356.885745] ? get_mem_cgroup_from_mm+0x209/0x440 [ 356.890595] ? get_mem_cgroup_from_page+0x190/0x190 [ 356.895620] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 356.900462] ? lock_acquire+0x1e4/0x540 [ 356.904436] mem_cgroup_try_charge+0x4ff/0xa70 [ 356.909031] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 356.914054] ? mem_cgroup_protected+0xa60/0xa60 [ 356.918715] ? up_write+0x7b/0x220 [ 356.922247] ? up_read+0x110/0x110 [ 356.925796] ? __anon_vma_prepare+0x36d/0x720 [ 356.930300] ? pmd_val+0x88/0x100 [ 356.933757] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 356.939295] mem_cgroup_try_charge_delay+0x1d/0x90 [ 356.944213] __handle_mm_fault+0x25ba/0x4470 [ 356.948609] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 356.953440] ? cap_mmap_addr+0x52/0x130 [ 356.957402] ? userfaultfd_unmap_complete+0x32a/0x510 [ 356.962578] ? security_mmap_addr+0x80/0xa0 [ 356.966901] ? lock_acquire+0x1e4/0x540 [ 356.970860] ? handle_mm_fault+0x417/0xc80 [ 356.975078] ? lock_downgrade+0x8f0/0x8f0 [ 356.979219] ? lock_release+0xa30/0xa30 [ 356.983175] ? lock_release+0xa30/0xa30 [ 356.987136] ? down_read_killable+0x200/0x200 [ 356.991625] ? mem_cgroup_from_task+0xcb/0x1f0 [ 356.996205] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 357.000961] handle_mm_fault+0x53e/0xc80 [ 357.005016] ? __handle_mm_fault+0x4470/0x4470 [ 357.009588] ? find_vma+0x34/0x190 [ 357.013124] __do_page_fault+0x620/0xe50 [ 357.017190] ? mm_fault_error+0x380/0x380 [ 357.021334] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 357.026860] ? __x64_sys_clock_gettime+0x170/0x250 [ 357.031787] ? __ia32_sys_clock_settime+0x290/0x290 [ 357.036885] do_page_fault+0xf6/0x8c0 [ 357.040673] ? vmalloc_sync_all+0x30/0x30 [ 357.044806] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 357.050325] ? do_syscall_64+0x497/0x820 [ 357.054367] ? syscall_slow_exit_work+0x500/0x500 [ 357.059290] ? syscall_return_slowpath+0x5e0/0x5e0 [ 357.064208] ? syscall_return_slowpath+0x31d/0x5e0 [ 357.069124] ? prepare_exit_to_usermode+0x291/0x3b0 [ 357.074129] ? page_fault+0x8/0x30 [ 357.077655] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 357.082481] ? page_fault+0x8/0x30 [ 357.086005] page_fault+0x1e/0x30 [ 357.089451] RIP: 0033:0x40e16f [ 357.092637] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 357.111526] RSP: 002b:00007ffd8c7205b0 EFLAGS: 00010206 [ 357.116877] RAX: 00007f3313243000 RBX: 0000000000020000 RCX: 00000000004569aa [ 357.124138] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 357.131835] RBP: 00007ffd8c720690 R08: ffffffffffffffff R09: 0000000000000000 [ 357.139087] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8c720780 [ 357.146351] R13: 00007f3313263700 R14: 000000000072bf2c R15: 0000000000000001 [ 357.153716] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor3,pid=23408,uid=0 [ 357.167972] memory: usage 140kB, limit 0kB, failcnt 1281 [ 357.173448] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 357.180236] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 357.186396] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 357.205931] Tasks state (memory values in pages): 12:14:07 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x40044590, &(0x7f0000000380)=""/4096) close(r0) 12:14:07 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_proto_private(r0, 0x89e8, &(0x7f0000000040)="4b01fa260b5d68dcfd17ee97aa1b54ce6cf98b25143ce26ec991f56d2056551805872548be773e88b84478d67e32a97809a151551fee0f2281af38ded0ad77ecf903a6f634face85d3ca2543aa694225f77f71be46aa46c2f6139bc6cfd3e8c35ffdc50d43dc1a3730746d245afa21c5848818edec9729b934822d18b1b802f9fd98f364c40798e88727498933e72b7026426332a92253faab160c33f3e2d1c548ada688a050bd4b77c95f554cc1b5a2e7e666738e927cfe325bfff5aa13ec267566be3c20ef0e6763d9ccef55738db673188974b522bcc9ec294947684f4d162ad986d3a1191f1684b3ff934c61634b86ce5161222b78") r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x180}, 'port0\x00', 0x800000000000c7, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r2) 12:14:07 executing program 7: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000300)=0x10, 0xfe41) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f00000000c0)={0x200, 0xffffffff, 0x5, 0x1, 0xf37}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xb2e6, @mcast1, 0x7}, {0xa, 0x4e20, 0x97a, @local, 0x5}, r1, 0xc16}}, 0x48) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x1c4) fchmodat(r0, &(0x7f0000000240)='./file0\x00', 0x180) open(&(0x7f0000000200)='./file0\x00', 0x2, 0x1a) write$P9_RATTACH(r0, &(0x7f0000000040)={0x14, 0x69, 0x1, {0x40, 0x3, 0x2}}, 0x14) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x11, r0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000280)={0x2d1, 0x8, 0x3, 0x1}, 0x6) 12:14:07 executing program 5: r0 = socket$inet(0x10, 0x400000000000003, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x40) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/11) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000000)="1b0000001200030207fffd946fa283080400190000000000000085", 0x1b}], 0x161}, 0xffffffffffffffff) 12:14:07 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000bcd200007fffffff000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f00000001c0)=ANY=[]], 0x0, 0x0, &(0x7f0000000300)}) [ 357.210795] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 357.219695] [ 23408] 0 23408 17618 8221 126976 0 0 syz-executor3 [ 357.228741] Memory cgroup out of memory: Kill process 23408 (syz-executor3) score 8252000 or sacrifice child [ 357.238774] Killed process 23408 (syz-executor3) total-vm:70472kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 357.249904] oom_reaper: reaped process 23408 (syz-executor3), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB 12:14:07 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000380)=""/4096) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r1, 0x7, 0x1, 0x7ff, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) close(r0) 12:14:07 executing program 0: r0 = dup(0xffffffffffffff9c) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000), &(0x7f0000000280)=""/4096, &(0x7f00000000c0)=""/142, 0xd000}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0xffffffffffffffff, &(0x7f0000000080), 0x2) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000001c0)) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000180)=0x1e) [ 357.313857] ALSA: seq fatal error: cannot create timer (-22) [ 357.346826] binder: 23475:23488 transaction failed 29189/-22, size 0-0 line 2852 12:14:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00002f5ff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000968ff6)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r2, &(0x7f00000bc000)=@abs, 0x8) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000240)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) r9 = socket$inet_dccp(0x2, 0x6, 0x0) sendmmsg$unix(r1, &(0x7f0000000f80)=[{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="7416a644"}, {&(0x7f0000000140)="36f506638b05733a4788866fcf372a4986e1b20f9cde3589b3bf1ac0ae50cd563b2986f280ce793fc523b69d75d42fca8742d608f0838385a951e9a44d7d1423721fae7b9837fc2e23472c8126f8345e30c8f6ae0d7d66a1a802e9b867df3567d4195ca46ca794bb482c13bad4dcaf459f465312013f92696fc6bacbcb50fafa4ddd34e69328685a7948b61f83944a5d0a31b4b40e254e5139f687dfc623fc340a9397498025"}], 0x0, &(0x7f0000000440)=[@rights={0x0, 0x1, 0x1, [r3, r0, r2]}, @rights={0x0, 0x1, 0x1, [r2, r2, r2]}, @rights={0x0, 0x1, 0x1, [r3, r3, r2, r2, r2, r3]}, @rights={0x0, 0x1, 0x1, [r1, r1, r2, r2, r1, r0, r2, r0]}, @rights={0x0, 0x1, 0x1, [r0, r0]}, @rights={0x0, 0x1, 0x1, [r1, r2, r3]}, @cred={0x0, 0x1, 0x2, r4, r5, r8}, @cred={0x0, 0x1, 0x2, r6, r5, r8}], 0x0, 0x4000}, {&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)="63e2bf7315ff2c75550b74876926c590e855eab0c7145d8d7d"}, {&(0x7f0000000640)="9f834a53864de906c9b06b224dac2f3890aff1af85849e9cf9616c401b4772480c2f55946590b720cfa46c53fd3bf444c38c3df6e7a2dc04269d6da943e6efc03e628751215949b4392ce5749120b8a029b39ecf6bc47044f6a9df012c0da31097bdc809834b959d7e95eec3d327382391c921e27e6f7294aba4f23d1fdfca"}, {&(0x7f00000006c0)="a5c99b9ee659872a57f46dc5b5f3ee2012dd31e926077163f1"}, {&(0x7f0000000700)="5392fb466e8875627a6a4ae0ea4a92a74e5efc56c3f677f01eecdbeab456a2d4967ff75a36c52d8beaebe2a75a1979746a58a507c86b7506101601f6de24d1da108e02db12fab2c598281c392b11298585d0245d0394deda7ddbbcfd810afd47026bec7b5df11e5a3594f27e7fdcc5e96649dead561688bf692c922bad00a57285d8b1a272d838781e54bbc8e57f421e50b826a7d1bfee6f5414e085760acef2457d0a6d8489b0f3945c770c"}, {&(0x7f00000007c0)="df43b134697346e7b470f56ed75dd7ab4c93ef2a57b4cf4cfacb5091bda5a32671d5af3a8b09b140c0b2c2eb2bcb0552af4b683fcfcddfd9f5359d524c21d94aeb454f201f5cb5896b8366693654817834295459de5c49995a93516dba52cf6e224d6161b74a98a77ffc41418d4615f5dd2af0cf841bcd1a5bc49f77bc3588e109162b0b1a1435237c7a5f80bac645c094716e5e43a058fd35a4941730ea3da5e632124dddf147f1c2c3ce4b48"}], 0x0, &(0x7f0000000900)=[@cred={0x0, 0x1, 0x2, r4, r5, r8}], 0x0, 0x40000}, {&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x0, &(0x7f0000000d00)=[{&(0x7f00000009c0)="0a601fbc5b8aee13e3d27957"}, {&(0x7f0000000a00)="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"}, {&(0x7f0000000b00)="03a2857eca776263535a89eae38f58b6dc2496446eb75497eef92d2dade1b52b9bd012b03aca3eeaa3a7a15163e39034555f98bd3aae35cc5082f50583d5ce68c60398cd71b69e700a1e7f4fa4674f0a22a1b3b65372f1c2d5c09c391ad40bb81435492eb74543c954582777293a23ff82063e64eb2a90c9091c0a10643a4f8526209e8aa56295b2274573accffbb40d"}, {&(0x7f0000000bc0)="cdfadcf0a1c0c9540ab3ba57156755d76d841f8ae70e238fc91373"}, {&(0x7f0000000c00)="a2e45e8b4e21f120f7d2efda249a2c8133e5b2c5c16e4815510dbc25822485980d895d526382b205be96fe0dc9808c85ee5802fe23b39b7d592cf3fab9957ebc5f412898102989c6ffb14a40fd8e11ab38615e438e0c941a6b896431962457ce55d5c336f7ed28bb03bc518f2d7efac042f3820a"}, {&(0x7f0000000c80)="bb9446dfe0bbf1fbf829267f2c3bf598c7362caba122a37851ac740a6251191d34b924ba896f1db16c7d5775d163b78acd418d83eef1f9a764654fcf8cffdc07104ef03d3cd555d20d43c9a23fe9434744e5578ccb3e2f"}], 0x0, &(0x7f0000000d80)=[@rights={0x0, 0x1, 0x1, [r1, r2, r1, r2, r9, r1, r0, r1]}, @cred={0x0, 0x1, 0x2, r6, r7, r8}, @rights={0x0, 0x1, 0x1, [r3]}, @cred={0x0, 0x1, 0x2, r6, r7, r8}]}, {&(0x7f0000000e40)=@abs={0x1, 0x0, 0x4e23}, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000ec0)="4e7eb80dcc618da4fd026d5ec83b44e14a62527cdce4a0471a32a01d1312dc7d6b8501ec4d2588234df7dd5fb37310f1901e4f7520b6f280aef71b84541ec9d4448e664fdfc09c34f82014245de16664f4377daa6610e490bc927b292aae8244da197489fbd9d54e463041fc80fafa502e2f"}], 0x0, 0x0, 0x0, 0x90}], 0x492492492492418, 0x0) sendmmsg$unix(r1, &(0x7f0000fa3000)=[{&(0x7f0000497ff6)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000b71000), 0x0, &(0x7f0000e55000)}], 0x1, 0x40) [ 357.401856] binder: 23475:23492 transaction failed 29189/-22, size 0-0 line 2852 [ 357.427165] binder: undelivered TRANSACTION_ERROR: 29189 [ 357.432853] binder: undelivered TRANSACTION_ERROR: 29189 12:14:07 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x4020, 0x4) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x10, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x17, 0x0, 0x80}]}, 0x28}}, 0x0) 12:14:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl(r1, 0x800000000000937e, &(0x7f00000000c0)="0100000000000000180400000001000000555d040f45426d0270ec78dfd849832f") 12:14:07 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/9, 0x9}, {&(0x7f0000000080)=""/165, 0xa5}, {&(0x7f0000000140)=""/185, 0xb9}], 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) shutdown(r1, 0x0) readv(r1, &(0x7f0000002180)=[{&(0x7f00000020c0)=""/159, 0x9f}], 0x1) 12:14:07 executing program 7: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xb17) 12:14:07 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x40044590, &(0x7f0000000380)=""/4096) close(r0) 12:14:07 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000001c0)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000004000000600", 0xc7, 0x80003}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x2000000080003, 0x0) close(r0) open(&(0x7f0000000000)='./file0\x00', 0x14800, 0x18) 12:14:07 executing program 6: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) iopl(0x180) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x401, 0x4, 0x70}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140), 0x2}, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000080), &(0x7f00000001c0)=""/4096}, 0x18) 12:14:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:14:08 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040), 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0xf0, 0x1c, 0xfffffffffffffffd, 0x0, 0x0, {0x1}, [@generic="74af1735467849d0e41b10c0f499b6e447b42c771bbb2df34805d9e7f99ff0d4243ee2f59c88094d018eb586044ff357fd5f8c558c", @generic="ccb4fecc62bb0ee738cb71947a3b6f6e34167bc1ba30c5f7c76e8645abe8286b2fce2745bbf5064d8614d8144fbe07fc629d8d88dda371cfab32e37f81654678f0800c1351971436c3fb4085f82eb7e277c683ed1dd5851ed897bbed3d97c655d30860559de5fd4db992752737dec72ff4c25e6b9704f6691ac633c1a003779618655f1556f5d0d181892cb8cb0edbbe84527a24f1b93d81c946b58b9bc73c832b", @typed={0x4, 0x46}]}, 0xf0}}, 0x0) recvmsg(r0, &(0x7f0000000600)={&(0x7f00000002c0)=@rc, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000000540)=""/134, 0x86}, 0x0) 12:14:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000200)=0xc5) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f00000000c0)=[@fda], &(0x7f0000000180)=[0x0]}}], 0x0, 0x0, &(0x7f0000000500)}) 12:14:08 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000280)=""/38) preadv(r0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/204, 0xcc}, {&(0x7f00000003c0)=""/204, 0xcc}, {&(0x7f0000000080)=""/179, 0xb3}], 0x3, 0x0) semop(0x0, &(0x7f0000000500)=[{0x4}, {0x0, 0x7c30, 0x1000}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x100000001, 0x1000}], 0x1) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x2000) ioctl$KDDELIO(r1, 0x4b35, 0x6) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000004c0)={0x7a, 0x81, 0x8, 0x1, 0x81, 0x4}) 12:14:08 executing program 6: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xedd5, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000040)={0x5, 0x200, 0x2, 0x0, 0xfffffffffffffffc, 0x1}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x17, "8337cbf018f45b93e4ed08578e78d42f8c9555318bd741"}, &(0x7f0000000140)=0x1f) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x7fffffff, 0x6, 0x8002, 0x100000000, 0x7, 0x20, 0x4, 0x101, r2}, &(0x7f00000001c0)=0x20) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000240)='./file0\x00', 0x40000000000e800, 0x1, &(0x7f0000000280)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000404010a0200027400f801", 0x17}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="009490085b51e749712ace59cf059d9bab712fd5c53631282047153b9990567ca7e465aa3c4ec237973f6298f91773b4455ab16209d2840d57381c861d8fcf810ebe5df33f91e983eebe37c52308f1240fb96d8307cbda7fb40fd95aa828b3b5875e7b2e77cc8bbcb181daef5e3027cdd665fc6c901699fd2c35e7dcd236eebbe6ca2f7b1356ee0a8c5121c3c12e7b2db048091992fa8a01b9a625877ad697aa325d22516c5237f4"]) [ 357.731289] binder: 23532:23537 ERROR: BC_REGISTER_LOOPER called without request [ 357.755906] binder: 23532:23537 got transaction with invalid parent offset or type 12:14:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x20, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x4, 0x12}]}, 0x20}}, 0x0) [ 357.801665] binder: 23532:23537 transaction failed 29201/-22, size 32-8 line 3090 [ 357.809371] binder: send failed reply for transaction 77 to 23532:23537 [ 357.885322] binder: BINDER_SET_CONTEXT_MGR already set [ 357.894122] binder: 23532:23551 ioctl 40046207 0 returned -16 [ 357.904524] binder_alloc: 23532: binder_alloc_buf, no vma [ 357.910320] binder: 23532:23537 transaction failed 29189/-3, size 0-0 line 2967 [ 357.921624] binder: 23532:23551 ERROR: BC_REGISTER_LOOPER called without request [ 357.933507] binder: undelivered TRANSACTION_ERROR: 29190 [ 357.939510] binder: undelivered TRANSACTION_COMPLETE [ 357.944848] binder: undelivered TRANSACTION_ERROR: 29201 [ 357.962163] binder: undelivered TRANSACTION_ERROR: 29189 [ 358.148794] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 358.158235] CPU: 1 PID: 23487 Comm: syz-executor3 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 358.166722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.176068] Call Trace: [ 358.178674] dump_stack+0x1c9/0x2b4 [ 358.182298] ? dump_stack_print_info.cold.2+0x52/0x52 [ 358.187493] ? trace_hardirqs_on+0x10/0x10 [ 358.191716] ? lock_downgrade+0x8f0/0x8f0 [ 358.195849] dump_header+0x246/0x123c [ 358.199635] ? percpu_ref_put_many+0x131/0x240 [ 358.204205] ? trace_hardirqs_on+0x10/0x10 [ 358.208425] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 358.213340] ? trace_hardirqs_on+0x10/0x10 [ 358.217561] ? mem_cgroup_iter+0x517/0x10c0 [ 358.221973] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.227511] ? css_next_child+0x1c3/0x620 [ 358.231648] ? trace_hardirqs_on+0x10/0x10 [ 358.235867] ? trace_hardirqs_on+0x10/0x10 [ 358.240096] ? trace_hardirqs_on+0x10/0x10 [ 358.244326] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.249847] ? css_next_child+0x1c3/0x620 [ 358.253978] ? find_lock_task_mm+0x230/0x4d0 [ 358.258387] ? cgroup_get_tree+0xb20/0xb20 [ 358.262608] ? lock_acquire+0x1e4/0x540 [ 358.266573] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.272110] ? task_will_free_mem+0x239/0xb70 [ 358.276617] ? lock_release+0xa30/0xa30 [ 358.280605] ? oom_badness+0x7d1/0xb00 [ 358.284491] ? ___ratelimit+0x36f/0x655 [ 358.288452] ? lock_downgrade+0x8f0/0x8f0 [ 358.292585] ? kasan_check_read+0x11/0x20 [ 358.296726] ? do_raw_spin_unlock+0xa7/0x2f0 [ 358.301118] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 358.305687] ? do_raw_spin_lock+0x200/0x200 [ 358.309992] ? oom_kill_process+0x24d/0x280 [ 358.314297] ? lock_downgrade+0x8f0/0x8f0 [ 358.318439] ? trace_hardirqs_on+0xd/0x10 [ 358.322579] ? ___ratelimit+0xaa/0x655 [ 358.326456] ? idr_get_free+0x10c0/0x10c0 [ 358.330587] ? kasan_check_write+0x14/0x20 [ 358.334805] ? do_raw_spin_lock+0xc1/0x200 [ 358.339025] oom_kill_process.cold.29+0x10/0x660 [ 358.343778] ? trace_hardirqs_on+0xd/0x10 [ 358.347906] ? _raw_spin_unlock_irq+0x27/0x70 [ 358.352394] ? css_task_iter_end+0x2ce/0x490 [ 358.356787] ? oom_evaluate_task+0x540/0x540 [ 358.361177] ? trace_hardirqs_on+0xd/0x10 [ 358.365304] ? _raw_spin_unlock_irq+0x27/0x70 [ 358.369783] ? oom_badness+0xb00/0xb00 [ 358.373654] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 358.378393] ? mem_cgroup_iter_break+0x30/0x30 [ 358.382968] out_of_memory+0x86d/0x1ad0 [ 358.386949] ? oom_killer_disable+0x3a0/0x3a0 [ 358.391437] ? kasan_check_read+0x11/0x20 [ 358.395571] ? do_raw_spin_unlock+0xa7/0x2f0 [ 358.399961] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 358.404526] ? kasan_check_write+0x14/0x20 [ 358.408755] ? do_raw_spin_lock+0xc1/0x200 [ 358.412975] mem_cgroup_out_of_memory+0x15e/0x210 [ 358.417810] ? memcg_memory_event+0x40/0x40 [ 358.422149] ? page_counter_try_charge+0x1c7/0x220 [ 358.427076] try_charge+0x720/0x1680 [ 358.430783] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 358.437540] ? lock_downgrade+0x8f0/0x8f0 [ 358.441694] ? lock_release+0xa30/0xa30 [ 358.445669] ? __anon_vma_prepare+0xc4/0x720 [ 358.450070] ? handle_mm_fault+0x53e/0xc80 [ 358.454290] ? fs_reclaim_acquire+0x20/0x20 [ 358.458600] ? lock_downgrade+0x8f0/0x8f0 [ 358.462742] ? percpu_ref_put_many+0x119/0x240 [ 358.467311] ? get_mem_cgroup_from_mm+0x209/0x440 [ 358.472141] ? get_mem_cgroup_from_page+0x190/0x190 [ 358.477158] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 358.481982] ? lock_acquire+0x1e4/0x540 [ 358.485949] mem_cgroup_try_charge+0x4ff/0xa70 [ 358.490516] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 358.495518] ? mem_cgroup_protected+0xa60/0xa60 [ 358.500171] ? up_write+0x7b/0x220 [ 358.503695] ? up_read+0x110/0x110 [ 358.507221] ? __anon_vma_prepare+0x36d/0x720 [ 358.511701] ? pmd_val+0x88/0x100 [ 358.515155] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 358.520684] mem_cgroup_try_charge_delay+0x1d/0x90 [ 358.525609] __handle_mm_fault+0x25ba/0x4470 [ 358.530005] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 358.534844] ? cap_mmap_addr+0x52/0x130 [ 358.538804] ? userfaultfd_unmap_complete+0x32a/0x510 [ 358.543986] ? security_mmap_addr+0x80/0xa0 [ 358.548292] ? lock_acquire+0x1e4/0x540 [ 358.552252] ? handle_mm_fault+0x417/0xc80 [ 358.556476] ? lock_downgrade+0x8f0/0x8f0 [ 358.560611] ? lock_release+0xa30/0xa30 [ 358.564572] ? lock_release+0xa30/0xa30 [ 358.568532] ? down_read_killable+0x200/0x200 [ 358.573026] ? mem_cgroup_from_task+0xcb/0x1f0 [ 358.577595] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 358.582339] handle_mm_fault+0x53e/0xc80 [ 358.586395] ? __handle_mm_fault+0x4470/0x4470 [ 358.590982] ? find_vma+0x34/0x190 [ 358.594526] __do_page_fault+0x620/0xe50 [ 358.598586] ? mm_fault_error+0x380/0x380 [ 358.602720] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.608243] ? __x64_sys_clock_gettime+0x170/0x250 [ 358.613157] ? __ia32_sys_clock_settime+0x290/0x290 [ 358.618159] do_page_fault+0xf6/0x8c0 [ 358.621942] ? vmalloc_sync_all+0x30/0x30 [ 358.626072] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.631601] ? do_syscall_64+0x497/0x820 [ 358.635645] ? syscall_slow_exit_work+0x500/0x500 [ 358.640472] ? syscall_return_slowpath+0x5e0/0x5e0 [ 358.645386] ? syscall_return_slowpath+0x31d/0x5e0 [ 358.650311] ? prepare_exit_to_usermode+0x291/0x3b0 [ 358.655320] ? page_fault+0x8/0x30 [ 358.658843] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 358.663670] ? page_fault+0x8/0x30 [ 358.667194] page_fault+0x1e/0x30 [ 358.670630] RIP: 0033:0x40e16f [ 358.673808] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 358.692695] RSP: 002b:00007ffd8c7205b0 EFLAGS: 00010206 [ 358.698042] RAX: 00007f3313243000 RBX: 0000000000020000 RCX: 00000000004569aa [ 358.705296] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 358.713080] RBP: 00007ffd8c720690 R08: ffffffffffffffff R09: 0000000000000000 [ 358.720345] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8c720780 [ 358.727614] R13: 00007f3313263700 R14: 000000000072bf2c R15: 0000000000000001 [ 358.735020] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor3,pid=23487,uid=0 [ 358.749305] memory: usage 140kB, limit 0kB, failcnt 1306 [ 358.754792] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 358.761585] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 358.767793] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 358.787340] Tasks state (memory values in pages): [ 358.792209] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 358.801099] [ 23487] 0 23487 17618 8221 126976 0 0 syz-executor3 [ 358.810174] [ 23510] 0 23510 17618 8218 126976 0 0 syz-executor2 [ 358.819230] Memory cgroup out of memory: Kill process 23487 (syz-executor3) score 8252000 or sacrifice child [ 358.829264] Killed process 23487 (syz-executor3) total-vm:70472kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 358.840340] oom_reaper: reaped process 23487 (syz-executor3), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB [ 358.840848] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 358.860420] CPU: 1 PID: 23510 Comm: syz-executor2 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 358.868920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.878463] Call Trace: [ 358.881064] dump_stack+0x1c9/0x2b4 [ 358.884710] ? dump_stack_print_info.cold.2+0x52/0x52 [ 358.889910] ? trace_hardirqs_on+0x10/0x10 [ 358.894149] ? do_raw_spin_unlock+0xa7/0x2f0 [ 358.898572] dump_header+0x246/0x123c [ 358.902371] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 358.907292] ? trace_hardirqs_on+0x10/0x10 [ 358.911514] ? trace_hardirqs_on+0x10/0x10 [ 358.915734] ? trace_hardirqs_on+0x10/0x10 [ 358.919959] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.925492] ? css_next_child+0x1c3/0x620 [ 358.929623] ? find_lock_task_mm+0x230/0x4d0 [ 358.934037] ? cgroup_get_tree+0xb20/0xb20 [ 358.938256] ? lock_acquire+0x1e4/0x540 [ 358.942219] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.947742] ? task_will_free_mem+0x239/0xb70 [ 358.952220] ? lock_release+0xa30/0xa30 [ 358.956194] ? oom_badness+0x7d1/0xb00 [ 358.960068] ? ___ratelimit+0x36f/0x655 [ 358.964025] ? lock_downgrade+0x8f0/0x8f0 [ 358.968155] ? kasan_check_read+0x11/0x20 [ 358.972285] ? do_raw_spin_unlock+0xa7/0x2f0 [ 358.976676] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 358.981240] ? do_raw_spin_lock+0x200/0x200 [ 358.985556] ? oom_kill_process+0x24d/0x280 [ 358.989865] ? lock_downgrade+0x8f0/0x8f0 [ 358.993997] ? trace_hardirqs_on+0xd/0x10 [ 358.998130] ? ___ratelimit+0xaa/0x655 [ 359.002009] ? idr_get_free+0x10c0/0x10c0 [ 359.006136] ? kasan_check_write+0x14/0x20 [ 359.010353] ? do_raw_spin_lock+0xc1/0x200 [ 359.014577] oom_kill_process.cold.29+0x10/0x660 [ 359.019318] ? trace_hardirqs_on+0xd/0x10 [ 359.023447] ? _raw_spin_unlock_irq+0x27/0x70 [ 359.027925] ? css_task_iter_end+0x2ce/0x490 [ 359.032315] ? oom_evaluate_task+0x540/0x540 [ 359.036715] ? trace_hardirqs_on+0xd/0x10 [ 359.040844] ? _raw_spin_unlock_irq+0x27/0x70 [ 359.045318] ? oom_badness+0xb00/0xb00 [ 359.049191] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 359.053926] ? mem_cgroup_iter_break+0x30/0x30 [ 359.058502] out_of_memory+0x86d/0x1ad0 [ 359.062464] ? oom_killer_disable+0x3a0/0x3a0 [ 359.067032] ? do_raw_spin_unlock+0xa7/0x2f0 [ 359.071421] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 359.075998] ? kasan_check_write+0x14/0x20 [ 359.080216] ? do_raw_spin_lock+0xc1/0x200 [ 359.084449] mem_cgroup_out_of_memory+0x15e/0x210 [ 359.089277] ? memcg_memory_event+0x40/0x40 [ 359.093589] ? page_counter_try_charge+0x1c7/0x220 [ 359.098498] try_charge+0x720/0x1680 [ 359.102197] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 359.108934] ? lock_downgrade+0x8f0/0x8f0 [ 359.113064] ? lock_release+0xa30/0xa30 [ 359.117018] ? __anon_vma_prepare+0xc4/0x720 [ 359.121419] ? handle_mm_fault+0x53e/0xc80 [ 359.125636] ? fs_reclaim_acquire+0x20/0x20 [ 359.129939] ? lock_downgrade+0x8f0/0x8f0 [ 359.134069] ? percpu_ref_put_many+0x119/0x240 [ 359.138633] ? get_mem_cgroup_from_mm+0x209/0x440 [ 359.143462] ? get_mem_cgroup_from_page+0x190/0x190 [ 359.148471] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 359.153296] ? lock_acquire+0x1e4/0x540 [ 359.157255] mem_cgroup_try_charge+0x4ff/0xa70 [ 359.161830] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 359.166828] ? mem_cgroup_protected+0xa60/0xa60 [ 359.171479] ? up_write+0x7b/0x220 [ 359.175000] ? up_read+0x110/0x110 [ 359.178524] ? __anon_vma_prepare+0x36d/0x720 [ 359.183022] ? pmd_val+0x88/0x100 [ 359.186478] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 359.192001] mem_cgroup_try_charge_delay+0x1d/0x90 [ 359.198748] __handle_mm_fault+0x25ba/0x4470 [ 359.203148] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 359.207979] ? cap_mmap_addr+0x52/0x130 [ 359.211963] ? userfaultfd_unmap_complete+0x32a/0x510 [ 359.217138] ? security_mmap_addr+0x80/0xa0 [ 359.221473] ? lock_acquire+0x1e4/0x540 [ 359.225456] ? handle_mm_fault+0x417/0xc80 [ 359.229687] ? lock_downgrade+0x8f0/0x8f0 [ 359.233836] ? lock_release+0xa30/0xa30 [ 359.237816] ? lock_release+0xa30/0xa30 [ 359.241800] ? down_read_killable+0x200/0x200 [ 359.246289] ? mem_cgroup_from_task+0xcb/0x1f0 [ 359.250884] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 359.255634] handle_mm_fault+0x53e/0xc80 [ 359.259703] ? __handle_mm_fault+0x4470/0x4470 [ 359.264271] ? find_vma+0x34/0x190 [ 359.267810] __do_page_fault+0x620/0xe50 [ 359.271860] ? mm_fault_error+0x380/0x380 [ 359.276005] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.281535] ? __x64_sys_clock_gettime+0x170/0x250 [ 359.286452] ? __ia32_sys_clock_settime+0x290/0x290 [ 359.291461] do_page_fault+0xf6/0x8c0 [ 359.295246] ? vmalloc_sync_all+0x30/0x30 [ 359.299384] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.304904] ? do_syscall_64+0x497/0x820 [ 359.308950] ? syscall_return_slowpath+0x5e0/0x5e0 [ 359.313862] ? syscall_return_slowpath+0x31d/0x5e0 [ 359.318781] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 359.323787] ? prepare_exit_to_usermode+0x291/0x3b0 [ 359.328792] ? page_fault+0x8/0x30 [ 359.332316] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 359.337734] ? page_fault+0x8/0x30 [ 359.341258] page_fault+0x1e/0x30 [ 359.344693] RIP: 0033:0x40e16f [ 359.347884] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 359.366772] RSP: 002b:00007ffe1f3c3010 EFLAGS: 00010206 [ 359.372121] RAX: 00007f91cf350000 RBX: 0000000000020000 RCX: 00000000004569aa [ 359.379372] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 359.386714] RBP: 00007ffe1f3c30f0 R08: ffffffffffffffff R09: 0000000000000000 [ 359.393981] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1f3c31e0 [ 359.401246] R13: 00007f91cf370700 R14: 000000000072bf2c R15: 0000000000000001 [ 359.408587] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor2,pid=23510,uid=0 [ 359.422805] memory: usage 128kB, limit 0kB, failcnt 1315 [ 359.428301] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 359.435110] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 359.441288] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 359.460835] Tasks state (memory values in pages): [ 359.465717] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 359.474654] [ 23510] 0 23510 17618 8218 126976 0 0 syz-executor2 [ 359.483786] Memory cgroup out of memory: Kill process 23510 (syz-executor2) score 8249000 or sacrifice child [ 359.493838] Killed process 23510 (syz-executor2) total-vm:70472kB, anon-rss:104kB, file-rss:32768kB, shmem-rss:0kB 12:14:09 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x7fc) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) inotify_init() mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) syz_open_pts(r1, 0x4000) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000240)=""/203) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000380)=""/4096) close(r0) 12:14:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r1, &(0x7f0000000180)='threaded\x00', 0xffffff43) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') sched_setscheduler(0x0, 0x0, &(0x7f0000000280)) write$P9_RREADDIR(r1, &(0x7f0000000200)={0x55, 0x29, 0x1, {0x10001, [{{0x0, 0x3, 0x8}, 0x0, 0x101, 0xd, './file0/file1'}, {{0xc0, 0x0, 0x3}, 0x0, 0x6, 0xd, './file0/file1'}]}}, 0x55) truncate(&(0x7f0000000b00)='./file0/file1\x00', 0x201f) 12:14:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x24}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="791200008f48040000000000000000000000920000a40a73333e83bc1395ecc091123603005aeeb1f202d596c05ad1151b8f8849a43b86b32a5e58de371adb8255d138fcff9270c254cf274b7dc461b668421ef1828a2667676fb38a0bcd8181fc05d6110bb523cd0c4063e9399038c1166c8d8a3c079df9ec181f36629fc77fee67d482d73434"], &(0x7f0000f6bffb), 0x0, 0xfffffe21, &(0x7f00001a7f05)=""/251}, 0x18) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 12:14:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000740)='.\x00') syz_open_dev$audion(&(0x7f0000000700)='/dev/audio#\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x8, &(0x7f0000000600)=[{&(0x7f0000000180)="ce9c31b5a42dc667c0506454d4b7a4b84b8ef64ab310fe7e59816d34f2f6cf7f621056ed7844e93a19632335b9500d425a1c097d6bc0b17720d4e77bdafcd894f63f15312bf6d030d05e1af0ab0a10fc6b94899745b304488bc1e9e88c704b", 0x5f, 0xfe99}, {&(0x7f0000000240)="4d0d17c3ac68c64cfdb0a3d241205be84e6a9c3b4db63c3eddecf4495c18afe770f4bdd2391bd3b9df16ca810bd468ebb16d51868b39b23ed57d14d3960beb30ffa88b2edeb1a89e0c4f58a1d0f290dafd4f76c74791321209f03a5cfe615ed6af37eda25360e15bb8ac7b1f7ae812b2a51904cfef935bdf73f4210c0ba202fff025213869c727b988235a958cc1c850412d78c915de058e8de277d85a996b5bc4874df7fe47014fec5c1a38332349e615", 0xb1, 0x8}, {&(0x7f00000000c0)="c1814039ce33eb3a61f82c8cadb9a836f604b501253fceebffbefb65486cd537997e5218e173d4f5ba02623e723e4809d677", 0x32, 0x3}, {&(0x7f0000000300)="e7a8a0954285a53d9ea1f25070250db4ce07809e12190ac4b63886924b55772937f2702d644f94da74eaf262aeb7d3b353cfade86b3edbc4adb0339d0995a652c24f39e2c215e5289c75eaf2cee57217d62a2bc73e8d7948bda911b09d6a0c84c0d7fdb6fcf8b3a0a393a5d9621636fb6b6de2d601321a25becafcfe20133db999e7106a7f295140d59fe37934eb909bb75f2fabf43a743a76376d62b189", 0x9e, 0x91}, {&(0x7f00000003c0)="a86d037472caedbcb988521d604209fbd96ffa33b520175cd6b6461d4a508053cd1bc10f89e9bde071d151b8fdf26d4c97256a59f7a8d7588017f8b6cb5e03a4c1ab81b27b3803b12875a17f4c976fcb172026b2a8f77a9ac75121b9761835aa9e17a5072cd3b7135e6fee4cfc744de63df1cc95eba5606fa366363b3b7395e1996dd50c25ffd63490918c5a282a7d7291eff67d685d235f2ef3883a4b88e544d2d203c2e15f94d9c677b0dc3fe5ecd31150bd250c30a6d22dfed9c013b7378a8f142a733853baa5c8bed1cdefc16265beff9d5437781a82721f49d6091d24b76f5902abbe455a38c325298ea5e2a39bfd0b20ec6a65", 0xf6, 0x80000001}, {&(0x7f00000004c0)="362eecb20ff44b41f8bc74b90db27753f20b9e477a53cd139bdf4c9385a19328899a2eec79eb6e111f78baac657d0beda4e03528d46d8ba964a6f223766bbdcce201a876995e7a03b3795b7f081ed803c7cacc7a34a40d10c4c47978b6cff815ac4ed0a6ad082a805214062216a9076d167dabed0302226407db5c458484422b73e219ff730ccfbad84ba9055e63c8e92c3d188f718a0d4b3ea51f8f5088c0709753aa2a6d499649d0f855e9f5eb78bdc72e4da84932", 0xb6, 0x2}, {&(0x7f0000000780)="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", 0x1000, 0x45e5c7c0}, {&(0x7f0000000580)="c099d21447cda70c986ea8e49e53c7e3427a9ab82708b0247a0c5cdc30a737998d25f8e5ca87f2b881024b074e7ae282ee8da31a81b6be54d27847d4ef53dc9823858ec2bbfd0016b34497c3bf29e5d892f9600688a984647ecd2b366a2df1a5c0422e55b03381b6b890d8e1f70fa7cc0991f73fd95202", 0x77, 0x40}], 0x1000000, &(0x7f00000006c0)={[{@nointegrity='nointegrity'}, {@resize='resize'}, {@quota='quota'}, {@resize_size={'resize', 0x3d, 0x40}}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000100)="2e650f983df3cf0f01751a6a000f320fae29670f01ca0f01dfbaf80c66b8114eeb8266efbafc0cec0f01c8", 0x2b}], 0x1, 0x0, &(0x7f0000000040), 0x0) 12:14:09 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="73627363746f723d30303031303030ec6305c18c0bcbcb09003a00"]) 12:14:09 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000340)='/dev/snd/controlC#\x00', 0x0, 0x3) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x61f56dfb, 0x1, 0x3, 0x2, 0x3, 0x8, 0x4}, &(0x7f0000000300)=0x20) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) mount$9p_rdma(&(0x7f0000000500)='127.0.0.1\x00', &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='9p\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="74726102733d72646d612c706f72743d3078303030303030303030304cc6b31032342c74696d656f75743d3078303030303030303030303030303030352c74696d656f75743d3078303030303030303030303030303030322c00cfb11b7e250c01a43113a449"]) ioctl(r4, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") read(r1, &(0x7f0000000640)=""/20, 0x14) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x22002) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000000)=0x4000000000) write$binfmt_elf32(r5, &(0x7f0000000180)=ANY=[@ANYRES32], 0xfffffe41) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000440)=""/77) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000380)={0x0, 0x401}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000400)={r6, 0x6, 0x9, 0x36a}, 0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x1f, 0xfffffffffffff800, 0x3ff, 0x673f}, &(0x7f0000000200)=0x14) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f00000004c0)={0x9, 0x2, 0x80, 0x400}) r8 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_ACTIVATE(r8, 0x5606, 0x35293beb) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000240)={r7, @in6={{0xa, 0x4e24, 0x4e0, @empty, 0x1000}}}, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc0505510, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0x0, [], [], [], 0x5}) 12:14:09 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x40044590, &(0x7f0000000380)=""/4096) close(r0) 12:14:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000000000000400000000000000000000006000000000000000020003800000000000000000000ecffffff00000000000000000000000000000000000000000001"], 0x5b) write$evdev(r1, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2) sendfile(r2, r1, &(0x7f0000000000), 0x100000001) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000640)=""/216) [ 359.504945] oom_reaper: reaped process 23510 (syz-executor2), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB 12:14:10 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x101, 0x10000) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x99a) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = dup2(r1, 0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x10006, 0x0, 0x8000000000000, 0x2000, &(0x7f0000004000/0x2000)=nil}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r3, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000001040)=ANY=[@ANYBLOB="06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a200000e6ffffffffffffff000000000000000000000009000000000000ff0c41000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:14:10 executing program 6: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="01", 0x1}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x1f, 0x81, 0x7, 0x0, 0x4}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000200)={r1, 0x4c, "e33e3f23006214ce1ea736b5eac31c5a1b2f40bd432e4dd3c1a9dfd556f2a60643cfca299fd87d65b35a0c1479f7e0779c7d1b85ab002f0d5e8d45673292f80bbe18a82aafc65dde4bb4b4c3"}, &(0x7f0000000280)=0x54) recvmsg(r0, &(0x7f0000001a40)={&(0x7f0000000000)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001a00)}, 0x122) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x900, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000300)=""/119) [ 359.581329] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000045) [ 359.588541] FAT-fs (loop7): Filesystem has been set read-only 12:14:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000000)="f7cef03dd92cbe2849c0c46b5e0e629901b693f740e60a61d76ea28c2a79ec7d7550bbf06266477ecf5b0023f24b9aaa158fb64b56836050b883f666ac14e099235ceb270a4e507661d831222a37a9930e588c91d865c6315b2aa118ec76104326c693023b82494fcbbec4e147b4d302c5d79eecb49a53f9094a0a47d290ebe910c6737442230e0b1ec3bc013a7d09dc561d") write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCFLSH(r1, 0x540b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000012c0)) [ 359.641903] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 359.651369] CPU: 0 PID: 23580 Comm: syz-executor3 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 359.659860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.669199] Call Trace: [ 359.671790] dump_stack+0x1c9/0x2b4 [ 359.675405] ? dump_stack_print_info.cold.2+0x52/0x52 [ 359.680618] ? trace_hardirqs_on+0x10/0x10 [ 359.684835] ? zap_class+0x740/0x740 [ 359.688593] dump_header+0x246/0x123c [ 359.692381] ? perf_trace_lock+0xde/0x920 [ 359.696512] ? trace_hardirqs_on+0x10/0x10 [ 359.700744] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 359.705659] ? trace_hardirqs_on+0x10/0x10 [ 359.709887] ? mem_cgroup_iter+0x517/0x10c0 [ 359.714191] ? perf_trace_lock+0xde/0x920 [ 359.718320] ? trace_hardirqs_on+0x10/0x10 [ 359.722541] ? zap_class+0x740/0x740 [ 359.726258] ? trace_hardirqs_on+0x10/0x10 [ 359.730475] ? perf_trace_lock+0xde/0x920 [ 359.734607] ? find_lock_task_mm+0x230/0x4d0 [ 359.739002] ? zap_class+0x740/0x740 [ 359.742698] ? lock_acquire+0x1e4/0x540 [ 359.746670] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.752213] ? ___ratelimit+0x36f/0x655 [ 359.756171] ? lock_downgrade+0x8f0/0x8f0 [ 359.760315] ? kasan_check_read+0x11/0x20 [ 359.764450] ? do_raw_spin_unlock+0xa7/0x2f0 [ 359.768847] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 359.773415] ? do_raw_spin_lock+0x200/0x200 [ 359.777726] ? oom_kill_process+0x24d/0x280 [ 359.782034] ? lock_downgrade+0x8f0/0x8f0 [ 359.786181] ? trace_hardirqs_on+0xd/0x10 [ 359.790312] ? ___ratelimit+0xaa/0x655 [ 359.794183] ? idr_get_free+0x10c0/0x10c0 [ 359.798316] ? kasan_check_write+0x14/0x20 [ 359.802551] ? do_raw_spin_lock+0xc1/0x200 [ 359.806792] oom_kill_process.cold.29+0x10/0x660 [ 359.811539] ? trace_hardirqs_on+0xd/0x10 [ 359.815680] ? _raw_spin_unlock_irq+0x27/0x70 [ 359.820158] ? css_task_iter_end+0x2ce/0x490 [ 359.824554] ? oom_evaluate_task+0x540/0x540 [ 359.828961] ? trace_hardirqs_on+0xd/0x10 [ 359.833093] ? _raw_spin_unlock_irq+0x27/0x70 [ 359.837577] ? oom_badness+0xb00/0xb00 [ 359.841447] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 359.846188] ? mem_cgroup_iter_break+0x30/0x30 [ 359.850851] out_of_memory+0x86d/0x1ad0 [ 359.854816] ? oom_killer_disable+0x3a0/0x3a0 [ 359.859299] ? kasan_check_read+0x11/0x20 [ 359.863439] ? do_raw_spin_unlock+0xa7/0x2f0 [ 359.867833] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 359.872398] ? kasan_check_write+0x14/0x20 [ 359.876631] ? do_raw_spin_lock+0xc1/0x200 [ 359.880854] mem_cgroup_out_of_memory+0x15e/0x210 [ 359.885681] ? memcg_memory_event+0x40/0x40 [ 359.889989] ? page_counter_try_charge+0x1c7/0x220 [ 359.894903] try_charge+0x720/0x1680 [ 359.898609] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 359.905372] ? lock_downgrade+0x8f0/0x8f0 [ 359.909514] ? lock_release+0xa30/0xa30 [ 359.913490] ? fs_reclaim_acquire+0x20/0x20 [ 359.917798] ? lock_downgrade+0x8f0/0x8f0 [ 359.921930] ? percpu_ref_put_many+0x119/0x240 [ 359.926497] ? get_mem_cgroup_from_mm+0x209/0x440 [ 359.931333] ? get_mem_cgroup_from_page+0x190/0x190 [ 359.936337] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 359.941162] ? lock_acquire+0x1e4/0x540 [ 359.945121] mem_cgroup_try_charge+0x4ff/0xa70 [ 359.949685] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 359.954686] ? mem_cgroup_protected+0xa60/0xa60 [ 359.959339] ? up_write+0x7b/0x220 [ 359.963042] ? up_read+0x110/0x110 [ 359.966593] ? __anon_vma_prepare+0x36d/0x720 [ 359.971073] ? pmd_val+0x88/0x100 [ 359.974516] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 359.980053] mem_cgroup_try_charge_delay+0x1d/0x90 [ 359.984972] __handle_mm_fault+0x25ba/0x4470 [ 359.989368] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 359.994197] ? cap_mmap_addr+0x52/0x130 [ 359.998170] ? security_mmap_addr+0x80/0xa0 [ 360.002481] ? lock_acquire+0x1e4/0x540 [ 360.006439] ? handle_mm_fault+0x417/0xc80 [ 360.010659] ? lock_downgrade+0x8f0/0x8f0 [ 360.014791] ? lock_release+0xa30/0xa30 [ 360.018753] ? lock_release+0xa30/0xa30 [ 360.022713] ? mem_cgroup_from_task+0xcb/0x1f0 [ 360.027280] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 360.032024] handle_mm_fault+0x53e/0xc80 [ 360.036082] ? __handle_mm_fault+0x4470/0x4470 [ 360.040658] ? find_vma+0x34/0x190 [ 360.044183] __do_page_fault+0x620/0xe50 [ 360.048230] ? mm_fault_error+0x380/0x380 [ 360.052365] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.058070] ? __x64_sys_clock_gettime+0x170/0x250 [ 360.062984] ? __ia32_sys_clock_settime+0x290/0x290 [ 360.067984] do_page_fault+0xf6/0x8c0 [ 360.071785] ? vmalloc_sync_all+0x30/0x30 [ 360.075918] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.081438] ? do_syscall_64+0x497/0x820 [ 360.085482] ? syscall_slow_exit_work+0x500/0x500 [ 360.090311] ? syscall_return_slowpath+0x5e0/0x5e0 [ 360.095233] ? syscall_return_slowpath+0x31d/0x5e0 [ 360.100159] ? prepare_exit_to_usermode+0x291/0x3b0 [ 360.105158] ? page_fault+0x8/0x30 [ 360.108683] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 360.113511] ? page_fault+0x8/0x30 [ 360.117046] page_fault+0x1e/0x30 [ 360.120665] RIP: 0033:0x40e16f [ 360.123844] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 360.142727] RSP: 002b:00007ffd8c7205b0 EFLAGS: 00010206 [ 360.148072] RAX: 00007f3313243000 RBX: 0000000000020000 RCX: 00000000004569aa [ 360.155325] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 360.162671] RBP: 00007ffd8c720690 R08: ffffffffffffffff R09: 0000000000000000 [ 360.169921] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8c720780 [ 360.177173] R13: 00007f3313263700 R14: 000000000072bf2c R15: 0000000000000001 [ 360.184510] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor3,pid=23580,uid=0 [ 360.196702] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000045) [ 360.198758] memory: usage 128kB, limit 0kB, failcnt 1324 [ 360.198773] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 360.218104] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 360.224269] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 360.224581] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000045) [ 360.243807] Tasks state (memory values in pages): [ 360.243812] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 360.243950] [ 23580] 0 23580 17618 8221 126976 0 0 syz-executor3 [ 360.273969] Memory cgroup out of memory: Kill process 23580 (syz-executor3) score 8252000 or sacrifice child [ 360.284029] Killed process 23580 (syz-executor3) total-vm:70472kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB 12:14:10 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') read(r0, &(0x7f0000000400)=""/230, 0x354365e95b732b39) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0x3f0, 0x14, 0x9, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x8}, [@nested={0xdc, 0x3b, [@typed={0x14, 0x42, @ipv6=@local}, @typed={0x8, 0x70, @ipv4=@multicast2}, @generic="26a43ff80b61a5c0d13b7856880a8a295b3d98f95cee78865566f2e677d0d9843dcb464e64b247b51243e057d472953e6252e003edff2c6874a0872a94dde8cff6a35723db113422c43e9816339cf0a7738e8e567f246ea0e249ad4ec136a29117f3092106f40a8db8804fc04240ce75b1cd3794c6009c75d6f96eb653d48b2268d552f9c46c92bd7c7cf106d34495ab7ed071ab154ce2012006f9e3a56de879fdd48104eae560f6026978539f5c13ae3338dbd004088f6df6"]}, @nested={0x70, 0x29, [@generic="c7d8115e9bbe2be8c08b41de4c3850d298d01e6a1fadfcf81679a0b0d0fb2675691b045c71bd24ec631cdf49d1ea6d8856d9e81b820f3b1e4413c546735bc0ed377f4b0e678896c8c5650ecdaa27d989ea7cc642c5dd9de39e791944945bfa7b0163f8d8c291aab458"]}, @nested={0x1e4, 0x92, [@typed={0x8, 0x1, @u32=0x3}, @typed={0x8, 0x12, @ipv4=@multicast1}, @generic="69adf6e37189c0a93ce6d0c51218de5156be4b4282da38e7401769876a64311b6aa03a6c5320e3ae502142cc6d8741c0a9f618187ac1669037ef7f998916bd2f11d624bdf99eee2688afa1c659b2d1deb3e2eaeec68c567d17779bfe82b8300d2bc1b3df60454bf5668b407d4f8cae9a0fd682d4d8499345c7a54886a0ceac25f17691c0e4fe35f90546e45758f8", @generic="32dd2126a8ff0196baf24d7b96533faf4c56658d33b23ddb1546a25cb9221d7a957c042314d9c2a87a5e9f03f064e38eb868d6eb25335ca680ef510be7c86a2e2bc16938269e7fb706d3e3c7906ef19e4c5154dba344f1a6e81f18bb95de35c1ca48c95bec68a181c8c4ca683bf23db7b433f0789f63f50a4de783e4bf7b4b86750e9ba443c53800c5f05aee6d55764ab3acc4c9d8402bcdb8e7420ba82f7869cf5381226664c4052493d7", @typed={0x8, 0x63, @pid=r1}, @generic="ba1552ede859dfbedc873cbb4b926dcc415f353307588ea9d504cbd8ae3e909aab3a2e32b6be6c18c69ab6a9cc0ff3015ae62ed6d71f49af4301fc1b79d3a908a4ff1eb6e2237d607b2700d98a7903d7c84284c17fbf2346aef8e53b28dac7796bd5449932b75c909c2b917b725a5090f1fdee7e9d0b711a0797bbe1ac5178", @typed={0x8, 0x84, @uid=r2}, @typed={0x8, 0x1d, @fd=r0}]}, @generic="6402cbf940311fc19a72c6bdf6a7a062640c0b7bd8752707ab38d02034d484249003e30e7b0139b012742127f8eb725d93e4b04849ce48f6ad4e9885200908fdde62d3f867869a0ba6ad27c52dd019ed5e629c9b114b4036a8b412dc2910bcdb20f445f14261e3e43e4a7a5f07388793bef6673e750d24c248d159e39f67186d0d805daa4c1e971d81768a33c790151c355f18a2c2b616da699e0ade50c6", @typed={0x4, 0x45}, @typed={0x8, 0xf9da, @uid=r3}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x20000090}, 0x10) 12:14:10 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000380)=""/4096) close(r0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x80000001}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001380)={0x0, 0x1000, "0e62395af89bc1c56f3588ed00a58a92436d78661a63b9b0bd8a5e7188b3e2738d25de3e530100d1d3099ea244c4b95bb84c92387b837fbf281dec4a55862d162d6c26dac83e89ec0f002e9a12d6980011219464558fad6648b235e7c0830a72583287880564577dcb9c446193e5615f68ed0ad2b8d9fe6f4d9512bbd84fc385ddc149a0ecf0716177992e2c803c63c02547323b7ae122717cdb2de0b20fa5910be767cb280085fa8be425dc3797a0ff3c39b99f9bfcf8fc9822e85cbcc952b9bce5dc1ab54c0506bf2ae64d3abd209aeb8fe31946a42376a98effdb0e94a20edcb35dbfc558e84c5ca68767539dc4d817227920e1da29698ba14c5ed4ed35af42ca1326d7ced666ce6da6d8dd59041ccfeedee50be481e04ca795789b94f1cb1fb0b63ba4b14e9fdacaebd0b91d76a40b737944f780ff1bbf46cc80c1c7dae3ee88770acbec54c2aab5ba5c1fb2097e77acbeef17d2ba169e3dc37536360c4889a0e5d786c5736f11b44605758ff4458b391ab0359bc7d055f1bf5c65629dada73a39a021a746c2393683a1ace3c5675b58a1bc74dc38a328c8df7e5f27a0713d90a1425b6bc5c3ebd90fb61758e47356368ee97abb265c52d952e47aa3d8c50a9913e4bdbe3dc8f99578cad284b3ca90e5317e2cb5bb2bdead8efd48f772ccadfa4622418b7cfb427952ffc49ccf7c9199bc0af9fd7d02afa08db2ddefef237a0c13841baed4eb06f7b671838552f6ff4201f4fa2a2e66af6a22a3665429998e064d71d596c4fd27aa2d1aa3d8f7364a0aa53cc36a5e6312d7afcfe9aa5c61b6ede9cd9bda3a3337686749c85ab39b3560e20083c769b66dd3b39bc422cd17e1b107b78ad898294b262ac41ac0c850b60107003a3f7530fa6f26ceb95703816a6a776db2366d9bdaf39303211ebe56f93973b524a0676fdf2581d827daf9f2d381326afafec848a45763f255f727b192d1f5f6d109d10e7620c0cf3a22ca3ca5ddbe944ed138f1f8963be6c9db0240b3146bccbdbc2d8a5d0b50501a9509918bda861d6e9e1732c40cd90f3aabb79714e035c10464fcf8d66f59040f692ddb64f965e40a7ef709e6d47dc4497def2b5c33acaf8114aa6d0def54733ad63f0fdcdc5db641ff30ee9195b75d6086ee1428721f9416f80d6d8c26853caf46e6d4e9a8c96b95acb6ba099a3f026cae837484300dcaa7c544c6d483c73c36fe0af5664987b9cf592e372313ac90f5c93f9c05c096139b0cb9e5d1e19fc6580b8ce8016c3dabb188de50fbe540dfec2ffc0ef4e4ae6feeb2512de1a67355cafb02acde70433ea1796211259982a08b3158719f9271493cb414678667cc99286240b15277a87bbb4578e3c3bc26355f2e675676bf8ef32f16a28de2b7f3a0486788a97bedb58c74037e67c1e1adfd34dffd64e92d96fbf9a7423ffba48a3936db1cf528b522912cca27e8d1e626715df3dc8411f3e3dfa030db4ae339b8f8682243f9c56f186a6dbedca40285ba27f7eea0d0f50d5a896cfc2b0e9b1f930054d3539b0f6f95611f92f44fe6de254ad87ec3786da5b2c36813ae655b964d1cf25cd1fd8197b429797cb04abd8bf54bc189f40a37673e81e4fec0dda145b612e41e62cea253316baa5f09e08ffffc429f5041d6f3a6a901150fecf128aab52a8a4991b2fbdeb14a4929e5889549f03cb07e97380dc070c7060a30cfe4d83547c258483922a649fc22d5de608eb12be65af1b2f6b35977e3bb31757353e98be08d62b0d2c0ed2d402a9cb17c8175bb14bf07bd81e3efa2da2cdb735d8d42bad5d72ed2d1e61b9791f9c2f0e6965e97e0315e8dafc61dabf39afed89d0891b56093272f8162d08731b1d821d4e11e1f82d46b63f70e303cd5269b493aaf52d6d4bd01802caa7b2ac928842ff01a752fceab0c6a677b453099c51c8acabf40e334b4065a2772d38abc425f1c943ad85b969ae1882e312d46363d23e9bd3a12fe2f210199d0e6941e7f8114ec517359a21798d3338a40c2e74864b7cd9506143bab8886242b7ebd123eadcccaf58b67ad22d90dbd16e209a9590f8defba0b5d85263aba73fd81947a4020344253e290692a1002f54dfab8bae508dbbaaf422d7784f2e6dab362f005296b9a82715993c8770f8a70a5b66e5d1bf27bc99323f4ca860fc2b49cf2272d44538fec98f70fe34506309f71635765d4450d29764d62f8c0427110df266f99673913e29b592fc7158ffa7da641f0c4b6485366048bd4bf67e95c15dee4c4bdb0d9a5020b1b5d4f0ab4ba666959417624706bc32a94a5ae66a9c701931d9ed65d63ec045cb0e6b24027908a6c1a55b32aed1ea900cdf3d0c3b9dedb4d9e4998b4f419c8ec42f439f51ec2d18edd401e8b7bac2288710759f6eaec6e43fad52307da5807b4742c5f142a4bff92d131807a515c32258cd8849f7fab0a3eae973222d6c0d8ad4500a847b02ec4ab65c0165e3ee111e49999a34d4972d097a12b24644511bb49af3f7017d534bdcd5a0bf11b38588baa1b0ebe53c0a13d6c8367b9a644d8035fdd13307a05a6fbc15c63ee334f835ed1712c56a69e4e6ac118ad5387a9246eb827794952b2f467c3399e525499af863584e40f55773fcc3d946e31ee53fad0e77a47e87f6fa6def8cd879ee98b4c038f4dd6322738868b4c85f1d26fe661515a892b85dfc53677c8b1c991715c3b890ded664746685712ec3ca18764030ff28a1eed75a42f1cd6e97dda1ebf4f3e53783e18c9f6f69eee7c0a0809470fab9c3dfda0d505025554ea892b6fe9236522c7f45760131a847371655bedc3d96ef06cfee86f1f8007d93b6cf5cd6f46c07d13bf4330c94849ffaa40833f97732b33853e3cb03c207dfd115a8873881b12a7c25eeaeaf99df95f3b8a6c4a9fe7024d1711c83197617eb720752cc1c93433920fbc623a6b3579a47c56d7a30f6892d74162da5767a8939c647ad2935b6363d4b0e59ffe3c398ca8cab43fc8beef1b20dfc84d5c1fdfe8e483acf18924691d8df3dc45cef8412342d11ffbcbf27877e5fa9f301c3857d7f8efa3ebc5187d0fd79fbd82ecc851d5169e374a30cb843ed7e33db57cd641e5fd54dd0058cfb869137d5edd555e0144fbbaae3a8af764514a6fd58e237db05c0848bd812c7ab2d2d531e2ac077fcd04e871886089d2d528c1d3ada79888a4a4f08dc71986dbe1836fbe5fcfac28fd5b54778504a9c2880eacc008f9394f8b1ad8ddea5f0ebb4496b3a48c98329b288fc0f8e77e8f4ee023c61beebdff15459c8c316d0be69cfb1928d9ef9668b0426cbd65b8a74e97890de0d81064aaea9af9240a3d6c36e2f07a7770da0628a0d9792b3d8f9e37d86d1ead83ef56b7d370f65a02d6a65a00167bc53bee87a11dc11d5467eb6698cefc6d7c6a070dc0d39f3de59f340d2f1b76d7495627f6d7ba86c199119df7726e3cecc8ff1906d49ebdb899503c8a9fc97a0b735cc84d0af3160e2391c20eeeabca89518dc5475dc405e03cc9424d24154467e1984507b55b043ca98d398ff112db032c5f5d688bccb544cc993b1ad1e50e5f36af3af4ed00dfb6912d2f4f7e89ead30d8dacd473db45d345d252a3c3f801dc86ebd9d1ef30ed7a96e3e5f4a61d66e1d3b045619d35f07c7a4a235667b3b303eabb734ed1199ab80ef28d5bcfc00bec8526c25fb5e8b71ba8295a851695580720a01c402ef33499a3658d7c03a90d24ffb5ac8b42481ed78b85c5032753eb15e00c6eda4f54ccd032e56e214641036492d704201e029b793dca94ac2fcc028f7c39cd4178f54c44ba3b77d81d97ad4d18ac317e5d7f4d232514e33052d6d2109cad9f17430e2a65834d8f05498fe59aeb3ca9256ceadcfa91d0824c3358c8577c2ed2943f9ee847b25cc40e3f9d8d296280c961400c33fd2b4d78fea86e22b3a3e9e14931dca2cce204e46be55624e5437364b7cb2ee6dd0a6e2d871f36f3fd516c6b0133751f408ef40ddc9a284a4b4b5b79fc4fa08df5c25364126e58f03c12b65c4de06a3ad8ee03aaac293ddb75d798620cd675bd8b46d60b1336b0437aabe5f56e88b3440c932d2e04489fa304c828995590ba0d0c778ec49c37473fc0c98b4ddf266ad8dfcf720455520776b130ceca6def94f159019ff055bd415a2b3e826e6cd0606f58dff672e344b9d9e3678d9e782c13ee714ef7a7adba0e1124bef3b2591f37f87860b5b31a09c0f47f948c0356eab30484675af4e9065f0aaad6d9c34b422e0731627c361b1b30c545c2833b9267dfdbcde7e669f329b575d7808a76a01bc7cecd0ec844eb6de55beab3bcf0b6e7ee953b1d1f8f8435606198410cc06eaae13c096fcd7d1c32e9bf458b17b3c8c538565b09d14131f2df902be390632f5754dd3683fce355254a5c1d9b6f1fe81996ae0672291d7c92379c1224128d500cb62c4eb87525899d2084510857ba6949cd878adfe5d0f2fd497b2aefa1f989857e34a3ef5d826bba9e2913710eeceb1516e75229f3c96c08060a616da41d9b86894cff4b8efac015c92ee05200e12355887c17823a7b89789cc1fa8383cecc6b60ac92d6dc73aa57c73210da6b7ef4a23d0e83fe26b8da6df4d5d58b026753abb784366ad67b3a2b09c39c82daf9e24edda745fbf62866e71dbf427e90c5b488b42395085ebf878ad7038d83b208d31f69eaf3e1f2f997c140f5f79853d333c412531989ac24d8131bfa4dd5eb312d5887dccddaf11ab074fb413c735dabf367ae8008b7cedf80cf8008f3acacf2a33c8b510883fcfb8cc447fe00077db950c5bc63900b569503d2b71de08589c9587ef29436bde6fc44c0901dd5bd7359eddf680e167eecc26b1a4795c785699d492a1373f7f6546ff1c4abda3bc9cd5ccd554fefd556d39ff3a9e47be2f9d0b0f410441592d656a230705943dac6476e6ad79a951045b13ec4281ca089221dd95e86786c24209b79abf29688fb9b284ba55f7b1ddef6037c0be1e4a606a4566f56e79c1086d55b2c387c8635021ef047ca43bd36863b6dda6d20c10027d01c08f1c87625718daf0b7a959cfcc281360b280b18e14aa8950c0257b6bf8a849ca9bee7c997bb737e962a381dc5d0269937735b60b83e4a110c35e03a4003c0aff012d3437b67ef21c109364457897d224c0e6a0a585fd1c8e768711f32b2bcf734a03e5af880b09adbcb63344f5eec46f7743abbfc03043a022f2d80d5a9ed713c1f2635c418e7bf1eb54aab737958e999f59d074af7f3daaa943c21c876abe9b67564045661ff7350322a46f6a0f48620bdab3c93cd08fbe03f50f4aa4b3280b0b7375f2574f616a33b0ea446902b1ca75fdcbb1b5c81a20633491baaf90a881361bb47cd46d1c06f8411ec4513aac2f1f6e0349c5c14d01b4202ab67870200149d53c0d5b9c0b7f65209e2bb84aa9ee973517408fc4e005a6241c8add62e002aae66199ce071616f7af62c8b4b8cebef55756bff0192eeb8c234fcb948ab207b855003a6b4357377f4529f7dbf94856478c6f6d984c5afa94ce03ad2db3b86f66c7754fe3a52ca5fa9a86717cb05902bf9b39274812dd472eee65e81244a1d7350fb1689d6f51eea772b6fbc49079865a3cda63e7ce6c740ee35539e20254a8cd580ee10cef3ee666fdc3a21cff364397b32c79561b8947722e947267c29bddf9fb03f7350b30440a0d06eca67bf8b6e8f204675a360b981be83a36bcbfac865d27250b312b0f094cbdf245774c6665669b1ab1d231a71b318698cce3ee45bb6023af5c672b3b7008b9b45852dcf706aeb37e8d11b6afe"}, &(0x7f0000000240)=0x1008) close(r3) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000280)={r4, 0x2, 0x244, 0x7, 0x100000001, 0x5, 0x1f, 0xb45f, {r5, @in6={{0xa, 0x4e21, 0x0, @mcast2, 0x8}}, 0x7ff, 0x1, 0x200, 0x3, 0xc3cd}}, &(0x7f0000000340)=0xb0) fcntl$getownex(r3, 0x10, &(0x7f00000023c0)) 12:14:10 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40044590, &(0x7f0000000380)=""/4096) close(r0) [ 360.295762] oom_reaper: reaped process 23580 (syz-executor3), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB 12:14:10 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_bt(r0, 0x8906, &(0x7f0000000080)="acf463513c179f2ea0df9c7a14e597db8207876e8d8ff9687fb7f155748bdceb4391e14311e50f8ec63f2a01d98974752c268491203974c98f6723da161980dbd9b5") syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000002000000010000000000000000480000000000000d00000022000000020000000200000002000000020000001a0000c0a00100000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)) 12:14:10 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20000, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x1, 0x7f, 0x10000000c}, 0x2c) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x9, 0x8000) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs\x00') sendfile(r1, r2, &(0x7f00000000c0)=0x8f, 0xdfd4) 12:14:10 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000, 0x183) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x10000}, 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) mq_timedreceive(r0, &(0x7f00000000c0)=""/68, 0x44, 0x8, &(0x7f0000000140)) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") setsockopt$sock_timeval(r1, 0x1, 0xa, &(0x7f0000000040), 0x10) 12:14:10 executing program 6: r0 = socket$inet6(0xa, 0x21000000000002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000040), &(0x7f0000000140)=0x60) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = memfd_create(&(0x7f00000002c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x8000, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f0000000200)) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f00000001c0), 0x4) pwrite64(r2, &(0x7f00000000c0)='/&', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) symlink(&(0x7f0000001000)='.\x00', &(0x7f0000000440)='./file0\x00') creat(&(0x7f0000000100)='./file0\x00', 0x0) [ 360.470911] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 360.480456] CPU: 1 PID: 23612 Comm: syz-executor3 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 360.488947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.496327] f2fs_msg: 6 callbacks suppressed [ 360.496339] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 360.498321] Call Trace: [ 360.498344] dump_stack+0x1c9/0x2b4 [ 360.498361] ? dump_stack_print_info.cold.2+0x52/0x52 [ 360.498376] ? trace_hardirqs_on+0x10/0x10 [ 360.498393] ? lock_downgrade+0x8f0/0x8f0 [ 360.502804] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 360.509794] dump_header+0x246/0x123c [ 360.509805] ? percpu_ref_put_many+0x131/0x240 [ 360.509825] ? trace_hardirqs_on+0x10/0x10 [ 360.512794] F2FS-fs (loop4): Mismatch start address, segment0(416) cp_blkaddr(1024) [ 360.516016] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 360.516031] ? trace_hardirqs_on+0x10/0x10 [ 360.516061] ? mem_cgroup_iter+0x517/0x10c0 [ 360.516074] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.516086] ? css_next_child+0x1c3/0x620 [ 360.516097] ? trace_hardirqs_on+0x10/0x10 [ 360.516114] ? trace_hardirqs_on+0x10/0x10 [ 360.521313] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 360.525521] ? trace_hardirqs_on+0x10/0x10 [ 360.525539] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.531431] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 360.537114] ? css_next_child+0x1c3/0x620 12:14:11 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20000, 0x0) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10, 0x80000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) move_pages(r1, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), 0x0) 12:14:11 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000080)) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x7ff, 0x80000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x11c, r2, 0x808, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x10000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x10001}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xffffffff}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40}, 0x8800) [ 360.537129] ? find_lock_task_mm+0x230/0x4d0 [ 360.537144] ? cgroup_get_tree+0xb20/0xb20 [ 360.537157] ? lock_acquire+0x1e4/0x540 [ 360.537171] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.537180] ? task_will_free_mem+0x239/0xb70 [ 360.537194] ? lock_release+0xa30/0xa30 [ 360.537204] ? oom_badness+0x7d1/0xb00 [ 360.537220] ? ___ratelimit+0x36f/0x655 [ 360.537233] ? lock_downgrade+0x8f0/0x8f0 [ 360.537246] ? kasan_check_read+0x11/0x20 [ 360.537259] ? do_raw_spin_unlock+0xa7/0x2f0 [ 360.537271] ? do_raw_spin_trylock+0x1c0/0x1c0 12:14:11 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000300)={0x7, 0x8, 0xfa00, {r4, 0x200}}, 0x10) dup2(r3, r2) [ 360.537282] ? do_raw_spin_lock+0x200/0x200 [ 360.537295] ? oom_kill_process+0x24d/0x280 [ 360.537308] ? lock_downgrade+0x8f0/0x8f0 [ 360.537321] ? trace_hardirqs_on+0xd/0x10 [ 360.537337] ? ___ratelimit+0xaa/0x655 [ 360.541229] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 360.545783] ? idr_get_free+0x10c0/0x10c0 [ 360.545797] ? kasan_check_write+0x14/0x20 [ 360.550658] F2FS-fs (loop4): Mismatch start address, segment0(416) cp_blkaddr(1024) [ 360.557806] ? do_raw_spin_lock+0xc1/0x200 [ 360.557824] oom_kill_process.cold.29+0x10/0x660 [ 360.557838] ? trace_hardirqs_on+0xd/0x10 [ 360.557850] ? _raw_spin_unlock_irq+0x27/0x70 [ 360.557861] ? css_task_iter_end+0x2ce/0x490 [ 360.557873] ? oom_evaluate_task+0x540/0x540 [ 360.557889] ? trace_hardirqs_on+0xd/0x10 [ 360.562814] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 360.567017] ? _raw_spin_unlock_irq+0x27/0x70 [ 360.567032] ? oom_badness+0xb00/0xb00 [ 360.759984] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 360.764726] ? mem_cgroup_iter_break+0x30/0x30 [ 360.769308] out_of_memory+0x86d/0x1ad0 [ 360.773276] ? oom_killer_disable+0x3a0/0x3a0 [ 360.777758] ? kasan_check_read+0x11/0x20 [ 360.781892] ? do_raw_spin_unlock+0xa7/0x2f0 [ 360.786284] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 360.790864] ? kasan_check_write+0x14/0x20 [ 360.795191] ? do_raw_spin_lock+0xc1/0x200 [ 360.799418] mem_cgroup_out_of_memory+0x15e/0x210 [ 360.804245] ? memcg_memory_event+0x40/0x40 [ 360.808561] ? page_counter_try_charge+0x1c7/0x220 [ 360.813487] try_charge+0x720/0x1680 [ 360.817189] ? debug_object_free+0x32d/0x690 [ 360.821591] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 360.828331] ? lock_downgrade+0x8f0/0x8f0 [ 360.832479] ? lock_release+0xa30/0xa30 [ 360.836442] ? fs_reclaim_acquire+0x20/0x20 [ 360.840749] ? lock_downgrade+0x8f0/0x8f0 [ 360.844881] ? futex_wait_setup+0x410/0x410 [ 360.849193] ? get_mem_cgroup_from_mm+0x209/0x440 [ 360.856643] ? get_mem_cgroup_from_page+0x190/0x190 [ 360.861659] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 360.866491] mem_cgroup_try_charge+0x4ff/0xa70 [ 360.871067] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 360.876072] ? mem_cgroup_protected+0xa60/0xa60 [ 360.880738] ? do_futex+0x249/0x27d0 [ 360.884526] ? vm_mmap+0xc0/0xc0 [ 360.887886] ? up_read+0x1a/0x110 [ 360.891329] ? pmd_val+0x88/0x100 [ 360.894772] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 360.900301] mem_cgroup_try_charge_delay+0x1d/0x90 [ 360.905232] __handle_mm_fault+0x25ba/0x4470 [ 360.909642] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 360.914475] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 360.919572] ? lock_acquire+0x1e4/0x540 [ 360.923621] ? handle_mm_fault+0x417/0xc80 [ 360.927848] ? lock_downgrade+0x8f0/0x8f0 [ 360.931982] ? lock_release+0xa30/0xa30 [ 360.935944] ? lock_release+0xa30/0xa30 [ 360.939908] ? pvclock_read_flags+0x160/0x160 [ 360.944390] ? lock_acquire+0x1e4/0x540 [ 360.948362] ? mem_cgroup_from_task+0xcb/0x1f0 [ 360.952941] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 360.957789] handle_mm_fault+0x53e/0xc80 [ 360.961840] ? __handle_mm_fault+0x4470/0x4470 [ 360.966419] ? find_vma+0x34/0x190 [ 360.969957] __do_page_fault+0x620/0xe50 [ 360.974011] ? mm_fault_error+0x380/0x380 [ 360.978151] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.983676] ? __x64_sys_clock_gettime+0x170/0x250 [ 360.988594] ? __ia32_sys_clock_settime+0x290/0x290 [ 360.993601] do_page_fault+0xf6/0x8c0 [ 360.997387] ? vmalloc_sync_all+0x30/0x30 [ 361.001524] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.007048] ? do_syscall_64+0x497/0x820 [ 361.011098] ? syscall_slow_exit_work+0x500/0x500 [ 361.015933] ? syscall_return_slowpath+0x5e0/0x5e0 [ 361.020852] ? syscall_return_slowpath+0x31d/0x5e0 [ 361.025775] ? prepare_exit_to_usermode+0x291/0x3b0 [ 361.030790] ? page_fault+0x8/0x30 [ 361.034325] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 361.039162] ? page_fault+0x8/0x30 [ 361.042693] page_fault+0x1e/0x30 [ 361.046134] RIP: 0033:0x40052d [ 361.049317] Code: 8a 4c 24 10 d3 e0 09 f0 48 8b 74 24 08 66 89 06 e9 fe 00 00 00 48 8b 44 24 10 48 0b 44 24 28 75 10 48 8b 44 24 08 8b 54 24 20 <89> 10 e9 e2 00 00 00 8a 4c 24 28 b8 01 00 00 00 48 8b 74 24 08 48 [ 361.068206] RSP: 002b:00007ffd8c720660 EFLAGS: 00010246 [ 361.073563] RAX: 0000000020001380 RBX: fffffffffffffffe RCX: 0000000000000000 [ 361.080819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000ba2848 [ 361.088079] RBP: 000000000072be80 R08: 0000000000000000 R09: 0000000000000000 [ 361.095334] R10: 00007ffd8c720770 R11: 0000000000000246 R12: 00007ffd8c720770 [ 361.102586] R13: 00000053ec807e53 R14: 000000000072be8c R15: 0000000000000000 12:14:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2e, 0x119, 0x0, 0x0, {0x2001}, [@nested={0x8, 0x0, [@typed={0x4, 0x8, @binary}]}]}, 0x1c}}, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0xbe69, 0xd7, 0x5, 0x0, 0x0, [{r0, 0x0, 0x9}, {r0, 0x0, 0xfff}, {r0, 0x0, 0x9}, {r0, 0x0, 0x100000001}, {r0, 0x0, 0x800}]}) r1 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x402, 0x20) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000200)={0x1, 0x7, 0x5, 0xd4f, 0x1}) 12:14:11 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x1cc, 0x17, 0xb12, 0x70bd2c, 0x25dfdbff, {0xe}, [@nested={0x1b0, 0x43, [@generic="6b0a7ba6c8a9a9ef5c0f4a9630b3d9731b6580b925f99db7d1718f4310c3bd68b0ad3348e21b48a95e0d6abb0cdc95fce4f0ba1ab1690079a6ce4f2740a7332bfbddc2db1c6edb86f1fd6289afa681272ab510a3681480da45d931492af283779e8f60fa032984d0f493c4e3aab0fc311bd6ee47d866b6b632db8c91d386b14d54e4ca1a404680015490354d698e8896182ab49ed7a650caff9b8b022df91e0940af0841cf85ee882332e08d81bf1783ac4320734f8bd472a6d753debc4d2c0d41d1a9186fe1898370d172961f44549b5ee0ef56aa13a314bb7b1af2156b67f679311576be432cab2f3596c9bc774742", @typed={0x8, 0x4d, @u32=0x6}, @generic="25c0aa8f24c908800d3e0b6229e5e78b65724f2fe9e82ff04340010e725895e86239ded2f3be2dc53af33e580b9010c9fcf4b25ffdd9d81ff231f3ee132107502ab4d39170d1cc3a1b326580ca338d0fabe1835224c5490d577db8f064c4567788d24d47e9d7ccebe07419f51b224f1bf51454103dfdc7d40a6061c536a8324be34dd41ecde9492be64baa7cb06113b2c316cef4094b1e957c0ba8016f3e3a0fb978643d74d3e07e27927921db9bd44ef1a0"]}, @typed={0x8, 0x1b, @ipv4=@broadcast}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4000}, 0x800) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea9}, 0xb) [ 361.110090] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor3,pid=23612,uid=0 [ 361.124319] memory: usage 128kB, limit 0kB, failcnt 1333 [ 361.129835] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 361.136636] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 361.142830] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 361.147449] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 361.162436] Tasks state (memory values in pages): [ 361.162442] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 361.162643] [ 23612] 0 23612 17585 8221 126976 0 0 syz-executor3 [ 361.162664] [ 23615] 0 23615 17585 8218 126976 0 0 syz-executor2 [ 361.162687] Memory cgroup out of memory: Kill process 23612 (syz-executor3) score 8252000 or sacrifice child [ 361.162731] Killed process 23612 (syz-executor3) total-vm:70340kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 361.238599] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 361.245738] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 361.259355] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 361.268906] CPU: 0 PID: 23615 Comm: syz-executor2 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 361.277398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.286737] Call Trace: [ 361.289320] dump_stack+0x1c9/0x2b4 [ 361.292933] ? dump_stack_print_info.cold.2+0x52/0x52 [ 361.298107] ? trace_hardirqs_on+0x10/0x10 [ 361.302328] dump_header+0x246/0x123c [ 361.306111] ? perf_trace_lock+0xde/0x920 [ 361.310245] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 361.315155] ? trace_hardirqs_on+0x10/0x10 [ 361.319380] ? kasan_check_read+0x11/0x20 [ 361.323538] ? perf_trace_lock+0xde/0x920 [ 361.327697] ? trace_hardirqs_on+0x10/0x10 [ 361.331942] ? zap_class+0x740/0x740 12:14:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000000c0)={0x5, 0x30, &(0x7f0000000080)="a8e78806819a4ca3521f91cd6766f09bca5d12608c7fcc4bc9aa498c4ff6557b50e229a50171feafc11702d470e068e3"}) r3 = dup2(r1, r1) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000180), &(0x7f0000000140)=0xfffffffffffffe80) [ 361.335660] ? trace_hardirqs_on+0x10/0x10 [ 361.339902] ? perf_trace_lock+0xde/0x920 [ 361.344051] ? find_lock_task_mm+0x230/0x4d0 [ 361.348460] ? zap_class+0x740/0x740 [ 361.352182] ? lock_acquire+0x1e4/0x540 [ 361.356153] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.361681] ? ___ratelimit+0x36f/0x655 [ 361.365644] ? lock_downgrade+0x8f0/0x8f0 [ 361.369786] ? kasan_check_read+0x11/0x20 [ 361.373932] ? do_raw_spin_unlock+0xa7/0x2f0 [ 361.378328] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 361.382913] ? do_raw_spin_lock+0x200/0x200 [ 361.387220] ? oom_kill_process+0x24d/0x280 [ 361.391526] ? lock_downgrade+0x8f0/0x8f0 [ 361.395665] ? trace_hardirqs_on+0xd/0x10 [ 361.399801] ? ___ratelimit+0xaa/0x655 [ 361.403673] ? idr_get_free+0x10c0/0x10c0 [ 361.407814] ? kasan_check_write+0x14/0x20 [ 361.412037] ? do_raw_spin_lock+0xc1/0x200 [ 361.416262] oom_kill_process.cold.29+0x10/0x660 [ 361.421006] ? trace_hardirqs_on+0xd/0x10 [ 361.425139] ? _raw_spin_unlock_irq+0x27/0x70 [ 361.429620] ? css_task_iter_end+0x2ce/0x490 [ 361.434014] ? oom_evaluate_task+0x540/0x540 [ 361.438405] ? trace_hardirqs_on+0xd/0x10 [ 361.442535] ? _raw_spin_unlock_irq+0x27/0x70 [ 361.447022] ? oom_badness+0xb00/0xb00 [ 361.450900] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 361.455642] ? mem_cgroup_iter_break+0x30/0x30 [ 361.460222] out_of_memory+0x86d/0x1ad0 [ 361.464185] ? oom_killer_disable+0x3a0/0x3a0 [ 361.468750] ? kasan_check_read+0x11/0x20 [ 361.472883] ? do_raw_spin_unlock+0xa7/0x2f0 [ 361.477273] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 361.481849] ? kasan_check_write+0x14/0x20 [ 361.486067] ? do_raw_spin_lock+0xc1/0x200 [ 361.490292] mem_cgroup_out_of_memory+0x15e/0x210 [ 361.496071] ? memcg_memory_event+0x40/0x40 [ 361.500388] ? page_counter_try_charge+0x1c7/0x220 [ 361.505304] try_charge+0x720/0x1680 [ 361.509008] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 361.515754] ? lock_downgrade+0x8f0/0x8f0 [ 361.519885] ? lock_release+0xa30/0xa30 [ 361.523851] ? fs_reclaim_acquire+0x20/0x20 [ 361.528156] ? lock_downgrade+0x8f0/0x8f0 [ 361.532285] ? percpu_ref_put_many+0x119/0x240 [ 361.536862] ? get_mem_cgroup_from_mm+0x209/0x440 [ 361.541692] ? get_mem_cgroup_from_page+0x190/0x190 [ 361.546697] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 361.551522] ? lock_acquire+0x1e4/0x540 [ 361.555489] mem_cgroup_try_charge+0x4ff/0xa70 [ 361.560321] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 361.565324] ? mem_cgroup_protected+0xa60/0xa60 [ 361.569978] ? up_write+0x7b/0x220 [ 361.573506] ? up_read+0x110/0x110 [ 361.577036] ? __anon_vma_prepare+0x36d/0x720 [ 361.581546] ? pmd_val+0x88/0x100 [ 361.584992] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 361.590695] mem_cgroup_try_charge_delay+0x1d/0x90 [ 361.595612] __handle_mm_fault+0x25ba/0x4470 [ 361.600009] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 361.604843] ? cap_mmap_addr+0x52/0x130 [ 361.608801] ? security_mmap_addr+0x80/0xa0 [ 361.613127] ? lock_acquire+0x1e4/0x540 [ 361.617085] ? handle_mm_fault+0x417/0xc80 [ 361.621302] ? lock_downgrade+0x8f0/0x8f0 [ 361.625435] ? lock_release+0xa30/0xa30 [ 361.629396] ? lock_release+0xa30/0xa30 [ 361.633355] ? mem_cgroup_from_task+0xcb/0x1f0 [ 361.637920] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 361.642669] handle_mm_fault+0x53e/0xc80 [ 361.646718] ? __handle_mm_fault+0x4470/0x4470 [ 361.651287] ? find_vma+0x34/0x190 [ 361.654815] __do_page_fault+0x620/0xe50 [ 361.658867] ? mm_fault_error+0x380/0x380 [ 361.663003] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.668525] ? __x64_sys_clock_gettime+0x170/0x250 [ 361.673448] ? __ia32_sys_clock_settime+0x290/0x290 [ 361.678450] do_page_fault+0xf6/0x8c0 [ 361.682238] ? vmalloc_sync_all+0x30/0x30 [ 361.686372] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.691893] ? do_syscall_64+0x497/0x820 [ 361.695938] ? syscall_return_slowpath+0x5e0/0x5e0 [ 361.700853] ? syscall_return_slowpath+0x31d/0x5e0 [ 361.705766] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 361.710775] ? prepare_exit_to_usermode+0x291/0x3b0 [ 361.715779] ? page_fault+0x8/0x30 [ 361.719304] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 361.724133] ? page_fault+0x8/0x30 [ 361.727661] page_fault+0x1e/0x30 [ 361.731099] RIP: 0033:0x40e16f [ 361.734281] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 361.753168] RSP: 002b:00007ffe1f3c3010 EFLAGS: 00010206 [ 361.758517] RAX: 00007f91cf350000 RBX: 0000000000020000 RCX: 00000000004569aa [ 361.765782] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 361.773036] RBP: 00007ffe1f3c30f0 R08: ffffffffffffffff R09: 0000000000000000 [ 361.780287] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1f3c31e0 [ 361.787541] R13: 00007f91cf370700 R14: 000000000072bf2c R15: 0000000000000001 [ 361.794981] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor7,pid=23634,uid=0 [ 361.809176] memory: usage 128kB, limit 0kB, failcnt 1342 [ 361.814642] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 361.821389] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 361.827550] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 361.847064] Tasks state (memory values in pages): [ 361.851907] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 361.860787] [ 23615] 0 23615 17618 8218 126976 0 0 syz-executor2 [ 361.869813] [ 23634] 0 23634 17585 8730 126976 0 0 syz-executor7 [ 361.878848] Memory cgroup out of memory: Kill process 23634 (syz-executor7) score 8761000 or sacrifice child 12:14:12 executing program 0: r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x2, 0xfd96) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r2, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r3, 0xa, 0x8) fcntl$setlease(r3, 0x400, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) creat(&(0x7f0000000180)='./file0\x00', 0x0) setsockopt$inet_dccp_int(r0, 0x21, 0x11, &(0x7f0000000100)=0xffffffffffffbffe, 0xffffffffffffff06) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000180)=""/33) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x6) write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r6 = dup(r0) write$FUSE_LSEEK(r6, &(0x7f00000000c0)={0x18, 0x0, 0x2, {0xd4}}, 0x18) r7 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xe0, 0x200800) openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f00000002c0)={'team_slave_0\x00', {0x2, 0x4e22}}) write$P9_RFSYNC(r7, &(0x7f0000000080)={0x7, 0x33, 0x2}, 0x7) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000240)) 12:14:12 executing program 7: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x40, 0x0) getgroups(0x2, &(0x7f0000000080)=[0xee00, 0x0]) fcntl$setsig(r0, 0xa, 0x1c) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xa, 0x800, 0x3}, 0x2c) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f00000000c0)) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0xfffffffffffff001, 0x200}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000200)={0x6, 0x8000, 0x1, 0x8, r4}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) [ 361.888847] Killed process 23634 (syz-executor7) total-vm:70340kB, anon-rss:2152kB, file-rss:32768kB, shmem-rss:0kB [ 361.900346] oom_reaper: reaped process 23634 (syz-executor7), now anon-rss:0kB, file-rss:32796kB, shmem-rss:0kB [ 361.910749] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 361.910833] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 361.928674] CPU: 0 PID: 23615 Comm: syz-executor2 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 361.937159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.946509] Call Trace: [ 361.949110] dump_stack+0x1c9/0x2b4 [ 361.952748] ? dump_stack_print_info.cold.2+0x52/0x52 [ 361.957951] ? trace_hardirqs_on+0x10/0x10 [ 361.962197] dump_header+0x246/0x123c [ 361.966008] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 361.970943] ? trace_hardirqs_on+0x10/0x10 [ 361.975193] ? kasan_check_read+0x11/0x20 [ 361.979328] ? do_raw_spin_unlock+0xa7/0x2f0 [ 361.983722] ? trace_hardirqs_on+0x10/0x10 [ 361.987940] ? trace_hardirqs_on+0x10/0x10 [ 361.992160] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.997694] ? css_next_child+0x1c3/0x620 [ 362.001837] ? find_lock_task_mm+0x230/0x4d0 [ 362.006231] ? cgroup_get_tree+0xb20/0xb20 [ 362.010462] ? lock_acquire+0x1e4/0x540 [ 362.014441] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.019986] ? task_will_free_mem+0x239/0xb70 [ 362.024466] ? lock_release+0xa30/0xa30 [ 362.028447] ? oom_badness+0x7d1/0xb00 [ 362.032354] ? ___ratelimit+0x36f/0x655 [ 362.036335] ? lock_downgrade+0x8f0/0x8f0 [ 362.040471] ? kasan_check_read+0x11/0x20 [ 362.044613] ? do_raw_spin_unlock+0xa7/0x2f0 [ 362.049005] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 362.053585] ? do_raw_spin_lock+0x200/0x200 [ 362.057903] ? oom_kill_process+0x24d/0x280 [ 362.062212] ? lock_downgrade+0x8f0/0x8f0 [ 362.066345] ? trace_hardirqs_on+0xd/0x10 [ 362.070482] ? ___ratelimit+0xaa/0x655 [ 362.074366] ? idr_get_free+0x10c0/0x10c0 [ 362.078503] ? kasan_check_write+0x14/0x20 [ 362.082738] ? do_raw_spin_lock+0xc1/0x200 [ 362.087087] oom_kill_process.cold.29+0x10/0x660 [ 362.091837] ? trace_hardirqs_on+0xd/0x10 [ 362.095971] ? _raw_spin_unlock_irq+0x27/0x70 [ 362.100454] ? css_task_iter_end+0x2ce/0x490 [ 362.104859] ? oom_evaluate_task+0x540/0x540 [ 362.109259] ? trace_hardirqs_on+0xd/0x10 [ 362.113389] ? _raw_spin_unlock_irq+0x27/0x70 [ 362.117875] ? oom_badness+0xb00/0xb00 [ 362.121768] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 362.126516] ? mem_cgroup_iter_break+0x30/0x30 [ 362.131094] out_of_memory+0x86d/0x1ad0 [ 362.135064] ? oom_killer_disable+0x3a0/0x3a0 [ 362.139556] ? kasan_check_read+0x11/0x20 [ 362.143698] ? do_raw_spin_unlock+0xa7/0x2f0 [ 362.148094] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 362.152661] ? kasan_check_write+0x14/0x20 [ 362.156885] ? do_raw_spin_lock+0xc1/0x200 [ 362.161112] mem_cgroup_out_of_memory+0x15e/0x210 [ 362.165943] ? memcg_memory_event+0x40/0x40 [ 362.170251] ? page_counter_try_charge+0x1c7/0x220 [ 362.175175] try_charge+0x720/0x1680 [ 362.178891] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 362.185646] ? lock_downgrade+0x8f0/0x8f0 [ 362.189790] ? lock_release+0xa30/0xa30 [ 362.193760] ? fs_reclaim_acquire+0x20/0x20 [ 362.198092] ? lock_downgrade+0x8f0/0x8f0 [ 362.202237] ? percpu_ref_put_many+0x119/0x240 [ 362.206810] ? get_mem_cgroup_from_mm+0x209/0x440 [ 362.211725] ? get_mem_cgroup_from_page+0x190/0x190 [ 362.216736] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 362.221578] ? lock_acquire+0x1e4/0x540 [ 362.225541] mem_cgroup_try_charge+0x4ff/0xa70 [ 362.230115] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 362.235115] ? mem_cgroup_protected+0xa60/0xa60 [ 362.239766] ? up_write+0x7b/0x220 [ 362.243285] ? up_read+0x110/0x110 [ 362.246813] ? __anon_vma_prepare+0x36d/0x720 [ 362.251294] ? pmd_val+0x88/0x100 [ 362.254743] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 362.260267] mem_cgroup_try_charge_delay+0x1d/0x90 [ 362.265185] __handle_mm_fault+0x25ba/0x4470 [ 362.269582] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 362.274424] ? cap_mmap_addr+0x52/0x130 [ 362.278384] ? security_mmap_addr+0x80/0xa0 [ 362.282694] ? lock_acquire+0x1e4/0x540 [ 362.286662] ? handle_mm_fault+0x417/0xc80 [ 362.291077] ? lock_downgrade+0x8f0/0x8f0 [ 362.295217] ? lock_release+0xa30/0xa30 [ 362.299186] ? lock_release+0xa30/0xa30 [ 362.303153] ? mem_cgroup_from_task+0xcb/0x1f0 [ 362.307728] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 362.312481] handle_mm_fault+0x53e/0xc80 [ 362.316532] ? __handle_mm_fault+0x4470/0x4470 [ 362.321114] ? find_vma+0x34/0x190 [ 362.324650] __do_page_fault+0x620/0xe50 [ 362.328697] ? mm_fault_error+0x380/0x380 [ 362.332827] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.338437] ? __x64_sys_clock_gettime+0x170/0x250 [ 362.343350] ? __ia32_sys_clock_settime+0x290/0x290 [ 362.348351] do_page_fault+0xf6/0x8c0 [ 362.352135] ? vmalloc_sync_all+0x30/0x30 [ 362.356273] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.361799] ? do_syscall_64+0x497/0x820 [ 362.365851] ? syscall_return_slowpath+0x5e0/0x5e0 [ 362.370769] ? syscall_return_slowpath+0x31d/0x5e0 [ 362.375788] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 362.380794] ? prepare_exit_to_usermode+0x291/0x3b0 [ 362.385805] ? page_fault+0x8/0x30 [ 362.389343] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 362.394167] ? page_fault+0x8/0x30 [ 362.397687] page_fault+0x1e/0x30 [ 362.401138] RIP: 0033:0x40e16f [ 362.404319] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 362.423203] RSP: 002b:00007ffe1f3c3010 EFLAGS: 00010206 [ 362.428726] RAX: 00007f91cf350000 RBX: 0000000000020000 RCX: 00000000004569aa [ 362.435976] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 362.443228] RBP: 00007ffe1f3c30f0 R08: ffffffffffffffff R09: 0000000000000000 [ 362.450482] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1f3c31e0 [ 362.457735] R13: 00007f91cf370700 R14: 000000000072bf2c R15: 0000000000000001 [ 362.465206] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor2,pid=23615,uid=0 [ 362.479603] memory: usage 128kB, limit 0kB, failcnt 1562 [ 362.485090] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 362.491851] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 362.498004] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 362.517543] Tasks state (memory values in pages): [ 362.522396] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 362.531268] [ 23615] 0 23615 17618 8218 126976 0 0 syz-executor2 12:14:13 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000380)=""/4096) close(r0) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000240)=""/182) 12:14:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x5, &(0x7f0000000100)={0x0, 0x20, 0x0, @thr={&(0x7f00000005c0)="443007d89d941b46f0788f3b5acf8c225ae5abf1bed1d24837fbfeb8b4bb9c2792ef857d329ae7a89c6ee6703eb6c90d893dfeb3ee2e6703cdd2bd53262e4901788731a96166ea857ade906e2b96a6514a769c0b0a0cd81cc16d1a64371c6fe8831a977e30367fbfc6d85676835e7912e5185a3ee12e587541a357ebb0dd6e87927db78288cea8d39a9a7a1e2966abb7d4a438005b45ec3bb4c546137c7ba6038155ef92b5521e3ac2f957f23b77ae92b22641f64eaa50cfca7ee0ad288c43932731d5ff9409a23ef8788474bc112a8de1cf5e", &(0x7f00000006c0)="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"}}, &(0x7f0000000540)=0x0) timer_settime(r0, 0x1, &(0x7f00000016c0)={{0x0, 0x1c9c380}}, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) shmget(0x1, 0x3000, 0x78000401, &(0x7f0000ffa000/0x3000)=nil) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x8001) r5 = epoll_create1(0x80000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x1ff}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000440)={r6, 0x4a, "bf898a3a13a7f18ee621537ddeb2c3435c151ffdf3bdf3e306750b9ee945f5aacd2b8970ae79cb3dc20d1c7af13ac3bafbf42322d3524b1fa1fe7a8f2d347dfe5232771ad5fc77345e09"}, &(0x7f00000004c0)=0x52) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r6, 0xfffffffffffffeff}, &(0x7f0000000280)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r7, 0x800}}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@rand_addr, @dev, 0x0}, &(0x7f00000000c0)=0xc) bind$bt_hci(r4, &(0x7f0000000580)={0x1f, r8, 0x3}, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000000300)={0x9, 0x1, 0xdf1, {0x0, 0x989680}, 0x5, 0xffff}) syslog(0x0, &(0x7f00000002c0)=""/41, 0x29) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r1, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r3, 0x8922, &(0x7f0000000040)) 12:14:13 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x81000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000180)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) ptrace$setopts(0xffffffffffffffff, r2, 0x0, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000400000000000000000000000000000000e58adf5deb8b8ce033105e471a00000000010766cfa14c1f00000000000000000000000000000e000000000000000000000000000000d5a4aeab66c4d9e0000000000000000000ec51c568065e95523f00000000000000fdb10ae235c1108dcd0aa6df66253172549c61d799c2bd8f79086323509d7d7a9fbd8f1f70c9e20695aac3bfbbde64101ce9fd2191efded036e4df99465b"]) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x3, 0x2, &(0x7f00000003c0)=[{&(0x7f00000002c0)="c6e73a06a97dfb0fbcd6c682ea6f536591b6bba9c016ee0cc24c705a44d1081f334caa8fa4cd4719cb753e69005c2a", 0x2f, 0x9}, {&(0x7f0000000300)="c994ef179d06f21230a6548b50a4ca2af33ae6c2d056aa04349cd929699b6860af7b31f37fc422a2c84ff5db1e791a1459ed05430996fe48e083f15a14a1daada2c3a772ef325b729a284944e905b8f9e1432a633d19a764c33e887dd5a33e54f3f2b283fb1e1a8f66f67d81acc3351caccd6a8d476453fa4c1345d85e96deaa70162063f10600d9eb50fae4422f598464bb54d51a8eeb4b6063e79b8f56bfe7c32358cf5874bb97c571ddeb414c5d95631d34", 0xb3, 0xfff}], 0x800, &(0x7f0000000400)={[{@umask={'umask', 0x3d, 0x8000}}, {@creator={'creator', 0x3d, "ae63409c"}}]}) 12:14:13 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40044590, &(0x7f0000000380)=""/4096) close(r0) [ 362.540283] Memory cgroup out of memory: Kill process 23615 (syz-executor2) score 8249000 or sacrifice child [ 362.550282] Killed process 23615 (syz-executor2) total-vm:70472kB, anon-rss:104kB, file-rss:32768kB, shmem-rss:0kB [ 362.567447] oom_reaper: reaped process 23615 (syz-executor2), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB 12:14:13 executing program 4: r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x800000010f, 0x87, &(0x7f0000000000), &(0x7f0000000000)=0xfffffff2) pwrite64(r0, &(0x7f0000000040)="66c3f04ad7fa0a02c3ccec74afb4b2d740d0bd64872b82417e835a6cfdf5d9b384a385eb853a4bd19ae7dedd9409afe6ef5b6f004bba16ad0c35c719a66fc3c956e39beb43a94ba4e0efbfa75279cdd34e8c74fd5a6fbb3707bf1f3b0dbbbf3d7b90cab909863242ce185ef0a139877546ed866bf87c4521a0b6106329122cbd856cdb85088756b8ab79d23104e24753355871c89f4a5f2df46f445d7562566621d8226d552cf54e5a74ac54af5eab7fd7245ea9a6ae3c5a5f3f4ead", 0xbc, 0x0) 12:14:13 executing program 7: r0 = inotify_init() r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x80000002) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="ce"], 0x1) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) write$binfmt_elf64(r2, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x7ee6, 0x3, 0x80000000, 0xc45, 0x0, 0x3, 0x0, 0x4, 0x287, 0x40, 0x31f, 0x0, 0x7e, 0x38, 0x1, 0x0, 0x9, 0x8}, [{0x3, 0xbb, 0x100, 0x8, 0x7, 0x0, 0xffffffffffffff80, 0x9}, {0x3, 0x19b01f68, 0x5, 0xffff, 0x2d, 0xfffffffffffffff8, 0x3, 0x1}], "042d3e25119cbb6a95861abf5923b97f72ab80db0e18f2f6a7a14eb8434f9244d3c9ef228883fad8831d312b0c3956bb04355ad6b92b8a25f502b841e8696996a6b1d54640325fd7529ace0ff8f10b6c328de0bc30a0137d0c1370c89b3fc8ea82fff0ec3095c2c36a543ac3e54dea7778c931ba3c26239390c83ed375177ef202b661d03f80df59cf04516c26b6fa05", [[], [], [], [], [], [], [], [], []]}, 0xa40) 12:14:13 executing program 1: timer_create(0x8000000000000008, &(0x7f0000044000)={0x0, 0x0, 0x1, @thr={&(0x7f0000000280), &(0x7f00000002c0)}}, &(0x7f00008ec000)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@rand_addr, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f00000002c0)=0xe8) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, r2}, 0xc) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000100)=0x1, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000040)) getrlimit(0xd, &(0x7f0000000080)) ioctl$RTC_PIE_ON(r1, 0x7005) 12:14:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f0000000240), 0xc, &(0x7f0000001300)={&(0x7f0000000280)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8}]}, 0x28}}, 0x0) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000080)="c6e7f7e2c99aeda54847c9664219f176701a0506109e9f2d29b6157c", 0x1c, 0xffff}, {&(0x7f00000000c0)="f673a8e9b192c589309681cf7f72591e8469928cf03e09982b4c0ee5a08cb5c11db077adf3647963b0ff79add9626f15bbea306390a070fe52d6d052eafd9cb0a9ce6fdf42bbe4ed5280b69b99f48910784ec8aecd1b2ee3c8416908f6934d0c99fe2a3532cde468e4fbd5b1a890548a1cbddca9086e59a1d14941afbb695d89fd10475a90f6d605933dfbeec75913426df46c4810cf2f932a9d1306dc83c77b3f276639e7f8c1518313016e8b82a047c0bdb3", 0xb3, 0x76}, {&(0x7f00000002c0)="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", 0x1000, 0x81}, {&(0x7f0000000180)="79da16794c05344aa18e86f7a354d2613db7f84747ebd94d7fdaf2f226beafd5edd3d210b13a6d8a8e0f9ef4a8751b49b3bbf479d91451a381670ea5d1a216d8", 0x40, 0x81}], 0x11040, &(0x7f00000012c0)="2d2a25e100") [ 362.744160] hfs: can't find a HFS filesystem on dev loop5 [ 362.775703] hfs: can't find a HFS filesystem on dev loop5 12:14:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x600600, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x1709}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e23, @rand_addr=0x7}}}, 0x84) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r3 = creat(&(0x7f0000000080)='./file1\x00', 0x0) r4 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) write$FUSE_OPEN(r3, &(0x7f0000000000)={0x20}, 0x20) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000040)) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000300)={0x40, 0x3, 0x2, 0x400, 0x2, [{0x6, 0x3, 0xcecc, 0x0, 0x0, 0x2000}, {0x280000000, 0x4, 0x3, 0x0, 0x0, 0x2a0e}]}) fallocate(r4, 0x0, 0x0, 0x400f07) fcntl$setstatus(r3, 0x4, 0x4bfb) pwrite64(r3, &(0x7f0000002200)="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", 0xe00, 0x20000) 12:14:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="0a5c000000315fa4e94070b5640758126a0308c97e96680a99c65d199839722a9e258125542712") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900030500000000000000001c140000000000003dcdc906"], 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 12:14:13 executing program 7: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)="63927561636370cd9a096978742e05006167655f706572720000000000000000", 0xf0, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0x9, 0xdc, 0x1}) 12:14:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000eed000)={0x2, 0x1}, 0x10) syz_emit_ethernet(0x423, &(0x7f0000000cc0)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}, "b441d632cdbbcb211363807aec73d3883762a61dc02d349bfa3ac974b987aa7fb97eb324d594fbbb77bab759418aa8d451d921e8f5d2cf2b08292111701192e97cac366dd3eb2e0fb039e58314ef4709c5f3556db6a1ab6b4fb2bdd83cdc26e8395ec4984ec3faf71a611d1569545d654cded93be827a85188b803c19c1b56aab522862a718b81e512b49690994d3425e33bd93f0e744c66a083c1f9f1bd7bb8f9e123c08f3f041ed3fdc058136cf0071a47cc0e38720a12e11e842a7b5b26dff07f578fdb9a7b14662a625c1ee76c41ccb2b1fc6376aa718e1067b9e4af511ef5b360dbfad326108bb033db193dab27974eb8c462739eaee51d87f31c516e7e391073770da3202e02c41a7277c847df24bd5b0a7ab6e252f3c8ebf00688cc55311d887e8bfd95a7f4c6a126af3fe26714ddb869c66d18f870631bbd497e8a06881b754ecdcdd0dcffc51cd52a6b560f8d64b63a1674745edc5f53b18a8ffcc5c2fbc4d2bbcc2faf3c189d9b36c0655d1394f5c127ec86b8a764a87b546c2b6ac37d0a8ec3edd7cda6f930570763dbdc0640d219749bd57c7c89eaadfdae41d654a46b17be069a32a7d94d29b612fbe61b8bd11a2d10ba5d4ac7014fc0465c3f144598bd1f913343e7293711040eee0ae8df1e49f04ed1037d4b742aed0e932116060aaf6b985238d2e10fb5b11d19d7801befed4833287d96a85a7cdd9e211a672760335655576fc0fa0336621c2b2b1018ef71bb5077c67ee5fa8d479d6776013363e98b1f1213712be7e47549b6035459008c509f0f983130a451531381ee3c1ab9e1cbb8e558b56ca1a70939389addc5f9632b37ff3f634abb504bb0be0a51649683f6e29588c15cda40255e173328681884ffef6729e9058c5623e1401fdcc7b8cb5623a8fd725fbeea05fc417c44e46500619218dff7c70aa068994c58883cada505a2aa85b6620dfe9c45b707c9aa1222b86972eae564b28a05ddfa3545df231fde2707d4bf67dc6ba41daba91dee8081e5c7e2bcfbebebd42d5ab8a32d6e098fd57233e3b813dc0d772134775def451823b7fef2bc93da01722cd613b9a3db7e2d4c51fb7b56006ee9cea53b62343599a56167388d45247f9289fb1cab67a7cb0c3665ddf1e1411875b4de3428b32fc6603691a023d8e4cb93c667acb7b535fb5f77af9a49640cbe8ffe3a193cf4df1b556a67cb753c60bdf978b871aa513c07074c6602037ebc32199290e3c7ac6f103ad9358951ad4de0c8f1b34951b0e6a48295975cf08b2c3c95064855fc95317e386f1c18608d1d08699003c998b93332cd316f17a5139d350cbfa9dabc3f77c4197a0186e50913978e980a7a028e7ccdeee718af028200e94a6b3a0ec93ba14b0c64dfaf3967e230d8cf876f26287d436ebc9588b52b43f2380836bfe3"}}}}}, 0x0) sendto$inet(r1, &(0x7f000029b000), 0x287, 0x0, &(0x7f0000778000)={0x2, 0x1, @loopback}, 0x10) poll(&(0x7f0000000040)=[{r1}, {r1}], 0x2, 0x1) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x100, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000080)) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={r3, @multicast2, @loopback}, 0xc) [ 363.514237] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 363.523658] CPU: 0 PID: 23669 Comm: syz-executor3 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 363.532157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.541500] Call Trace: [ 363.544084] dump_stack+0x1c9/0x2b4 [ 363.547710] ? dump_stack_print_info.cold.2+0x52/0x52 [ 363.552906] ? trace_hardirqs_on+0x10/0x10 [ 363.557144] ? lock_downgrade+0x8f0/0x8f0 [ 363.561306] dump_header+0x246/0x123c [ 363.565093] ? percpu_ref_put_many+0x131/0x240 [ 363.569661] ? trace_hardirqs_on+0x10/0x10 [ 363.573880] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 363.578805] ? trace_hardirqs_on+0x10/0x10 [ 363.583029] ? mem_cgroup_iter+0x517/0x10c0 [ 363.587336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.592855] ? css_next_child+0x1c3/0x620 [ 363.596994] ? trace_hardirqs_on+0x10/0x10 [ 363.601211] ? trace_hardirqs_on+0x10/0x10 [ 363.605438] ? trace_hardirqs_on+0x10/0x10 [ 363.609659] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.615177] ? css_next_child+0x1c3/0x620 [ 363.619307] ? find_lock_task_mm+0x230/0x4d0 [ 363.623717] ? cgroup_get_tree+0xb20/0xb20 [ 363.627944] ? lock_acquire+0x1e4/0x540 [ 363.631903] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.637431] ? task_will_free_mem+0x239/0xb70 [ 363.641907] ? lock_release+0xa30/0xa30 [ 363.645860] ? oom_badness+0x7d1/0xb00 [ 363.649741] ? ___ratelimit+0x36f/0x655 [ 363.653699] ? lock_downgrade+0x8f0/0x8f0 [ 363.657835] ? kasan_check_read+0x11/0x20 12:14:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x80000001, 0x0, &(0x7f0000000080), 0x1014001, &(0x7f00000002c0)=ANY=[@ANYBLOB="0078a221e2587e1e076acc3157e69873b8985227f258adcb60b38c43774a3802c92d9fe821729133e52d2b7dc0306eb9931634700776b95f2372624d19081552e3b40ee7e7b715dd8ed0ba9d96fdc9c3e2748a2c4281d594a3883192637f2ad730aecbebfebb495c2ff038d65dcccf8364d82f9db99c0a318f173df7c21b99ec"]) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000140)={0x1000, {{0xa, 0x4e21, 0x8000, @mcast2, 0x3}}, {{0xa, 0x4e20, 0x8, @remote, 0x1}}}, 0x108) fcntl$getflags(r0, 0x0) 12:14:14 executing program 4: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x40080) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x240402, 0x0) getsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 363.661975] ? do_raw_spin_unlock+0xa7/0x2f0 [ 363.666375] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 363.670937] ? do_raw_spin_lock+0x200/0x200 [ 363.675239] ? oom_kill_process+0x24d/0x280 [ 363.679547] ? lock_downgrade+0x8f0/0x8f0 [ 363.683689] ? trace_hardirqs_on+0xd/0x10 [ 363.687830] ? ___ratelimit+0xaa/0x655 [ 363.691812] ? idr_get_free+0x10c0/0x10c0 [ 363.695961] ? kasan_check_write+0x14/0x20 [ 363.700195] ? do_raw_spin_lock+0xc1/0x200 [ 363.704447] oom_kill_process.cold.29+0x10/0x660 [ 363.709190] ? trace_hardirqs_on+0xd/0x10 [ 363.713320] ? _raw_spin_unlock_irq+0x27/0x70 [ 363.717797] ? css_task_iter_end+0x2ce/0x490 [ 363.722199] ? oom_evaluate_task+0x540/0x540 [ 363.726596] ? trace_hardirqs_on+0xd/0x10 [ 363.730731] ? _raw_spin_unlock_irq+0x27/0x70 [ 363.735235] ? oom_badness+0xb00/0xb00 [ 363.739115] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 363.743870] ? mem_cgroup_iter_break+0x30/0x30 [ 363.748455] out_of_memory+0x86d/0x1ad0 [ 363.752420] ? oom_killer_disable+0x3a0/0x3a0 [ 363.756896] ? kasan_check_read+0x11/0x20 [ 363.761027] ? do_raw_spin_unlock+0xa7/0x2f0 [ 363.765427] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 363.770009] ? kasan_check_write+0x14/0x20 [ 363.774232] ? do_raw_spin_lock+0xc1/0x200 [ 363.778460] mem_cgroup_out_of_memory+0x15e/0x210 [ 363.783292] ? memcg_memory_event+0x40/0x40 [ 363.787602] ? page_counter_try_charge+0x1c7/0x220 [ 363.792515] try_charge+0x720/0x1680 [ 363.796324] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 363.803074] ? lock_downgrade+0x8f0/0x8f0 [ 363.807220] ? lock_release+0xa30/0xa30 [ 363.811188] ? __anon_vma_prepare+0xc4/0x720 [ 363.815580] ? handle_mm_fault+0x53e/0xc80 [ 363.819808] ? fs_reclaim_acquire+0x20/0x20 [ 363.824109] ? lock_downgrade+0x8f0/0x8f0 [ 363.828238] ? percpu_ref_put_many+0x119/0x240 [ 363.832803] ? get_mem_cgroup_from_mm+0x209/0x440 [ 363.837627] ? get_mem_cgroup_from_page+0x190/0x190 [ 363.842633] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 363.847469] ? lock_acquire+0x1e4/0x540 [ 363.851430] mem_cgroup_try_charge+0x4ff/0xa70 [ 363.855997] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 363.860994] ? mem_cgroup_protected+0xa60/0xa60 [ 363.865648] ? up_write+0x7b/0x220 [ 363.869171] ? up_read+0x110/0x110 [ 363.872701] ? __anon_vma_prepare+0x36d/0x720 [ 363.877206] ? pmd_val+0x88/0x100 [ 363.880668] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 363.886194] mem_cgroup_try_charge_delay+0x1d/0x90 [ 363.891115] __handle_mm_fault+0x25ba/0x4470 [ 363.895523] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 363.900352] ? cap_mmap_addr+0x52/0x130 [ 363.904311] ? userfaultfd_unmap_complete+0x32a/0x510 [ 363.909498] ? security_mmap_addr+0x80/0xa0 [ 363.913828] ? lock_acquire+0x1e4/0x540 [ 363.917786] ? handle_mm_fault+0x417/0xc80 [ 363.922020] ? lock_downgrade+0x8f0/0x8f0 [ 363.926160] ? lock_release+0xa30/0xa30 [ 363.930123] ? lock_release+0xa30/0xa30 [ 363.934081] ? down_read_killable+0x200/0x200 [ 363.938574] ? mem_cgroup_from_task+0xcb/0x1f0 [ 363.943154] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 363.947906] handle_mm_fault+0x53e/0xc80 [ 363.951951] ? __handle_mm_fault+0x4470/0x4470 [ 363.956517] ? find_vma+0x34/0x190 [ 363.960051] __do_page_fault+0x620/0xe50 [ 363.964100] ? mm_fault_error+0x380/0x380 [ 363.968230] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.973752] ? __x64_sys_clock_gettime+0x170/0x250 [ 363.978667] ? __ia32_sys_clock_settime+0x290/0x290 [ 363.983670] do_page_fault+0xf6/0x8c0 [ 363.987451] ? vmalloc_sync_all+0x30/0x30 [ 363.991585] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.997110] ? do_syscall_64+0x497/0x820 [ 364.001159] ? syscall_slow_exit_work+0x500/0x500 [ 364.005995] ? syscall_return_slowpath+0x5e0/0x5e0 [ 364.010910] ? syscall_return_slowpath+0x31d/0x5e0 [ 364.015832] ? prepare_exit_to_usermode+0x291/0x3b0 [ 364.020831] ? page_fault+0x8/0x30 [ 364.024352] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 364.029175] ? page_fault+0x8/0x30 [ 364.032692] page_fault+0x1e/0x30 [ 364.036134] RIP: 0033:0x40e16f [ 364.039308] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 364.058205] RSP: 002b:00007ffd8c7205b0 EFLAGS: 00010206 [ 364.063569] RAX: 00007f3313243000 RBX: 0000000000020000 RCX: 00000000004569aa [ 364.070824] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 364.078079] RBP: 00007ffd8c720690 R08: ffffffffffffffff R09: 0000000000000000 [ 364.085345] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8c720780 [ 364.092595] R13: 00007f3313263700 R14: 000000000072bf2c R15: 0000000000000001 [ 364.100260] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor3,pid=23669,uid=0 [ 364.114692] memory: usage 112kB, limit 0kB, failcnt 1579 [ 364.120183] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 364.126966] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 364.133142] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 364.152670] Tasks state (memory values in pages): [ 364.157517] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 364.166399] [ 23669] 0 23669 17618 8221 126976 0 0 syz-executor3 [ 364.175430] [ 23678] 0 23678 17618 8218 126976 0 0 syz-executor2 [ 364.184450] Memory cgroup out of memory: Kill process 23669 (syz-executor3) score 8252000 or sacrifice child [ 364.194459] Killed process 23669 (syz-executor3) total-vm:70472kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 364.205441] oom_reaper: reaped process 23669 (syz-executor3), now anon-rss:0kB, file-rss:32016kB, shmem-rss:0kB [ 364.210554] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 364.225177] CPU: 0 PID: 23678 Comm: syz-executor2 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 364.233663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.243608] Call Trace: [ 364.246182] dump_stack+0x1c9/0x2b4 [ 364.249793] ? dump_stack_print_info.cold.2+0x52/0x52 [ 364.254989] ? trace_hardirqs_on+0x10/0x10 [ 364.259213] ? do_raw_spin_unlock+0xa7/0x2f0 [ 364.263604] dump_header+0x246/0x123c [ 364.267474] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 364.272402] ? trace_hardirqs_on+0x10/0x10 [ 364.276619] ? trace_hardirqs_on+0x10/0x10 [ 364.280862] ? trace_hardirqs_on+0x10/0x10 [ 364.285101] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.290642] ? css_next_child+0x1c3/0x620 [ 364.294774] ? find_lock_task_mm+0x230/0x4d0 [ 364.299180] ? cgroup_get_tree+0xb20/0xb20 [ 364.303416] ? lock_acquire+0x1e4/0x540 [ 364.307380] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.312903] ? task_will_free_mem+0x239/0xb70 [ 364.317390] ? lock_release+0xa30/0xa30 [ 364.321356] ? oom_badness+0x7d1/0xb00 [ 364.325232] ? ___ratelimit+0x36f/0x655 [ 364.329198] ? lock_downgrade+0x8f0/0x8f0 [ 364.333344] ? kasan_check_read+0x11/0x20 [ 364.337482] ? do_raw_spin_unlock+0xa7/0x2f0 [ 364.341882] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 364.346444] ? do_raw_spin_lock+0x200/0x200 [ 364.350752] ? oom_kill_process+0x24d/0x280 [ 364.355056] ? lock_downgrade+0x8f0/0x8f0 [ 364.359186] ? trace_hardirqs_on+0xd/0x10 [ 364.363324] ? ___ratelimit+0xaa/0x655 [ 364.367207] ? idr_get_free+0x10c0/0x10c0 [ 364.371348] ? kasan_check_write+0x14/0x20 [ 364.375567] ? do_raw_spin_lock+0xc1/0x200 [ 364.379788] oom_kill_process.cold.29+0x10/0x660 [ 364.384536] ? trace_hardirqs_on+0xd/0x10 [ 364.388670] ? _raw_spin_unlock_irq+0x27/0x70 [ 364.393169] ? css_task_iter_end+0x2ce/0x490 [ 364.397587] ? oom_evaluate_task+0x540/0x540 [ 364.401987] ? trace_hardirqs_on+0xd/0x10 [ 364.406128] ? _raw_spin_unlock_irq+0x27/0x70 [ 364.410604] ? oom_badness+0xb00/0xb00 [ 364.414472] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 364.419210] ? mem_cgroup_iter_break+0x30/0x30 [ 364.423781] out_of_memory+0x86d/0x1ad0 [ 364.427837] ? oom_killer_disable+0x3a0/0x3a0 [ 364.432331] ? do_raw_spin_unlock+0xa7/0x2f0 [ 364.436732] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 364.441308] ? kasan_check_write+0x14/0x20 [ 364.445548] ? do_raw_spin_lock+0xc1/0x200 [ 364.449778] mem_cgroup_out_of_memory+0x15e/0x210 [ 364.454628] ? memcg_memory_event+0x40/0x40 [ 364.458949] ? page_counter_try_charge+0x1c7/0x220 [ 364.463888] try_charge+0x720/0x1680 [ 364.467600] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 364.474342] ? lock_downgrade+0x8f0/0x8f0 [ 364.478493] ? lock_release+0xa30/0xa30 [ 364.482452] ? __anon_vma_prepare+0xc4/0x720 [ 364.486843] ? handle_mm_fault+0x53e/0xc80 [ 364.491060] ? fs_reclaim_acquire+0x20/0x20 [ 364.495367] ? lock_downgrade+0x8f0/0x8f0 [ 364.499512] ? percpu_ref_put_many+0x119/0x240 [ 364.504089] ? get_mem_cgroup_from_mm+0x209/0x440 [ 364.508928] ? get_mem_cgroup_from_page+0x190/0x190 [ 364.513932] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 364.518758] ? lock_acquire+0x1e4/0x540 [ 364.522725] mem_cgroup_try_charge+0x4ff/0xa70 [ 364.527295] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 364.532298] ? mem_cgroup_protected+0xa60/0xa60 [ 364.536960] ? up_write+0x7b/0x220 [ 364.540480] ? up_read+0x110/0x110 [ 364.544011] ? __anon_vma_prepare+0x36d/0x720 [ 364.548491] ? pmd_val+0x88/0x100 [ 364.551928] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 364.557452] mem_cgroup_try_charge_delay+0x1d/0x90 [ 364.562377] __handle_mm_fault+0x25ba/0x4470 [ 364.566776] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 364.571610] ? cap_mmap_addr+0x52/0x130 [ 364.575572] ? userfaultfd_unmap_complete+0x32a/0x510 [ 364.580760] ? security_mmap_addr+0x80/0xa0 [ 364.585070] ? lock_acquire+0x1e4/0x540 [ 364.589041] ? handle_mm_fault+0x417/0xc80 [ 364.593265] ? lock_downgrade+0x8f0/0x8f0 [ 364.597398] ? lock_release+0xa30/0xa30 [ 364.601354] ? lock_release+0xa30/0xa30 [ 364.605317] ? down_read_killable+0x200/0x200 [ 364.609812] ? mem_cgroup_from_task+0xcb/0x1f0 [ 364.614389] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 364.619136] handle_mm_fault+0x53e/0xc80 [ 364.623185] ? __handle_mm_fault+0x4470/0x4470 [ 364.627753] ? find_vma+0x34/0x190 [ 364.631287] __do_page_fault+0x620/0xe50 [ 364.635349] ? mm_fault_error+0x380/0x380 [ 364.639502] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.645020] ? __x64_sys_clock_gettime+0x170/0x250 [ 364.649939] ? __ia32_sys_clock_settime+0x290/0x290 [ 364.654949] do_page_fault+0xf6/0x8c0 [ 364.658732] ? vmalloc_sync_all+0x30/0x30 [ 364.662862] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.668402] ? do_syscall_64+0x497/0x820 [ 364.672444] ? syscall_slow_exit_work+0x500/0x500 [ 364.677277] ? syscall_return_slowpath+0x5e0/0x5e0 [ 364.682196] ? syscall_return_slowpath+0x31d/0x5e0 [ 364.687132] ? prepare_exit_to_usermode+0x291/0x3b0 [ 364.692136] ? page_fault+0x8/0x30 [ 364.695665] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 364.700500] ? page_fault+0x8/0x30 [ 364.704026] page_fault+0x1e/0x30 [ 364.707460] RIP: 0033:0x40e16f [ 364.710642] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 364.729534] RSP: 002b:00007ffe1f3c3010 EFLAGS: 00010206 [ 364.735327] RAX: 00007f91cf350000 RBX: 0000000000020000 RCX: 00000000004569aa [ 364.742584] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 364.749860] RBP: 00007ffe1f3c30f0 R08: ffffffffffffffff R09: 0000000000000000 [ 364.757139] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1f3c31e0 [ 364.764408] R13: 00007f91cf370700 R14: 000000000072bf2c R15: 0000000000000001 [ 364.771818] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor2,pid=23678,uid=0 [ 364.786089] memory: usage 112kB, limit 0kB, failcnt 1588 [ 364.791586] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 364.798355] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 364.804525] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 364.824079] Tasks state (memory values in pages): [ 364.828938] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 364.837838] [ 23678] 0 23678 17618 8218 126976 0 0 syz-executor2 [ 364.846870] Memory cgroup out of memory: Kill process 23678 (syz-executor2) score 8249000 or sacrifice child [ 364.856984] Killed process 23678 (syz-executor2) total-vm:70472kB, anon-rss:104kB, file-rss:32768kB, shmem-rss:0kB [ 364.867991] oom_reaper: reaped process 23678 (syz-executor2), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB 12:14:15 executing program 0: r0 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x4d) splice(r0, &(0x7f0000000000), r0, &(0x7f00000000c0), 0x80000001, 0xa) set_thread_area(&(0x7f0000000040)={0xfffffffffffffffb, 0x120001800, 0xffffffffffffffff, 0xffff, 0x7f, 0x6, 0x2, 0x4, 0x5c1b, 0xffffffffffff0000}) ioctl$KVM_RUN(r0, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="8600000018859234a709178febf159b6a0442a41ad7fdbde2ce5065ee8ba62e43ef092f5721b0158b542201a8fd3aaae6a0bfde863e3edf2e7e21ab3a6846df45816a9fb9f6167f9d0e5b3f9b4babcc8170e7c4380b5da9de2688a4a50cc8dc3824f234f7202499dd01f5cb0494d09aae5ba9b9f091bf2ea69ac42f57d63337ada259749d8863dcf1ae4"], &(0x7f0000000200)=0x8e) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={r1, 0xffffffffffff0001}, 0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) mincore(&(0x7f0000001000/0x4000)=nil, 0x4000, &(0x7f0000000100)=""/6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) 12:14:15 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000000)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x2c) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r1, 0x81}, &(0x7f00000000c0)=0x8) syz_emit_ethernet(0x66, &(0x7f0000001480)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv6={0x86dd, {0x0, 0x6, "474df1", 0x30, 0x0, 0x0, @mcast1, @loopback, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "dd4c4f", 0x0, 0x0, 0x0, @mcast1, @loopback}}}}}}}, 0x0) 12:14:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000200)='./file0/file0\x00', 0x3bffa, 0x138) truncate(&(0x7f0000000000)='./file0/file0\x00', 0x7) fcntl$setstatus(r0, 0x4, 0x4800) io_setup(0x6, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}]) 12:14:15 executing program 1: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000180)={0x5, 0xfc, 0xfffffffffffffffc, 0x1, 0x7ff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x40000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000040)={0x3, 0xffffffff, 0xd}) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000001c0)=""/44) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000080)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xffffffffffffffff}}) 12:14:15 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) io_setup(0x58, &(0x7f0000000140)=0x0) r1 = perf_event_open$cgroup(&(0x7f0000000240)={0x7, 0x70, 0x3, 0x5, 0x5, 0x200, 0x0, 0x4, 0x80, 0x2, 0x995, 0xfffffffffffffff7, 0x7ff, 0x7, 0x2f, 0xe0, 0x40, 0xfff, 0x8, 0x8001, 0x7, 0x792f0ae7, 0x4, 0x0, 0x2, 0x1, 0xfe, 0xef5, 0x320, 0x0, 0x4, 0x83f, 0x3, 0xcc, 0x16, 0x1, 0x6, 0x6, 0x0, 0x2, 0x1, @perf_config_ext={0x22a5bacd, 0x2}, 0x200, 0x7, 0x6, 0x0, 0x2, 0x0, 0x1}, 0xffffffffffffff9c, 0x4, 0xffffffffffffff9c, 0x4) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x8000, 0x0) io_submit(r0, 0x1, &(0x7f00000013c0)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x8, 0x200, r1, &(0x7f00000002c0)="f13037712d30e3833797752d5fddddef1f503e9f783b03614524a36da4200717420e41693ef1ea8a3b9653c9610a0d778e6797f80e820369c6b10f8d8c2586dd5680a4a4c9a1b21e76d3ae34c6c04bac51441d0f47e8c000bd81b3ccbd", 0x5d, 0x726, 0x0, 0x0, r2}]) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0//ile0\x00', 0x20100, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) r6 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r6, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(r6, 0x80084503, &(0x7f0000000380)=""/4096) close(r3) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000040)=0x3) 12:14:15 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f000074fffc)=0x3, 0x348) r1 = memfd_create(&(0x7f0000000080)='@vboxnet1/mime_type\x00', 0x3) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x7ff, 0x6, 0x5, 0x81, 0xb82}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={r2, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}]}, &(0x7f00000001c0)=0x10) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xff, @dev={0xfe, 0x80, [], 0x12}}, 0xfffffffffffffeee) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendto$inet6(r0, &(0x7f0000000080), 0xfffffffffffffdb0, 0x20000005, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 12:14:15 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40044590, &(0x7f0000000380)=""/4096) close(r0) 12:14:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025c3f0a00145f8f764070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x85, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13b}}, 0x20) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) dup2(r3, r1) [ 364.964273] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 364.988639] FAT-fs (loop7): Directory bread(block 128) failed [ 365.002432] FAT-fs (loop7): Directory bread(block 129) failed 12:14:15 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$FUSE_IOCTL(r1, &(0x7f0000000000)={0x20, 0x0, 0x7, {0x6, 0x0, 0xfffffffffffffe00, 0x2}}, 0x20) waitid(0x1, r0, &(0x7f0000000040), 0x81000008, &(0x7f0000000180)) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0x77359400}}], 0x30) vmsplice(r2, &(0x7f00000004c0)=[{&(0x7f0000000480)="06", 0x1}], 0x1, 0x0) dup2(r2, r1) dup2(r1, r3) 12:14:15 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000600000008"]) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x121000, 0x0) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f00000004c0)="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") [ 365.010136] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 365.033810] FAT-fs (loop7): Directory bread(block 130) failed [ 365.039787] FAT-fs (loop7): Directory bread(block 131) failed 12:14:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x8, 0x1a24e0fc2c2b8add) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{}, {}, {}]}) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) getsockopt$sock_buf(r1, 0x1, 0x3f, &(0x7f0000000fc0)=""/4096, &(0x7f0000000040)=0x1000) [ 365.068677] FAT-fs (loop7): Directory bread(block 132) failed [ 365.074882] FAT-fs (loop7): Directory bread(block 133) failed [ 365.080977] FAT-fs (loop7): Directory bread(block 134) failed [ 365.087012] FAT-fs (loop7): Directory bread(block 135) failed [ 365.093121] FAT-fs (loop7): Directory bread(block 136) failed [ 365.115874] FAT-fs (loop7): Directory bread(block 137) failed 12:14:15 executing program 0: rt_sigaction(0x31, &(0x7f0000000000)={0x1, {0x8b}, 0x10000003, 0xd770}, &(0x7f0000000040), 0xfffffffffffffee1, &(0x7f00000000c0)) syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f0000000840)={[{@sunit={'sunit', 0x3d, 0xffff}}, {@swidth={'swidth', 0x3d, 0x1}}]}) 12:14:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt(r0, 0x0, 0x5, &(0x7f0000000100), 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x193000) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r0}) pipe(&(0x7f00000001c0)) 12:14:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x3ff, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000014000/0x14000)=nil, 0x14000, 0x9, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = dup(r1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100), 0x4) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) close(r1) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080), 0x10) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)='\x00G') close(r3) close(r1) [ 365.154158] attempt to access beyond end of device [ 365.159327] loop7: rw=2049, want=310, limit=128 12:14:15 executing program 6: r0 = socket$xdp(0x2c, 0x3, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) r1 = socket$inet6(0xa, 0x1000000000001, 0xfffffffffffffffe) ioctl(r1, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) fcntl$setlease(r1, 0x400, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) 12:14:15 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) getpgrp(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000080)={0x7b, 0x0, [0x6, 0x1, 0x8, 0xfffffffffffffff9]}) ioctl$KVM_KVMCLOCK_CTRL(r3, 0x4040ae9e) [ 365.208803] attempt to access beyond end of device [ 365.213955] loop7: rw=1, want=310, limit=128 12:14:15 executing program 5: unlink(&(0x7f0000000040)='./file0\x00') r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x400c000, &(0x7f000083b000)={0x2, 0x4e20}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)="6e65742f74637000c4bc40a0d2297dcc3d3dfb249d021bd22053c725bf73b0ad187c799b9b353fab2d13768179fbae768a14b51de2e1b01f7d5e4f52c1cf8c15a94761608bedeb5b53698407d2caf0dc0ea94ab6ee2f42d3d84faa29e9c02e3b2142d4c2107e433f210de0e5dd26662a23dc096b0218e0f8c1b3f0e596d6d05f1ff2afc36ba80d227ca16bd4d4d4585bc33ab29258fe1d3700000000000800000000000000000000000000000000000000000000") sendfile(r1, r2, &(0x7f0000000000)=0x3, 0xff) 12:14:15 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) fcntl$notify(r1, 0x402, 0xc) unshare(0x400) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000280)={0x175, 0x3, 0x0, {0x4, 0x154, 0x0, "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"}}, 0x175) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) fcntl$notify(r1, 0x402, 0x24) [ 365.259413] XFS (loop0): stripe width (1) must be a multiple of the stripe unit (65535) 12:14:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)=ANY=[@ANYBLOB="9abd61c0020000de000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000010000000000000000000000000000000000000000"]) 12:14:15 executing program 6: socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x202000000802, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='syscall\x00') sendfile(r0, r1, &(0x7f0000000340)=0x201, 0x7ffffffe) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x54) [ 365.869417] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 365.878899] CPU: 0 PID: 23767 Comm: syz-executor2 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 365.887387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.896738] Call Trace: [ 365.899317] dump_stack+0x1c9/0x2b4 [ 365.902939] ? dump_stack_print_info.cold.2+0x52/0x52 [ 365.908122] ? trace_hardirqs_on+0x10/0x10 [ 365.912345] dump_header+0x246/0x123c [ 365.916156] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 365.921082] ? trace_hardirqs_on+0x10/0x10 [ 365.925300] ? kasan_check_read+0x11/0x20 [ 365.929437] ? do_raw_spin_unlock+0xa7/0x2f0 [ 365.933833] ? trace_hardirqs_on+0x10/0x10 [ 365.938055] ? trace_hardirqs_on+0x10/0x10 [ 365.942276] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.947797] ? css_next_child+0x1c3/0x620 [ 365.951929] ? find_lock_task_mm+0x230/0x4d0 [ 365.956339] ? cgroup_get_tree+0xb20/0xb20 [ 365.962738] ? lock_acquire+0x1e4/0x540 [ 365.966711] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.972232] ? task_will_free_mem+0x239/0xb70 [ 365.976720] ? lock_release+0xa30/0xa30 [ 365.980682] ? oom_badness+0x7d1/0xb00 [ 365.984565] ? ___ratelimit+0x36f/0x655 [ 365.988535] ? lock_downgrade+0x8f0/0x8f0 [ 365.992667] ? kasan_check_read+0x11/0x20 [ 365.996804] ? do_raw_spin_unlock+0xa7/0x2f0 [ 366.001209] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 366.005774] ? do_raw_spin_lock+0x200/0x200 [ 366.010080] ? oom_kill_process+0x24d/0x280 [ 366.014393] ? lock_downgrade+0x8f0/0x8f0 [ 366.018528] ? trace_hardirqs_on+0xd/0x10 [ 366.022671] ? ___ratelimit+0xaa/0x655 [ 366.026544] ? idr_get_free+0x10c0/0x10c0 [ 366.030682] ? kasan_check_write+0x14/0x20 [ 366.034898] ? do_raw_spin_lock+0xc1/0x200 [ 366.039126] oom_kill_process.cold.29+0x10/0x660 [ 366.043866] ? trace_hardirqs_on+0xd/0x10 [ 366.048002] ? _raw_spin_unlock_irq+0x27/0x70 [ 366.052481] ? css_task_iter_end+0x2ce/0x490 [ 366.056872] ? oom_evaluate_task+0x540/0x540 [ 366.061263] ? trace_hardirqs_on+0xd/0x10 [ 366.065391] ? _raw_spin_unlock_irq+0x27/0x70 [ 366.069869] ? oom_badness+0xb00/0xb00 [ 366.073748] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 366.078495] ? mem_cgroup_iter_break+0x30/0x30 [ 366.083064] out_of_memory+0x86d/0x1ad0 [ 366.087024] ? oom_killer_disable+0x3a0/0x3a0 [ 366.091502] ? kasan_check_read+0x11/0x20 [ 366.095629] ? do_raw_spin_unlock+0xa7/0x2f0 [ 366.100018] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 366.104592] ? kasan_check_write+0x14/0x20 [ 366.108812] ? do_raw_spin_lock+0xc1/0x200 [ 366.113042] mem_cgroup_out_of_memory+0x15e/0x210 [ 366.117877] ? memcg_memory_event+0x40/0x40 [ 366.122193] ? page_counter_try_charge+0x1c7/0x220 [ 366.127120] try_charge+0x720/0x1680 [ 366.130822] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 366.137557] ? lock_downgrade+0x8f0/0x8f0 [ 366.141690] ? lock_release+0xa30/0xa30 [ 366.145646] ? __anon_vma_prepare+0xc4/0x720 [ 366.150036] ? handle_mm_fault+0x53e/0xc80 [ 366.154253] ? fs_reclaim_acquire+0x20/0x20 [ 366.158555] ? lock_downgrade+0x8f0/0x8f0 [ 366.162685] ? percpu_ref_put_many+0x119/0x240 [ 366.167253] ? get_mem_cgroup_from_mm+0x209/0x440 [ 366.172089] ? get_mem_cgroup_from_page+0x190/0x190 [ 366.177097] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 366.181934] ? lock_acquire+0x1e4/0x540 [ 366.185910] mem_cgroup_try_charge+0x4ff/0xa70 [ 366.190551] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 366.195564] ? mem_cgroup_protected+0xa60/0xa60 [ 366.200218] ? up_write+0x7b/0x220 [ 366.203743] ? up_read+0x110/0x110 [ 366.207280] ? __anon_vma_prepare+0x36d/0x720 [ 366.211763] ? pmd_val+0x88/0x100 [ 366.215204] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 366.220732] mem_cgroup_try_charge_delay+0x1d/0x90 [ 366.225651] __handle_mm_fault+0x25ba/0x4470 [ 366.230047] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 366.234872] ? cap_mmap_addr+0x52/0x130 [ 366.238834] ? userfaultfd_unmap_complete+0x32a/0x510 [ 366.244007] ? security_mmap_addr+0x80/0xa0 [ 366.248322] ? lock_acquire+0x1e4/0x540 [ 366.252287] ? handle_mm_fault+0x417/0xc80 [ 366.256528] ? lock_downgrade+0x8f0/0x8f0 [ 366.260663] ? lock_release+0xa30/0xa30 [ 366.264623] ? lock_release+0xa30/0xa30 [ 366.268600] ? down_read_killable+0x200/0x200 [ 366.273093] ? mem_cgroup_from_task+0xcb/0x1f0 [ 366.277665] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 366.282413] handle_mm_fault+0x53e/0xc80 [ 366.286473] ? __handle_mm_fault+0x4470/0x4470 [ 366.291043] ? find_vma+0x34/0x190 [ 366.294580] __do_page_fault+0x620/0xe50 [ 366.298641] ? mm_fault_error+0x380/0x380 [ 366.302776] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.308300] ? __x64_sys_clock_gettime+0x170/0x250 [ 366.313221] ? __ia32_sys_clock_settime+0x290/0x290 [ 366.318221] do_page_fault+0xf6/0x8c0 [ 366.322006] ? vmalloc_sync_all+0x30/0x30 [ 366.326139] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.331665] ? do_syscall_64+0x497/0x820 [ 366.335726] ? syscall_slow_exit_work+0x500/0x500 [ 366.340562] ? syscall_return_slowpath+0x5e0/0x5e0 [ 366.345675] ? syscall_return_slowpath+0x31d/0x5e0 [ 366.350596] ? prepare_exit_to_usermode+0x291/0x3b0 [ 366.355601] ? page_fault+0x8/0x30 [ 366.359133] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 366.363994] ? page_fault+0x8/0x30 [ 366.367525] page_fault+0x1e/0x30 [ 366.370977] RIP: 0033:0x40e16f [ 366.374155] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 366.393049] RSP: 002b:00007ffe1f3c3010 EFLAGS: 00010206 [ 366.398403] RAX: 00007f91cf350000 RBX: 0000000000020000 RCX: 00000000004569aa [ 366.405659] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 366.412914] RBP: 00007ffe1f3c30f0 R08: ffffffffffffffff R09: 0000000000000000 [ 366.420179] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1f3c31e0 [ 366.427449] R13: 00007f91cf370700 R14: 000000000072bf2c R15: 0000000000000001 [ 366.435015] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor3,pid=23766,uid=0 [ 366.449416] memory: usage 112kB, limit 0kB, failcnt 1605 [ 366.454963] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 366.461787] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 366.467946] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 366.487490] Tasks state (memory values in pages): [ 366.492349] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 366.501237] [ 23766] 0 23766 17620 8221 126976 0 0 syz-executor3 [ 366.510367] [ 23767] 0 23767 17618 8218 126976 0 0 syz-executor2 [ 366.519409] Memory cgroup out of memory: Kill process 23766 (syz-executor3) score 8252000 or sacrifice child [ 366.529422] Killed process 23766 (syz-executor3) total-vm:70480kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 366.540456] oom_reaper: reaped process 23766 (syz-executor3), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB [ 366.550949] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 366.560374] CPU: 1 PID: 23766 Comm: syz-executor3 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 366.568863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.578215] Call Trace: [ 366.580859] dump_stack+0x1c9/0x2b4 [ 366.584497] ? dump_stack_print_info.cold.2+0x52/0x52 [ 366.590043] ? trace_hardirqs_on+0x10/0x10 [ 366.594278] ? do_raw_spin_unlock+0xa7/0x2f0 [ 366.598713] dump_header+0x246/0x123c [ 366.602533] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 366.607471] ? trace_hardirqs_on+0x10/0x10 [ 366.611708] ? trace_hardirqs_on+0x10/0x10 [ 366.615947] ? trace_hardirqs_on+0x10/0x10 [ 366.620202] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.625756] ? css_next_child+0x1c3/0x620 [ 366.629918] ? find_lock_task_mm+0x230/0x4d0 [ 366.634322] ? cgroup_get_tree+0xb20/0xb20 [ 366.638561] ? lock_acquire+0x1e4/0x540 [ 366.642535] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.648072] ? task_will_free_mem+0x239/0xb70 [ 366.652567] ? lock_release+0xa30/0xa30 [ 366.656544] ? oom_badness+0x7d1/0xb00 [ 366.660432] ? ___ratelimit+0x36f/0x655 [ 366.664408] ? lock_downgrade+0x8f0/0x8f0 [ 366.668547] ? kasan_check_read+0x11/0x20 [ 366.672695] ? do_raw_spin_unlock+0xa7/0x2f0 [ 366.677101] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 366.681669] ? do_raw_spin_lock+0x200/0x200 [ 366.685990] ? oom_kill_process+0x24d/0x280 [ 366.690312] ? lock_downgrade+0x8f0/0x8f0 [ 366.694454] ? trace_hardirqs_on+0xd/0x10 [ 366.698594] ? ___ratelimit+0xaa/0x655 [ 366.702488] ? idr_get_free+0x10c0/0x10c0 [ 366.706634] ? kasan_check_write+0x14/0x20 [ 366.710866] ? do_raw_spin_lock+0xc1/0x200 [ 366.715092] oom_kill_process.cold.29+0x10/0x660 [ 366.719842] ? trace_hardirqs_on+0xd/0x10 [ 366.723979] ? _raw_spin_unlock_irq+0x27/0x70 [ 366.728474] ? css_task_iter_end+0x2ce/0x490 [ 366.732876] ? oom_evaluate_task+0x540/0x540 [ 366.737299] ? trace_hardirqs_on+0xd/0x10 [ 366.741447] ? _raw_spin_unlock_irq+0x27/0x70 [ 366.745928] ? oom_badness+0xb00/0xb00 [ 366.749824] ? mem_cgroup_scan_tasks+0x1bf/0x1e0 [ 366.754581] ? mem_cgroup_iter_break+0x30/0x30 [ 366.759178] out_of_memory+0x86d/0x1ad0 [ 366.763143] ? oom_killer_disable+0x3a0/0x3a0 [ 366.767630] ? do_raw_spin_unlock+0xa7/0x2f0 [ 366.772029] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 366.776603] ? kasan_check_write+0x14/0x20 [ 366.780827] ? do_raw_spin_lock+0xc1/0x200 [ 366.785056] mem_cgroup_out_of_memory+0x15e/0x210 [ 366.789886] ? memcg_memory_event+0x40/0x40 [ 366.796200] ? page_counter_try_charge+0x1c7/0x220 [ 366.801120] try_charge+0x720/0x1680 [ 366.804825] ? __mem_cgroup_largest_soft_limit_node.part.65+0x7f0/0x7f0 [ 366.811570] ? lock_downgrade+0x8f0/0x8f0 [ 366.815718] ? lock_release+0xa30/0xa30 [ 366.819680] ? __anon_vma_prepare+0x3c6/0x720 [ 366.824168] ? handle_mm_fault+0x53e/0xc80 [ 366.828391] ? fs_reclaim_acquire+0x20/0x20 [ 366.832711] ? lock_downgrade+0x8f0/0x8f0 [ 366.836861] ? get_mem_cgroup_from_mm+0x209/0x440 [ 366.841697] ? get_mem_cgroup_from_page+0x190/0x190 [ 366.846709] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 366.851538] ? lock_acquire+0x1e4/0x540 [ 366.855503] mem_cgroup_try_charge+0x4ff/0xa70 [ 366.860070] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 366.865069] ? mem_cgroup_protected+0xa60/0xa60 [ 366.869742] ? up_write+0x7b/0x220 [ 366.873275] ? up_read+0x110/0x110 [ 366.876814] ? __anon_vma_prepare+0x36d/0x720 [ 366.881303] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 366.886827] mem_cgroup_try_charge_delay+0x1d/0x90 [ 366.891742] __handle_mm_fault+0x25ba/0x4470 [ 366.896139] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 366.900962] ? cap_mmap_addr+0x52/0x130 [ 366.904924] ? userfaultfd_unmap_complete+0x32a/0x510 [ 366.910107] ? security_mmap_addr+0x80/0xa0 [ 366.914506] ? lock_acquire+0x1e4/0x540 [ 366.918464] ? handle_mm_fault+0x417/0xc80 [ 366.922691] ? lock_downgrade+0x8f0/0x8f0 [ 366.926819] ? lock_release+0xa30/0xa30 [ 366.930796] ? lock_release+0xa30/0xa30 [ 366.934754] ? down_read_killable+0x200/0x200 [ 366.939238] ? mem_cgroup_from_task+0xcb/0x1f0 [ 366.943806] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 366.948568] handle_mm_fault+0x53e/0xc80 [ 366.952630] ? __handle_mm_fault+0x4470/0x4470 [ 366.957193] ? find_vma+0x34/0x190 [ 366.960716] __do_page_fault+0x620/0xe50 [ 366.964768] ? mm_fault_error+0x380/0x380 [ 366.968903] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.974427] ? __x64_sys_clock_gettime+0x170/0x250 [ 366.979338] ? __ia32_sys_clock_settime+0x290/0x290 [ 366.984338] do_page_fault+0xf6/0x8c0 [ 366.988131] ? vmalloc_sync_all+0x30/0x30 [ 366.992274] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.997816] ? do_syscall_64+0x497/0x820 [ 367.001876] ? syscall_return_slowpath+0x5e0/0x5e0 [ 367.006792] ? syscall_return_slowpath+0x31d/0x5e0 [ 367.011706] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 367.016708] ? prepare_exit_to_usermode+0x291/0x3b0 [ 367.021717] ? page_fault+0x8/0x30 [ 367.025250] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 367.030076] ? page_fault+0x8/0x30 [ 367.033599] page_fault+0x1e/0x30 [ 367.037041] RIP: 0033:0x40e16f [ 367.040221] Code: Bad RIP value. [ 367.043568] RSP: 002b:00007ffd8c7205b0 EFLAGS: 00010206 [ 367.048918] RAX: 00007f3313241000 RBX: 0000000000020000 RCX: 00000000004569aa [ 367.056171] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 367.063420] RBP: 00007ffd8c720690 R08: ffffffffffffffff R09: 0000000000000000 [ 367.070672] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8c720780 [ 367.077922] R13: 00007f3313261700 R14: 000000000072bf2c R15: 0000000000000001 [ 367.085870] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/ile0,task_memcg=/ile0,task=syz-executor2,pid=23767,uid=0 [ 367.100073] memory: usage 112kB, limit 0kB, failcnt 1615 [ 367.105549] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 367.112428] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 367.118593] Memory cgroup stats for /ile0: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 367.138136] Tasks state (memory values in pages): [ 367.142986] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 367.151889] [ 23766] 0 23766 17620 8002 126976 0 0 syz-executor3 [ 367.160946] [ 23767] 0 23767 17618 8218 126976 0 0 syz-executor2 [ 367.169994] Memory cgroup out of memory: Kill process 23767 (syz-executor2) score 8249000 or sacrifice child [ 367.180119] Killed process 23767 (syz-executor2) total-vm:70472kB, anon-rss:104kB, file-rss:32768kB, shmem-rss:0kB [ 367.192101] oom_reaper: reaped process 23767 (syz-executor2), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB [ 367.202986] ------------[ cut here ]------------ [ 367.207845] Memory cgroup charge failed because of no reclaimable memory! This looks like a misconfiguration or a kernel bug. [ 367.207965] WARNING: CPU: 1 PID: 23767 at mm/memcontrol.c:1710 try_charge+0x734/0x1680 [ 367.227540] Kernel panic - not syncing: panic_on_warn set ... [ 367.227540] [ 367.234918] CPU: 1 PID: 23767 Comm: syz-executor2 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 367.243404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.252743] Call Trace: [ 367.255327] dump_stack+0x1c9/0x2b4 [ 367.258948] ? dump_stack_print_info.cold.2+0x52/0x52 [ 367.264147] panic+0x238/0x4e7 [ 367.267346] ? add_taint.cold.5+0x16/0x16 [ 367.271484] ? __warn.cold.8+0x148/0x1ba