=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x99000000) [ 918.676145] ? __might_fault+0xef/0x1d0 [ 918.680148] ? __fget_light+0x1d1/0x230 [ 918.684138] __x64_sys_sendmsg+0x132/0x220 [ 918.688380] ? __sys_sendmsg+0x1b0/0x1b0 [ 918.692484] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 918.697253] ? trace_hardirqs_off_caller+0x69/0x210 [ 918.702293] ? do_syscall_64+0x21/0x670 [ 918.706282] do_syscall_64+0xf9/0x670 [ 918.710100] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 918.715296] RIP: 0033:0x45d5f9 [ 918.718497] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 918.738361] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 918.746083] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 918.753358] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 918.760634] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 918.767909] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c 19:36:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xdc00}, 0x0) [ 918.775188] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c [ 918.804332] Mem-Info: [ 918.806798] active_anon:105868 inactive_anon:12300 isolated_anon:0 [ 918.806798] active_file:2232 inactive_file:45474 isolated_file:0 [ 918.806798] unevictable:0 dirty:236 writeback:0 unstable:0 [ 918.806798] slab_reclaimable:16108 slab_unreclaimable:240812 [ 918.806798] mapped:64341 shmem:12484 pagetables:1124 bounce:0 [ 918.806798] free:1092827 free_pcp:507 free_cma:0 [ 918.848681] Node 0 active_anon:425564kB inactive_anon:49200kB active_file:8924kB inactive_file:181896kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:257364kB dirty:944kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 918.877825] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 19:36:33 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x198) [ 918.989392] Node 0 DMA free:15804kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 919.047174] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 919.053896] Node 0 DMA32 free:579988kB min:35784kB low:44728kB high:53672kB active_anon:417192kB inactive_anon:49200kB active_file:8928kB inactive_file:181964kB unevictable:0kB writepending:1016kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7520kB pagetables:4264kB bounce:0kB free_pcp:2204kB local_pcp:1228kB free_cma:0kB [ 919.145285] lowmem_reserve[]: 0 0 2 2 2 [ 919.149444] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 919.182504] lowmem_reserve[]: 0 0 0 0 0 [ 919.193919] Node 1 Normal free:3778108kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 919.226633] lowmem_reserve[]: 0 0 0 0 0 [ 919.232089] Node 0 DMA: 11*4kB (UE) 18*8kB (UE) 14*16kB (UE) 15*32kB (UE) 11*64kB (UE) 9*128kB (UE) 7*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15804kB [ 919.249153] Node 0 DMA32: 6214*4kB (UME) 821*8kB (UME) 4299*16kB (UMEH) 1874*32kB (UMEH) 690*64kB (UME) 341*128kB (UEH) 199*256kB (UEH) 114*512kB (UH) 58*1024kB (UH) 43*2048kB (UM) 18*4096kB (UM) = 578480kB [ 919.268850] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 919.280586] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 919.297946] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 919.306870] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 919.315510] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 919.324454] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 919.333116] 20508 total pagecache pages [ 919.337091] 0 pages in swap cache [ 919.340628] Swap cache stats: add 0, delete 0, find 0/0 19:36:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6000000e}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:36:34 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:36:34 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x8b000000) 19:36:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xdd00}, 0x0) 19:36:34 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x99010000) 19:36:34 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x198) [ 919.345979] Free swap = 0kB [ 919.348976] Total swap = 0kB [ 919.352066] 1965979 pages RAM [ 919.355160] 0 pages HighMem/MovableOnly [ 919.359113] 352651 pages reserved [ 919.362630] 0 pages cma reserved [ 919.439568] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 919.475329] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 919.480796] CPU: 1 PID: 31082 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 919.488787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 919.498173] Call Trace: [ 919.500777] dump_stack+0x22c/0x33e [ 919.504457] warn_alloc.cold+0x7b/0x18f [ 919.508459] ? zone_watermark_ok_safe+0x300/0x300 [ 919.513315] ? should_fail+0x142/0x7d8 [ 919.517220] ? ip_set_alloc+0x54/0x70 [ 919.521076] vzalloc+0x15c/0x1a0 [ 919.524455] ip_set_alloc+0x54/0x70 [ 919.528094] hash_netiface_create+0x42d/0xa50 [ 919.532623] ? hash_netiface6_add+0x2940/0x2940 [ 919.537300] ip_set_create+0x70e/0x1380 [ 919.541291] ? __find_set_type_get+0x450/0x450 [ 919.545906] ? lock_downgrade+0x750/0x750 [ 919.551030] ? __find_set_type_get+0x450/0x450 [ 919.559450] nfnetlink_rcv_msg+0xeff/0x1210 [ 919.563796] ? nfnetlink_net_init+0x170/0x170 [ 919.568329] ? avc_has_extended_perms+0x1020/0x1020 [ 919.573355] ? avc_has_extended_perms+0x1020/0x1020 [ 919.578379] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 919.582891] ? lock_downgrade+0x750/0x750 [ 919.587055] ? __local_bh_enable_ip+0x159/0x2a0 [ 919.591738] ? cred_has_capability+0x162/0x2e0 [ 919.596326] ? cred_has_capability+0x1d9/0x2e0 [ 919.600915] ? selinux_inode_copy_up+0x180/0x180 [ 919.605672] ? selinux_inode_copy_up+0x180/0x180 [ 919.610460] netlink_rcv_skb+0x160/0x440 [ 919.614537] ? nfnetlink_net_init+0x170/0x170 [ 919.619049] ? netlink_ack+0xae0/0xae0 [ 919.622949] ? ns_capable_common+0x117/0x140 [ 919.627359] nfnetlink_rcv+0x1b2/0x41b [ 919.631253] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 919.636000] netlink_unicast+0x4d5/0x690 [ 919.640049] ? netlink_sendskb+0x110/0x110 [ 919.644270] netlink_sendmsg+0x717/0xcc0 [ 919.648354] ? nlmsg_notify+0x1a0/0x1a0 [ 919.652353] ? __sock_recv_ts_and_drops+0x540/0x540 [ 919.657356] ? nlmsg_notify+0x1a0/0x1a0 [ 919.661315] sock_sendmsg+0xc7/0x130 [ 919.665011] ___sys_sendmsg+0x7bb/0x8f0 [ 919.668970] ? copy_msghdr_from_user+0x440/0x440 [ 919.673712] ? find_held_lock+0x2d/0x110 [ 919.677765] ? __fget+0x386/0x570 [ 919.681203] ? lock_downgrade+0x750/0x750 [ 919.685363] ? check_preemption_disabled+0x41/0x2b0 [ 919.690369] ? __fget+0x3ad/0x570 [ 919.693811] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 919.698030] ? lock_acquire+0x170/0x3f0 [ 919.702943] ? __might_fault+0xef/0x1d0 [ 919.706914] ? __fget_light+0x1d1/0x230 [ 919.710878] __x64_sys_sendmsg+0x132/0x220 [ 919.715098] ? __sys_sendmsg+0x1b0/0x1b0 [ 919.719151] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 919.723891] ? trace_hardirqs_off_caller+0x69/0x210 [ 919.728907] ? do_syscall_64+0x21/0x670 [ 919.732881] do_syscall_64+0xf9/0x670 [ 919.736683] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 919.741864] RIP: 0033:0x45d5f9 [ 919.745044] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 919.764044] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 919.773297] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 919.780552] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 19:36:34 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x9a000000) 19:36:34 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:36:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xde00}, 0x0) 19:36:34 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x194) 19:36:34 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x8b010000) [ 919.787823] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 919.795084] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 919.802335] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c [ 919.845773] Mem-Info: [ 919.848325] active_anon:103688 inactive_anon:12300 isolated_anon:0 [ 919.848325] active_file:2233 inactive_file:45491 isolated_file:0 [ 919.848325] unevictable:0 dirty:254 writeback:0 unstable:0 [ 919.848325] slab_reclaimable:16183 slab_unreclaimable:243489 [ 919.848325] mapped:64052 shmem:12484 pagetables:1029 bounce:0 [ 919.848325] free:1092460 free_pcp:446 free_cma:0 [ 919.959239] Node 0 active_anon:425660kB inactive_anon:49200kB active_file:8928kB inactive_file:181964kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:257408kB dirty:1016kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 131072kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 19:36:34 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x9a010000) [ 920.018247] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 920.136591] Node 0 DMA free:15804kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 920.173014] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 920.178200] Node 0 DMA32 free:567968kB min:35784kB low:44728kB high:53672kB active_anon:417524kB inactive_anon:49200kB active_file:8932kB inactive_file:182000kB unevictable:0kB writepending:1056kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7488kB pagetables:4412kB bounce:0kB free_pcp:2208kB local_pcp:1424kB free_cma:0kB [ 920.211794] lowmem_reserve[]: 0 0 2 2 2 [ 920.216341] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 920.259497] lowmem_reserve[]: 0 0 0 0 0 [ 920.282856] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 920.323427] lowmem_reserve[]: 0 0 0 0 0 [ 920.335107] Node 0 DMA: 11*4kB (UE) 18*8kB (UE) 14*16kB (UE) 15*32kB (UE) 11*64kB (UE) 9*128kB (UE) 7*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15804kB [ 920.351524] Node 0 DMA32: 6187*4kB (UME) 828*8kB (UME) 3604*16kB (UMEH) 1873*32kB (UMEH) 692*64kB (UME) 341*128kB (UEH) 199*256kB (UEH) 114*512kB (UH) 58*1024kB (UH) 45*2048kB (UM) 17*4096kB (UM) = 567404kB [ 920.370181] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 920.384019] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 920.401502] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 920.410460] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 920.419026] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 19:36:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000010}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:36:35 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:36:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xdf00}, 0x0) 19:36:35 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x8c000000) 19:36:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x28, 0xb, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x28}}, 0x0) 19:36:35 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x9b000000) [ 920.428109] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 920.436792] 20518 total pagecache pages [ 920.440878] 0 pages in swap cache [ 920.444334] Swap cache stats: add 0, delete 0, find 0/0 [ 920.449689] Free swap = 0kB [ 920.452771] Total swap = 0kB [ 920.455781] 1965979 pages RAM [ 920.458863] 0 pages HighMem/MovableOnly [ 920.463050] 352651 pages reserved [ 920.466500] 0 pages cma reserved 19:36:35 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x190) 19:36:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xe000}, 0x0) [ 920.586487] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 920.612504] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 920.663213] CPU: 1 PID: 31172 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 920.671142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 920.682851] Call Trace: [ 920.685460] dump_stack+0x22c/0x33e [ 920.689142] warn_alloc.cold+0x7b/0x18f [ 920.693131] ? zone_watermark_ok_safe+0x300/0x300 [ 920.697996] ? should_fail+0x142/0x7d8 [ 920.702248] ? ip_set_alloc+0x54/0x70 [ 920.706060] vzalloc+0x15c/0x1a0 [ 920.709443] ip_set_alloc+0x54/0x70 [ 920.713083] hash_netiface_create+0x42d/0xa50 [ 920.717591] ? hash_netiface6_add+0x2940/0x2940 [ 920.722297] ip_set_create+0x70e/0x1380 [ 920.726284] ? __find_set_type_get+0x450/0x450 [ 920.730895] ? lock_downgrade+0x750/0x750 [ 920.735058] ? __find_set_type_get+0x450/0x450 [ 920.739651] nfnetlink_rcv_msg+0xeff/0x1210 [ 920.743994] ? nfnetlink_net_init+0x170/0x170 [ 920.748529] ? avc_has_extended_perms+0x1020/0x1020 [ 920.753552] ? avc_has_extended_perms+0x1020/0x1020 [ 920.758575] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 920.763110] ? lock_downgrade+0x750/0x750 [ 920.767286] ? __local_bh_enable_ip+0x159/0x2a0 [ 920.771972] ? cred_has_capability+0x162/0x2e0 [ 920.776562] ? cred_has_capability+0x1d9/0x2e0 [ 920.781157] ? selinux_inode_copy_up+0x180/0x180 [ 920.785918] ? selinux_inode_copy_up+0x180/0x180 [ 920.790697] netlink_rcv_skb+0x160/0x440 [ 920.794775] ? nfnetlink_net_init+0x170/0x170 [ 920.799279] ? netlink_ack+0xae0/0xae0 [ 920.803183] ? ns_capable_common+0x117/0x140 [ 920.807608] nfnetlink_rcv+0x1b2/0x41b [ 920.811508] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 920.816285] netlink_unicast+0x4d5/0x690 [ 920.820357] ? netlink_sendskb+0x110/0x110 [ 920.824609] netlink_sendmsg+0x717/0xcc0 [ 920.828680] ? nlmsg_notify+0x1a0/0x1a0 [ 920.832662] ? __sock_recv_ts_and_drops+0x540/0x540 [ 920.837697] ? nlmsg_notify+0x1a0/0x1a0 [ 920.841681] sock_sendmsg+0xc7/0x130 [ 920.845409] ___sys_sendmsg+0x7bb/0x8f0 [ 920.849390] ? copy_msghdr_from_user+0x440/0x440 [ 920.854430] ? find_held_lock+0x2d/0x110 [ 920.858500] ? __fget+0x386/0x570 [ 920.861968] ? lock_downgrade+0x750/0x750 [ 920.866125] ? check_preemption_disabled+0x41/0x2b0 [ 920.871155] ? __fget+0x3ad/0x570 [ 920.874618] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 920.878885] ? lock_acquire+0x170/0x3f0 [ 920.882868] ? __might_fault+0xef/0x1d0 [ 920.887817] ? __fget_light+0x1d1/0x230 [ 920.891810] __x64_sys_sendmsg+0x132/0x220 [ 920.896056] ? __sys_sendmsg+0x1b0/0x1b0 [ 920.900141] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 920.904908] ? trace_hardirqs_off_caller+0x69/0x210 [ 920.910023] ? do_syscall_64+0x21/0x670 19:36:35 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x8c010000) 19:36:35 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x8d000000) [ 920.914014] do_syscall_64+0xf9/0x670 [ 920.917827] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 920.923046] RIP: 0033:0x45d5f9 [ 920.926242] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 920.945145] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 920.952857] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 19:36:35 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x190) 19:36:35 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x9b010000) [ 920.960126] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 920.968520] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 920.975782] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 920.983043] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c [ 921.138047] Mem-Info: [ 921.158851] active_anon:104847 inactive_anon:12300 isolated_anon:0 [ 921.158851] active_file:2238 inactive_file:45500 isolated_file:0 [ 921.158851] unevictable:0 dirty:276 writeback:0 unstable:0 [ 921.158851] slab_reclaimable:16279 slab_unreclaimable:247117 [ 921.158851] mapped:64355 shmem:12484 pagetables:1076 bounce:0 [ 921.158851] free:1087548 free_pcp:390 free_cma:0 [ 921.199352] Node 0 active_anon:419588kB inactive_anon:49200kB active_file:8948kB inactive_file:182000kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:257420kB dirty:1104kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 135168kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 921.257516] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 921.292433] Node 0 DMA free:15804kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 921.320899] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 921.326049] Node 0 DMA32 free:562124kB min:35784kB low:44728kB high:53672kB active_anon:414744kB inactive_anon:49200kB active_file:8948kB inactive_file:182000kB unevictable:0kB writepending:1104kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7296kB pagetables:3860kB bounce:0kB free_pcp:1972kB local_pcp:528kB free_cma:0kB [ 921.356119] lowmem_reserve[]: 0 0 2 2 2 [ 921.360135] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 921.386090] lowmem_reserve[]: 0 0 0 0 0 [ 921.390097] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 921.419403] lowmem_reserve[]: 0 0 0 0 0 [ 921.423585] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 921.439714] Node 0 DMA32: 6255*4kB (UME) 970*8kB (UME) 3133*16kB (UMEH) 1877*32kB (UMEH) 695*64kB (UME) 340*128kB (UEH) 198*256kB (UEH) 115*512kB (UH) 58*1024kB (UH) 45*2048kB (UM) 17*4096kB (UM) = 561724kB [ 921.439803] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 921.439864] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 921.487211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 921.487226] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 19:36:36 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000048}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:36:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xe100}, 0x0) 19:36:36 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:36:36 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x8d010000) 19:36:36 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x168) 19:36:36 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x9c000000) [ 921.504781] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 921.504791] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 921.504801] 20527 total pagecache pages [ 921.526362] 0 pages in swap cache [ 921.529809] Swap cache stats: add 0, delete 0, find 0/0 [ 921.535303] Free swap = 0kB [ 921.538335] Total swap = 0kB [ 921.542125] 1965979 pages RAM [ 921.545238] 0 pages HighMem/MovableOnly [ 921.549200] 352651 pages reserved [ 921.552699] 0 pages cma reserved [ 921.654676] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 921.676251] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 921.686772] CPU: 1 PID: 31267 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 921.694677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 19:36:36 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x9c010000) [ 921.704030] Call Trace: [ 921.706629] dump_stack+0x22c/0x33e [ 921.710270] warn_alloc.cold+0x7b/0x18f [ 921.714260] ? zone_watermark_ok_safe+0x300/0x300 [ 921.719115] ? should_fail+0x142/0x7d8 [ 921.723021] ? ip_set_alloc+0x54/0x70 [ 921.726832] vzalloc+0x15c/0x1a0 [ 921.730201] ip_set_alloc+0x54/0x70 [ 921.733833] hash_netiface_create+0x42d/0xa50 [ 921.738339] ? hash_netiface6_add+0x2940/0x2940 [ 921.743016] ip_set_create+0x70e/0x1380 [ 921.747073] ? __find_set_type_get+0x450/0x450 19:36:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xe200}, 0x0) 19:36:36 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x8e000000) [ 921.751683] ? lock_downgrade+0x750/0x750 [ 921.755846] ? __find_set_type_get+0x450/0x450 [ 921.760445] nfnetlink_rcv_msg+0xeff/0x1210 [ 921.764793] ? nfnetlink_net_init+0x170/0x170 [ 921.769308] ? avc_has_extended_perms+0x1020/0x1020 [ 921.774335] ? avc_has_extended_perms+0x1020/0x1020 [ 921.779361] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 921.783871] ? lock_downgrade+0x750/0x750 [ 921.788030] ? __local_bh_enable_ip+0x159/0x2a0 [ 921.792711] ? cred_has_capability+0x162/0x2e0 [ 921.797310] ? cred_has_capability+0x1d9/0x2e0 [ 921.801909] ? selinux_inode_copy_up+0x180/0x180 [ 921.806677] ? selinux_inode_copy_up+0x180/0x180 [ 921.811456] netlink_rcv_skb+0x160/0x440 [ 921.815532] ? nfnetlink_net_init+0x170/0x170 [ 921.823940] ? netlink_ack+0xae0/0xae0 [ 921.828016] ? ns_capable_common+0x117/0x140 [ 921.832441] nfnetlink_rcv+0x1b2/0x41b [ 921.836343] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 921.841121] netlink_unicast+0x4d5/0x690 [ 921.845196] ? netlink_sendskb+0x110/0x110 [ 921.849447] netlink_sendmsg+0x717/0xcc0 19:36:36 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x9d000000) 19:36:36 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x8e010000) [ 921.853527] ? nlmsg_notify+0x1a0/0x1a0 [ 921.857508] ? __sock_recv_ts_and_drops+0x540/0x540 [ 921.862550] ? nlmsg_notify+0x1a0/0x1a0 [ 921.866532] sock_sendmsg+0xc7/0x130 [ 921.870259] ___sys_sendmsg+0x7bb/0x8f0 [ 921.874251] ? copy_msghdr_from_user+0x440/0x440 [ 921.879015] ? find_held_lock+0x2d/0x110 [ 921.883093] ? __fget+0x386/0x570 [ 921.886558] ? lock_downgrade+0x750/0x750 [ 921.890716] ? check_preemption_disabled+0x41/0x2b0 [ 921.895744] ? __fget+0x3ad/0x570 [ 921.899213] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 921.903484] ? lock_acquire+0x170/0x3f0 [ 921.907466] ? __might_fault+0xef/0x1d0 [ 921.911458] ? __fget_light+0x1d1/0x230 [ 921.915454] __x64_sys_sendmsg+0x132/0x220 [ 921.919731] ? __sys_sendmsg+0x1b0/0x1b0 [ 921.923824] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 921.928592] ? trace_hardirqs_off_caller+0x69/0x210 [ 921.933623] ? do_syscall_64+0x21/0x670 [ 921.937614] do_syscall_64+0xf9/0x670 [ 921.941426] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 921.946617] RIP: 0033:0x45d5f9 [ 921.949814] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 921.968715] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 921.976430] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 921.983709] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 921.990989] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 921.998265] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c 19:36:36 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x9d010000) [ 922.005548] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c [ 922.037658] nla_parse: 54 callbacks suppressed [ 922.037668] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 922.116146] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 922.164340] Mem-Info: [ 922.189015] active_anon:104304 inactive_anon:12300 isolated_anon:0 [ 922.189015] active_file:2239 inactive_file:45508 isolated_file:0 [ 922.189015] unevictable:0 dirty:280 writeback:0 unstable:0 [ 922.189015] slab_reclaimable:16327 slab_unreclaimable:247584 [ 922.189015] mapped:64357 shmem:12484 pagetables:1035 bounce:0 [ 922.189015] free:1087587 free_pcp:428 free_cma:0 [ 922.206946] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 922.229704] Node 0 active_anon:417216kB inactive_anon:49200kB active_file:8952kB inactive_file:182032kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:257428kB dirty:1120kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 137216kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 922.263224] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 922.290738] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 922.317040] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 922.322451] Node 0 DMA32 free:559056kB min:35784kB low:44728kB high:53672kB active_anon:414756kB inactive_anon:49200kB active_file:8952kB inactive_file:182032kB unevictable:0kB writepending:1120kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7296kB pagetables:3992kB bounce:0kB free_pcp:2376kB local_pcp:1048kB free_cma:0kB [ 922.352716] lowmem_reserve[]: 0 0 2 2 2 [ 922.356697] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 922.382795] lowmem_reserve[]: 0 0 0 0 0 [ 922.386800] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 922.414335] lowmem_reserve[]: 0 0 0 0 0 [ 922.414356] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 922.414444] Node 0 DMA32: 6058*4kB (UME) 908*8kB (UME) 3029*16kB (UMEH) 1880*32kB (UMEH) 695*64kB (UME) 340*128kB (UEH) 198*256kB (UEH) 115*512kB (UH) 58*1024kB (UH) 45*2048kB (UM) 17*4096kB (UM) = 558872kB [ 922.414528] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 922.414597] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 922.414683] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 922.414694] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 922.414706] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 922.414717] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 922.414722] 20531 total pagecache pages [ 922.414756] 0 pages in swap cache [ 922.414765] Swap cache stats: add 0, delete 0, find 0/0 [ 922.414770] Free swap = 0kB [ 922.414775] Total swap = 0kB [ 922.414784] 1965979 pages RAM [ 922.414789] 0 pages HighMem/MovableOnly [ 922.414794] 352651 pages reserved [ 922.414799] 0 pages cma reserved [ 922.553955] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 922.566394] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 922.571601] CPU: 0 PID: 31267 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 922.579476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 922.588813] Call Trace: [ 922.591388] dump_stack+0x22c/0x33e [ 922.595001] warn_alloc.cold+0x7b/0x18f [ 922.598984] ? zone_watermark_ok_safe+0x300/0x300 [ 922.603810] ? should_fail+0x142/0x7d8 [ 922.607684] ? ip_set_alloc+0x54/0x70 [ 922.611480] vzalloc+0x15c/0x1a0 [ 922.614842] ip_set_alloc+0x54/0x70 [ 922.618679] hash_netiface_create+0x42d/0xa50 [ 922.623463] ? hash_netiface6_add+0x2940/0x2940 [ 922.628126] ip_set_create+0x70e/0x1380 [ 922.632094] ? __find_set_type_get+0x450/0x450 [ 922.636673] ? lock_downgrade+0x750/0x750 [ 922.640808] ? __find_set_type_get+0x450/0x450 [ 922.645380] nfnetlink_rcv_msg+0xeff/0x1210 [ 922.649694] ? nfnetlink_net_init+0x170/0x170 [ 922.654205] ? avc_has_extended_perms+0x1020/0x1020 [ 922.659213] ? avc_has_extended_perms+0x1020/0x1020 [ 922.664213] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 922.668696] ? lock_downgrade+0x750/0x750 [ 922.672829] ? __local_bh_enable_ip+0x159/0x2a0 [ 922.677500] ? cred_has_capability+0x162/0x2e0 [ 922.682068] ? cred_has_capability+0x1d9/0x2e0 [ 922.686632] ? selinux_inode_copy_up+0x180/0x180 [ 922.691457] ? selinux_inode_copy_up+0x180/0x180 [ 922.696200] netlink_rcv_skb+0x160/0x440 [ 922.700249] ? nfnetlink_net_init+0x170/0x170 [ 922.704728] ? netlink_ack+0xae0/0xae0 [ 922.708603] ? ns_capable_common+0x117/0x140 [ 922.712997] nfnetlink_rcv+0x1b2/0x41b [ 922.716866] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 922.721623] netlink_unicast+0x4d5/0x690 [ 922.725670] ? netlink_sendskb+0x110/0x110 [ 922.729890] netlink_sendmsg+0x717/0xcc0 [ 922.733955] ? nlmsg_notify+0x1a0/0x1a0 [ 922.737911] ? __sock_recv_ts_and_drops+0x540/0x540 [ 922.742927] ? nlmsg_notify+0x1a0/0x1a0 [ 922.746887] sock_sendmsg+0xc7/0x130 [ 922.750585] ___sys_sendmsg+0x7bb/0x8f0 [ 922.754545] ? copy_msghdr_from_user+0x440/0x440 [ 922.759286] ? find_held_lock+0x2d/0x110 [ 922.763333] ? __fget+0x386/0x570 [ 922.766774] ? lock_downgrade+0x750/0x750 [ 922.770909] ? check_preemption_disabled+0x41/0x2b0 [ 922.775910] ? __fget+0x3ad/0x570 [ 922.779347] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 922.783578] ? lock_acquire+0x170/0x3f0 [ 922.787536] ? __might_fault+0xef/0x1d0 [ 922.791495] ? __fget_light+0x1d1/0x230 [ 922.795457] __x64_sys_sendmsg+0x132/0x220 [ 922.799689] ? __sys_sendmsg+0x1b0/0x1b0 [ 922.803737] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 922.808473] ? trace_hardirqs_off_caller+0x69/0x210 [ 922.813484] ? do_syscall_64+0x21/0x670 [ 922.817454] do_syscall_64+0xf9/0x670 [ 922.821241] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 922.826426] RIP: 0033:0x45d5f9 19:36:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6000004c}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:36:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xe300}, 0x0) 19:36:37 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:36:37 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x8f000000) 19:36:37 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x168) 19:36:37 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x9e000000) [ 922.829599] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 922.848481] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 922.856171] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 922.863423] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 922.870687] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 922.877961] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 922.885215] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c [ 922.955024] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 923.011118] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 923.028342] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 923.040826] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 923.046148] CPU: 0 PID: 31363 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 923.054036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 923.063390] Call Trace: [ 923.065994] dump_stack+0x22c/0x33e [ 923.067445] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 923.069633] warn_alloc.cold+0x7b/0x18f [ 923.069655] ? zone_watermark_ok_safe+0x300/0x300 [ 923.069673] ? should_fail+0x142/0x7d8 [ 923.069698] ? ip_set_alloc+0x54/0x70 [ 923.094730] vzalloc+0x15c/0x1a0 [ 923.098107] ip_set_alloc+0x54/0x70 [ 923.101746] hash_netiface_create+0x42d/0xa50 [ 923.106258] ? hash_netiface6_add+0x2940/0x2940 19:36:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xe400}, 0x0) [ 923.110939] ip_set_create+0x70e/0x1380 [ 923.114924] ? __find_set_type_get+0x450/0x450 [ 923.119535] ? lock_downgrade+0x750/0x750 [ 923.123698] ? __find_set_type_get+0x450/0x450 [ 923.128294] nfnetlink_rcv_msg+0xeff/0x1210 [ 923.132631] ? nfnetlink_net_init+0x170/0x170 [ 923.137138] ? avc_has_extended_perms+0x1020/0x1020 [ 923.142214] ? avc_has_extended_perms+0x1020/0x1020 [ 923.147243] ? ___preempt_schedule+0x16/0x18 [ 923.151664] ? mark_held_locks+0xf0/0xf0 [ 923.155735] ? ___preempt_schedule+0x16/0x18 [ 923.160160] ? cred_has_capability+0x162/0x2e0 [ 923.164888] ? cred_has_capability+0x1d9/0x2e0 [ 923.169485] ? selinux_inode_copy_up+0x180/0x180 [ 923.174249] ? selinux_inode_copy_up+0x180/0x180 [ 923.179036] netlink_rcv_skb+0x160/0x440 [ 923.183093] ? nfnetlink_net_init+0x170/0x170 [ 923.187580] ? netlink_ack+0xae0/0xae0 [ 923.191476] ? ns_capable_common+0x117/0x140 [ 923.195964] nfnetlink_rcv+0x1b2/0x41b [ 923.199845] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 923.205217] netlink_unicast+0x4d5/0x690 [ 923.209269] ? netlink_sendskb+0x110/0x110 [ 923.213504] netlink_sendmsg+0x717/0xcc0 [ 923.217554] ? nlmsg_notify+0x1a0/0x1a0 [ 923.221516] ? __sock_recv_ts_and_drops+0x540/0x540 [ 923.226524] ? nlmsg_notify+0x1a0/0x1a0 [ 923.230485] sock_sendmsg+0xc7/0x130 [ 923.234190] ___sys_sendmsg+0x7bb/0x8f0 [ 923.238153] ? copy_msghdr_from_user+0x440/0x440 [ 923.242899] ? find_held_lock+0x2d/0x110 [ 923.246962] ? __fget+0x386/0x570 [ 923.250406] ? lock_downgrade+0x750/0x750 [ 923.254644] ? check_preemption_disabled+0x41/0x2b0 [ 923.259651] ? __fget+0x3ad/0x570 [ 923.263095] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 923.267330] ? lock_acquire+0x170/0x3f0 [ 923.271312] ? __might_fault+0xef/0x1d0 [ 923.275293] ? __fget_light+0x1d1/0x230 [ 923.279259] __x64_sys_sendmsg+0x132/0x220 [ 923.283481] ? __sys_sendmsg+0x1b0/0x1b0 [ 923.287537] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 923.292298] ? trace_hardirqs_off_caller+0x69/0x210 [ 923.297308] ? do_syscall_64+0x21/0x670 [ 923.301288] do_syscall_64+0xf9/0x670 [ 923.305081] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 923.310256] RIP: 0033:0x45d5f9 [ 923.313438] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 923.332332] RSP: 002b:00007fcce42e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 923.340034] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 923.347498] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 923.354753] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 19:36:38 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 923.362008] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 923.369262] R13: 00007ffe1b999d8f R14: 00007fcce42e39c0 R15: 000000000118cfec [ 923.395876] warn_alloc_show_mem: 1 callbacks suppressed [ 923.395881] Mem-Info: 19:36:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xe500}, 0x0) [ 923.414013] active_anon:105306 inactive_anon:12300 isolated_anon:0 [ 923.414013] active_file:2239 inactive_file:45521 isolated_file:0 [ 923.414013] unevictable:0 dirty:293 writeback:0 unstable:0 [ 923.414013] slab_reclaimable:16355 slab_unreclaimable:248305 [ 923.414013] mapped:64120 shmem:12484 pagetables:1108 bounce:0 [ 923.414013] free:1085829 free_pcp:332 free_cma:0 [ 923.457813] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 923.469374] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:36:38 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x166) 19:36:38 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x9e010000) 19:36:38 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x8f010000) [ 923.563185] Node 0 active_anon:417044kB inactive_anon:49200kB active_file:8952kB inactive_file:182084kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:257480kB dirty:1172kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 923.618865] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 923.631955] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 923.681035] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 923.707424] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 923.763784] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 923.772425] Node 0 DMA32 free:547568kB min:35784kB low:44728kB high:53672kB active_anon:421736kB inactive_anon:49200kB active_file:8952kB inactive_file:182084kB unevictable:0kB writepending:1172kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7712kB pagetables:4580kB bounce:0kB free_pcp:1208kB local_pcp:416kB free_cma:0kB [ 923.838078] lowmem_reserve[]: 0 0 2 2 2 [ 923.844520] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 923.894538] lowmem_reserve[]: 0 0 0 0 0 [ 923.901843] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 923.937841] lowmem_reserve[]: 0 0 0 0 0 [ 923.942062] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 923.964569] Node 0 DMA32: 5869*4kB (UME) 997*8kB (UME) 2745*16kB (UMEH) 1883*32kB (UMEH) 694*64kB (UME) 339*128kB (UEH) 197*256kB (UEH) 116*512kB (UH) 58*1024kB (UH) 45*2048kB (UM) 17*4096kB (UM) = 554444kB [ 923.988978] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 924.000880] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 924.018227] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 924.027484] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 924.036124] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 19:36:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000060}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:36:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:36:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xe600}, 0x0) 19:36:38 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x18c) 19:36:38 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x9effffff) 19:36:38 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x90000000) [ 924.045622] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 924.054269] 20551 total pagecache pages [ 924.058237] 0 pages in swap cache [ 924.061857] Swap cache stats: add 0, delete 0, find 0/0 [ 924.067224] Free swap = 0kB [ 924.070329] Total swap = 0kB [ 924.073338] 1965979 pages RAM [ 924.076436] 0 pages HighMem/MovableOnly [ 924.080466] 352651 pages reserved [ 924.083933] 0 pages cma reserved 19:36:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 924.221452] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) 19:36:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xe700}, 0x0) [ 924.277800] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 924.317442] CPU: 1 PID: 31449 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 924.325371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 924.334732] Call Trace: [ 924.337335] dump_stack+0x22c/0x33e [ 924.340977] warn_alloc.cold+0x7b/0x18f [ 924.344991] ? zone_watermark_ok_safe+0x300/0x300 [ 924.349870] ? should_fail+0x142/0x7d8 [ 924.353783] ? ip_set_alloc+0x54/0x70 [ 924.357601] vzalloc+0x15c/0x1a0 [ 924.360985] ip_set_alloc+0x54/0x70 [ 924.364627] hash_netiface_create+0x42d/0xa50 [ 924.369138] ? hash_netiface6_add+0x2940/0x2940 [ 924.373817] ip_set_create+0x70e/0x1380 [ 924.377810] ? __find_set_type_get+0x450/0x450 [ 924.382430] ? lock_downgrade+0x750/0x750 [ 924.386594] ? __find_set_type_get+0x450/0x450 [ 924.391188] nfnetlink_rcv_msg+0xeff/0x1210 [ 924.395535] ? nfnetlink_net_init+0x170/0x170 [ 924.400048] ? avc_has_extended_perms+0x1020/0x1020 [ 924.405075] ? avc_has_extended_perms+0x1020/0x1020 [ 924.410104] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 924.414615] ? lock_downgrade+0x750/0x750 [ 924.418772] ? __local_bh_enable_ip+0x159/0x2a0 [ 924.423458] ? cred_has_capability+0x162/0x2e0 [ 924.428050] ? cred_has_capability+0x1d9/0x2e0 [ 924.432644] ? selinux_inode_copy_up+0x180/0x180 [ 924.437412] ? selinux_inode_copy_up+0x180/0x180 [ 924.442295] netlink_rcv_skb+0x160/0x440 [ 924.446548] ? nfnetlink_net_init+0x170/0x170 [ 924.451062] ? netlink_ack+0xae0/0xae0 [ 924.454968] ? ns_capable_common+0x117/0x140 [ 924.459402] nfnetlink_rcv+0x1b2/0x41b [ 924.463304] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 924.468076] netlink_unicast+0x4d5/0x690 [ 924.472151] ? netlink_sendskb+0x110/0x110 [ 924.476418] netlink_sendmsg+0x717/0xcc0 [ 924.480494] ? nlmsg_notify+0x1a0/0x1a0 [ 924.484480] ? __sock_recv_ts_and_drops+0x540/0x540 [ 924.489514] ? nlmsg_notify+0x1a0/0x1a0 [ 924.493494] sock_sendmsg+0xc7/0x130 [ 924.497215] ___sys_sendmsg+0x7bb/0x8f0 [ 924.501201] ? copy_msghdr_from_user+0x440/0x440 [ 924.505965] ? find_held_lock+0x2d/0x110 [ 924.510032] ? __fget+0x386/0x570 [ 924.513497] ? lock_downgrade+0x750/0x750 [ 924.517659] ? check_preemption_disabled+0x41/0x2b0 [ 924.522692] ? __fget+0x3ad/0x570 [ 924.526173] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 924.530419] ? lock_acquire+0x170/0x3f0 [ 924.534401] ? __might_fault+0xef/0x1d0 [ 924.538392] ? __fget_light+0x1d1/0x230 [ 924.542391] __x64_sys_sendmsg+0x132/0x220 [ 924.546640] ? __sys_sendmsg+0x1b0/0x1b0 [ 924.550726] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 924.555492] ? trace_hardirqs_off_caller+0x69/0x210 [ 924.560516] ? do_syscall_64+0x21/0x670 [ 924.564501] do_syscall_64+0xf9/0x670 [ 924.568318] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 924.573511] RIP: 0033:0x45d5f9 [ 924.576710] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 924.595610] RSP: 002b:00007fcce42e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 924.603336] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 924.610610] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 19:36:39 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x9f000000) 19:36:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:36:39 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x90010000) 19:36:39 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x18c) [ 924.617886] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 924.625161] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 924.632436] R13: 00007ffe1b999d8f R14: 00007fcce42e39c0 R15: 000000000118cfec [ 924.763380] Mem-Info: [ 924.768107] active_anon:104312 inactive_anon:12300 isolated_anon:0 [ 924.768107] active_file:2239 inactive_file:45528 isolated_file:0 [ 924.768107] unevictable:0 dirty:300 writeback:0 unstable:0 [ 924.768107] slab_reclaimable:16404 slab_unreclaimable:250317 [ 924.768107] mapped:64088 shmem:12484 pagetables:1057 bounce:0 [ 924.768107] free:1084669 free_pcp:438 free_cma:0 [ 924.803860] Node 0 active_anon:417348kB inactive_anon:49200kB active_file:8952kB inactive_file:182112kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:257352kB dirty:1200kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 131072kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 924.834855] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 924.875909] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 924.907494] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 924.913481] Node 0 DMA32 free:548936kB min:35784kB low:44728kB high:53672kB active_anon:414760kB inactive_anon:49200kB active_file:8952kB inactive_file:182112kB unevictable:0kB writepending:1200kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7328kB pagetables:3932kB bounce:0kB free_pcp:2072kB local_pcp:788kB free_cma:0kB [ 924.944262] lowmem_reserve[]: 0 0 2 2 2 [ 924.948278] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 924.948314] lowmem_reserve[]: 0 0 0 0 0 [ 924.979575] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 925.007650] lowmem_reserve[]: 0 0 0 0 0 [ 925.007672] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 925.007755] Node 0 DMA32: 6002*4kB (UME) 1086*8kB (UME) 2286*16kB (UMEH) 1879*32kB (UMEH) 697*64kB (UME) 339*128kB (UEH) 196*256kB (UEH) 115*512kB (UH) 57*1024kB (UH) 44*2048kB (UM) 18*4096kB (UM) = 548664kB [ 925.007866] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 925.007947] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 925.008044] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 925.008056] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 925.008067] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 925.008079] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 925.008085] 20559 total pagecache pages [ 925.008100] 0 pages in swap cache [ 925.008109] Swap cache stats: add 0, delete 0, find 0/0 19:36:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000068}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:36:39 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xa0000000) 19:36:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xe800}, 0x0) 19:36:39 executing program 3: r0 = socket(0x0, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:36:39 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x91000000) 19:36:39 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x162) [ 925.008115] Free swap = 0kB [ 925.008120] Total swap = 0kB [ 925.008128] 1965979 pages RAM [ 925.008134] 0 pages HighMem/MovableOnly [ 925.008139] 352651 pages reserved [ 925.008144] 0 pages cma reserved [ 925.257422] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 925.281270] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 925.286630] CPU: 1 PID: 31535 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 925.294516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 925.303873] Call Trace: [ 925.306474] dump_stack+0x22c/0x33e [ 925.310114] warn_alloc.cold+0x7b/0x18f [ 925.314099] ? zone_watermark_ok_safe+0x300/0x300 [ 925.318952] ? should_fail+0x142/0x7d8 [ 925.322858] ? ip_set_alloc+0x54/0x70 [ 925.326668] vzalloc+0x15c/0x1a0 [ 925.330041] ip_set_alloc+0x54/0x70 [ 925.333685] hash_netiface_create+0x42d/0xa50 [ 925.338195] ? hash_netiface6_add+0x2940/0x2940 [ 925.342875] ip_set_create+0x70e/0x1380 [ 925.346866] ? __find_set_type_get+0x450/0x450 [ 925.351494] ? lock_downgrade+0x750/0x750 [ 925.355654] ? __find_set_type_get+0x450/0x450 [ 925.360252] nfnetlink_rcv_msg+0xeff/0x1210 [ 925.364595] ? nfnetlink_net_init+0x170/0x170 [ 925.369107] ? avc_has_extended_perms+0x1020/0x1020 [ 925.374131] ? avc_has_extended_perms+0x1020/0x1020 [ 925.379186] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 925.383696] ? lock_downgrade+0x750/0x750 [ 925.387854] ? __local_bh_enable_ip+0x159/0x2a0 [ 925.392536] ? cred_has_capability+0x162/0x2e0 [ 925.397121] ? cred_has_capability+0x1d9/0x2e0 [ 925.401708] ? selinux_inode_copy_up+0x180/0x180 [ 925.406471] ? selinux_inode_copy_up+0x180/0x180 [ 925.411240] netlink_rcv_skb+0x160/0x440 [ 925.415311] ? nfnetlink_net_init+0x170/0x170 [ 925.419805] ? netlink_ack+0xae0/0xae0 [ 925.423679] ? ns_capable_common+0x117/0x140 [ 925.428072] nfnetlink_rcv+0x1b2/0x41b [ 925.431995] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 925.436738] netlink_unicast+0x4d5/0x690 [ 925.440785] ? netlink_sendskb+0x110/0x110 [ 925.445006] netlink_sendmsg+0x717/0xcc0 [ 925.449065] ? nlmsg_notify+0x1a0/0x1a0 [ 925.453031] ? __sock_recv_ts_and_drops+0x540/0x540 [ 925.458032] ? nlmsg_notify+0x1a0/0x1a0 [ 925.461987] sock_sendmsg+0xc7/0x130 [ 925.465698] ___sys_sendmsg+0x7bb/0x8f0 [ 925.469674] ? copy_msghdr_from_user+0x440/0x440 [ 925.474428] ? find_held_lock+0x2d/0x110 [ 925.478487] ? __fget+0x386/0x570 [ 925.481926] ? lock_downgrade+0x750/0x750 [ 925.486060] ? check_preemption_disabled+0x41/0x2b0 [ 925.491060] ? __fget+0x3ad/0x570 [ 925.494499] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 925.498727] ? lock_acquire+0x170/0x3f0 [ 925.502681] ? __might_fault+0xef/0x1d0 [ 925.506641] ? __fget_light+0x1d1/0x230 [ 925.510606] __x64_sys_sendmsg+0x132/0x220 [ 925.515107] ? __sys_sendmsg+0x1b0/0x1b0 [ 925.519157] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 925.523894] ? trace_hardirqs_off_caller+0x69/0x210 [ 925.528969] ? do_syscall_64+0x21/0x670 [ 925.532942] do_syscall_64+0xf9/0x670 [ 925.536734] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 925.541932] RIP: 0033:0x45d5f9 19:36:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xe900}, 0x0) 19:36:40 executing program 3: r0 = socket(0x0, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:36:40 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x91010000) 19:36:40 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xa1000000) 19:36:40 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x162) [ 925.545117] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 925.564011] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 925.571727] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 925.579028] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 925.586278] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 925.593529] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 925.600780] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c [ 925.673212] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 925.693109] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 925.698405] CPU: 0 PID: 31535 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 925.706295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 925.715657] Call Trace: [ 925.718260] dump_stack+0x22c/0x33e [ 925.721906] warn_alloc.cold+0x7b/0x18f [ 925.725894] ? zone_watermark_ok_safe+0x300/0x300 [ 925.730754] ? should_fail+0x142/0x7d8 [ 925.734663] ? ip_set_alloc+0x54/0x70 [ 925.738476] vzalloc+0x15c/0x1a0 [ 925.741852] ip_set_alloc+0x54/0x70 [ 925.745490] hash_netiface_create+0x42d/0xa50 [ 925.749994] ? hash_netiface6_add+0x2940/0x2940 [ 925.754678] ip_set_create+0x70e/0x1380 [ 925.758674] ? __find_set_type_get+0x450/0x450 [ 925.763275] ? lock_downgrade+0x750/0x750 [ 925.767453] ? __find_set_type_get+0x450/0x450 [ 925.767473] nfnetlink_rcv_msg+0xeff/0x1210 [ 925.776380] ? nfnetlink_net_init+0x170/0x170 [ 925.780907] ? avc_has_extended_perms+0x1020/0x1020 [ 925.786279] ? avc_has_extended_perms+0x1020/0x1020 [ 925.791315] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 925.795825] ? lock_downgrade+0x750/0x750 [ 925.799987] ? __local_bh_enable_ip+0x159/0x2a0 [ 925.804670] ? cred_has_capability+0x162/0x2e0 [ 925.809260] ? cred_has_capability+0x1d9/0x2e0 [ 925.813859] ? selinux_inode_copy_up+0x180/0x180 [ 925.818623] ? selinux_inode_copy_up+0x180/0x180 [ 925.823399] netlink_rcv_skb+0x160/0x440 [ 925.827472] ? nfnetlink_net_init+0x170/0x170 [ 925.832154] ? netlink_ack+0xae0/0xae0 [ 925.836061] ? ns_capable_common+0x117/0x140 [ 925.840490] nfnetlink_rcv+0x1b2/0x41b [ 925.844391] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 925.849167] netlink_unicast+0x4d5/0x690 [ 925.853242] ? netlink_sendskb+0x110/0x110 [ 925.857504] netlink_sendmsg+0x717/0xcc0 [ 925.861577] ? nlmsg_notify+0x1a0/0x1a0 [ 925.865816] ? __sock_recv_ts_and_drops+0x540/0x540 [ 925.871281] ? nlmsg_notify+0x1a0/0x1a0 [ 925.875269] sock_sendmsg+0xc7/0x130 [ 925.879000] ___sys_sendmsg+0x7bb/0x8f0 [ 925.882990] ? copy_msghdr_from_user+0x440/0x440 [ 925.888101] ? find_held_lock+0x2d/0x110 [ 925.892172] ? __fget+0x386/0x570 [ 925.895636] ? lock_downgrade+0x750/0x750 [ 925.899794] ? check_preemption_disabled+0x41/0x2b0 [ 925.904824] ? __fget+0x3ad/0x570 [ 925.908297] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 925.912538] ? lock_acquire+0x170/0x3f0 [ 925.916516] ? __might_fault+0xef/0x1d0 [ 925.920506] ? __fget_light+0x1d1/0x230 [ 925.924496] __x64_sys_sendmsg+0x132/0x220 [ 925.928740] ? __sys_sendmsg+0x1b0/0x1b0 [ 925.932825] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 925.937592] ? trace_hardirqs_off_caller+0x69/0x210 [ 925.942620] ? do_syscall_64+0x21/0x670 [ 925.946611] do_syscall_64+0xf9/0x670 [ 925.950424] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 925.955618] RIP: 0033:0x45d5f9 19:36:40 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xa2000000) [ 925.958818] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 925.978157] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 925.985875] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 925.993154] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 926.000430] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 926.007730] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 926.015008] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c [ 926.042832] warn_alloc_show_mem: 1 callbacks suppressed [ 926.042836] Mem-Info: [ 926.052452] active_anon:105286 inactive_anon:12300 isolated_anon:0 [ 926.052452] active_file:2241 inactive_file:45541 isolated_file:0 [ 926.052452] unevictable:0 dirty:316 writeback:0 unstable:0 [ 926.052452] slab_reclaimable:16463 slab_unreclaimable:250938 [ 926.052452] mapped:64124 shmem:12484 pagetables:1068 bounce:0 [ 926.052452] free:1083113 free_pcp:420 free_cma:0 [ 926.133432] Node 0 active_anon:416856kB inactive_anon:49200kB active_file:8960kB inactive_file:182164kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:256396kB dirty:1264kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 137216kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 926.178301] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 926.228643] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 926.261087] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 926.266238] Node 0 DMA32 free:545800kB min:35784kB low:44728kB high:53672kB active_anon:414752kB inactive_anon:49200kB active_file:8960kB inactive_file:182164kB unevictable:0kB writepending:1264kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7328kB pagetables:3976kB bounce:0kB free_pcp:2320kB local_pcp:1332kB free_cma:0kB [ 926.297061] lowmem_reserve[]: 0 0 2 2 2 [ 926.301318] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 926.327295] lowmem_reserve[]: 0 0 0 0 0 [ 926.331525] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 926.359101] lowmem_reserve[]: 0 0 0 0 0 [ 926.363137] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 926.379112] Node 0 DMA32: 5937*4kB (UME) 935*8kB (UME) 2181*16kB (UEH) 1880*32kB (UMEH) 698*64kB (UME) 340*128kB (UMEH) 197*256kB (UMEH) 116*512kB (UMH) 58*1024kB (UMH) 43*2048kB (UM) 18*4096kB (UM) = 545484kB [ 926.398031] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 926.409586] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 926.426904] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 926.435816] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 926.444456] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 926.453360] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 926.462007] 20566 total pagecache pages [ 926.465980] 0 pages in swap cache [ 926.469427] Swap cache stats: add 0, delete 0, find 0/0 [ 926.474844] Free swap = 0kB 19:36:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6000006c}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:36:41 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x92000000) 19:36:41 executing program 3: r0 = socket(0x0, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:36:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xea00}, 0x0) 19:36:41 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xa3000000) 19:36:41 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x162) [ 926.477852] Total swap = 0kB [ 926.480939] 1965979 pages RAM [ 926.484035] 0 pages HighMem/MovableOnly [ 926.487985] 352651 pages reserved [ 926.491491] 0 pages cma reserved [ 926.598442] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 926.613627] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 926.619459] CPU: 1 PID: 31632 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 926.627350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 926.636705] Call Trace: [ 926.639306] dump_stack+0x22c/0x33e [ 926.642953] warn_alloc.cold+0x7b/0x18f [ 926.646939] ? zone_watermark_ok_safe+0x300/0x300 [ 926.651801] ? should_fail+0x142/0x7d8 [ 926.655707] ? ip_set_alloc+0x54/0x70 [ 926.659563] vzalloc+0x15c/0x1a0 [ 926.662941] ip_set_alloc+0x54/0x70 [ 926.666576] hash_netiface_create+0x42d/0xa50 [ 926.671079] ? hash_netiface6_add+0x2940/0x2940 [ 926.675788] ip_set_create+0x70e/0x1380 [ 926.679804] ? __find_set_type_get+0x450/0x450 [ 926.684416] ? lock_downgrade+0x750/0x750 [ 926.688577] ? __find_set_type_get+0x450/0x450 [ 926.693168] nfnetlink_rcv_msg+0xeff/0x1210 [ 926.697512] ? nfnetlink_net_init+0x170/0x170 [ 926.702025] ? avc_has_extended_perms+0x1020/0x1020 [ 926.707054] ? avc_has_extended_perms+0x1020/0x1020 [ 926.712068] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 926.716613] ? lock_downgrade+0x750/0x750 [ 926.720796] ? __local_bh_enable_ip+0x159/0x2a0 [ 926.725476] ? cred_has_capability+0x162/0x2e0 [ 926.730064] ? cred_has_capability+0x1d9/0x2e0 [ 926.734695] ? selinux_inode_copy_up+0x180/0x180 [ 926.739457] ? selinux_inode_copy_up+0x180/0x180 [ 926.744228] netlink_rcv_skb+0x160/0x440 [ 926.748297] ? nfnetlink_net_init+0x170/0x170 [ 926.752799] ? netlink_ack+0xae0/0xae0 [ 926.756686] ? ns_capable_common+0x117/0x140 [ 926.761096] nfnetlink_rcv+0x1b2/0x41b [ 926.764982] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 926.769744] netlink_unicast+0x4d5/0x690 [ 926.773796] ? netlink_sendskb+0x110/0x110 [ 926.778018] netlink_sendmsg+0x717/0xcc0 [ 926.782080] ? nlmsg_notify+0x1a0/0x1a0 [ 926.786047] ? __sock_recv_ts_and_drops+0x540/0x540 [ 926.791065] ? nlmsg_notify+0x1a0/0x1a0 [ 926.795032] sock_sendmsg+0xc7/0x130 [ 926.798729] ___sys_sendmsg+0x7bb/0x8f0 [ 926.802702] ? copy_msghdr_from_user+0x440/0x440 [ 926.807460] ? find_held_lock+0x2d/0x110 [ 926.811515] ? __fget+0x386/0x570 [ 926.815066] ? lock_downgrade+0x750/0x750 [ 926.819213] ? check_preemption_disabled+0x41/0x2b0 [ 926.824230] ? __fget+0x3ad/0x570 [ 926.827678] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 926.831897] ? lock_acquire+0x170/0x3f0 [ 926.835853] ? __might_fault+0xef/0x1d0 [ 926.839814] ? __fget_light+0x1d1/0x230 [ 926.843785] __x64_sys_sendmsg+0x132/0x220 [ 926.848029] ? __sys_sendmsg+0x1b0/0x1b0 [ 926.852091] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 926.856834] ? trace_hardirqs_off_caller+0x69/0x210 [ 926.861847] ? do_syscall_64+0x21/0x670 [ 926.865818] do_syscall_64+0xf9/0x670 [ 926.869605] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 926.876534] RIP: 0033:0x45d5f9 [ 926.879721] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 19:36:41 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xa4000000) 19:36:41 executing program 3: r0 = socket(0x1000000010, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:36:41 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x92010000) [ 926.898604] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 926.906312] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 926.913564] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 926.921289] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 926.928565] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 926.935817] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c 19:36:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xeb00}, 0x0) 19:36:41 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x188) [ 927.076128] Mem-Info: [ 927.087361] active_anon:105861 inactive_anon:12300 isolated_anon:0 [ 927.087361] active_file:2242 inactive_file:45550 isolated_file:0 [ 927.087361] unevictable:0 dirty:329 writeback:0 unstable:0 [ 927.087361] slab_reclaimable:16461 slab_unreclaimable:251043 [ 927.087361] mapped:64408 shmem:12484 pagetables:1145 bounce:0 [ 927.087361] free:1082268 free_pcp:401 free_cma:0 [ 927.138665] Node 0 active_anon:425840kB inactive_anon:49200kB active_file:8964kB inactive_file:182200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:257732kB dirty:1316kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 927.146488] nla_parse: 36 callbacks suppressed [ 927.146497] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 927.169102] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 927.211940] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 927.241704] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 927.249657] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 927.254631] Node 0 DMA32 free:533204kB min:35784kB low:44728kB high:53672kB active_anon:426140kB inactive_anon:49200kB active_file:8964kB inactive_file:182200kB unevictable:0kB writepending:1316kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7840kB pagetables:4728kB bounce:0kB free_pcp:868kB local_pcp:284kB free_cma:0kB 19:36:41 executing program 3: r0 = socket(0x1000000010, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 927.304108] lowmem_reserve[]: 0 0 2 2 2 [ 927.308244] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 927.339831] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 927.385222] lowmem_reserve[]: 0 0 0 0 0 [ 927.389171] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 927.400317] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 927.414159] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 927.452341] lowmem_reserve[]: 0 0 0 0 0 [ 927.456481] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 927.474590] Node 0 DMA32: 5707*4kB (UME) 1128*8kB (UE) 2085*16kB (UMEH) 1873*32kB (UEH) 698*64kB (UE) 340*128kB (UMEH) 197*256kB (UMEH) 116*512kB (UMH) 58*1024kB (UMH) 43*2048kB (UM) 17*4096kB (UM) = 540252kB [ 927.495468] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 927.508276] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 927.526907] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 927.536531] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 927.546680] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 927.556886] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 927.563466] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 927.567178] 20579 total pagecache pages [ 927.578783] 0 pages in swap cache [ 927.583238] Swap cache stats: add 0, delete 0, find 0/0 [ 927.588756] Free swap = 0kB [ 927.593264] Total swap = 0kB [ 927.596416] 1965979 pages RAM [ 927.599618] 0 pages HighMem/MovableOnly [ 927.606262] 352651 pages reserved [ 927.609839] 0 pages cma reserved [ 927.614430] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 927.628051] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 927.633865] CPU: 0 PID: 31707 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 927.641759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 927.651115] Call Trace: [ 927.653718] dump_stack+0x22c/0x33e [ 927.657393] warn_alloc.cold+0x7b/0x18f [ 927.661392] ? zone_watermark_ok_safe+0x300/0x300 [ 927.666250] ? should_fail+0x142/0x7d8 [ 927.670167] ? ip_set_alloc+0x54/0x70 [ 927.673984] vzalloc+0x15c/0x1a0 [ 927.677360] ip_set_alloc+0x54/0x70 [ 927.680998] hash_netiface_create+0x42d/0xa50 [ 927.685512] ? hash_netiface6_add+0x2940/0x2940 [ 927.685534] ip_set_create+0x70e/0x1380 [ 927.694149] ? __find_set_type_get+0x450/0x450 [ 927.698726] ? __find_set_type_get+0x450/0x450 [ 927.703308] nfnetlink_rcv_msg+0xeff/0x1210 [ 927.707623] ? nfnetlink_net_init+0x170/0x170 [ 927.712105] ? avc_has_extended_perms+0x1020/0x1020 [ 927.717114] ? avc_has_extended_perms+0x1020/0x1020 [ 927.722124] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 927.726621] ? lock_downgrade+0x750/0x750 [ 927.730762] ? __local_bh_enable_ip+0x159/0x2a0 [ 927.735425] ? cred_has_capability+0x162/0x2e0 [ 927.739991] ? cred_has_capability+0x1d9/0x2e0 [ 927.744558] ? selinux_inode_copy_up+0x180/0x180 [ 927.749294] ? selinux_inode_copy_up+0x180/0x180 [ 927.754037] netlink_rcv_skb+0x160/0x440 [ 927.758105] ? nfnetlink_net_init+0x170/0x170 [ 927.762600] ? netlink_ack+0xae0/0xae0 [ 927.766476] ? ns_capable_common+0x117/0x140 [ 927.770874] nfnetlink_rcv+0x1b2/0x41b [ 927.774830] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 927.779584] netlink_unicast+0x4d5/0x690 [ 927.783644] ? netlink_sendskb+0x110/0x110 [ 927.787864] netlink_sendmsg+0x717/0xcc0 [ 927.791909] ? nlmsg_notify+0x1a0/0x1a0 [ 927.795863] ? __sock_recv_ts_and_drops+0x540/0x540 [ 927.800863] ? nlmsg_notify+0x1a0/0x1a0 [ 927.804818] sock_sendmsg+0xc7/0x130 [ 927.808513] ___sys_sendmsg+0x7bb/0x8f0 [ 927.812470] ? copy_msghdr_from_user+0x440/0x440 [ 927.817208] ? find_held_lock+0x2d/0x110 [ 927.821304] ? __fget+0x386/0x570 [ 927.824760] ? lock_downgrade+0x750/0x750 [ 927.828904] ? check_preemption_disabled+0x41/0x2b0 [ 927.833903] ? __fget+0x3ad/0x570 [ 927.837355] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 927.841584] ? lock_acquire+0x170/0x3f0 [ 927.845538] ? __might_fault+0xef/0x1d0 [ 927.849510] ? __fget_light+0x1d1/0x230 [ 927.853485] __x64_sys_sendmsg+0x132/0x220 [ 927.857716] ? __sys_sendmsg+0x1b0/0x1b0 [ 927.861767] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 927.866516] ? trace_hardirqs_off_caller+0x69/0x210 [ 927.871513] ? do_syscall_64+0x21/0x670 [ 927.875475] do_syscall_64+0xf9/0x670 [ 927.879261] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 927.884445] RIP: 0033:0x45d5f9 [ 927.887636] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 927.906515] RSP: 002b:00007fcce42e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 927.914202] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 927.921466] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 927.928728] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 927.936779] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 927.944030] R13: 00007ffe1b999d8f R14: 00007fcce42e39c0 R15: 000000000118cfec 19:36:42 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000074}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:36:42 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x156) 19:36:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xec00}, 0x0) 19:36:42 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xa5000000) 19:36:42 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x93000000) 19:36:42 executing program 3: r0 = socket(0x1000000010, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 928.044094] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:36:42 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 928.084312] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 928.119644] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 928.144251] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 928.159019] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 928.172729] CPU: 1 PID: 31748 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 928.180639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 928.190169] Call Trace: [ 928.192770] dump_stack+0x22c/0x33e [ 928.196433] warn_alloc.cold+0x7b/0x18f [ 928.200422] ? zone_watermark_ok_safe+0x300/0x300 [ 928.205276] ? should_fail+0x142/0x7d8 [ 928.209182] ? ip_set_alloc+0x54/0x70 [ 928.212998] vzalloc+0x15c/0x1a0 [ 928.216372] ip_set_alloc+0x54/0x70 [ 928.220008] hash_netiface_create+0x42d/0xa50 [ 928.224507] ? hash_netiface6_add+0x2940/0x2940 [ 928.225911] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 928.229175] ip_set_create+0x70e/0x1380 [ 928.229199] ? __find_set_type_get+0x450/0x450 [ 928.229239] ? lock_downgrade+0x750/0x750 [ 928.251474] ? __find_set_type_get+0x450/0x450 [ 928.256070] nfnetlink_rcv_msg+0xeff/0x1210 [ 928.260414] ? nfnetlink_net_init+0x170/0x170 [ 928.264927] ? avc_has_extended_perms+0x1020/0x1020 [ 928.270040] ? avc_has_extended_perms+0x1020/0x1020 [ 928.275066] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 928.279575] ? lock_downgrade+0x750/0x750 [ 928.283730] ? __local_bh_enable_ip+0x159/0x2a0 [ 928.288403] ? cred_has_capability+0x162/0x2e0 [ 928.292976] ? cred_has_capability+0x1d9/0x2e0 [ 928.297549] ? selinux_inode_copy_up+0x180/0x180 [ 928.302295] ? selinux_inode_copy_up+0x180/0x180 [ 928.307044] netlink_rcv_skb+0x160/0x440 [ 928.311096] ? nfnetlink_net_init+0x170/0x170 [ 928.315581] ? netlink_ack+0xae0/0xae0 [ 928.319474] ? ns_capable_common+0x117/0x140 [ 928.323907] nfnetlink_rcv+0x1b2/0x41b [ 928.327789] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 928.332549] netlink_unicast+0x4d5/0x690 [ 928.336633] ? netlink_sendskb+0x110/0x110 [ 928.340871] netlink_sendmsg+0x717/0xcc0 [ 928.344940] ? nlmsg_notify+0x1a0/0x1a0 [ 928.348912] ? __sock_recv_ts_and_drops+0x540/0x540 [ 928.353946] ? nlmsg_notify+0x1a0/0x1a0 [ 928.357910] sock_sendmsg+0xc7/0x130 [ 928.361631] ___sys_sendmsg+0x7bb/0x8f0 [ 928.365631] ? copy_msghdr_from_user+0x440/0x440 [ 928.370385] ? find_held_lock+0x2d/0x110 [ 928.374437] ? __fget+0x386/0x570 [ 928.377882] ? lock_downgrade+0x750/0x750 [ 928.382038] ? check_preemption_disabled+0x41/0x2b0 [ 928.387068] ? __fget+0x3ad/0x570 [ 928.390524] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 928.394753] ? lock_acquire+0x170/0x3f0 [ 928.398733] ? __might_fault+0xef/0x1d0 [ 928.402708] ? __fget_light+0x1d1/0x230 [ 928.406681] __x64_sys_sendmsg+0x132/0x220 [ 928.410907] ? __sys_sendmsg+0x1b0/0x1b0 [ 928.414967] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 928.419714] ? trace_hardirqs_off_caller+0x69/0x210 [ 928.424721] ? do_syscall_64+0x21/0x670 [ 928.428688] do_syscall_64+0xf9/0x670 [ 928.432507] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 928.437684] RIP: 0033:0x45d5f9 [ 928.440874] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 928.459760] RSP: 002b:00007fcce42e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 928.467465] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 928.474729] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 928.482008] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 928.489270] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 928.496532] R13: 00007ffe1b999d8f R14: 00007fcce42e39c0 R15: 000000000118cfec [ 928.530292] warn_alloc_show_mem: 1 callbacks suppressed [ 928.530297] Mem-Info: [ 928.538426] active_anon:106417 inactive_anon:12300 isolated_anon:0 [ 928.538426] active_file:2242 inactive_file:45562 isolated_file:0 [ 928.538426] unevictable:0 dirty:84 writeback:0 unstable:0 [ 928.538426] slab_reclaimable:16462 slab_unreclaimable:250756 [ 928.538426] mapped:64185 shmem:12484 pagetables:1109 bounce:0 [ 928.538426] free:1082101 free_pcp:404 free_cma:0 [ 928.604137] Node 0 active_anon:421304kB inactive_anon:49200kB active_file:8964kB inactive_file:182248kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:256640kB dirty:336kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 19:36:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xed00}, 0x0) 19:36:43 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xa6000000) 19:36:43 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x93010000) [ 928.637573] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 19:36:43 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x156) 19:36:43 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 928.686220] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 928.810143] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 928.815214] Node 0 DMA32 free:541868kB min:35784kB low:44728kB high:53672kB active_anon:417248kB inactive_anon:49200kB active_file:8964kB inactive_file:182248kB unevictable:0kB writepending:300kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7552kB pagetables:4436kB bounce:0kB free_pcp:1776kB local_pcp:916kB free_cma:0kB [ 928.885944] lowmem_reserve[]: 0 0 2 2 2 [ 928.916078] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 928.980924] lowmem_reserve[]: 0 0 0 0 0 [ 929.000429] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 929.052979] lowmem_reserve[]: 0 0 0 0 0 [ 929.063078] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 929.080344] Node 0 DMA32: 5722*4kB (UME) 1138*8kB (UME) 2113*16kB (UMEH) 1881*32kB (UEH) 702*64kB (UE) 340*128kB (UMEH) 198*256kB (UMEH) 116*512kB (UMH) 58*1024kB (UMH) 45*2048kB (UM) 17*4096kB (UM) = 545704kB [ 929.099974] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 929.111913] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 929.129304] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 929.138306] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 19:36:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6000007a}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:36:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xee00}, 0x0) 19:36:43 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x94000000) 19:36:43 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xa7000000) 19:36:43 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:36:43 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x154) [ 929.146954] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 929.155896] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 929.164694] 20596 total pagecache pages [ 929.168688] 0 pages in swap cache [ 929.172197] Swap cache stats: add 0, delete 0, find 0/0 [ 929.177570] Free swap = 0kB [ 929.180651] Total swap = 0kB [ 929.183667] 1965979 pages RAM [ 929.186752] 0 pages HighMem/MovableOnly [ 929.190798] 352651 pages reserved [ 929.194250] 0 pages cma reserved 19:36:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xef00}, 0x0) [ 929.321781] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 929.377312] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 929.400019] CPU: 1 PID: 31841 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 929.407943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 929.417335] Call Trace: [ 929.419934] dump_stack+0x22c/0x33e [ 929.423582] warn_alloc.cold+0x7b/0x18f [ 929.427568] ? zone_watermark_ok_safe+0x300/0x300 [ 929.432423] ? should_fail+0x142/0x7d8 [ 929.436324] ? ip_set_alloc+0x54/0x70 [ 929.440135] vzalloc+0x15c/0x1a0 [ 929.443508] ip_set_alloc+0x54/0x70 [ 929.447141] hash_netiface_create+0x42d/0xa50 [ 929.451646] ? hash_netiface6_add+0x2940/0x2940 [ 929.456323] ip_set_create+0x70e/0x1380 [ 929.460573] ? __find_set_type_get+0x450/0x450 [ 929.465186] ? lock_downgrade+0x750/0x750 [ 929.469352] ? __find_set_type_get+0x450/0x450 [ 929.473945] nfnetlink_rcv_msg+0xeff/0x1210 [ 929.478289] ? nfnetlink_net_init+0x170/0x170 [ 929.482800] ? avc_has_extended_perms+0x1020/0x1020 [ 929.487822] ? avc_has_extended_perms+0x1020/0x1020 [ 929.492846] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 929.498344] ? lock_downgrade+0x750/0x750 [ 929.502502] ? __local_bh_enable_ip+0x159/0x2a0 [ 929.507290] ? cred_has_capability+0x162/0x2e0 [ 929.511882] ? cred_has_capability+0x1d9/0x2e0 [ 929.516476] ? selinux_inode_copy_up+0x180/0x180 [ 929.522455] ? selinux_inode_copy_up+0x180/0x180 [ 929.527225] netlink_rcv_skb+0x160/0x440 [ 929.531299] ? nfnetlink_net_init+0x170/0x170 [ 929.535800] ? netlink_ack+0xae0/0xae0 [ 929.539702] ? ns_capable_common+0x117/0x140 [ 929.544128] nfnetlink_rcv+0x1b2/0x41b 19:36:44 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xa8000000) 19:36:44 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x94010000) [ 929.548026] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 929.552802] netlink_unicast+0x4d5/0x690 [ 929.556876] ? netlink_sendskb+0x110/0x110 [ 929.561127] netlink_sendmsg+0x717/0xcc0 [ 929.565202] ? nlmsg_notify+0x1a0/0x1a0 [ 929.569186] ? __sock_recv_ts_and_drops+0x540/0x540 [ 929.574219] ? nlmsg_notify+0x1a0/0x1a0 [ 929.578206] sock_sendmsg+0xc7/0x130 [ 929.581926] ___sys_sendmsg+0x7bb/0x8f0 [ 929.585917] ? copy_msghdr_from_user+0x440/0x440 [ 929.590684] ? find_held_lock+0x2d/0x110 [ 929.594764] ? __fget+0x386/0x570 [ 929.598233] ? lock_downgrade+0x750/0x750 [ 929.602394] ? check_preemption_disabled+0x41/0x2b0 [ 929.607439] ? __fget+0x3ad/0x570 [ 929.610907] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 929.615144] ? lock_acquire+0x170/0x3f0 [ 929.619124] ? __might_fault+0xef/0x1d0 [ 929.623104] ? __fget_light+0x1d1/0x230 [ 929.627086] __x64_sys_sendmsg+0x132/0x220 [ 929.631325] ? __sys_sendmsg+0x1b0/0x1b0 [ 929.635406] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 929.640171] ? trace_hardirqs_off_caller+0x69/0x210 [ 929.645195] ? do_syscall_64+0x21/0x670 [ 929.649186] do_syscall_64+0xf9/0x670 [ 929.653004] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 929.658194] RIP: 0033:0x45d5f9 [ 929.661590] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 929.680492] RSP: 002b:00007fcce42e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 929.688899] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 19:36:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xf000}, 0x0) 19:36:44 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xa9000000) 19:36:44 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x154) [ 929.696171] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 929.703447] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 929.710721] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 929.717993] R13: 00007ffe1b999d8f R14: 00007fcce42e39c0 R15: 000000000118cfec [ 929.863883] Mem-Info: [ 929.867271] active_anon:104778 inactive_anon:12300 isolated_anon:0 [ 929.867271] active_file:2245 inactive_file:45567 isolated_file:0 [ 929.867271] unevictable:0 dirty:104 writeback:0 unstable:0 [ 929.867271] slab_reclaimable:16438 slab_unreclaimable:251060 [ 929.867271] mapped:64253 shmem:12484 pagetables:1048 bounce:0 [ 929.867271] free:1083495 free_pcp:397 free_cma:0 [ 929.973777] Node 0 active_anon:415280kB inactive_anon:49196kB active_file:8976kB inactive_file:182268kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:257576kB dirty:416kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 930.003965] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 930.030984] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 930.060793] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 930.065846] Node 0 DMA32 free:543712kB min:35784kB low:44728kB high:53672kB active_anon:414680kB inactive_anon:49196kB active_file:8976kB inactive_file:182268kB unevictable:0kB writepending:416kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7360kB pagetables:3960kB bounce:0kB free_pcp:2148kB local_pcp:692kB free_cma:0kB [ 930.097978] lowmem_reserve[]: 0 0 2 2 2 [ 930.102330] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 930.129474] lowmem_reserve[]: 0 0 0 0 0 [ 930.135841] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 930.163912] lowmem_reserve[]: 0 0 0 0 0 [ 930.167905] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 930.184661] Node 0 DMA32: 5704*4kB (UME) 1118*8kB (UME) 2098*16kB (UMEH) 1882*32kB (UEH) 701*64kB (UE) 341*128kB (UMEH) 198*256kB (UMEH) 116*512kB (UMH) 58*1024kB (UMH) 45*2048kB (UM) 17*4096kB (UM) = 545328kB [ 930.203999] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 930.216020] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 930.234248] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 930.243691] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 930.252827] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 930.262405] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 930.271652] 20603 total pagecache pages [ 930.275630] 0 pages in swap cache [ 930.279062] Swap cache stats: add 0, delete 0, find 0/0 [ 930.284964] Free swap = 0kB [ 930.287984] Total swap = 0kB [ 930.291133] 1965979 pages RAM [ 930.294229] 0 pages HighMem/MovableOnly [ 930.298255] 352651 pages reserved [ 930.301781] 0 pages cma reserved [ 930.305258] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 930.317286] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 930.322619] CPU: 1 PID: 31829 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 930.330505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 930.339855] Call Trace: [ 930.342443] dump_stack+0x22c/0x33e [ 930.346057] warn_alloc.cold+0x7b/0x18f [ 930.350039] ? zone_watermark_ok_safe+0x300/0x300 [ 930.354883] ? should_fail+0x142/0x7d8 [ 930.358878] ? ip_set_alloc+0x54/0x70 [ 930.362683] vzalloc+0x15c/0x1a0 [ 930.366058] ip_set_alloc+0x54/0x70 [ 930.369672] hash_netiface_create+0x42d/0xa50 [ 930.374152] ? hash_netiface6_add+0x2940/0x2940 [ 930.378807] ip_set_create+0x70e/0x1380 [ 930.382769] ? __find_set_type_get+0x450/0x450 [ 930.387357] ? __find_set_type_get+0x450/0x450 [ 930.391940] nfnetlink_rcv_msg+0xeff/0x1210 [ 930.396286] ? nfnetlink_net_init+0x170/0x170 [ 930.400789] ? avc_has_extended_perms+0x1020/0x1020 [ 930.405800] ? avc_has_extended_perms+0x1020/0x1020 [ 930.410814] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 930.415305] ? lock_downgrade+0x750/0x750 [ 930.419447] ? __local_bh_enable_ip+0x159/0x2a0 [ 930.424116] ? cred_has_capability+0x162/0x2e0 [ 930.428690] ? cred_has_capability+0x1d9/0x2e0 [ 930.433273] ? selinux_inode_copy_up+0x180/0x180 [ 930.438026] ? selinux_inode_copy_up+0x180/0x180 [ 930.442772] netlink_rcv_skb+0x160/0x440 [ 930.446818] ? nfnetlink_net_init+0x170/0x170 [ 930.451311] ? netlink_ack+0xae0/0xae0 [ 930.455194] ? ns_capable_common+0x117/0x140 [ 930.459587] nfnetlink_rcv+0x1b2/0x41b [ 930.463459] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 930.468227] netlink_unicast+0x4d5/0x690 [ 930.472287] ? netlink_sendskb+0x110/0x110 [ 930.476531] netlink_sendmsg+0x717/0xcc0 [ 930.480595] ? nlmsg_notify+0x1a0/0x1a0 [ 930.484562] ? __sock_recv_ts_and_drops+0x540/0x540 [ 930.489578] ? nlmsg_notify+0x1a0/0x1a0 [ 930.493544] sock_sendmsg+0xc7/0x130 [ 930.497242] ___sys_sendmsg+0x7bb/0x8f0 [ 930.501215] ? copy_msghdr_from_user+0x440/0x440 [ 930.505979] ? find_held_lock+0x2d/0x110 [ 930.510045] ? __fget+0x386/0x570 [ 930.513501] ? lock_downgrade+0x750/0x750 [ 930.517649] ? check_preemption_disabled+0x41/0x2b0 [ 930.522658] ? __fget+0x3ad/0x570 [ 930.526098] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 930.530331] ? lock_acquire+0x170/0x3f0 [ 930.534305] ? __might_fault+0xef/0x1d0 [ 930.538705] ? __fget_light+0x1d1/0x230 [ 930.542668] __x64_sys_sendmsg+0x132/0x220 [ 930.546888] ? __sys_sendmsg+0x1b0/0x1b0 [ 930.550961] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 930.555744] ? trace_hardirqs_off_caller+0x69/0x210 [ 930.560758] ? do_syscall_64+0x21/0x670 [ 930.564739] do_syscall_64+0xf9/0x670 [ 930.568545] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 930.573716] RIP: 0033:0x45d5f9 [ 930.576892] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 930.595787] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 930.603496] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 930.610755] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 930.618032] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 19:36:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x600000f0}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:36:45 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:36:45 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x95000000) 19:36:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xf100}, 0x0) 19:36:45 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xaa000000) 19:36:45 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x152) [ 930.625286] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 930.632571] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c [ 930.773998] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 930.800226] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 930.863302] CPU: 1 PID: 31936 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 930.871224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 930.880581] Call Trace: [ 930.883185] dump_stack+0x22c/0x33e [ 930.886830] warn_alloc.cold+0x7b/0x18f [ 930.890821] ? zone_watermark_ok_safe+0x300/0x300 [ 930.895680] ? should_fail+0x142/0x7d8 [ 930.899588] ? ip_set_alloc+0x54/0x70 [ 930.903428] vzalloc+0x15c/0x1a0 [ 930.906807] ip_set_alloc+0x54/0x70 19:36:45 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x95010000) 19:36:45 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x96000000) [ 930.910450] hash_netiface_create+0x42d/0xa50 [ 930.915499] ? hash_netiface6_add+0x2940/0x2940 [ 930.920192] ip_set_create+0x70e/0x1380 [ 930.924180] ? __find_set_type_get+0x450/0x450 [ 930.928797] ? lock_downgrade+0x750/0x750 [ 930.932958] ? __find_set_type_get+0x450/0x450 [ 930.937555] nfnetlink_rcv_msg+0xeff/0x1210 [ 930.941900] ? nfnetlink_net_init+0x170/0x170 [ 930.946420] ? avc_has_extended_perms+0x1020/0x1020 [ 930.951445] ? avc_has_extended_perms+0x1020/0x1020 [ 930.956468] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 930.960979] ? lock_downgrade+0x750/0x750 [ 930.965139] ? __local_bh_enable_ip+0x159/0x2a0 [ 930.969819] ? cred_has_capability+0x162/0x2e0 [ 930.974418] ? cred_has_capability+0x1d9/0x2e0 [ 930.979013] ? selinux_inode_copy_up+0x180/0x180 [ 930.983787] ? selinux_inode_copy_up+0x180/0x180 [ 930.988558] netlink_rcv_skb+0x160/0x440 [ 930.992632] ? nfnetlink_net_init+0x170/0x170 [ 930.997137] ? netlink_ack+0xae0/0xae0 [ 931.001044] ? ns_capable_common+0x117/0x140 [ 931.005482] nfnetlink_rcv+0x1b2/0x41b [ 931.009374] ? nfnetlink_rcv_batch+0x1710/0x1710 19:36:45 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xab000000) 19:36:45 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 931.014152] netlink_unicast+0x4d5/0x690 [ 931.018236] ? netlink_sendskb+0x110/0x110 [ 931.022497] netlink_sendmsg+0x717/0xcc0 [ 931.026571] ? nlmsg_notify+0x1a0/0x1a0 [ 931.030555] ? __sock_recv_ts_and_drops+0x540/0x540 [ 931.035627] ? nlmsg_notify+0x1a0/0x1a0 [ 931.039609] sock_sendmsg+0xc7/0x130 [ 931.043336] ___sys_sendmsg+0x7bb/0x8f0 [ 931.047337] ? copy_msghdr_from_user+0x440/0x440 [ 931.052103] ? find_held_lock+0x2d/0x110 [ 931.056175] ? __fget+0x386/0x570 [ 931.059636] ? lock_downgrade+0x750/0x750 [ 931.063792] ? check_preemption_disabled+0x41/0x2b0 [ 931.068822] ? __fget+0x3ad/0x570 [ 931.072319] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 931.076598] ? lock_acquire+0x170/0x3f0 [ 931.080581] ? __might_fault+0xef/0x1d0 [ 931.084568] ? __fget_light+0x1d1/0x230 [ 931.088555] __x64_sys_sendmsg+0x132/0x220 [ 931.092801] ? __sys_sendmsg+0x1b0/0x1b0 [ 931.096882] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 931.101650] ? trace_hardirqs_off_caller+0x69/0x210 [ 931.106682] ? do_syscall_64+0x21/0x670 [ 931.110673] do_syscall_64+0xf9/0x670 19:36:45 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x96010000) [ 931.114488] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 931.119700] RIP: 0033:0x45d5f9 [ 931.122898] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 931.141809] RSP: 002b:00007fcce42e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 931.149523] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 931.156965] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 19:36:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xf200}, 0x0) [ 931.164238] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 931.171512] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 931.178785] R13: 00007ffe1b999d8f R14: 00007fcce42e39c0 R15: 000000000118cfec [ 931.208988] warn_alloc_show_mem: 1 callbacks suppressed [ 931.208993] Mem-Info: [ 931.218397] active_anon:105380 inactive_anon:12300 isolated_anon:0 [ 931.218397] active_file:2246 inactive_file:45580 isolated_file:0 [ 931.218397] unevictable:0 dirty:118 writeback:0 unstable:0 [ 931.218397] slab_reclaimable:16435 slab_unreclaimable:250858 [ 931.218397] mapped:64443 shmem:12484 pagetables:1148 bounce:0 [ 931.218397] free:1083140 free_pcp:213 free_cma:0 [ 931.257967] Node 0 active_anon:423660kB inactive_anon:49200kB active_file:8980kB inactive_file:182320kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:257772kB dirty:472kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 131072kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 931.287097] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 931.331687] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 931.371744] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 931.405952] Node 0 DMA32 free:542376kB min:35784kB low:44728kB high:53672kB active_anon:415264kB inactive_anon:49200kB active_file:8980kB inactive_file:182320kB unevictable:0kB writepending:472kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7520kB pagetables:4592kB bounce:0kB free_pcp:836kB local_pcp:268kB free_cma:0kB [ 931.465519] lowmem_reserve[]: 0 0 2 2 2 [ 931.469601] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 931.502231] lowmem_reserve[]: 0 0 0 0 0 [ 931.506303] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 931.540376] lowmem_reserve[]: 0 0 0 0 0 [ 931.544471] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 931.562427] Node 0 DMA32: 5576*4kB (UME) 1121*8kB (UME) 2052*16kB (UMEH) 1882*32kB (UEH) 701*64kB (UE) 341*128kB (UMEH) 198*256kB (UMEH) 116*512kB (UMH) 58*1024kB (UMH) 45*2048kB (UM) 17*4096kB (UM) = 544104kB [ 931.582140] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 931.594399] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 931.612064] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 931.621002] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 931.629579] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 931.639524] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 931.648775] 20610 total pagecache pages [ 931.652895] 0 pages in swap cache [ 931.656342] Swap cache stats: add 0, delete 0, find 0/0 [ 931.662488] Free swap = 0kB 19:36:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000300}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:36:46 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x152) 19:36:46 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xac000000) 19:36:46 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x97000000) 19:36:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xf300}, 0x0) 19:36:46 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 931.665511] Total swap = 0kB [ 931.668510] 1965979 pages RAM [ 931.671683] 0 pages HighMem/MovableOnly [ 931.675647] 352651 pages reserved [ 931.679076] 0 pages cma reserved [ 931.816515] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 931.829241] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 931.835749] CPU: 0 PID: 32034 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 931.843640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 931.853005] Call Trace: [ 931.855605] dump_stack+0x22c/0x33e [ 931.859252] warn_alloc.cold+0x7b/0x18f [ 931.863249] ? zone_watermark_ok_safe+0x300/0x300 [ 931.868108] ? should_fail+0x142/0x7d8 [ 931.872017] ? ip_set_alloc+0x54/0x70 [ 931.875916] vzalloc+0x15c/0x1a0 [ 931.879291] ip_set_alloc+0x54/0x70 [ 931.882930] hash_netiface_create+0x42d/0xa50 [ 931.887448] ? hash_netiface6_add+0x2940/0x2940 [ 931.892137] ip_set_create+0x70e/0x1380 [ 931.896130] ? __find_set_type_get+0x450/0x450 [ 931.900857] ? lock_downgrade+0x750/0x750 [ 931.905017] ? __find_set_type_get+0x450/0x450 [ 931.909656] nfnetlink_rcv_msg+0xeff/0x1210 [ 931.914026] ? nfnetlink_net_init+0x170/0x170 [ 931.918567] ? avc_has_extended_perms+0x1020/0x1020 [ 931.923593] ? avc_has_extended_perms+0x1020/0x1020 [ 931.928617] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 931.933135] ? lock_downgrade+0x750/0x750 [ 931.937287] ? __local_bh_enable_ip+0x159/0x2a0 [ 931.942087] ? cred_has_capability+0x162/0x2e0 [ 931.946678] ? cred_has_capability+0x1d9/0x2e0 [ 931.951276] ? selinux_inode_copy_up+0x180/0x180 [ 931.956039] ? selinux_inode_copy_up+0x180/0x180 [ 931.960810] netlink_rcv_skb+0x160/0x440 [ 931.964882] ? nfnetlink_net_init+0x170/0x170 [ 931.969388] ? netlink_ack+0xae0/0xae0 [ 931.973302] ? ns_capable_common+0x117/0x140 [ 931.977724] nfnetlink_rcv+0x1b2/0x41b [ 931.981620] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 931.986403] netlink_unicast+0x4d5/0x690 [ 931.990481] ? netlink_sendskb+0x110/0x110 [ 931.994731] netlink_sendmsg+0x717/0xcc0 [ 931.998810] ? nlmsg_notify+0x1a0/0x1a0 [ 932.002785] ? __sock_recv_ts_and_drops+0x540/0x540 [ 932.007811] ? nlmsg_notify+0x1a0/0x1a0 [ 932.011797] sock_sendmsg+0xc7/0x130 [ 932.015526] ___sys_sendmsg+0x7bb/0x8f0 [ 932.019514] ? copy_msghdr_from_user+0x440/0x440 [ 932.024277] ? find_held_lock+0x2d/0x110 [ 932.028350] ? __fget+0x386/0x570 [ 932.031821] ? lock_downgrade+0x750/0x750 [ 932.035984] ? check_preemption_disabled+0x41/0x2b0 [ 932.041015] ? __fget+0x3ad/0x570 [ 932.044479] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 932.048721] ? lock_acquire+0x170/0x3f0 [ 932.052707] ? __might_fault+0xef/0x1d0 [ 932.056698] ? __fget_light+0x1d1/0x230 [ 932.060693] __x64_sys_sendmsg+0x132/0x220 [ 932.064942] ? __sys_sendmsg+0x1b0/0x1b0 [ 932.069024] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 932.073787] ? trace_hardirqs_off_caller+0x69/0x210 [ 932.078813] ? do_syscall_64+0x21/0x670 [ 932.082806] do_syscall_64+0xf9/0x670 [ 932.086620] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 932.091821] RIP: 0033:0x45d5f9 [ 932.095022] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 19:36:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xf400}, 0x0) 19:36:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xf500}, 0x0) 19:36:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xf600}, 0x0) 19:36:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xf700}, 0x0) 19:36:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xf800}, 0x0) [ 932.113927] RSP: 002b:00007fcce42e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 932.121670] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 932.128946] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 932.136227] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 932.143491] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 932.150756] R13: 00007ffe1b999d8f R14: 00007fcce42e39c0 R15: 000000000118cfec 19:36:46 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xad000000) [ 932.170408] nla_parse: 41 callbacks suppressed [ 932.170419] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 932.223865] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 932.369321] Mem-Info: [ 932.380449] active_anon:104380 inactive_anon:12300 isolated_anon:0 [ 932.380449] active_file:2246 inactive_file:45588 isolated_file:0 [ 932.380449] unevictable:0 dirty:126 writeback:0 unstable:0 [ 932.380449] slab_reclaimable:16435 slab_unreclaimable:251207 [ 932.380449] mapped:64444 shmem:12484 pagetables:1105 bounce:0 [ 932.380449] free:1083335 free_pcp:230 free_cma:0 [ 932.390556] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 932.457870] Node 0 active_anon:415552kB inactive_anon:49200kB active_file:8980kB inactive_file:182352kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:257776kB dirty:504kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 932.488163] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 932.514078] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 932.540347] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 932.545378] Node 0 DMA32 free:545616kB min:35784kB low:44728kB high:53672kB active_anon:414752kB inactive_anon:49200kB active_file:8980kB inactive_file:182352kB unevictable:0kB writepending:504kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7328kB pagetables:3976kB bounce:0kB free_pcp:2148kB local_pcp:832kB free_cma:0kB [ 932.576008] lowmem_reserve[]: 0 0 2 2 2 [ 932.580115] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 932.580151] lowmem_reserve[]: 0 0 0 0 0 [ 932.580172] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 932.580223] lowmem_reserve[]: 0 0 0 0 0 [ 932.580244] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 932.580330] Node 0 DMA32: 5584*4kB (UME) 986*8kB (UME) 2200*16kB (UMEH) 1882*32kB (UEH) 702*64kB (UE) 342*128kB (UMEH) 198*256kB (UMEH) 116*512kB (UMH) 58*1024kB (UMH) 45*2048kB (UM) 17*4096kB (UM) = 545616kB [ 932.580417] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 932.580479] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 932.580575] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 932.580586] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 932.580596] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 932.580605] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 932.580610] 20618 total pagecache pages [ 932.580625] 0 pages in swap cache 19:36:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000319}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:36:47 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:36:47 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x150) 19:36:47 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x97010000) 19:36:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xf900}, 0x0) 19:36:47 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xae000000) [ 932.580635] Swap cache stats: add 0, delete 0, find 0/0 [ 932.580640] Free swap = 0kB [ 932.580646] Total swap = 0kB [ 932.580655] 1965979 pages RAM [ 932.580660] 0 pages HighMem/MovableOnly [ 932.580666] 352651 pages reserved [ 932.580671] 0 pages cma reserved [ 932.844794] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 932.889187] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 932.913987] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 932.918558] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 932.926034] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 932.941967] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 932.949855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 932.959202] Call Trace: [ 932.961785] dump_stack+0x22c/0x33e [ 932.965409] warn_alloc.cold+0x7b/0x18f [ 932.969377] ? zone_watermark_ok_safe+0x300/0x300 [ 932.974212] ? should_fail+0x142/0x7d8 [ 932.978097] ? ip_set_alloc+0x54/0x70 [ 932.981888] vzalloc+0x15c/0x1a0 [ 932.985333] ip_set_alloc+0x54/0x70 [ 932.988951] hash_netiface_create+0x42d/0xa50 [ 932.993439] ? hash_netiface6_add+0x2940/0x2940 [ 932.998125] ip_set_create+0x70e/0x1380 [ 933.002097] ? __find_set_type_get+0x450/0x450 [ 933.006781] ? lock_downgrade+0x750/0x750 [ 933.010920] ? __find_set_type_get+0x450/0x450 [ 933.015493] nfnetlink_rcv_msg+0xeff/0x1210 [ 933.019815] ? nfnetlink_net_init+0x170/0x170 [ 933.024306] ? avc_has_extended_perms+0x1020/0x1020 [ 933.029322] ? avc_has_extended_perms+0x1020/0x1020 [ 933.034324] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 933.038809] ? lock_downgrade+0x750/0x750 [ 933.042950] ? __local_bh_enable_ip+0x159/0x2a0 [ 933.047609] ? cred_has_capability+0x162/0x2e0 [ 933.052177] ? cred_has_capability+0x1d9/0x2e0 [ 933.056760] ? selinux_inode_copy_up+0x180/0x180 [ 933.061529] ? selinux_inode_copy_up+0x180/0x180 [ 933.066277] netlink_rcv_skb+0x160/0x440 [ 933.070344] ? nfnetlink_net_init+0x170/0x170 [ 933.074827] ? netlink_ack+0xae0/0xae0 [ 933.078751] ? ns_capable_common+0x117/0x140 [ 933.083163] nfnetlink_rcv+0x1b2/0x41b [ 933.087045] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 933.091803] netlink_unicast+0x4d5/0x690 [ 933.095861] ? netlink_sendskb+0x110/0x110 [ 933.100117] netlink_sendmsg+0x717/0xcc0 [ 933.104177] ? nlmsg_notify+0x1a0/0x1a0 [ 933.108150] ? __sock_recv_ts_and_drops+0x540/0x540 [ 933.113165] ? nlmsg_notify+0x1a0/0x1a0 [ 933.117126] sock_sendmsg+0xc7/0x130 [ 933.120829] ___sys_sendmsg+0x7bb/0x8f0 [ 933.124797] ? copy_msghdr_from_user+0x440/0x440 [ 933.129540] ? find_held_lock+0x2d/0x110 [ 933.133603] ? __fget+0x386/0x570 [ 933.137046] ? lock_downgrade+0x750/0x750 [ 933.141185] ? check_preemption_disabled+0x41/0x2b0 [ 933.146191] ? __fget+0x3ad/0x570 [ 933.149637] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 933.153859] ? lock_acquire+0x170/0x3f0 [ 933.157833] ? __might_fault+0xef/0x1d0 [ 933.161804] ? __fget_light+0x1d1/0x230 [ 933.165857] __x64_sys_sendmsg+0x132/0x220 [ 933.170082] ? __sys_sendmsg+0x1b0/0x1b0 [ 933.174157] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 933.178919] ? trace_hardirqs_off_caller+0x69/0x210 [ 933.183922] ? do_syscall_64+0x21/0x670 [ 933.187903] do_syscall_64+0xf9/0x670 [ 933.191710] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 933.196899] RIP: 0033:0x45d5f9 [ 933.200081] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 933.218977] RSP: 002b:00007fcce42e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 933.226698] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 933.233993] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 933.241422] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 933.248675] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 933.255929] R13: 00007ffe1b999d8f R14: 00007fcce42e39c0 R15: 000000000118cfec 19:36:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xfa00}, 0x0) [ 933.292236] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 19:36:48 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xaf000000) [ 933.357095] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 19:36:48 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 933.407011] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:36:48 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x98000000) 19:36:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x600003a2}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:36:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xfb00}, 0x0) 19:36:48 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x150) [ 933.504458] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 933.609019] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 933.635789] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 933.673162] CPU: 1 PID: 32150 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 933.681105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 933.691523] Call Trace: [ 933.694136] dump_stack+0x22c/0x33e [ 933.697786] warn_alloc.cold+0x7b/0x18f [ 933.701776] ? zone_watermark_ok_safe+0x300/0x300 [ 933.706645] ? should_fail+0x142/0x7d8 [ 933.710557] ? ip_set_alloc+0x54/0x70 [ 933.714384] vzalloc+0x15c/0x1a0 [ 933.717768] ip_set_alloc+0x54/0x70 [ 933.721417] hash_netiface_create+0x42d/0xa50 [ 933.726886] ? hash_netiface6_add+0x2940/0x2940 [ 933.731574] ip_set_create+0x70e/0x1380 [ 933.735568] ? __find_set_type_get+0x450/0x450 [ 933.740170] ? lock_downgrade+0x750/0x750 [ 933.744320] ? __find_set_type_get+0x450/0x450 [ 933.748939] nfnetlink_rcv_msg+0xeff/0x1210 [ 933.753268] ? nfnetlink_net_init+0x170/0x170 [ 933.757765] ? avc_has_extended_perms+0x1020/0x1020 [ 933.762774] ? avc_has_extended_perms+0x1020/0x1020 [ 933.767785] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 933.772280] ? lock_downgrade+0x750/0x750 [ 933.776427] ? __local_bh_enable_ip+0x159/0x2a0 [ 933.781100] ? cred_has_capability+0x162/0x2e0 [ 933.785677] ? cred_has_capability+0x1d9/0x2e0 [ 933.790254] ? selinux_inode_copy_up+0x180/0x180 [ 933.795003] ? selinux_inode_copy_up+0x180/0x180 [ 933.799755] netlink_rcv_skb+0x160/0x440 [ 933.803812] ? nfnetlink_net_init+0x170/0x170 [ 933.808302] ? netlink_ack+0xae0/0xae0 [ 933.812274] ? ns_capable_common+0x117/0x140 [ 933.816682] nfnetlink_rcv+0x1b2/0x41b [ 933.820565] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 933.825321] netlink_unicast+0x4d5/0x690 [ 933.829410] ? netlink_sendskb+0x110/0x110 [ 933.833683] netlink_sendmsg+0x717/0xcc0 [ 933.837770] ? nlmsg_notify+0x1a0/0x1a0 [ 933.841737] ? __sock_recv_ts_and_drops+0x540/0x540 [ 933.846750] ? nlmsg_notify+0x1a0/0x1a0 [ 933.850767] sock_sendmsg+0xc7/0x130 [ 933.854474] ___sys_sendmsg+0x7bb/0x8f0 [ 933.858445] ? copy_msghdr_from_user+0x440/0x440 [ 933.863193] ? find_held_lock+0x2d/0x110 [ 933.867248] ? __fget+0x386/0x570 [ 933.870699] ? lock_downgrade+0x750/0x750 [ 933.874846] ? check_preemption_disabled+0x41/0x2b0 [ 933.879859] ? __fget+0x3ad/0x570 [ 933.883310] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 933.887537] ? lock_acquire+0x170/0x3f0 [ 933.891504] ? __might_fault+0xef/0x1d0 [ 933.895476] ? __fget_light+0x1d1/0x230 [ 933.899644] __x64_sys_sendmsg+0x132/0x220 [ 933.903883] ? __sys_sendmsg+0x1b0/0x1b0 [ 933.907949] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 933.912698] ? trace_hardirqs_off_caller+0x69/0x210 [ 933.917707] ? do_syscall_64+0x21/0x670 [ 933.921678] do_syscall_64+0xf9/0x670 [ 933.925475] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 933.930657] RIP: 0033:0x45d5f9 [ 933.933843] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 933.952762] RSP: 002b:00007fcce42e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 933.960464] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 933.967725] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 933.976125] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 933.983386] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 933.990648] R13: 00007ffe1b999d8f R14: 00007fcce42e39c0 R15: 000000000118cfec 19:36:48 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 934.044377] warn_alloc_show_mem: 1 callbacks suppressed [ 934.044383] Mem-Info: [ 934.053974] active_anon:105862 inactive_anon:12300 isolated_anon:0 [ 934.053974] active_file:2246 inactive_file:45597 isolated_file:0 [ 934.053974] unevictable:0 dirty:114 writeback:0 unstable:0 [ 934.053974] slab_reclaimable:16427 slab_unreclaimable:251642 [ 934.053974] mapped:64232 shmem:12484 pagetables:1123 bounce:0 [ 934.053974] free:1081547 free_pcp:582 free_cma:0 19:36:48 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x98010000) 19:36:48 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xb0000000) 19:36:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xfc00}, 0x0) 19:36:48 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x148) [ 934.186325] Node 0 active_anon:417064kB inactive_anon:49200kB active_file:8980kB inactive_file:182388kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:257828kB dirty:456kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 139264kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 19:36:48 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 934.317682] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 19:36:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xfd00}, 0x0) [ 934.353885] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 934.403656] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 934.415783] Node 0 DMA32 free:531816kB min:35784kB low:44728kB high:53672kB active_anon:423780kB inactive_anon:49200kB active_file:8980kB inactive_file:182388kB unevictable:0kB writepending:408kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7744kB pagetables:4640kB bounce:0kB free_pcp:1792kB local_pcp:744kB free_cma:0kB [ 934.477344] lowmem_reserve[]: 0 0 2 2 2 [ 934.482556] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 934.511897] lowmem_reserve[]: 0 0 0 0 0 [ 934.518246] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 19:36:49 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x99000000) 19:36:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xfe00}, 0x0) [ 934.655400] lowmem_reserve[]: 0 0 0 0 0 [ 934.662118] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 934.688198] Node 0 DMA32: 5382*4kB (UME) 896*8kB (UME) 2089*16kB (UMEH) 1880*32kB (UEH) 701*64kB (UE) 342*128kB (UEH) 198*256kB (UMEH) 115*512kB (UH) 58*1024kB (UMH) 45*2048kB (UM) 17*4096kB (UM) = 541672kB [ 934.709540] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 934.723177] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 934.742902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 934.770977] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 934.781540] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 934.791612] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 934.802229] 20628 total pagecache pages [ 934.806276] 0 pages in swap cache [ 934.811510] Swap cache stats: add 0, delete 0, find 0/0 [ 934.816890] Free swap = 0kB [ 934.821456] Total swap = 0kB [ 934.824503] 1965979 pages RAM [ 934.827610] 0 pages HighMem/MovableOnly [ 934.839725] 352651 pages reserved [ 934.843195] 0 pages cma reserved [ 934.846664] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 934.864637] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 934.870343] CPU: 1 PID: 32133 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 934.878248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 934.887611] Call Trace: [ 934.890226] dump_stack+0x22c/0x33e [ 934.893878] warn_alloc.cold+0x7b/0x18f [ 934.897879] ? zone_watermark_ok_safe+0x300/0x300 [ 934.902743] ? should_fail+0x142/0x7d8 [ 934.906659] ? ip_set_alloc+0x54/0x70 [ 934.910481] vzalloc+0x15c/0x1a0 [ 934.913884] ip_set_alloc+0x54/0x70 [ 934.917499] hash_netiface_create+0x42d/0xa50 [ 934.921993] ? hash_netiface6_add+0x2940/0x2940 [ 934.926714] ip_set_create+0x70e/0x1380 [ 934.930789] ? __find_set_type_get+0x450/0x450 [ 934.935372] ? __find_set_type_get+0x450/0x450 [ 934.940084] nfnetlink_rcv_msg+0xeff/0x1210 [ 934.944521] ? nfnetlink_net_init+0x170/0x170 [ 934.949012] ? avc_has_extended_perms+0x1020/0x1020 [ 934.954022] ? avc_has_extended_perms+0x1020/0x1020 [ 934.959032] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 934.963523] ? lock_downgrade+0x750/0x750 [ 934.967691] ? __local_bh_enable_ip+0x159/0x2a0 [ 934.972356] ? cred_has_capability+0x162/0x2e0 [ 934.976926] ? cred_has_capability+0x1d9/0x2e0 [ 934.981498] ? selinux_inode_copy_up+0x180/0x180 [ 934.986241] ? selinux_inode_copy_up+0x180/0x180 [ 934.990989] netlink_rcv_skb+0x160/0x440 [ 934.995040] ? nfnetlink_net_init+0x170/0x170 [ 935.001002] ? netlink_ack+0xae0/0xae0 [ 935.005003] ? ns_capable_common+0x117/0x140 [ 935.009401] nfnetlink_rcv+0x1b2/0x41b [ 935.013277] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 935.018024] netlink_unicast+0x4d5/0x690 [ 935.022079] ? netlink_sendskb+0x110/0x110 [ 935.026303] netlink_sendmsg+0x717/0xcc0 [ 935.030352] ? nlmsg_notify+0x1a0/0x1a0 [ 935.034313] ? __sock_recv_ts_and_drops+0x540/0x540 [ 935.039407] ? nlmsg_notify+0x1a0/0x1a0 [ 935.043368] sock_sendmsg+0xc7/0x130 [ 935.047068] ___sys_sendmsg+0x7bb/0x8f0 [ 935.051031] ? copy_msghdr_from_user+0x440/0x440 [ 935.055801] ? find_held_lock+0x2d/0x110 [ 935.059850] ? __fget+0x386/0x570 [ 935.063290] ? lock_downgrade+0x750/0x750 [ 935.067426] ? check_preemption_disabled+0x41/0x2b0 [ 935.072452] ? __fget+0x3ad/0x570 [ 935.075894] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 935.080120] ? lock_acquire+0x170/0x3f0 [ 935.084079] ? __might_fault+0xef/0x1d0 [ 935.088044] ? __fget_light+0x1d1/0x230 [ 935.092015] __x64_sys_sendmsg+0x132/0x220 [ 935.096235] ? __sys_sendmsg+0x1b0/0x1b0 [ 935.100290] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 935.105033] ? trace_hardirqs_off_caller+0x69/0x210 [ 935.110037] ? do_syscall_64+0x21/0x670 [ 935.114031] do_syscall_64+0xf9/0x670 [ 935.117821] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 935.122998] RIP: 0033:0x45d5f9 [ 935.126215] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 935.145163] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 935.152860] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 935.160114] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 935.167369] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 935.174624] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 935.181915] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c [ 935.189748] Mem-Info: [ 935.192206] active_anon:103676 inactive_anon:12300 isolated_anon:0 [ 935.192206] active_file:2246 inactive_file:45610 isolated_file:0 [ 935.192206] unevictable:0 dirty:144 writeback:0 unstable:0 [ 935.192206] slab_reclaimable:16428 slab_unreclaimable:251713 [ 935.192206] mapped:64167 shmem:12484 pagetables:983 bounce:0 [ 935.192206] free:1083959 free_pcp:555 free_cma:0 [ 935.226698] Node 0 active_anon:414704kB inactive_anon:49200kB active_file:8980kB inactive_file:182440kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:256668kB dirty:576kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 131072kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 935.255354] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 935.281360] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 935.307577] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 935.312712] Node 0 DMA32 free:541444kB min:35784kB low:44728kB high:53672kB active_anon:414704kB inactive_anon:49200kB active_file:8980kB inactive_file:182440kB unevictable:0kB writepending:576kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7264kB pagetables:3932kB bounce:0kB free_pcp:2224kB local_pcp:808kB free_cma:0kB [ 935.342872] lowmem_reserve[]: 0 0 2 2 2 [ 935.346874] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 935.373076] lowmem_reserve[]: 0 0 0 0 0 [ 935.377078] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 935.405125] lowmem_reserve[]: 0 0 0 0 0 [ 935.409130] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 935.425333] Node 0 DMA32: 5537*4kB (UME) 829*8kB (UME) 2038*16kB (UMEH) 1885*32kB (UMEH) 701*64kB (UE) 342*128kB (UEH) 198*256kB (UMEH) 115*512kB (UH) 58*1024kB (UMH) 45*2048kB (UM) 17*4096kB (UM) = 541100kB [ 935.444216] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 935.455778] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 935.473136] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 935.482109] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 935.490797] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 935.499712] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 935.508547] 20640 total pagecache pages [ 935.512630] 0 pages in swap cache [ 935.516091] Swap cache stats: add 0, delete 0, find 0/0 [ 935.521560] Free swap = 0kB 19:36:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000500}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:36:50 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xb1000000) 19:36:50 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x148) 19:36:50 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:36:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xff00}, 0x0) 19:36:50 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x99010000) [ 935.524576] Total swap = 0kB [ 935.527584] 1965979 pages RAM [ 935.530779] 0 pages HighMem/MovableOnly [ 935.534757] 352651 pages reserved [ 935.538206] 0 pages cma reserved 19:36:50 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xb2000000) 19:36:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0xffffff1f}, 0x0) 19:36:50 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 935.681049] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 935.698499] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 935.720028] CPU: 1 PID: 32268 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 935.728137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 935.737495] Call Trace: [ 935.740112] dump_stack+0x22c/0x33e [ 935.743763] warn_alloc.cold+0x7b/0x18f [ 935.747757] ? zone_watermark_ok_safe+0x300/0x300 [ 935.752621] ? should_fail+0x142/0x7d8 [ 935.756537] ? ip_set_alloc+0x54/0x70 [ 935.760358] vzalloc+0x15c/0x1a0 [ 935.763765] ip_set_alloc+0x54/0x70 [ 935.767411] hash_netiface_create+0x42d/0xa50 [ 935.771925] ? hash_netiface6_add+0x2940/0x2940 [ 935.776614] ip_set_create+0x70e/0x1380 [ 935.780609] ? __find_set_type_get+0x450/0x450 [ 935.785232] ? lock_downgrade+0x750/0x750 [ 935.789405] ? __find_set_type_get+0x450/0x450 [ 935.794016] nfnetlink_rcv_msg+0xeff/0x1210 [ 935.798462] ? nfnetlink_net_init+0x170/0x170 [ 935.802988] ? avc_has_extended_perms+0x1020/0x1020 [ 935.808030] ? avc_has_extended_perms+0x1020/0x1020 [ 935.813059] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 935.817572] ? lock_downgrade+0x750/0x750 [ 935.821737] ? __local_bh_enable_ip+0x159/0x2a0 [ 935.826429] ? cred_has_capability+0x162/0x2e0 [ 935.831026] ? cred_has_capability+0x1d9/0x2e0 [ 935.835623] ? selinux_inode_copy_up+0x180/0x180 [ 935.840391] ? selinux_inode_copy_up+0x180/0x180 [ 935.845332] netlink_rcv_skb+0x160/0x440 [ 935.849412] ? nfnetlink_net_init+0x170/0x170 [ 935.854011] ? netlink_ack+0xae0/0xae0 [ 935.857916] ? ns_capable_common+0x117/0x140 [ 935.862345] nfnetlink_rcv+0x1b2/0x41b [ 935.866269] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 935.871047] netlink_unicast+0x4d5/0x690 [ 935.875133] ? netlink_sendskb+0x110/0x110 19:36:50 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x9a000000) 19:36:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x2}, 0x0) [ 935.879392] netlink_sendmsg+0x717/0xcc0 [ 935.883475] ? nlmsg_notify+0x1a0/0x1a0 [ 935.887462] ? __sock_recv_ts_and_drops+0x540/0x540 [ 935.892589] ? nlmsg_notify+0x1a0/0x1a0 [ 935.899012] sock_sendmsg+0xc7/0x130 [ 935.902743] ___sys_sendmsg+0x7bb/0x8f0 [ 935.906740] ? copy_msghdr_from_user+0x440/0x440 [ 935.911507] ? find_held_lock+0x2d/0x110 [ 935.915584] ? __fget+0x386/0x570 [ 935.919242] ? lock_downgrade+0x750/0x750 [ 935.923408] ? check_preemption_disabled+0x41/0x2b0 [ 935.928448] ? __fget+0x3ad/0x570 [ 935.931926] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 935.936185] ? lock_acquire+0x170/0x3f0 [ 935.940174] ? __might_fault+0xef/0x1d0 [ 935.944172] ? __fget_light+0x1d1/0x230 [ 935.948203] __x64_sys_sendmsg+0x132/0x220 [ 935.952463] ? __sys_sendmsg+0x1b0/0x1b0 [ 935.956665] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 935.961442] ? trace_hardirqs_off_caller+0x69/0x210 [ 935.966475] ? do_syscall_64+0x21/0x670 [ 935.970473] do_syscall_64+0xf9/0x670 [ 935.974301] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 935.979590] RIP: 0033:0x45d5f9 [ 935.982876] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 936.001787] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 936.009514] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 936.016794] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 936.024073] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 936.031496] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 936.038790] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c 19:36:50 executing program 1 (fault-call:9 fault-nth:0): r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) [ 936.178600] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 936.206232] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 936.215366] CPU: 0 PID: 32268 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 936.223279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 936.232732] Call Trace: [ 936.235340] dump_stack+0x22c/0x33e [ 936.238990] warn_alloc.cold+0x7b/0x18f [ 936.242983] ? zone_watermark_ok_safe+0x300/0x300 [ 936.247975] ? should_fail+0x142/0x7d8 [ 936.251897] ? ip_set_alloc+0x54/0x70 [ 936.255717] vzalloc+0x15c/0x1a0 [ 936.259234] ip_set_alloc+0x54/0x70 [ 936.262879] hash_netiface_create+0x42d/0xa50 [ 936.267400] ? hash_netiface6_add+0x2940/0x2940 [ 936.272090] ip_set_create+0x70e/0x1380 [ 936.275395] FAULT_INJECTION: forcing a failure. [ 936.275395] name failslab, interval 1, probability 0, space 0, times 0 [ 936.276171] ? __find_set_type_get+0x450/0x450 [ 936.291965] ? lock_downgrade+0x750/0x750 [ 936.296135] ? __find_set_type_get+0x450/0x450 [ 936.300882] nfnetlink_rcv_msg+0xeff/0x1210 [ 936.305347] ? nfnetlink_net_init+0x170/0x170 [ 936.309864] ? avc_has_extended_perms+0x1020/0x1020 [ 936.314891] ? avc_has_extended_perms+0x1020/0x1020 [ 936.319924] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 936.324434] ? lock_downgrade+0x750/0x750 [ 936.328598] ? __local_bh_enable_ip+0x159/0x2a0 [ 936.333329] ? cred_has_capability+0x162/0x2e0 [ 936.337910] ? cred_has_capability+0x1d9/0x2e0 [ 936.342500] ? selinux_inode_copy_up+0x180/0x180 [ 936.347258] ? selinux_inode_copy_up+0x180/0x180 [ 936.352016] netlink_rcv_skb+0x160/0x440 [ 936.356085] ? nfnetlink_net_init+0x170/0x170 [ 936.360592] ? netlink_ack+0xae0/0xae0 [ 936.364497] ? ns_capable_common+0x117/0x140 [ 936.368915] nfnetlink_rcv+0x1b2/0x41b [ 936.372824] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 936.377609] netlink_unicast+0x4d5/0x690 [ 936.381693] ? netlink_sendskb+0x110/0x110 [ 936.385957] netlink_sendmsg+0x717/0xcc0 [ 936.390045] ? nlmsg_notify+0x1a0/0x1a0 [ 936.394041] ? __sock_recv_ts_and_drops+0x540/0x540 [ 936.400199] ? nlmsg_notify+0x1a0/0x1a0 [ 936.404192] sock_sendmsg+0xc7/0x130 [ 936.407988] ___sys_sendmsg+0x7bb/0x8f0 [ 936.411995] ? copy_msghdr_from_user+0x440/0x440 [ 936.416810] ? find_held_lock+0x2d/0x110 [ 936.420873] ? __fget+0x386/0x570 [ 936.424330] ? lock_downgrade+0x750/0x750 [ 936.428519] ? check_preemption_disabled+0x41/0x2b0 [ 936.433639] ? __fget+0x3ad/0x570 [ 936.437104] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 936.441341] ? lock_acquire+0x170/0x3f0 [ 936.445316] ? __might_fault+0xef/0x1d0 [ 936.449382] ? __fget_light+0x1d1/0x230 [ 936.453387] __x64_sys_sendmsg+0x132/0x220 [ 936.457629] ? __sys_sendmsg+0x1b0/0x1b0 [ 936.461700] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 936.466457] ? trace_hardirqs_off_caller+0x69/0x210 [ 936.471482] ? do_syscall_64+0x21/0x670 [ 936.475469] do_syscall_64+0xf9/0x670 [ 936.479311] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 936.484505] RIP: 0033:0x45d5f9 [ 936.487740] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 936.506648] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 936.514365] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 936.521817] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 936.529090] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 936.536386] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 936.543666] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c [ 936.554496] warn_alloc_show_mem: 1 callbacks suppressed [ 936.554501] Mem-Info: [ 936.562519] active_anon:104778 inactive_anon:12300 isolated_anon:0 [ 936.562519] active_file:2263 inactive_file:45619 isolated_file:0 [ 936.562519] unevictable:0 dirty:154 writeback:0 unstable:0 [ 936.562519] slab_reclaimable:16428 slab_unreclaimable:252363 [ 936.562519] mapped:64229 shmem:12484 pagetables:1038 bounce:0 [ 936.562519] free:1082154 free_pcp:505 free_cma:0 [ 936.564416] CPU: 1 PID: 32336 Comm: syz-executor.1 Not tainted 4.19.146-syzkaller #0 [ 936.597080] Node 0 active_anon:419112kB inactive_anon:49200kB active_file:9048kB inactive_file:182476kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:256916kB dirty:616kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 135168kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 936.604718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 936.604724] Call Trace: [ 936.604750] dump_stack+0x22c/0x33e [ 936.604772] should_fail.cold+0xa/0x2f [ 936.604793] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 936.633601] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 936.642854] ? lock_acquire+0x170/0x3f0 [ 936.642880] __should_failslab+0x153/0x1b6 [ 936.642899] should_failslab+0x5/0xf [ 936.642915] kmem_cache_alloc_node+0x245/0x4d0 [ 936.642937] __alloc_skb+0x71/0x580 [ 936.645675] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 936.649170] netlink_sendmsg+0xa9c/0xcc0 [ 936.649191] ? nlmsg_notify+0x1a0/0x1a0 [ 936.649209] ? __sock_recv_ts_and_drops+0x540/0x540 [ 936.653172] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 936.658305] ? nlmsg_notify+0x1a0/0x1a0 [ 936.658321] sock_sendmsg+0xc7/0x130 [ 936.658339] ___sys_sendmsg+0x3b3/0x8f0 [ 936.684117] Node 0 DMA32 free:534640kB min:35784kB low:44728kB high:53672kB active_anon:419112kB inactive_anon:49200kB active_file:9048kB inactive_file:182476kB unevictable:0kB writepending:616kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7392kB pagetables:4152kB bounce:0kB free_pcp:2020kB local_pcp:680kB free_cma:0kB [ 936.688036] ? copy_msghdr_from_user+0x440/0x440 [ 936.688053] ? find_held_lock+0x2d/0x110 [ 936.688066] ? __fget+0x386/0x570 [ 936.688085] ? lock_downgrade+0x750/0x750 [ 936.692408] lowmem_reserve[]: 0 0 2 2 2 [ 936.696043] ? check_preemption_disabled+0x41/0x2b0 [ 936.696063] ? __fget+0x3ad/0x570 [ 936.696082] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 936.700772] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 936.704324] ? get_pid_task+0x130/0x1c0 [ 936.704344] ? __fget_light+0x1d1/0x230 [ 936.704368] __sys_sendmmsg+0x195/0x470 [ 936.730561] lowmem_reserve[]: 0 0 0 0 0 [ 936.734524] ? __ia32_sys_sendmsg+0x220/0x220 [ 936.734542] ? lock_downgrade+0x750/0x750 [ 936.734567] ? __mutex_unlock_slowpath+0xea/0x660 [ 936.738583] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 936.743532] ? check_preemption_disabled+0x41/0x2b0 [ 936.743547] ? __mutex_add_waiter+0x160/0x160 [ 936.743566] ? vfs_write+0x393/0x540 [ 936.743588] ? ksys_write+0x1c8/0x2a0 [ 936.748647] lowmem_reserve[]: 0 0 0 0 0 [ 936.752557] ? __ia32_sys_read+0xb0/0xb0 [ 936.752576] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 936.752597] __x64_sys_sendmmsg+0x99/0x100 [ 936.752614] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 936.756410] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 936.760434] do_syscall_64+0xf9/0x670 [ 936.760457] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 936.760470] RIP: 0033:0x45d5f9 [ 936.760490] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 936.790461] Node 0 DMA32: 5322*4kB (UME) 869*8kB (UME) 1925*16kB (UMEH) 1882*32kB (UMEH) 700*64kB (UE) 343*128kB (UEH) 198*256kB (UMEH) 115*512kB (UH) 58*1024kB (UMH) 41*2048kB (U) 18*4096kB (UM) = 534624kB [ 936.795094] RSP: 002b:00007fea4fc38c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 936.795109] RAX: ffffffffffffffda RBX: 0000000000027a80 RCX: 000000000045d5f9 [ 936.795119] RDX: 010efe10675dec16 RSI: 0000000020000200 RDI: 0000000000000003 [ 936.795127] RBP: 00007fea4fc38ca0 R08: 0000000000000000 R09: 0000000000000000 [ 936.795140] R10: 000000000000005a R11: 0000000000000246 R12: 0000000000000000 [ 936.799250] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 936.802631] R13: 00007ffe918be2ef R14: 00007fea4fc399c0 R15: 000000000118cfec [ 937.068103] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 937.086481] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 937.095855] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 937.105021] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 937.114486] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 937.124613] 20681 total pagecache pages [ 937.128684] 0 pages in swap cache 19:36:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x3}, 0x0) 19:36:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000600}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:36:51 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:36:51 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xb3000000) 19:36:51 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x9a010000) 19:36:51 executing program 1 (fault-call:9 fault-nth:1): r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) [ 937.134609] Swap cache stats: add 0, delete 0, find 0/0 [ 937.140578] Free swap = 0kB [ 937.143752] Total swap = 0kB [ 937.146786] 1965979 pages RAM [ 937.150987] 0 pages HighMem/MovableOnly [ 937.154999] 352651 pages reserved [ 937.158441] 0 pages cma reserved [ 937.218730] nla_parse: 25 callbacks suppressed [ 937.218741] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 937.266566] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 937.298482] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 937.305996] FAULT_INJECTION: forcing a failure. [ 937.305996] name failslab, interval 1, probability 0, space 0, times 0 [ 937.326060] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 937.330249] CPU: 0 PID: 32361 Comm: syz-executor.1 Not tainted 4.19.146-syzkaller #0 [ 937.334768] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 937.339301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 937.339306] Call Trace: [ 937.339338] dump_stack+0x22c/0x33e [ 937.339359] should_fail.cold+0xa/0x2f [ 937.367855] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 937.372987] ? lock_acquire+0x170/0x3f0 [ 937.376985] __should_failslab+0x153/0x1b6 [ 937.381237] should_failslab+0x5/0xf [ 937.384971] kmem_cache_alloc_node_trace+0x244/0x4d0 [ 937.390104] __kmalloc_node_track_caller+0x38/0x70 [ 937.395244] __alloc_skb+0xae/0x580 [ 937.398891] netlink_sendmsg+0xa9c/0xcc0 [ 937.402972] ? nlmsg_notify+0x1a0/0x1a0 [ 937.406959] ? __sock_recv_ts_and_drops+0x540/0x540 [ 937.412173] ? nlmsg_notify+0x1a0/0x1a0 [ 937.416164] sock_sendmsg+0xc7/0x130 [ 937.419899] ___sys_sendmsg+0x3b3/0x8f0 [ 937.423896] ? copy_msghdr_from_user+0x440/0x440 [ 937.428665] ? find_held_lock+0x2d/0x110 [ 937.432745] ? __fget+0x386/0x570 [ 937.436299] ? lock_downgrade+0x750/0x750 [ 937.436965] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 937.440456] ? __fget+0x32a/0x570 [ 937.440474] ? check_preemption_disabled+0x41/0x2b0 [ 937.440495] ? __fget+0x3ad/0x570 [ 937.440515] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 937.440532] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 937.440553] ? __fget_light+0x1d1/0x230 [ 937.440574] __sys_sendmmsg+0x195/0x470 [ 937.440593] ? __ia32_sys_sendmsg+0x220/0x220 [ 937.482809] ? lock_downgrade+0x750/0x750 [ 937.486992] ? __mutex_unlock_slowpath+0xea/0x660 [ 937.491858] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 937.496634] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 937.501234] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 937.506006] ? rcu_nmi_exit+0x102/0x220 [ 937.510171] ? retint_kernel+0x2d/0x2d [ 937.514097] __x64_sys_sendmmsg+0x99/0x100 [ 937.518345] do_syscall_64+0xf9/0x670 [ 937.522156] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 937.527350] RIP: 0033:0x45d5f9 [ 937.530558] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 937.549721] RSP: 002b:00007fea4fc38c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 937.557449] RAX: ffffffffffffffda RBX: 0000000000027a80 RCX: 000000000045d5f9 [ 937.558533] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 937.564837] RDX: 010efe10675dec16 RSI: 0000000020000200 RDI: 0000000000000003 [ 937.564847] RBP: 00007fea4fc38ca0 R08: 0000000000000000 R09: 0000000000000000 [ 937.564856] R10: 000000000000005a R11: 0000000000000246 R12: 0000000000000001 [ 937.564867] R13: 00007ffe918be2ef R14: 00007fea4fc399c0 R15: 000000000118cfec [ 937.603782] CPU: 1 PID: 32366 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 937.611687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 937.621236] Call Trace: [ 937.623845] dump_stack+0x22c/0x33e [ 937.627496] warn_alloc.cold+0x7b/0x18f [ 937.631486] ? zone_watermark_ok_safe+0x300/0x300 [ 937.636336] ? should_fail+0x142/0x7d8 [ 937.640232] ? ip_set_alloc+0x54/0x70 [ 937.644030] vzalloc+0x15c/0x1a0 [ 937.647517] ip_set_alloc+0x54/0x70 [ 937.651143] hash_netiface_create+0x42d/0xa50 [ 937.655635] ? hash_netiface6_add+0x2940/0x2940 [ 937.660303] ip_set_create+0x70e/0x1380 [ 937.664277] ? __find_set_type_get+0x450/0x450 [ 937.668877] ? lock_downgrade+0x750/0x750 [ 937.673025] ? __find_set_type_get+0x450/0x450 [ 937.677638] nfnetlink_rcv_msg+0xeff/0x1210 [ 937.681969] ? nfnetlink_net_init+0x170/0x170 [ 937.686467] ? avc_has_extended_perms+0x1020/0x1020 [ 937.691478] ? avc_has_extended_perms+0x1020/0x1020 [ 937.696491] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 937.701020] ? lock_downgrade+0x750/0x750 [ 937.705164] ? __local_bh_enable_ip+0x159/0x2a0 [ 937.709835] ? cred_has_capability+0x162/0x2e0 [ 937.714644] ? cred_has_capability+0x1d9/0x2e0 [ 937.719231] ? selinux_inode_copy_up+0x180/0x180 [ 937.724019] ? selinux_inode_copy_up+0x180/0x180 [ 937.728778] netlink_rcv_skb+0x160/0x440 [ 937.732842] ? nfnetlink_net_init+0x170/0x170 [ 937.737337] ? netlink_ack+0xae0/0xae0 [ 937.741230] ? ns_capable_common+0x117/0x140 [ 937.745641] nfnetlink_rcv+0x1b2/0x41b [ 937.749531] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 937.754294] netlink_unicast+0x4d5/0x690 [ 937.758355] ? netlink_sendskb+0x110/0x110 [ 937.762610] netlink_sendmsg+0x717/0xcc0 [ 937.766671] ? nlmsg_notify+0x1a0/0x1a0 [ 937.770662] ? __sock_recv_ts_and_drops+0x540/0x540 [ 937.775680] ? nlmsg_notify+0x1a0/0x1a0 [ 937.779650] sock_sendmsg+0xc7/0x130 [ 937.783360] ___sys_sendmsg+0x7bb/0x8f0 [ 937.787508] ? copy_msghdr_from_user+0x440/0x440 [ 937.792260] ? find_held_lock+0x2d/0x110 [ 937.796317] ? __fget+0x386/0x570 [ 937.799770] ? lock_downgrade+0x750/0x750 [ 937.803950] ? check_preemption_disabled+0x41/0x2b0 [ 937.808999] ? __fget+0x3ad/0x570 [ 937.812453] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 937.816775] ? lock_acquire+0x170/0x3f0 [ 937.820743] ? __might_fault+0xef/0x1d0 [ 937.824717] ? __fget_light+0x1d1/0x230 [ 937.828739] __x64_sys_sendmsg+0x132/0x220 [ 937.832970] ? __sys_sendmsg+0x1b0/0x1b0 [ 937.837069] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 937.841821] ? trace_hardirqs_off_caller+0x69/0x210 [ 937.846926] ? do_syscall_64+0x21/0x670 [ 937.850897] do_syscall_64+0xf9/0x670 [ 937.854702] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 937.859923] RIP: 0033:0x45d5f9 [ 937.863111] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 937.882527] RSP: 002b:00007fcce42e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 937.890230] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 937.897492] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 937.904757] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 937.912923] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 937.920362] R13: 00007ffe1b999d8f R14: 00007fcce42e39c0 R15: 000000000118cfec 19:36:52 executing program 1 (fault-call:9 fault-nth:2): r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) 19:36:52 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:36:52 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xb4000000) [ 937.968551] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:36:52 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x9b000000) [ 938.064028] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 938.100581] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 938.116462] FAULT_INJECTION: forcing a failure. [ 938.116462] name failslab, interval 1, probability 0, space 0, times 0 [ 938.133781] CPU: 0 PID: 32387 Comm: syz-executor.1 Not tainted 4.19.146-syzkaller #0 [ 938.141689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 938.151052] Call Trace: [ 938.153661] dump_stack+0x22c/0x33e [ 938.157315] should_fail.cold+0xa/0x2f [ 938.161223] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 938.166349] ? rcu_nmi_exit+0x102/0x220 [ 938.170354] __should_failslab+0x153/0x1b6 [ 938.174693] should_failslab+0x5/0xf [ 938.178420] kmem_cache_alloc+0x43/0x4a0 [ 938.182552] skb_clone+0x151/0x3d0 [ 938.186114] netlink_deliver_tap+0x9fd/0xba0 [ 938.188203] Mem-Info: [ 938.190985] netlink_unicast+0x545/0x690 [ 938.191004] ? netlink_sendskb+0x110/0x110 [ 938.191027] netlink_sendmsg+0x717/0xcc0 [ 938.191048] ? nlmsg_notify+0x1a0/0x1a0 [ 938.191063] ? __sock_recv_ts_and_drops+0x540/0x540 [ 938.191083] ? nlmsg_notify+0x1a0/0x1a0 [ 938.197381] active_anon:106451 inactive_anon:12300 isolated_anon:0 [ 938.197381] active_file:2263 inactive_file:45643 isolated_file:0 [ 938.197381] unevictable:0 dirty:181 writeback:0 unstable:0 [ 938.197381] slab_reclaimable:16407 slab_unreclaimable:252577 [ 938.197381] mapped:64539 shmem:12484 pagetables:1144 bounce:0 [ 938.197381] free:1080253 free_pcp:190 free_cma:0 [ 938.197548] sock_sendmsg+0xc7/0x130 [ 938.214215] Node 0 active_anon:425804kB inactive_anon:49200kB active_file:9048kB inactive_file:182572kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:258156kB dirty:724kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 938.214947] ___sys_sendmsg+0x3b3/0x8f0 [ 938.214967] ? copy_msghdr_from_user+0x440/0x440 [ 938.223236] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 938.253215] ? lock_release+0x429/0x8e0 [ 938.253236] ? lock_downgrade+0x750/0x750 [ 938.253255] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 938.253271] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 938.253288] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 938.253304] ? rcu_nmi_exit+0x102/0x220 [ 938.253321] ? retint_kernel+0x2d/0x2d [ 938.253347] ? ___sys_sendmsg+0x20/0x8f0 [ 938.253368] __sys_sendmmsg+0x195/0x470 [ 938.253388] ? __ia32_sys_sendmsg+0x220/0x220 [ 938.253403] ? lock_downgrade+0x750/0x750 [ 938.253426] ? __mutex_unlock_slowpath+0xea/0x660 [ 938.253441] ? check_preemption_disabled+0x41/0x2b0 [ 938.253458] ? __mutex_add_waiter+0x160/0x160 [ 938.264833] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 938.285828] ? vfs_write+0x393/0x540 [ 938.285846] ? ksys_write+0x1c8/0x2a0 [ 938.285861] ? __ia32_sys_read+0xb0/0xb0 [ 938.285877] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 938.285896] __x64_sys_sendmmsg+0x99/0x100 [ 938.285912] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 938.285929] do_syscall_64+0xf9/0x670 [ 938.285953] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 938.306120] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 938.320386] RIP: 0033:0x45d5f9 19:36:53 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:36:53 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xb5000000) [ 938.320405] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 938.320413] RSP: 002b:00007fea4fc59c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 938.320426] RAX: ffffffffffffffda RBX: 0000000000027a80 RCX: 000000000045d5f9 [ 938.320434] RDX: 010efe10675dec16 RSI: 0000000020000200 RDI: 0000000000000003 [ 938.320443] RBP: 00007fea4fc59ca0 R08: 0000000000000000 R09: 0000000000000000 [ 938.320451] R10: 000000000000005a R11: 0000000000000246 R12: 0000000000000002 [ 938.320460] R13: 00007ffe918be2ef R14: 00007fea4fc5a9c0 R15: 000000000118cf4c [ 938.344088] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 938.384332] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 938.548932] Node 0 DMA32 free:533972kB min:35784kB low:44728kB high:53672kB active_anon:419200kB inactive_anon:49200kB active_file:9048kB inactive_file:182572kB unevictable:0kB writepending:724kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7520kB pagetables:4280kB bounce:0kB free_pcp:1596kB local_pcp:908kB free_cma:0kB [ 938.592355] lowmem_reserve[]: 0 0 2 2 2 [ 938.596462] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 938.632875] lowmem_reserve[]: 0 0 0 0 0 [ 938.639063] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 938.678152] lowmem_reserve[]: 0 0 0 0 0 [ 938.683412] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 938.705392] Node 0 DMA32: 5176*4kB (UME) 949*8kB (UME) 1830*16kB (UMEH) 1886*32kB (UMEH) 700*64kB (UE) 343*128kB (UEH) 198*256kB (UMEH) 115*512kB (UH) 58*1024kB (UMH) 46*2048kB (UM) 16*4096kB (U) = 535336kB [ 938.731142] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 938.748680] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 938.767042] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 938.776892] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 938.786539] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 938.795948] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 938.805073] 20690 total pagecache pages [ 938.809073] 0 pages in swap cache [ 938.813383] Swap cache stats: add 0, delete 0, find 0/0 [ 938.818852] Free swap = 0kB [ 938.822916] Total swap = 0kB [ 938.825941] 1965979 pages RAM 19:36:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x4}, 0x0) [ 938.829029] 0 pages HighMem/MovableOnly [ 938.834121] 352651 pages reserved [ 938.837676] 0 pages cma reserved [ 938.844564] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 938.858085] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 938.867093] CPU: 1 PID: 32352 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 938.875017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 938.884369] Call Trace: [ 938.886995] dump_stack+0x22c/0x33e [ 938.890645] warn_alloc.cold+0x7b/0x18f [ 938.894648] ? zone_watermark_ok_safe+0x300/0x300 [ 938.899508] ? should_fail+0x142/0x7d8 [ 938.903416] ? ip_set_alloc+0x54/0x70 [ 938.907237] vzalloc+0x15c/0x1a0 [ 938.910613] ip_set_alloc+0x54/0x70 [ 938.914308] hash_netiface_create+0x42d/0xa50 [ 938.918791] ? hash_netiface6_add+0x2940/0x2940 [ 938.923444] ip_set_create+0x70e/0x1380 [ 938.927405] ? __find_set_type_get+0x450/0x450 [ 938.931986] ? __find_set_type_get+0x450/0x450 [ 938.936572] nfnetlink_rcv_msg+0xeff/0x1210 [ 938.940903] ? nfnetlink_net_init+0x170/0x170 [ 938.945389] ? avc_has_extended_perms+0x1020/0x1020 [ 938.950388] ? avc_has_extended_perms+0x1020/0x1020 [ 938.955401] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 938.959882] ? lock_downgrade+0x750/0x750 [ 938.964015] ? __local_bh_enable_ip+0x159/0x2a0 [ 938.968671] ? cred_has_capability+0x162/0x2e0 [ 938.979082] ? cred_has_capability+0x1d9/0x2e0 [ 938.983659] ? selinux_inode_copy_up+0x180/0x180 [ 938.988415] ? selinux_inode_copy_up+0x180/0x180 [ 938.993158] netlink_rcv_skb+0x160/0x440 [ 938.997202] ? nfnetlink_net_init+0x170/0x170 [ 939.001683] ? netlink_ack+0xae0/0xae0 [ 939.005583] ? ns_capable_common+0x117/0x140 [ 939.009999] nfnetlink_rcv+0x1b2/0x41b [ 939.013879] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 939.018623] netlink_unicast+0x4d5/0x690 [ 939.022683] ? netlink_sendskb+0x110/0x110 [ 939.026903] netlink_sendmsg+0x717/0xcc0 [ 939.030948] ? nlmsg_notify+0x1a0/0x1a0 [ 939.034924] ? nlmsg_notify+0x1a0/0x1a0 [ 939.038882] sock_sendmsg+0xc7/0x130 [ 939.042578] ___sys_sendmsg+0x7bb/0x8f0 [ 939.046547] ? copy_msghdr_from_user+0x440/0x440 [ 939.051323] ? find_held_lock+0x2d/0x110 [ 939.055385] ? __fget+0x386/0x570 [ 939.058840] ? lock_downgrade+0x750/0x750 [ 939.063000] ? check_preemption_disabled+0x41/0x2b0 [ 939.068001] ? __fget+0x3ad/0x570 [ 939.071457] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 939.075674] ? lock_acquire+0x170/0x3f0 [ 939.079634] ? __might_fault+0xef/0x1d0 [ 939.083614] ? __fget_light+0x1d1/0x230 [ 939.087604] __x64_sys_sendmsg+0x132/0x220 [ 939.091828] ? __sys_sendmsg+0x1b0/0x1b0 [ 939.095892] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 939.100635] ? trace_hardirqs_off_caller+0x69/0x210 [ 939.105650] ? do_syscall_64+0x21/0x670 [ 939.109629] do_syscall_64+0xf9/0x670 [ 939.113429] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 939.118600] RIP: 0033:0x45d5f9 [ 939.121789] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 939.141218] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 939.148923] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 939.156192] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 939.163444] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 939.170708] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 939.177961] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c [ 939.199928] Mem-Info: [ 939.202392] active_anon:104216 inactive_anon:12300 isolated_anon:0 [ 939.202392] active_file:2263 inactive_file:45653 isolated_file:0 [ 939.202392] unevictable:0 dirty:193 writeback:0 unstable:0 [ 939.202392] slab_reclaimable:16405 slab_unreclaimable:252557 [ 939.202392] mapped:64234 shmem:12484 pagetables:1012 bounce:0 [ 939.202392] free:1082562 free_pcp:489 free_cma:0 [ 939.237621] Node 0 active_anon:416864kB inactive_anon:49200kB active_file:9048kB inactive_file:182612kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:256936kB dirty:772kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 939.266305] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 939.292836] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 939.319051] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 939.324212] Node 0 DMA32 free:536272kB min:35784kB low:44728kB high:53672kB active_anon:416864kB inactive_anon:49200kB active_file:9048kB inactive_file:182612kB unevictable:0kB writepending:772kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7328kB pagetables:4048kB bounce:0kB free_pcp:1956kB local_pcp:812kB free_cma:0kB [ 939.354290] lowmem_reserve[]: 0 0 2 2 2 [ 939.358271] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 939.384218] lowmem_reserve[]: 0 0 0 0 0 [ 939.388198] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 939.415717] lowmem_reserve[]: 0 0 0 0 0 [ 939.419935] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 939.435984] Node 0 DMA32: 5300*4kB (UME) 941*8kB (UME) 1838*16kB (UMEH) 1888*32kB (UMEH) 700*64kB (UE) 343*128kB (UEH) 198*256kB (UMEH) 115*512kB (UH) 58*1024kB (UMH) 44*2048kB (UM) 17*4096kB (UM) = 535960kB [ 939.454822] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 939.466390] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 939.483702] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 939.492634] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 939.501281] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 939.510211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 939.518820] 20702 total pagecache pages [ 939.522852] 0 pages in swap cache [ 939.526297] Swap cache stats: add 0, delete 0, find 0/0 [ 939.531723] Free swap = 0kB 19:36:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000700}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:36:54 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x9b010000) 19:36:54 executing program 1 (fault-call:9 fault-nth:3): r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) 19:36:54 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:36:54 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xb6000000) [ 939.534784] Total swap = 0kB [ 939.537801] 1965979 pages RAM [ 939.540967] 0 pages HighMem/MovableOnly [ 939.544936] 352651 pages reserved [ 939.548377] 0 pages cma reserved 19:36:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x8}, 0x0) [ 939.631247] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 939.666120] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 939.678159] CPU: 1 PID: 32451 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 939.686082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 939.695440] Call Trace: [ 939.698044] dump_stack+0x22c/0x33e [ 939.701697] warn_alloc.cold+0x7b/0x18f [ 939.705771] ? zone_watermark_ok_safe+0x300/0x300 [ 939.710630] ? lock_downgrade+0x750/0x750 [ 939.714792] ? cache_alloc_refill+0xc5/0x410 [ 939.719224] ? ip_set_alloc+0x54/0x70 [ 939.723063] vzalloc+0x15c/0x1a0 [ 939.726445] ip_set_alloc+0x54/0x70 [ 939.730081] hash_netiface_create+0x42d/0xa50 [ 939.734587] ? hash_netiface6_add+0x2940/0x2940 [ 939.739272] ip_set_create+0x70e/0x1380 [ 939.743261] ? __find_set_type_get+0x450/0x450 [ 939.747874] ? lock_downgrade+0x750/0x750 [ 939.752051] ? __find_set_type_get+0x450/0x450 [ 939.756652] nfnetlink_rcv_msg+0xeff/0x1210 [ 939.760995] ? nfnetlink_net_init+0x170/0x170 [ 939.765508] ? avc_has_extended_perms+0x1020/0x1020 [ 939.770534] ? avc_has_extended_perms+0x1020/0x1020 [ 939.775560] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 939.780067] ? lock_downgrade+0x750/0x750 [ 939.784223] ? __local_bh_enable_ip+0x159/0x2a0 [ 939.788898] ? cred_has_capability+0x162/0x2e0 [ 939.793480] ? cred_has_capability+0x1d9/0x2e0 [ 939.798068] ? selinux_inode_copy_up+0x180/0x180 [ 939.802827] ? selinux_inode_copy_up+0x180/0x180 [ 939.807598] netlink_rcv_skb+0x160/0x440 [ 939.811673] ? nfnetlink_net_init+0x170/0x170 [ 939.816177] ? netlink_ack+0xae0/0xae0 [ 939.820080] ? ns_capable_common+0x117/0x140 [ 939.824524] nfnetlink_rcv+0x1b2/0x41b [ 939.828508] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 939.833279] netlink_unicast+0x4d5/0x690 [ 939.837350] ? netlink_sendskb+0x110/0x110 [ 939.841634] netlink_sendmsg+0x717/0xcc0 [ 939.845700] ? nlmsg_notify+0x1a0/0x1a0 [ 939.849678] ? __sock_recv_ts_and_drops+0x540/0x540 [ 939.854712] ? nlmsg_notify+0x1a0/0x1a0 [ 939.858696] sock_sendmsg+0xc7/0x130 [ 939.862419] ___sys_sendmsg+0x7bb/0x8f0 [ 939.866404] ? copy_msghdr_from_user+0x440/0x440 [ 939.871169] ? find_held_lock+0x2d/0x110 [ 939.875241] ? __fget+0x386/0x570 19:36:54 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xb7000000) 19:36:54 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xb8000000) 19:36:54 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x9c000000) [ 939.878704] ? lock_downgrade+0x750/0x750 [ 939.882860] ? check_preemption_disabled+0x41/0x2b0 [ 939.887887] ? __fget+0x3ad/0x570 [ 939.891358] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 939.895604] ? lock_acquire+0x170/0x3f0 [ 939.899582] ? __might_fault+0xef/0x1d0 [ 939.903576] ? __fget_light+0x1d1/0x230 [ 939.907579] __x64_sys_sendmsg+0x132/0x220 [ 939.911828] ? __sys_sendmsg+0x1b0/0x1b0 [ 939.915911] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 939.920673] ? trace_hardirqs_off_caller+0x69/0x210 [ 939.925698] ? do_syscall_64+0x21/0x670 [ 939.929687] do_syscall_64+0xf9/0x670 [ 939.933502] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 939.938697] RIP: 0033:0x45d5f9 [ 939.941909] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 939.948687] FAULT_INJECTION: forcing a failure. [ 939.948687] name failslab, interval 1, probability 0, space 0, times 0 [ 939.960809] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 939.960825] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 939.960833] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 939.960841] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 939.960849] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 939.960858] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c 19:36:54 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xb9000000) 19:36:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0xe}, 0x0) [ 940.048519] CPU: 0 PID: 32458 Comm: syz-executor.1 Not tainted 4.19.146-syzkaller #0 [ 940.056823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 940.056830] Call Trace: 19:36:54 executing program 1 (fault-call:9 fault-nth:4): r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) [ 940.056853] dump_stack+0x22c/0x33e [ 940.056875] should_fail.cold+0xa/0x2f [ 940.056893] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 940.056909] ? lock_acquire+0x170/0x3f0 [ 940.056934] __should_failslab+0x153/0x1b6 [ 940.056951] should_failslab+0x5/0xf [ 940.056968] kmem_cache_alloc_node+0x245/0x4d0 [ 940.056989] __alloc_skb+0x71/0x580 [ 940.057009] netlink_sendmsg+0xa9c/0xcc0 [ 940.057028] ? nlmsg_notify+0x1a0/0x1a0 [ 940.057043] ? __sock_recv_ts_and_drops+0x540/0x540 [ 940.057066] ? nlmsg_notify+0x1a0/0x1a0 [ 940.057081] sock_sendmsg+0xc7/0x130 [ 940.057105] ___sys_sendmsg+0x3b3/0x8f0 [ 940.057124] ? copy_msghdr_from_user+0x440/0x440 [ 940.057138] ? find_held_lock+0x2d/0x110 [ 940.057154] ? __fget+0x386/0x570 [ 940.057172] ? mark_held_locks+0xf0/0xf0 [ 940.057186] ? lock_downgrade+0x750/0x750 [ 940.057205] ? check_preemption_disabled+0x41/0x2b0 [ 940.057227] ? find_held_lock+0x2d/0x110 [ 940.057243] ? __might_fault+0x11f/0x1d0 [ 940.057262] ? lock_downgrade+0x750/0x750 [ 940.057276] ? lock_acquire+0x170/0x3f0 [ 940.057289] ? __might_fault+0xef/0x1d0 [ 940.057315] __sys_sendmmsg+0x195/0x470 [ 940.057335] ? __ia32_sys_sendmsg+0x220/0x220 [ 940.057367] ? fput+0x1a/0x190 [ 940.057383] ? check_memory_region+0x35/0x170 [ 940.057405] ? ksys_write+0x1c8/0x2a0 [ 940.057421] ? __ia32_sys_read+0xb0/0xb0 [ 940.057438] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 940.057459] __x64_sys_sendmmsg+0x99/0x100 [ 940.057473] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 940.057490] do_syscall_64+0xf9/0x670 [ 940.057512] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 940.057525] RIP: 0033:0x45d5f9 [ 940.057540] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 940.057547] RSP: 002b:00007fea4fc59c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 940.057560] RAX: ffffffffffffffda RBX: 0000000000027a80 RCX: 000000000045d5f9 [ 940.057569] RDX: 010efe10675dec16 RSI: 0000000020000200 RDI: 0000000000000003 [ 940.057578] RBP: 00007fea4fc59ca0 R08: 0000000000000000 R09: 0000000000000000 [ 940.057586] R10: 000000000000005a R11: 0000000000000246 R12: 0000000000000003 [ 940.057594] R13: 00007ffe918be2ef R14: 00007fea4fc5a9c0 R15: 000000000118cf4c [ 940.267404] FAULT_INJECTION: forcing a failure. [ 940.267404] name failslab, interval 1, probability 0, space 0, times 0 [ 940.267424] CPU: 1 PID: 32525 Comm: syz-executor.1 Not tainted 4.19.146-syzkaller #0 [ 940.267433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 940.267438] Call Trace: [ 940.267459] dump_stack+0x22c/0x33e [ 940.267479] should_fail.cold+0xa/0x2f [ 940.267496] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 940.267511] ? lock_acquire+0x170/0x3f0 [ 940.267535] __should_failslab+0x153/0x1b6 [ 940.267552] should_failslab+0x5/0xf [ 940.267579] kmem_cache_alloc_node_trace+0x244/0x4d0 [ 940.267603] __kmalloc_node_track_caller+0x38/0x70 [ 940.267621] __alloc_skb+0xae/0x580 [ 940.267642] netlink_sendmsg+0xa9c/0xcc0 [ 940.267660] ? nlmsg_notify+0x1a0/0x1a0 [ 940.267674] ? __sock_recv_ts_and_drops+0x540/0x540 [ 940.267698] ? nlmsg_notify+0x1a0/0x1a0 [ 940.516084] sock_sendmsg+0xc7/0x130 [ 940.519797] ___sys_sendmsg+0x3b3/0x8f0 [ 940.523758] ? copy_msghdr_from_user+0x440/0x440 [ 940.528506] ? find_held_lock+0x2d/0x110 [ 940.532577] ? __fget+0x386/0x570 [ 940.536022] ? mark_held_locks+0xf0/0xf0 [ 940.540083] ? lock_downgrade+0x750/0x750 [ 940.544218] ? check_preemption_disabled+0x41/0x2b0 [ 940.549238] ? find_held_lock+0x2d/0x110 [ 940.553288] ? __might_fault+0x11f/0x1d0 [ 940.557334] ? lock_downgrade+0x750/0x750 [ 940.561466] ? lock_acquire+0x170/0x3f0 [ 940.565437] ? __might_fault+0xef/0x1d0 [ 940.569402] __sys_sendmmsg+0x195/0x470 [ 940.573379] ? __ia32_sys_sendmsg+0x220/0x220 [ 940.577905] ? lock_downgrade+0x750/0x750 [ 940.582090] ? __mutex_unlock_slowpath+0xea/0x660 [ 940.586921] ? check_preemption_disabled+0x41/0x2b0 [ 940.591921] ? __mutex_add_waiter+0x160/0x160 [ 940.596416] ? vfs_write+0x393/0x540 [ 940.600114] ? ksys_write+0x1c8/0x2a0 [ 940.603897] ? __ia32_sys_read+0xb0/0xb0 [ 940.607942] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 940.612700] __x64_sys_sendmmsg+0x99/0x100 [ 940.616927] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 940.621498] do_syscall_64+0xf9/0x670 [ 940.625309] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 940.630494] RIP: 0033:0x45d5f9 [ 940.633672] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 940.652646] RSP: 002b:00007fea4fc38c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 940.660360] RAX: ffffffffffffffda RBX: 0000000000027a80 RCX: 000000000045d5f9 19:36:55 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000900}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:36:55 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:36:55 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x9c010000) 19:36:55 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xba000000) 19:36:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0xf}, 0x0) [ 940.667615] RDX: 010efe10675dec16 RSI: 0000000020000200 RDI: 0000000000000003 [ 940.674876] RBP: 00007fea4fc38ca0 R08: 0000000000000000 R09: 0000000000000000 [ 940.682142] R10: 000000000000005a R11: 0000000000000246 R12: 0000000000000004 [ 940.689401] R13: 00007ffe918be2ef R14: 00007fea4fc399c0 R15: 000000000118cfec 19:36:55 executing program 1 (fault-call:9 fault-nth:5): r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) [ 940.846863] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 940.865402] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 940.871224] CPU: 1 PID: 32543 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 940.879123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 940.888836] Call Trace: [ 940.891434] dump_stack+0x22c/0x33e 19:36:55 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x9d000000) [ 940.895075] warn_alloc.cold+0x7b/0x18f [ 940.899068] ? zone_watermark_ok_safe+0x300/0x300 [ 940.903928] ? should_fail+0x142/0x7d8 [ 940.907840] ? ip_set_alloc+0x54/0x70 [ 940.911652] vzalloc+0x15c/0x1a0 [ 940.915030] ip_set_alloc+0x54/0x70 [ 940.918668] hash_netiface_create+0x42d/0xa50 [ 940.923173] ? hash_netiface6_add+0x2940/0x2940 [ 940.927854] ip_set_create+0x70e/0x1380 [ 940.931842] ? __find_set_type_get+0x450/0x450 [ 940.936459] ? lock_downgrade+0x750/0x750 [ 940.940626] ? __find_set_type_get+0x450/0x450 [ 940.945319] nfnetlink_rcv_msg+0xeff/0x1210 [ 940.949661] ? nfnetlink_net_init+0x170/0x170 [ 940.954175] ? avc_has_extended_perms+0x1020/0x1020 [ 940.959203] ? avc_has_extended_perms+0x1020/0x1020 [ 940.964233] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 940.968743] ? lock_downgrade+0x750/0x750 [ 940.972900] ? __local_bh_enable_ip+0x159/0x2a0 [ 940.977586] ? cred_has_capability+0x162/0x2e0 [ 940.982174] ? cred_has_capability+0x1d9/0x2e0 [ 940.986770] ? selinux_inode_copy_up+0x180/0x180 [ 940.991527] ? selinux_inode_copy_up+0x180/0x180 19:36:55 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x9d010000) [ 940.996296] netlink_rcv_skb+0x160/0x440 [ 941.000367] ? nfnetlink_net_init+0x170/0x170 [ 941.004870] ? netlink_ack+0xae0/0xae0 [ 941.008788] ? ns_capable_common+0x117/0x140 [ 941.013219] nfnetlink_rcv+0x1b2/0x41b [ 941.017136] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 941.021910] netlink_unicast+0x4d5/0x690 [ 941.025984] ? netlink_sendskb+0x110/0x110 [ 941.030238] netlink_sendmsg+0x717/0xcc0 [ 941.034319] ? nlmsg_notify+0x1a0/0x1a0 [ 941.038338] ? __sock_recv_ts_and_drops+0x540/0x540 [ 941.043377] ? nlmsg_notify+0x1a0/0x1a0 [ 941.047370] sock_sendmsg+0xc7/0x130 [ 941.051104] ___sys_sendmsg+0x7bb/0x8f0 [ 941.055102] ? copy_msghdr_from_user+0x440/0x440 [ 941.059866] ? find_held_lock+0x2d/0x110 [ 941.064005] ? __fget+0x386/0x570 [ 941.067493] ? lock_downgrade+0x750/0x750 [ 941.071749] ? check_preemption_disabled+0x41/0x2b0 [ 941.076781] ? __fget+0x3ad/0x570 [ 941.080252] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 941.084494] ? lock_acquire+0x170/0x3f0 [ 941.088476] ? __might_fault+0xef/0x1d0 [ 941.092477] ? __fget_light+0x1d1/0x230 19:36:55 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x9e000000) [ 941.096469] __x64_sys_sendmsg+0x132/0x220 [ 941.100712] ? __sys_sendmsg+0x1b0/0x1b0 [ 941.104801] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 941.109590] ? trace_hardirqs_off_caller+0x69/0x210 [ 941.114630] ? do_syscall_64+0x21/0x670 [ 941.118620] do_syscall_64+0xf9/0x670 [ 941.122435] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 941.127626] RIP: 0033:0x45d5f9 [ 941.130823] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 941.149730] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 941.157450] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 941.164726] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 941.173310] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 941.180589] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 941.187865] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c [ 941.206862] warn_alloc_show_mem: 1 callbacks suppressed [ 941.206867] Mem-Info: [ 941.215246] active_anon:105870 inactive_anon:12300 isolated_anon:0 [ 941.215246] active_file:2264 inactive_file:45674 isolated_file:0 [ 941.215246] unevictable:0 dirty:209 writeback:0 unstable:0 [ 941.215246] slab_reclaimable:16403 slab_unreclaimable:253168 [ 941.215246] mapped:64332 shmem:12484 pagetables:1145 bounce:0 [ 941.215246] free:1080188 free_pcp:285 free_cma:0 [ 941.219795] FAULT_INJECTION: forcing a failure. 19:36:55 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xbb000000) [ 941.219795] name failslab, interval 1, probability 0, space 0, times 0 [ 941.253745] Node 0 active_anon:423480kB inactive_anon:49200kB active_file:9052kB inactive_file:182696kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:257328kB dirty:836kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 941.293575] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 941.325050] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 941.351758] CPU: 1 PID: 32560 Comm: syz-executor.1 Not tainted 4.19.146-syzkaller #0 [ 941.359655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 941.369017] Call Trace: [ 941.371625] dump_stack+0x22c/0x33e [ 941.375273] should_fail.cold+0xa/0x2f [ 941.379188] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 941.383977] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 941.389089] ? rcu_nmi_exit+0x102/0x220 [ 941.393078] ? retint_kernel+0x2d/0x2d [ 941.396979] __should_failslab+0x153/0x1b6 [ 941.401221] should_failslab+0x5/0xf 19:36:56 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 941.404940] kmem_cache_alloc+0x43/0x4a0 [ 941.409007] ? skb_clone+0xd1/0x3d0 [ 941.412653] skb_clone+0x151/0x3d0 [ 941.416208] netlink_deliver_tap+0x9fd/0xba0 [ 941.420631] netlink_unicast+0x545/0x690 [ 941.424701] ? netlink_sendskb+0x110/0x110 [ 941.425279] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 941.428947] netlink_sendmsg+0x717/0xcc0 [ 941.428969] ? nlmsg_notify+0x1a0/0x1a0 [ 941.428984] ? __sock_recv_ts_and_drops+0x540/0x540 [ 941.429005] ? nlmsg_notify+0x1a0/0x1a0 [ 941.451974] sock_sendmsg+0xc7/0x130 [ 941.455702] ___sys_sendmsg+0x3b3/0x8f0 [ 941.458803] Node 0 DMA32 free:530604kB min:35784kB low:44728kB high:53672kB active_anon:419048kB inactive_anon:49200kB active_file:9052kB inactive_file:182696kB unevictable:0kB writepending:836kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7552kB pagetables:4284kB bounce:0kB free_pcp:1540kB local_pcp:1276kB free_cma:0kB [ 941.459681] ? copy_msghdr_from_user+0x440/0x440 [ 941.459697] ? find_held_lock+0x2d/0x110 [ 941.459714] ? __fget+0x386/0x570 [ 941.459732] ? mark_held_locks+0xf0/0xf0 [ 941.459748] ? lock_downgrade+0x750/0x750 [ 941.510110] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 941.514887] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 941.519487] ? find_held_lock+0x2d/0x110 [ 941.523561] ? __might_fault+0x11f/0x1d0 [ 941.527664] ? lock_downgrade+0x750/0x750 [ 941.531835] ? lock_acquire+0x170/0x3f0 [ 941.535823] ? __might_fault+0xef/0x1d0 [ 941.538942] lowmem_reserve[]: 0 0 2 2 2 [ 941.539813] __sys_sendmmsg+0x195/0x470 [ 941.539833] ? __ia32_sys_sendmsg+0x220/0x220 [ 941.539852] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 941.549577] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 941.552967] ? retint_kernel+0x2d/0x2d [ 941.552997] ? ksys_write+0x253/0x2a0 [ 941.553017] ? __sanitizer_cov_trace_pc+0x44/0x50 [ 941.562009] lowmem_reserve[]: 0 0 0 0 0 [ 941.583591] ? ksys_write+0x1c8/0x2a0 [ 941.583610] ? __ia32_sys_read+0xb0/0xb0 [ 941.583629] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 941.583650] __x64_sys_sendmmsg+0x99/0x100 [ 941.583665] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 941.583685] do_syscall_64+0xf9/0x670 [ 941.590648] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 941.591348] entry_SYSCALL_64_after_hwframe+0x49/0xbe 19:36:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x60}, 0x0) [ 941.596306] lowmem_reserve[]: 0 0 0 0 0 [ 941.600119] RIP: 0033:0x45d5f9 [ 941.600136] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 941.600145] RSP: 002b:00007fea4fc59c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 941.600160] RAX: ffffffffffffffda RBX: 0000000000027a80 RCX: 000000000045d5f9 [ 941.600169] RDX: 010efe10675dec16 RSI: 0000000020000200 RDI: 0000000000000003 [ 941.600178] RBP: 00007fea4fc59ca0 R08: 0000000000000000 R09: 0000000000000000 [ 941.600187] R10: 000000000000005a R11: 0000000000000246 R12: 0000000000000005 [ 941.600196] R13: 00007ffe918be2ef R14: 00007fea4fc5a9c0 R15: 000000000118cf4c [ 941.731043] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 941.766937] Node 0 DMA32: 4994*4kB (UE) 961*8kB (UME) 1747*16kB (UMEH) 1872*32kB (UMEH) 700*64kB (UE) 344*128kB (UEH) 198*256kB (UMEH) 115*512kB (UH) 58*1024kB (UMH) 42*2048kB (UM) 16*4096kB (U) = 524864kB [ 941.814355] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 941.829365] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 941.866488] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 941.876354] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 941.890637] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 941.903518] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 19:36:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000a00}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:36:56 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xbc000000) 19:36:56 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:36:56 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) 19:36:56 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x9e010000) 19:36:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0xf0}, 0x0) [ 941.913902] 20722 total pagecache pages [ 941.917925] 0 pages in swap cache [ 941.925208] Swap cache stats: add 0, delete 0, find 0/0 [ 941.932359] Free swap = 0kB [ 941.935386] Total swap = 0kB [ 941.938406] 1965979 pages RAM [ 941.944239] 0 pages HighMem/MovableOnly [ 941.948230] 352651 pages reserved [ 941.951783] 0 pages cma reserved [ 942.099200] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 942.123059] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 942.128541] CPU: 1 PID: 32657 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 942.136427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 942.145777] Call Trace: [ 942.148362] dump_stack+0x22c/0x33e [ 942.152013] warn_alloc.cold+0x7b/0x18f [ 942.155982] ? zone_watermark_ok_safe+0x300/0x300 [ 942.160817] ? should_fail+0x142/0x7d8 [ 942.164703] ? ip_set_alloc+0x54/0x70 [ 942.168580] vzalloc+0x15c/0x1a0 [ 942.171944] ip_set_alloc+0x54/0x70 [ 942.175557] hash_netiface_create+0x42d/0xa50 [ 942.180040] ? hash_netiface6_add+0x2940/0x2940 [ 942.184713] ip_set_create+0x70e/0x1380 [ 942.188678] ? __find_set_type_get+0x450/0x450 [ 942.193262] ? lock_downgrade+0x750/0x750 [ 942.197401] ? __find_set_type_get+0x450/0x450 [ 942.201989] nfnetlink_rcv_msg+0xeff/0x1210 [ 942.206317] ? nfnetlink_net_init+0x170/0x170 [ 942.210809] ? avc_has_extended_perms+0x1020/0x1020 [ 942.215924] ? avc_has_extended_perms+0x1020/0x1020 [ 942.220954] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 942.225444] ? lock_downgrade+0x750/0x750 [ 942.229599] ? __local_bh_enable_ip+0x159/0x2a0 [ 942.234436] ? cred_has_capability+0x162/0x2e0 [ 942.239006] ? cred_has_capability+0x1d9/0x2e0 [ 942.243594] ? selinux_inode_copy_up+0x180/0x180 [ 942.248340] ? selinux_inode_copy_up+0x180/0x180 [ 942.253090] netlink_rcv_skb+0x160/0x440 [ 942.257154] ? nfnetlink_net_init+0x170/0x170 [ 942.261661] ? netlink_ack+0xae0/0xae0 [ 942.265634] ? ns_capable_common+0x117/0x140 [ 942.270060] nfnetlink_rcv+0x1b2/0x41b [ 942.273939] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 942.278691] netlink_unicast+0x4d5/0x690 [ 942.282743] ? netlink_sendskb+0x110/0x110 [ 942.286987] netlink_sendmsg+0x717/0xcc0 [ 942.291040] ? nlmsg_notify+0x1a0/0x1a0 [ 942.295002] ? __sock_recv_ts_and_drops+0x540/0x540 [ 942.300009] ? nlmsg_notify+0x1a0/0x1a0 [ 942.303981] sock_sendmsg+0xc7/0x130 [ 942.307684] ___sys_sendmsg+0x7bb/0x8f0 [ 942.311648] ? copy_msghdr_from_user+0x440/0x440 [ 942.316390] ? find_held_lock+0x2d/0x110 [ 942.320439] ? __fget+0x386/0x570 [ 942.323883] ? lock_downgrade+0x750/0x750 [ 942.328023] ? check_preemption_disabled+0x41/0x2b0 [ 942.333044] ? __fget+0x3ad/0x570 [ 942.336489] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 942.340710] ? lock_acquire+0x170/0x3f0 [ 942.344672] ? __might_fault+0xef/0x1d0 [ 942.348640] ? __fget_light+0x1d1/0x230 [ 942.352612] __x64_sys_sendmsg+0x132/0x220 [ 942.356849] ? __sys_sendmsg+0x1b0/0x1b0 [ 942.360906] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 942.365651] ? trace_hardirqs_off_caller+0x69/0x210 [ 942.370669] ? do_syscall_64+0x21/0x670 [ 942.374636] do_syscall_64+0xf9/0x670 [ 942.378432] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 942.383612] RIP: 0033:0x45d5f9 [ 942.386804] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 942.405696] RSP: 002b:00007fcce42e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 942.413400] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 942.420671] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 942.427930] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 942.435185] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 942.442440] R13: 00007ffe1b999d8f R14: 00007fcce42e39c0 R15: 000000000118cfec 19:36:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x300}, 0x0) [ 942.455873] nla_parse: 36 callbacks suppressed [ 942.455883] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 942.455904] Mem-Info: [ 942.490009] active_anon:105847 inactive_anon:12300 isolated_anon:0 [ 942.490009] active_file:2264 inactive_file:45674 isolated_file:0 [ 942.490009] unevictable:0 dirty:209 writeback:0 unstable:0 [ 942.490009] slab_reclaimable:16403 slab_unreclaimable:253274 [ 942.490009] mapped:64334 shmem:12484 pagetables:1120 bounce:0 [ 942.490009] free:1080018 free_pcp:434 free_cma:0 [ 942.524563] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 19:36:57 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xbd000000) 19:36:57 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec24, 0x5a) [ 942.563742] Node 0 active_anon:425520kB inactive_anon:49200kB active_file:9052kB inactive_file:182696kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:257336kB dirty:836kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 942.592570] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:36:57 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:36:57 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x9effffff) [ 942.671317] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 942.694392] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 942.742679] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 942.770254] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 942.793592] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 942.838553] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 942.844829] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 942.858183] Node 0 DMA32 free:523884kB min:35784kB low:44728kB high:53672kB active_anon:425760kB inactive_anon:49200kB active_file:9052kB inactive_file:182696kB unevictable:0kB writepending:836kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7808kB pagetables:4480kB bounce:0kB free_pcp:1400kB local_pcp:1044kB free_cma:0kB [ 942.892892] lowmem_reserve[]: 0 0 2 2 2 [ 942.897012] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 942.923986] lowmem_reserve[]: 0 0 0 0 0 19:36:57 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xbe000000) [ 942.928112] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 942.933924] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 942.956974] lowmem_reserve[]: 0 0 0 0 0 [ 942.968621] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 942.991547] Node 0 DMA32: 4931*4kB (UME) 905*8kB (UME) 1750*16kB (UMEH) 1874*32kB (UMEH) 700*64kB (UE) 344*128kB (UEH) 198*256kB (UMEH) 115*512kB (UH) 58*1024kB (UMH) 43*2048kB (UM) 16*4096kB (U) = 526324kB [ 943.010743] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 943.023310] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 943.041892] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 943.049671] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 943.059733] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 943.065052] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 943.068432] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 943.087649] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 943.097182] 20740 total pagecache pages [ 943.102971] 0 pages in swap cache [ 943.106553] Swap cache stats: add 0, delete 0, find 0/0 [ 943.113127] Free swap = 0kB [ 943.116262] Total swap = 0kB [ 943.120608] 1965979 pages RAM [ 943.123824] 0 pages HighMem/MovableOnly [ 943.140672] 352651 pages reserved [ 943.144250] 0 pages cma reserved [ 943.147970] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 943.162757] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 943.168001] CPU: 1 PID: 32641 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 943.175884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 943.185324] Call Trace: [ 943.187928] dump_stack+0x22c/0x33e [ 943.191578] warn_alloc.cold+0x7b/0x18f [ 943.195565] ? zone_watermark_ok_safe+0x300/0x300 [ 943.200413] ? should_fail+0x142/0x7d8 [ 943.204298] ? ip_set_alloc+0x54/0x70 [ 943.208095] vzalloc+0x15c/0x1a0 [ 943.211451] ip_set_alloc+0x54/0x70 [ 943.215079] hash_netiface_create+0x42d/0xa50 [ 943.219563] ? hash_netiface6_add+0x2940/0x2940 [ 943.224219] ip_set_create+0x70e/0x1380 [ 943.228184] ? __find_set_type_get+0x450/0x450 [ 943.232774] ? __find_set_type_get+0x450/0x450 [ 943.237352] nfnetlink_rcv_msg+0xeff/0x1210 [ 943.241673] ? nfnetlink_net_init+0x170/0x170 [ 943.246161] ? avc_has_extended_perms+0x1020/0x1020 [ 943.251165] ? avc_has_extended_perms+0x1020/0x1020 [ 943.256167] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 943.260652] ? lock_downgrade+0x750/0x750 [ 943.264788] ? __local_bh_enable_ip+0x159/0x2a0 [ 943.269457] ? cred_has_capability+0x162/0x2e0 [ 943.274027] ? cred_has_capability+0x1d9/0x2e0 [ 943.278599] ? selinux_inode_copy_up+0x180/0x180 [ 943.283346] ? selinux_inode_copy_up+0x180/0x180 [ 943.288132] netlink_rcv_skb+0x160/0x440 [ 943.292187] ? nfnetlink_net_init+0x170/0x170 [ 943.296669] ? netlink_ack+0xae0/0xae0 [ 943.300550] ? ns_capable_common+0x117/0x140 [ 943.304956] nfnetlink_rcv+0x1b2/0x41b [ 943.308831] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 943.313579] netlink_unicast+0x4d5/0x690 [ 943.317629] ? netlink_sendskb+0x110/0x110 [ 943.321858] netlink_sendmsg+0x717/0xcc0 [ 943.325920] ? nlmsg_notify+0x1a0/0x1a0 [ 943.329884] ? __sock_recv_ts_and_drops+0x540/0x540 [ 943.334893] ? nlmsg_notify+0x1a0/0x1a0 [ 943.338855] sock_sendmsg+0xc7/0x130 [ 943.342560] ___sys_sendmsg+0x7bb/0x8f0 [ 943.346527] ? copy_msghdr_from_user+0x440/0x440 [ 943.351277] ? find_held_lock+0x2d/0x110 [ 943.355326] ? __fget+0x386/0x570 [ 943.358772] ? lock_downgrade+0x750/0x750 [ 943.362912] ? check_preemption_disabled+0x41/0x2b0 [ 943.367920] ? __fget+0x3ad/0x570 [ 943.371365] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 943.375587] ? lock_acquire+0x170/0x3f0 [ 943.379553] ? __might_fault+0xef/0x1d0 [ 943.383517] ? __fget_light+0x1d1/0x230 [ 943.387484] __x64_sys_sendmsg+0x132/0x220 [ 943.391713] ? __sys_sendmsg+0x1b0/0x1b0 [ 943.395773] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 943.400519] ? trace_hardirqs_off_caller+0x69/0x210 [ 943.405522] ? do_syscall_64+0x21/0x670 [ 943.409487] do_syscall_64+0xf9/0x670 [ 943.413282] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 943.418455] RIP: 0033:0x45d5f9 [ 943.421637] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 943.440522] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 943.448215] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 943.456429] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 943.463682] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 943.470950] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 943.478205] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c [ 943.544717] Mem-Info: [ 943.547960] active_anon:104260 inactive_anon:12300 isolated_anon:0 [ 943.547960] active_file:2264 inactive_file:45692 isolated_file:0 [ 943.547960] unevictable:0 dirty:228 writeback:0 unstable:0 [ 943.547960] slab_reclaimable:16401 slab_unreclaimable:253210 [ 943.547960] mapped:64429 shmem:12484 pagetables:1013 bounce:0 [ 943.547960] free:1081772 free_pcp:520 free_cma:0 [ 943.584819] Node 0 active_anon:417240kB inactive_anon:49200kB active_file:9052kB inactive_file:182768kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:258316kB dirty:912kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 943.614776] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 943.644950] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 943.672862] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 943.677963] Node 0 DMA32 free:534636kB min:35784kB low:44728kB high:53672kB active_anon:414748kB inactive_anon:49200kB active_file:9052kB inactive_file:182768kB unevictable:0kB writepending:912kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7264kB pagetables:4052kB bounce:0kB free_pcp:1880kB local_pcp:472kB free_cma:0kB [ 943.708868] lowmem_reserve[]: 0 0 2 2 2 [ 943.714175] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 943.740413] lowmem_reserve[]: 0 0 0 0 0 [ 943.744564] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 943.772445] lowmem_reserve[]: 0 0 0 0 0 [ 943.776446] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 943.792510] Node 0 DMA32: 5167*4kB (UME) 811*8kB (ME) 1695*16kB (UMEH) 1888*32kB (UMEH) 699*64kB (UE) 345*128kB (UEH) 198*256kB (UMEH) 115*512kB (UH) 58*1024kB (UMH) 45*2048kB (UM) 17*4096kB (UM) = 534340kB [ 943.811367] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 943.823198] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 943.840540] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 943.849446] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 943.858016] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 943.866930] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 943.875554] 20740 total pagecache pages [ 943.879607] 0 pages in swap cache [ 943.883062] Swap cache stats: add 0, delete 0, find 0/0 [ 943.888419] Free swap = 0kB [ 943.891487] Total swap = 0kB 19:36:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000e00}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:36:58 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x9f000000) 19:36:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x792}, 0x0) 19:36:58 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:36:58 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec2c, 0x5a) 19:36:58 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xbf000000) [ 943.894501] 1965979 pages RAM [ 943.897585] 0 pages HighMem/MovableOnly [ 943.901620] 352651 pages reserved [ 943.905062] 0 pages cma reserved [ 944.040828] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 944.057990] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 944.084162] CPU: 1 PID: 32761 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 944.092084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 944.101441] Call Trace: [ 944.104040] dump_stack+0x22c/0x33e [ 944.107695] warn_alloc.cold+0x7b/0x18f [ 944.111682] ? zone_watermark_ok_safe+0x300/0x300 [ 944.116546] ? should_fail+0x142/0x7d8 [ 944.120456] ? ip_set_alloc+0x54/0x70 [ 944.124266] vzalloc+0x15c/0x1a0 [ 944.128600] ip_set_alloc+0x54/0x70 19:36:58 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xa0000000) 19:36:58 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 944.132240] hash_netiface_create+0x42d/0xa50 [ 944.136772] ? hash_netiface6_add+0x2940/0x2940 [ 944.141449] ip_set_create+0x70e/0x1380 [ 944.145438] ? __find_set_type_get+0x450/0x450 [ 944.150051] ? lock_downgrade+0x750/0x750 [ 944.154220] ? __find_set_type_get+0x450/0x450 [ 944.158812] nfnetlink_rcv_msg+0xeff/0x1210 [ 944.163151] ? nfnetlink_net_init+0x170/0x170 [ 944.167660] ? avc_has_extended_perms+0x1020/0x1020 [ 944.172679] ? avc_has_extended_perms+0x1020/0x1020 [ 944.177705] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 944.182220] ? lock_downgrade+0x750/0x750 [ 944.186380] ? __local_bh_enable_ip+0x159/0x2a0 [ 944.191062] ? cred_has_capability+0x162/0x2e0 [ 944.195653] ? cred_has_capability+0x1d9/0x2e0 [ 944.200246] ? selinux_inode_copy_up+0x180/0x180 [ 944.205012] ? selinux_inode_copy_up+0x180/0x180 [ 944.209814] netlink_rcv_skb+0x160/0x440 [ 944.213889] ? nfnetlink_net_init+0x170/0x170 [ 944.218391] ? netlink_ack+0xae0/0xae0 [ 944.222327] ? ns_capable_common+0x117/0x140 [ 944.226754] nfnetlink_rcv+0x1b2/0x41b [ 944.230653] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 944.235426] netlink_unicast+0x4d5/0x690 [ 944.239503] ? netlink_sendskb+0x110/0x110 [ 944.243755] netlink_sendmsg+0x717/0xcc0 [ 944.247829] ? nlmsg_notify+0x1a0/0x1a0 [ 944.251822] ? __sock_recv_ts_and_drops+0x540/0x540 [ 944.256854] ? nlmsg_notify+0x1a0/0x1a0 [ 944.260836] sock_sendmsg+0xc7/0x130 [ 944.264570] ___sys_sendmsg+0x7bb/0x8f0 [ 944.268528] ? copy_msghdr_from_user+0x440/0x440 [ 944.273269] ? find_held_lock+0x2d/0x110 [ 944.277315] ? __fget+0x386/0x570 [ 944.280753] ? lock_downgrade+0x750/0x750 [ 944.284999] ? check_preemption_disabled+0x41/0x2b0 [ 944.289999] ? __fget+0x3ad/0x570 [ 944.293527] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 944.298707] ? lock_acquire+0x170/0x3f0 [ 944.302678] ? __might_fault+0xef/0x1d0 [ 944.306661] ? __fget_light+0x1d1/0x230 [ 944.310636] __x64_sys_sendmsg+0x132/0x220 [ 944.314869] ? __sys_sendmsg+0x1b0/0x1b0 [ 944.318924] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 944.323665] ? trace_hardirqs_off_caller+0x69/0x210 [ 944.328664] ? do_syscall_64+0x21/0x670 [ 944.332626] do_syscall_64+0xf9/0x670 [ 944.336413] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 944.341587] RIP: 0033:0x45d5f9 [ 944.344763] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 944.363649] RSP: 002b:00007fcce42e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 944.371350] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 19:36:59 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec35, 0x5a) 19:36:59 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xc0000000) [ 944.378713] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 944.385971] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 944.393230] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 944.400497] R13: 00007ffe1b999d8f R14: 00007fcce42e39c0 R15: 000000000118cfec 19:36:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0xe00}, 0x0) 19:36:59 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xa1000000) [ 944.579388] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 944.606692] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 944.630256] CPU: 0 PID: 32742 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 944.638168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 944.647526] Call Trace: [ 944.650128] dump_stack+0x22c/0x33e [ 944.653778] warn_alloc.cold+0x7b/0x18f [ 944.657768] ? zone_watermark_ok_safe+0x300/0x300 [ 944.662626] ? should_fail+0x142/0x7d8 [ 944.666534] ? ip_set_alloc+0x54/0x70 [ 944.670351] vzalloc+0x15c/0x1a0 [ 944.673723] ip_set_alloc+0x54/0x70 [ 944.677379] hash_netiface_create+0x42d/0xa50 [ 944.677399] ? hash_netiface6_add+0x2940/0x2940 [ 944.677417] ip_set_create+0x70e/0x1380 [ 944.677439] ? __find_set_type_get+0x450/0x450 [ 944.677477] ? lock_downgrade+0x750/0x750 [ 944.677495] ? __find_set_type_get+0x450/0x450 [ 944.703916] nfnetlink_rcv_msg+0xeff/0x1210 [ 944.708269] ? nfnetlink_net_init+0x170/0x170 [ 944.712786] ? avc_has_extended_perms+0x1020/0x1020 [ 944.717810] ? avc_has_extended_perms+0x1020/0x1020 [ 944.722834] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 944.727357] ? lock_downgrade+0x750/0x750 [ 944.731513] ? __local_bh_enable_ip+0x159/0x2a0 [ 944.736192] ? cred_has_capability+0x162/0x2e0 [ 944.740781] ? cred_has_capability+0x1d9/0x2e0 [ 944.745406] ? selinux_inode_copy_up+0x180/0x180 [ 944.750171] ? selinux_inode_copy_up+0x180/0x180 [ 944.754938] netlink_rcv_skb+0x160/0x440 [ 944.759095] ? nfnetlink_net_init+0x170/0x170 [ 944.763594] ? netlink_ack+0xae0/0xae0 [ 944.767532] ? ns_capable_common+0x117/0x140 [ 944.771928] nfnetlink_rcv+0x1b2/0x41b [ 944.775837] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 944.780598] netlink_unicast+0x4d5/0x690 [ 944.784653] ? netlink_sendskb+0x110/0x110 [ 944.788872] netlink_sendmsg+0x717/0xcc0 [ 944.800745] ? nlmsg_notify+0x1a0/0x1a0 [ 944.804711] ? __sock_recv_ts_and_drops+0x540/0x540 [ 944.809713] ? nlmsg_notify+0x1a0/0x1a0 [ 944.813723] sock_sendmsg+0xc7/0x130 [ 944.817433] ___sys_sendmsg+0x7bb/0x8f0 [ 944.821405] ? copy_msghdr_from_user+0x440/0x440 [ 944.826196] ? find_held_lock+0x2d/0x110 [ 944.830242] ? __fget+0x386/0x570 [ 944.833679] ? lock_downgrade+0x750/0x750 [ 944.837808] ? check_preemption_disabled+0x41/0x2b0 [ 944.842844] ? __fget+0x3ad/0x570 [ 944.846307] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 944.850538] ? lock_acquire+0x170/0x3f0 [ 944.854493] ? __might_fault+0xef/0x1d0 [ 944.858448] ? __fget_light+0x1d1/0x230 [ 944.862425] __x64_sys_sendmsg+0x132/0x220 [ 944.866671] ? __sys_sendmsg+0x1b0/0x1b0 [ 944.870736] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 944.875906] ? trace_hardirqs_off_caller+0x69/0x210 [ 944.880919] ? do_syscall_64+0x21/0x670 [ 944.884902] do_syscall_64+0xf9/0x670 [ 944.888686] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 944.893873] RIP: 0033:0x45d5f9 [ 944.897048] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 944.915946] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 944.923647] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 944.931100] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 944.938349] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 944.945602] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 944.952853] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c [ 944.983989] warn_alloc_show_mem: 1 callbacks suppressed [ 944.983995] Mem-Info: [ 944.992137] active_anon:104219 inactive_anon:12300 isolated_anon:0 [ 944.992137] active_file:2264 inactive_file:45703 isolated_file:0 [ 944.992137] unevictable:0 dirty:239 writeback:0 unstable:0 [ 944.992137] slab_reclaimable:16401 slab_unreclaimable:253645 [ 944.992137] mapped:64344 shmem:12484 pagetables:1000 bounce:0 [ 944.992137] free:1081339 free_pcp:571 free_cma:0 [ 945.039701] Node 0 active_anon:416964kB inactive_anon:49200kB active_file:9052kB inactive_file:182828kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:258372kB dirty:992kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 945.068986] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 945.097306] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 945.124938] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 945.131053] Node 0 DMA32 free:531036kB min:35784kB low:44728kB high:53672kB active_anon:417364kB inactive_anon:49200kB active_file:9052kB inactive_file:182828kB unevictable:0kB writepending:992kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7424kB pagetables:4344kB bounce:0kB free_pcp:1300kB local_pcp:800kB free_cma:0kB [ 945.162896] lowmem_reserve[]: 0 0 2 2 2 [ 945.167152] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 945.194141] lowmem_reserve[]: 0 0 0 0 0 [ 945.198129] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 945.226886] lowmem_reserve[]: 0 0 0 0 0 [ 945.231368] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 945.248267] Node 0 DMA32: 4917*4kB (UME) 1033*8kB (UME) 1638*16kB (UMEH) 1884*32kB (UMEH) 700*64kB (UE) 345*128kB (UEH) 198*256kB (UMEH) 115*512kB (UH) 58*1024kB (UMH) 44*2048kB (UM) 17*4096kB (UM) = 532092kB [ 945.267552] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 945.281375] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 945.299281] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 945.308123] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 945.317607] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 945.327402] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 945.336528] 20760 total pagecache pages 19:37:00 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60001903}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:37:00 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xa2000000) 19:37:00 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xc00e0000) 19:37:00 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1a0) 19:37:00 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0xf00}, 0x0) [ 945.341118] 0 pages in swap cache [ 945.344573] Swap cache stats: add 0, delete 0, find 0/0 [ 945.351038] Free swap = 0kB [ 945.354086] Total swap = 0kB [ 945.357117] 1965979 pages RAM [ 945.361781] 0 pages HighMem/MovableOnly [ 945.365755] 352651 pages reserved [ 945.370943] 0 pages cma reserved [ 945.510672] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 945.526924] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 945.533699] CPU: 1 PID: 395 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 945.541423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 945.550776] Call Trace: [ 945.553377] dump_stack+0x22c/0x33e [ 945.557021] warn_alloc.cold+0x7b/0x18f [ 945.561008] ? zone_watermark_ok_safe+0x300/0x300 [ 945.565857] ? should_fail+0x142/0x7d8 [ 945.569763] ? ip_set_alloc+0x54/0x70 [ 945.573562] vzalloc+0x15c/0x1a0 [ 945.576923] ip_set_alloc+0x54/0x70 [ 945.580542] hash_netiface_create+0x42d/0xa50 [ 945.585033] ? hash_netiface6_add+0x2940/0x2940 [ 945.589781] ip_set_create+0x70e/0x1380 [ 945.593747] ? __find_set_type_get+0x450/0x450 [ 945.598353] ? lock_downgrade+0x750/0x750 [ 945.602493] ? __find_set_type_get+0x450/0x450 [ 945.607086] nfnetlink_rcv_msg+0xeff/0x1210 [ 945.611407] ? nfnetlink_net_init+0x170/0x170 [ 945.615898] ? avc_has_extended_perms+0x1020/0x1020 [ 945.620902] ? avc_has_extended_perms+0x1020/0x1020 [ 945.625906] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 945.630394] ? lock_downgrade+0x750/0x750 [ 945.634532] ? __local_bh_enable_ip+0x159/0x2a0 [ 945.639211] ? cred_has_capability+0x162/0x2e0 [ 945.643780] ? cred_has_capability+0x1d9/0x2e0 [ 945.648379] ? selinux_inode_copy_up+0x180/0x180 [ 945.653122] ? selinux_inode_copy_up+0x180/0x180 [ 945.658042] netlink_rcv_skb+0x160/0x440 [ 945.662095] ? nfnetlink_net_init+0x170/0x170 [ 945.666577] ? netlink_ack+0xae0/0xae0 [ 945.670456] ? ns_capable_common+0x117/0x140 [ 945.674875] nfnetlink_rcv+0x1b2/0x41b [ 945.678751] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 945.683500] netlink_unicast+0x4d5/0x690 [ 945.687558] ? netlink_sendskb+0x110/0x110 [ 945.691787] netlink_sendmsg+0x717/0xcc0 [ 945.695857] ? nlmsg_notify+0x1a0/0x1a0 [ 945.699835] ? __sock_recv_ts_and_drops+0x540/0x540 [ 945.704847] ? nlmsg_notify+0x1a0/0x1a0 [ 945.708808] sock_sendmsg+0xc7/0x130 [ 945.712514] ___sys_sendmsg+0x7bb/0x8f0 [ 945.716481] ? copy_msghdr_from_user+0x440/0x440 [ 945.721225] ? find_held_lock+0x2d/0x110 [ 945.725274] ? __fget+0x386/0x570 [ 945.728718] ? lock_downgrade+0x750/0x750 [ 945.732857] ? check_preemption_disabled+0x41/0x2b0 [ 945.737866] ? __fget+0x3ad/0x570 [ 945.741310] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 945.745550] ? lock_acquire+0x170/0x3f0 [ 945.749511] ? __might_fault+0xef/0x1d0 [ 945.753480] ? __fget_light+0x1d1/0x230 [ 945.757544] __x64_sys_sendmsg+0x132/0x220 [ 945.761767] ? __sys_sendmsg+0x1b0/0x1b0 [ 945.765826] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 945.770572] ? trace_hardirqs_off_caller+0x69/0x210 [ 945.775576] ? do_syscall_64+0x21/0x670 [ 945.779544] do_syscall_64+0xf9/0x670 [ 945.783338] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 945.788511] RIP: 0033:0x45d5f9 [ 945.791696] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 945.811363] RSP: 002b:00007fcce42e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 945.819058] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 945.826313] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 945.833568] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 945.840890] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 945.848145] R13: 00007ffe1b999d8f R14: 00007fcce42e39c0 R15: 000000000118cfec 19:37:00 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xa3000000) 19:37:00 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xc1000000) 19:37:00 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 945.999733] Mem-Info: [ 946.010995] active_anon:104239 inactive_anon:12300 isolated_anon:0 [ 946.010995] active_file:2264 inactive_file:45718 isolated_file:0 [ 946.010995] unevictable:0 dirty:254 writeback:0 unstable:0 [ 946.010995] slab_reclaimable:16401 slab_unreclaimable:253639 [ 946.010995] mapped:64363 shmem:12484 pagetables:1108 bounce:0 [ 946.010995] free:1081282 free_pcp:393 free_cma:0 19:37:00 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xa4000000) 19:37:00 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) [ 946.071409] Node 0 active_anon:419068kB inactive_anon:49200kB active_file:9052kB inactive_file:182976kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:257384kB dirty:1024kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 135168kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 946.156579] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 946.198085] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 19:37:00 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 946.320287] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 946.325361] Node 0 DMA32 free:531256kB min:35784kB low:44728kB high:53672kB active_anon:416984kB inactive_anon:49200kB active_file:9052kB inactive_file:183076kB unevictable:0kB writepending:1024kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7392kB pagetables:4308kB bounce:0kB free_pcp:2008kB local_pcp:1340kB free_cma:0kB [ 946.357260] lowmem_reserve[]: 0 0 2 2 2 [ 946.378242] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 946.405363] lowmem_reserve[]: 0 0 0 0 0 [ 946.410243] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 946.438844] lowmem_reserve[]: 0 0 0 0 0 [ 946.445298] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 946.461689] Node 0 DMA32: 4778*4kB (UE) 1169*8kB (UE) 1593*16kB (UEH) 1888*32kB (UMEH) 700*64kB (UE) 346*128kB (UMEH) 197*256kB (UEH) 115*512kB (UH) 58*1024kB (UMH) 44*2048kB (UM) 17*4096kB (UM) = 531904kB [ 946.480259] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 946.492240] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 946.510230] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 946.519083] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 946.527823] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 946.539166] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 946.548346] 20829 total pagecache pages [ 946.552944] 0 pages in swap cache [ 946.556400] Swap cache stats: add 0, delete 0, find 0/0 [ 946.562501] Free swap = 0kB [ 946.565517] Total swap = 0kB [ 946.568516] 1965979 pages RAM [ 946.573067] 0 pages HighMem/MovableOnly 19:37:01 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60001f00}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:37:01 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xa5000000) 19:37:01 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = signalfd4(r2, &(0x7f0000000080)={[0x5f]}, 0x8, 0x80000) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x2c, 0x2c, 0x200, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) 19:37:01 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:01 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xc2000000) 19:37:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x3f00}, 0x0) [ 946.577050] 352651 pages reserved [ 946.581320] 0 pages cma reserved 19:37:01 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[], 0x34}}, 0x4000810) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$netlink(r1, &(0x7f0000000080), &(0x7f00000001c0)=0xc) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) [ 946.677965] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 946.712483] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 946.725444] CPU: 1 PID: 476 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 946.733180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 946.742539] Call Trace: [ 946.745142] dump_stack+0x22c/0x33e [ 946.748788] warn_alloc.cold+0x7b/0x18f [ 946.752776] ? zone_watermark_ok_safe+0x300/0x300 [ 946.757633] ? should_fail+0x142/0x7d8 [ 946.761551] ? ip_set_alloc+0x54/0x70 [ 946.765366] vzalloc+0x15c/0x1a0 [ 946.768744] ip_set_alloc+0x54/0x70 [ 946.772387] hash_netiface_create+0x42d/0xa50 [ 946.776896] ? hash_netiface6_add+0x2940/0x2940 [ 946.781577] ip_set_create+0x70e/0x1380 [ 946.785565] ? __find_set_type_get+0x450/0x450 [ 946.790189] ? lock_downgrade+0x750/0x750 [ 946.794352] ? __find_set_type_get+0x450/0x450 [ 946.799127] nfnetlink_rcv_msg+0xeff/0x1210 [ 946.803489] ? nfnetlink_net_init+0x170/0x170 [ 946.807988] ? avc_has_extended_perms+0x1020/0x1020 [ 946.813005] ? avc_has_extended_perms+0x1020/0x1020 [ 946.818032] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 946.822542] ? lock_downgrade+0x750/0x750 [ 946.826693] ? __local_bh_enable_ip+0x159/0x2a0 [ 946.831384] ? cred_has_capability+0x162/0x2e0 [ 946.835953] ? cred_has_capability+0x1d9/0x2e0 [ 946.841913] ? selinux_inode_copy_up+0x180/0x180 [ 946.846656] ? selinux_inode_copy_up+0x180/0x180 [ 946.851402] netlink_rcv_skb+0x160/0x440 [ 946.855454] ? nfnetlink_net_init+0x170/0x170 [ 946.859938] ? netlink_ack+0xae0/0xae0 [ 946.863818] ? ns_capable_common+0x117/0x140 [ 946.868217] nfnetlink_rcv+0x1b2/0x41b [ 946.872101] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 946.876848] netlink_unicast+0x4d5/0x690 [ 946.880899] ? netlink_sendskb+0x110/0x110 [ 946.885127] netlink_sendmsg+0x717/0xcc0 [ 946.889178] ? nlmsg_notify+0x1a0/0x1a0 [ 946.893151] ? __sock_recv_ts_and_drops+0x540/0x540 [ 946.898160] ? nlmsg_notify+0x1a0/0x1a0 [ 946.902122] sock_sendmsg+0xc7/0x130 [ 946.906171] ___sys_sendmsg+0x7bb/0x8f0 [ 946.910136] ? copy_msghdr_from_user+0x440/0x440 [ 946.914878] ? find_held_lock+0x2d/0x110 [ 946.918940] ? __fget+0x386/0x570 [ 946.922382] ? lock_downgrade+0x750/0x750 [ 946.926520] ? check_preemption_disabled+0x41/0x2b0 [ 946.931524] ? __fget+0x3ad/0x570 [ 946.934967] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 946.939187] ? lock_acquire+0x170/0x3f0 [ 946.943160] ? __might_fault+0xef/0x1d0 [ 946.947133] ? __fget_light+0x1d1/0x230 [ 946.951104] __x64_sys_sendmsg+0x132/0x220 [ 946.955326] ? __sys_sendmsg+0x1b0/0x1b0 [ 946.959398] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 946.964139] ? trace_hardirqs_off_caller+0x69/0x210 [ 946.969144] ? do_syscall_64+0x21/0x670 [ 946.973110] do_syscall_64+0xf9/0x670 [ 946.976901] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 946.982079] RIP: 0033:0x45d5f9 [ 946.985259] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 947.004158] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 947.011850] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 947.019105] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 19:37:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x6000}, 0x0) [ 947.026358] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 947.033613] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 947.040884] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c [ 947.066215] Mem-Info: 19:37:01 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 947.074285] active_anon:105841 inactive_anon:12300 isolated_anon:0 [ 947.074285] active_file:2265 inactive_file:45786 isolated_file:0 [ 947.074285] unevictable:0 dirty:266 writeback:0 unstable:0 [ 947.074285] slab_reclaimable:16400 slab_unreclaimable:253629 [ 947.074285] mapped:64436 shmem:12484 pagetables:1086 bounce:0 [ 947.074285] free:1079522 free_pcp:512 free_cma:0 19:37:01 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xa6000000) 19:37:01 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xc3000000) 19:37:01 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 947.221088] Node 0 active_anon:421448kB inactive_anon:49200kB active_file:9056kB inactive_file:183144kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:258744kB dirty:1064kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 139264kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 947.325542] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 947.353241] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 947.397848] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 947.404113] Node 0 DMA32 free:523592kB min:35784kB low:44728kB high:53672kB active_anon:423820kB inactive_anon:49200kB active_file:9056kB inactive_file:183144kB unevictable:0kB writepending:1064kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7552kB pagetables:4640kB bounce:0kB free_pcp:1212kB local_pcp:248kB free_cma:0kB [ 947.456572] lowmem_reserve[]: 0 0 2 2 2 [ 947.463258] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 947.493279] lowmem_reserve[]: 0 0 0 0 0 [ 947.497296] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 947.531798] lowmem_reserve[]: 0 0 0 0 0 [ 947.535954] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 947.554547] Node 0 DMA32: 4674*4kB (UME) 976*8kB (UME) 1589*16kB (UEH) 1883*32kB (UEH) 702*64kB (UME) 345*128kB (UEH) 197*256kB (UEH) 115*512kB (UH) 58*1024kB (UMH) 42*2048kB (UM) 18*4096kB (UM) = 529720kB [ 947.573952] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 947.586270] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 947.603641] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 947.612935] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 947.621602] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 947.630558] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 947.639326] 20839 total pagecache pages [ 947.643371] 0 pages in swap cache [ 947.646833] Swap cache stats: add 0, delete 0, find 0/0 [ 947.652297] Free swap = 0kB 19:37:02 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60002000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:37:02 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x104, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xfffd}, {0x8, 0x15, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x7c8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x20}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0xcda}}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="000000000000000004198cf52e000100666c6f776572000000000200"], 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) 19:37:02 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xc4000000) 19:37:02 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:02 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xa7000000) 19:37:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x9207}, 0x0) [ 947.655308] Total swap = 0kB [ 947.658315] 1965979 pages RAM [ 947.661494] 0 pages HighMem/MovableOnly [ 947.665461] 352651 pages reserved [ 947.668908] 0 pages cma reserved [ 947.727267] nla_parse: 44 callbacks suppressed [ 947.727278] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 947.783055] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 947.811017] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 947.811680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=571 comm=syz-executor.1 [ 947.823441] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 947.843334] CPU: 1 PID: 575 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 947.851055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 947.860407] Call Trace: [ 947.863020] dump_stack+0x22c/0x33e [ 947.866663] warn_alloc.cold+0x7b/0x18f [ 947.870645] ? zone_watermark_ok_safe+0x300/0x300 [ 947.875498] ? should_fail+0x142/0x7d8 [ 947.875689] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 947.879399] ? ip_set_alloc+0x54/0x70 [ 947.879420] vzalloc+0x15c/0x1a0 [ 947.879437] ip_set_alloc+0x54/0x70 [ 947.879453] hash_netiface_create+0x42d/0xa50 [ 947.879475] ? hash_netiface6_add+0x2940/0x2940 [ 947.908320] ip_set_create+0x70e/0x1380 [ 947.912308] ? __find_set_type_get+0x450/0x450 [ 947.916913] ? lock_downgrade+0x750/0x750 [ 947.921060] ? __find_set_type_get+0x450/0x450 [ 947.925635] nfnetlink_rcv_msg+0xeff/0x1210 [ 947.929962] ? nfnetlink_net_init+0x170/0x170 [ 947.934451] ? avc_has_extended_perms+0x1020/0x1020 [ 947.939465] ? avc_has_extended_perms+0x1020/0x1020 [ 947.944491] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 947.948986] ? lock_downgrade+0x750/0x750 [ 947.953125] ? __local_bh_enable_ip+0x159/0x2a0 [ 947.957784] ? cred_has_capability+0x162/0x2e0 [ 947.962351] ? cred_has_capability+0x1d9/0x2e0 [ 947.966923] ? selinux_inode_copy_up+0x180/0x180 [ 947.971665] ? selinux_inode_copy_up+0x180/0x180 [ 947.976426] netlink_rcv_skb+0x160/0x440 [ 947.980478] ? nfnetlink_net_init+0x170/0x170 [ 947.984965] ? netlink_ack+0xae0/0xae0 [ 947.988845] ? ns_capable_common+0x117/0x140 [ 947.993245] nfnetlink_rcv+0x1b2/0x41b [ 947.997135] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 948.001882] netlink_unicast+0x4d5/0x690 [ 948.005934] ? netlink_sendskb+0x110/0x110 [ 948.010167] netlink_sendmsg+0x717/0xcc0 [ 948.014305] ? nlmsg_notify+0x1a0/0x1a0 [ 948.018269] ? __sock_recv_ts_and_drops+0x540/0x540 [ 948.023279] ? nlmsg_notify+0x1a0/0x1a0 [ 948.027241] sock_sendmsg+0xc7/0x130 [ 948.030958] ___sys_sendmsg+0x7bb/0x8f0 [ 948.034922] ? copy_msghdr_from_user+0x440/0x440 [ 948.039670] ? find_held_lock+0x2d/0x110 [ 948.043732] ? __fget+0x386/0x570 [ 948.047174] ? lock_downgrade+0x750/0x750 [ 948.051313] ? check_preemption_disabled+0x41/0x2b0 [ 948.056320] ? __fget+0x3ad/0x570 [ 948.059762] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 948.064007] ? lock_acquire+0x170/0x3f0 [ 948.067977] ? __might_fault+0xef/0x1d0 [ 948.071949] ? __fget_light+0x1d1/0x230 [ 948.075915] __x64_sys_sendmsg+0x132/0x220 [ 948.080141] ? __sys_sendmsg+0x1b0/0x1b0 [ 948.085154] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 948.090021] ? trace_hardirqs_off_caller+0x69/0x210 [ 948.095039] ? do_syscall_64+0x21/0x670 [ 948.099045] do_syscall_64+0xf9/0x670 [ 948.102852] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 948.108040] RIP: 0033:0x45d5f9 [ 948.111225] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 948.130111] RSP: 002b:00007fcce42e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 948.137805] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 948.145073] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 948.152330] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 948.159585] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 948.166839] R13: 00007ffe1b999d8f R14: 00007fcce42e39c0 R15: 000000000118cfec [ 948.210218] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 948.231975] Mem-Info: [ 948.234593] active_anon:106402 inactive_anon:12300 isolated_anon:0 [ 948.234593] active_file:2265 inactive_file:45793 isolated_file:0 [ 948.234593] unevictable:0 dirty:270 writeback:0 unstable:0 [ 948.234593] slab_reclaimable:16400 slab_unreclaimable:253932 19:37:02 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xa7ef90dd) [ 948.234593] mapped:64488 shmem:12484 pagetables:1146 bounce:0 [ 948.234593] free:1078739 free_pcp:417 free_cma:0 [ 948.240556] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 948.272272] Node 0 active_anon:425608kB inactive_anon:49200kB active_file:9056kB inactive_file:183172kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:257952kB dirty:1080kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 948.321522] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 948.337837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=571 comm=syz-executor.1 [ 948.346695] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 948.353760] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 19:37:03 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xc5000000) [ 948.396993] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 948.407118] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 948.433527] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 948.441158] Node 0 DMA32 free:526092kB min:35784kB low:44728kB high:53672kB active_anon:421220kB inactive_anon:49200kB active_file:9056kB inactive_file:183172kB unevictable:0kB writepending:1080kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7520kB pagetables:4436kB bounce:0kB free_pcp:1848kB local_pcp:456kB free_cma:0kB 19:37:03 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:03 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="0020236654cef5a609726b12cfa2000068667363000000000800023b1495d859887f7c1bf0386b2618cd1340305adcf75565276be584450ae45ebe2227728732c01584b4eef0"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) [ 948.471465] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 948.476201] lowmem_reserve[]: 0 0 2 2 2 [ 948.505290] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 948.558005] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 948.558688] lowmem_reserve[]: 0 0 0 0 0 [ 948.582089] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 19:37:03 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xa8000000) [ 948.635018] lowmem_reserve[]: 0 0 0 0 0 [ 948.641413] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 948.663651] Node 0 DMA32: 4662*4kB (UME) 983*8kB (UME) 1634*16kB (UMEH) 1875*32kB (UMEH) 702*64kB (UME) 345*128kB (UEH) 197*256kB (UEH) 115*512kB (UH) 58*1024kB (UMH) 43*2048kB (UM) 16*4096kB (U) = 524048kB [ 948.698071] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB 19:37:03 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xc6000000) [ 948.739466] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 948.775289] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 948.815129] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 948.825384] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 948.834922] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 948.843753] 20842 total pagecache pages [ 948.847862] 0 pages in swap cache [ 948.855061] Swap cache stats: add 0, delete 0, find 0/0 [ 948.865324] Free swap = 0kB [ 948.868539] Total swap = 0kB [ 948.887241] 1965979 pages RAM [ 948.895649] 0 pages HighMem/MovableOnly [ 948.900546] 352651 pages reserved [ 948.908334] 0 pages cma reserved 19:37:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60003f00}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:37:03 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:03 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$CHAR_RAW_RESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000080)={0x7, 0x7}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e24, 0xe7, @ipv4={[], [], @rand_addr=0x64010100}, 0x8}, {0xa, 0x4e20, 0x1, @loopback, 0x7fffffff}, 0x1000, [0x81, 0x1a31, 0x10000, 0x400, 0xff, 0xfffff800, 0xae, 0x6]}, 0x5c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x9ac, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x980, 0x2, [@TCA_FW_POLICE={0x414, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x7fff, 0x2, 0x3f, 0x4, 0x3ff, 0x4, 0x7fffffff, 0x0, 0x5, 0x20, 0xcf1, 0x200, 0x7f, 0xc37c, 0x9, 0x7, 0x4, 0x1, 0x3ff, 0x200, 0x7, 0xff, 0x1000, 0x7, 0xc51, 0x80000001, 0xff, 0x1, 0x1, 0xacf, 0x7, 0x7, 0x3, 0x5, 0xffff, 0x3, 0x8, 0x4, 0x0, 0x7, 0x9, 0xffff, 0x8, 0x4, 0xa9, 0x80000001, 0x9, 0x10000, 0x9, 0x524, 0x8b, 0x0, 0x10001, 0x5a, 0x7, 0x31c, 0x5, 0x1e5, 0x3ff, 0x5, 0x6, 0x3ff, 0x9, 0x80, 0x7, 0x3ff, 0x401, 0x9, 0x20, 0x40, 0x8001, 0xa0, 0x7, 0x5, 0x401, 0x1, 0x6, 0xb3b, 0x0, 0x2, 0x1ff, 0x7, 0x80000000, 0xb68, 0x8, 0x8, 0x4, 0x8000, 0x9, 0x80000000, 0x0, 0x1, 0x4, 0x8000, 0x3, 0x3c9, 0x7, 0x7, 0x80, 0xfffffffb, 0x417, 0x7, 0xa000000, 0x7, 0x4, 0x9, 0x1, 0xff, 0x7ff, 0x3f, 0x40, 0xb1e, 0x6, 0xffff, 0x2, 0x4, 0x6, 0x2, 0x6f5, 0x4, 0x5, 0x5, 0x9, 0x10000, 0xb7, 0x1c98, 0x9c0, 0xfffffffa, 0xfff, 0x3f, 0x5, 0x1, 0x7, 0x1800, 0x5, 0x1, 0x3b2a80d4, 0x3ff, 0x1972, 0x20, 0x7, 0x4, 0xffffffc0, 0x8, 0x4, 0x8, 0x4, 0x6, 0x6, 0x3, 0x7, 0x200, 0x80, 0x80000000, 0x6, 0x2, 0x6, 0x100, 0x2, 0x0, 0x3, 0x0, 0xc80, 0x7ff, 0x3f, 0x4, 0x80000000, 0x2, 0x4, 0x1000, 0x5, 0x1, 0x1b6, 0x9, 0x80, 0x1, 0x2, 0x5, 0x2, 0x4, 0x8, 0x2, 0x7, 0x7000000, 0x1f0435d3, 0x3, 0x3, 0x5, 0x5, 0x6, 0x0, 0x9, 0x1, 0x6, 0x80b4, 0x3776d546, 0xd9f5, 0x5, 0x8001, 0x7, 0x0, 0xfffff49a, 0x1, 0x6, 0x2, 0x7ff, 0x4, 0x8001, 0x4, 0x1000, 0x10001, 0xffffb2d1, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x1, 0x3ff, 0x40, 0x3ff, 0xffff, 0x8, 0x8b2e, 0x8001, 0x8, 0x7f, 0x3f, 0x5, 0xffffff7f, 0x8, 0x6, 0x735, 0x1, 0xa, 0x9, 0x1, 0x2, 0x1f, 0x3f, 0x2, 0x3, 0x7, 0x4, 0xffffffc1, 0xfd, 0xffffffff, 0x1, 0x4, 0x173, 0xef7, 0x6, 0x1, 0x7fffffff]}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x2, 0xd}}, @TCA_FW_INDEV={0x14, 0x3, 'netdevsim0\x00'}, @TCA_FW_ACT={0x54c, 0x4, [@m_tunnel_key={0x128, 0x8, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x3f, 0x6, 0x4, 0x2}, 0x2}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8000, 0x50df, 0x20000000, 0x80000000, 0x5}, 0x2}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x8, 0x3, 0x3, 0x2}, 0x1}}]}, {0xa4, 0x6, "d99eb6e9ef02c1057fb5c231626b881e42ac2d6235719dbaf117a390c54fcbf580d344e81473ff4d3b8246b92e524174837a622e00f2a6a9970203c7b78be0d17db3ebf4bba2aa68629cc2e07738eb2cfdc0583ee99e1478a98a15a2f1aadd18c8a73134c5ec263f50b1843d43327032f0374d41f7a286d66e0e80825325eae87e02e13c44e1c7ebf518e447c79803108d1c177478e74a3933809b90b8332074"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x214, 0x13, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xff, 0x20000000, 0x7fff, 0x8}, @local, @empty, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x8001, 0x20000000, 0x2, 0x6}, @dev={0xac, 0x14, 0x14, 0x20}, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x3, 0x5, 0x1ff, 0x1000}, @local, @dev={0xac, 0x14, 0x14, 0x1f}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0x9, 0x8, 0x6, 0x7ff}, @dev={0xac, 0x14, 0x14, 0xb6}, @loopback, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x120, 0x4, 0x7, 0x3, 0xdc}, @private=0xa010100, @multicast2, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x88, 0x8, 0x4, 0x4}, @loopback, @loopback, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1ff, 0x9, 0x7, 0x2369, 0x4}, @broadcast, @loopback, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x1, 0x1, 0x7, 0x5}, @local, @initdev={0xac, 0x1e, 0x1c, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x0, 0x0, 0x2, 0x1}, @dev={0xac, 0x14, 0x14, 0x2f}, @remote, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x647, 0x8, 0xffffffffffffffff, 0xffff, 0xb8ac}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xe0f8649655f8f118}}]}, {0x59, 0x6, "b152d4d502b3a80cd4dacc7d49060f969575d5ed519d999404cd30987cd1df37e948268ad60644d0b3be0c20f2a716c68b5a4a5b9231ad76ec3fc425f37ff1a9a256caa79f325fceac64b3e94d84bbbdcbd01975b5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0x11c, 0x11, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7fff}]}, {0xe7, 0x6, "16ea4fe01d3fb68bffbeadd9af83f714bd07c512a549e5dcf4c04501ed01744d8e9876c0a370554ad536e2c89869e981e3dae22876f5514ff00b3c8a3eecf65ac18ec714d55e609e116a742a03000412ff655f5858b5f894aaac551473ecf64738f9857802a4c1c7fac32e25b1604fc78342355b758b69f1622c914f4b0a4dfa300f535f890c676533ab498855b718038f7c6c688f150ae15d276e0084a614da09e5ee4cf6a68480e6a81b768da7ff5d373bb5d08f140070765c64e97ce57448f0339491c2b3e07586784888785f98ad1c7ec70edc2e71126d9e3d251ce323376ba19d"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_nat={0xf0, 0xf, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7f, 0x0, 0xffffffffffffffff, 0xa0}, @loopback, @dev={0xac, 0x14, 0x14, 0x34}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x401, 0x7fff, 0x8, 0x7, 0x80000001}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xff}}]}, {0x76, 0x6, "d6a38e1331c9ca83a12e947cdb6b41c4b4a224a819c9d7bef7d4cf8809fe4a54aa0f6943635eab8d827aaa11b3b96749833834da68e56c6c48af9edc7854d39f1edb172e3ec5c759ae5d49a21eb9acb694dc8c1eabba9bceb94a4aa3dba0659d805ebf8d88df1eed3486feba185b12a95f0a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x9ac}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) 19:37:03 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xa9000000) 19:37:03 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xc7000000) 19:37:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0xf000}, 0x0) [ 949.072259] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 949.088896] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 949.105276] CPU: 0 PID: 667 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 949.113036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 949.122389] Call Trace: [ 949.124974] dump_stack+0x22c/0x33e [ 949.128613] warn_alloc.cold+0x7b/0x18f [ 949.132602] ? zone_watermark_ok_safe+0x300/0x300 [ 949.137439] ? should_fail+0x142/0x7d8 [ 949.141326] ? ip_set_alloc+0x54/0x70 [ 949.145120] vzalloc+0x15c/0x1a0 [ 949.148476] ip_set_alloc+0x54/0x70 [ 949.152096] hash_netiface_create+0x42d/0xa50 [ 949.156583] ? hash_netiface6_add+0x2940/0x2940 [ 949.161242] ip_set_create+0x70e/0x1380 [ 949.165209] ? __find_set_type_get+0x450/0x450 [ 949.169798] ? lock_downgrade+0x750/0x750 [ 949.173939] ? __find_set_type_get+0x450/0x450 [ 949.178511] nfnetlink_rcv_msg+0xeff/0x1210 [ 949.182831] ? nfnetlink_net_init+0x170/0x170 [ 949.187321] ? avc_has_extended_perms+0x1020/0x1020 [ 949.192323] ? avc_has_extended_perms+0x1020/0x1020 [ 949.197328] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 949.201814] ? lock_downgrade+0x750/0x750 [ 949.205950] ? __local_bh_enable_ip+0x159/0x2a0 [ 949.210615] ? cred_has_capability+0x162/0x2e0 [ 949.215184] ? cred_has_capability+0x1d9/0x2e0 [ 949.219757] ? selinux_inode_copy_up+0x180/0x180 [ 949.224503] ? selinux_inode_copy_up+0x180/0x180 [ 949.229249] netlink_rcv_skb+0x160/0x440 [ 949.233322] ? nfnetlink_net_init+0x170/0x170 [ 949.237804] ? netlink_ack+0xae0/0xae0 [ 949.241685] ? ns_capable_common+0x117/0x140 [ 949.246086] nfnetlink_rcv+0x1b2/0x41b [ 949.249977] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 949.254727] netlink_unicast+0x4d5/0x690 [ 949.258782] ? netlink_sendskb+0x110/0x110 [ 949.263011] netlink_sendmsg+0x717/0xcc0 [ 949.267063] ? nlmsg_notify+0x1a0/0x1a0 [ 949.271025] ? __sock_recv_ts_and_drops+0x540/0x540 [ 949.276032] ? nlmsg_notify+0x1a0/0x1a0 [ 949.279993] sock_sendmsg+0xc7/0x130 [ 949.283696] ___sys_sendmsg+0x7bb/0x8f0 [ 949.287659] ? copy_msghdr_from_user+0x440/0x440 [ 949.292402] ? find_held_lock+0x2d/0x110 [ 949.296450] ? __fget+0x386/0x570 [ 949.299912] ? lock_downgrade+0x750/0x750 [ 949.304050] ? check_preemption_disabled+0x41/0x2b0 [ 949.309072] ? __fget+0x3ad/0x570 [ 949.312530] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 949.316769] ? lock_acquire+0x170/0x3f0 [ 949.321252] ? __might_fault+0xef/0x1d0 [ 949.325218] ? __fget_light+0x1d1/0x230 [ 949.329186] __x64_sys_sendmsg+0x132/0x220 [ 949.333406] ? __sys_sendmsg+0x1b0/0x1b0 [ 949.337589] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 949.342337] ? trace_hardirqs_off_caller+0x69/0x210 [ 949.347375] ? do_syscall_64+0x21/0x670 [ 949.351343] do_syscall_64+0xf9/0x670 [ 949.355141] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 949.360321] RIP: 0033:0x45d5f9 [ 949.363507] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 949.382395] RSP: 002b:00007fcce42e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 949.390092] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 949.397609] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 949.404864] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 949.412120] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 949.419376] R13: 00007ffe1b999d8f R14: 00007fcce42e39c0 R15: 000000000118cfec 19:37:04 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x34000}, 0x0) [ 949.488057] Mem-Info: [ 949.494809] active_anon:105862 inactive_anon:12300 isolated_anon:0 [ 949.494809] active_file:2265 inactive_file:45793 isolated_file:0 [ 949.494809] unevictable:0 dirty:270 writeback:0 unstable:0 [ 949.494809] slab_reclaimable:16400 slab_unreclaimable:254204 [ 949.494809] mapped:64494 shmem:12484 pagetables:1122 bounce:0 [ 949.494809] free:1079067 free_pcp:390 free_cma:0 19:37:04 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vcsa\x00', 0x181603, 0x0) connect$inet(r2, &(0x7f0000000640)={0x2, 0x4e24, @multicast2}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nvme-fabrics\x00', 0x4880, 0x0) ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ubi_ctrl\x00', 0x400002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) accept4$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14, 0xc0800) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000003c000000000004", @ANYRES32=r5, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@deltaction={0x168, 0x31, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8f5b}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20c}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x168}}, 0x20040041) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) 19:37:04 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 949.562625] Node 0 active_anon:423412kB inactive_anon:49200kB active_file:9056kB inactive_file:183172kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:257876kB dirty:1080kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 126976kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 19:37:04 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xaa000000) [ 949.631333] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 19:37:04 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xc8000000) [ 949.660306] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 949.751917] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 949.776182] Node 0 DMA32 free:521560kB min:35784kB low:44728kB high:53672kB active_anon:423780kB inactive_anon:49200kB active_file:9056kB inactive_file:183772kB unevictable:0kB writepending:1672kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7648kB pagetables:4636kB bounce:0kB free_pcp:996kB local_pcp:768kB free_cma:0kB [ 949.823433] lowmem_reserve[]: 0 0 2 2 2 [ 949.853234] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 949.901301] lowmem_reserve[]: 0 0 0 0 0 [ 949.905455] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 949.990766] lowmem_reserve[]: 0 0 0 0 0 [ 949.995090] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 950.020736] Node 0 DMA32: 4401*4kB (UME) 824*8kB (UME) 1614*16kB (UEH) 1876*32kB (UEH) 700*64kB (UE) 343*128kB (UEH) 199*256kB (UEH) 116*512kB (UMH) 57*1024kB (UH) 42*2048kB (UM) 16*4096kB (U) = 519012kB [ 950.042640] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 950.054563] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 950.072008] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 950.082447] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 950.091787] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 950.101333] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 950.110657] 23752 total pagecache pages [ 950.114763] 0 pages in swap cache [ 950.118331] Swap cache stats: add 0, delete 0, find 0/0 [ 950.125351] Free swap = 0kB [ 950.128483] Total swap = 0kB [ 950.132641] 1965979 pages RAM [ 950.135862] 0 pages HighMem/MovableOnly [ 950.140955] 352651 pages reserved [ 950.144526] 0 pages cma reserved [ 950.148156] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 950.166933] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 950.172354] CPU: 1 PID: 656 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 950.180072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 950.189426] Call Trace: [ 950.192028] dump_stack+0x22c/0x33e [ 950.195722] warn_alloc.cold+0x7b/0x18f [ 950.195742] ? zone_watermark_ok_safe+0x300/0x300 [ 950.204645] ? should_fail+0x142/0x7d8 [ 950.208547] ? ip_set_alloc+0x54/0x70 [ 950.212353] vzalloc+0x15c/0x1a0 [ 950.215728] ip_set_alloc+0x54/0x70 [ 950.219365] hash_netiface_create+0x42d/0xa50 [ 950.223870] ? hash_netiface6_add+0x2940/0x2940 [ 950.228551] ip_set_create+0x70e/0x1380 [ 950.232534] ? __find_set_type_get+0x450/0x450 [ 950.237147] ? __find_set_type_get+0x450/0x450 [ 950.241740] nfnetlink_rcv_msg+0xeff/0x1210 [ 950.246078] ? nfnetlink_net_init+0x170/0x170 [ 950.250595] ? avc_has_extended_perms+0x1020/0x1020 [ 950.255614] ? avc_has_extended_perms+0x1020/0x1020 [ 950.260630] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 950.265152] ? lock_downgrade+0x750/0x750 [ 950.269310] ? __local_bh_enable_ip+0x159/0x2a0 [ 950.274009] ? cred_has_capability+0x162/0x2e0 [ 950.278604] ? cred_has_capability+0x1d9/0x2e0 [ 950.281610] audit: type=1800 audit(1600717024.795:25): pid=719 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.1" name="cgroup.controllers" dev="sda1" ino=16190 res=0 [ 950.283193] ? selinux_inode_copy_up+0x180/0x180 [ 950.283206] ? selinux_inode_copy_up+0x180/0x180 [ 950.283226] netlink_rcv_skb+0x160/0x440 [ 950.316435] ? nfnetlink_net_init+0x170/0x170 [ 950.320937] ? netlink_ack+0xae0/0xae0 [ 950.324838] ? ns_capable_common+0x117/0x140 [ 950.329257] nfnetlink_rcv+0x1b2/0x41b [ 950.333153] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 950.337926] netlink_unicast+0x4d5/0x690 [ 950.342005] ? netlink_sendskb+0x110/0x110 [ 950.346255] netlink_sendmsg+0x717/0xcc0 [ 950.350325] ? nlmsg_notify+0x1a0/0x1a0 [ 950.354307] ? __sock_recv_ts_and_drops+0x540/0x540 [ 950.359338] ? nlmsg_notify+0x1a0/0x1a0 [ 950.363320] sock_sendmsg+0xc7/0x130 [ 950.367038] ___sys_sendmsg+0x7bb/0x8f0 [ 950.371020] ? copy_msghdr_from_user+0x440/0x440 [ 950.375778] ? find_held_lock+0x2d/0x110 [ 950.379843] ? __fget+0x386/0x570 [ 950.388604] ? lock_downgrade+0x750/0x750 [ 950.392757] ? check_preemption_disabled+0x41/0x2b0 [ 950.397781] ? __fget+0x3ad/0x570 [ 950.401243] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 950.405480] ? lock_acquire+0x170/0x3f0 [ 950.409457] ? __might_fault+0xef/0x1d0 [ 950.413458] ? __fget_light+0x1d1/0x230 [ 950.417446] __x64_sys_sendmsg+0x132/0x220 [ 950.421691] ? __sys_sendmsg+0x1b0/0x1b0 [ 950.425771] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 950.430534] ? trace_hardirqs_off_caller+0x69/0x210 [ 950.435563] ? do_syscall_64+0x21/0x670 [ 950.439552] do_syscall_64+0xf9/0x670 [ 950.443364] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 950.448559] RIP: 0033:0x45d5f9 [ 950.451758] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 950.470755] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 950.478456] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 950.485717] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 950.493014] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 950.500274] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 950.507539] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c [ 950.515727] Mem-Info: [ 950.518256] active_anon:104244 inactive_anon:12299 isolated_anon:0 [ 950.518256] active_file:2266 inactive_file:45837 isolated_file:0 [ 950.518256] unevictable:0 dirty:320 writeback:0 unstable:0 [ 950.518256] slab_reclaimable:16500 slab_unreclaimable:254380 [ 950.518256] mapped:64462 shmem:12484 pagetables:995 bounce:0 [ 950.518256] free:1080354 free_pcp:578 free_cma:0 [ 950.552722] Node 0 active_anon:416976kB inactive_anon:49196kB active_file:9060kB inactive_file:183348kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:257848kB dirty:1280kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 135168kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 950.581523] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 950.607463] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 950.633782] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 950.638979] Node 0 DMA32 free:529208kB min:35784kB low:44728kB high:53672kB active_anon:416976kB inactive_anon:49196kB active_file:9060kB inactive_file:183348kB unevictable:0kB writepending:1244kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7296kB pagetables:3980kB bounce:0kB free_pcp:2296kB local_pcp:812kB free_cma:0kB [ 950.669829] lowmem_reserve[]: 0 0 2 2 2 [ 950.673836] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 950.699779] lowmem_reserve[]: 0 0 0 0 0 [ 950.703761] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 950.731426] lowmem_reserve[]: 0 0 0 0 0 [ 950.735405] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 950.751386] Node 0 DMA32: 4698*4kB (UME) 971*8kB (UME) 1657*16kB (UMEH) 1900*32kB (UMEH) 713*64kB (UME) 355*128kB (UMEH) 208*256kB (UMEH) 119*512kB (UMH) 59*1024kB (UMH) 43*2048kB (UM) 15*4096kB (UM) = 529040kB [ 950.770358] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 950.781894] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 950.799225] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 950.808055] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 950.816813] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 950.825728] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 950.834373] 20898 total pagecache pages [ 950.838355] 0 pages in swap cache 19:37:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x400300}, 0x0) 19:37:05 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60004000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:37:05 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xc9000000) 19:37:05 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xab000000) 19:37:05 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:05 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000100), 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000002c0)={r2, 0x79ad, 0x1, 0x8080}) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="03000000000000000000000009e6efc458d347eb7dbdd17e9693eda4c3"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) [ 950.841860] Swap cache stats: add 0, delete 0, find 0/0 [ 950.848258] Free swap = 0kB [ 950.851340] Total swap = 0kB [ 950.854357] 1965979 pages RAM [ 950.857452] 0 pages HighMem/MovableOnly [ 950.861503] 352651 pages reserved [ 950.864965] 0 pages cma reserved 19:37:05 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) socket(0x4, 0x3, 0x81) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) 19:37:05 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 950.953312] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 951.006241] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 951.026671] CPU: 1 PID: 742 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 951.034425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 951.043784] Call Trace: [ 951.046392] dump_stack+0x22c/0x33e [ 951.050037] warn_alloc.cold+0x7b/0x18f [ 951.054028] ? zone_watermark_ok_safe+0x300/0x300 [ 951.058890] ? should_fail+0x142/0x7d8 [ 951.062800] ? ip_set_alloc+0x54/0x70 [ 951.066614] vzalloc+0x15c/0x1a0 [ 951.069994] ip_set_alloc+0x54/0x70 [ 951.073631] hash_netiface_create+0x42d/0xa50 [ 951.078227] ? hash_netiface6_add+0x2940/0x2940 [ 951.083177] ip_set_create+0x70e/0x1380 [ 951.087172] ? __find_set_type_get+0x450/0x450 [ 951.091786] ? lock_downgrade+0x750/0x750 [ 951.095948] ? __find_set_type_get+0x450/0x450 [ 951.100549] nfnetlink_rcv_msg+0xeff/0x1210 [ 951.104896] ? nfnetlink_net_init+0x170/0x170 [ 951.109412] ? avc_has_extended_perms+0x1020/0x1020 [ 951.114437] ? avc_has_extended_perms+0x1020/0x1020 [ 951.119462] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 951.123972] ? lock_downgrade+0x750/0x750 [ 951.128130] ? __local_bh_enable_ip+0x159/0x2a0 [ 951.132816] ? cred_has_capability+0x162/0x2e0 [ 951.137407] ? cred_has_capability+0x1d9/0x2e0 [ 951.142000] ? selinux_inode_copy_up+0x180/0x180 [ 951.146766] ? selinux_inode_copy_up+0x180/0x180 [ 951.151540] netlink_rcv_skb+0x160/0x440 [ 951.155612] ? nfnetlink_net_init+0x170/0x170 [ 951.160113] ? netlink_ack+0xae0/0xae0 [ 951.164011] ? ns_capable_common+0x117/0x140 [ 951.168431] nfnetlink_rcv+0x1b2/0x41b [ 951.172327] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 951.177102] netlink_unicast+0x4d5/0x690 [ 951.181177] ? netlink_sendskb+0x110/0x110 [ 951.185429] netlink_sendmsg+0x717/0xcc0 [ 951.189500] ? nlmsg_notify+0x1a0/0x1a0 [ 951.193481] ? __sock_recv_ts_and_drops+0x540/0x540 [ 951.198509] ? nlmsg_notify+0x1a0/0x1a0 [ 951.202489] sock_sendmsg+0xc7/0x130 [ 951.206210] ___sys_sendmsg+0x7bb/0x8f0 [ 951.210195] ? copy_msghdr_from_user+0x440/0x440 [ 951.214957] ? find_held_lock+0x2d/0x110 [ 951.219036] ? __fget+0x386/0x570 [ 951.222501] ? lock_downgrade+0x750/0x750 19:37:05 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 951.226664] ? check_preemption_disabled+0x41/0x2b0 [ 951.231697] ? __fget+0x3ad/0x570 [ 951.235162] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 951.239400] ? lock_acquire+0x170/0x3f0 [ 951.243386] ? __might_fault+0xef/0x1d0 [ 951.247378] ? __fget_light+0x1d1/0x230 [ 951.251370] __x64_sys_sendmsg+0x132/0x220 [ 951.255613] ? __sys_sendmsg+0x1b0/0x1b0 [ 951.259697] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 951.264465] ? trace_hardirqs_off_caller+0x69/0x210 [ 951.269494] ? do_syscall_64+0x21/0x670 [ 951.273482] do_syscall_64+0xf9/0x670 19:37:05 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xac000000) [ 951.277299] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 951.282495] RIP: 0033:0x45d5f9 [ 951.285694] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 951.304598] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 951.312314] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 951.319851] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 19:37:05 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xca000000) [ 951.327139] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 951.334413] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 951.341695] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c 19:37:06 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xad000000) 19:37:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0xf0ffff}, 0x0) [ 951.496345] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 951.541334] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 951.548218] CPU: 1 PID: 742 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 951.555952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 951.565316] Call Trace: [ 951.567919] dump_stack+0x22c/0x33e [ 951.571567] warn_alloc.cold+0x7b/0x18f [ 951.575558] ? zone_watermark_ok_safe+0x300/0x300 [ 951.580418] ? should_fail+0x142/0x7d8 [ 951.584330] ? ip_set_alloc+0x54/0x70 [ 951.588152] vzalloc+0x15c/0x1a0 [ 951.591535] ip_set_alloc+0x54/0x70 [ 951.595177] hash_netiface_create+0x42d/0xa50 [ 951.599689] ? hash_netiface6_add+0x2940/0x2940 [ 951.604368] ip_set_create+0x70e/0x1380 [ 951.608357] ? __find_set_type_get+0x450/0x450 [ 951.612977] ? lock_downgrade+0x750/0x750 [ 951.617141] ? __find_set_type_get+0x450/0x450 [ 951.621739] nfnetlink_rcv_msg+0xeff/0x1210 [ 951.626088] ? nfnetlink_net_init+0x170/0x170 [ 951.630605] ? avc_has_extended_perms+0x1020/0x1020 [ 951.635627] ? avc_has_extended_perms+0x1020/0x1020 [ 951.640655] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 951.645169] ? lock_downgrade+0x750/0x750 [ 951.649337] ? __local_bh_enable_ip+0x159/0x2a0 [ 951.654029] ? cred_has_capability+0x162/0x2e0 [ 951.658622] ? cred_has_capability+0x1d9/0x2e0 [ 951.663220] ? selinux_inode_copy_up+0x180/0x180 [ 951.667990] ? selinux_inode_copy_up+0x180/0x180 [ 951.672762] netlink_rcv_skb+0x160/0x440 [ 951.676835] ? nfnetlink_net_init+0x170/0x170 [ 951.681340] ? netlink_ack+0xae0/0xae0 [ 951.685245] ? ns_capable_common+0x117/0x140 [ 951.689669] nfnetlink_rcv+0x1b2/0x41b [ 951.693572] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 951.698350] netlink_unicast+0x4d5/0x690 [ 951.702427] ? netlink_sendskb+0x110/0x110 [ 951.706682] netlink_sendmsg+0x717/0xcc0 [ 951.710759] ? nlmsg_notify+0x1a0/0x1a0 [ 951.714739] ? __sock_recv_ts_and_drops+0x540/0x540 [ 951.719778] ? nlmsg_notify+0x1a0/0x1a0 [ 951.723781] sock_sendmsg+0xc7/0x130 [ 951.723797] ___sys_sendmsg+0x7bb/0x8f0 [ 951.731492] ? copy_msghdr_from_user+0x440/0x440 [ 951.736254] ? find_held_lock+0x2d/0x110 [ 951.740327] ? __fget+0x386/0x570 [ 951.743813] ? lock_downgrade+0x750/0x750 [ 951.747980] ? check_preemption_disabled+0x41/0x2b0 [ 951.753007] ? __fget+0x3ad/0x570 [ 951.756471] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 951.760718] ? lock_acquire+0x170/0x3f0 [ 951.764700] ? __might_fault+0xef/0x1d0 [ 951.768692] ? __fget_light+0x1d1/0x230 [ 951.772685] __x64_sys_sendmsg+0x132/0x220 [ 951.776928] ? __sys_sendmsg+0x1b0/0x1b0 [ 951.781018] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 951.785783] ? trace_hardirqs_off_caller+0x69/0x210 [ 951.790810] ? do_syscall_64+0x21/0x670 [ 951.794802] do_syscall_64+0xf9/0x670 [ 951.798621] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 951.803817] RIP: 0033:0x45d5f9 [ 951.807003] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 951.825889] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 951.833596] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 951.840851] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 951.848127] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 951.855381] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 951.862652] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c [ 951.903684] warn_alloc_show_mem: 1 callbacks suppressed [ 951.903690] Mem-Info: [ 951.912329] active_anon:104246 inactive_anon:12300 isolated_anon:0 [ 951.912329] active_file:2266 inactive_file:45864 isolated_file:0 [ 951.912329] unevictable:0 dirty:312 writeback:0 unstable:0 [ 951.912329] slab_reclaimable:16510 slab_unreclaimable:254434 [ 951.912329] mapped:64511 shmem:12484 pagetables:999 bounce:0 [ 951.912329] free:1080131 free_pcp:683 free_cma:0 [ 951.946674] Node 0 active_anon:416984kB inactive_anon:49200kB active_file:9060kB inactive_file:183456kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:258044kB dirty:1248kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 137216kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 951.976072] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 952.001841] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 952.028063] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 952.033160] Node 0 DMA32 free:526444kB min:35784kB low:44728kB high:53672kB active_anon:416912kB inactive_anon:49200kB active_file:9060kB inactive_file:183456kB unevictable:0kB writepending:1252kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7392kB pagetables:4044kB bounce:0kB free_pcp:2728kB local_pcp:1364kB free_cma:0kB [ 952.063549] lowmem_reserve[]: 0 0 2 2 2 [ 952.067541] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 952.093499] lowmem_reserve[]: 0 0 0 0 0 [ 952.097489] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 952.125019] lowmem_reserve[]: 0 0 0 0 0 [ 952.129091] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 952.145127] Node 0 DMA32: 4447*4kB (UME) 905*8kB (UME) 1547*16kB (UMEH) 1897*32kB (UMEH) 714*64kB (UME) 353*128kB (UMEH) 208*256kB (UMEH) 120*512kB (UMH) 59*1024kB (UMH) 45*2048kB (UM) 14*4096kB (U) = 525972kB [ 952.164362] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 952.175921] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 952.193266] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 952.202189] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 952.210834] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 952.219756] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 952.228331] 20924 total pagecache pages [ 952.232370] 0 pages in swap cache [ 952.235815] Swap cache stats: add 0, delete 0, find 0/0 [ 952.241222] Free swap = 0kB [ 952.244244] Total swap = 0kB [ 952.247242] 1965979 pages RAM [ 952.250424] 0 pages HighMem/MovableOnly 19:37:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60004800}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:37:06 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:06 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000002400070500000040b0ecfc8e81b2653f07a2a3ffff000000f7ee890ab54ab5c834c95b804ea0d205621604ffcd12762d75e107c7be4e85f717d6d000000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) 19:37:06 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xcb000000) 19:37:06 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xae000000) 19:37:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x1000000}, 0x0) [ 952.254396] 352651 pages reserved [ 952.257852] 0 pages cma reserved [ 952.337249] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 952.362115] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 952.367940] CPU: 1 PID: 836 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 952.375665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 952.385026] Call Trace: [ 952.387629] dump_stack+0x22c/0x33e [ 952.391274] warn_alloc.cold+0x7b/0x18f [ 952.395255] ? zone_watermark_ok_safe+0x300/0x300 [ 952.400094] ? should_fail+0x142/0x7d8 [ 952.403981] ? ip_set_alloc+0x54/0x70 [ 952.407776] vzalloc+0x15c/0x1a0 [ 952.411135] ip_set_alloc+0x54/0x70 [ 952.414763] hash_netiface_create+0x42d/0xa50 [ 952.419247] ? hash_netiface6_add+0x2940/0x2940 [ 952.423903] ip_set_create+0x70e/0x1380 [ 952.427870] ? __find_set_type_get+0x450/0x450 [ 952.432457] ? lock_downgrade+0x750/0x750 [ 952.436595] ? __find_set_type_get+0x450/0x450 [ 952.441187] nfnetlink_rcv_msg+0xeff/0x1210 [ 952.445506] ? nfnetlink_net_init+0x170/0x170 [ 952.450001] ? avc_has_extended_perms+0x1020/0x1020 [ 952.455007] ? avc_has_extended_perms+0x1020/0x1020 [ 952.460014] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 952.464500] ? lock_downgrade+0x750/0x750 [ 952.468637] ? __local_bh_enable_ip+0x159/0x2a0 [ 952.473296] ? cred_has_capability+0x162/0x2e0 [ 952.477866] ? cred_has_capability+0x1d9/0x2e0 [ 952.482456] ? selinux_inode_copy_up+0x180/0x180 [ 952.487217] ? selinux_inode_copy_up+0x180/0x180 [ 952.491963] netlink_rcv_skb+0x160/0x440 [ 952.496020] ? nfnetlink_net_init+0x170/0x170 [ 952.500534] ? netlink_ack+0xae0/0xae0 [ 952.504428] ? ns_capable_common+0x117/0x140 [ 952.508831] nfnetlink_rcv+0x1b2/0x41b [ 952.512715] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 952.517467] netlink_unicast+0x4d5/0x690 [ 952.521523] ? netlink_sendskb+0x110/0x110 [ 952.525755] netlink_sendmsg+0x717/0xcc0 [ 952.529912] ? nlmsg_notify+0x1a0/0x1a0 [ 952.533888] ? __sock_recv_ts_and_drops+0x540/0x540 [ 952.538904] ? nlmsg_notify+0x1a0/0x1a0 [ 952.542875] sock_sendmsg+0xc7/0x130 [ 952.546581] ___sys_sendmsg+0x7bb/0x8f0 [ 952.550550] ? copy_msghdr_from_user+0x440/0x440 [ 952.555296] ? find_held_lock+0x2d/0x110 [ 952.559348] ? __fget+0x386/0x570 [ 952.562809] ? lock_downgrade+0x750/0x750 [ 952.566949] ? check_preemption_disabled+0x41/0x2b0 [ 952.571956] ? __fget+0x3ad/0x570 [ 952.575402] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 952.579625] ? lock_acquire+0x170/0x3f0 [ 952.583588] ? __might_fault+0xef/0x1d0 [ 952.587560] ? __fget_light+0x1d1/0x230 [ 952.591532] __x64_sys_sendmsg+0x132/0x220 [ 952.595770] ? __sys_sendmsg+0x1b0/0x1b0 [ 952.599828] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 952.604571] ? trace_hardirqs_off_caller+0x69/0x210 [ 952.609576] ? do_syscall_64+0x21/0x670 [ 952.613539] do_syscall_64+0xf9/0x670 [ 952.617331] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 952.622508] RIP: 0033:0x45d5f9 [ 952.625780] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 952.644680] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 952.652374] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 952.659629] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 952.666884] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 952.674139] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 952.681395] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c 19:37:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x2000000}, 0x0) 19:37:07 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 952.769585] nla_parse: 40 callbacks suppressed [ 952.769595] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 952.804788] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:37:07 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xaf000000) [ 952.820700] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 19:37:07 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xcc000000) 19:37:07 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60004c00}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) [ 952.875341] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 952.895946] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 19:37:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x3000000}, 0x0) [ 952.942457] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 19:37:07 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe8, 0x0, 0x2, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1ff}, @CTA_EXPECT_NAT={0xcc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_NAT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x20048000) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[@ANYBLOB="886800002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x6888}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r4, 0x0, 0x0, 0x63, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000000080)={0x8, 'bond0\x00', {'batadv_slave_1\x00'}, 0x1000}) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x17, 0x0, 0x0) bind$xdp(r5, &(0x7f0000000480)={0x2c, 0x1, r3, 0x32, r0}, 0x10) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$KVM_GET_XSAVE(r6, 0x9000aea4, &(0x7f0000007c80)) [ 953.044005] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 953.065765] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 953.114621] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 953.128274] CPU: 0 PID: 893 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 953.136050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 953.145079] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 953.145403] Call Trace: [ 953.145430] dump_stack+0x22c/0x33e [ 953.145456] warn_alloc.cold+0x7b/0x18f [ 953.164179] ? zone_watermark_ok_safe+0x300/0x300 [ 953.169037] ? should_fail+0x142/0x7d8 [ 953.173383] ? ip_set_alloc+0x54/0x70 [ 953.177194] vzalloc+0x15c/0x1a0 [ 953.180569] ip_set_alloc+0x54/0x70 [ 953.184205] hash_netiface_create+0x42d/0xa50 [ 953.188711] ? hash_netiface6_add+0x2940/0x2940 [ 953.192391] netlink: 21088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 953.193389] ip_set_create+0x70e/0x1380 [ 953.193411] ? __find_set_type_get+0x450/0x450 [ 953.193445] ? lock_downgrade+0x750/0x750 [ 953.206964] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 953.210802] ? __find_set_type_get+0x450/0x450 [ 953.210823] nfnetlink_rcv_msg+0xeff/0x1210 [ 953.210853] ? nfnetlink_net_init+0x170/0x170 [ 953.210878] ? avc_has_extended_perms+0x1020/0x1020 [ 953.210892] ? avc_has_extended_perms+0x1020/0x1020 [ 953.210905] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 953.210924] ? lock_downgrade+0x750/0x750 [ 953.255609] ? __local_bh_enable_ip+0x159/0x2a0 [ 953.260295] ? cred_has_capability+0x162/0x2e0 [ 953.264882] ? cred_has_capability+0x1d9/0x2e0 [ 953.269475] ? selinux_inode_copy_up+0x180/0x180 [ 953.274346] ? selinux_inode_copy_up+0x180/0x180 [ 953.279116] netlink_rcv_skb+0x160/0x440 [ 953.283187] ? nfnetlink_net_init+0x170/0x170 [ 953.287690] ? netlink_ack+0xae0/0xae0 [ 953.291591] ? ns_capable_common+0x117/0x140 [ 953.296011] nfnetlink_rcv+0x1b2/0x41b [ 953.299907] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 953.304675] netlink_unicast+0x4d5/0x690 [ 953.308748] ? netlink_sendskb+0x110/0x110 [ 953.312999] netlink_sendmsg+0x717/0xcc0 [ 953.317068] ? nlmsg_notify+0x1a0/0x1a0 [ 953.321046] ? __sock_recv_ts_and_drops+0x540/0x540 [ 953.326165] ? nlmsg_notify+0x1a0/0x1a0 [ 953.330148] sock_sendmsg+0xc7/0x130 [ 953.333872] ___sys_sendmsg+0x7bb/0x8f0 [ 953.337977] ? copy_msghdr_from_user+0x440/0x440 [ 953.342738] ? find_held_lock+0x2d/0x110 [ 953.346809] ? __fget+0x386/0x570 [ 953.350275] ? lock_downgrade+0x750/0x750 [ 953.354433] ? check_preemption_disabled+0x41/0x2b0 [ 953.359466] ? __fget+0x3ad/0x570 [ 953.362926] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 953.367166] ? lock_acquire+0x170/0x3f0 [ 953.371160] ? __might_fault+0xef/0x1d0 [ 953.375153] ? __fget_light+0x1d1/0x230 [ 953.379145] __x64_sys_sendmsg+0x132/0x220 [ 953.383386] ? __sys_sendmsg+0x1b0/0x1b0 [ 953.387493] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 953.392259] ? trace_hardirqs_off_caller+0x69/0x210 [ 953.397285] ? do_syscall_64+0x21/0x670 [ 953.401276] do_syscall_64+0xf9/0x670 [ 953.405089] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 953.410284] RIP: 0033:0x45d5f9 [ 953.413509] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 953.432414] RSP: 002b:00007fcce42e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 953.440137] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 953.447414] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 953.454807] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 19:37:08 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 953.462113] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 953.469389] R13: 00007ffe1b999d8f R14: 00007fcce42e39c0 R15: 000000000118cfec [ 953.505339] warn_alloc_show_mem: 1 callbacks suppressed [ 953.505345] Mem-Info: 19:37:08 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xcd000000) 19:37:08 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xb0000000) [ 953.520144] active_anon:104785 inactive_anon:12300 isolated_anon:0 [ 953.520144] active_file:2266 inactive_file:48032 isolated_file:0 [ 953.520144] unevictable:0 dirty:2481 writeback:0 unstable:0 [ 953.520144] slab_reclaimable:16586 slab_unreclaimable:254260 [ 953.520144] mapped:64543 shmem:12484 pagetables:1132 bounce:0 [ 953.520144] free:1077567 free_pcp:456 free_cma:0 19:37:08 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 953.625571] Node 0 active_anon:421328kB inactive_anon:49200kB active_file:9060kB inactive_file:193128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:258272kB dirty:10924kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 137216kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 953.671943] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 19:37:08 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xb1000000) 19:37:08 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xce000000) [ 953.748588] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 19:37:08 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 953.827877] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 953.833864] Node 0 DMA32 free:511768kB min:35784kB low:44728kB high:53672kB active_anon:419148kB inactive_anon:49200kB active_file:9060kB inactive_file:196628kB unevictable:0kB writepending:14496kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7584kB pagetables:4232kB bounce:0kB free_pcp:2164kB local_pcp:992kB free_cma:0kB [ 953.931655] lowmem_reserve[]: 0 0 2 2 2 [ 953.948018] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 19:37:08 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="4800000010000507ff0100"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) [ 953.992459] lowmem_reserve[]: 0 0 0 0 0 [ 953.996721] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 19:37:08 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xcf000000) [ 954.046151] lowmem_reserve[]: 0 0 0 0 0 [ 954.051594] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 954.068555] Node 0 DMA32: 4158*4kB (UME) 1057*8kB (UME) 1583*16kB (UMEH) 1883*32kB (UMEH) 699*64kB (UME) 343*128kB (UEH) 199*256kB (UEH) 115*512kB (UH) 58*1024kB (UMH) 46*2048kB (UM) 12*4096kB (U) = 511888kB [ 954.098930] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 954.126986] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 954.147307] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 954.157123] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 954.181628] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 954.207741] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 954.230982] 22320 total pagecache pages [ 954.239675] 0 pages in swap cache 19:37:08 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60006000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) [ 954.253530] Swap cache stats: add 0, delete 0, find 0/0 [ 954.266375] Free swap = 0kB [ 954.270408] Total swap = 0kB [ 954.273433] 1965979 pages RAM [ 954.276531] 0 pages HighMem/MovableOnly [ 954.284051] 352651 pages reserved [ 954.299576] 0 pages cma reserved 19:37:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x4000000}, 0x0) 19:37:08 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:08 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xb2000000) 19:37:08 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xd0000000) [ 954.411932] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 954.445578] syz-executor.0 cpuset=/ mems_allowed=0-1 19:37:09 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff2800"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:09 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00009c0f0bab18c6bd1a6f31ee5e002465f7a6700009000100000000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000040000000b000100666c6f776576000004000200"], 0x34}}, 0x0) read(r2, &(0x7f0000000080)=""/60, 0x3c) r4 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r5 = fcntl$getown(r4, 0x9) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x105}, r5, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) [ 954.494457] CPU: 1 PID: 989 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 954.502208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 954.511572] Call Trace: [ 954.514177] dump_stack+0x22c/0x33e [ 954.517822] warn_alloc.cold+0x7b/0x18f [ 954.521808] ? zone_watermark_ok_safe+0x300/0x300 [ 954.526668] ? should_fail+0x142/0x7d8 [ 954.530578] ? ip_set_alloc+0x54/0x70 [ 954.534393] vzalloc+0x15c/0x1a0 [ 954.537776] ip_set_alloc+0x54/0x70 [ 954.541416] hash_netiface_create+0x42d/0xa50 [ 954.545922] ? hash_netiface6_add+0x2940/0x2940 [ 954.550629] ip_set_create+0x70e/0x1380 [ 954.554619] ? __find_set_type_get+0x450/0x450 [ 954.559231] ? lock_downgrade+0x750/0x750 [ 954.563385] ? __find_set_type_get+0x450/0x450 [ 954.567969] nfnetlink_rcv_msg+0xeff/0x1210 [ 954.572310] ? nfnetlink_net_init+0x170/0x170 [ 954.576820] ? avc_has_extended_perms+0x1020/0x1020 [ 954.581844] ? avc_has_extended_perms+0x1020/0x1020 [ 954.586870] ? __dev_queue_xmit+0x16e9/0x2ec0 19:37:09 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff2800"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:09 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000004c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0xeb, 0x0, 0x200, 0x3, 0x80000001, 0x5, "cd7e38b2197220166d147511e3b904fe14ee9d5f8426374d8bec316dd3eb2231287b0bc672b0096a78b12c83355da59c4c59b23b3eafcbf6b210fe7ba804bdad1f8fc1f562a12945cda38736e03eb471f6ceb108340975510520fd064ee019bf5f5f2a013966ff50ccb91419150d175988ec9a2fd80541801e647b326d572611da396cca6f22aafe756a873172d65c43d3b367db4f2d52ba50c25049a8cea0218f84f17ea31a3bd89bae86cdc96aa36a8475a3bb00bf5152eb87d76200bab5d227c3d2d4c49f754c4409c8d38419e15947df9a372ba81d0056ccae06c312982cb9976383025d1d56e705b9"}}, 0x203) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x6) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) [ 954.591377] ? lock_downgrade+0x750/0x750 [ 954.595539] ? __local_bh_enable_ip+0x159/0x2a0 [ 954.600229] ? cred_has_capability+0x162/0x2e0 [ 954.604907] ? cred_has_capability+0x1d9/0x2e0 [ 954.609500] ? selinux_inode_copy_up+0x180/0x180 [ 954.614261] ? selinux_inode_copy_up+0x180/0x180 [ 954.619031] netlink_rcv_skb+0x160/0x440 [ 954.623104] ? nfnetlink_net_init+0x170/0x170 [ 954.627609] ? netlink_ack+0xae0/0xae0 [ 954.631517] ? ns_capable_common+0x117/0x140 [ 954.635941] nfnetlink_rcv+0x1b2/0x41b [ 954.639842] ? nfnetlink_rcv_batch+0x1710/0x1710 19:37:09 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff2800"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 954.644614] netlink_unicast+0x4d5/0x690 [ 954.648691] ? netlink_sendskb+0x110/0x110 [ 954.652943] netlink_sendmsg+0x717/0xcc0 [ 954.657020] ? nlmsg_notify+0x1a0/0x1a0 [ 954.661004] ? __sock_recv_ts_and_drops+0x540/0x540 [ 954.666036] ? nlmsg_notify+0x1a0/0x1a0 [ 954.670025] sock_sendmsg+0xc7/0x130 [ 954.673747] ___sys_sendmsg+0x7bb/0x8f0 [ 954.677738] ? copy_msghdr_from_user+0x440/0x440 [ 954.682505] ? find_held_lock+0x2d/0x110 [ 954.686577] ? __fget+0x386/0x570 [ 954.690040] ? lock_downgrade+0x750/0x750 [ 954.694200] ? check_preemption_disabled+0x41/0x2b0 [ 954.699228] ? __fget+0x3ad/0x570 [ 954.702693] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 954.706934] ? lock_acquire+0x170/0x3f0 [ 954.710917] ? __might_fault+0xef/0x1d0 [ 954.714903] ? __fget_light+0x1d1/0x230 [ 954.718889] __x64_sys_sendmsg+0x132/0x220 [ 954.723129] ? __sys_sendmsg+0x1b0/0x1b0 [ 954.727218] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 954.731983] ? trace_hardirqs_off_caller+0x69/0x210 [ 954.737006] ? do_syscall_64+0x21/0x670 [ 954.740992] do_syscall_64+0xf9/0x670 19:37:09 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff28001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:09 executing program 1: socket(0x1000000010, 0x80002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 954.744806] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 954.749994] RIP: 0033:0x45d5f9 [ 954.753195] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 954.772101] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 954.779818] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 954.787102] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 954.794382] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 954.801672] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 954.808952] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c [ 954.913979] Mem-Info: [ 954.927335] active_anon:104775 inactive_anon:12300 isolated_anon:0 [ 954.927335] active_file:2266 inactive_file:45898 isolated_file:0 [ 954.927335] unevictable:0 dirty:361 writeback:0 unstable:0 [ 954.927335] slab_reclaimable:16676 slab_unreclaimable:254104 [ 954.927335] mapped:64557 shmem:12484 pagetables:1051 bounce:0 [ 954.927335] free:1079790 free_pcp:532 free_cma:0 [ 954.963898] Node 0 active_anon:419200kB inactive_anon:49200kB active_file:9060kB inactive_file:183592kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:259228kB dirty:1444kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 139264kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 954.993330] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 955.021917] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 955.078454] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 955.084506] Node 0 DMA32 free:528400kB min:35784kB low:44728kB high:53672kB active_anon:417300kB inactive_anon:49200kB active_file:9068kB inactive_file:183572kB unevictable:0kB writepending:1388kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7424kB pagetables:4224kB bounce:0kB free_pcp:1936kB local_pcp:948kB free_cma:0kB [ 955.116789] lowmem_reserve[]: 0 0 2 2 2 [ 955.121354] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 955.147799] lowmem_reserve[]: 0 0 0 0 0 [ 955.152361] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 955.180782] lowmem_reserve[]: 0 0 0 0 0 [ 955.184809] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 955.202681] Node 0 DMA32: 4387*4kB (UME) 1166*8kB (UME) 1797*16kB (UMEH) 1928*32kB (UMEH) 724*64kB (UME) 365*128kB (UMEH) 212*256kB (UMEH) 121*512kB (UMH) 58*1024kB (UMH) 46*2048kB (UM) 12*4096kB (U) = 529356kB [ 955.222351] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 955.234537] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 955.253015] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 955.262445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 955.271613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 955.281136] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 955.290315] 20945 total pagecache pages [ 955.294293] 0 pages in swap cache [ 955.297724] Swap cache stats: add 0, delete 0, find 0/0 [ 955.304162] Free swap = 0kB [ 955.307172] Total swap = 0kB [ 955.311978] 1965979 pages RAM [ 955.315077] 0 pages HighMem/MovableOnly [ 955.320112] 352651 pages reserved [ 955.323568] 0 pages cma reserved [ 955.327491] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 955.341030] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 955.346176] CPU: 0 PID: 1055 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 955.353983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 955.363347] Call Trace: [ 955.365967] dump_stack+0x22c/0x33e [ 955.369613] warn_alloc.cold+0x7b/0x18f [ 955.373594] ? zone_watermark_ok_safe+0x300/0x300 [ 955.378449] ? should_fail+0x142/0x7d8 [ 955.382362] ? ip_set_alloc+0x54/0x70 [ 955.386174] vzalloc+0x15c/0x1a0 [ 955.389555] ip_set_alloc+0x54/0x70 [ 955.393225] hash_netiface_create+0x42d/0xa50 [ 955.397717] ? hash_netiface6_add+0x2940/0x2940 [ 955.402378] ip_set_create+0x70e/0x1380 [ 955.406338] ? __find_set_type_get+0x450/0x450 [ 955.410944] ? __find_set_type_get+0x450/0x450 [ 955.415565] nfnetlink_rcv_msg+0xeff/0x1210 [ 955.419920] ? nfnetlink_net_init+0x170/0x170 [ 955.424406] ? avc_has_extended_perms+0x1020/0x1020 [ 955.429417] ? avc_has_extended_perms+0x1020/0x1020 [ 955.434429] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 955.438920] ? lock_downgrade+0x750/0x750 [ 955.443063] ? __local_bh_enable_ip+0x159/0x2a0 [ 955.447725] ? cred_has_capability+0x162/0x2e0 [ 955.452304] ? cred_has_capability+0x1d9/0x2e0 [ 955.456930] ? selinux_inode_copy_up+0x180/0x180 [ 955.462114] ? selinux_inode_copy_up+0x180/0x180 [ 955.466855] netlink_rcv_skb+0x160/0x440 [ 955.470921] ? nfnetlink_net_init+0x170/0x170 [ 955.475406] ? netlink_ack+0xae0/0xae0 [ 955.479437] ? ns_capable_common+0x117/0x140 [ 955.483901] nfnetlink_rcv+0x1b2/0x41b [ 955.487784] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 955.492548] netlink_unicast+0x4d5/0x690 [ 955.496661] ? netlink_sendskb+0x110/0x110 [ 955.500904] netlink_sendmsg+0x717/0xcc0 [ 955.504949] ? nlmsg_notify+0x1a0/0x1a0 [ 955.508925] ? __sock_recv_ts_and_drops+0x540/0x540 [ 955.513947] ? nlmsg_notify+0x1a0/0x1a0 [ 955.517915] sock_sendmsg+0xc7/0x130 [ 955.521613] ___sys_sendmsg+0x7bb/0x8f0 [ 955.525572] ? copy_msghdr_from_user+0x440/0x440 [ 955.530322] ? find_held_lock+0x2d/0x110 [ 955.534573] ? __fget+0x386/0x570 [ 955.538020] ? lock_downgrade+0x750/0x750 [ 955.542162] ? check_preemption_disabled+0x41/0x2b0 [ 955.547163] ? __fget+0x3ad/0x570 [ 955.550614] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 955.554841] ? lock_acquire+0x170/0x3f0 [ 955.558807] ? __might_fault+0xef/0x1d0 [ 955.562816] ? __fget_light+0x1d1/0x230 [ 955.566777] __x64_sys_sendmsg+0x132/0x220 [ 955.571007] ? __sys_sendmsg+0x1b0/0x1b0 [ 955.575065] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 955.579801] ? trace_hardirqs_off_caller+0x69/0x210 [ 955.584800] ? do_syscall_64+0x21/0x670 [ 955.588771] do_syscall_64+0xf9/0x670 [ 955.592582] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 955.597761] RIP: 0033:0x45d5f9 [ 955.600933] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 955.619816] RSP: 002b:00007fcce42e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 19:37:10 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60006800}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:37:10 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xd1000000) 19:37:10 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff28001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:10 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xb3000000) 19:37:10 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001e00)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="6ffe000000000000000003000000580001800d0001007564703a73797a310000000044000400200001"], 0x6c}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setsig(r1, 0xa, 0x16) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) syz_open_dev$sndmidi(&(0x7f0000000340)='/dev/snd/midiC#D#\x00', 0x4, 0x200000) 19:37:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x8000000}, 0x0) [ 955.627518] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 955.634768] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 955.642017] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 955.649274] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 955.656535] R13: 00007ffe1b999d8f R14: 00007fcce42e39c0 R15: 000000000118cfec [ 955.784775] Invalid UDP bearer configuration [ 955.784800] Enabling of bearer rejected, failed to enable media [ 955.815363] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 955.828136] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 955.846022] CPU: 1 PID: 1084 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 955.854099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 955.863447] Call Trace: [ 955.866043] dump_stack+0x22c/0x33e [ 955.869679] warn_alloc.cold+0x7b/0x18f [ 955.873662] ? zone_watermark_ok_safe+0x300/0x300 [ 955.878519] ? should_fail+0x142/0x7d8 [ 955.882434] ? ip_set_alloc+0x54/0x70 [ 955.886242] vzalloc+0x15c/0x1a0 [ 955.889619] ip_set_alloc+0x54/0x70 [ 955.893249] hash_netiface_create+0x42d/0xa50 [ 955.897735] ? hash_netiface6_add+0x2940/0x2940 [ 955.902401] ip_set_create+0x70e/0x1380 [ 955.906384] ? __find_set_type_get+0x450/0x450 [ 955.910995] ? lock_downgrade+0x750/0x750 [ 955.915145] ? __find_set_type_get+0x450/0x450 [ 955.919735] nfnetlink_rcv_msg+0xeff/0x1210 [ 955.924078] ? nfnetlink_net_init+0x170/0x170 [ 955.928596] ? avc_has_extended_perms+0x1020/0x1020 [ 955.933627] ? avc_has_extended_perms+0x1020/0x1020 [ 955.937526] Invalid UDP bearer configuration [ 955.937548] Enabling of bearer rejected, failed to enable media [ 955.938652] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 955.938679] ? lock_downgrade+0x750/0x750 [ 955.958782] ? __local_bh_enable_ip+0x159/0x2a0 [ 955.963465] ? cred_has_capability+0x162/0x2e0 [ 955.968053] ? cred_has_capability+0x1d9/0x2e0 [ 955.972644] ? selinux_inode_copy_up+0x180/0x180 [ 955.977395] ? selinux_inode_copy_up+0x180/0x180 [ 955.982136] netlink_rcv_skb+0x160/0x440 [ 955.986180] ? nfnetlink_net_init+0x170/0x170 [ 955.990757] ? netlink_ack+0xae0/0xae0 [ 955.994670] ? ns_capable_common+0x117/0x140 [ 955.999104] nfnetlink_rcv+0x1b2/0x41b [ 956.002983] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 956.007737] netlink_unicast+0x4d5/0x690 [ 956.011818] ? netlink_sendskb+0x110/0x110 [ 956.016037] netlink_sendmsg+0x717/0xcc0 [ 956.020081] ? nlmsg_notify+0x1a0/0x1a0 [ 956.024036] ? __sock_recv_ts_and_drops+0x540/0x540 [ 956.029036] ? nlmsg_notify+0x1a0/0x1a0 [ 956.033003] sock_sendmsg+0xc7/0x130 [ 956.036699] ___sys_sendmsg+0x7bb/0x8f0 [ 956.040656] ? copy_msghdr_from_user+0x440/0x440 [ 956.045390] ? find_held_lock+0x2d/0x110 [ 956.049430] ? __fget+0x386/0x570 [ 956.052864] ? lock_downgrade+0x750/0x750 [ 956.057005] ? check_preemption_disabled+0x41/0x2b0 [ 956.062011] ? __fget+0x3ad/0x570 [ 956.065449] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 956.069662] ? lock_acquire+0x170/0x3f0 [ 956.073618] ? __might_fault+0xef/0x1d0 [ 956.077575] ? __fget_light+0x1d1/0x230 [ 956.081537] __x64_sys_sendmsg+0x132/0x220 [ 956.085752] ? __sys_sendmsg+0x1b0/0x1b0 [ 956.089799] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 956.094536] ? trace_hardirqs_off_caller+0x69/0x210 [ 956.099545] ? do_syscall_64+0x21/0x670 [ 956.103521] do_syscall_64+0xf9/0x670 [ 956.107320] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 956.112489] RIP: 0033:0x45d5f9 [ 956.115661] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 956.134555] RSP: 002b:00007fcce42e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 956.142328] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 956.149578] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 956.156833] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 956.164097] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 956.171345] R13: 00007ffe1b999d8f R14: 00007fcce42e39c0 R15: 000000000118cfec [ 956.179540] warn_alloc_show_mem: 1 callbacks suppressed [ 956.179546] Mem-Info: [ 956.187344] active_anon:104749 inactive_anon:12300 isolated_anon:0 19:37:10 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xb4000000) 19:37:10 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x35, 0x101401) epoll_wait(r2, &(0x7f00000001c0)=[{}], 0x1, 0xc00000) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000b00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000480)=ANY=[@ANYBLOB="68040000", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fddbdf250e00000008004b000000000008004c000cac0f0008000d00070000003c047f0040498ee7132f1aa70e3887e4f28d248b3c668974cbc7a5f0003606fa3519411c7367731549cecd74fb9459065d6d7a16004371575f7aaa662eb0d96946e0ee0d24aa4c62e763be1cff629386d00fb1fb929773844b25ae37613ae9aab245a1275c52e1544fb48c2c051891e557f7b9645a8203ddba3c67a9c19fc488576975709bfbcba6cba71b6d103ff0f10c8e28614c88841fc9530c6ff6d4a05762b2d6fb3bf849e7e3b28ce6ba5cf6088060eae81f6fadae9bb0c659d57f319323ebd0dc800b79b419fc86fec3c21e43b2101c39f384b28fce3e9ca718fa12402a36c361af3a94f6c955c01d6342ace3996a3ca1c6b80e1ce1ffbe8cc7ec8cea0f14bbd8b63977ecc2248ff4f7fe2c531f943893fa5db1a9558f1983d811210dfe71da8022ac6f9e40000904111f391d508b498d115fd84ba44acfaccf2e979c2c4d212ae735b44d6a8ebece8042b20b0b7989dc9a8a2a97701e1cab51d33acfaa1e156d9f24b855f1455d4d897ad80d963aab98ec7dfabc94306babd9f3df3453b432bb485c2a0b6ae7432d4b7e2a2050db010680b85a57cbf20fb12a4850f2027a5661187685e499160f966c79f2755e6ade9eaf0f65b611d09a54c82e4465cd9250ce0a87c826796bf9ffa1cff288955f4140d57ed3629ff3c2987866d4375d22392b482694d32b0352ab59055b990d7e8adaefc9289b3a2e92856bc00f961a4c7ab872bd04d350b22b8e0303104951506de7bdb4f914b921fee2f409f0a1b3a7909175fde02825401eb01ea9a45800433e8e8970cef92df605126e2f121f4fd30067eef0c0bdf78a42645a4e6b8fe33606a52a28ae0cf9b9a24c39d5f5e70c4f8d9a7499563bb521f581e748ed9e10f3acfc81ce99831d97365e831a000e27d7561eff6092448b61a5673f32fa3ca2cdca33febab38a86154e71dd24e871003fe925b0cd1b42bb890e0e14bdce2102b476e8f98cfbd10a484e70d05524a5ba00923bf09163b46b9efc9f6d59149b5c87f6aa500e658362e115ba9f65584af20ad0dc3ca1259f0aba60d3d76958e1c6868385b3cd455d2637724880fa5dbe4ce37ac5d239b00c4ec7154ce162c98ff705359a271f6b9f83160c000e34973435222dedf3366813104020c1a5124da3b1d0e08315278cae66c2e737aa31eace8fc3a5eec91d67974eed1368541a12ab898c74c61ffc0da1bcb6160a50e7387aa49e0ebcdfa115713189ae994a6528157b45e287f82642accacfa5cd920855ec0fea74cfa8f06dda84269c487dbdadc5997065677ed8ab378f5b0e7495d6cf278ac4f8b168b3071e1945e3ceb48f30f3eb891b84b0db648c60d73560e14e8d783f1722150db2e2ed176896d7eaa963badf65987fb8eb4df8e5d649d6934c8e674f8f433e077a19d06ba60e6039ca86a825f310519597f9f092196c8a1b285c5b5c1de89cfc39b2df7435cddec2726fbc282b8129d538efc2dce81bdd7b25c7962147d33f22f045e40b7c15add000bd2c947662036cc7990806d3d898287a4aaac5ebfb29a9a9fab7b21a675fb78a92358498df4b30d9598a3e89098e8830351ac241f8ba04a0e5b918ec85213b86e70e19c11eb1d9b57aa1278048e9495e0fd206e229f80bbc27c2a69e34e61829bcbb6672ba39d98789368fc1241e18f2244d8874a8c62037b413284aaf3764539fa49166a3c367a6b002805b10314970aff6ef0620ef24"], 0x468}, 0x1, 0x0, 0x0, 0xc0}, 0x85c5) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0xe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000002400070500004d004007a2a300050000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000002c00270d00000000c512efe321685978cacf493947f97257013c556ff9fec8e9ebd9c6117aa212191a6f290f0f330f209b34140eb2ec6186cc5454168d19ed0744653cc54e5dcdea", @ANYRES32=r5, @ANYBLOB="0000000000000000040000000b000100666c6f776572000004000200"], 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) 19:37:10 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xd2000000) 19:37:10 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff28001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 956.187344] active_file:2269 inactive_file:45900 isolated_file:0 [ 956.187344] unevictable:0 dirty:357 writeback:0 unstable:0 [ 956.187344] slab_reclaimable:16681 slab_unreclaimable:253916 [ 956.187344] mapped:64561 shmem:12484 pagetables:1040 bounce:0 [ 956.187344] free:1080123 free_pcp:468 free_cma:0 [ 956.315224] Node 0 active_anon:425668kB inactive_anon:49200kB active_file:9072kB inactive_file:183600kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:259444kB dirty:1428kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 135168kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 956.356464] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 19:37:11 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xd3000000) [ 956.407412] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 956.440955] lowmem_reserve[]: 0 2501 2503 2503 2503 19:37:11 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000080)=0x8, 0x4) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) [ 956.484552] Node 0 DMA32 free:525600kB min:35784kB low:44728kB high:53672kB active_anon:419108kB inactive_anon:49200kB active_file:9072kB inactive_file:183600kB unevictable:0kB writepending:1428kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7520kB pagetables:4456kB bounce:0kB free_pcp:1852kB local_pcp:872kB free_cma:0kB [ 956.532034] lowmem_reserve[]: 0 0 2 2 2 [ 956.538615] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 956.581656] lowmem_reserve[]: 0 0 0 0 0 [ 956.586052] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 956.644916] lowmem_reserve[]: 0 0 0 0 0 [ 956.650026] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 956.686422] Node 0 DMA32: 4180*4kB (UME) 1045*8kB (UME) 1739*16kB (UMEH) 1923*32kB (UMEH) 725*64kB (UME) 365*128kB (UMEH) 212*256kB (UMEH) 121*512kB (UMH) 58*1024kB (UMH) 42*2048kB (UM) 13*4096kB (UM) = 522440kB [ 956.710776] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 956.737178] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 956.755670] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 956.770522] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 956.780287] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 956.790061] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 956.800115] 20954 total pagecache pages [ 956.804204] 0 pages in swap cache [ 956.807757] Swap cache stats: add 0, delete 0, find 0/0 [ 956.814889] Free swap = 0kB [ 956.817977] Total swap = 0kB [ 956.821929] 1965979 pages RAM [ 956.825165] 0 pages HighMem/MovableOnly [ 956.830165] 352651 pages reserved [ 956.833628] 0 pages cma reserved [ 956.837994] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 956.852752] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 956.859347] CPU: 0 PID: 1071 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 956.867154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 956.876508] Call Trace: [ 956.879106] dump_stack+0x22c/0x33e [ 956.882743] warn_alloc.cold+0x7b/0x18f [ 956.886733] ? zone_watermark_ok_safe+0x300/0x300 [ 956.891591] ? should_fail+0x142/0x7d8 [ 956.895497] ? ip_set_alloc+0x54/0x70 [ 956.899313] vzalloc+0x15c/0x1a0 [ 956.902688] ip_set_alloc+0x54/0x70 [ 956.906299] hash_netiface_create+0x42d/0xa50 [ 956.910789] ? hash_netiface6_add+0x2940/0x2940 [ 956.915448] ip_set_create+0x70e/0x1380 [ 956.919406] ? __find_set_type_get+0x450/0x450 [ 956.924021] ? __find_set_type_get+0x450/0x450 [ 956.928587] nfnetlink_rcv_msg+0xeff/0x1210 [ 956.932919] ? nfnetlink_net_init+0x170/0x170 [ 956.937412] ? avc_has_extended_perms+0x1020/0x1020 [ 956.942408] ? avc_has_extended_perms+0x1020/0x1020 [ 956.947407] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 956.951901] ? lock_downgrade+0x750/0x750 [ 956.956050] ? __local_bh_enable_ip+0x159/0x2a0 [ 956.960703] ? cred_has_capability+0x162/0x2e0 [ 956.965349] ? cred_has_capability+0x1d9/0x2e0 [ 956.969928] ? selinux_inode_copy_up+0x180/0x180 [ 956.974674] ? selinux_inode_copy_up+0x180/0x180 [ 956.979414] netlink_rcv_skb+0x160/0x440 [ 956.983458] ? nfnetlink_net_init+0x170/0x170 [ 956.987931] ? netlink_ack+0xae0/0xae0 [ 956.991822] ? ns_capable_common+0x117/0x140 [ 956.996267] nfnetlink_rcv+0x1b2/0x41b [ 957.000138] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 957.004934] netlink_unicast+0x4d5/0x690 [ 957.008996] ? netlink_sendskb+0x110/0x110 [ 957.013246] netlink_sendmsg+0x717/0xcc0 [ 957.017340] ? nlmsg_notify+0x1a0/0x1a0 [ 957.021293] ? __sock_recv_ts_and_drops+0x540/0x540 [ 957.026290] ? nlmsg_notify+0x1a0/0x1a0 [ 957.030260] sock_sendmsg+0xc7/0x130 [ 957.034017] ___sys_sendmsg+0x7bb/0x8f0 [ 957.037971] ? copy_msghdr_from_user+0x440/0x440 [ 957.042721] ? find_held_lock+0x2d/0x110 [ 957.046763] ? __fget+0x386/0x570 [ 957.050214] ? lock_downgrade+0x750/0x750 [ 957.054389] ? check_preemption_disabled+0x41/0x2b0 [ 957.059389] ? __fget+0x3ad/0x570 [ 957.063382] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 957.067595] ? lock_acquire+0x170/0x3f0 [ 957.071558] ? __might_fault+0xef/0x1d0 [ 957.075526] ? __fget_light+0x1d1/0x230 [ 957.079487] __x64_sys_sendmsg+0x132/0x220 [ 957.083715] ? __sys_sendmsg+0x1b0/0x1b0 [ 957.087761] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 957.092507] ? trace_hardirqs_off_caller+0x69/0x210 [ 957.097523] ? do_syscall_64+0x21/0x670 [ 957.101593] do_syscall_64+0xf9/0x670 [ 957.105375] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 957.110552] RIP: 0033:0x45d5f9 [ 957.113736] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 19:37:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60006c00}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:37:11 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff28001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:11 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xb5000000) 19:37:11 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xd4000000) 19:37:11 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38003fe0240007050000004007a2a34005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0xf, 0x6, 0x101, 0x0, 0x0, {0x9, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0)=0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x3af4701e) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x10f000, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r5, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f00000013c0)=""/4096, &(0x7f00000002c0)=0x1000) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r6, 0x4008f510, &(0x7f00000004c0)=0x9) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) 19:37:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0xe000000}, 0x0) [ 957.132622] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 957.140321] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 957.147569] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 957.154820] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 957.162068] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 957.169324] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c [ 957.300582] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 957.324658] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 957.336992] CPU: 0 PID: 1187 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 957.345041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 957.354403] Call Trace: [ 957.357006] dump_stack+0x22c/0x33e [ 957.360650] warn_alloc.cold+0x7b/0x18f [ 957.364635] ? zone_watermark_ok_safe+0x300/0x300 [ 957.369487] ? lock_downgrade+0x750/0x750 [ 957.373643] ? cache_alloc_refill+0xc5/0x410 [ 957.378068] ? ip_set_alloc+0x54/0x70 [ 957.381876] vzalloc+0x15c/0x1a0 [ 957.385249] ip_set_alloc+0x54/0x70 [ 957.388885] hash_netiface_create+0x42d/0xa50 [ 957.393387] ? hash_netiface6_add+0x2940/0x2940 [ 957.398064] ip_set_create+0x70e/0x1380 [ 957.402051] ? __find_set_type_get+0x450/0x450 [ 957.406657] ? lock_downgrade+0x750/0x750 [ 957.410818] ? __find_set_type_get+0x450/0x450 [ 957.415412] nfnetlink_rcv_msg+0xeff/0x1210 [ 957.419760] ? nfnetlink_net_init+0x170/0x170 [ 957.425408] ? avc_has_extended_perms+0x1020/0x1020 [ 957.430428] ? avc_has_extended_perms+0x1020/0x1020 [ 957.435449] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 957.439959] ? lock_downgrade+0x750/0x750 [ 957.444117] ? __local_bh_enable_ip+0x159/0x2a0 [ 957.448795] ? cred_has_capability+0x162/0x2e0 [ 957.453380] ? cred_has_capability+0x1d9/0x2e0 [ 957.457969] ? selinux_inode_copy_up+0x180/0x180 [ 957.462728] ? selinux_inode_copy_up+0x180/0x180 [ 957.467495] netlink_rcv_skb+0x160/0x440 [ 957.471569] ? nfnetlink_net_init+0x170/0x170 [ 957.476070] ? netlink_ack+0xae0/0xae0 [ 957.479973] ? ns_capable_common+0x117/0x140 [ 957.484569] nfnetlink_rcv+0x1b2/0x41b [ 957.488460] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 957.493230] netlink_unicast+0x4d5/0x690 [ 957.497296] ? netlink_sendskb+0x110/0x110 [ 957.501541] netlink_sendmsg+0x717/0xcc0 [ 957.505614] ? nlmsg_notify+0x1a0/0x1a0 [ 957.509599] ? __sock_recv_ts_and_drops+0x540/0x540 [ 957.514642] ? nlmsg_notify+0x1a0/0x1a0 [ 957.518621] sock_sendmsg+0xc7/0x130 [ 957.522344] ___sys_sendmsg+0x7bb/0x8f0 [ 957.526329] ? copy_msghdr_from_user+0x440/0x440 [ 957.531090] ? find_held_lock+0x2d/0x110 [ 957.535158] ? __fget+0x386/0x570 [ 957.538709] ? lock_downgrade+0x750/0x750 [ 957.542886] ? check_preemption_disabled+0x41/0x2b0 [ 957.547903] ? __fget+0x3ad/0x570 [ 957.551358] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 957.555744] ? lock_acquire+0x170/0x3f0 [ 957.559712] ? __might_fault+0xef/0x1d0 [ 957.563683] ? __fget_light+0x1d1/0x230 [ 957.567643] __x64_sys_sendmsg+0x132/0x220 [ 957.571873] ? __sys_sendmsg+0x1b0/0x1b0 [ 957.575931] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 957.580675] ? trace_hardirqs_off_caller+0x69/0x210 [ 957.585673] ? do_syscall_64+0x21/0x670 [ 957.589646] do_syscall_64+0xf9/0x670 [ 957.593444] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 957.598661] RIP: 0033:0x45d5f9 [ 957.601846] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 957.620790] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 957.628494] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 957.635745] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 957.642996] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 19:37:12 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff28001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r3, 0x0, 0x0, 0x63, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000080)=0x4) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r5, 0x0) epoll_pwait(r5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x4, &(0x7f00000001c0), 0x8) recvfrom$l2tp6(r4, 0x0, 0x0, 0x63, 0x0, 0x0) setsockopt$sock_void(r4, 0x1, 0x9, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) [ 957.650255] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 957.657533] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c [ 957.697824] warn_alloc_show_mem: 1 callbacks suppressed [ 957.697829] Mem-Info: [ 957.721767] active_anon:104755 inactive_anon:12299 isolated_anon:0 [ 957.721767] active_file:2269 inactive_file:45907 isolated_file:0 [ 957.721767] unevictable:0 dirty:388 writeback:0 unstable:0 [ 957.721767] slab_reclaimable:16706 slab_unreclaimable:253940 19:37:12 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xb6000000) [ 957.721767] mapped:64568 shmem:12484 pagetables:1128 bounce:0 [ 957.721767] free:1079880 free_pcp:509 free_cma:0 [ 957.801229] Node 0 active_anon:425552kB inactive_anon:49196kB active_file:9072kB inactive_file:183628kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:259572kB dirty:1552kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 957.806802] nla_parse: 65 callbacks suppressed [ 957.806811] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 19:37:12 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xd5000000) [ 957.838008] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 957.969652] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 957.984480] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 957.994627] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 958.022686] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 958.034037] Node 0 DMA32 free:517764kB min:35784kB low:44728kB high:53672kB active_anon:425832kB inactive_anon:49200kB active_file:9096kB inactive_file:183648kB unevictable:0kB writepending:1496kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7808kB pagetables:4716kB bounce:0kB free_pcp:1552kB local_pcp:1124kB free_cma:0kB [ 958.047292] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 958.076911] lowmem_reserve[]: 0 0 2 2 2 [ 958.083202] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 958.108397] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 19:37:12 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff28001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 958.116259] lowmem_reserve[]: 0 0 0 0 0 [ 958.123534] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 958.133683] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 958.166684] lowmem_reserve[]: 0 0 0 0 0 19:37:12 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) ioctl$FBIOBLANK(r4, 0x4611, 0x3) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) [ 958.189403] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 958.214821] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 958.266449] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 958.272496] Node 0 DMA32: 4125*4kB (UME) 1184*8kB (UME) 1729*16kB (UMEH) 1923*32kB (UMEH) 726*64kB (UME) 364*128kB (UMEH) 211*256kB (UMEH) 120*512kB (UMH) 59*1024kB (UMH) 42*2048kB (UM) 13*4096kB (UM) = 523364kB [ 958.297523] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 958.330138] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 958.349007] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 958.360597] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 958.374031] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 958.385500] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 958.395462] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 958.406696] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 19:37:13 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60007400}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:37:13 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xd6000000) 19:37:13 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xb7000000) 19:37:13 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000080)={0x16f, 0x8}) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f00000013c0)={0x1010, 0x453, 0x800, 0x70bd26, 0x25dfdbfe, "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", ["", "", "", "", "", "", "", ""]}, 0x1010}, 0x1, 0x0, 0x0, 0x12}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="00000000ea13a6e7280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) [ 958.428965] 20971 total pagecache pages [ 958.433018] 0 pages in swap cache [ 958.437478] Swap cache stats: add 0, delete 0, find 0/0 [ 958.444616] Free swap = 0kB [ 958.447645] Total swap = 0kB [ 958.458236] 1965979 pages RAM [ 958.461963] 0 pages HighMem/MovableOnly [ 958.466159] 352651 pages reserved [ 958.475655] 0 pages cma reserved 19:37:13 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff2800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0xf000000}, 0x0) [ 958.569433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=1294 comm=syz-executor.1 [ 958.631787] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 958.672348] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 958.678382] CPU: 1 PID: 1293 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 958.686295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 958.695650] Call Trace: [ 958.698256] dump_stack+0x22c/0x33e [ 958.701898] warn_alloc.cold+0x7b/0x18f [ 958.705887] ? zone_watermark_ok_safe+0x300/0x300 [ 958.711310] ? should_fail+0x142/0x7d8 [ 958.715327] ? ip_set_alloc+0x54/0x70 [ 958.719140] vzalloc+0x15c/0x1a0 [ 958.722516] ip_set_alloc+0x54/0x70 [ 958.726150] hash_netiface_create+0x42d/0xa50 [ 958.730658] ? hash_netiface6_add+0x2940/0x2940 [ 958.735334] ip_set_create+0x70e/0x1380 [ 958.739318] ? __find_set_type_get+0x450/0x450 [ 958.743931] ? lock_downgrade+0x750/0x750 [ 958.744359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=1294 comm=syz-executor.1 [ 958.748090] ? __find_set_type_get+0x450/0x450 [ 958.764879] nfnetlink_rcv_msg+0xeff/0x1210 [ 958.769222] ? nfnetlink_net_init+0x170/0x170 [ 958.773734] ? avc_has_extended_perms+0x1020/0x1020 [ 958.778759] ? avc_has_extended_perms+0x1020/0x1020 [ 958.783777] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 958.788285] ? lock_downgrade+0x750/0x750 [ 958.792430] ? __local_bh_enable_ip+0x159/0x2a0 [ 958.797085] ? cred_has_capability+0x162/0x2e0 [ 958.801647] ? cred_has_capability+0x1d9/0x2e0 [ 958.806225] ? selinux_inode_copy_up+0x180/0x180 [ 958.810978] ? selinux_inode_copy_up+0x180/0x180 [ 958.815719] netlink_rcv_skb+0x160/0x440 [ 958.819780] ? nfnetlink_net_init+0x170/0x170 [ 958.824254] ? netlink_ack+0xae0/0xae0 [ 958.828124] ? ns_capable_common+0x117/0x140 [ 958.832515] nfnetlink_rcv+0x1b2/0x41b [ 958.836400] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 958.841140] netlink_unicast+0x4d5/0x690 [ 958.845195] ? netlink_sendskb+0x110/0x110 [ 958.849413] netlink_sendmsg+0x717/0xcc0 [ 958.853468] ? nlmsg_notify+0x1a0/0x1a0 [ 958.857422] ? __sock_recv_ts_and_drops+0x540/0x540 [ 958.862421] ? nlmsg_notify+0x1a0/0x1a0 [ 958.866374] sock_sendmsg+0xc7/0x130 [ 958.870082] ___sys_sendmsg+0x7bb/0x8f0 [ 958.874037] ? copy_msghdr_from_user+0x440/0x440 [ 958.878772] ? find_held_lock+0x2d/0x110 [ 958.882814] ? __fget+0x386/0x570 [ 958.886249] ? lock_downgrade+0x750/0x750 [ 958.890379] ? check_preemption_disabled+0x41/0x2b0 [ 958.895377] ? __fget+0x3ad/0x570 [ 958.898814] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 958.903027] ? lock_acquire+0x170/0x3f0 [ 958.906995] ? __might_fault+0xef/0x1d0 [ 958.910969] ? __fget_light+0x1d1/0x230 [ 958.914927] __x64_sys_sendmsg+0x132/0x220 [ 958.919142] ? __sys_sendmsg+0x1b0/0x1b0 [ 958.923210] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 958.927945] ? trace_hardirqs_off_caller+0x69/0x210 [ 958.932943] ? do_syscall_64+0x21/0x670 [ 958.936900] do_syscall_64+0xf9/0x670 [ 958.940702] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 958.945875] RIP: 0033:0x45d5f9 [ 958.949048] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 19:37:13 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xd7000000) 19:37:13 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xb8000000) 19:37:13 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x404000, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @local}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000380)={r5}, &(0x7f00000003c0)=0x8) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) 19:37:13 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff2800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 958.967929] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 958.975614] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 958.983384] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 958.990632] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 958.997882] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 959.005143] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c [ 959.084927] Mem-Info: [ 959.095158] active_anon:105824 inactive_anon:12300 isolated_anon:0 [ 959.095158] active_file:2275 inactive_file:45918 isolated_file:0 [ 959.095158] unevictable:0 dirty:110 writeback:21 unstable:0 [ 959.095158] slab_reclaimable:16717 slab_unreclaimable:254257 [ 959.095158] mapped:64599 shmem:12484 pagetables:1086 bounce:0 [ 959.095158] free:1078617 free_pcp:319 free_cma:0 [ 959.164364] Node 0 active_anon:425560kB inactive_anon:49200kB active_file:9096kB inactive_file:183672kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:258596kB dirty:440kB writeback:84kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 19:37:13 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff2800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:13 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xb9000000) [ 959.312914] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 959.392291] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 959.427216] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 959.446368] Node 0 DMA32 free:525720kB min:35784kB low:44728kB high:53672kB active_anon:416948kB inactive_anon:49200kB active_file:9096kB inactive_file:183672kB unevictable:0kB writepending:340kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7360kB pagetables:4196kB bounce:0kB free_pcp:2816kB local_pcp:1364kB free_cma:0kB [ 959.479098] lowmem_reserve[]: 0 0 2 2 2 [ 959.483115] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 959.510899] lowmem_reserve[]: 0 0 0 0 0 [ 959.514914] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 959.542919] lowmem_reserve[]: 0 0 0 0 0 [ 959.546981] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 959.563732] Node 0 DMA32: 3968*4kB (UME) 985*8kB (UME) 1723*16kB (UMEH) 1933*32kB (UMEH) 726*64kB (UME) 364*128kB (UMEH) 211*256kB (UMEH) 120*512kB (UMH) 59*1024kB (UMH) 46*2048kB (UM) 12*4096kB (U) = 525464kB [ 959.582865] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 959.594456] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 959.613089] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 959.622031] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 959.630731] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 959.639717] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 959.648286] 20977 total pagecache pages [ 959.652317] 0 pages in swap cache [ 959.655759] Swap cache stats: add 0, delete 0, find 0/0 [ 959.661168] Free swap = 0kB [ 959.664175] Total swap = 0kB [ 959.667173] 1965979 pages RAM [ 959.670364] 0 pages HighMem/MovableOnly [ 959.674331] 352651 pages reserved [ 959.677784] 0 pages cma reserved [ 959.681753] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 959.693635] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 959.698827] CPU: 1 PID: 1371 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 959.706630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 959.715967] Call Trace: [ 959.718564] dump_stack+0x22c/0x33e [ 959.722200] warn_alloc.cold+0x7b/0x18f [ 959.726160] ? zone_watermark_ok_safe+0x300/0x300 [ 959.730989] ? should_fail+0x142/0x7d8 [ 959.734866] ? ip_set_alloc+0x54/0x70 [ 959.738651] vzalloc+0x15c/0x1a0 [ 959.742000] ip_set_alloc+0x54/0x70 [ 959.745625] hash_netiface_create+0x42d/0xa50 [ 959.750104] ? hash_netiface6_add+0x2940/0x2940 [ 959.754764] ip_set_create+0x70e/0x1380 [ 959.758725] ? __find_set_type_get+0x450/0x450 [ 959.763307] ? __find_set_type_get+0x450/0x450 [ 959.767876] nfnetlink_rcv_msg+0xeff/0x1210 [ 959.772188] ? nfnetlink_net_init+0x170/0x170 [ 959.776671] ? avc_has_extended_perms+0x1020/0x1020 [ 959.781670] ? avc_has_extended_perms+0x1020/0x1020 [ 959.786668] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 959.791185] ? lock_downgrade+0x750/0x750 [ 959.795316] ? __local_bh_enable_ip+0x159/0x2a0 [ 959.799990] ? cred_has_capability+0x162/0x2e0 [ 959.804560] ? cred_has_capability+0x1d9/0x2e0 [ 959.809127] ? selinux_inode_copy_up+0x180/0x180 [ 959.813864] ? selinux_inode_copy_up+0x180/0x180 [ 959.818605] netlink_rcv_skb+0x160/0x440 [ 959.822667] ? nfnetlink_net_init+0x170/0x170 [ 959.827145] ? netlink_ack+0xae0/0xae0 [ 959.831035] ? ns_capable_common+0x117/0x140 [ 959.835448] nfnetlink_rcv+0x1b2/0x41b [ 959.839321] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 959.844073] netlink_unicast+0x4d5/0x690 [ 959.848130] ? netlink_sendskb+0x110/0x110 [ 959.852350] netlink_sendmsg+0x717/0xcc0 [ 959.856414] ? nlmsg_notify+0x1a0/0x1a0 [ 959.860370] ? __sock_recv_ts_and_drops+0x540/0x540 [ 959.865370] ? nlmsg_notify+0x1a0/0x1a0 [ 959.869328] sock_sendmsg+0xc7/0x130 [ 959.873052] ___sys_sendmsg+0x7bb/0x8f0 [ 959.877010] ? copy_msghdr_from_user+0x440/0x440 [ 959.881750] ? find_held_lock+0x2d/0x110 [ 959.885794] ? __fget+0x386/0x570 [ 959.889246] ? lock_downgrade+0x750/0x750 [ 959.893395] ? check_preemption_disabled+0x41/0x2b0 [ 959.898396] ? __fget+0x3ad/0x570 [ 959.901852] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 959.906090] ? lock_acquire+0x170/0x3f0 [ 959.910112] ? __might_fault+0xef/0x1d0 [ 959.914077] ? __fget_light+0x1d1/0x230 [ 959.918041] __x64_sys_sendmsg+0x132/0x220 [ 959.922262] ? __sys_sendmsg+0x1b0/0x1b0 [ 959.926329] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 959.931088] ? trace_hardirqs_off_caller+0x69/0x210 [ 959.936088] ? do_syscall_64+0x21/0x670 [ 959.940058] do_syscall_64+0xf9/0x670 [ 959.943848] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 959.949020] RIP: 0033:0x45d5f9 [ 959.952209] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 959.971114] RSP: 002b:00007fcce42e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 959.978821] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 959.986089] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 19:37:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60007a00}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:37:14 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xd8000000) 19:37:14 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000002c0)={0x4, 0x0, [{0x8a1, 0x0, 0x4}, {0xa05, 0x0, 0x1}, {0x198, 0x0, 0xfffffffffffffff9}, {0xa8b, 0x0, 0xfff}]}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000380)={{r2}, 0x2, &(0x7f0000000340)=[0x14, 0x2e], 0x1ff, 0x2, [0x100, 0x7f, 0x0, 0x81]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000024000705000000d4bbf76d42fea86700bcd0427dc890ec1daa0a616ff99c4039b8f4f253952215fb1e949a73aab17621504edd72e46d6bed349bf4d27b319e738d68e3ba2e97b461afece8cb9ca7eefd531500f1ed1c45c96e9f3914f5869671af2e6637f809824ea5f9c7473add86c5e600a01af0fc0314f98ae17f539a64b055734c9c74503099f07e401d798e5f6f47a1c473cf99bfd7efd88e1f", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) 19:37:14 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xba000000) 19:37:14 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x3f000000}, 0x0) [ 959.993339] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 960.000606] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 960.007868] R13: 00007ffe1b999d8f R14: 00007fcce42e39c0 R15: 000000000118cfec 19:37:14 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 960.196633] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 960.226509] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 960.234578] CPU: 0 PID: 1391 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 960.242384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 960.251847] Call Trace: [ 960.254448] dump_stack+0x22c/0x33e [ 960.258095] warn_alloc.cold+0x7b/0x18f [ 960.262100] ? zone_watermark_ok_safe+0x300/0x300 [ 960.266961] ? should_fail+0x142/0x7d8 [ 960.270871] ? ip_set_alloc+0x54/0x70 [ 960.274794] vzalloc+0x15c/0x1a0 [ 960.278168] ip_set_alloc+0x54/0x70 [ 960.281811] hash_netiface_create+0x42d/0xa50 [ 960.286311] ? hash_netiface6_add+0x2940/0x2940 [ 960.290986] ip_set_create+0x70e/0x1380 [ 960.294973] ? __find_set_type_get+0x450/0x450 [ 960.299592] ? lock_downgrade+0x750/0x750 [ 960.303752] ? __find_set_type_get+0x450/0x450 [ 960.308350] nfnetlink_rcv_msg+0xeff/0x1210 [ 960.312693] ? nfnetlink_net_init+0x170/0x170 [ 960.317213] ? avc_has_extended_perms+0x1020/0x1020 [ 960.322243] ? avc_has_extended_perms+0x1020/0x1020 [ 960.327268] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 960.331777] ? lock_downgrade+0x750/0x750 [ 960.336104] ? __local_bh_enable_ip+0x159/0x2a0 [ 960.340891] ? cred_has_capability+0x162/0x2e0 [ 960.345481] ? cred_has_capability+0x1d9/0x2e0 [ 960.350075] ? selinux_inode_copy_up+0x180/0x180 [ 960.354838] ? selinux_inode_copy_up+0x180/0x180 [ 960.359633] netlink_rcv_skb+0x160/0x440 [ 960.363705] ? nfnetlink_net_init+0x170/0x170 [ 960.368212] ? netlink_ack+0xae0/0xae0 [ 960.372117] ? ns_capable_common+0x117/0x140 [ 960.376538] nfnetlink_rcv+0x1b2/0x41b [ 960.380873] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 960.385645] netlink_unicast+0x4d5/0x690 [ 960.389729] ? netlink_sendskb+0x110/0x110 [ 960.393965] netlink_sendmsg+0x717/0xcc0 [ 960.398013] ? nlmsg_notify+0x1a0/0x1a0 [ 960.401985] ? __sock_recv_ts_and_drops+0x540/0x540 [ 960.407005] ? nlmsg_notify+0x1a0/0x1a0 [ 960.410978] sock_sendmsg+0xc7/0x130 [ 960.414689] ___sys_sendmsg+0x7bb/0x8f0 [ 960.418666] ? copy_msghdr_from_user+0x440/0x440 [ 960.423416] ? find_held_lock+0x2d/0x110 [ 960.427462] ? __fget+0x386/0x570 [ 960.430939] ? lock_downgrade+0x750/0x750 [ 960.435083] ? check_preemption_disabled+0x41/0x2b0 [ 960.440100] ? __fget+0x3ad/0x570 [ 960.443566] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 960.447785] ? lock_acquire+0x170/0x3f0 [ 960.451753] ? __might_fault+0xef/0x1d0 [ 960.455726] ? __fget_light+0x1d1/0x230 [ 960.459712] __x64_sys_sendmsg+0x132/0x220 [ 960.463942] ? __sys_sendmsg+0x1b0/0x1b0 [ 960.468005] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 960.472936] ? trace_hardirqs_off_caller+0x69/0x210 [ 960.477937] ? do_syscall_64+0x21/0x670 [ 960.481913] do_syscall_64+0xf9/0x670 [ 960.485708] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 960.490896] RIP: 0033:0x45d5f9 [ 960.494082] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 960.512978] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 960.520700] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 960.527982] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 960.535285] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 19:37:15 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:15 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xbb000000) 19:37:15 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) rt_sigprocmask(0x1, &(0x7f0000000080)={[0x9]}, &(0x7f00000001c0), 0x8) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) 19:37:15 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xd9000000) [ 960.542717] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 960.549986] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c [ 960.577759] warn_alloc_show_mem: 1 callbacks suppressed [ 960.577769] Mem-Info: [ 960.599621] active_anon:104232 inactive_anon:12300 isolated_anon:0 [ 960.599621] active_file:2275 inactive_file:45922 isolated_file:0 [ 960.599621] unevictable:0 dirty:121 writeback:0 unstable:0 [ 960.599621] slab_reclaimable:16717 slab_unreclaimable:254504 [ 960.599621] mapped:64623 shmem:12484 pagetables:1087 bounce:0 [ 960.599621] free:1079887 free_pcp:464 free_cma:0 [ 960.690554] Node 0 active_anon:425524kB inactive_anon:49200kB active_file:9096kB inactive_file:183688kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:258592kB dirty:484kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 19:37:15 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 960.887092] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 960.925781] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 960.955593] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 960.963065] Node 0 DMA32 free:523076kB min:35784kB low:44728kB high:53672kB active_anon:419280kB inactive_anon:49200kB active_file:9096kB inactive_file:183688kB unevictable:0kB writepending:484kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7488kB pagetables:4348kB bounce:0kB free_pcp:1952kB local_pcp:1308kB free_cma:0kB [ 961.014358] lowmem_reserve[]: 0 0 2 2 2 [ 961.026515] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 961.059462] lowmem_reserve[]: 0 0 0 0 0 [ 961.063474] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 961.092729] lowmem_reserve[]: 0 0 0 0 0 [ 961.096727] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 961.116557] Node 0 DMA32: 3946*4kB (UME) 1139*8kB (UME) 1673*16kB (UMEH) 1933*32kB (UMEH) 725*64kB (UME) 365*128kB (UMEH) 211*256kB (UMEH) 120*512kB (UMH) 59*1024kB (UMH) 44*2048kB (UM) 13*4096kB (UM) = 525872kB [ 961.136111] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 961.148097] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 961.166096] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 961.175441] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 961.184519] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 961.193861] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 961.202934] 20993 total pagecache pages [ 961.206900] 0 pages in swap cache [ 961.211389] Swap cache stats: add 0, delete 0, find 0/0 [ 961.216754] Free swap = 0kB [ 961.220968] Total swap = 0kB [ 961.223983] 1965979 pages RAM [ 961.227100] 0 pages HighMem/MovableOnly [ 961.232061] 352651 pages reserved [ 961.235507] 0 pages cma reserved [ 961.240418] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 961.252852] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 961.259482] CPU: 1 PID: 1402 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 961.267294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 961.276652] Call Trace: [ 961.279256] dump_stack+0x22c/0x33e [ 961.282902] warn_alloc.cold+0x7b/0x18f [ 961.286892] ? zone_watermark_ok_safe+0x300/0x300 [ 961.291747] ? should_fail+0x142/0x7d8 [ 961.295659] ? ip_set_alloc+0x54/0x70 [ 961.299476] vzalloc+0x15c/0x1a0 [ 961.302840] ip_set_alloc+0x54/0x70 [ 961.306539] hash_netiface_create+0x42d/0xa50 [ 961.311016] ? hash_netiface6_add+0x2940/0x2940 [ 961.315668] ip_set_create+0x70e/0x1380 [ 961.319681] ? __find_set_type_get+0x450/0x450 [ 961.324259] ? __find_set_type_get+0x450/0x450 [ 961.328842] nfnetlink_rcv_msg+0xeff/0x1210 [ 961.333152] ? nfnetlink_net_init+0x170/0x170 [ 961.337646] ? avc_has_extended_perms+0x1020/0x1020 [ 961.342641] ? avc_has_extended_perms+0x1020/0x1020 [ 961.347639] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 961.352118] ? lock_downgrade+0x750/0x750 [ 961.356261] ? __local_bh_enable_ip+0x159/0x2a0 [ 961.360914] ? cred_has_capability+0x162/0x2e0 [ 961.365475] ? cred_has_capability+0x1d9/0x2e0 [ 961.370050] ? selinux_inode_copy_up+0x180/0x180 [ 961.374786] ? selinux_inode_copy_up+0x180/0x180 [ 961.379526] netlink_rcv_skb+0x160/0x440 [ 961.383571] ? nfnetlink_net_init+0x170/0x170 [ 961.388047] ? netlink_ack+0xae0/0xae0 [ 961.392018] ? ns_capable_common+0x117/0x140 [ 961.396411] nfnetlink_rcv+0x1b2/0x41b [ 961.400280] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 961.405018] netlink_unicast+0x4d5/0x690 [ 961.409060] ? netlink_sendskb+0x110/0x110 [ 961.413296] netlink_sendmsg+0x717/0xcc0 [ 961.417351] ? nlmsg_notify+0x1a0/0x1a0 [ 961.421306] ? __sock_recv_ts_and_drops+0x540/0x540 [ 961.426306] ? nlmsg_notify+0x1a0/0x1a0 [ 961.430273] sock_sendmsg+0xc7/0x130 [ 961.433980] ___sys_sendmsg+0x7bb/0x8f0 [ 961.437938] ? copy_msghdr_from_user+0x440/0x440 [ 961.442685] ? find_held_lock+0x2d/0x110 [ 961.446729] ? __fget+0x386/0x570 [ 961.450166] ? lock_downgrade+0x750/0x750 [ 961.454310] ? check_preemption_disabled+0x41/0x2b0 [ 961.459309] ? __fget+0x3ad/0x570 [ 961.462744] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 961.466957] ? lock_acquire+0x170/0x3f0 [ 961.470912] ? __might_fault+0xef/0x1d0 [ 961.474868] ? __fget_light+0x1d1/0x230 [ 961.478825] __x64_sys_sendmsg+0x132/0x220 [ 961.483041] ? __sys_sendmsg+0x1b0/0x1b0 [ 961.487196] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 961.491932] ? trace_hardirqs_off_caller+0x69/0x210 [ 961.496928] ? do_syscall_64+0x21/0x670 [ 961.500883] do_syscall_64+0xf9/0x670 [ 961.504666] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 961.509838] RIP: 0033:0x45d5f9 [ 961.513035] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 961.531920] RSP: 002b:00007fcce42e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 19:37:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6000a203}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:37:16 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xda000000) 19:37:16 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xbc000000) 19:37:16 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x17, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x7) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) 19:37:16 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x60000000}, 0x0) [ 961.539776] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 961.547037] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 961.554291] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 961.561630] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 961.568880] R13: 00007ffe1b999d8f R14: 00007fcce42e39c0 R15: 000000000118cfec 19:37:16 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 961.732576] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 961.776021] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 961.796727] CPU: 1 PID: 1490 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 961.796737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 961.796741] Call Trace: [ 961.796762] dump_stack+0x22c/0x33e [ 961.796783] warn_alloc.cold+0x7b/0x18f [ 961.796799] ? zone_watermark_ok_safe+0x300/0x300 [ 961.796817] ? should_fail+0x142/0x7d8 [ 961.832830] ? ip_set_alloc+0x54/0x70 [ 961.836641] vzalloc+0x15c/0x1a0 [ 961.840016] ip_set_alloc+0x54/0x70 [ 961.843652] hash_netiface_create+0x42d/0xa50 [ 961.848159] ? hash_netiface6_add+0x2940/0x2940 [ 961.852835] ip_set_create+0x70e/0x1380 [ 961.856824] ? __find_set_type_get+0x450/0x450 [ 961.861435] ? lock_downgrade+0x750/0x750 [ 961.865599] ? __find_set_type_get+0x450/0x450 [ 961.870193] nfnetlink_rcv_msg+0xeff/0x1210 [ 961.874534] ? nfnetlink_net_init+0x170/0x170 [ 961.879052] ? avc_has_extended_perms+0x1020/0x1020 [ 961.884073] ? avc_has_extended_perms+0x1020/0x1020 [ 961.889100] ? __dev_queue_xmit+0x16e9/0x2ec0 19:37:16 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xbd000000) [ 961.893614] ? lock_downgrade+0x750/0x750 [ 961.897771] ? __local_bh_enable_ip+0x159/0x2a0 [ 961.902452] ? cred_has_capability+0x162/0x2e0 [ 961.907043] ? cred_has_capability+0x1d9/0x2e0 [ 961.911632] ? selinux_inode_copy_up+0x180/0x180 [ 961.916395] ? selinux_inode_copy_up+0x180/0x180 [ 961.921163] netlink_rcv_skb+0x160/0x440 [ 961.925239] ? nfnetlink_net_init+0x170/0x170 [ 961.929742] ? netlink_ack+0xae0/0xae0 [ 961.933644] ? ns_capable_common+0x117/0x140 [ 961.938072] nfnetlink_rcv+0x1b2/0x41b [ 961.941969] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 961.946750] netlink_unicast+0x4d5/0x690 [ 961.950822] ? netlink_sendskb+0x110/0x110 [ 961.955071] netlink_sendmsg+0x717/0xcc0 [ 961.959145] ? nlmsg_notify+0x1a0/0x1a0 [ 961.963125] ? __sock_recv_ts_and_drops+0x540/0x540 [ 961.968140] ? nlmsg_notify+0x1a0/0x1a0 [ 961.972096] sock_sendmsg+0xc7/0x130 [ 961.975794] ___sys_sendmsg+0x7bb/0x8f0 [ 961.979752] ? copy_msghdr_from_user+0x440/0x440 [ 961.984505] ? find_held_lock+0x2d/0x110 [ 961.988620] ? __fget+0x386/0x570 [ 961.992066] ? lock_downgrade+0x750/0x750 [ 961.996207] ? check_preemption_disabled+0x41/0x2b0 [ 962.001206] ? __fget+0x3ad/0x570 [ 962.004656] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 962.008894] ? lock_acquire+0x170/0x3f0 [ 962.012885] ? __might_fault+0xef/0x1d0 [ 962.016844] ? __fget_light+0x1d1/0x230 [ 962.020804] __x64_sys_sendmsg+0x132/0x220 [ 962.025025] ? __sys_sendmsg+0x1b0/0x1b0 [ 962.029078] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 962.033813] ? trace_hardirqs_off_caller+0x69/0x210 [ 962.038829] ? do_syscall_64+0x21/0x670 [ 962.042786] do_syscall_64+0xf9/0x670 [ 962.046613] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 962.051783] RIP: 0033:0x45d5f9 [ 962.054970] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 962.073875] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 962.081565] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 962.088815] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 19:37:16 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xdb000000) 19:37:16 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2c30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) r4 = gettid() getpriority(0x1, r4) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, r4, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) r5 = socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r5, &(0x7f00000000c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffff01009e000000000000000000", @ANYRES32=r8, @ANYBLOB="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"], 0x8d0}}, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="38020000", @ANYRES16=0x0, @ANYBLOB="000825bd7000fddbdf250000000008000100", @ANYRES32=r3, @ANYBLOB="1c02028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000900000008000600", @ANYRES32=r3, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff0100003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000700000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000100000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400018000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="d529157bb47ef4a6b38902aa19b9a1ea7267ea4efc94352466b8da3984e731457a22457c5ab719c3b2793ef9a794000000110fe6cf2c7895a36b84db3a274237f02de16ec70091943fbe81fefc96571e606f2a900097d0006f2ac46c16d801f3c7598325a75f360b0adc853aaa148f48133a2d78c16b5ecbd10f651e4fe63923c0fcafebd5c949e557aa2da94556346aed7cc7afc4a7883574907010cd47cda38ce030f4206dce954b928a38f9ab64d020ee907e555506b75d9937e9eee916eafd261edcc0d6eba690ec7792612214bbc35c5e2dfb5b95397349b57905b9a9965f39e6c245cb6bed5827081653f27d94b185dc68720f41851172a92bebf515dface942f62e3e2f5a2b9f63c3b56953a7bc0012c0cad830fadab9a277f5a1311cd55fe6640c99012d0414d1a0891a88fb53a70757fb0f5a37b931b2559190b50050137d"], 0x238}, 0x1, 0x0, 0x0, 0x11}, 0x4044010) [ 962.096065] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 962.103326] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 962.110585] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c [ 962.156688] warn_alloc_show_mem: 1 callbacks suppressed [ 962.156693] Mem-Info: [ 962.173029] active_anon:105298 inactive_anon:12300 isolated_anon:0 [ 962.173029] active_file:2275 inactive_file:45942 isolated_file:0 [ 962.173029] unevictable:0 dirty:145 writeback:0 unstable:0 [ 962.173029] slab_reclaimable:16718 slab_unreclaimable:254788 [ 962.173029] mapped:64651 shmem:12484 pagetables:1069 bounce:0 [ 962.173029] free:1078527 free_pcp:460 free_cma:0 19:37:16 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xbe000000) 19:37:16 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 962.265019] Node 0 active_anon:421236kB inactive_anon:49200kB active_file:9096kB inactive_file:183768kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:258604kB dirty:580kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 137216kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 962.348260] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 962.379933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1568 comm=syz-executor.1 [ 962.410415] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 962.456229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1553 comm=syz-executor.1 [ 962.474771] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 962.501216] Node 0 DMA32 free:524724kB min:35784kB low:44728kB high:53672kB active_anon:417476kB inactive_anon:49200kB active_file:9096kB inactive_file:183768kB unevictable:0kB writepending:580kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7456kB pagetables:4424kB bounce:0kB free_pcp:1732kB local_pcp:1280kB free_cma:0kB [ 962.536522] lowmem_reserve[]: 0 0 2 2 2 [ 962.542137] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 962.568507] lowmem_reserve[]: 0 0 0 0 0 [ 962.572586] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 962.600361] lowmem_reserve[]: 0 0 0 0 0 [ 962.604394] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 962.620445] Node 0 DMA32: 3818*4kB (UME) 1187*8kB (UME) 1617*16kB (UMEH) 1932*32kB (UMEH) 725*64kB (UME) 365*128kB (UMEH) 211*256kB (UMEH) 120*512kB (UMH) 59*1024kB (UMH) 44*2048kB (UM) 13*4096kB (UM) = 524816kB [ 962.639624] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 962.651216] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 962.669307] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 962.678147] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 962.686896] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 962.695851] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 962.704515] 21005 total pagecache pages [ 962.708565] 0 pages in swap cache [ 962.712021] Swap cache stats: add 0, delete 0, find 0/0 [ 962.717371] Free swap = 0kB [ 962.720450] Total swap = 0kB [ 962.723460] 1965979 pages RAM [ 962.726542] 0 pages HighMem/MovableOnly [ 962.730584] 352651 pages reserved [ 962.734036] 0 pages cma reserved [ 962.738055] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 962.750935] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 962.756072] CPU: 0 PID: 1582 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 962.763866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 962.773219] Call Trace: [ 962.775820] dump_stack+0x22c/0x33e [ 962.779465] warn_alloc.cold+0x7b/0x18f [ 962.783452] ? zone_watermark_ok_safe+0x300/0x300 [ 962.788308] ? should_fail+0x142/0x7d8 [ 962.792213] ? ip_set_alloc+0x54/0x70 [ 962.796026] vzalloc+0x15c/0x1a0 [ 962.799400] ip_set_alloc+0x54/0x70 [ 962.803645] hash_netiface_create+0x42d/0xa50 [ 962.808142] ? hash_netiface6_add+0x2940/0x2940 [ 962.812807] ip_set_create+0x70e/0x1380 [ 962.816775] ? __find_set_type_get+0x450/0x450 [ 962.821353] ? __find_set_type_get+0x450/0x450 [ 962.825968] nfnetlink_rcv_msg+0xeff/0x1210 [ 962.830298] ? nfnetlink_net_init+0x170/0x170 [ 962.835661] ? avc_has_extended_perms+0x1020/0x1020 [ 962.840660] ? avc_has_extended_perms+0x1020/0x1020 [ 962.845675] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 962.850172] ? lock_downgrade+0x750/0x750 [ 962.854313] ? __local_bh_enable_ip+0x159/0x2a0 [ 962.858986] ? cred_has_capability+0x162/0x2e0 [ 962.863591] ? cred_has_capability+0x1d9/0x2e0 [ 962.868156] ? selinux_inode_copy_up+0x180/0x180 [ 962.872903] ? selinux_inode_copy_up+0x180/0x180 [ 962.877840] netlink_rcv_skb+0x160/0x440 [ 962.881887] ? nfnetlink_net_init+0x170/0x170 [ 962.886363] ? netlink_ack+0xae0/0xae0 [ 962.890250] ? ns_capable_common+0x117/0x140 [ 962.894652] nfnetlink_rcv+0x1b2/0x41b [ 962.898534] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 962.903283] netlink_unicast+0x4d5/0x690 [ 962.907328] ? netlink_sendskb+0x110/0x110 [ 962.911565] netlink_sendmsg+0x717/0xcc0 [ 962.915624] ? nlmsg_notify+0x1a0/0x1a0 [ 962.919578] ? __sock_recv_ts_and_drops+0x540/0x540 [ 962.924624] ? nlmsg_notify+0x1a0/0x1a0 [ 962.928595] sock_sendmsg+0xc7/0x130 [ 962.932316] ___sys_sendmsg+0x7bb/0x8f0 [ 962.936283] ? copy_msghdr_from_user+0x440/0x440 [ 962.941022] ? find_held_lock+0x2d/0x110 [ 962.949617] ? __fget+0x386/0x570 [ 962.953076] ? lock_downgrade+0x750/0x750 [ 962.957217] ? check_preemption_disabled+0x41/0x2b0 [ 962.962216] ? __fget+0x3ad/0x570 [ 962.965652] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 962.969877] ? lock_acquire+0x170/0x3f0 [ 962.973843] ? __might_fault+0xef/0x1d0 [ 962.977846] ? __fget_light+0x1d1/0x230 [ 962.981805] __x64_sys_sendmsg+0x132/0x220 [ 962.986027] ? __sys_sendmsg+0x1b0/0x1b0 [ 962.990103] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 962.994850] ? trace_hardirqs_off_caller+0x69/0x210 [ 962.999849] ? do_syscall_64+0x21/0x670 [ 963.003826] do_syscall_64+0xf9/0x670 [ 963.007659] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 963.012840] RIP: 0033:0x45d5f9 [ 963.016024] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 963.034908] RSP: 002b:00007fcce42e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 963.042596] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 19:37:17 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6000f000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:37:17 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:17 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xdc000000) 19:37:17 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xbf000000) 19:37:17 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00000008007f0000000000000b000100666c6f77657200000400020090a4e22c1f35c0fdd9455aa970460207dbdebb4b5b6d9930404a"], 0x34}}, 0x1) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) 19:37:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x92070000}, 0x0) [ 963.049857] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 963.057117] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 963.064380] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 963.071641] R13: 00007ffe1b999d8f R14: 00007fcce42e39c0 R15: 000000000118cfec [ 963.162257] nla_parse: 50 callbacks suppressed [ 963.162267] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 963.206871] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 963.216512] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 963.228840] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 963.234039] CPU: 1 PID: 1600 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 963.241837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 963.251193] Call Trace: [ 963.253793] dump_stack+0x22c/0x33e [ 963.257443] warn_alloc.cold+0x7b/0x18f [ 963.261428] ? zone_watermark_ok_safe+0x300/0x300 [ 963.261833] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 963.266279] ? should_fail+0x142/0x7d8 [ 963.266309] ? ip_set_alloc+0x54/0x70 [ 963.266328] vzalloc+0x15c/0x1a0 [ 963.266349] ip_set_alloc+0x54/0x70 [ 963.289548] hash_netiface_create+0x42d/0xa50 [ 963.294055] ? hash_netiface6_add+0x2940/0x2940 [ 963.298722] ip_set_create+0x70e/0x1380 [ 963.302683] ? __find_set_type_get+0x450/0x450 [ 963.307289] ? lock_downgrade+0x750/0x750 [ 963.311428] ? __find_set_type_get+0x450/0x450 [ 963.316014] nfnetlink_rcv_msg+0xeff/0x1210 [ 963.320375] ? nfnetlink_net_init+0x170/0x170 [ 963.324905] ? avc_has_extended_perms+0x1020/0x1020 [ 963.329932] ? avc_has_extended_perms+0x1020/0x1020 [ 963.334956] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 963.337694] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 963.339461] ? lock_downgrade+0x750/0x750 [ 963.339478] ? __local_bh_enable_ip+0x159/0x2a0 [ 963.339500] ? cred_has_capability+0x162/0x2e0 [ 963.339516] ? cred_has_capability+0x1d9/0x2e0 [ 963.339534] ? selinux_inode_copy_up+0x180/0x180 [ 963.339546] ? selinux_inode_copy_up+0x180/0x180 [ 963.339566] netlink_rcv_skb+0x160/0x440 [ 963.379685] ? nfnetlink_net_init+0x170/0x170 [ 963.384194] ? netlink_ack+0xae0/0xae0 [ 963.388098] ? ns_capable_common+0x117/0x140 [ 963.392520] nfnetlink_rcv+0x1b2/0x41b [ 963.393692] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 963.396420] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 963.396447] netlink_unicast+0x4d5/0x690 [ 963.396464] ? netlink_sendskb+0x110/0x110 [ 963.396486] netlink_sendmsg+0x717/0xcc0 [ 963.422114] ? nlmsg_notify+0x1a0/0x1a0 [ 963.424242] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 963.426093] ? __sock_recv_ts_and_drops+0x540/0x540 [ 963.426120] ? nlmsg_notify+0x1a0/0x1a0 [ 963.426134] sock_sendmsg+0xc7/0x130 [ 963.426152] ___sys_sendmsg+0x7bb/0x8f0 [ 963.451343] ? copy_msghdr_from_user+0x440/0x440 19:37:18 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x85130, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x8003}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) 19:37:18 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:18 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xc0000000) [ 963.456106] ? find_held_lock+0x2d/0x110 [ 963.460178] ? __fget+0x386/0x570 [ 963.463645] ? lock_downgrade+0x750/0x750 [ 963.467801] ? check_preemption_disabled+0x41/0x2b0 [ 963.472837] ? __fget+0x3ad/0x570 [ 963.476311] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 963.480560] ? lock_acquire+0x170/0x3f0 [ 963.484539] ? __might_fault+0xef/0x1d0 [ 963.488527] ? __fget_light+0x1d1/0x230 [ 963.492514] __x64_sys_sendmsg+0x132/0x220 [ 963.496758] ? __sys_sendmsg+0x1b0/0x1b0 [ 963.500089] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 963.500840] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 963.500859] ? trace_hardirqs_off_caller+0x69/0x210 [ 963.500878] ? do_syscall_64+0x21/0x670 [ 963.523282] do_syscall_64+0xf9/0x670 [ 963.527097] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 963.532315] RIP: 0033:0x45d5f9 [ 963.535517] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 19:37:18 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xdd000000) [ 963.537497] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 963.554424] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 963.554439] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 963.554447] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 963.554456] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 963.554465] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 963.554475] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c [ 963.617655] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 963.618118] warn_alloc_show_mem: 1 callbacks suppressed [ 963.618122] Mem-Info: [ 963.649815] active_anon:105355 inactive_anon:12300 isolated_anon:0 [ 963.649815] active_file:2276 inactive_file:45948 isolated_file:0 [ 963.649815] unevictable:0 dirty:148 writeback:0 unstable:0 [ 963.649815] slab_reclaimable:16718 slab_unreclaimable:255204 [ 963.649815] mapped:64940 shmem:12484 pagetables:1132 bounce:0 [ 963.649815] free:1078159 free_pcp:257 free_cma:0 19:37:18 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xc00e0000) 19:37:18 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 963.695366] Node 0 active_anon:421620kB inactive_anon:49200kB active_file:9100kB inactive_file:183792kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:259860kB dirty:592kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 131072kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 963.738972] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 963.808381] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 963.855806] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 963.965194] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 963.977239] Node 0 DMA32 free:524068kB min:35784kB low:44728kB high:53672kB active_anon:417584kB inactive_anon:49200kB active_file:9100kB inactive_file:183812kB unevictable:0kB writepending:612kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7424kB pagetables:4316kB bounce:0kB free_pcp:2108kB local_pcp:1288kB free_cma:0kB [ 964.042563] lowmem_reserve[]: 0 0 2 2 2 [ 964.046683] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 964.074322] lowmem_reserve[]: 0 0 0 0 0 [ 964.079211] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 964.107612] lowmem_reserve[]: 0 0 0 0 0 [ 964.112490] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 964.138612] Node 0 DMA32: 3680*4kB (UME) 1076*8kB (UME) 1593*16kB (UMEH) 1933*32kB (UMEH) 725*64kB (UME) 365*128kB (UMEH) 211*256kB (UMEH) 120*512kB (UMH) 59*1024kB (UMH) 44*2048kB (UM) 13*4096kB (UM) = 523024kB [ 964.168185] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 964.186066] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 964.211146] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 964.223769] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 964.235995] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 964.248582] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 964.257263] 21020 total pagecache pages [ 964.268150] 0 pages in swap cache [ 964.272547] Swap cache stats: add 0, delete 0, find 0/0 [ 964.278010] Free swap = 0kB [ 964.287596] Total swap = 0kB [ 964.292267] 1965979 pages RAM [ 964.295468] 0 pages HighMem/MovableOnly [ 964.306007] 352651 pages reserved [ 964.310452] 0 pages cma reserved [ 964.318674] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 964.339388] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 964.344534] CPU: 1 PID: 1671 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 964.352328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 964.361689] Call Trace: [ 964.364290] dump_stack+0x22c/0x33e [ 964.367948] warn_alloc.cold+0x7b/0x18f [ 964.371943] ? zone_watermark_ok_safe+0x300/0x300 [ 964.376797] ? should_fail+0x142/0x7d8 [ 964.380709] ? ip_set_alloc+0x54/0x70 [ 964.384519] vzalloc+0x15c/0x1a0 [ 964.387894] ip_set_alloc+0x54/0x70 [ 964.391506] hash_netiface_create+0x42d/0xa50 [ 964.395985] ? hash_netiface6_add+0x2940/0x2940 [ 964.400672] ip_set_create+0x70e/0x1380 [ 964.404630] ? __find_set_type_get+0x450/0x450 [ 964.409246] ? __find_set_type_get+0x450/0x450 [ 964.413813] nfnetlink_rcv_msg+0xeff/0x1210 [ 964.418163] ? nfnetlink_net_init+0x170/0x170 [ 964.422680] ? avc_has_extended_perms+0x1020/0x1020 [ 964.427696] ? avc_has_extended_perms+0x1020/0x1020 [ 964.432709] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 964.437192] ? lock_downgrade+0x750/0x750 [ 964.441324] ? __local_bh_enable_ip+0x159/0x2a0 [ 964.445982] ? cred_has_capability+0x162/0x2e0 [ 964.450546] ? cred_has_capability+0x1d9/0x2e0 [ 964.455111] ? selinux_inode_copy_up+0x180/0x180 [ 964.459857] ? selinux_inode_copy_up+0x180/0x180 [ 964.464601] netlink_rcv_skb+0x160/0x440 [ 964.468661] ? nfnetlink_net_init+0x170/0x170 [ 964.473138] ? netlink_ack+0xae0/0xae0 [ 964.477022] ? ns_capable_common+0x117/0x140 [ 964.481434] nfnetlink_rcv+0x1b2/0x41b [ 964.485302] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 964.490042] netlink_unicast+0x4d5/0x690 [ 964.494086] ? netlink_sendskb+0x110/0x110 [ 964.498307] netlink_sendmsg+0x717/0xcc0 [ 964.502362] ? nlmsg_notify+0x1a0/0x1a0 [ 964.506335] ? __sock_recv_ts_and_drops+0x540/0x540 [ 964.511352] ? nlmsg_notify+0x1a0/0x1a0 [ 964.515312] sock_sendmsg+0xc7/0x130 [ 964.519016] ___sys_sendmsg+0x7bb/0x8f0 [ 964.522983] ? copy_msghdr_from_user+0x440/0x440 [ 964.527729] ? find_held_lock+0x2d/0x110 [ 964.531775] ? __fget+0x386/0x570 [ 964.535256] ? lock_downgrade+0x750/0x750 [ 964.539397] ? check_preemption_disabled+0x41/0x2b0 [ 964.544401] ? __fget+0x3ad/0x570 [ 964.547837] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 964.552052] ? lock_acquire+0x170/0x3f0 [ 964.556006] ? __might_fault+0xef/0x1d0 [ 964.559962] ? __fget_light+0x1d1/0x230 [ 964.563923] __x64_sys_sendmsg+0x132/0x220 [ 964.568158] ? __sys_sendmsg+0x1b0/0x1b0 [ 964.572209] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 964.576946] ? trace_hardirqs_off_caller+0x69/0x210 [ 964.581943] ? do_syscall_64+0x21/0x670 [ 964.585902] do_syscall_64+0xf9/0x670 [ 964.589722] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 964.594892] RIP: 0033:0x45d5f9 [ 964.598067] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 964.616949] RSP: 002b:00007fcce42e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 964.624635] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 964.631905] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 964.639156] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 964.646404] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 964.653666] R13: 00007ffe1b999d8f R14: 00007fcce42e39c0 R15: 000000000118cfec [ 964.661248] Mem-Info: [ 964.663695] active_anon:103703 inactive_anon:12300 isolated_anon:0 [ 964.663695] active_file:2276 inactive_file:45960 isolated_file:0 [ 964.663695] unevictable:0 dirty:85 writeback:0 unstable:0 [ 964.663695] slab_reclaimable:16718 slab_unreclaimable:255141 [ 964.663695] mapped:64653 shmem:12484 pagetables:968 bounce:0 [ 964.663695] free:1079763 free_pcp:696 free_cma:0 [ 964.698004] Node 0 active_anon:414812kB inactive_anon:49200kB active_file:9100kB inactive_file:183840kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:258612kB dirty:340kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 133120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 964.726939] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 964.752741] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 964.779287] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 964.784333] Node 0 DMA32 free:524972kB min:35784kB low:44728kB high:53672kB active_anon:414812kB inactive_anon:49200kB active_file:9100kB inactive_file:183840kB unevictable:0kB writepending:344kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7264kB pagetables:3872kB bounce:0kB free_pcp:2760kB local_pcp:1492kB free_cma:0kB [ 964.814420] lowmem_reserve[]: 0 0 2 2 2 [ 964.818474] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 964.844444] lowmem_reserve[]: 0 0 0 0 0 [ 964.848484] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 964.876056] lowmem_reserve[]: 0 0 0 0 0 [ 964.880121] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 964.896155] Node 0 DMA32: 3721*4kB (UME) 1098*8kB (UME) 1542*16kB (UMEH) 1934*32kB (UMEH) 727*64kB (UME) 365*128kB (UMEH) 211*256kB (UMEH) 120*512kB (UMH) 59*1024kB (UMH) 45*2048kB (UM) 13*4096kB (UM) = 524756kB [ 964.915299] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 964.926896] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 964.944315] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 964.953229] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 964.961877] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 964.970810] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 964.979458] 21020 total pagecache pages [ 964.983427] 0 pages in swap cache [ 964.986918] Swap cache stats: add 0, delete 0, find 0/0 [ 964.992331] Free swap = 0kB 19:37:19 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x68000000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:37:19 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:19 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xde000000) 19:37:19 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00002000ffffffff000000000900010068667363000000e6070102"], 0x38}}, 0x0) r4 = socket$isdn(0x22, 0x3, 0x26) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=@newtfilter={0xa38c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0xa35c, 0x2, [@TCA_CGROUP_ACT={0x14c, 0x1, [@m_gact={0x7c, 0xd, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1fb2, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1879, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1861, 0x3}}]}, {0x2b, 0x6, "0c556339ad11cc25b06c7c80006cc266708ac0973b398e7a2b410cbafa643b96a42100995e2735"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0xcc, 0x16, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={[], [], @multicast1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x942}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x3}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0x68, 0x6, "d61bf9d4cc53f5bd14b7f6b8063a96622fbfb67af4a284783ae961f9b5490f845da0f8fcf89eec1376bd7c8885b48d5c348628f6403447fced6d90e3f7381df59661fd5013f1ba47bde6244d87324b3561043401ad31386630732803bb5c9357db21c72b"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0xc7}]}, @TCA_CGROUP_POLICE={0x48c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x0, 0x1, 0x7fffffff, 0x1, {0x1, 0x1, 0x43, 0x7f, 0x2, 0x8}, {0xc0, 0x1, 0x200, 0x8, 0x400, 0x2}, 0x400, 0x8, 0x101}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0x0, 0x5, 0x0, 0x200, {0x1f, 0x1, 0xfff, 0x3, 0x2, 0x6}, {0x6, 0x1, 0x9, 0x8, 0x1000, 0x9}, 0x6, 0x3, 0x200}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x5, 0x40, 0x6, 0x4, 0x9, 0xff, 0x8, 0xffffffe1, 0x6, 0x5, 0x7237, 0x0, 0x7, 0x80000001, 0x9, 0x0, 0x9, 0x3ff, 0x2, 0x81, 0x7, 0x7, 0x6, 0xec, 0x0, 0xff1, 0x3, 0x0, 0x4e, 0x5, 0x9b, 0x0, 0x1, 0x1, 0x0, 0x40, 0x6, 0x0, 0xb604, 0x1000, 0xbd, 0x9ce, 0x20, 0xfffffff7, 0x81a, 0xb21d, 0x20f1293d, 0xeb08, 0x685, 0x401, 0x4, 0xffffffff, 0x7, 0x8000, 0x719, 0x6, 0x1000, 0xffffffff, 0x1, 0x6b, 0x1004000, 0x80000001, 0x6, 0x8, 0x0, 0x17bf, 0x3, 0x6, 0x3, 0x0, 0xfffffff9, 0x40, 0x37, 0xf41, 0xfffffffe, 0x3ff, 0xbc, 0xff, 0x8, 0x6, 0x9, 0x7c, 0x4, 0x0, 0x7, 0x4, 0x3, 0xffff, 0x8, 0x4, 0x514, 0xff, 0x4, 0x0, 0x8, 0x6, 0x9806, 0xca3f, 0x9, 0x4, 0xc92, 0x4, 0x1000, 0x6, 0x20, 0x5, 0x1e, 0x3, 0x5, 0xffffffff, 0x1f, 0x7b3e, 0x4, 0x99e, 0x7fff, 0x200, 0x1, 0x8001, 0x9, 0x8001, 0x6d, 0xd4f, 0x7, 0x8, 0x401, 0x6, 0x8, 0xffffffff, 0xffff, 0x7e60, 0x3274000, 0x9, 0x670, 0x10001, 0xfffff001, 0x8, 0x1, 0x3, 0x0, 0x2f7f, 0x2, 0x7fff, 0xb5, 0x4, 0x8, 0x1, 0x4571, 0x6, 0x101, 0x3, 0x2, 0x100, 0x101, 0x39de73e4, 0x6, 0x0, 0x80000000, 0x1ff, 0xffffffe1, 0x401, 0x4, 0x3, 0x3ff, 0x8c4, 0xe65a, 0x9, 0x661, 0x0, 0x1, 0x6, 0x5, 0x7fff, 0x769, 0x7, 0x0, 0x0, 0x98, 0x2, 0x10001, 0xffffffff, 0x58, 0x1, 0x10001, 0x8, 0x7ff, 0x7, 0x4, 0x5, 0xbf2, 0x0, 0x7, 0x6, 0x3, 0x48b, 0x101, 0xffffffff, 0x6, 0x2, 0x2, 0x8, 0xffffff25, 0x557a, 0x2, 0x6, 0x4, 0x17000000, 0x4, 0x1ee, 0x2, 0x4, 0xa02, 0x7fffffff, 0x4, 0x3, 0x4, 0x80000001, 0x5, 0x0, 0xffffffff, 0x8001, 0x1ff, 0xffff, 0xff, 0x29, 0x7, 0x3, 0x10001, 0xa, 0x80000001, 0x2df, 0x10001, 0x8, 0x2, 0x28e6, 0x2, 0x6, 0x9, 0x4, 0x100, 0x7a, 0x1, 0x5, 0x15, 0xfff, 0xfd, 0x3, 0x7, 0x0, 0x62cd02cf, 0x7, 0x8, 0x101, 0x5, 0x6494, 0xff]}]}, @TCA_CGROUP_ACT={0x2890, 0x1, [@m_mpls={0xcc, 0x0, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x6ff8f}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x951c8}]}, {0x7f, 0x6, "263d68e653050d3e4d3670d2665ba2ff14e4eb5b435fbc9d02afc5d54c37e2a01e630da93d301dcbc3e7155ec86474b40fc74abbf3e08d760f00e11d55f64814f6e7625b565d43d2a959116929200d6a2303eb59ad38e2dfa4a8af2265c6c28ebbba2568865aecb3177b4e0aafda232d0fa6c829501cf3e57d6c72"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x27c0, 0x19, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x26e4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x10000, 0x2, 0xe7b, 0x3ff, 0x4, 0xf88, 0x9, 0x7ff, 0x9, 0x6, 0x1, 0xfffffff8, 0x9, 0x4, 0xba, 0x84b, 0x2b7, 0x2, 0x7fff, 0x2, 0x20, 0xfff, 0x1f, 0x80000000, 0xfffffeff, 0xfffff000, 0x1, 0x9, 0x9, 0x0, 0x5, 0x1ff, 0xbc, 0x7, 0x0, 0x80000000, 0x5, 0x20, 0x7fffffff, 0x8, 0x67, 0x7, 0x7, 0xff, 0x7, 0xffffffff, 0xa16, 0xe881, 0xdcc, 0x40, 0x1e87, 0x6, 0xa127, 0xfff, 0x3f, 0xc3eb, 0x6, 0x7, 0x2, 0x3, 0x6, 0x5, 0x4, 0x6, 0x8, 0x334, 0x7, 0x6, 0x7, 0xffffff10, 0x81, 0x0, 0x6, 0x96, 0x3b06, 0xff, 0x1, 0x1, 0x2, 0x7, 0x1, 0x200, 0x5, 0x7f, 0x9, 0x8, 0x8, 0x7, 0x8, 0x100, 0xfffeffff, 0x2, 0x8, 0x0, 0x7, 0x6, 0x4, 0x7, 0x2, 0x0, 0x7, 0x0, 0xfffffffc, 0x6, 0xfffff801, 0xff, 0x1ff, 0x2, 0x6, 0x3, 0x5, 0x101, 0x8, 0x10001, 0x2, 0x8d8, 0x8cf, 0x10000, 0x8, 0x203e, 0x1, 0x7fff, 0x3, 0x6, 0x374, 0x5652ae, 0x3, 0x67, 0x1ff, 0x2, 0x8, 0x20, 0x8, 0x8, 0xfffffffe, 0x3, 0x101, 0x9, 0xfffffff7, 0xf4d, 0x4, 0x3, 0xcb10, 0x63, 0x1ff, 0x3, 0x6, 0x2, 0x7, 0x8, 0x4, 0x200, 0x0, 0x4, 0x2, 0x8, 0x40, 0xffffffff, 0x8000, 0x4, 0x1, 0x4, 0x101, 0x3, 0x80000001, 0x3ff, 0x800, 0x2, 0x7, 0xfffffffb, 0x3, 0x72c, 0x2, 0x7f, 0x1, 0x2, 0x8, 0x1, 0x3f, 0x8, 0xd16, 0x7ff, 0x7fff, 0x4000, 0x8, 0xfff, 0x7, 0x3, 0x3ff, 0x9, 0x0, 0x2, 0x1f, 0x8, 0x3ff, 0x43e, 0x3, 0x1ff, 0xec19, 0x9, 0x9, 0x80000001, 0x6, 0x3, 0xffff5016, 0x80000001, 0x6, 0x0, 0x2, 0x7ff, 0x9, 0x0, 0x7, 0x1000200, 0x9, 0x0, 0x20, 0x8, 0x9, 0x7, 0x10000, 0x1c5, 0x400, 0x1ff, 0x665, 0x5, 0x7, 0x1, 0x8f, 0x732f32a0, 0x4, 0x987, 0x47db15b4, 0x7fffffff, 0xffffffff, 0x8, 0x2, 0x0, 0x401, 0x3f, 0x4, 0x80000001, 0x3f, 0x9, 0x7, 0x0, 0x0, 0x47badb32, 0x8, 0x2d5, 0x8001, 0x3, 0x58, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xffffffffdffffff8, 0xf8, 0x800400, 0xfd, {0x4, 0x2, 0x779, 0x6, 0x8001, 0xba}, {0x80, 0x1, 0x3, 0x0, 0x8, 0x200}, 0x101, 0xf878, 0xc9ad}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb555, 0x20000000, 0x0, 0xffffff00, 0xd0, {0x6, 0x2, 0x3ff, 0x400, 0x20, 0x8}, {0x9, 0x2, 0x8, 0x6, 0x401, 0x400}, 0x4, 0x40, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x3f, 0xffff, 0x9, 0xae, 0x401, 0x9, 0x401, 0x0, 0x0, 0x2, 0x6, 0x6, 0x7, 0x9, 0x83f2, 0x7f, 0x7ff, 0x80, 0x7ff, 0x1, 0x895e, 0x3, 0xfffffff8, 0xffff0b58, 0x1, 0x4, 0x3, 0x9, 0x2, 0x3dd00, 0x80000000, 0x14000000, 0x4, 0x5, 0x8, 0x6, 0x4, 0xffffff05, 0x9, 0x80, 0x10000, 0x5, 0x800, 0x4ceb71dc, 0x7, 0x4, 0x1010000, 0x7, 0x0, 0xfffffffc, 0x78, 0x2, 0x800, 0x7f, 0x9954, 0x6, 0x0, 0xb02, 0x4, 0x2, 0x1, 0x9, 0x9a36, 0x25, 0x0, 0x7, 0x1, 0x8, 0x8001, 0x10001, 0x4, 0xbe, 0x4, 0x4, 0x7ff, 0xd5da, 0x3, 0x8650, 0x0, 0x8d, 0x5c1, 0x0, 0x4, 0x782, 0x1, 0xfffffff7, 0x20302578, 0x7ff, 0x5, 0x88, 0x7ff, 0x0, 0xfff, 0x4, 0x7ff, 0xa5a, 0x2, 0xffff7fff, 0x7ff, 0x8, 0x8, 0xffff, 0x9, 0x7, 0x9, 0xbe69, 0x4, 0x7fffffff, 0x6, 0x7, 0x10000, 0x125f, 0x200, 0x665b, 0x3000000, 0x7, 0xffe0, 0x36, 0x2, 0x3, 0x5b8e1f03, 0x9, 0x7ff, 0x1, 0x0, 0x5, 0xafb, 0x1, 0x0, 0x9, 0x3, 0xffff7fff, 0x92f7, 0xdb, 0x4886, 0x2, 0x5, 0xffff, 0x1f, 0x0, 0xae, 0x9, 0xff, 0x7, 0x0, 0x401, 0x0, 0x9, 0x7, 0xc66, 0x1bcf, 0x3, 0x400, 0x8000, 0x241, 0x7, 0xffffffff, 0x800, 0xfe000000, 0x1ff, 0x40, 0x7, 0xfffff001, 0xffff, 0x200, 0x2, 0x6, 0x6, 0x4, 0x0, 0xbc, 0x2, 0x0, 0x8, 0x6, 0xd19d, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffd, 0x4, 0x74, 0x5, 0xfffffff9, 0x10001, 0x1ed, 0x2, 0x7fff, 0x80, 0x7, 0x8, 0x6, 0x3, 0x7f, 0x6, 0x4, 0x6, 0x3, 0x81, 0x4, 0x80000000, 0x1ff, 0x1ff, 0x2, 0xcc, 0x23f, 0x98, 0xa31b, 0x4, 0x3, 0x4, 0x8, 0xe286, 0x8, 0xfffffffa, 0xb60, 0xf0c, 0x1, 0x9, 0xfffffe00, 0x1, 0x9, 0x9, 0x8000, 0x2, 0x0, 0x5f32, 0x5, 0xb8, 0x401, 0x1, 0x6, 0xfffff68a, 0x9f, 0x7, 0x3, 0x5900, 0x4, 0xfffff800, 0x1, 0x9, 0x8, 0x367, 0x7fff, 0x7f4c, 0x0, 0x2, 0x800]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x7, 0x10000, 0x5, 0x3, 0x100, 0x1, 0x2, 0x0, 0x1, 0x1ff, 0x8, 0x7, 0x1, 0x200, 0xfff, 0x788f, 0x6, 0x7, 0xaf81, 0x6, 0x10001, 0x7fffffff, 0x5, 0xfffffff9, 0x9, 0x2c6, 0x8, 0xffffffff, 0x3, 0x1, 0xcc8, 0x0, 0x0, 0x2, 0x2, 0x7, 0x1, 0xbfd, 0x4, 0x1, 0x9, 0x3f135bf2, 0x0, 0xffffffff, 0x4, 0xffff4f66, 0x0, 0x4, 0x1f, 0x137, 0x3, 0x0, 0x1, 0xfffffff8, 0x400, 0x9, 0xffff0000, 0x1ff, 0x6, 0x800, 0x10000, 0x0, 0x5, 0x10000, 0xacb7, 0xfff, 0x20, 0xbc, 0xffffffff, 0xffff, 0x2, 0x87, 0x20, 0xffff, 0xffffffff, 0xfa, 0x54d6e481, 0x3, 0x101, 0x4, 0x80000000, 0x9, 0xffff, 0x4, 0x3, 0x10000, 0x1, 0x10001, 0x9489, 0x16b, 0x66c, 0x7ff, 0x43, 0x6ca79537, 0x93, 0xb7, 0x7fff, 0x7fffffff, 0x80, 0x0, 0x3, 0x2, 0x6, 0x7fff, 0x9, 0x2, 0xeb, 0x3f, 0x2, 0x80, 0x7fff, 0x7f, 0x80000001, 0x7, 0x8, 0x7, 0x36000000, 0x100, 0x8, 0x5, 0x6, 0x7ff, 0x5, 0xb9f6cc8, 0x1ff, 0x727, 0x7, 0x5, 0x7, 0x6, 0x401, 0x5, 0x5, 0xff, 0x0, 0x1, 0xf70, 0x800000, 0x1, 0x1, 0x3, 0xa7cf, 0x0, 0x7, 0x0, 0xb0b, 0x10000, 0x6df8, 0x800, 0x5, 0x6, 0x9f, 0x5, 0x10001, 0x2, 0x0, 0x827e, 0x6, 0xffff, 0x12d, 0xa46, 0x7, 0x3, 0x613, 0x8000, 0x1, 0x160, 0x0, 0x3, 0x6, 0x8, 0x0, 0x3, 0x4, 0xd99d, 0x3f, 0x4, 0x5, 0x80, 0x5, 0x6, 0x7, 0x1, 0x2, 0x9, 0x40, 0xa7f, 0x80000001, 0x200, 0x7fff, 0x6, 0x1ff, 0x9, 0x5, 0x3, 0x1, 0x1, 0xffffffe1, 0x6, 0x2f, 0x1b, 0x7fff, 0x3, 0x8, 0x0, 0x35, 0x1, 0x8, 0x2, 0x6, 0x0, 0x1, 0x308, 0x20, 0x6101, 0x7, 0x0, 0x3ff, 0x7, 0x100, 0x8000, 0x4, 0x400, 0x7ff, 0x6, 0x6, 0x4, 0x3, 0x8, 0x101, 0x3, 0x0, 0xc70, 0x81, 0x3, 0x1, 0x5, 0x40, 0x3, 0x0, 0x200, 0x101, 0x76b, 0x3, 0x6f3f, 0x6f1, 0x0, 0x4, 0xffff, 0xac, 0x6, 0x3, 0x6ea, 0x5, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa6c0}], [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6a2e, 0x4, 0xef69, 0x8, 0x1, 0x5, 0x2, 0x7, 0x0, 0x5, 0xe19ddea, 0x0, 0x1, 0x4, 0x8, 0xc, 0x2, 0x4ffd, 0x0, 0x1, 0x1f, 0x7fff, 0xfffffff8, 0x5000000, 0x3, 0xa2000000, 0xf86e, 0x5e, 0x2, 0x9, 0xffffff00, 0x7, 0x1d35b509, 0x8, 0x7fff, 0x7, 0x5, 0x3, 0x8, 0x3, 0x9, 0x2, 0x4b9, 0x9, 0x8, 0x7fff, 0x8, 0x8, 0x9, 0x94, 0x2, 0x40, 0x3, 0x1f, 0xa3a, 0x2000, 0x1f, 0x61e, 0x35d, 0x3, 0x2, 0x1600, 0x2, 0x9, 0xc58, 0x4, 0x80, 0x1, 0x5, 0x0, 0x5, 0x5, 0x7ff, 0x0, 0x10000, 0x1, 0x9, 0x3f, 0x39ab, 0x7, 0x0, 0x6, 0x2, 0xffff, 0x1000, 0x7fff, 0x3, 0x0, 0x8, 0x10000, 0xf0, 0x7f, 0xe3c, 0xfffffffa, 0x6, 0xc6, 0x1ff, 0xff, 0x7, 0x20, 0x200, 0x7, 0xffff8000, 0xfffffff9, 0xa5e, 0x7fff, 0x400, 0x5, 0x1f, 0x1, 0x2, 0x6, 0x0, 0x2, 0x0, 0xef1, 0x80000001, 0x41, 0xffff0000, 0x1, 0x4, 0x8, 0x0, 0x0, 0x2, 0x1ff, 0x400, 0x1, 0xfffffff8, 0x3, 0x2, 0xfffffff8, 0x10001, 0x8000, 0xaaee, 0x3ff, 0x5, 0x4, 0x10001, 0x800, 0xa840, 0x8, 0x0, 0x8000, 0x6, 0x3, 0x8, 0x6593, 0x81, 0x800, 0x4, 0x3ff, 0x7fffffff, 0x4, 0x5032, 0x80, 0x2, 0x1, 0x8000, 0x3, 0xf89, 0x7, 0x5, 0x40, 0x3ff, 0x6, 0xffffffff, 0xff, 0x7, 0x4, 0x1000, 0x20, 0x1, 0x4, 0x2, 0x1, 0x101, 0x800, 0xfffffff9, 0x9, 0x1, 0x3, 0x40, 0xfffffffa, 0x2, 0xffff8446, 0xcd, 0x1, 0x80, 0xffff8000, 0x4af, 0x9, 0x3, 0x1, 0xcf, 0x7ff, 0x3, 0xff, 0x8, 0x9, 0x0, 0x3f, 0x28, 0x10000, 0x1f, 0x40, 0x3, 0x4, 0x5, 0x800, 0x81, 0x8, 0x4, 0x1000, 0x6, 0x6, 0x5, 0x1ff, 0x200, 0x5, 0x401, 0x3, 0x6, 0x826b, 0x8668, 0x3, 0x7b, 0xc2c5, 0x7a, 0x1f, 0x4, 0x5, 0x3, 0x8, 0xffffffff, 0x7ff, 0xfff, 0x0, 0x4, 0xfffffffc, 0x10001, 0x28, 0x101, 0x2, 0x9, 0x81, 0x581b0cc3, 0x80000000, 0x3, 0x200, 0xfffeffff, 0x3, 0x1, 0x5, 0xd680]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x0, 0x66a8d5bd, 0x6, 0x8, {0xa7, 0x1, 0x1, 0x8, 0x5, 0xfff}, {0x1, 0x0, 0x9280, 0xff, 0x5, 0xff}, 0xffffffff, 0x6, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x6, 0x9, 0x0, 0x2, 0x7, 0x6, 0x0, 0x7ff, 0xffffffff, 0x0, 0x1, 0xee, 0x0, 0x5, 0x5, 0xe0b, 0x9b, 0x6, 0xd34, 0x4, 0x0, 0x6, 0x2, 0x81, 0x7, 0x20, 0x401, 0x7ff, 0x81, 0x4, 0x2, 0x5, 0x9, 0x4, 0x5, 0x2, 0x3, 0x898, 0xef5f, 0x0, 0x3, 0xb892, 0x9, 0x2, 0x800, 0xffffffff, 0x784, 0x8000, 0x1, 0x10000, 0x8, 0x401, 0x8000, 0x7f, 0x7f, 0xed3e, 0x1ee, 0x80000001, 0xffffffc0, 0x5, 0x0, 0x0, 0x7ff, 0x3, 0x5, 0x14b, 0x81, 0x9, 0x80000001, 0x4, 0x9, 0x9, 0x1, 0xffff, 0x7, 0xffff, 0x8, 0x7, 0x4, 0x40, 0x3, 0x1, 0x4, 0x80000001, 0x800, 0x9, 0x2, 0x8001, 0xa1f, 0x7fff, 0x7ff, 0x7, 0xff, 0x2, 0x4, 0x2, 0x76, 0x1ff, 0x0, 0x0, 0x2, 0x1, 0x1, 0xed07, 0xffffff80, 0xf6, 0x3, 0x5, 0x6, 0x8000, 0xffffff12, 0xf75, 0x9, 0x5, 0x3, 0x80000001, 0x6, 0x81, 0x34, 0x81, 0x0, 0xfffffff8, 0x1000, 0x1, 0x4, 0x5, 0x1, 0x9, 0x1, 0x6, 0x80000001, 0x9b, 0x10001, 0x8001, 0x3f, 0x80, 0x200, 0x7fffffff, 0x9, 0x3f, 0x7ff, 0x6, 0x10000, 0xc3a2, 0x3, 0xffffa044, 0x0, 0x9, 0x2, 0x9, 0x1, 0x5, 0x20, 0x6, 0x3, 0xdc66, 0x4a, 0x0, 0x7f, 0x3f, 0x26, 0x3, 0x1f, 0x3, 0x5f2, 0x7, 0x37eb, 0x5, 0xbf57, 0x4, 0x10000, 0x1, 0x190, 0x0, 0x8, 0x4, 0x1, 0x1f, 0x1000, 0x7fffffff, 0x84a6, 0x9, 0x200, 0x0, 0xc0000000, 0xfff, 0xfff, 0x7, 0x0, 0x2e1dad7c, 0x5e, 0x6, 0x70ae, 0x10000, 0x7, 0x6, 0x2, 0xffff, 0x7ff, 0xfffff6c2, 0x5, 0x200, 0x8000, 0x1, 0x1, 0x10001, 0x1, 0x1000, 0x7, 0x1ff, 0x3000, 0x1000, 0x0, 0x81, 0x2e3d, 0xfffffffe, 0x100, 0x101, 0x15, 0x4, 0xf2c, 0x0, 0x80, 0x7ff, 0x3, 0x4, 0x2e, 0x6, 0x3, 0x3, 0x7, 0x3, 0x4, 0x4e07c9fa, 0x1, 0xc21, 0x8, 0xfffffffc, 0x18a3f69e, 0x3, 0x6, 0x7, 0x2, 0xfffffff7, 0x1c2b, 0x36f1d443, 0x4, 0x0, 0x4, 0x7, 0x37000000, 0x2, 0x7, 0x7fffffff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x3, 0x0, 0x7ff, 0x0, {0x1f, 0x2, 0x80, 0x7, 0x4, 0x2}, {0x8, 0x0, 0x7f, 0x1000, 0x1, 0x8}, 0x1, 0x5, 0x4}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1f, 0x10000000, 0x31b3f5a0, 0x7, 0x1, {0x0, 0x0, 0x19c4, 0x81, 0x6, 0xef62}, {0x2, 0x1, 0x4, 0xbaf, 0x6, 0x5bc}, 0x9c, 0x2, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000000}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10000}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe67e, 0x8, 0x9, 0xb2, 0xb96b, 0x4, 0x5, 0x5, 0x4, 0x1be, 0x9, 0x37d4, 0x9, 0x7, 0x6, 0x2, 0x401, 0x3, 0x0, 0x0, 0x5, 0xb38, 0x7, 0x7fff, 0x6, 0x3ae, 0xff, 0x1, 0x5, 0x7fff, 0x6, 0x5, 0x6, 0x8c, 0x5, 0x3, 0x3ff, 0x1, 0x100, 0x200, 0x8, 0xb5, 0x9, 0x3, 0x100, 0x9, 0x4, 0x8, 0x1, 0x5, 0x4, 0x3, 0x2, 0x4, 0x4a, 0x6, 0x8, 0x1ff, 0xb77, 0x0, 0x8cc, 0x8, 0x4, 0x249, 0x731e, 0x4, 0xff, 0x1f, 0x9, 0xfff, 0x1, 0x8, 0x3, 0x6, 0x0, 0x200, 0x9161, 0x2, 0x4, 0x6, 0x2, 0x9, 0x4, 0x2, 0x883b704, 0x80000001, 0x0, 0x7, 0x81, 0xfff, 0x3, 0x942, 0x0, 0x2, 0xca2, 0x99, 0x6, 0x81, 0x7f, 0x3, 0x1, 0x6, 0x800, 0x2, 0x10001, 0x77, 0x800, 0xffff, 0x3, 0x8, 0x5, 0x7fff, 0x0, 0x6, 0x23f, 0x1000, 0x6, 0x7, 0x1d, 0x8001000, 0x2, 0x4, 0x26ff, 0x5, 0x8, 0x6, 0x8, 0xffffff80, 0x2, 0x2, 0x101, 0x1, 0x1, 0x4, 0x7, 0xe7, 0x9, 0x1f, 0x8, 0x22, 0x4, 0x1, 0x8, 0x7f, 0x3f, 0x3, 0x5, 0x8f4, 0xc3, 0x0, 0x0, 0x8, 0x9, 0xfffffc00, 0x9, 0x7, 0x6, 0x10001, 0x6, 0x7, 0x6, 0x3f, 0x9, 0x20, 0x14df1d, 0xaef7, 0x8000, 0x8, 0x5, 0x8, 0x3, 0x6, 0x3ff, 0xba, 0x80000001, 0x800, 0x7fff, 0x6, 0x8000, 0x1ff, 0x9, 0x3f, 0x4, 0x7fffffff, 0xb44, 0x3, 0xa5, 0x0, 0x8, 0x8, 0x7, 0xfffffffc, 0x3, 0x2, 0x40000000, 0x8000, 0xffffff80, 0x3, 0x100, 0x33, 0x6, 0x4, 0xc7d, 0x3, 0x80000001, 0x101, 0x0, 0x1, 0xffffffff, 0xfffffff9, 0x1, 0x8, 0xfffffeff, 0x20000000, 0x4, 0x1, 0x7bb, 0x0, 0x3, 0x7, 0x80000000, 0x1000, 0x4, 0x3961, 0x3e7, 0x5, 0x72f1, 0x6, 0x8f88, 0x0, 0xfffffffd, 0xe2a, 0x400, 0x7, 0x400, 0xa42, 0x0, 0x2, 0x1, 0x7fffffff, 0x7, 0x3, 0x1, 0x7, 0x5, 0x1, 0x93, 0x771, 0x7, 0x2, 0x2, 0x3, 0xfffffffa, 0xffff, 0x4, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x10000000, 0xffff, 0xf2, 0x2, {0x0, 0x2, 0x7ff, 0xf8d, 0x55a, 0x2b}, {0x97, 0x1, 0x100, 0x2, 0x800}, 0x5, 0xfcb, 0x2}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x7fff, 0x7fff, 0x9, 0x0, 0x3, 0xffff0000, 0xffffffff, 0x6, 0xfffffffa, 0x10000, 0x2, 0x7, 0xd5, 0xffffffff, 0x80000001, 0x2, 0x8, 0x101, 0x0, 0xfffffff8, 0x6, 0xfffffff7, 0x2, 0x4, 0x1, 0x6, 0x5, 0x2, 0x3, 0xa5, 0x7, 0x8, 0x80, 0x82, 0x7, 0x8, 0x0, 0xb2a4, 0x80010, 0x2, 0x54996757, 0x3, 0xfff, 0x1f, 0x5, 0x7, 0x374, 0x80, 0x1, 0x0, 0x14, 0x80, 0xa3df, 0x8, 0x1000, 0x8, 0x2, 0x1ff, 0x7, 0x40, 0x0, 0x5, 0x7, 0x6, 0xffffffa8, 0x8, 0x8, 0x7, 0x80, 0x7, 0x8, 0x7bf, 0x1000, 0x7, 0x73, 0x61, 0x4, 0x7, 0x6, 0x625f, 0x200, 0x0, 0x9, 0x658000, 0xfffffffa, 0x0, 0x0, 0x9, 0x4, 0x1f, 0x2, 0xb822, 0x5, 0x1000, 0x4, 0x400, 0xba, 0x1, 0x81, 0x1000000, 0x4, 0xa769, 0x0, 0x1, 0xffffffff, 0xfffffff7, 0x7, 0x400, 0xba2, 0x7, 0x7, 0xffffff80, 0xe30, 0x5e6f, 0xa, 0x5, 0x2, 0x7, 0x4, 0x5, 0x8, 0x4, 0x9271, 0xfffffffb, 0x2, 0x5, 0x2, 0x7ff, 0x8001, 0xffffff01, 0x401, 0x1, 0x7, 0x20, 0xffffffff, 0x61b, 0x7ff, 0x7, 0x51, 0x2, 0x3, 0x8000, 0xbec, 0x8, 0x0, 0x0, 0x81, 0x5, 0x5, 0xfffffffd, 0x0, 0x6, 0x6, 0x0, 0xffffffff, 0xffffffff, 0x1000, 0x6, 0x5, 0x8001, 0x3b1, 0x1, 0x7ff, 0x8, 0x81, 0x7, 0x5, 0x7ff, 0x869d, 0x0, 0x4, 0xfff, 0x7, 0xff, 0x7, 0x0, 0x1ff, 0x1, 0x7fff, 0x4b76, 0x2, 0x4, 0x1, 0x7, 0x2, 0x101, 0x974, 0x8, 0x9f3, 0x8, 0x0, 0x65b, 0x7141, 0x9, 0x0, 0x5, 0x84b, 0x8, 0x66ea7477, 0x8, 0x7, 0x1383, 0x3, 0x9, 0x3, 0x6, 0x80, 0x2, 0x0, 0x3000, 0x9, 0xfffffffb, 0x10001, 0x7ff, 0x40, 0x51fc, 0x1, 0x7, 0x5, 0x4, 0x3, 0xfffffff8, 0x2, 0x2, 0x7ff80, 0x4, 0xfffffe00, 0x3, 0x800, 0x9, 0x7fff, 0x4, 0x29a7, 0x8, 0x8, 0xb0, 0x0, 0x2ab00000, 0x1, 0xff, 0x5, 0x7fffffff, 0x5, 0x5e, 0x2, 0x9, 0x24f, 0x2, 0xab0, 0x6, 0x2f7, 0xf523, 0x7, 0x1, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0xf7, 0x7fffffff, 0x5, 0x5, 0x7ff, 0x6, 0x7, 0x4, 0x9a80, 0xc8, 0x1ff, 0xda4f, 0x1, 0x81, 0x6, 0x1000, 0xfffffffb, 0x5, 0x5, 0x9, 0x12, 0xfffffffc, 0x6, 0x0, 0x2, 0xd8, 0x1, 0x1000, 0x8, 0x6, 0x9, 0x1, 0x37, 0x8, 0x7, 0x5437, 0x4, 0x9, 0x7, 0x3, 0xf5b, 0x450000, 0x6, 0x4, 0xe3, 0xff, 0x7, 0x4, 0x8000, 0x8, 0x9, 0x87, 0x0, 0x3, 0x68, 0x0, 0xf6, 0x80, 0x90, 0x5, 0x7fffffff, 0x20, 0x6, 0x4, 0x3, 0x5, 0xff, 0x8, 0x8, 0x200, 0x78, 0x0, 0x7ff, 0x1, 0x2, 0x9, 0x8001, 0x9, 0x81, 0x0, 0xff, 0xc30b, 0x3, 0x8, 0x5, 0xd3, 0x1, 0x12, 0x7, 0xffff8001, 0x8, 0x4, 0x5, 0x6, 0x9, 0xffffff80, 0x1000, 0x4bbf, 0x7fff, 0x9, 0x2, 0x200, 0x3, 0x9, 0x93, 0x982c, 0x8, 0xff, 0x80, 0x0, 0x46, 0xfffffffe, 0x340, 0x101, 0x3f, 0x7, 0x8, 0xedc, 0x100, 0x7, 0x1a, 0xfff, 0x200, 0x0, 0x10000, 0x9, 0x7, 0x9, 0x7, 0x7, 0xb69, 0x1f, 0x0, 0x9, 0x7f, 0xa7, 0x7, 0x2, 0x1, 0x4, 0x7, 0x2, 0x6, 0x2, 0x1000, 0x88, 0x1, 0x3, 0xcbb, 0x8, 0x6, 0x1, 0x10001, 0xe259, 0xffff, 0x6, 0x4, 0xb0, 0x5, 0x7fffffff, 0x4, 0x0, 0x9a, 0x2, 0x8, 0x1, 0x5, 0x0, 0x7, 0x3cbbc, 0x754b945f, 0xffffffff, 0x7fffffff, 0x4a, 0x0, 0x101, 0x1, 0x7, 0xde43, 0x8, 0x2c, 0x4, 0x7ff, 0x6, 0x9, 0x9b, 0x7ff, 0x1, 0xffffffe1, 0x4, 0x1, 0x7, 0xd2e, 0x4, 0x6, 0x101, 0x0, 0x8d4c, 0x9ed, 0x8, 0x5, 0x5, 0x5, 0x6, 0x401, 0x8, 0x3, 0x20, 0x800, 0x0, 0xfffff000, 0x20, 0x3ff, 0x7, 0x1, 0x0, 0x1, 0x3ff, 0x8, 0x8, 0xffff, 0x5, 0x4f2, 0x9, 0x1ff, 0x80000001, 0x40, 0x1, 0x3ff, 0x7, 0x6c, 0x2, 0x5, 0x20, 0x8, 0xfffffffd, 0x1, 0x10001, 0x3, 0x5, 0x8, 0xc817, 0x200, 0x6, 0x7, 0x3755, 0x3, 0x3, 0x3, 0x6, 0x7, 0x1a, 0x0, 0x8000, 0x0, 0x7fff]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffbff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0x10000000, 0x7f, 0x4, 0x501b, {0x1, 0x1, 0x47c, 0x3faf, 0xb5d, 0x7ff}, {0x0, 0x0, 0x8, 0x400, 0x7, 0x1}, 0x2040000, 0x2, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x422}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffe}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x100, 0x5, 0x2, 0x0, 0x5, {0x6, 0x1, 0xfffe, 0x7fff, 0xae, 0xf05}, {0x9, 0x3, 0x1, 0x3, 0x9, 0x8}, 0xc3, 0x8, 0x4}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x99e2}, @TCA_POLICE_RATE={0x404, 0x2, [0x7fff, 0x9, 0x6, 0x81, 0x4, 0x7fffffff, 0x9, 0x56, 0x1, 0x5, 0xffffff80, 0x3410d822, 0x5, 0x8, 0xfff00000, 0x1ff, 0x4, 0x80000001, 0xfffffff8, 0x7fff, 0x7, 0x8, 0x7, 0x9, 0x2f31, 0xff, 0x8, 0x3ff, 0x1, 0x4, 0x30c534b4, 0x5, 0x3, 0x1000, 0x5, 0x1, 0x5, 0x9, 0x1, 0x6, 0x1, 0x5, 0x0, 0xcc6, 0x7, 0x40, 0x10001, 0x1, 0x100, 0x200, 0x400, 0x3, 0x40, 0x9, 0x10000, 0x1, 0x2, 0x6, 0xb0b7, 0x912, 0x200, 0x6d, 0xffffffff, 0x8, 0x1f, 0xff, 0x401, 0x0, 0x0, 0x4, 0x7, 0x0, 0x8, 0x6b4, 0x4, 0x3f, 0x800, 0x5, 0xfffffffb, 0x7, 0x9, 0x7dd9, 0x80000000, 0x8, 0xfffffffb, 0x10001, 0xfffffffe, 0x1, 0xd62, 0x0, 0x9, 0x6, 0xfffffff9, 0x7fff, 0xfffffffb, 0x8247, 0x100, 0x4, 0x5, 0x40, 0x7, 0x8, 0x80000000, 0x1000, 0xfffffff9, 0xd4, 0x6, 0xc8, 0x7fffffff, 0x1, 0x0, 0x4, 0xffffff80, 0x5, 0x7, 0x2, 0xffff, 0x8, 0x5, 0xfffeffff, 0x8, 0x400, 0xa8, 0x4, 0xffffffff, 0x4, 0x1f, 0x6, 0x6, 0x80000001, 0x337, 0x2, 0xfffffffc, 0x4, 0x6, 0x2, 0x8, 0x6, 0x9, 0x6, 0x3ff, 0x1, 0x80000001, 0x5, 0x7, 0x6, 0x400, 0x5, 0x2, 0x9, 0x6, 0x7, 0x4d90, 0x5, 0x7, 0x9, 0x0, 0x7, 0x1ff, 0x2, 0x1, 0x0, 0x8a7, 0x0, 0x6, 0x4, 0x8001, 0x2, 0x3, 0xffff7fff, 0x4, 0x7, 0x30a, 0x7fffffff, 0x2, 0x1ff, 0x40, 0xfff, 0xb1b, 0x401, 0x9, 0x1, 0x4d8, 0x200, 0x27dd0d55, 0x5, 0xe000000, 0x161, 0x4, 0x5, 0xfffffff7, 0x1f, 0xfff, 0x9, 0x5, 0x6, 0x2, 0x5, 0x9f40, 0x3, 0x7fff, 0x7fff, 0xd4, 0x3f, 0x0, 0x1, 0x0, 0xffffffff, 0x8, 0x6, 0x40, 0x8, 0x4, 0x9, 0x7, 0x5, 0x179c, 0x3, 0x9, 0x3, 0xffff, 0x5, 0x101, 0x9, 0x6, 0x8, 0xb6, 0x1, 0x2, 0x40880, 0x9, 0x9, 0x3, 0x4, 0x3, 0x7ff, 0x5, 0x8, 0x9, 0x8, 0x9, 0x2, 0x6, 0x9, 0x1b, 0x80, 0x5311b365, 0x1, 0x4, 0x100, 0x3, 0xc0000000, 0x9, 0x7, 0x1785cb21, 0xa2]}]]}, {0xb2, 0x6, "1ff15ef5ae8f43f3bd302ee71fbe8c30fdb1f7f283ab83e297538f6e89210f36a552ead52cb84441934eaf14b2fd16dce215c12168d1fd59b08230c8d644bc08356215d0f76898ba0f229367ffa6566af5b42ec6d75eedda4dafcde38b195f10422ef6845ff03c45bbd20b50a767c2e380a4f7dd890879b2abe7aafd7d90ebc054354fc5a00bfb169b5f9edecafd3e606198b8fcedb2f684eb11360d0b2cce3d4010db84b99372667761f54431fa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x4e8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x71}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_META={0x14, 0x1, 0x0, 0x0, {{0x4, 0x4, 0x1}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0xa]}]}}]}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x1, 0x8, 0x2}, {0xffffffffffffffff, 0x3, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0x498, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7fff, 0x8, 0x401}, {0x1, 0x2, 0x1}}}, @TCF_EM_IPT={0x32c, 0x2, 0x0, 0x0, {{0x5, 0x9, 0xbab}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0xf8, 0x5, "e1f6834ca56e353c897ee4559611d7a1c4f0a4bff68d7cdf1c240c63cc3505b7cef5279cbde303ccc558f272b3dfe2cc90fd770fc28bc1ed88403621ed422dba55891ff82924af929e712aeb9ac2ab62422b94eb10738fe8b2da077a966c610511e85875bd82ec048f43af6ec2fb8632870801c2661a0ae7ad2ec1bf872d1ec598943b3f3bfae25279417bb83d3c9fff82a4e03c1b719791746236dd5a6314a4d72b5227b9bdfe9212986ff20cbc235656b98d5221fccb371c92061e07f92e4182a9898ba8d67a92441b045fd03f01fee37051e223f0364de96cae4085177a7932ab1b9142ad069f03df5851379939ee1bc2896d"}, @TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}, @TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}, @TCA_EM_IPT_MATCH_DATA={0x62, 0x5, "a165de6ecbfd3a44a4f4f1fafd5ba92f334f6bb3cc753f388ae5d777acc006401e956b47dd5b856efc8532f26ac47a13adf3f00ef8949632828e649c5f0263ee70b7cff2e86ab860aadf1cd3d8f60b4b160d3e636c54d3050ebb85f52d3d"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}, @TCA_EM_IPT_MATCH_DATA={0xc9, 0x5, "58d068f0fa571fe052c6c3f8eef73c07baf83a70b34f45879712827e4e3cfad65354c81151620afe3996f4c8b2668137c7660fed89c1f21ea652ce3fd7eec9324507e1e9386c8dbbd7e1dac5c9525654daeacfbe573464c5ffde548860440d42b2874f18d98f6877d4a7d5b35f7a6062d89c34a9a8b50011ddf83a1d810a446e99d690f6cbc52fecae68e4b18966249e73198ab8c481ace49649b8b7243a0663f22ffc699caaf41b5ad79841e20dafead82fdf21debef1f43639def0e0134307a18a2de198"}, @TCA_EM_IPT_MATCH_DATA={0xba, 0x5, "fae74dbe59e802d1bd7c381c0a49ac6ab6751ad4fdca5b43b0ba4b49c8e250aa6916e65d4ae6d1fcadeb93a3abaa1e86fb9f535362376130d06c10eb82453aeb24caf07002c2cfe02b7cbb45a82089e7b13b1cb19290d9f0649463e1e4f8c2fd1d41f99e3c02e83fd884e14abdd941108b35136c921f20dbcc6f76c5826156c1913b5e20503a47ca480443543bea98a061f3e817eee8162a0bb93a87dd077b9692c4ff4390e692c46a897021ddd90b852f17731e388d"}]}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x40, 0x2, 0x8000}, {0x2, 0x8, 0x2, "3f13f1009ba888f6"}}}, @TCF_EM_META={0x40, 0x1, 0x0, 0x0, {{0xf3, 0x4, 0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8001, 0x3f, 0x2}, {0x3, 0x3a}}}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR="15d159748a770025fe15"]}, @TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT]}]}}, @TCF_EM_IPT={0xe8, 0x3, 0x0, 0x0, {{0x40, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_DATA={0xbd, 0x5, "46569c13675cdf08ab5f26c954a62632a9e9eb2c630efbd240ce35ad247821a338c49f2323a701ad918f5930efd2e72386dd5afec21ef08afae5cebfd696e5aea315cd936f5b73cdd3379698abe69e9c184db059c4ee65788cc335a3d7a6a2090f621f8152d42c597a503d010b819218bafd66f30512cf552309cc0467eb71235bebafc24acd855dbd7697b9bf5f7dc99d69d7cff63bee0fac0c20ce889b355a21c30b45ef8e22d4f7a06e79bfebf9143125f4d0403d31c03b"}, @TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xd}]}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x4, 0x2, 0xffff}, {0xffffff11, 0x2, 0x2, "31e9"}}}]}]}, @TCA_CGROUP_ACT={0x28c, 0x1, [@m_bpf={0x170, 0x16, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x567f, 0x0, 0xda48, 0x1ff}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x1000, 0x4, 0x3, 0xff}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xe9, 0x6, "5cd19f24d80b8dd4eab5f24d8a42b704101fe1a088da5686b18169b0c15e0c155a07916e43a9bfa257152108e79e47c16507c140d8d949323b839b9e4b137537fa19d3ca6204f4bec8c9df6d2afa0cdcd537291fa044fba9879823a312419aa90fbe470d06e2d52b76335111ed334907962fe75f7ccb8d3ac6c235ae2e71444e0551d1dacc281885cc51401bc2b092a888c4c0c64009e8841df838533d7c35c77219bbc485b754aa384a75b50d0552b1002f12df1e1b7bee239b954c1dd1dff9ef088b1b87a8fa8002ce397592c57a243b5e75305048e37fd2a0aa50fdb06354b42884d6f9"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_mpls={0x118, 0x7, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x811f}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x888e}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1e0ad}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x6, 0x5, 0x5}, 0x1}}]}, {0xaf, 0x6, "cc73172e4c511b77103358fe3404a5effe4d69e1fe8243a5361f4b261f593dd7d76c181fb7e0d7eb90c936050b98654347aabeb130935a84a4877906d1a06cddd4d57aab5f777e48f7e081a7d089145490db86925c0c0f1bc0bf488bf240dbb05727eb5ead7b285378557c196ab032b58bb22afebe86edb613a4d8ecf9f66463fb6ff096549495f9fe2cb2a7ffc65d2c62d1cdbdf08eb3e5262d151684dab1d6030d4aa748cb081f61a9d3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_CGROUP_ACT={0x68b0, 0x1, [@m_ipt={0x12c4, 0x2, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x1240, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x1b8e}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x68, 0x6, {0x7ff, 'filter\x00', 0x13, 0x58f5, "06ea6ee0be45991744f268ea1b5a872e154a7a43937f16120cc3a5ee5c246311b27412ad76a306f475bfa609ff166c9af2c2427a98d39c9de26867888343"}}, @TCA_IPT_TARG={0x2a, 0x6, {0xfff7, 'nat\x00', 0x6, 0x6}}, @TCA_IPT_TARG={0x4d, 0x6, {0x7, 'filter\x00', 0x2, 0x7ff, "c2affa7ed9b18e3251692edcc63976e7275785129ac7fe5bdb3b1b6836dbe0e8e32b66"}}, @TCA_IPT_TARG={0x114, 0x6, {0x8180, 'nat\x00', 0x3, 0x9, "19a884a1e8fa65127ac9872fd1e75c526da8de7c6210f5d563645306af32513da9fd1c2fb912d347e899cb5c796c6e4e0ac188cda8470d3142338acccc45ed0d8eaa052723ad5a6ba7da60faddfabf562f572a4a10d487118f11fd8cc5ec7ac67837e00b893e364f0e9f433cef7a5ea8861c95285f2aac40d57e20bec993f0bc49a03dd866703a2c3e3167e54dc14879d9f65943171e22c210c2800f4ac49926c7e8699620057ee0eaab2db962b8f8ccd412d1ae78b0d55c97c3d4d1b4bf2c8e86c3fcfd2e4517b0e671c8f6c770353829eb7f54fd9d6e0f71fc22a96eb3f93ab7f11bc9516db9b49122"}}, @TCA_IPT_TARG={0x102a, 0x6, {0x2c, 'security\x00', 0x81, 0x40, "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"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}]}, {0x5f, 0x6, "89e549817f718c05f066d009e43c894ee077ef0e00a0d2a14a858dc30b585a4ac8487da1fd6ef112d486452d4737970ace553f118d9539e02c0669a1fdd65f384592f43218748c334d25318c26268670e88fa8f122b528b5d2b672"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_ipt={0x12a4, 0x1f, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x117c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xe2, 0x6, {0x2, 'raw\x00', 0x9, 0xbae, "7acbdc8781253477cdb7fa03c10e64ab6733da516765e46650c4a431fda1b99a5c2b592a5e29feca9a594cc50e90802239cc482734fedf22e922d1e7fd9472af4bb8c09311e458f988bb42720d3f23bb98838ea5ecf4f1416527a716dab0cacdf81adef7041b411472b917259b6514a605458a2ca5c7e3983c55d1a9e0d7f95d4150ee20f32773994dcb03520924f4e855e4376558c922747f5dcae48da6bca00b5db8f1594908649420a07db63d210e25f683cb3b829b96"}}, @TCA_IPT_TARG={0x102a, 0x6, {0x6, 'mangle\x00', 0x40, 0x5, "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"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_INDEX={0x8, 0x3, 0x70b}, @TCA_IPT_INDEX={0x8, 0x3, 0x400}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8001}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x102, 0x6, "b4e029c8303578ad412820d976c2badaec1b5b9ba4c2399ae9dcfe6556e3fd65620e4fa6c5e56bad38adb66f89813cc680c03e7e03f63508b03b23a2c42f77cf1e5cfa92ace3cb940c3ded7d2dd5a15e0e16f3f2230b629b3b5dfdedeffc074a4492950f2cf75b6a67a00fba20702d34934509a5b203b7f4ecedf3e6ccb0ee255b33858221831ea1c150cd6711ccde76aba0bc9b930ce453cb0d19d328a97720fc7bdaa30021754b4d5d56a7b1ff59ff04c5a152836dd5a9c630331474d2840afe82ee68c599895bd2d3baa003840830401fc207957aa6ad66b877388e22da931af9ce3ccbca51fca6b080248283ee2ad7d2639ff7420b78505e8065b9a1"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_pedit={0x3060, 0xe, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x2f58, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x3, 0x8, 0x6, 0xae1}, 0x9, 0x5, [{0x89, 0x184, 0x3, 0x5, 0xac3e, 0x7fffffff}, {0x9a87, 0x8d, 0x9, 0xfff, 0x4, 0x8001}]}, [{0x7, 0x3, 0xbc, 0x6, 0x1, 0x2}, {0x1, 0xfffffffc, 0xfffff706, 0x6, 0xcd1, 0xdde}, {0x7, 0x4, 0x3f, 0xa871, 0xa1b, 0x94}, {0x5, 0x1, 0x100, 0x997, 0x3e21}, {0x8000, 0x80000001, 0x2, 0x0, 0x10001, 0x9}, {0x7, 0x0, 0x3ff, 0x1f, 0x5cee, 0x9}, {0xffff7fff, 0x401, 0x2, 0x7fffffff, 0x4, 0x88}, {0x7, 0x10001, 0x2, 0xed7400, 0x2, 0x4}, {0x0, 0xffc, 0x400, 0x8, 0x8, 0xc5}, {0x4c, 0x8, 0x6, 0x7, 0x7, 0x8}, {0x80, 0x2710, 0x80000001, 0x7ff, 0x1, 0x7}, {0x4085, 0x8, 0x5, 0x3, 0x7, 0x5}, {0x3, 0x9, 0x2, 0x5, 0xff, 0x40}, {0x2, 0x0, 0x7, 0x1, 0x4, 0x10000000}, {0xd18, 0xfffffffd, 0x7, 0x800, 0x77b, 0x7}, {0x1, 0x0, 0x7fffffff, 0x1d, 0x100, 0x1}, {0x5087, 0x80000000, 0x9, 0xfd, 0x5, 0x1f}, {0x5f4, 0x0, 0x8, 0x1, 0x81, 0x1ff}, {0x0, 0x6, 0xfffffff7, 0x1f, 0x200, 0x3}, {0x9, 0x3a, 0x1, 0x4, 0x0, 0x6}, {0x6, 0x68a, 0x1c59, 0x100, 0x4, 0xbcd}, {0x7, 0x4, 0x2, 0x401, 0x100}, {0x7, 0x80000001, 0x1000, 0x2, 0x0, 0xfffffff9}, {0x6, 0x20, 0x9, 0x7, 0x6, 0x5}, {0x2, 0x9d, 0x3, 0xd7b9, 0xffffff00, 0xc1}, {0x81, 0x4969800, 0x2, 0x9, 0x4, 0xa50}, {0x6, 0x4, 0x9, 0xa6, 0x9, 0x8}, {0x91ea, 0x0, 0x6, 0x7, 0x2bb2, 0x8}, {0x7, 0x3ff, 0xfffffffc, 0x7fff, 0x1, 0x200}, {0x5, 0x0, 0x7, 0x6, 0x1, 0x6}, {0x2, 0x80, 0x8, 0x6, 0x1, 0x80}, {0x200, 0x7ff, 0x7, 0x200, 0x81, 0xaf25}, {0x0, 0x1, 0x20, 0x4, 0x1, 0x8}, {0x40000000, 0x87, 0x6, 0x5a6, 0x2000000, 0x7}, {0xffffff81, 0x0, 0xffff, 0x1, 0x0, 0x9}, {0x8, 0x1, 0x25, 0x3f, 0x100}, {0x9985, 0xa5, 0x40, 0x100, 0x9, 0x7ff}, {0x1, 0x800, 0x8, 0x8fd, 0x0, 0x2fc83cb6}, {0x73d0, 0x1, 0x0, 0x0, 0x4, 0x567e}, {0xfffffff7, 0x80000001, 0x401, 0x9, 0x3, 0x6}, {0x6, 0x200, 0x1, 0x7fffffff, 0xcd, 0x81}, {0x2, 0xf6, 0x5, 0x7f, 0x3, 0x7}, {0x6, 0x20000, 0x6, 0xff, 0x7dd9b6c2, 0x3f}, {0x7fff, 0x0, 0x3, 0xe37, 0xffff, 0x2}, {0x0, 0x64cd, 0x7670, 0xfff, 0x80000000, 0x4}, {0x0, 0x9, 0x0, 0x81, 0x3, 0x1}, {0x7396, 0x0, 0x0, 0x1, 0x10001, 0x3d91}, {0xfa, 0x7cc, 0x4, 0x2aa0e6d1, 0x1, 0x5}, {0x6, 0x3, 0x5263, 0x6, 0x400, 0x5}, {0x3, 0x9, 0x4, 0x20, 0x7, 0x8}, {0x9, 0x2a73, 0x8, 0x7fffffff, 0xd07c, 0x4}, {0x191, 0x9, 0x3ff, 0x101, 0x40, 0x661e}, {0x6, 0x2a, 0xfff, 0x9, 0x0, 0x7fffffff}, {0x5, 0x4, 0x4, 0x101, 0x9, 0x7}, {0x9, 0x200, 0x7, 0x5000000, 0x9, 0x6}, {0x4, 0x2, 0x0, 0xc6db, 0x8, 0x1a}, {0x2, 0x4, 0x4, 0x8, 0x7ff, 0x1}, {0xfffffff9, 0x1000, 0x9, 0xa3, 0x1, 0x1}, {0x101, 0x0, 0x4, 0x5, 0x8, 0x10001}, {0x204, 0x7ff, 0x2325, 0x3, 0x5, 0x7}, {0x3, 0x5, 0x0, 0x3ff, 0x3ff, 0x5}, {0xdd39, 0x1, 0x800, 0x7a, 0x2, 0xa494}, {0x40, 0x9, 0x4, 0x0, 0x3f, 0x8}, {0x9e7, 0x40, 0xff, 0x9, 0x4, 0x8000}, {0x5, 0x25f, 0x0, 0x3, 0x6, 0x3ff}, {0x2000, 0x81, 0x7fff, 0x6, 0x1, 0x5}, {0xce, 0x7, 0x2, 0x8, 0x9, 0x11}, {0xc900000, 0x4d4c, 0x800, 0x79, 0x9, 0x1000}, {0x1, 0x7ff, 0x20, 0xff, 0x5, 0xffff8001}, {0x0, 0x81, 0xf8, 0x6, 0x1ff}, {0x4, 0xddb0, 0xfff, 0x6, 0x6, 0xc320}, {0x80000000, 0x200, 0xa87e, 0x7, 0x34, 0x10001}, {0x1, 0x2, 0x1000, 0x1, 0x8, 0x9}, {0x4, 0xfffffff7, 0x80000001, 0x7fff, 0x10000, 0x4}, {0x8, 0x6, 0x400, 0x3d, 0xb4, 0x2}, {0xfffff001, 0x4, 0x1f, 0x80000001, 0x1000, 0x1f}, {0x1f, 0x0, 0xfef4, 0x4, 0x9, 0x7}, {0x4, 0x150, 0xfff, 0x6, 0x3, 0x90d8}, {0x9a9, 0x4, 0xa7, 0xc000, 0x6, 0xed07a42}, {0x6, 0x5, 0x5, 0xff, 0x1, 0x8}, {0x0, 0x9, 0x1ff, 0xbfe, 0x1, 0x5d8}, {0x8, 0x2, 0x80000000, 0x7, 0x69a9fc01, 0x401}, {0x6, 0x10000, 0x81, 0x7, 0x6, 0x80}, {0x1, 0x7f, 0x2, 0x7fff, 0x4, 0x9}, {0x1, 0x3, 0x40, 0x401, 0x2, 0x1}, {0x1, 0xfff, 0x2, 0xfffffffa, 0x400, 0x6}, {0x7ff, 0x7f, 0x9, 0x9, 0x8000, 0x7}, {0x6, 0x0, 0x610ff7bb, 0x6, 0xfffff801, 0x8}, {0xfffffff7, 0x10000, 0x0, 0x3, 0x9b, 0xffff}, {0x83f9, 0x7f, 0x3ded5799, 0xab93, 0x6, 0x8ad}, {0x0, 0x80000001, 0x5, 0x0, 0x7, 0x1ff}, {0x5, 0x6e, 0x3, 0x7fff, 0x7}, {0x3, 0x3f, 0x0, 0x0, 0x8, 0x1c02}, {0x80000001, 0x3, 0x80, 0xaf8, 0xabf, 0x9}, {0x8, 0x3c, 0x2, 0x20, 0x8001, 0x80000000}, {0xff, 0x80000000, 0x5, 0x7fffffff, 0xf88, 0x7fffffff}, {0x3, 0xfffffffb, 0x1f, 0x7ff, 0x1f, 0xdc2}, {0x9a9c, 0x7, 0x9, 0x4, 0x401, 0x1a9}, {0xa01c, 0x1, 0x7, 0x1b1, 0x1, 0x10001}, {0x80000000, 0x8, 0x3ff, 0x3c, 0x1, 0xdc}, {0x7fff, 0xff, 0x5, 0x0, 0x7f, 0x7}, {0xdec, 0x4, 0x4, 0x0, 0x25, 0x1200000}, {0x8, 0x5, 0x4, 0x6}, {0xfffffff8, 0x6, 0x9, 0xfa, 0xfff, 0xffffffff}, {0x81, 0x3, 0x401, 0x3f, 0xfff, 0x33}, {0x4, 0x9, 0x80000, 0x7, 0x100, 0x3}, {0x0, 0x400, 0x5, 0x0, 0x3, 0xffff}, {0x9, 0x1, 0x1, 0x8000, 0x6, 0xffffffff}, {0x8, 0x6, 0x8001, 0x800, 0xfff}, {0x5, 0x8, 0x7, 0x1, 0x8, 0x3}, {0x4, 0x33, 0x6, 0x9, 0x40, 0x3}, {0x1, 0x0, 0x0, 0x36, 0xffff, 0x800}, {0xdc, 0x3, 0xffff, 0x5, 0x8000, 0x5}, {0x10000, 0x1, 0x9, 0x0, 0x9, 0x8}, {0x6, 0xffffffc0, 0x2, 0xc6, 0xfffffc00}, {0x8001, 0x9a, 0x3, 0xe7d4, 0x692, 0x400}, {0x8001, 0x200, 0x95, 0x80000001, 0xa8, 0x47c131e2}, {0x8000, 0x1, 0x5, 0x2, 0x1, 0x8}, {0x8a8, 0x6, 0x2, 0x3, 0x200, 0x40}, {0xc74, 0x4, 0x20, 0x0, 0x1ff, 0x2}, {0x1, 0xffff, 0x6, 0x5, 0x401, 0x1}, {0x0, 0x54800, 0x9, 0x5, 0x8000, 0x5f}, {0xf0, 0x7, 0xa1d, 0x0, 0x6, 0xd5f}, {0x401, 0x5, 0xffff, 0x80, 0x63, 0xc6}, {0x3, 0x0, 0x5, 0x3, 0x10000, 0x7}, {0x6e, 0x5, 0x333e, 0x6, 0xfffffffc}, {0x9, 0x8c, 0x80000000, 0x3, 0x6, 0xfffffffd}, {0x2, 0x0, 0x8, 0x10001, 0x800, 0x80000000}], [{0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0xe409848f41358e65}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x5}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x5}, {0x6}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x1}, {0x4}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x2}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x5}, {0x3}, {0x2}, {0x5}, {0x0, 0x1}, {0x4}, {}, {0x4}, {0x5}, {}, {0x4}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x4b11, 0x8, 0x1, 0x7fffffff, 0x200}, 0x5, 0xff, [{0x7, 0x397, 0x9, 0xffffffff, 0x3, 0x3}, {0x8, 0x1ff, 0x7, 0x1, 0x9, 0x1}, {0x1, 0x9, 0x31, 0x1, 0x80000000, 0x73}, {0xffffffc1, 0xc89e, 0x10000, 0x7f, 0x100, 0x1}, {0x4, 0x2, 0x2, 0xfffffff9, 0x4, 0x9e}]}, [{0x10000, 0x800, 0x4, 0x100, 0x1, 0x7f}, {0x1, 0x7, 0xff, 0x5, 0x0, 0x4f8}, {0x3ff, 0x4f8, 0x400, 0x101, 0xfffffff8, 0xfff}, {0xcf, 0x1, 0x80000001, 0xffffffff, 0x1, 0x2}, {0x9, 0x0, 0x4, 0xb5b, 0x9, 0x400}, {0x4, 0x7f, 0x9, 0x1, 0x1, 0x8000}, {0x1, 0x4, 0x6ee, 0x5, 0x5, 0xc7}, {0xfffffff8, 0x6, 0x4, 0x3f, 0x7f, 0x5}, {0x802000, 0x5, 0x1, 0xc5, 0x8, 0x4}, {0x200, 0x400, 0x0, 0x5, 0x100, 0x5}, {0x4, 0xc3f, 0x6, 0x1, 0x1, 0x7}, {0x1, 0x7ff, 0x9, 0xc83, 0x3, 0x3}, {0x95, 0x4895, 0x3, 0x4, 0x7, 0x5}, {0x6, 0x2, 0xfffffff7, 0x80000000, 0x52c9, 0x7}, {0x1e2, 0x8, 0x3, 0x7, 0x9, 0x3}, {0x40000000, 0xb8f6, 0x310, 0x9, 0xce1}, {0xfffffffa, 0x0, 0x4, 0x3f, 0xff}, {0x519, 0x1, 0x8000, 0xef23, 0x100, 0x4}, {0x0, 0x6, 0x8, 0x7, 0x7, 0x7ff}, {0x0, 0x6, 0x200, 0x8001, 0xff, 0x4}, {0xfffffffb, 0x20, 0xfff, 0x5, 0x2, 0x3f}, {0x4, 0x20, 0x100, 0x404f, 0x80000000}, {0x9, 0x8, 0x100, 0x7, 0xfff}, {0x7, 0x0, 0x5, 0x7, 0x2, 0xc5c}, {0x8, 0x8, 0x6, 0x1, 0x80, 0x7c}, {0x1000, 0x1, 0x0, 0x0, 0xfff, 0x10000}, {0x40, 0x7ff, 0x800, 0x7, 0x8, 0x80000001}, {0x8000, 0xf45d, 0x9, 0x1, 0xffffffff, 0x5}, {0x101, 0x1, 0x5, 0x81, 0x1, 0x2}, {0x9, 0xffffff80, 0x9, 0x7, 0x0, 0x1}, {0x46, 0x7ff, 0x7ff, 0x80, 0x5, 0x101}, {0x9, 0x18000000, 0x100, 0x10000, 0x4, 0x800}, {0x8, 0x95, 0x8, 0x935, 0x6, 0x457}, {0x5, 0x3ff, 0x20, 0x7, 0x5, 0x6}, {0x1, 0x80000001, 0x8, 0xffff, 0x9, 0x6}, {0xaf, 0x8, 0x1, 0xffff0000, 0x1, 0xfffffb14}, {0x0, 0xffff, 0x8001, 0x52, 0x71, 0xffffff06}, {0x800, 0x8, 0x8c0d, 0x5, 0x200, 0x6}, {0x3, 0x5, 0x6, 0x0, 0x8, 0x5}, {0x0, 0x100, 0xfff, 0x9, 0x7fff, 0x175}, {0x5, 0x3, 0x1f, 0x2, 0x0, 0x1}, {0x8, 0x3f, 0xffff, 0x80000001, 0x1ff, 0x1ff}, {0x3ad, 0x27e9, 0x8, 0x8, 0x6, 0x3}, {0x5, 0x8000, 0x2, 0x8, 0xfffff3d2, 0x67c}, {0x2, 0x0, 0xfffffffc, 0x80000001, 0x9}, {0x9, 0x8000, 0x7fff, 0x5, 0x3, 0xfffffffb}, {0x7, 0x4, 0x8, 0x2, 0x8d3, 0x6694}, {0x7fffffff, 0x0, 0x6, 0x8, 0x6, 0x2}, {0x7, 0x1, 0x20000000, 0x4, 0x7fff, 0x1f}, {0x200, 0x5, 0x3f, 0x1, 0x10000, 0x8}, {0x0, 0x9, 0x5, 0x101, 0x7fffffff}, {0x4, 0x7f, 0x401, 0xb47, 0x3, 0x20}, {0x81, 0x4, 0x532, 0x1000, 0x5, 0x4}, {0xfff, 0xffffffff, 0x400, 0x4, 0x100, 0x5}, {0xfffffffd, 0x0, 0x1a93, 0x6, 0x7, 0x9}, {0x6, 0x10000, 0x401, 0x8, 0x40, 0x345459eb}, {0x800, 0x80000000, 0x0, 0x2, 0x80000000, 0x247c}, {0x4, 0x4, 0x7fffffff, 0x6, 0x9, 0xffffffe4}, {0x8, 0x401, 0x0, 0x401, 0x3, 0x492}, {0x0, 0x3b, 0xf228, 0x3, 0x1, 0x80000000}, {0x80, 0x4, 0x1, 0x7ff, 0x9, 0x8000}, {0x4, 0x0, 0xcd, 0x1ff, 0x2, 0x8}, {0x1356, 0x8000, 0x4, 0x2, 0x10000, 0x1}, {0x1000, 0x0, 0x81, 0x3, 0x4, 0x3}, {0x2, 0x2, 0x2, 0x1ff, 0x6, 0x1e3}, {0x8, 0x8001, 0x8000, 0xfffffffc, 0x8, 0x6}, {0x0, 0x9, 0x8, 0x1000, 0x5, 0x8001}, {0x6b, 0x1, 0x1, 0x2, 0x6, 0x7fffffff}, {0x1f, 0xffffff8b, 0x401, 0x0, 0x4, 0x9}, {0x5, 0xffff, 0x144a, 0x9, 0x5, 0x39c5}, {0xffffffff, 0x8, 0x9, 0x0, 0x800, 0x2}, {0x800, 0x8001, 0x3f, 0x101, 0xf2615a7, 0x2}, {0x7, 0x7, 0x4, 0x7, 0x1000, 0x1ff}, {0x5, 0x2, 0xdeb, 0x4, 0x6, 0x95ef}, {0x812c, 0x40, 0x7, 0x400, 0x6a, 0x6}, {0x7fffffff, 0x101, 0x7, 0x4, 0x4, 0x39}, {0x4, 0xfffffff8, 0x247, 0x5, 0x428, 0x6}, {0x7eb8, 0x401, 0x8, 0x4, 0x5}, {0xfffffff9, 0x1, 0x2, 0x0, 0x80000001, 0xffffffff}, {0xfffffaf5, 0x5, 0x0, 0x0, 0x3, 0x1}, {0x0, 0x0, 0x1, 0x401, 0x3, 0x1}, {0x5ba, 0x8, 0x3, 0xc9, 0xfffffffe, 0xa95}, {0x5, 0x4, 0x0, 0x8, 0x7fffffff, 0x45}, {0x2, 0x2, 0xffff, 0xb74a, 0x9, 0x6}, {0x9, 0x7, 0x401, 0x584, 0x3, 0xbb6}, {0x101, 0x7ff, 0x7, 0x9, 0xe57a, 0x7fffffff}, {0x3, 0x0, 0x9, 0x80000000, 0xffffffff, 0x3800000}, {0xfb, 0x20, 0x34f2, 0x775, 0x1000, 0x763f}, {0x101, 0x7fff, 0x5, 0xf7, 0xea7a6d7, 0x6}, {0xff, 0x3f, 0x2, 0x1, 0x6, 0x9}, {0x3, 0x100, 0x8, 0x156, 0x2de, 0x7ff}, {0xffffffb9, 0x800, 0x3, 0x400, 0x1000, 0x1ff}, {0x9, 0x1, 0x3, 0x0, 0x9, 0x80000000}, {0x10001, 0x0, 0x8, 0x7, 0x9}, {0x8, 0x4, 0x9, 0xfff, 0xff, 0x462}, {0x9, 0x1, 0x8, 0x4, 0x4, 0x3}, {0x893, 0xffff, 0x2, 0x800, 0x80000000, 0x9}, {0xffffb02f, 0x101, 0x22, 0x80000000, 0x1ce904a3, 0x1}, {0x80000000, 0x2, 0x40, 0x0, 0xffffffff, 0x4}, {0x1e4, 0x1, 0x8e8c, 0x0, 0x28300, 0x3}, {0xfffffb34, 0x80000001, 0x3f, 0x200, 0x0, 0x16}, {0xf3, 0x4, 0x2, 0x800, 0x81, 0x3}, {0x3, 0x9, 0x4, 0x1, 0x7f, 0x8}, {0x11, 0x1, 0x1, 0x2dc7, 0xffff, 0x4}, {0x1, 0xfff, 0x2, 0x7fffffff, 0xac, 0xf6ba}, {0xfff, 0xb475, 0x7, 0x0, 0x5ad, 0x7670}, {0x5, 0x401, 0x2, 0x81, 0x8, 0x7ff}, {0x7, 0x55f, 0x24f, 0x3, 0x3, 0x2}, {0x8, 0x1, 0x7ff, 0x1ff, 0x800, 0x100}, {0x8, 0x3, 0xffffffff, 0x1, 0xc2, 0x6}, {0x4, 0x1, 0x9, 0x2040000, 0x9, 0x7f}, {0x6, 0xa0, 0x8, 0x20, 0x7, 0x8}, {0x4, 0x3, 0x1, 0x40, 0x9}, {0xd8d, 0x3, 0x9, 0x800, 0x8, 0x5c3}, {0x1, 0x0, 0x2, 0x1, 0x7bc7, 0x6}, {0xffffffff, 0x7f, 0x28, 0xcc, 0x5, 0x8}, {0x2, 0x800, 0x2, 0x7, 0x7, 0x200}, {0x6bf, 0x8000, 0x400, 0x401, 0x0, 0x1000}, {0x0, 0x0, 0x80, 0x9, 0x8001, 0x101}, {0x4, 0x1000, 0x1, 0x2, 0x3, 0x8000}, {0xffffffff, 0x8, 0x0, 0x974, 0x7, 0x927}, {0x4, 0x9, 0x457, 0x6, 0x7ff, 0x7fffffff}, {0x101, 0x10001, 0x20, 0x0, 0x8, 0x13}, {0x2, 0x9, 0x8, 0x40b, 0x1, 0x3ff}, {0x7f, 0x3, 0x9, 0x0, 0x8001, 0x2}, {0xfffffffd, 0x6, 0x101, 0x4, 0x3, 0x101}, {0x10000, 0x290, 0x9, 0x7, 0x7, 0x9}, {0x5, 0x6, 0x1f, 0x0, 0xff, 0x3}], [{0x3, 0x1}, {0x1, 0x1}, {}, {0x3}, {}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0xe8199b1cf8ed9af1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x8}, {0x1}, {0x2}, {0x2}, {0x1}, {0x1}, {0x4}, {0x3}, {0x3}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x5, 0xe6f97dca9e6c80a9}, {0x1, 0x1}, {0x5}, {0x2}, {0x3}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x5}, {0x4}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x983e1817cdca9222}, {}, {}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x7}, {}, {0x2}, {0x5}, {0x5}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x4}, {0x3}, {}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x4}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5}], 0x1}}, @TCA_PEDIT_KEYS_EX={0xd4, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x27401a58e3d02cdf}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_KEYS_EX={0x28, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0xec, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x4}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xe98, 0x2, {{{0x7fff, 0x7f, 0xffffffffffffffff, 0x1f, 0x9}, 0x6, 0x80, [{0x400, 0x1000, 0x8000, 0x80000000, 0x1, 0x9103}, {0x58, 0x800, 0x3ff, 0x5880, 0x8, 0x7}, {0x7, 0xfffffffd, 0x1fe, 0x8, 0x9, 0x20000}, {0x5, 0xfff, 0x80000001, 0x1, 0x100}, {0x4, 0x3, 0x5, 0x2, 0x4, 0xc7e7}]}, [{0xc7, 0x5, 0x4ab, 0x9, 0x8, 0xfffffffd}, {0x9, 0x9, 0x0, 0x4, 0x5, 0x800}, {0x3, 0x71a, 0x80000001, 0x7, 0x0, 0x200}, {0x40, 0x5, 0x101, 0xbce, 0x1000, 0x90b2}, {0x2, 0x1, 0x3, 0x5b80000, 0x9, 0x8001}, {0x9, 0x1ff, 0x9, 0x3d, 0xffffffff, 0xfffffffe}, {0x40, 0xfc, 0x1, 0xa4, 0xfffffffa}, {0x9, 0x7, 0xfffff1f8, 0x7, 0x43, 0x6}, {0x4c, 0x33, 0x8a9, 0xfffffffd, 0x5, 0x6cf}, {0xbc6, 0xe6ab, 0x100, 0x40, 0xdc, 0x4}, {0x8000, 0x8, 0x0, 0x9, 0x4, 0x6}, {0x7, 0x800, 0x3, 0x2, 0x1f, 0x9}, {0x0, 0x1, 0x3, 0x7, 0x101}, {0x5, 0x5, 0x5, 0x2, 0x7, 0x10001}, {0x81c6, 0x7, 0x10000, 0x6, 0x3, 0x7ff}, {0x9, 0x3ff, 0xb045, 0x660, 0x8, 0x1ff}, {0x4, 0x8000, 0x3, 0x6, 0x9, 0x37f7}, {0x30, 0x7, 0x9, 0x0, 0x4, 0xb64a}, {0x9, 0x3c05, 0x8000, 0xffffffff, 0x200, 0x1}, {0x1, 0x0, 0x3ff, 0x80000}, {0x80000001, 0x3ff, 0x40, 0xb1a9, 0x7, 0x1}, {0x0, 0x3, 0xfffffff8, 0xe4ae, 0x10}, {0xffffffff, 0x3, 0xff, 0xd68, 0x54b31a84, 0x4}, {0x80, 0x100, 0x20, 0x5, 0x1800000, 0x2}, {0x52dd, 0x7f5, 0x0, 0x7, 0x4, 0xffffff7f}, {0x2, 0x8, 0x20, 0x401, 0x101, 0xd4c}, {0x7, 0x80000000, 0x7f, 0x10000, 0x4, 0x800}, {0xffff8000, 0x400, 0x1, 0x9de5, 0x10000, 0x4}, {0x6, 0x7, 0x50, 0x9, 0x9, 0x3}, {0xfffff000, 0xb5a, 0x1, 0x5, 0x5}, {0x20, 0x3eeb, 0x8000, 0x4722, 0xffffffe1}, {0x6, 0x9, 0x15, 0x9, 0x8, 0x6}, {0x8, 0x7, 0x9, 0x20, 0x2a, 0x6}, {0x3ff, 0x10001, 0x81, 0x4, 0x0, 0x1ff}, {0x6, 0x8e, 0x9, 0x7, 0x2, 0xffffffff}, {0x75, 0x2, 0x1, 0x6, 0x4, 0xc7a00000}, {0x1000, 0x6, 0xfffffffb, 0xff, 0x5, 0x4}, {0x1, 0x0, 0x1, 0x8, 0x100, 0x4}, {0xffffffc1, 0xa40, 0x8, 0x3, 0xab3, 0x2}, {0x3ff, 0x0, 0x40, 0xffff, 0x4, 0x6}, {0xff, 0x0, 0x1, 0x3f, 0x6, 0x2}, {0x4, 0x1c, 0x1, 0x1, 0x6, 0x3f}, {0xc93, 0x1, 0x8cd, 0x5, 0x7a1057d6, 0x5}, {0x0, 0x6, 0x3f, 0x2, 0x5e, 0x1}, {0x7, 0x401, 0x5, 0x7, 0xd, 0x7fffffff}, {0x3ff, 0x5, 0x2, 0xfffffe0b, 0x401, 0x1}, {0x7fffffff, 0x2, 0x64c, 0x0, 0x2, 0x26dc}, {0xa81, 0x8a81, 0xe0, 0x2, 0x9, 0x101}, {0x7, 0xffffffff, 0x3, 0x80000000, 0x1ff, 0x6}, {0x4, 0xcc3, 0x9, 0x2, 0x7, 0x7ff}, {0x6c72, 0x101, 0x2, 0x8, 0x5, 0x2}, {0x6, 0x6, 0xff, 0x88, 0x3}, {0x7, 0x80, 0x7, 0x0, 0x8556, 0x559}, {0x8, 0x7ffc, 0x5, 0x1, 0x8, 0x1}, {0x4, 0x6, 0x80000001, 0x1, 0x3ff, 0x7}, {0x6, 0x40, 0x81, 0x100, 0x92a4, 0x1}, {0x8, 0x0, 0x7, 0x3, 0x7e, 0x8}, {0xffff, 0x400, 0x3, 0x3}, {0xc5, 0xffff, 0x9, 0x0, 0xa78, 0x101}, {0x8, 0x9, 0xfffffff8, 0x0, 0x10001, 0x6}, {0x5, 0x9, 0x1000, 0x8, 0xf17e, 0xffffffff}, {0x40, 0x1, 0x10000, 0x5, 0x3, 0x3}, {0x2, 0xb6f, 0x7ff, 0x5, 0x9, 0xffffff42}, {0x6, 0x2, 0xffffffff, 0x6, 0x7fffffff, 0x2}, {0x4, 0x4647bb8, 0x4, 0xc907, 0x7, 0x88}, {0x400, 0x3, 0x1, 0x1, 0x2, 0xfffffff7}, {0x5, 0x3, 0x101, 0x9, 0x40, 0xfff}, {0x3e, 0x2, 0x14, 0x0, 0x7520, 0xb732}, {0x9, 0xffff1c79, 0x6, 0x4, 0x9}, {0x3ff, 0x3, 0xa6, 0x9, 0x6556f84e, 0x1}, {0x7, 0x9, 0x3e5, 0xf7e1, 0x203, 0x7ff}, {0x0, 0x40, 0x6819, 0x6, 0x4, 0x2}, {0x1, 0x753a, 0xaeee, 0x1, 0x9, 0x3}, {0x9, 0x80, 0x2, 0x8, 0x8, 0x1000}, {0x80, 0xd2e, 0x4, 0x81, 0x3ff, 0x800}, {0x1000, 0x3, 0x10000, 0x100, 0xfbca, 0xff}, {0x4, 0x8, 0x2, 0x400, 0x9, 0xff}, {0x0, 0xfffff801, 0x386c9cdb, 0x4, 0x1, 0x14000000}, {0x9, 0x7, 0xf4e, 0x80000000, 0x1, 0x6}, {0x7fff, 0x0, 0x6, 0x3, 0xffff, 0xffffff88}, {0x0, 0x4, 0x2, 0x0, 0x9, 0x5d41f206}, {0x0, 0x80, 0xa8c, 0x4, 0x4, 0x3}, {0x80, 0x0, 0x0, 0x7, 0x4}, {0x80000000, 0x0, 0x8, 0x1, 0xfffffff9, 0x6}, {0x10000, 0x7cce231a, 0x80000001, 0x400, 0x4}, {0x7fff, 0x22d6, 0x0, 0x5, 0x0, 0xe0c2}, {0x5, 0x100, 0x1, 0x400, 0xe1, 0x800}, {0x9, 0x1000, 0x2, 0x7, 0x9, 0x1000}, {0x99d0, 0x9, 0x400, 0x9, 0x7, 0x1}, {0x8aec2494, 0x1, 0x7, 0x0, 0x8, 0x6}, {0x681, 0x30000000, 0x755e, 0x5a1, 0x8000}, {0x1d3c, 0x1000, 0x1, 0x5, 0x100, 0x7}, {0xf, 0x5, 0x35b, 0x80, 0x0, 0x3}, {0x4, 0x3f, 0x400, 0x7fff, 0x9, 0x5}, {0x1, 0x8000, 0x3, 0x3f, 0x0, 0x7}, {0x200, 0x3, 0x7fff, 0x3, 0xc573, 0x7a9}, {0x5, 0x9, 0xfffff801, 0x389360eb, 0x7}, {0x1281, 0x7, 0xfffffffc, 0x9b, 0x7, 0x10000}, {0x67b6, 0x8, 0x8, 0x5, 0x9, 0xfffffffd}, {0x3555, 0x80000000, 0x1, 0xfffff001, 0x0, 0x1}, {0x5, 0x200, 0x3, 0xbf, 0xa08, 0x9}, {0x400, 0x4, 0x9, 0x8, 0x5, 0x10001}, {0x7ff, 0x9, 0x80, 0x18, 0x37, 0x5}, {0xae, 0x4, 0x1, 0x2, 0x3101, 0x200}, {0x2, 0x4, 0x3ff, 0xb8a, 0x1, 0x7}, {0x7f, 0xfffffffd, 0x3, 0x81, 0x2, 0x7}, {0x5, 0x100, 0x5, 0xfda0, 0x0, 0x9}, {0x81, 0x1ff, 0x4, 0x8, 0x3ff, 0x40}, {0x5, 0x1, 0x6, 0x3, 0x60fb, 0x5d}, {0x5740, 0x3, 0x401, 0x5ce9e706, 0xd6c3, 0x400}, {0x7, 0x40, 0x6, 0xfff, 0x37a, 0xfff}, {0x401, 0x5, 0x4839c332, 0x1, 0x93, 0x3}, {0x2, 0x1, 0x9, 0x30, 0x3, 0x4}, {0x6, 0xfffff668, 0x5, 0xc717, 0x0, 0x1800000}, {0x71e, 0x776, 0x0, 0x2, 0x0, 0x1}, {0x401, 0x7, 0x2, 0xfffeffff, 0x8, 0xffff}, {0x2d, 0x7ff, 0x10000, 0x5, 0x5, 0x2000000}, {0x6, 0x9, 0x6, 0x100, 0x7, 0x3c6}, {0x80, 0x0, 0x4, 0x6c, 0x997, 0xa6000000}, {0x2, 0x0, 0xfffffffe, 0x2a95, 0x2, 0x4}, {0x1400000, 0x4, 0xcd6, 0x3, 0x484addd9, 0x1}, {0x522, 0xfffffffe, 0x2, 0x9, 0x7f, 0x1f800}, {0x7fff, 0x8, 0x3, 0x671, 0x6, 0x9}, {0x0, 0x0, 0x400, 0x4, 0x7f, 0x3}, {0x7f, 0x101, 0x0, 0x800, 0x1, 0x3ff}, {0x401, 0x3f, 0x2, 0x8, 0x3, 0x6}, {0x8, 0x4, 0x80000001, 0x3, 0x80, 0x3f}, {0x9, 0x80000000, 0x6, 0x2d7e, 0x2, 0x9}], [{0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {}, {0x3}, {0x2}, {0x2, 0x1}, {}, {0x5}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x4}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x97e45dac82e3c38d}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x1, 0x300bfe9f55d13d6f}, {0x5}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {}, {}, {0x3}, {0x4}, {0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x5}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x2, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x29c287834f8711e6}, {0x1, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x2}], 0x1}}, @TCA_PEDIT_KEYS_EX={0xc4, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x688bdfb6896a649f}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}, @TCA_PEDIT_KEYS_EX={0x128, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0xde, 0x6, "15ffcc720b16340f0f5deed06ff7c286dd8bf63f5a25bbf308e023a38255cbcbbce39302035e1a15deb755f041f30c1362d16eccb82ad1f021404aed75d3ab1cd0cb2131e07fee7d30425ff000f93055f9542f84672e1f9e494b277df17ebeecb5ad7e87478b765d79b5ee8527bddb856205fa60fb6d997d72029dd17ea7008a6fc3535c88a9e8b24b0539ebe6d81f62c5c236cf4951233d2fb7b8ec717774d50b06dbca1c8793c54d9139c29e6d055c0f6b90fba3586fc3bdef71f5935ff8c37bc5ec8db6ce0597d90464beabd7f247f3ef24302d7d275ac309"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0xc0, 0x16, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffd, 0x2a24, 0x7, 0x0, 0x1ff}, @empty, @remote, 0xff000000, 0x1}}]}, {0x6f, 0x6, "5a2ab9cc55a793d78fdd262dd46f9b2fe24e5688f16730a6651712d1b0efc09915a58d0482ebeb75e76440e40dc652054801eed6fce1c5ee4e94e20d512d989ffafe4f7bf00ed9507ef8fa8c6a5482b96dcb7514f7a8e7a7e821fb8c25295af4ec5a6795f094e0dd86cdc5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x10b8, 0xd, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x8c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5, 0x4, 0x3, 0x4}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x401, 0x2, 0x8, 0x1}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x100, 0xffffffff, 0x1, 0xfff, 0x206}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1f, 0x3, 0x20000000, 0x5, 0x80}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0xac, 0x5, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x1, 0xd279, 0x4}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x3, 0x8001, 0x101}, 0x3f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x0, 0x3f, 0x100}, 0xf70e}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x7f, 0x20000000, 0x80, 0x400}}}]}, {0xa, 0x6, "2a415436b69c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0xc0, 0x1b, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_ACTION={0x6, 0x3, 0x28}, @TCA_CT_LABELS={0x14, 0x7, "effb0ceed3ebdf56f3365aeccccc91eb"}, @TCA_CT_PARMS={0x18, 0x1, {0x7fffffff, 0x2, 0x4, 0x1, 0x1eec4d43}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}]}, {0x54, 0x6, "1c1e3866ba2da6150b26622a46860f8c6e21ed0926dad38a980cd8d87ad1dc032dd0c4f6d62fb0f9b41d4d0b6ebf453b68d53bf6c0ca2ff07d9197606632c8bc4abb7967dabdecf1c41314d3841fd2dc"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_CGROUP_ACT={0x4c0, 0x1, [@m_simple={0xd4, 0x1a, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x5c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0xfff, 0x5, 0x5ada, 0x2}}, @TCA_DEF_DATA={0x15, 0x3, '/#%\x97-@!-{*]-[$)\'\x00'}, @TCA_DEF_DATA={0x6, 0x3, '[\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'flower\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'flower\x00'}]}, {0x4d, 0x6, "b636ba86ddff9fc460dce2d783de6f6953e568d00d9e8c56339105e402fc9b036972aef50d3cca1872588a826331c5bc48c99fcbfcbfc85d37162b38c5df6a4dda2d7be27903d20908"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x7, 0x2}}}}, @m_mpls={0xe8, 0x19, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x6f}, @TCA_MPLS_PROTO={0x6, 0x4, 0x600}, @TCA_MPLS_PROTO={0x6, 0x4, 0xc383}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xc8231}]}, {0x94, 0x6, "7bb220e28ac859afa2a5c3342f009fd64b29db6aa0b7d8b7d002ce687c7408a1b727cf7d8a4f344d4969655a922462e00e71a0808caa3d5020a62445f62b6893ef2170014933a4e0d085f33a7b3032cfa883e8ee7a6c89f28eb94c2199dac5210c62e602a9049abfe4e5d7e665fc9a9945077ce43bf533f6f0363e40e1de53a95e0ffa15a37dbc51414f1f4e46a23798"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ctinfo={0xcc, 0x11, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5f5}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8000}]}, {0x8e, 0x6, "00ddf3e66fdf3bc77025ca80c17ad8ab8cdeb9457eacf27652530ad20f32e473e0f4b7f68be9e286a743f02e2f765861595a82bcd438d42ab475a3c325ea638c1ebbd98d045fb5dfe3eded2e366aa05ac64990aa34e8aa7cf324b94eb81198db712129d34eefdfdf4bc0b47d8abbd9c0337029a1cd09f2b1a0d1cc81f705c21ead9caf3c5490044e7eb0"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0xc0, 0x1f, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x14, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x216b}, @TCA_IFE_TYPE={0x6, 0x5, 0xff}]}, {0x88, 0x6, "9e2b51412d1cae9d2277abda8a66a48fe450441dd6f7ba0ba3e2e17e69014bcd114cb7d87ee2bae751dabe2a4890c99495fdbdf468bef918e78453dd750d8f4e23652e58d66072b145d02ff8942e810ee1e5dbbe1f4111de3395967495cbe752acd16febc5a3842d9343ad00eb7c4c5cd425a0c2f544f3a5c17025f5d79ffbcdf274966b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0x174, 0x16, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x60, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x40, 0x7, 0x3, 0x42}, 0x3}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x80}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xb9654}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8808}, @TCA_MPLS_PROTO={0x6, 0x4, 0x7}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8884}]}, {0xec, 0x6, "ea5e62a4f67fc30183f6195fc10e90b0e9b83fec0d86e6d64ddc43af6131b040152899e8620469a90b6e08d3bd89813c8311beb4a97e6d95ebc6da9e8dbf2eac1995c2c7d9ca97d65a4469e3dced933309da98b955014f2ac263fc45ce40e274ad6da6bb7486cdd0687dda52c82c69c57f23a6b2ef0ff1c56cea1421d2d7d1d72abd863225dbbf6b75d91929bb97e71c15b8e662cf0ee1bac00f256c665fbef8d01517996f4c7e2d9ae06443213413c886d5c39e5c04f028d7e57f3bfa31b43a81d72a1572add9459b65c9a3111e666b552199a9c9b149c769f30b000415e247288706e5f952ee9f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xa38c}}, 0x4) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) [ 964.995391] Total swap = 0kB [ 964.998944] 1965979 pages RAM [ 965.002054] 0 pages HighMem/MovableOnly [ 965.006019] 352651 pages reserved [ 965.009563] 0 pages cma reserved 19:37:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x9effffff}, 0x0) 19:37:19 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xc1000000) [ 965.047711] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) 19:37:19 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 965.098808] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 965.119705] CPU: 0 PID: 1679 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 965.127529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 965.136886] Call Trace: [ 965.139488] dump_stack+0x22c/0x33e [ 965.143289] warn_alloc.cold+0x7b/0x18f [ 965.147288] ? zone_watermark_ok_safe+0x300/0x300 [ 965.152150] ? should_fail+0x142/0x7d8 [ 965.156059] ? ip_set_alloc+0x54/0x70 [ 965.159873] vzalloc+0x15c/0x1a0 [ 965.163259] ip_set_alloc+0x54/0x70 [ 965.166902] hash_netiface_create+0x42d/0xa50 [ 965.171411] ? hash_netiface6_add+0x2940/0x2940 [ 965.176091] ip_set_create+0x70e/0x1380 [ 965.180081] ? __find_set_type_get+0x450/0x450 [ 965.184694] ? lock_downgrade+0x750/0x750 [ 965.188855] ? __find_set_type_get+0x450/0x450 [ 965.193446] nfnetlink_rcv_msg+0xeff/0x1210 [ 965.197787] ? nfnetlink_net_init+0x170/0x170 [ 965.202302] ? avc_has_extended_perms+0x1020/0x1020 [ 965.207328] ? avc_has_extended_perms+0x1020/0x1020 [ 965.212349] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 965.216855] ? lock_downgrade+0x750/0x750 [ 965.221012] ? __local_bh_enable_ip+0x159/0x2a0 [ 965.225703] ? cred_has_capability+0x162/0x2e0 [ 965.230294] ? cred_has_capability+0x1d9/0x2e0 [ 965.234883] ? selinux_inode_copy_up+0x180/0x180 [ 965.239752] ? selinux_inode_copy_up+0x180/0x180 [ 965.244520] netlink_rcv_skb+0x160/0x440 [ 965.248590] ? nfnetlink_net_init+0x170/0x170 [ 965.253097] ? netlink_ack+0xae0/0xae0 [ 965.257003] ? ns_capable_common+0x117/0x140 [ 965.261423] nfnetlink_rcv+0x1b2/0x41b [ 965.265316] ? nfnetlink_rcv_batch+0x1710/0x1710 19:37:19 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 965.270083] netlink_unicast+0x4d5/0x690 [ 965.274157] ? netlink_sendskb+0x110/0x110 [ 965.278407] netlink_sendmsg+0x717/0xcc0 [ 965.282480] ? nlmsg_notify+0x1a0/0x1a0 [ 965.286461] ? __sock_recv_ts_and_drops+0x540/0x540 [ 965.291491] ? nlmsg_notify+0x1a0/0x1a0 [ 965.295475] sock_sendmsg+0xc7/0x130 [ 965.299198] ___sys_sendmsg+0x7bb/0x8f0 [ 965.303186] ? copy_msghdr_from_user+0x440/0x440 [ 965.307950] ? find_held_lock+0x2d/0x110 [ 965.312019] ? __fget+0x386/0x570 [ 965.315489] ? lock_downgrade+0x750/0x750 19:37:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x100000001) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) r2 = socket(0x1000000010, 0x80002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$sock_void(r2, 0x1, 0xd, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000024000705153adfbd3ef1f2f0214298463129ee9b189d0a05000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) [ 965.319655] ? check_preemption_disabled+0x41/0x2b0 [ 965.324685] ? __fget+0x3ad/0x570 [ 965.328152] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 965.332396] ? lock_acquire+0x170/0x3f0 [ 965.336378] ? __might_fault+0xef/0x1d0 [ 965.340372] ? __fget_light+0x1d1/0x230 [ 965.344369] __x64_sys_sendmsg+0x132/0x220 [ 965.348612] ? __sys_sendmsg+0x1b0/0x1b0 [ 965.352697] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 965.357464] ? trace_hardirqs_off_caller+0x69/0x210 [ 965.362517] ? do_syscall_64+0x21/0x670 [ 965.366507] do_syscall_64+0xf9/0x670 19:37:20 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xdf000000) [ 965.370320] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 965.375509] RIP: 0033:0x45d5f9 [ 965.378709] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 965.397611] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 965.405324] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 965.412595] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 19:37:20 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:20 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xc2000000) [ 965.419871] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 965.427147] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 965.434418] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c 19:37:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x85000000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:37:20 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0xf0ffffff}, 0x0) 19:37:20 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xe0000000) 19:37:20 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xc3000000) 19:37:20 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:20 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x7, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x6}}]}, 0x2c}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) [ 965.840998] ================================================================================ [ 965.850060] UBSAN: Undefined behaviour in net/netfilter/ipset/ip_set_hash_gen.h:125:6 [ 965.858039] shift exponent 32 is too large for 32-bit type 'unsigned int' [ 965.865497] CPU: 0 PID: 1773 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 965.873294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 965.882649] Call Trace: [ 965.885248] dump_stack+0x22c/0x33e [ 965.888891] ubsan_epilogue+0xe/0x3a [ 965.892618] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 965.898778] ? hash_netiface_create+0x366/0xa50 [ 965.903457] ? rcu_read_lock_sched_held+0x174/0x1e0 [ 965.908493] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 965.913351] hash_netiface_create.cold+0x1a/0x1f [ 965.918115] ? hash_netiface6_add+0x2940/0x2940 [ 965.922796] ip_set_create+0x70e/0x1380 [ 965.926785] ? __find_set_type_get+0x450/0x450 [ 965.931395] ? lock_downgrade+0x750/0x750 [ 965.935559] ? __find_set_type_get+0x450/0x450 [ 965.940153] nfnetlink_rcv_msg+0xeff/0x1210 [ 965.944498] ? nfnetlink_net_init+0x170/0x170 [ 965.949002] ? avc_has_extended_perms+0x1020/0x1020 [ 965.954007] ? avc_has_extended_perms+0x1020/0x1020 [ 965.959013] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 965.963587] ? lock_downgrade+0x750/0x750 [ 965.967733] ? __local_bh_enable_ip+0x159/0x2a0 [ 965.972393] ? cred_has_capability+0x162/0x2e0 [ 965.977064] ? cred_has_capability+0x1d9/0x2e0 [ 965.981641] ? selinux_inode_copy_up+0x180/0x180 [ 965.986382] ? selinux_inode_copy_up+0x180/0x180 [ 965.991127] netlink_rcv_skb+0x160/0x440 [ 965.995179] ? nfnetlink_net_init+0x170/0x170 [ 965.999664] ? netlink_ack+0xae0/0xae0 [ 966.003542] ? ns_capable_common+0x117/0x140 [ 966.007940] nfnetlink_rcv+0x1b2/0x41b [ 966.011817] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 966.016566] netlink_unicast+0x4d5/0x690 [ 966.020615] ? netlink_sendskb+0x110/0x110 [ 966.024856] netlink_sendmsg+0x717/0xcc0 [ 966.028909] ? nlmsg_notify+0x1a0/0x1a0 [ 966.032868] ? __sock_recv_ts_and_drops+0x540/0x540 [ 966.037874] ? nlmsg_notify+0x1a0/0x1a0 [ 966.041844] sock_sendmsg+0xc7/0x130 [ 966.045546] ___sys_sendmsg+0x7bb/0x8f0 [ 966.049531] ? copy_msghdr_from_user+0x440/0x440 [ 966.054274] ? find_held_lock+0x2d/0x110 [ 966.058337] ? __fget+0x386/0x570 [ 966.061781] ? lock_downgrade+0x750/0x750 [ 966.065916] ? check_preemption_disabled+0x41/0x2b0 [ 966.070919] ? __fget+0x3ad/0x570 [ 966.074360] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 966.078579] ? lock_acquire+0x170/0x3f0 [ 966.082624] ? __might_fault+0xef/0x1d0 [ 966.086594] ? __fget_light+0x1d1/0x230 [ 966.090569] __x64_sys_sendmsg+0x132/0x220 [ 966.094800] ? __sys_sendmsg+0x1b0/0x1b0 [ 966.098856] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 966.103599] ? trace_hardirqs_off_caller+0x69/0x210 [ 966.108600] ? do_syscall_64+0x21/0x670 [ 966.112563] do_syscall_64+0xf9/0x670 [ 966.116351] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 966.121524] RIP: 0033:0x45d5f9 [ 966.124706] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 966.143602] RSP: 002b:00007fcce42e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 966.151293] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 966.158556] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 966.165809] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 966.173065] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 966.180319] R13: 00007ffe1b999d8f R14: 00007fcce42e39c0 R15: 000000000118cfec [ 966.187583] ================================================================================ 19:37:20 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xe03f0300) 19:37:20 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0xfffff000}, 0x0) 19:37:21 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x3, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:37:21 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xc4000000) 19:37:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0xffffff7f}, 0x0) 19:37:21 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:37:21 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:21 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000001c0)={@loopback, 0x0}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=@ipv6_deladdr={0xa0, 0x15, 0x1, 0x70bd28, 0x25dfdbfb, {0xa, 0x40, 0x39, 0xc8, r4}, [@IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, [], 0x1}}, @IFA_ADDRESS={0x14, 0x1, @private2}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, [], 0x28}}, @IFA_CACHEINFO={0x14, 0x6, {0x9, 0x5, 0x1000, 0x8000}}, @IFA_FLAGS={0x8, 0x8, 0x38}, @IFA_FLAGS={0x8}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @private=0xa010102}}, @IFA_CACHEINFO={0x14, 0x6, {0x100, 0x2, 0x1, 0x4}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24008045}, 0x20000800) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) 19:37:21 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xe1000000) 19:37:21 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xc5000000) 19:37:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0xffffff9e}, 0x0) [ 966.693063] syz-executor.0: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 966.751199] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 966.765661] CPU: 0 PID: 1845 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 966.773486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 966.782845] Call Trace: [ 966.785450] dump_stack+0x22c/0x33e [ 966.789095] warn_alloc.cold+0x7b/0x18f [ 966.793116] ? zone_watermark_ok_safe+0x300/0x300 [ 966.797980] ? should_fail+0x142/0x7d8 [ 966.801887] ? ip_set_alloc+0x54/0x70 [ 966.805700] vzalloc+0x15c/0x1a0 [ 966.809078] ip_set_alloc+0x54/0x70 [ 966.812716] hash_netiface_create+0x42d/0xa50 [ 966.817223] ? hash_netiface6_add+0x2940/0x2940 [ 966.821906] ip_set_create+0x70e/0x1380 [ 966.825893] ? __find_set_type_get+0x450/0x450 [ 966.830507] ? lock_downgrade+0x750/0x750 [ 966.834670] ? __find_set_type_get+0x450/0x450 [ 966.839266] nfnetlink_rcv_msg+0xeff/0x1210 [ 966.843715] ? nfnetlink_net_init+0x170/0x170 [ 966.848238] ? avc_has_extended_perms+0x1020/0x1020 [ 966.853352] ? avc_has_extended_perms+0x1020/0x1020 [ 966.858376] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 966.862883] ? lock_downgrade+0x750/0x750 [ 966.867039] ? __local_bh_enable_ip+0x159/0x2a0 [ 966.871731] ? cred_has_capability+0x162/0x2e0 [ 966.876321] ? cred_has_capability+0x1d9/0x2e0 [ 966.880910] ? selinux_inode_copy_up+0x180/0x180 [ 966.885671] ? selinux_inode_copy_up+0x180/0x180 [ 966.890443] netlink_rcv_skb+0x160/0x440 [ 966.894515] ? nfnetlink_net_init+0x170/0x170 [ 966.899021] ? netlink_ack+0xae0/0xae0 [ 966.902925] ? ns_capable_common+0x117/0x140 [ 966.907352] nfnetlink_rcv+0x1b2/0x41b [ 966.911252] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 966.916026] netlink_unicast+0x4d5/0x690 [ 966.920105] ? netlink_sendskb+0x110/0x110 [ 966.924357] netlink_sendmsg+0x717/0xcc0 [ 966.928429] ? nlmsg_notify+0x1a0/0x1a0 [ 966.932412] ? __sock_recv_ts_and_drops+0x540/0x540 [ 966.937442] ? nlmsg_notify+0x1a0/0x1a0 [ 966.941426] sock_sendmsg+0xc7/0x130 [ 966.945152] ___sys_sendmsg+0x7bb/0x8f0 [ 966.949136] ? copy_msghdr_from_user+0x440/0x440 [ 966.953895] ? find_held_lock+0x2d/0x110 [ 966.957961] ? __fget+0x386/0x570 [ 966.961429] ? lock_downgrade+0x750/0x750 [ 966.965590] ? check_preemption_disabled+0x41/0x2b0 [ 966.970618] ? __fget+0x3ad/0x570 [ 966.974085] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 966.978328] ? lock_acquire+0x170/0x3f0 [ 966.982393] ? __might_fault+0xef/0x1d0 [ 966.987158] ? __fget_light+0x1d1/0x230 [ 966.992080] __x64_sys_sendmsg+0x132/0x220 [ 966.996834] ? __sys_sendmsg+0x1b0/0x1b0 [ 967.000919] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 967.005682] ? trace_hardirqs_off_caller+0x69/0x210 [ 967.010704] ? do_syscall_64+0x21/0x670 [ 967.014688] do_syscall_64+0xf9/0x670 [ 967.018504] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 967.023696] RIP: 0033:0x45d5f9 19:37:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0xfffffff0}, 0x0) 19:37:21 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xe2000000) [ 967.026891] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 967.053956] RSP: 002b:00007fcce4303c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 967.061674] RAX: ffffffffffffffda RBX: 0000000000029680 RCX: 000000000045d5f9 [ 967.068949] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 967.076226] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 967.083584] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 967.090858] R13: 00007ffe1b999d8f R14: 00007fcce43049c0 R15: 000000000118cf4c 19:37:21 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 967.107965] warn_alloc_show_mem: 1 callbacks suppressed [ 967.107970] Mem-Info: [ 967.125890] active_anon:104222 inactive_anon:12300 isolated_anon:0 [ 967.125890] active_file:2276 inactive_file:46094 isolated_file:0 [ 967.125890] unevictable:0 dirty:224 writeback:0 unstable:0 [ 967.125890] slab_reclaimable:16618 slab_unreclaimable:255749 [ 967.125890] mapped:64764 shmem:12484 pagetables:1080 bounce:0 19:37:21 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TCSETAW(r3, 0x5407, &(0x7f00000001c0)={0xa018, 0x8, 0x1, 0x1000, 0x1b, "5c6f978378953781"}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0x100000001) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r6, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r7, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x455}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20082000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000e4ff280013000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x400000, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES64, @ANYRES32, @ANYRESHEX, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44840}, 0x4c001) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS3\x00', 0x800, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r9, 0x5000940e, &(0x7f00000013c0)={{r2}, "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"}) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) [ 967.125890] free:1078560 free_pcp:466 free_cma:0 19:37:21 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xc6000000) [ 967.246203] Node 0 active_anon:421388kB inactive_anon:49200kB active_file:9100kB inactive_file:184376kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:260256kB dirty:896kB writeback:0kB shmem:49936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 19:37:21 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 967.288047] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 967.319084] netlink: 'syz-executor.1': attribute type 19 has an invalid length. [ 967.365389] Node 0 DMA free:15812kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 967.417421] netlink: 'syz-executor.1': attribute type 19 has an invalid length. [ 967.423020] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 967.431663] Node 0 DMA32 free:517792kB min:35784kB low:44728kB high:53672kB active_anon:419800kB inactive_anon:49200kB active_file:9100kB inactive_file:184376kB unevictable:0kB writepending:896kB present:3129332kB managed:2564816kB mlocked:0kB kernel_stack:7680kB pagetables:4616kB bounce:0kB free_pcp:1776kB local_pcp:1144kB free_cma:0kB [ 967.522474] lowmem_reserve[]: 0 0 2 2 2 [ 967.526585] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 967.562182] lowmem_reserve[]: 0 0 0 0 0 [ 967.566288] Node 1 Normal free:3778152kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 967.594460] lowmem_reserve[]: 0 0 0 0 0 [ 967.598849] Node 0 DMA: 11*4kB (UE) 17*8kB (UE) 13*16kB (UE) 14*32kB (UE) 10*64kB (UE) 8*128kB (UE) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 15812kB [ 967.615173] Node 0 DMA32: 3558*4kB (UME) 1117*8kB (UME) 1530*16kB (UMEH) 1931*32kB (UMEH) 727*64kB (UME) 358*128kB (UMEH) 211*256kB (UMEH) 120*512kB (UMH) 59*1024kB (UMH) 44*2048kB (UM) 13*4096kB (UM) = 521024kB [ 967.634835] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 967.646544] Node 1 Normal: 74*4kB (UE) 376*8kB (UME) 298*16kB (UME) 61*32kB (U) 23*64kB (UME) 13*128kB (UME) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 915*4096kB (UM) = 3778152kB [ 967.663897] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 967.672823] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 967.681478] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 967.690433] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 967.699090] 21155 total pagecache pages [ 967.703059] 0 pages in swap cache [ 967.706544] Swap cache stats: add 0, delete 0, find 0/0 [ 967.711957] Free swap = 0kB [ 967.714974] Total swap = 0kB [ 967.718018] 1965979 pages RAM 19:37:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x38, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:37:22 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xe3000000) 19:37:22 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xc7000000) 19:37:22 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:22 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prctl$PR_SET_SECUREBITS(0x1c, 0x11) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r4, 0x0, 0x0, 0x63, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r5, 0x0, 0x0, 0x63, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYRESHEX=r1, @ANYRESHEX=r3, @ANYBLOB='\b', @ANYRES64=r5], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macsec0\x00', r3}) 19:37:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x40030000000000}, 0x0) [ 967.721175] 0 pages HighMem/MovableOnly [ 967.725139] 352651 pages reserved [ 967.728789] 0 pages cma reserved 19:37:22 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xe4000000) 19:37:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0xf0ffffffffffff}, 0x0) 19:37:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x58, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:37:22 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xc8000000) 19:37:22 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, &(0x7f0000000080)) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) 19:37:22 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x100000000000000}, 0x0) [ 968.182575] nla_parse: 64 callbacks suppressed [ 968.182585] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 19:37:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x200000000000000}, 0x0) 19:37:22 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x69, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) [ 968.238378] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:37:22 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xe5000000) [ 968.300886] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 19:37:22 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xc9000000) 19:37:23 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffe0}, {0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) [ 968.355423] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 968.390239] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 19:37:23 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) [ 968.403408] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 19:37:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x300000000000000}, 0x0) [ 968.482767] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 968.514904] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 968.569265] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 968.595608] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 19:37:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x85, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:37:23 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xe6000000) 19:37:23 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xca000000) 19:37:23 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x80003) 19:37:23 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x400000000000000}, 0x0) 19:37:23 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:23 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xcb000000) 19:37:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x2, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:37:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x800000000000000}, 0x0) 19:37:23 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xe7000000) 19:37:23 executing program 1: r0 = socket(0x1000000010, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) 19:37:23 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0xe00000000000000}, 0x0) 19:37:23 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xcc000000) 19:37:23 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xe8000000) 19:37:23 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xa) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0000000000000000040000000b000109000000000000000004000200"], 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) 19:37:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x5, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:37:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0xf00000000000000}, 0x0) 19:37:24 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xe9000000) 19:37:24 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:24 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xcd000000) [ 969.477661] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:37:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x3f00000000000000}, 0x0) [ 969.621786] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:37:24 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x6, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:37:24 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xce000000) 19:37:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x6000000000000000}, 0x0) 19:37:24 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xea000000) 19:37:24 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="4800000010000507e7fffcff0000000040000000", @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@gettaction={0x60, 0x32, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1ff}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x18a2c0}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) 19:37:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x8, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:37:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x9207000000000000}, 0x0) 19:37:24 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:24 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xcf000000) 19:37:24 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xeb000000) 19:37:24 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x9effffff00000000}, 0x0) 19:37:25 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x9, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:37:25 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xd0000000) 19:37:25 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xec000000) 19:37:25 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:25 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$AUDIT_TTY_GET(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f8, 0x400, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x810) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffff01009e000000000000000000", @ANYRES32=r7, @ANYBLOB="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"], 0x8d0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3400000024000022a10829bd7000fddbdf251f00", @ANYRES32=r7, @ANYBLOB="f2ff0100f1ff00000a000200060005000002000008000e0000000000"], 0x34}}, 0x4000) r8 = fcntl$dupfd(r2, 0x0, r0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f6000000", @ANYRES16=r9, @ANYBLOB="000025bd7000ffdbdf250e000000"], 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x800) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5a) 19:37:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0xf0ffffff00000000}, 0x0) 19:37:25 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xd1000000) 19:37:25 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x2, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_TYPENAME={0x13, 0xa, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 19:37:25 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:25 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xed000000) 19:37:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0xffffff7f00000000}, 0x0) [ 970.957232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=2397 comm=syz-executor.1 19:37:25 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x1700) 19:37:25 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xd2000000) 19:37:25 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xee000000) [ 971.098505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=2386 comm=syz-executor.1 19:37:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0xffffffff00000000}, 0x0) 19:37:25 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl