0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:14 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  364.132845] serio: Serial port pts7
14:21:14 executing program 3:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r3 = syz_open_pts(r2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, 0x0)
read(r3, 0x0, 0x6c00)
dup3(r3, r2, 0x0)

[  364.288923] serio: Serial port pts5
14:21:14 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:15 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  364.519461] serio: Serial port pts7
14:21:15 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:15 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:15 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:15 executing program 3:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r3 = syz_open_pts(r2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, 0x0)
read(r3, 0x0, 0x6c00)
dup3(r3, r2, 0x0)

14:21:15 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  364.694702] serio: Serial port pts2
14:21:15 executing program 3:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r3 = syz_open_pts(r2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200))
read(r3, 0x0, 0x6c00)
dup3(r3, r2, 0x0)

[  364.756905] serio: Serial port pts1
[  364.809142] serio: Serial port pts2
14:21:15 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:15 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:15 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:15 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:15 executing program 3:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r3 = syz_open_pts(r2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200))
read(r3, 0x0, 0x6c00)
dup3(r3, r2, 0x0)

[  365.260171] serio: Serial port pts5
[  365.270950] serio: Serial port pts2
14:21:15 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:16 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:16 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:16 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:16 executing program 3:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r3 = syz_open_pts(r2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200))
read(r3, 0x0, 0x6c00)
dup3(r3, r2, 0x0)

[  365.569948] serio: Serial port pts1
14:21:16 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:16 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  365.687214] serio: Serial port pts2
14:21:16 executing program 3:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r3 = syz_open_pts(r2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup3(r3, r2, 0x0)

[  365.752357] serio: Serial port pts1
[  365.848369] serio: Serial port pts2
14:21:16 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:16 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:16 executing program 3:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r3 = syz_open_pts(r2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup3(r3, r2, 0x0)

14:21:16 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  366.146735] serio: Serial port pts2
14:21:16 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  366.289731] serio: Serial port pts2
[  366.382933] serio: Serial port pts5
14:21:17 executing program 3:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r3 = syz_open_pts(r2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup3(r3, r2, 0x0)

14:21:17 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:17 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:17 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:17 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:17 executing program 3:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r3 = syz_open_pts(r2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2)
read(r3, 0x0, 0x6c00)
dup3(0xffffffffffffffff, r2, 0x0)

[  366.750534] serio: Serial port pts1
[  366.767416] serio: Serial port pts5
14:21:17 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:17 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:17 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:17 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:17 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:17 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  367.326203] serio: Serial port pts8
14:21:18 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:18 executing program 3:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r3 = syz_open_pts(r2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2)
read(r3, 0x0, 0x6c00)
dup3(0xffffffffffffffff, r2, 0x0)

14:21:18 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  367.575496] serio: Serial port pts1
14:21:18 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:18 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x0, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  367.708133] serio: Serial port pts1
[  367.718163] serio: Serial port pts5
[  367.792675] serio: Serial port pts5
14:21:18 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x0, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:18 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:18 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:18 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x0, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  368.121816] serio: Serial port pts7
14:21:18 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x0, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  368.194913] serio: Serial port pts8
14:21:18 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x0, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  368.320152] serio: Serial port pts8
14:21:18 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x0, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  368.385618] serio: Serial port pts8
14:21:19 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:19 executing program 3:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r3 = syz_open_pts(r2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2)
read(r3, 0x0, 0x6c00)
dup3(0xffffffffffffffff, r2, 0x0)

14:21:19 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:19 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  368.695302] serio: Serial port pts1
14:21:19 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  368.725722] serio: Serial port pts2
14:21:19 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  368.819699] serio: Serial port pts2
14:21:19 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  368.839996] serio: Serial port pts5
[  369.111362] serio: Serial port pts8
14:21:19 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:19 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:19 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  369.241542] serio: Serial port pts8
14:21:19 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:19 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:20 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:20 executing program 3:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r3 = syz_open_pts(r2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2)
read(r3, 0x0, 0x6c00)
dup3(r3, 0xffffffffffffffff, 0x0)

14:21:20 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  369.534248] serio: Serial port pts1
14:21:20 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, 0x0)
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:20 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, 0x0)
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:20 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  369.649992] serio: Serial port pts1
[  369.683088] serio: Serial port pts2
14:21:20 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:20 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:20 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  370.135628] serio: Serial port pts7
14:21:20 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:20 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:20 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, 0x0)
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:20 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:21 executing program 3:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r3 = syz_open_pts(r2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2)
read(r3, 0x0, 0x6c00)
dup3(r3, 0xffffffffffffffff, 0x0)

14:21:21 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  370.405833] serio: Serial port pts1
14:21:21 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:21 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, 0x0)
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  370.485114] serio: Serial port pts2
14:21:21 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:21 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:21 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:21 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:21 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef07", 0x9, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:21 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:21 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, 0x0)
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:21 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, 0x0)
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  371.225513] serio: Serial port pts5
14:21:21 executing program 3:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r3 = syz_open_pts(r2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2)
read(r3, 0x0, 0x6c00)
dup3(r3, 0xffffffffffffffff, 0x0)

14:21:21 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, 0x0)
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:21 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, 0x0)
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  371.389102] serio: Serial port pts1
14:21:22 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, 0x0)
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:22 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, 0x0)
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:22 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, 0x0)
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:22 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:22 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  371.690331] Dropped {multi|broad}cast of type= [86dd]
14:21:22 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef07", 0x9, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:22 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, 0x0)
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:22 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  371.967308] serio: Serial port pts5
14:21:22 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:22 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  372.146283] serio: Serial port pts5
[  372.230238] serio: Serial port pts1
14:21:22 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000080), 0x12)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

14:21:22 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:22 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:23 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:23 executing program 3:
rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0)
r0 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
fcntl$setownex(r1, 0xf, &(0x7f0000000280)={0x0, r0})
ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0)

[  372.454687] serio: Serial port pts2
14:21:23 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  372.606113] serio: Serial port pts2
14:21:23 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  372.763454] serio: Serial port pts7
14:21:23 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100)

[  372.877602] serio: Serial port pts1
14:21:23 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:23 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef07", 0x9, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:23 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:23 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:23 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:23 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5", 0xe, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:23 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  373.451102] serio: Serial port pts5
14:21:24 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:24 executing program 3:
r0 = socket$kcm(0x2, 0x2, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x69)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000280)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES32], 0x4, 0x5}, 0x0)

14:21:24 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5", 0xe, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:24 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:24 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:24 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:24 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000080))
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001980)={&(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x24000040}, 0x8000)
mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x0, 0x2, 0x1006, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r3 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
remap_file_pages(&(0x7f00001ae000/0x3000)=nil, 0x3000, 0x0, 0x16f, 0x100020)
write$cgroup_pid(r3, &(0x7f0000000300), 0x12)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f00000001c0)=0xc)
semget(0x1, 0x0, 0x125)

14:21:24 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, 0x0)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  373.786004] serio: Serial port pts1
[  373.815435] serio: Serial port pts7
[  373.894693] serio: Serial port pts8
14:21:24 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, 0x0)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:24 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  374.144968] audit: type=1400 audit(1583072484.692:76): avc:  denied  { map } for  pid=17096 comm="syz-executor.3" path="/dev/nullb0" dev="devtmpfs" ino=277 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=blk_file permissive=1
14:21:24 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, 0x0)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  374.246228] mmap: syz-executor.3 (17100) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt.
[  374.378569] serio: Serial port pts5
14:21:25 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5", 0xe, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:25 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:25 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200))
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:25 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:25 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200))
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:25 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200))
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  374.836654] serio: Serial port pts1
[  374.863987] serio: Serial port pts7
[  374.971384] serio: Serial port pts8
14:21:25 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:26 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:26 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:26 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000080))
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = syz_open_dev$mice(&(0x7f0000001880)='/dev/input/mice\x00', 0x0, 0x80)
sendmsg$IPSET_CMD_SWAP(r2, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001980)={&(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x24000040}, 0x8000)
mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x0)
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x0, 0x2, 0x1006, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
remap_file_pages(&(0x7f00001ae000/0x3000)=nil, 0x3000, 0x0, 0x16f, 0x100020)
write$cgroup_pid(r4, &(0x7f0000000300), 0x12)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0)
preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f00000001c0)=0xc)
semget(0x1, 0x0, 0x125)

14:21:26 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185", 0x10, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:26 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:26 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:26 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:26 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  375.703587] serio: Serial port pts1
[  375.749941] serio: Serial port pts5
[  375.884607] serio: Serial port pts7
[  375.994349] serio: Serial port pts8
14:21:26 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:26 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:26 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:26 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(0xffffffffffffffff, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  376.275699] serio: Serial port pts9
14:21:26 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:26 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(0xffffffffffffffff, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  376.362819] serio: Serial port pts9
14:21:26 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5", 0xe, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  376.515158] serio: Serial port pts1
[  376.670134] serio: Serial port pts5
14:21:27 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000080))
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = syz_open_dev$mice(&(0x7f0000001880)='/dev/input/mice\x00', 0x0, 0x80)
sendmsg$IPSET_CMD_SWAP(r2, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001980)={&(0x7f0000001640)=ANY=[@ANYBLOB="68000000060601020000000000000000010000060900020073797a300000000005000100070000000900020073797a31000000000900020073797a310000000005000100070000000900030073797a32000000000900020073797a31000000000500010007000800b1cdc42fed744af3b0521ff294e867b1138eb475a2e741f4bfa2f6b08b41ace43429763c04776bc3c516e6b0690ff759f79b4c2aa95a5d6131427954db2492cb30bc5855d184c2448f02f0a0630f8f4259aabd5740a36f7dd92a0ae0d69cb2a6ec23f03d2e396b572af311b1627573cf74fadf67f7ece16efe07c3def17703ed2ccdcf31e8fd4f64697294bf8c3aa9aef06d9af13a028841a09c5338971dbbe4fb1e765d"], 0x68}, 0x1, 0x0, 0x0, 0x24000040}, 0x8000)
mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x0)
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x0, 0x2, 0x1006, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
remap_file_pages(&(0x7f00001ae000/0x3000)=nil, 0x3000, 0x0, 0x16f, 0x100020)
write$cgroup_pid(r4, &(0x7f0000000300), 0x12)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0)
preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f00000001c0)=0xc)
semget(0x1, 0x0, 0x125)

14:21:27 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:27 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:27 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(0xffffffffffffffff, r1, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:27 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5", 0xe, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:27 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, 0xffffffffffffffff, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  377.184771] serio: Serial port pts1
[  377.259014] serio: Serial port pts1
[  377.270795] serio: Serial port pts7
14:21:27 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, 0xffffffffffffffff, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:27 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  377.350128] serio: Serial port pts1
[  377.448544] serio: Serial port pts5
14:21:28 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, 0xffffffffffffffff, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  377.624680] serio: Serial port pts8
14:21:28 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:28 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:28 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  377.842911] serio: Serial port pts8
14:21:28 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4aed12f0600000000000000", 0x1c}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

14:21:28 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:28 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5", 0xe, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:28 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:28 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:28 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:29 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x0, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  378.404345] serio: Serial port pts1
14:21:29 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x0, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  378.460828] serio: Serial port pts1
[  378.469172] serio: Serial port pts5
[  378.592642] serio: Serial port pts1
14:21:29 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:29 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x0, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  378.798939] serio: Serial port pts8
14:21:29 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:29 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  379.054580] serio: Serial port pts8
14:21:31 executing program 3:
open$dir(&(0x7f0000000440)='./file0\x00', 0x0, 0x0)
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
connect$rxrpc(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x100000004e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8)

14:21:31 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:31 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf581", 0xf, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:31 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:31 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:32 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:32 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:32 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf581", 0xf, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  381.509113] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  381.529424] serio: Serial port pts5
[  381.535676] serio: Serial port pts1
14:21:32 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:32 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:32 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4aed12f060000000000000025d86800278dcff47d010000805acf4f8f3646", 0x2f}], 0x4, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="c6"], 0x8}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

14:21:32 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf581", 0xf, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:32 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  381.916650] serio: Serial port pts7
14:21:32 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  382.044495] serio: Serial port pts7
[  382.116712] serio: Serial port pts7
14:21:32 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  382.323318] serio: Serial port pts1
14:21:32 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:32 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:33 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef07", 0x9, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:33 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef07", 0x9, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:33 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef07", 0x9, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:33 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, 0x0)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:33 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5", 0xe, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:35 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="cfabc799e411b1e623a6a749df6d5d00", 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendto$inet(r3, &(0x7f0000000000)="14885eed546ff69928d88019da678265cb", 0x20000011, 0x0, 0x0, 0x0)

14:21:35 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5", 0xe, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:35 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5", 0xe, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:35 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:35 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:35 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, 0x0)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:35 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5", 0xe, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  385.035444] serio: Serial port pts1
14:21:35 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5", 0xe, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  385.131167] serio: Serial port pts1
14:21:35 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, 0x0)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:36 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185", 0x10, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  385.463849] serio: Serial port pts8
14:21:36 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185", 0x10, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  385.579088] serio: Serial port pts8
14:21:36 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  386.009258] serio: Serial port pts1
14:21:36 executing program 3:
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
sync()

14:21:36 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbd", 0xd, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:36 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:36 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185", 0x10, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:36 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5818553", 0x11, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  386.155976] serio: Serial port pts1
[  386.175222] serio: Serial port pts1
14:21:36 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200))
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:37 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5818553", 0x11, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  386.512638] serio: Serial port pts8
14:21:37 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4aed1", 0x13}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

14:21:37 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5818553", 0x11, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:37 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

14:21:37 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbd", 0xd, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:37 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, 0x0)
read(r4, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:37 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:37 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

[  387.028215] serio: Serial port pts1
14:21:37 executing program 5:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2)
read(r2, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r2)
dup3(r2, r1, 0x0)
ioctl$int_out(r1, 0x5460, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

[  387.082027] serio: Serial port pts1
[  387.311148] serio: Serial port pts9
14:21:37 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200))
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:38 executing program 5:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc3376003639405cb4aed12f0000000000ae47a825d86900278dcff47d010000805acf4fe03652b5bf9e8e99ad050000005199615607676f8f9fc0ebf8b0b16d582c59957ab364884b575025f520755dfb4070c11b255ad5003c5d05692e664ebf68e6faa53367f05f4ad61493e0e352", 0x78}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

14:21:38 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, 0x0)
read(r4, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:38 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbd", 0xd, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:40 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x2, 0x3, 0x310, 0x150, 0x0, 0x0, 0x0, 0x0, 0x278, 0x278, 0x278, 0x278, 0x278, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xe8, 0x150, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}, @common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@unspec=@connlabel={{0x28, 'connlabel\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))

14:21:40 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:40 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5", 0xe, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

14:21:40 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200))
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:40 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, 0x0)
read(r4, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:40 executing program 3:
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000200)="da", 0x1}, {&(0x7f0000000300)="b42dfc85889125", 0x7}, {&(0x7f00000004c0)='N', 0x1}, {&(0x7f0000000500)="ff", 0x1}], 0x4}}], 0x200004c1, 0x0)

[  389.662412] cannot load conntrack support for proto=2
[  389.669458] cannot load conntrack support for proto=2
[  389.711017] serio: Serial port pts1
14:21:40 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:40 executing program 3:
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000200)="da", 0x1}, {&(0x7f0000000300)="b42dfc85889125", 0x7}, {&(0x7f00000004c0)='N', 0x1}, {&(0x7f0000000500)="ff", 0x1}], 0x4}}], 0x200004c1, 0x0)

14:21:40 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f0000de3000)={{0x4000001ff, 0x9}})

14:21:41 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f0000de3000)={{0x4000001ff, 0xa}})

14:21:41 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:41 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c000504d25a80648c63940d0224fc601200000004000400050082c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

14:21:41 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200))
read(r4, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:41 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5", 0xe, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

14:21:41 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, 0x0)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:41 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}, 0xfffffffd}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ptype\x00')
preadv(r0, &(0x7f00000017c0), 0x315, 0x800000)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)

14:21:41 executing program 5:
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=', @ANYRESDEC])
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]})
chown(0x0, 0x0, 0x0)

[  390.655340] overlayfs: failed to resolve '18446744073709551615': -2
[  390.682030] serio: Serial port pts1
14:21:41 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:41 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x82, 0x0)
io_setup(0x62, &(0x7f0000000380)=<r3=>0x0)
io_submit(r3, 0x0, 0x0)
io_submit(r3, 0x4, &(0x7f0000000440)=[&(0x7f0000000000)={0x4, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000001c0)="100000400200"/16, 0x40000010}])

14:21:41 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ptype\x00')
preadv(r0, &(0x7f00000017c0), 0x315, 0x800000)

[  390.998341] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  391.016015] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection.
14:21:41 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:41 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x82, 0x0)
io_setup(0x62, &(0x7f0000000380)=<r3=>0x0)
io_submit(r3, 0x0, 0x0)
io_submit(r3, 0x4, &(0x7f0000000440)=[&(0x7f0000000000)={0x4, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000001c0)="100000400600"/16, 0x40000010}])

14:21:41 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200))
read(r4, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:41 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ptype\x00')
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

[  391.378594] serio: Serial port pts1
14:21:42 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5", 0xe, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

14:21:42 executing program 3:
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0)
fcntl$setsig(r0, 0xa, 0x11)
fcntl$setlease(r0, 0x400, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000900)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x2000000)

14:21:42 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, 0x0)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:42 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:42 executing program 5:
prctl$PR_SET_SECUREBITS(0x1c, 0xf)
r0 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r1=>0x0}, &(0x7f0000000200)=0x5)
setresuid(0x0, r1, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x82040, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
r3 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0xa)
r5 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0xa)
setreuid(r4, r6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x1)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
fcntl$setlease(r2, 0x400, 0x2)

14:21:42 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200))
read(r4, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  391.650730] serio: Serial port pts1
14:21:42 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfe, 0x0, 0xfd, 0x40, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe(0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfd53)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0xdbe]})
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3d2, 0x4)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00')
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x48)
prctl$PR_SET_PDEATHSIG(0x1, 0x40)
ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000640))
r4 = open(0x0, 0x0, 0x0)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x0)

14:21:42 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  392.153304] serio: Serial port pts8
14:21:42 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(0xffffffffffffffff, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:42 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5", 0xe, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

14:21:43 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000000011905000000000000000000000000240001001400010008000100ac1414aa08000200e00000000c0002000500010000000000240002000c00020005000100000000001400010008000100000000000800020000000000080007"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53)
splice(r0, 0x0, r2, 0x0, 0x40003e, 0x0)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
open(0x0, 0x0, 0x0)
mlockall(0x1)
mbind(&(0x7f000078b000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000180), 0x6, 0x3)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000080)=0x20)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0)
ioctl$RTC_EPOCH_SET(r3, 0x400c744d, 0x8048000)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

14:21:43 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, 0x0)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  392.507157] serio: Serial port pts1
14:21:43 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:43 executing program 3:
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0)
fcntl$setsig(r0, 0xa, 0x11)
fcntl$setlease(r0, 0x400, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000900)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x2000000)

[  392.844239] serio: Serial port pts5
14:21:43 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(0xffffffffffffffff, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  393.509946] serio: Serial port pts1
14:21:44 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5", 0xe, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

14:21:44 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:44 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200))
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  393.937915] serio: Serial port pts5
14:21:44 executing program 5:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x82, 0x0)
io_setup(0x62, &(0x7f0000000380)=<r3=>0x0)
io_submit(r3, 0x0, 0x0)
io_submit(r3, 0x4, &(0x7f0000000440)=[&(0x7f0000000000)={0x4, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000001c0)="100000400300"/16, 0x40000010}])

14:21:44 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(0xffffffffffffffff, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:45 executing program 5:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x40)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x40001005}, 0x8)
close(r3)
timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x5000000000016)

[  394.530810] serio: Serial port pts1
14:21:45 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5", 0xe, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

14:21:45 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

14:21:45 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:45 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200))
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:45 executing program 5:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0)
r1 = socket(0x29, 0x80002, 0x0)
sendfile(r1, r0, 0x0, 0x6000002000b00)

[  394.951776] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
14:21:45 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5", 0xe, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[  394.999107] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
14:21:45 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, 0xffffffffffffffff, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:45 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028c7ae65099fc397e3d31e4351b96bcb9024c32a7761d2bafe91e5c6396058a41bd754f8fafdf03bb32a4484eba5c21ec3fb10ac6efb4aa7403632c4d24e54f4f44f08f9c79f44bc90444caf5d48c4903bf8bbac59cc4b7d1cece174bd26dcfaa23bb965417037739c3e77900e868c3a0324f41f35cf67b6ea011bdf9afc1c39063fdec9281f16796efa6d9d53c044cbafc017dbc5949a7159eb058e406bc2db60cdbaa4f7c391265ef2c7940219a069af10a3dfdff14f621aa0e1aaffcc518b062f7af10ce9883d048d68bd4627f672e66f9b75f5015e91d79119bd92361eea13903afb60d7614e164f2218a0cf379811c56e61714012534bc9847202ad62340cdf62c690836313924f56ad048b62fcfca0a48934df4ea0d84557e6525f4c6a95b66c8a222f7bfb07c5c4e39b09361deb58a36715dfe9d038f1cbba3c634b1f95907c4d58eaca29d7334e4956e3c603ab84275917aa344b565020"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

14:21:46 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfe, 0x0, 0xfd, 0x40, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe(0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfd53)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0xdbe]})
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3d2, 0x4)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00')
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x48)
prctl$PR_SET_PDEATHSIG(0x1, 0x40)
ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000640))
r4 = open(0x0, 0x0, 0x0)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1c000)

[  395.473711] serio: Serial port pts1
[  395.584040] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  395.665171] serio: Serial port pts8
14:21:46 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
dup3(r4, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:46 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

14:21:46 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200))
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:46 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfe, 0x0, 0xfd, 0x40, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe(0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfd53)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0xdbe]})
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3d2, 0x4)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00')
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x48)
prctl$PR_SET_PDEATHSIG(0x1, 0x40)
ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000640))
r4 = open(0x0, 0x0, 0x0)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1c000)

[  396.098573] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
14:21:46 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5", 0xe, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

14:21:46 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

14:21:46 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, 0xffffffffffffffff, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  396.564479] serio: Serial port pts7
[  396.684070] serio: Serial port pts8
[  396.743225] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
14:21:47 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(0xffffffffffffffff, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:47 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028c7ae65099fc397e3d31e4351b96bcb9024c32a7761d2bafe91e5c6396058a41bd754f8fafdf03bb32a4484eba5c21ec3fb10ac6efb4aa7403632c4d24e54f4f44f08f9c79f44bc90444caf5d48c4903bf8bbac59cc4b7d1cece174bd26dcfaa23bb965417037739c3e77900e868c3a0324f41f35cf67b6ea011bdf9afc1c39063fdec9281f16796efa6d9d53c044cbafc017dbc5949a7159eb058e406bc2db60cdbaa4f7c391265ef2c7940219a069af10a3dfdff14f621aa0e1aaffcc518b062f7af10ce9883d048d68bd4627f672e66f9b75f5015e91d79119bd92361eea13903afb60d7614e164f2218a0cf379811c56e61714012534bc9847202ad62340cdf62c690836313924f56ad048b62fcfca0a48934df4ea0d84557e6525f4c6a95b66c8a222f7bfb07c5c4e39b09361deb58a36715dfe9d038f1cbba3c634b1f95907c4d58eaca29d7334e4956e3c603ab84275917aa344b565020"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

14:21:47 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:47 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53)
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
open(0x0, 0x0, 0x0)
mlockall(0x1)
mbind(&(0x7f000078b000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000180), 0x6, 0x3)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000080)=0x20)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0)
ioctl$RTC_EPOCH_SET(r4, 0x400c744d, 0x8048000)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  397.209919] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
14:21:47 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(r4, 0x0, 0x6c00)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5", 0xe, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

14:21:47 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, 0xffffffffffffffff, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:48 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

[  397.725838] serio: Serial port pts7
[  397.730568] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
14:21:48 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

[  397.848293] serio: Serial port pts8
14:21:48 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(0xffffffffffffffff, r3, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:48 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  398.235260] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
14:21:49 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

14:21:49 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:49 executing program 4:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
pipe(0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
open(0x0, 0x0, 0x0)
mbind(&(0x7f000078b000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000180), 0x6, 0x3)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r0, 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00')
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0)
r1 = open(0x0, 0x0, 0x0)
gettid()
fcntl$setownex(r1, 0xf, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x81)
close(r2)

[  398.818706] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
14:21:49 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

[  398.956305] serio: Serial port pts7
14:21:49 executing program 4:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfe, 0x0, 0xdd, 0x40, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x7fff}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe(0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfd53)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b77}, 0x0, 0xfffffffd, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@empty, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe4)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/bus/input/devices\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@remote, @in6=@dev}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xe4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x1, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xdbe, 0x0, 0xafa4]})
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3d2, 0x4)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00')
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x80000, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x80000000, r6, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x48)
ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000640))
r7 = open(0x0, 0x0, 0x0)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x0)

[  399.256319] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
14:21:50 executing program 4:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x4, 0x0, 0x0, &(0x7f0000000140)=0x2, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)

14:21:50 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

14:21:50 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:50 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:50 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfd53)
pipe(&(0x7f0000000180))
open(0x0, 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030fe7cb43d76ad0a80ced6504df6ead74ed8a60a"], 0x26)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x81)
close(r0)

14:21:50 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:50 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
close(r0)
socket$inet(0x2, 0x3, 0xfd)
io_setup(0x3, &(0x7f00000001c0)=<r1=>0x0)
io_submit(r1, 0x15e853d1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xffffffda}])

14:21:50 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028c7ae65099fc397e3d31e4351b96bcb9024c32a7761d2bafe91e5c6396058a41bd754f8fafdf03bb32a4484eba5c21ec3fb10ac6efb4aa7403632c4d24e54f4f44f08f9c79f44bc90444caf5d48c4903bf8bbac59cc4b7d1cece174bd26dcfaa23bb965417037739c3e77900e868c3a0324f41f35cf67b6ea011bdf9afc1c39063fdec9281f16796efa6d9d53c044cbafc017dbc5949a7159eb058e406bc2db60cdbaa4f7c391265ef2c7940219a069af10a3dfdff14f621aa0e1aaffcc518b062f7af10ce9883d048d68bd4627f672e66f9b75f5015e91d79119bd92361eea13903afb60d7614e164f2218a0cf379811c56e61714012534bc9847202ad62340cdf62c690836313924f56ad048b62fcfca0a48934df4ea0d84557e6525f4c6a95b66c8a222f7bfb07c5c4e39b09361deb58a36715dfe9d038f1cbba3c634b1f95907c4d58eaca29d7334e4956e3c603ab84275917aa344b565020"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

[  400.098700] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
14:21:50 executing program 4:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfe, 0x0, 0xfd, 0x40, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe(0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfd53)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0xdbe]})
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3d2, 0x4)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00')
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x48)
prctl$PR_SET_PDEATHSIG(0x1, 0x40)
ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000640))
open(0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1c000)

14:21:50 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000000011905000000000000000000000000240001001400010008000100ac1414aa08000200e00000000c000200"], 0x1}}, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfd53)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x40003e, 0x0)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
open(0x0, 0x0, 0x0)
mlockall(0x1)
mbind(&(0x7f000078b000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000180), 0x6, 0x3)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000080)=0x20)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0)
ioctl$RTC_EPOCH_SET(r1, 0x400c744d, 0x8048000)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

14:21:50 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:51 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:51 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

[  400.466330] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  400.732468] serio: Serial port pts5
[  400.749846] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
14:21:51 executing program 4:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
syz_genetlink_get_family_id$ethtool(0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0)
ioctl$sock_SIOCADDRT(r1, 0x890b, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x14)
r11 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200008d0}, 0x4)
write$P9_RVERSION(r2, 0x0, 0x0)
dup(r2)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x0)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x0)
r13 = dup(r12)
write$FUSE_BMAP(r13, 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
pipe2$9p(0x0, 0x0)
dup(0xffffffffffffffff)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r14=>0xffffffffffffffff}, 0x0)
r15 = dup(r14)
write$FUSE_BMAP(r15, &(0x7f0000000100)={0x18}, 0x18)
fcntl$addseals(r0, 0x409, 0x0)

14:21:51 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:51 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

14:21:51 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  401.177257] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  401.194872] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  401.244653] audit: type=1400 audit(1583072511.812:77): avc:  denied  { create } for  pid=18204 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_rdma_socket permissive=1
14:21:51 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

[  401.304840] serio: Serial port pts7
14:21:51 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x0, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  401.652489] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  401.704006] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  401.717440] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
14:21:52 executing program 4:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
syz_genetlink_get_family_id$ethtool(0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0)
ioctl$sock_SIOCADDRT(r1, 0x890b, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x14)
r11 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200008d0}, 0x4)
write$P9_RVERSION(r2, 0x0, 0x0)
dup(r2)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x0)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x0)
r13 = dup(r12)
write$FUSE_BMAP(r13, 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
pipe2$9p(0x0, 0x0)
dup(0xffffffffffffffff)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r14=>0xffffffffffffffff}, 0x0)
r15 = dup(r14)
write$FUSE_BMAP(r15, &(0x7f0000000100)={0x18}, 0x18)
fcntl$addseals(r0, 0x409, 0x0)

[  401.798116] serio: Serial port pts5
14:21:52 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028c7ae65099fc397e3d31e4351b96bcb9024c32a7761d2bafe91e5c6396058a41bd754f8fafdf03bb32a4484eba5c21ec3fb10ac6efb4aa7403632c4d24e54f4f44f08f9c79f44bc90444caf5d48c4903bf8bbac59cc4b7d1cece174bd26dcfaa23bb965417037739c3e77900e868c3a0324f41f35cf67b6ea011bdf9afc1c39063fdec9281f16796efa6d9d53c044cbafc017dbc5949a7159eb058e406bc2db60cdbaa4f7c391265ef2c7940219a069af10a3dfdff14f621aa0e1aaffcc518b062f7af10ce9883d048d68bd4627f672e66f9b75f5015e91d79119bd92361eea13903afb60d7614e164f2218a0cf379811c56e61714012534bc9847202ad62340cdf62c690836313924f56ad048b62fcfca0a48934df4ea0d84557e6525f4c6a95b66c8a222f7bfb07c5c4e39b09361deb58a36715dfe9d038f1cbba3c634b1f95907c4d58eaca29d7334e4956e3c603ab84275917aa344b565020"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

[  402.079430] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  402.108483] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
14:21:53 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
pipe(&(0x7f0000000180))
mbind(&(0x7f000078b000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000180), 0x0, 0x3)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
dup(0xffffffffffffffff)
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00')
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x20000081)
open(0x0, 0x0, 0x0)
r0 = gettid()
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000280)={0x0, r0})
perf_event_open(&(0x7f0000000440)={0x4, 0x70, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x81)
close(r1)

14:21:53 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(0xffffffffffffffff, r3, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:53 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x0, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:53 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

14:21:53 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:53 executing program 4:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
futex(&(0x7f0000000080), 0x4, 0x0, 0x0, &(0x7f0000000140), 0x0)
clock_adjtime(0x0, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

14:21:53 executing program 4:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket$caif_seqpacket(0x25, 0x5, 0x4)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000))
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
openat$vsock(0xffffffffffffff9c, 0x0, 0x940, 0x0)

14:21:53 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

[  402.685072] serio: Serial port pts1
14:21:53 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$RTC_PIE_ON(r0, 0x7005)
r1 = dup(0xffffffffffffffff)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x3}}, 0x30)
r2 = syz_open_procfs(0x0, &(0x7f0000000540)='net/ip6_tables_matches\x00')
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="202c000380080002000000000008000100000000000800e5ffffff0000080001000500000008000100000000000800068004000200"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x8004)
sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000680)={&(0x7f0000001000)=ANY=[@ANYBLOB="e4018000", @ANYRES16=r3, @ANYBLOB="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"], 0x1e4}, 0x1, 0x0, 0x0, 0x841}, 0x8000)
io_setup(0x5, &(0x7f0000000180)=<r4=>0x0)
r5 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8)
writev(r5, &(0x7f0000001900)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8)
io_submit(r4, 0x1, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x3, r5, &(0x7f00000001c0)="bfc311e269e5ac77582ea4d5eb77fed3d88d731470445d706002c6de8d458f2eb27d555cc9ca5326faab2887185eead0c3d3fed4f5e97c171ab685b5f52eb81a61c6641fe46c64ab294096cda3b3ff2eff6e928960adb1ea8df6374e60435b", 0x5f, 0x0, 0x0, 0x1}])
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0xfffffff8, 0x81, 0x1ff, 0x9, 0x8f, 0x200})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r1, r6}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000400)='/dev/urandom\x00', 0x100, 0x0)
r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000800)='/dev/bsg\x00', 0x0, 0x0)
waitid$P_PIDFD(0x3, r7, &(0x7f0000000300), 0x2, 0xffffffffffffffff)
perf_event_open(&(0x7f00000004c0)={0x1, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
r9 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r8, r9)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000840)={&(0x7f0000000380)='./file0\x00', r8}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)
openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
dup(0xffffffffffffffff)

14:21:53 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x0, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:53 executing program 4:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfe, 0x0, 0xfd, 0x40, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe(0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfd53)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0xdbe]})
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3d2, 0x4)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00')
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x48)
prctl$PR_SET_PDEATHSIG(0x1, 0x40)
ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000640))
open(0x0, 0x0, 0x0)

14:21:53 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028c7ae65099fc397e3d31e4351b96bcb9024c32a7761d2bafe91e5c6396058a41bd754f8fafdf03bb32a4484eba5c21ec3fb10ac6efb4aa7403632c4d24e54f4f44f08f9c79f44bc90444caf5d48c4903bf8bbac59cc4b7d1cece174bd26dcfaa23bb965417037739c3e77900e868c3a0324f41f35cf67b6ea011bdf9afc1c39063fdec9281f16796efa6d9d53c044cbafc017dbc5949a7159eb058e406bc2db60cdbaa4f7c391265ef2c7940219a069af10a3dfdff14f621aa0e1aaffcc518b062f7af10ce9883d048d68bd4627f672e66f9b75f5015e91d79119bd92361eea13903afb60d7614e164f2218a0cf379811c56e61714012534bc9847202ad62340cdf62c690836313924f56ad048b62fcfca0a48934df4ea0d84557e6525f4c6a95b66c8a222f7bfb07c5c4e39b09361deb58a36715dfe9d038f1cbba3c634b1f95907c4d58eaca29d7334e4956e3c603ab84275917aa344b565020"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

[  403.065427] serio: Serial port pts7
14:21:53 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(0xffffffffffffffff, r3, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:53 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:53 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

14:21:54 executing program 4:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
syz_genetlink_get_family_id$ethtool(0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x14)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB, @ANYBLOB="0000b2000000"], 0x4}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES32], 0x1}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, 0x0, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="00000000000000002800120009000100766574680000000018000200", @ANYPTR, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2ceb3504df6ead74ed8a60ab563e98b592a3d27a7082dbb78ab0200ba3da8b7f56445ab100621d6234555c08dc5404738f10004fd1b3786cd89e9b08e3f5972fe9ca1e86323e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d000000000000000000000083e37f932a6b342390e27b62767e1dd5abdba8afe51cf610691e711b8e34b1cd3e381a3acaecbbbe3aef8276ad68f0ba06d89dbb3b8ed6"], 0x15)
dup(r1)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x0)
r12 = dup(r11)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r12, &(0x7f00000000c0)={0x14c}, 0x137)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r13=>0xffffffffffffffff}, 0x0)
r14 = dup(r13)
write$FUSE_BMAP(r14, &(0x7f0000000100)={0x18}, 0x18)

[  403.586622] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support!
[  403.670505] serio: Serial port pts5
14:21:54 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, 0x0)
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  403.769224] EXT4-fs (loop5): bad geometry: block count 580964351930795064 exceeds size of device (66048 blocks)
[  404.173342] serio: Serial port pts7
14:21:55 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(0xffffffffffffffff, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:55 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

14:21:55 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f0000000580)={'syz1'}, 0x4)
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000540), 0x4)
recvmmsg(r1, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

14:21:55 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioperm(0x5, 0x1, 0x9)
wait4(0x0, 0x0, 0x80000000, 0x0)
r3 = getpid()
tkill(r3, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@ipv4={[], [], @empty}, @in=@multicast2}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe4)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0xfb, 0x3]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:21:55 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(0xffffffffffffffff, r3, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:55 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

14:21:55 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, 0x0)
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:55 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00')
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4cb]})
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3d2, 0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00')
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:21:55 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

[  404.737577] serio: Serial port pts1
14:21:55 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)

14:21:55 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, 0x0)
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:55 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

14:21:55 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4cb]})
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3d2, 0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00')
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  405.176301] serio: Serial port pts7
14:21:56 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(0xffffffffffffffff, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:56 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(0xffffffffffffffff, r3, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  405.454683] nla_parse: 11 callbacks suppressed
[  405.454689] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
14:21:56 executing program 4:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r3 = getpid()
tkill(r3, 0x9)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@ipv4={[], [], @empty}, @in=@multicast2}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe4)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0xfb, 0x3]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80000000000]})
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c00), 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:21:56 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028c7ae65099fc397e3d31e4351b96bcb9024c32a7761d2bafe91e5c6396058a41bd754f8fafdf03bb32a4484eba5c21ec3fb10ac6efb4aa7403632c4d24e54f4f44f08f9c79f44bc90444caf5d48c4903bf8bbac59cc4b7d1cece174bd26dcfaa23bb965417037739c3e77900e868c3a0324f41f35cf67b6ea011bdf9afc1c39063fdec9281f16796efa6d9d53c044cbafc017dbc5949a7159eb058e406bc2db60cdbaa4f7c391265ef2c7940219a069af10a3dfdff14f621aa0e1aaffcc518b062f7af10ce9883d048d68bd4627f672e66f9b75f5015e91d79119bd92361eea13903afb60d7614e164f2218a0cf379811c56e61714012534bc9847202ad62340cdf62c690836313924f56ad048b62fcfca0a48934df4ea0d84557e6525f4c6a95b66c8a222f7bfb07c5c4e39b09361deb58a36715dfe9d038f1cbba3c634b1f95907c4d58eaca29d7334e4956e3c603ab84275917aa344b565020"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

14:21:56 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/shm\x00', 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth1_to_team\x00', 0x200})
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000600)={0xa, 0x4e20, 0x1000000, @local, 0x4}, 0x1c)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c)
r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(r1, r2, 0x0, 0xedc0)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(0x0)
r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x8040, 0x0)
getpeername$inet6(r4, &(0x7f0000000680)={0xa, 0x0, 0x0, @mcast2}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x68, r3, 0x0, 0x0, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={[], [], @empty}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}]}, 0x68}}, 0x4000)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x4040004)
pipe(0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
close(0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000740)=@routing={0x0, 0x2, 0x0, 0x1, 0x0, [@mcast2]}, 0x18)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="74000000000119050000000000000000000000002400010014"], 0x1}}, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x40003e, 0x0)

[  405.758713] serio: Serial port pts5
14:21:56 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x0, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  406.001220] syz-executor.4: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
[  406.072668] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  406.095586] syz-executor.4 cpuset=syz4 mems_allowed=0-1
[  406.124572] CPU: 0 PID: 18461 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0
[  406.132870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  406.142239] Call Trace:
[  406.144901]  dump_stack+0x13e/0x194
[  406.148611]  warn_alloc.cold+0x96/0x1af
[  406.152605]  ? zone_watermark_ok_safe+0x280/0x280
[  406.157555]  ? wait_for_completion+0x390/0x390
[  406.162164]  __alloc_pages_slowpath+0x2114/0x26c0
[  406.167157]  ? warn_alloc+0xf0/0xf0
[  406.170821]  ? find_held_lock+0x2d/0x110
[  406.174952]  ? fs_reclaim_acquire+0x10/0x10
[  406.179301]  __alloc_pages_nodemask+0x5d3/0x700
[  406.184079]  ? rcu_read_lock_sched_held+0x10a/0x130
[  406.189125]  ? __alloc_pages_nodemask+0x5e0/0x700
[  406.194082]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  406.199184]  alloc_pages_current+0xe7/0x1e0
[  406.203527]  kvm_mmu_create+0xd1/0x1c0
[  406.207436]  kvm_arch_vcpu_init+0x28b/0x8b0
[  406.211964]  ? alloc_pages_current+0xef/0x1e0
[  406.216557]  kvm_vcpu_init+0x26d/0x360
[  406.220608]  vmx_create_vcpu+0xf3/0x2900
[  406.224687]  ? __mutex_unlock_slowpath+0x75/0x780
[  406.229725]  ? futex_wake+0x11c/0x3d0
[  406.233651]  ? handle_wrmsr+0x6c0/0x6c0
[  406.237648]  kvm_vm_ioctl+0x49c/0x1430
[  406.241552]  ? __lock_acquire+0x5f7/0x4620
[  406.245812]  ? kvm_vcpu_release+0xa0/0xa0
[  406.249972]  ? trace_hardirqs_on+0x10/0x10
[  406.254226]  ? trace_hardirqs_on+0x10/0x10
[  406.258569]  ? save_trace+0x290/0x290
[  406.262457]  ? __might_fault+0x104/0x1b0
[  406.266547]  ? kvm_vcpu_release+0xa0/0xa0
[  406.270884]  do_vfs_ioctl+0x75a/0xfe0
[  406.274755]  ? selinux_file_mprotect+0x5c0/0x5c0
[  406.279568]  ? ioctl_preallocate+0x1a0/0x1a0
[  406.284079]  ? security_file_ioctl+0x76/0xb0
[  406.288505]  ? security_file_ioctl+0x83/0xb0
[  406.292932]  SyS_ioctl+0x7f/0xb0
[  406.296422]  ? do_vfs_ioctl+0xfe0/0xfe0
[  406.300434]  do_syscall_64+0x1d5/0x640
[  406.304338]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  406.309650] RIP: 0033:0x45c479
[  406.312835] RSP: 002b:00007f6628db1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  406.320558] RAX: ffffffffffffffda RBX: 00007f6628db26d4 RCX: 000000000045c479
[  406.327930] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005
[  406.335212] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000
[  406.342495] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  406.350052] R13: 000000000000038f R14: 00000000004c5c5b R15: 000000000076bfcc
[  406.364022] Mem-Info:
[  406.394617] active_anon:1334416 inactive_anon:193 isolated_anon:0
[  406.394617]  active_file:116 inactive_file:784 isolated_file:0
[  406.394617]  unevictable:5819 dirty:21 writeback:13 unstable:0
[  406.394617]  slab_reclaimable:15695 slab_unreclaimable:117294
[  406.394617]  mapped:53975 shmem:249 pagetables:19923 bounce:0
[  406.394617]  free:26309 free_pcp:455 free_cma:0
14:21:57 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(0xffffffffffffffff, r3, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:21:57 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

14:21:57 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(0xffffffffffffffff, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  406.598415] serio: Serial port pts1
14:21:57 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000180))
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
mlockall(0x1)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x0)
close(r1)

14:21:57 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x0, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  406.707410] Node 0 active_anon:1937084kB inactive_anon:748kB active_file:444kB inactive_file:1020kB unevictable:7708kB isolated(anon):0kB isolated(file):0kB mapped:213244kB dirty:8kB writeback:96kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1001472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  406.762243] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  406.856483] serio: Serial port pts5
14:21:57 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(0xffffffffffffffff, r3, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  407.038088] Node 1 active_anon:3406316kB inactive_anon:24kB active_file:3572kB inactive_file:3564kB unevictable:15568kB isolated(anon):0kB isolated(file):144kB mapped:7796kB dirty:168kB writeback:20kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  407.126198] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4704kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  407.165995] lowmem_reserve[]: 0 2557 2557 2557 2557
[  407.175637] Node 0 DMA32 free:26984kB min:36272kB low:45340kB high:54408kB active_anon:1939440kB inactive_anon:748kB active_file:72kB inactive_file:56kB unevictable:7708kB writepending:92kB present:3129332kB managed:2621272kB mlocked:7708kB kernel_stack:9824kB pagetables:23036kB bounce:0kB free_pcp:260kB local_pcp:120kB free_cma:0kB
[  407.217478] lowmem_reserve[]: 0 0 0 0 0
[  407.224907] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  407.296382] lowmem_reserve[]: 0 0 0 0 0
[  407.308760] Node 1 Normal free:54384kB min:53612kB low:67012kB high:80412kB active_anon:3408200kB inactive_anon:20kB active_file:576kB inactive_file:652kB unevictable:18088kB writepending:172kB present:3932160kB managed:3870192kB mlocked:18088kB kernel_stack:18688kB pagetables:57084kB bounce:0kB free_pcp:384kB local_pcp:264kB free_cma:0kB
[  407.340652] lowmem_reserve[]: 0 0 0 0 0
[  407.345712] Node 0 DMA: 2*4kB (M) 1*8kB (M) 1*16kB (M) 8*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10336kB
[  407.355215] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=
[  407.361667] Node 0 
[  407.371393] (null)
[  407.374584] DMA32: 
[  407.374667] ,  order=1, oom_score_adj=1000
[  407.376858] 25*4kB 
[  407.379179] syz-executor.5 cpuset=
[  407.383510] (UME) 12*8kB (UME) 1144*16kB (UME) 276*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27332kB
[  407.383563] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 
[  407.390266] syz5
[  407.402907] 0*4096kB = 0kB
[  407.415524]  mems_allowed=0-1
[  407.415761] Node 1 
[  407.419008] CPU: 1 PID: 18508 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0
[  407.419435] Normal: 
[  407.421247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  407.421251] Call Trace:
[  407.421268]  dump_stack+0x13e/0x194
[  407.421282]  dump_header+0x178/0x6d4
[  407.421292]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  407.421301]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  407.421310]  ? ___ratelimit+0x50/0x519
[  407.421321]  oom_kill_process.cold+0x10/0xae3
[  407.421332]  ? lock_downgrade+0x6e0/0x6e0
[  407.421346]  out_of_memory+0x2d5/0x1110
[  407.421359]  ? oom_killer_disable+0x1c0/0x1c0
[  407.421369]  ? mutex_trylock+0x152/0x1a0
[  407.421380]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  407.421400]  ? warn_alloc+0xf0/0xf0
[  407.421409]  ? find_held_lock+0x2d/0x110
[  407.421418]  ? fs_reclaim_acquire+0x10/0x10
[  407.421436]  __alloc_pages_nodemask+0x5d3/0x700
[  407.434049] 99*4kB 
[  407.441018]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  407.441027]  ? find_held_lock+0x2d/0x110
[  407.441043]  ? cache_grow_begin+0x32d/0x410
[  407.441053]  cache_grow_begin+0x7b/0x410
[  407.441131]  ? __cpuset_node_allowed+0xfa/0x450
[  407.441143]  fallback_alloc+0x205/0x2b0
[  407.441156]  kmem_cache_alloc+0x1ea/0x770
[  407.441176]  getname_flags+0xc8/0x560
[  407.444287] (UME) 
[  407.447572]  do_sys_open+0x1c4/0x3f0
[  407.447586]  ? filp_open+0x60/0x60
[  407.447619]  ? SyS_clock_settime+0x1a0/0x1a0
[  407.447632]  ? do_syscall_64+0x4c/0x640
[  407.451936] 54*8kB 
[  407.456450]  ? SyS_open+0x30/0x30
[  407.456468]  do_syscall_64+0x1d5/0x640
[  407.456484]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  407.456492] RIP: 0033:0x45c479
[  407.456496] RSP: 002b:00007f2486e46c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  407.456505] RAX: ffffffffffffffda RBX: 00007f2486e476d4 RCX: 000000000045c479
[  407.456510] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c
[  407.456514] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  407.456518] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  407.456523] R13: 00000000000007a4 R14: 00000000004ca159 R15: 000000000076bf2c
[  407.463910] Mem-Info:
[  407.488434] serio: Serial port pts1
[  407.667398] (UMEH) 37*16kB (UMEH) 109*32kB (UMEH) 90*64kB (UMEH) 2*128kB (UM) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 2*2048kB (UM) 9*4096kB (M) = 54188kB
[  407.710603] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  407.730726] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  407.767811] active_anon:1335890 inactive_anon:192 isolated_anon:0
[  407.767811]  active_file:104 inactive_file:324 isolated_file:34
[  407.767811]  unevictable:6819 dirty:26 writeback:19 unstable:0
[  407.767811]  slab_reclaimable:15732 slab_unreclaimable:117054
[  407.767811]  mapped:53723 shmem:249 pagetables:20032 bounce:0
[  407.767811]  free:24723 free_pcp:386 free_cma:0
[  407.772809] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  407.811600] Node 0 active_anon:1943960kB inactive_anon:748kB active_file:44kB inactive_file:24kB unevictable:7708kB isolated(anon):0kB isolated(file):24kB mapped:212440kB dirty:60kB writeback:48kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1001472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  407.876310] Node 1 active_anon:3399800kB inactive_anon:20kB active_file:2120kB inactive_file:2324kB unevictable:22368kB isolated(anon):0kB isolated(file):176kB mapped:4952kB dirty:144kB writeback:28kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  407.945450] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4704kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  407.950178] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  407.974086] lowmem_reserve[]:
[  407.982168] 2189 total pagecache pages
[  407.985784]  0
[  407.989441] 0 pages in swap cache
[  407.989529]  2557
[  407.991480] Swap cache stats: add 0, delete 0, find 0/0
[  407.995306]  2557
[  407.997256] Free swap  = 0kB
[  408.006978]  2557 2557
[  408.008200] Total swap = 0kB
[  408.010655] Node 0 DMA32 free:27720kB min:36272kB low:45340kB high:54408kB active_anon:1939256kB inactive_anon:748kB active_file:44kB inactive_file:24kB unevictable:7708kB writepending:0kB present:3129332kB managed:2621272kB mlocked:7708kB kernel_stack:9728kB pagetables:23040kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  408.013972] 1965979 pages RAM
[  408.046685] 0 pages HighMem/MovableOnly
[  408.048626] lowmem_reserve[]:
[  408.051305] 339049 pages reserved
[  408.058663] 0 pages cma reserved
[  408.066886]  0 0 0 0 0
[  408.072339] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  408.099869] lowmem_reserve[]: 0 0 0 0 0
[  408.109533] Node 1 Normal free:55816kB min:53612kB low:67012kB high:80412kB active_anon:3399876kB inactive_anon:20kB active_file:1096kB inactive_file:1028kB unevictable:24176kB writepending:12kB present:3932160kB managed:3870192kB mlocked:24176kB kernel_stack:18624kB pagetables:57072kB bounce:0kB free_pcp:716kB local_pcp:224kB free_cma:0kB
[  408.207749] lowmem_reserve[]: 0 0 0 0 0
[  408.211947] Node 0 DMA: 2*4kB (M) 1*8kB (M) 1*16kB (M) 8*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10336kB
[  408.246113] Node 0 DMA32: 11*4kB (UM) 40*8kB (UM) 1164*16kB (UME) 284*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28076kB
[  408.268917] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  408.279779] Node 1 Normal: 101*4kB (UMEH) 97*8kB (UMEH) 39*16kB (UMEH) 116*32kB (UMEH) 89*64kB (UMH) 2*128kB (UM) 2*256kB (ME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 9*4096kB (M) = 53964kB
[  408.299216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  408.315381] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  408.333793] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  408.347202] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  408.378017] 1605 total pagecache pages
[  408.384290] 0 pages in swap cache
[  408.387793] Swap cache stats: add 0, delete 0, find 0/0
[  408.406434] Free swap  = 0kB
[  408.409567] Total swap = 0kB
[  408.418240] 1965979 pages RAM
[  408.425344] 0 pages HighMem/MovableOnly
[  408.429437] 339049 pages reserved
[  408.438656] 0 pages cma reserved
[  408.468219] Out of memory: Kill process 17920 (syz-executor.5) score 1008 or sacrifice child
[  408.479736] Killed process 17920 (syz-executor.5) total-vm:74964kB, anon-rss:18032kB, file-rss:40100kB, shmem-rss:0kB
[  408.547312] oom_reaper: reaped process 17920 (syz-executor.5), now anon-rss:18016kB, file-rss:5284kB, shmem-rss:0kB
[  408.599522] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null),  order=0, oom_score_adj=1000
[  408.694689] syz-executor.1 cpuset=syz1 mems_allowed=0-1
[  408.724901] CPU: 0 PID: 18513 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0
[  408.732846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  408.742209] Call Trace:
[  408.744815]  dump_stack+0x13e/0x194
[  408.748452]  dump_header+0x178/0x6d4
[  408.752167]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  408.757185]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  408.762296]  ? ___ratelimit+0x50/0x519
[  408.766189]  oom_kill_process.cold+0x10/0xae3
[  408.770698]  ? lock_downgrade+0x6e0/0x6e0
[  408.774859]  out_of_memory+0x2d5/0x1110
[  408.778834]  ? oom_killer_disable+0x1c0/0x1c0
[  408.783333]  ? mutex_trylock+0x152/0x1a0
[  408.787397]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  408.792244]  ? warn_alloc+0xf0/0xf0
[  408.795866]  __alloc_pages_nodemask+0x5d3/0x700
[  408.800532]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  408.805554]  ? lock_downgrade+0x6e0/0x6e0
[  408.809706]  alloc_pages_current+0xe7/0x1e0
[  408.814032]  __page_cache_alloc+0x245/0x3d0
[  408.818349]  filemap_fault+0xc21/0x1c30
[  408.822329]  ? __lock_page_or_retry+0x8a0/0x8a0
[  408.827001]  ? lock_acquire+0x170/0x3f0
[  408.831055]  ? ext4_filemap_fault+0x7c/0xb0
[  408.835497]  ext4_filemap_fault+0x84/0xb0
[  408.839992]  __do_fault+0xfa/0x380
[  408.843534]  __handle_mm_fault+0x22e9/0x3280
[  408.848893]  ? copy_page_range+0x1d70/0x1d70
[  408.853321]  ? find_held_lock+0x2d/0x110
[  408.857391]  handle_mm_fault+0x288/0x7a0
[  408.861461]  __do_page_fault+0x4bc/0xb40
[  408.865515]  ? vmalloc_fault+0xdf0/0xdf0
[  408.869579]  ? do_page_fault+0x60/0x4f2
[  408.873544]  ? page_fault+0x2f/0x50
[  408.877180]  page_fault+0x45/0x50
[  408.880626] RIP: 63a5c:0x63a89
[  408.883806] RSP: 76c920:00000000007704d0 EFLAGS: 0076bfc0
[  409.026400] Mem-Info:
[  409.035027] active_anon:1337871 inactive_anon:192 isolated_anon:1900
[  409.035027]  active_file:58 inactive_file:63 isolated_file:22
[  409.035027]  unevictable:3921 dirty:0 writeback:0 unstable:0
[  409.035027]  slab_reclaimable:15782 slab_unreclaimable:117209
[  409.035027]  mapped:53648 shmem:249 pagetables:19947 bounce:0
[  409.035027]  free:23985 free_pcp:214 free_cma:0
[  409.069550] Node 0 active_anon:1943952kB inactive_anon:748kB active_file:4kB inactive_file:44kB unevictable:3480kB isolated(anon):0kB isolated(file):0kB mapped:212416kB dirty:8kB writeback:4kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1001472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  409.097798] Node 1 active_anon:3407508kB inactive_anon:20kB active_file:188kB inactive_file:220kB unevictable:12244kB isolated(anon):7592kB isolated(file):0kB mapped:1992kB dirty:0kB writeback:92kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  409.126737] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4704kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  409.165432] lowmem_reserve[]: 0 2557 2557 2557 2557
[  409.170699] Node 0 DMA32 free:32060kB min:36272kB low:45340kB high:54408kB active_anon:1939248kB inactive_anon:748kB active_file:4kB inactive_file:4kB unevictable:3480kB writepending:0kB present:3129332kB managed:2621272kB mlocked:3480kB kernel_stack:9728kB pagetables:23012kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB
[  409.208719] lowmem_reserve[]: 0 0 0 0 0
[  409.213037] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  409.243294] lowmem_reserve[]: 0 0 0 0 0
[  409.247905] Node 1 Normal free:54612kB min:53612kB low:67012kB high:80412kB active_anon:3407604kB inactive_anon:20kB active_file:268kB inactive_file:0kB unevictable:12276kB writepending:0kB present:3932160kB managed:3870192kB mlocked:19868kB kernel_stack:18528kB pagetables:56800kB bounce:0kB free_pcp:692kB local_pcp:32kB free_cma:0kB
[  409.286550] lowmem_reserve[]: 0 0 0 0 0
[  409.293808] Node 0 DMA: 2*4kB (M) 1*8kB (M) 1*16kB (M) 8*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10336kB
[  409.314284] Node 0 DMA32: 530*4kB (UME) 145*8kB (UME) 1179*16kB (UME) 300*32kB (UME) 7*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 32192kB
[  409.346086] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  409.378209] Node 1 Normal: 70*4kB (UMEH) 49*8kB (UMH) 33*16kB (UMEH) 117*32kB (UMEH) 89*64kB (UMH) 2*128kB (UM) 2*256kB (ME) 3*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 9*4096kB (M) = 53904kB
[  409.415802] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  409.436784] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  409.447803] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  409.466875] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  409.479553] 1692 total pagecache pages
[  409.485959] 0 pages in swap cache
[  409.489894] Swap cache stats: add 0, delete 0, find 0/0
[  409.498709] Free swap  = 0kB
[  409.506347] Total swap = 0kB
[  409.509538] 1965979 pages RAM
[  409.517489] 0 pages HighMem/MovableOnly
[  409.527644] 339049 pages reserved
[  409.536036] 0 pages cma reserved
[  409.539541] Out of memory: Kill process 18500 (syz-executor.5) score 1007 or sacrifice child
[  409.550310] Killed process 18500 (syz-executor.5) total-vm:74964kB, anon-rss:17744kB, file-rss:39080kB, shmem-rss:0kB
[  409.814315] udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=-1000
[  409.860076] udevd cpuset=/ mems_allowed=0-1
[  409.864472] CPU: 0 PID: 7502 Comm: udevd Not tainted 4.14.172-syzkaller #0
[  409.871485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  409.880838] Call Trace:
[  409.883456]  dump_stack+0x13e/0x194
[  409.887094]  dump_header+0x178/0x6d4
[  409.890842]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  409.895864]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  409.900978]  ? ___ratelimit+0x50/0x519
[  409.904875]  oom_kill_process.cold+0x10/0xae3
[  409.909383]  ? lock_acquire+0x170/0x3f0
[  409.913379]  ? lock_downgrade+0x6e0/0x6e0
[  409.917563]  out_of_memory+0x2d5/0x1110
[  409.921554]  ? oom_killer_disable+0x1c0/0x1c0
[  409.926203]  ? mutex_trylock+0x152/0x1a0
[  409.930467]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  409.935359]  ? warn_alloc+0xf0/0xf0
[  409.938993]  ? find_held_lock+0x2d/0x110
[  409.943067]  ? fs_reclaim_acquire+0x10/0x10
[  409.947414]  __alloc_pages_nodemask+0x5d3/0x700
[  409.952094]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  409.957112]  ? find_held_lock+0x2d/0x110
[  409.961194]  ? cache_grow_begin+0x32d/0x410
[  409.965526]  cache_grow_begin+0x7b/0x410
[  409.969593]  ? __cpuset_node_allowed+0xfa/0x450
[  409.974274]  fallback_alloc+0x205/0x2b0
[  409.978297]  kmem_cache_alloc+0x1ea/0x770
[  409.982461]  getname_flags+0xc8/0x560
[  409.986274]  ? __do_page_fault+0x4e4/0xb40
[  409.990517]  user_path_at_empty+0x2a/0x50
[  409.994832]  SyS_readlink+0xa4/0x260
[  409.998880]  ? SyS_readlinkat+0x260/0x260
[  410.003037]  ? up_read+0x17/0x30
[  410.006415]  ? __do_page_fault+0x35b/0xb40
[  410.011097]  ? do_syscall_64+0x4c/0x640
[  410.015347]  ? SyS_readlinkat+0x260/0x260
[  410.019533]  do_syscall_64+0x1d5/0x640
[  410.023435]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  410.028898] RIP: 0033:0x7fa473b83577
[  410.032609] RSP: 002b:00007ffcb9358738 EFLAGS: 00000246 ORIG_RAX: 0000000000000059
[  410.040319] RAX: ffffffffffffffda RBX: 0000000000ed6030 RCX: 00007fa473b83577
[  410.047880] RDX: 0000000000000400 RSI: 00007ffcb9358740 RDI: 00007ffcb9358c20
[  410.055158] RBP: 0000000000f20370 R08: 0000000000f20370 R09: 7665642f7379732f
[  410.062522] R10: 7269762f73656369 R11: 0000000000000246 R12: 00007ffcb9358c20
[  410.069802] R13: 0000000000000400 R14: 0000000000ed6030 R15: 000000000000000b
[  410.124049] Mem-Info:
[  410.126518] active_anon:1338357 inactive_anon:367 isolated_anon:0
[  410.126518]  active_file:537 inactive_file:731 isolated_file:0
[  410.126518]  unevictable:4352 dirty:2 writeback:0 unstable:0
[  410.126518]  slab_reclaimable:15825 slab_unreclaimable:116995
[  410.126518]  mapped:53550 shmem:249 pagetables:19955 bounce:0
[  410.126518]  free:24180 free_pcp:21 free_cma:0
[  410.230106] Node 0 active_anon:1943952kB inactive_anon:1648kB active_file:488kB inactive_file:2480kB unevictable:96kB isolated(anon):0kB isolated(file):384kB mapped:212388kB dirty:4kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1001472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  410.372976] Node 1 active_anon:3409476kB inactive_anon:9120kB active_file:764kB inactive_file:1276kB unevictable:12kB isolated(anon):0kB isolated(file):0kB mapped:1412kB dirty:4kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  410.457543] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4704kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  410.502095] lowmem_reserve[]: 0 2557 2557 2557 2557
[  410.574074] Node 0 DMA32 free:31356kB min:36272kB low:45340kB high:54408kB active_anon:1939248kB inactive_anon:748kB active_file:2720kB inactive_file:280kB unevictable:96kB writepending:4kB present:3129332kB managed:2621272kB mlocked:12kB kernel_stack:9728kB pagetables:23012kB bounce:0kB free_pcp:796kB local_pcp:108kB free_cma:0kB
[  410.630290] lowmem_reserve[]: 0 0 0 0 0
[  410.635313] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  410.663006] lowmem_reserve[]: 0 0 0 0 0
[  410.667781] Node 1 Normal free:71012kB min:53612kB low:67012kB high:80412kB active_anon:3409476kB inactive_anon:216kB active_file:368kB inactive_file:1288kB unevictable:184kB writepending:4kB present:3932160kB managed:3870192kB mlocked:376kB kernel_stack:18432kB pagetables:56804kB bounce:0kB free_pcp:968kB local_pcp:284kB free_cma:0kB
[  410.699815] lowmem_reserve[]: 0 0 0 0 0
[  410.704981] Node 0 DMA: 2*4kB (M) 1*8kB (M) 1*16kB (M) 8*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10336kB
[  410.720632] Node 0 DMA32: 376*4kB (UM) 158*8kB (UM) 1167*16kB (UME) 297*32kB (UME) 7*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 31392kB
[  410.736110] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  410.791929] Node 1 Normal: 58*4kB (UMH) 283*8kB (UMH) 359*16kB (UMEH) 255*32kB (UMEH) 143*64kB (UMEH) 18*128kB (UME) 2*256kB (M) 1*512kB (E) 2*1024kB (ME) 1*2048kB (U) 9*4096kB (M) = 69840kB
[  410.833326] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  410.860633] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  410.887499] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  410.897260] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  410.906540] 1169 total pagecache pages
[  410.911073] 0 pages in swap cache
[  410.915595] Swap cache stats: add 0, delete 0, find 0/0
[  410.921663] Free swap  = 0kB
[  410.925235] Total swap = 0kB
[  410.928639] 1965979 pages RAM
[  410.934424] 0 pages HighMem/MovableOnly
[  410.954905] 339049 pages reserved
[  410.964706] 0 pages cma reserved
[  410.975434] Out of memory: Kill process 11760 (syz-executor.5) score 1007 or sacrifice child
[  410.991250] Killed process 11760 (syz-executor.5) total-vm:75096kB, anon-rss:16556kB, file-rss:35392kB, shmem-rss:0kB
14:22:01 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x0, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:22:01 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

14:22:01 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, 0xffffffffffffffff, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:22:01 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000180))
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
mlockall(0x1)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x0)
close(r1)

14:22:01 executing program 4:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfd53)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x40003e, 0x0)
pipe(&(0x7f0000000180))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
open(0x0, 0x0, 0x0)
mlockall(0x1)
mbind(&(0x7f000078b000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000180), 0x6, 0x3)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000080)=0x20)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  413.969857] serio: Serial port pts1
[  414.207040] udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null),  order=0, oom_score_adj=-1000
[  414.228373] udevd cpuset=/ mems_allowed=0-1
[  414.232824] CPU: 1 PID: 3717 Comm: udevd Not tainted 4.14.172-syzkaller #0
[  414.239824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  414.249331] Call Trace:
[  414.251909]  dump_stack+0x13e/0x194
[  414.255617]  dump_header+0x178/0x6d4
[  414.259320]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  414.264389]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  414.269484]  ? ___ratelimit+0x50/0x519
[  414.273365]  oom_kill_process.cold+0x10/0xae3
[  414.277870]  ? lock_acquire+0x170/0x3f0
[  414.281837]  ? lock_downgrade+0x6e0/0x6e0
[  414.286025]  out_of_memory+0x2d5/0x1110
[  414.290053]  ? oom_killer_disable+0x1c0/0x1c0
[  414.294662]  ? mutex_trylock+0x152/0x1a0
[  414.298707]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  414.303592]  ? warn_alloc+0xf0/0xf0
[  414.307267]  __alloc_pages_nodemask+0x5d3/0x700
[  414.311924]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  414.317019]  ? lock_downgrade+0x6e0/0x6e0
[  414.321305]  alloc_pages_current+0xe7/0x1e0
[  414.325800]  __page_cache_alloc+0x245/0x3d0
[  414.330111]  filemap_fault+0xc21/0x1c30
[  414.334130]  ? __lock_page_or_retry+0x8a0/0x8a0
[  414.338809]  ? lock_acquire+0x170/0x3f0
[  414.342903]  ? ext4_filemap_fault+0x7c/0xb0
[  414.347231]  ext4_filemap_fault+0x84/0xb0
[  414.351369]  __do_fault+0xfa/0x380
[  414.354910]  __handle_mm_fault+0x22e9/0x3280
[  414.359334]  ? copy_page_range+0x1d70/0x1d70
[  414.363731]  ? find_held_lock+0x2d/0x110
[  414.367787]  handle_mm_fault+0x288/0x7a0
[  414.371846]  __do_page_fault+0x4bc/0xb40
[  414.375919]  ? vmalloc_fault+0xdf0/0xdf0
[  414.380041]  ? do_page_fault+0x60/0x4f2
[  414.384014]  ? page_fault+0x2f/0x50
[  414.387635]  page_fault+0x45/0x50
[  414.391211] RIP: b9357550:0xee0a10
[  414.394742] RSP: 03fc:0000000000000004 EFLAGS: 00ed60f0
[  414.420100] Mem-Info:
[  414.427986] active_anon:1334740 inactive_anon:194 isolated_anon:0
[  414.427986]  active_file:54 inactive_file:20 isolated_file:0
[  414.427986]  unevictable:8928 dirty:4 writeback:0 unstable:0
[  414.427986]  slab_reclaimable:15946 slab_unreclaimable:116712
[  414.427986]  mapped:56749 shmem:249 pagetables:19948 bounce:0
[  414.427986]  free:24398 free_pcp:136 free_cma:0
[  414.469206] Node 0 active_anon:1931612kB inactive_anon:756kB active_file:24kB inactive_file:0kB unevictable:11120kB isolated(anon):0kB isolated(file):0kB mapped:217256kB dirty:12kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 991232kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  414.497502] Node 1 active_anon:3399448kB inactive_anon:5820kB active_file:976kB inactive_file:2516kB unevictable:16592kB isolated(anon):0kB isolated(file):128kB mapped:10440kB dirty:4kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  414.570977] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4704kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  414.599400] lowmem_reserve[]: 0 2557 2557 2557 2557
[  414.627527] Node 0 DMA32 free:34744kB min:36272kB low:45340kB high:54408kB active_anon:1927096kB inactive_anon:3276kB active_file:7596kB inactive_file:36kB unevictable:836kB writepending:12kB present:3129332kB managed:2621272kB mlocked:632kB kernel_stack:9824kB pagetables:23120kB bounce:0kB free_pcp:728kB local_pcp:84kB free_cma:0kB
[  414.659131] lowmem_reserve[]: 0 0 0 0 0
[  414.663554] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  414.691290] lowmem_reserve[]: 0 0 0 0 0
[  414.695815] Node 1 Normal free:71480kB min:53612kB low:67012kB high:80412kB active_anon:3399884kB inactive_anon:20kB active_file:5208kB inactive_file:9540kB unevictable:400kB writepending:4kB present:3932160kB managed:3870192kB mlocked:364kB kernel_stack:18400kB pagetables:56668kB bounce:0kB free_pcp:408kB local_pcp:44kB free_cma:0kB
[  414.731987] lowmem_reserve[]: 0 0 0 0 0
[  414.736013] Node 0 DMA: 2*4kB (M) 1*8kB (M) 1*16kB (M) 8*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10336kB
[  414.763368] Node 0 DMA32: 518*4kB (M) 165*8kB (UME) 1146*16kB (UM) 333*32kB (UME) 12*64kB (M) 5*128kB (ME) 2*256kB (ME) 3*512kB (ME) 1*1024kB (E) 4*2048kB (ME) 0*4096kB = 45056kB
14:22:05 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(0xffffffffffffffff, r3, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r5 = socket(0x0, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:22:05 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, 0xffffffffffffffff, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  414.779957] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  414.791972] Node 1 Normal: 667*4kB (UMEH) 630*8kB (UMEH) 495*16kB (UMEH) 356*32kB (UMEH) 172*64kB (UMH) 28*128kB (UME) 2*256kB (M) 2*512kB (ME) 3*1024kB (ME) 1*2048kB (U) 8*4096kB (M) = 81036kB
[  414.810683] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  414.821260] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  414.835342] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  414.848479] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  414.886455] serio: Serial port pts1
[  414.926553] 2249 total pagecache pages
[  414.980457] 0 pages in swap cache
[  415.002392] Swap cache stats: add 0, delete 0, find 0/0
[  415.051838] Free swap  = 0kB
[  415.063236] Total swap = 0kB
[  415.081160] 1965979 pages RAM
[  415.088616] 0 pages HighMem/MovableOnly
[  415.098430] 339049 pages reserved
[  415.109038] 0 pages cma reserved
[  415.116777] Out of memory: Kill process 18526 (syz-executor.5) score 1009 or sacrifice child
[  415.390802] serio: Serial port pts5
[  415.641154] syz-executor.1 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null),  order=0, oom_score_adj=1000
[  415.663303] syz-executor.1 cpuset=syz1 mems_allowed=0-1
[  415.673600] CPU: 1 PID: 18557 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0
[  415.681654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  415.691033] Call Trace:
[  415.693631]  dump_stack+0x13e/0x194
[  415.697272]  dump_header+0x178/0x6d4
[  415.700984]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  415.706001]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  415.711355]  ? ___ratelimit+0x50/0x519
[  415.715249]  oom_kill_process.cold+0x10/0xae3
[  415.719764]  ? lock_downgrade+0x6e0/0x6e0
[  415.723927]  out_of_memory+0x2d5/0x1110
[  415.727924]  ? oom_killer_disable+0x1c0/0x1c0
[  415.732427]  ? mutex_trylock+0x152/0x1a0
[  415.736500]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  415.741458]  ? warn_alloc+0xf0/0xf0
[  415.745178]  __alloc_pages_nodemask+0x5d3/0x700
[  415.749857]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  415.754883]  ? find_held_lock+0x2d/0x110
[  415.758945]  alloc_pages_vma+0xc2/0x4a0
[  415.762932]  wp_page_copy+0xa22/0x1300
[  415.766912]  ? follow_pfn+0x200/0x200
[  415.770716]  do_wp_page+0x244/0x11d0
[  415.774472]  ? lock_acquire+0x170/0x3f0
[  415.778475]  ? finish_mkwrite_fault+0x640/0x640
[  415.783151]  __handle_mm_fault+0x1c0e/0x3280
[  415.787570]  ? copy_page_range+0x1d70/0x1d70
[  415.791995]  ? find_held_lock+0x2d/0x110
[  415.796070]  handle_mm_fault+0x288/0x7a0
[  415.800218]  __do_page_fault+0x4bc/0xb40
[  415.804287]  ? vmalloc_fault+0xdf0/0xdf0
[  415.808344]  ? do_page_fault+0x60/0x4f2
[  415.812326]  page_fault+0x25/0x50
[  415.815785] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20
[  415.822364] RSP: 0018:ffff8881a2be7b60 EFLAGS: 00010206
[  415.827732] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000500
[  415.835005] RDX: 0000000000001000 RSI: ffff88819e592b00 RDI: 0000000020af7000
[  415.842277] RBP: 0000000020af6500 R08: ffffed1033cb2600 R09: 0000000000000000
[  415.849555] R10: ffffed1033cb25ff R11: ffff88819e592fff R12: ffff88819e592000
[  415.856826] R13: 00007ffffffff000 R14: 0000000020af7500 R15: ffff8881a2be7de0
[  415.864177]  copyout+0x99/0xc0
[  415.867387]  copy_page_to_iter+0x32a/0xc80
[  415.871709]  pipe_to_user+0xa8/0x160
[  415.875431]  ? anon_pipe_buf_release+0x21a/0x2e0
[  415.880204]  __splice_from_pipe+0x332/0x740
[  415.884666]  ? iter_to_pipe+0x4c0/0x4c0
[  415.888645]  vmsplice_to_user+0x197/0x1c0
[  415.892810]  ? __splice_from_pipe+0x740/0x740
[  415.897309]  ? save_trace+0x290/0x290
[  415.901098]  ? __might_fault+0x104/0x1b0
[  415.905166]  ? find_held_lock+0x2d/0x110
[  415.909218]  ? lock_downgrade+0x6e0/0x6e0
[  415.913367]  ? __fget+0x228/0x360
[  415.916812]  SyS_vmsplice+0x12a/0x150
[  415.920610]  ? default_file_splice_write+0x80/0x80
[  415.925535]  do_syscall_64+0x1d5/0x640
[  415.929434]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  415.934623] RIP: 0033:0x45c479
[  415.937807] RSP: 002b:00007fe226066c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  415.945515] RAX: ffffffffffffffda RBX: 00007fe2260676d4 RCX: 000000000045c479
[  415.952942] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000006
[  415.960227] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000
[  415.967507] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  415.974777] R13: 0000000000000c45 R14: 00000000004ce26e R15: 000000000076bfcc
[  416.009250] Mem-Info:
[  416.015156] active_anon:1341354 inactive_anon:194 isolated_anon:0
[  416.015156]  active_file:15 inactive_file:83 isolated_file:0
[  416.015156]  unevictable:1717 dirty:1 writeback:0 unstable:0
[  416.015156]  slab_reclaimable:16025 slab_unreclaimable:116555
[  416.015156]  mapped:53584 shmem:249 pagetables:20034 bounce:0
[  416.015156]  free:24834 free_pcp:521 free_cma:0
[  416.055663] Node 0 active_anon:1943004kB inactive_anon:756kB active_file:8kB inactive_file:88kB unevictable:388kB isolated(anon):0kB isolated(file):0kB mapped:209296kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 995328kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  416.085224] Node 1 active_anon:3422412kB inactive_anon:20kB active_file:552kB inactive_file:548kB unevictable:6484kB isolated(anon):0kB isolated(file):0kB mapped:5268kB dirty:12kB writeback:32kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  416.118000] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4704kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  416.157290] lowmem_reserve[]: 0 2557 2557 2557 2557
[  416.163075] Node 0 DMA32 free:34380kB min:36272kB low:45340kB high:54408kB active_anon:1938220kB inactive_anon:752kB active_file:8kB inactive_file:8kB unevictable:388kB writepending:8kB present:3129332kB managed:2621272kB mlocked:388kB kernel_stack:9792kB pagetables:23100kB bounce:0kB free_pcp:232kB local_pcp:120kB free_cma:0kB
[  416.198398] lowmem_reserve[]: 0 0 0 0 0
[  416.202662] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  416.241972] lowmem_reserve[]: 0 0 0 0 0
[  416.254902] Node 1 Normal free:55132kB min:53612kB low:67012kB high:80412kB active_anon:3422396kB inactive_anon:20kB active_file:420kB inactive_file:1196kB unevictable:6488kB writepending:16kB present:3932160kB managed:3870192kB mlocked:6488kB kernel_stack:18528kB pagetables:56896kB bounce:0kB free_pcp:468kB local_pcp:0kB free_cma:0kB
[  416.290217] lowmem_reserve[]: 0 0 0 0 0
[  416.299777] Node 0 DMA: 2*4kB (M) 1*8kB (M) 1*16kB (M) 8*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10336kB
[  416.320331] Node 0 DMA32: 26*4kB (UME) 116*8kB (UME) 1144*16kB (UME) 334*32kB (UME) 12*64kB (M) 6*128kB (ME) 1*256kB (M) 3*512kB (ME) 1*1024kB (E) 0*2048kB 0*4096kB = 34376kB
[  416.340942] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  416.355756] Node 1 Normal: 156*4kB (MH) 204*8kB (UMH) 113*16kB (UMEH) 197*32kB (UMEH) 112*64kB (UMH) 3*128kB (UME) 1*256kB (M) 2*512kB (ME) 3*1024kB (ME) 1*2048kB (U) 8*4096kB (M) = 57088kB
[  416.384772] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  416.396476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  416.424643] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  416.439179] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  416.448661] 1787 total pagecache pages
[  416.453337] 0 pages in swap cache
[  416.456821] Swap cache stats: add 0, delete 0, find 0/0
[  416.462714] Free swap  = 0kB
[  416.465880] Total swap = 0kB
[  416.469112] 1965979 pages RAM
[  416.472300] 0 pages HighMem/MovableOnly
[  416.476404] 339049 pages reserved
[  416.479854] 0 pages cma reserved
[  416.483784] Out of memory: Kill process 18543 (syz-executor.2) score 1007 or sacrifice child
[  416.493222] Killed process 18543 (syz-executor.2) total-vm:75228kB, anon-rss:16572kB, file-rss:35556kB, shmem-rss:0kB
[  416.595585] syz-executor.1 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[  416.608306] syz-executor.1 cpuset=syz1 mems_allowed=0-1
[  416.614093] CPU: 0 PID: 7542 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0
[  416.621905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  416.631643] Call Trace:
[  416.634368]  dump_stack+0x13e/0x194
[  416.637987]  dump_header+0x178/0x6d4
[  416.641706]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  416.646717]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  416.651814]  ? ___ratelimit+0x50/0x519
[  416.655698]  oom_kill_process.cold+0x10/0xae3
[  416.660310]  ? lock_downgrade+0x6e0/0x6e0
[  416.664521]  out_of_memory+0x2d5/0x1110
[  416.668486]  ? oom_killer_disable+0x1c0/0x1c0
[  416.672976]  ? mutex_trylock+0x152/0x1a0
[  416.677033]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  416.681887]  ? warn_alloc+0xf0/0xf0
[  416.685516]  ? find_held_lock+0x2d/0x110
[  416.689640]  ? fs_reclaim_acquire+0x10/0x10
[  416.693971]  __alloc_pages_nodemask+0x5d3/0x700
[  416.698634]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  416.703641]  ? find_held_lock+0x2d/0x110
[  416.707818]  ? cache_grow_begin+0x32d/0x410
[  416.712136]  cache_grow_begin+0x7b/0x410
[  416.716259]  ? __cpuset_node_allowed+0xfa/0x450
[  416.720932]  fallback_alloc+0x205/0x2b0
[  416.724901]  kmem_cache_alloc+0x1ea/0x770
[  416.729033]  ? lock_acquire+0x170/0x3f0
[  416.733000]  getname_flags+0xc8/0x560
[  416.736789]  do_sys_open+0x1c4/0x3f0
[  416.740495]  ? filp_open+0x60/0x60
[  416.744027]  ? __do_page_fault+0x35b/0xb40
[  416.748345]  ? do_syscall_64+0x4c/0x640
[  416.752322]  ? do_sys_open+0x3f0/0x3f0
[  416.756203]  do_syscall_64+0x1d5/0x640
[  416.760092]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  416.765281] RIP: 0033:0x45a3f0
[  416.768461] RSP: 002b:00007ffd4baf7fc0 EFLAGS: 00000206 ORIG_RAX: 0000000000000002
[  416.776429] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045a3f0
[  416.783708] RDX: 00007ffd4baf9170 RSI: 0000000000090800 RDI: 00007ffd4baf9200
[  416.790990] RBP: 00000000000004ff R08: 0000000000000000 R09: 0000000000000009
[  416.798256] R10: 0000000000000003 R11: 0000000000000206 R12: 00007ffd4baf9200
[  416.805513] R13: 0000000002b7d940 R14: 0000000000000000 R15: 00007ffd4bafa290
[  416.862567] Mem-Info:
[  416.865131] active_anon:1337252 inactive_anon:193 isolated_anon:0
[  416.865131]  active_file:23 inactive_file:102 isolated_file:25
[  416.865131]  unevictable:5960 dirty:0 writeback:13 unstable:0
[  416.865131]  slab_reclaimable:16071 slab_unreclaimable:116267
[  416.865131]  mapped:53802 shmem:249 pagetables:19987 bounce:0
[  416.865131]  free:25362 free_pcp:59 free_cma:0
[  416.902022] Node 0 active_anon:1934752kB inactive_anon:752kB active_file:120kB inactive_file:68kB unevictable:6316kB isolated(anon):0kB isolated(file):0kB mapped:210312kB dirty:0kB writeback:8kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 987136kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  416.929954] Node 1 active_anon:3414256kB inactive_anon:20kB active_file:52kB inactive_file:120kB unevictable:18580kB isolated(anon):0kB isolated(file):16kB mapped:5924kB dirty:0kB writeback:44kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  416.957552] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4704kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  416.984374] lowmem_reserve[]: 0 2557 2557 2557 2557
[  416.989681] Node 0 DMA32 free:35792kB min:36272kB low:45340kB high:54408kB active_anon:1930048kB inactive_anon:752kB active_file:160kB inactive_file:256kB unevictable:6344kB writepending:8kB present:3129332kB managed:2621272kB mlocked:6344kB kernel_stack:9792kB pagetables:23128kB bounce:0kB free_pcp:436kB local_pcp:20kB free_cma:0kB
[  417.019534] lowmem_reserve[]: 0 0 0 0 0
[  417.024381] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  417.050149] lowmem_reserve[]: 0 0 0 0 0
[  417.054334] Node 1 Normal free:53864kB min:53612kB low:67012kB high:80412kB active_anon:3414256kB inactive_anon:20kB active_file:84kB inactive_file:168kB unevictable:18580kB writepending:44kB present:3932160kB managed:3870192kB mlocked:18580kB kernel_stack:18496kB pagetables:56816kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  417.084496] lowmem_reserve[]: 0 0 0 0 0
[  417.088634] Node 0 DMA: 2*4kB (M) 1*8kB (M) 1*16kB (M) 8*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10336kB
[  417.103487] Node 0 DMA32: 17*4kB (UMH) 9*8kB (UM) 1034*16kB (UM) 263*32kB (UME) 2*64kB (M) 1*128kB (E) 0*256kB 3*512kB (ME) 1*1024kB (E) 4*2048kB (U) 0*4096kB = 36108kB
[  417.119064] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  417.129999] Node 1 Normal: 66*4kB (UMH) 118*8kB (UMEH) 78*16kB (UMEH) 186*32kB (UEH) 106*64kB (UMEH) 1*128kB (U) 0*256kB 1*512kB (E) 3*1024kB (ME) 1*2048kB (U) 8*4096kB (M) = 53720kB
[  417.149671] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  417.158788] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  417.172524] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  417.181537] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  417.191996] 2064 total pagecache pages
[  417.195924] 0 pages in swap cache
[  417.199606] Swap cache stats: add 0, delete 0, find 0/0
[  417.205216] Free swap  = 0kB
[  417.208320] Total swap = 0kB
[  417.213388] 1965979 pages RAM
[  417.216586] 0 pages HighMem/MovableOnly
[  417.221587] 339049 pages reserved
[  417.225518] 0 pages cma reserved
[  417.229456] Out of memory: Kill process 18546 (syz-executor.4) score 1008 or sacrifice child
[  417.244032] Killed process 18546 (syz-executor.4) total-vm:74964kB, anon-rss:17980kB, file-rss:40072kB, shmem-rss:0kB
[  417.292879] oom_reaper: reaped process 18546 (syz-executor.4), now anon-rss:18020kB, file-rss:7208kB, shmem-rss:0kB
14:22:09 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r3 = getpid()
tkill(r3, 0x9)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@ipv4={[], [], @empty}, @in=@multicast2}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe4)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0xfb, 0x3]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80000000000]})
syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7f, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000002c0)={'filter\x00', 0x6f, "afb6cc97e591386f31d56eb2cdbb082c5bff709467184217c473157f85eb1d01663bd3bfa3dcd51379c39bd1158bbe29593f6c4828c62d1d958ae1cdbb0c55bc3727589ddcf126f3ce3f7055efca8a6f69e17106d0e7b10db9ffc2e5d0272ce19a42cdfa65e0cc7c8036058d84cb18"}, &(0x7f0000000080)=0x93)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@iv={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10}, @iv={0xc4, 0x117, 0x2, 0xb2, "5c5f68b8b1f93617cf7a433a751d573c267c0e472b99f5874067371a1eb727f313be2d5f19953b56b9605dc304250cace1c755efcc6952ac740803432ff9a96885187f23ce4e68e73a81fda42636177c535e0e15a55cc9a23d49b5e8052f5c2ab45f1f7259a450dde0ef04d116718a01361697f8adbc423662138bafca78604f6ed65ea74007e81440a985023d26b78e26c65f5039cb09cb33c9e6cd5ddd8264f212728e2e17b716d61363d3e78eb6cec0a0"}, @iv={0x30, 0x117, 0x2, 0x1e, "f816bb6a233b55a9291805f6785e0241cb0e9f040a83b70c19ae2055148e"}, @assoc={0x10, 0x117, 0x4, 0x8000}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}], 0x154, 0x20000000}], 0x1, 0x800)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:22:09 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x0, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:22:09 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(0xffffffffffffffff, r3, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r5 = socket(0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:22:09 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, 0xffffffffffffffff, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:22:09 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

14:22:09 executing program 4:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfd53)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x40003e, 0x0)
pipe(&(0x7f0000000180))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
open(0x0, 0x0, 0x0)
mlockall(0x1)
mbind(&(0x7f000078b000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000180), 0x6, 0x3)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000080)=0x20)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

14:22:10 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

[  419.573502] serio: Serial port pts1
[  420.213018] modprobe invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[  420.251818] modprobe cpuset=/ mems_allowed=0-1
[  420.257725] CPU: 1 PID: 18606 Comm: modprobe Not tainted 4.14.172-syzkaller #0
[  420.265100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  420.274494] Call Trace:
[  420.277095]  dump_stack+0x13e/0x194
[  420.280734]  dump_header+0x178/0x6d4
[  420.284458]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  420.289619]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  420.294733]  ? ___ratelimit+0x50/0x519
[  420.298631]  oom_kill_process.cold+0x10/0xae3
[  420.303139]  ? lock_downgrade+0x6e0/0x6e0
[  420.307302]  out_of_memory+0x2d5/0x1110
[  420.311321]  ? oom_killer_disable+0x1c0/0x1c0
[  420.315824]  ? mutex_trylock+0x152/0x1a0
[  420.319898]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  420.324767]  ? warn_alloc+0xf0/0xf0
[  420.328464]  ? find_held_lock+0x2d/0x110
[  420.332554]  ? fs_reclaim_acquire+0x10/0x10
[  420.337182]  __alloc_pages_nodemask+0x5d3/0x700
[  420.341858]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  420.346895]  ? find_held_lock+0x2d/0x110
[  420.350977]  ? cache_grow_begin+0x32d/0x410
[  420.355441]  cache_grow_begin+0x7b/0x410
[  420.359546]  ? __cpuset_node_allowed+0xfa/0x450
[  420.364228]  fallback_alloc+0x205/0x2b0
[  420.368310]  kmem_cache_alloc+0x1ea/0x770
[  420.372466]  ? find_held_lock+0x2d/0x110
[  420.376564]  getname_flags+0xc8/0x560
[  420.380359]  do_sys_open+0x1c4/0x3f0
[  420.384770]  ? filp_open+0x60/0x60
[  420.388388]  ? __do_page_fault+0x35b/0xb40
[  420.392629]  ? do_syscall_64+0x4c/0x640
[  420.396625]  ? do_sys_open+0x3f0/0x3f0
[  420.400510]  do_syscall_64+0x1d5/0x640
[  420.404405]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  420.409845] RIP: 0033:0x7fda2c6d41a7
[  420.413553] RSP: 002b:00007ffc2b9a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  420.421381] RAX: ffffffffffffffda RBX: 00007fda2c8df1c8 RCX: 00007fda2c6d41a7
[  420.428651] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fda2c8da01d
[  420.435922] RBP: 00007ffc2b9a30a0 R08: 00007ffc2b9a349f R09: 0000000000000000
[  420.443178] R10: 00007fda2c8da01d R11: 0000000000000246 R12: 0000000000000008
[  420.450475] R13: 00007fda2c8de040 R14: 0000000000000000 R15: 00007ffc2b9a349f
[  420.579380] Mem-Info:
[  420.600274] active_anon:1340749 inactive_anon:192 isolated_anon:0
[  420.600274]  active_file:53 inactive_file:25 isolated_file:0
[  420.600274]  unevictable:2886 dirty:6 writeback:0 unstable:0
[  420.600274]  slab_reclaimable:16263 slab_unreclaimable:115823
[  420.600274]  mapped:53558 shmem:250 pagetables:20073 bounce:0
[  420.600274]  free:24853 free_pcp:123 free_cma:0
[  420.642156] Node 0 active_anon:1940472kB inactive_anon:748kB active_file:36kB inactive_file:36kB unevictable:1304kB isolated(anon):0kB isolated(file):0kB mapped:210272kB dirty:8kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 991232kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  420.676617] Node 1 active_anon:3422524kB inactive_anon:20kB active_file:148kB inactive_file:300kB unevictable:11240kB isolated(anon):0kB isolated(file):108kB mapped:4260kB dirty:16kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  420.713107] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4704kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  420.745837] lowmem_reserve[]: 0 2557 2557 2557 2557
[  420.750972] Node 0 DMA32 free:34424kB min:36272kB low:45340kB high:54408kB active_anon:1935860kB inactive_anon:748kB active_file:8kB inactive_file:36kB unevictable:1304kB writepending:0kB present:3129332kB managed:2621272kB mlocked:1304kB kernel_stack:9888kB pagetables:23196kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB
[  420.782450] lowmem_reserve[]: 0 0 0 0 0
[  420.786586] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  420.823896] lowmem_reserve[]: 0 0 0 0 0
[  420.827970] Node 1 Normal free:54200kB min:53612kB low:67012kB high:80412kB active_anon:3422772kB inactive_anon:20kB active_file:312kB inactive_file:84kB unevictable:10972kB writepending:0kB present:3932160kB managed:3870192kB mlocked:10972kB kernel_stack:18784kB pagetables:57092kB bounce:0kB free_pcp:260kB local_pcp:240kB free_cma:0kB
[  420.870172] lowmem_reserve[]: 0 0 0 0 0
[  420.876185] Node 0 DMA: 2*4kB (M) 1*8kB (M) 1*16kB (M) 8*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10336kB
[  420.900595] Node 0 DMA32: 219*4kB (UM) 182*8kB (UM) 1067*16kB (UME) 297*32kB (UME) 17*64kB (M) 3*128kB (ME) 0*256kB 1*512kB (M) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 34988kB
[  420.924214] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  420.938608] Node 1 Normal: 68*4kB (UMEH) 100*8kB (UMEH) 53*16kB (UMEH) 234*32kB (UMEH) 118*64kB (UMH) 3*128kB (UE) 2*256kB (ME) 2*512kB (UM) 2*1024kB (UE) 0*2048kB 8*4096kB (M) = 53696kB
[  420.973160] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  420.997544] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  421.022788] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  421.047112] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  421.074453] 1599 total pagecache pages
[  421.078425] 0 pages in swap cache
[  421.097109] Swap cache stats: add 0, delete 0, find 0/0
[  421.119828] Free swap  = 0kB
[  421.127438] Total swap = 0kB
[  421.145034] 1965979 pages RAM
[  421.148416] 0 pages HighMem/MovableOnly
[  421.159697] 339049 pages reserved
[  421.168316] 0 pages cma reserved
[  421.179292] Out of memory: Kill process 12967 (syz-executor.0) score 1007 or sacrifice child
[  421.209328] Killed process 12967 (syz-executor.0) total-vm:75360kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB
[  421.411821] oom_reaper: reaped process 12967 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[  421.526084] udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=-1000
[  421.547143] udevd cpuset=/ mems_allowed=0-1
[  421.560138] CPU: 0 PID: 3717 Comm: udevd Not tainted 4.14.172-syzkaller #0
[  421.567317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  421.576681] Call Trace:
[  421.579412]  dump_stack+0x13e/0x194
[  421.583104]  dump_header+0x178/0x6d4
[  421.586906]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  421.592272]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  421.597381]  ? ___ratelimit+0x50/0x519
[  421.601324]  oom_kill_process.cold+0x10/0xae3
[  421.605822]  ? lock_acquire+0x170/0x3f0
[  421.609785]  ? lock_downgrade+0x6e0/0x6e0
[  421.614024]  out_of_memory+0x2d5/0x1110
[  421.618116]  ? oom_killer_disable+0x1c0/0x1c0
[  421.622616]  ? mutex_trylock+0x152/0x1a0
[  421.626683]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  421.631632]  ? warn_alloc+0xf0/0xf0
[  421.635331]  ? find_held_lock+0x2d/0x110
[  421.639624]  ? fs_reclaim_acquire+0x10/0x10
[  421.643948]  __alloc_pages_nodemask+0x5d3/0x700
[  421.648612]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  421.653627]  ? find_held_lock+0x2d/0x110
[  421.657681]  ? cache_grow_begin+0x32d/0x410
[  421.662083]  cache_grow_begin+0x7b/0x410
[  421.666390]  ? __cpuset_node_allowed+0xfa/0x450
[  421.671118]  fallback_alloc+0x205/0x2b0
[  421.675309]  kmem_cache_alloc+0x1ea/0x770
[  421.679454]  getname_flags+0xc8/0x560
[  421.683332]  ? __do_page_fault+0x4e4/0xb40
[  421.687563]  user_path_at_empty+0x2a/0x50
[  421.691818]  SyS_readlink+0xa4/0x260
[  421.695553]  ? SyS_readlinkat+0x260/0x260
[  421.699710]  ? up_read+0x17/0x30
[  421.703071]  ? __do_page_fault+0x35b/0xb40
[  421.707296]  ? do_syscall_64+0x4c/0x640
[  421.711267]  ? SyS_readlinkat+0x260/0x260
[  421.715490]  do_syscall_64+0x1d5/0x640
[  421.719437]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  421.724634] RIP: 0033:0x7fa473b83577
[  421.728406] RSP: 002b:00007ffcb9357ca8 EFLAGS: 00000246 ORIG_RAX: 0000000000000059
[  421.736259] RAX: ffffffffffffffda RBX: 0000000000ed6030 RCX: 00007fa473b83577
[  421.743531] RDX: 0000000000000400 RSI: 00007ffcb9357cb0 RDI: 00007ffcb9358190
[  421.750802] RBP: 00007ffcb93589f0 R08: 00007ffcb93589f0 R09: 00007fa473bd7de0
[  421.758639] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcb9358190
[  421.765908] R13: 0000000000000400 R14: 0000000000f1ee00 R15: 0000000000ed6030
[  421.784386] Mem-Info:
[  421.787333] active_anon:1337262 inactive_anon:193 isolated_anon:0
[  421.787333]  active_file:7 inactive_file:59 isolated_file:0
[  421.787333]  unevictable:5663 dirty:0 writeback:5 unstable:0
[  421.787333]  slab_reclaimable:16313 slab_unreclaimable:116020
[  421.787333]  mapped:53553 shmem:251 pagetables:20074 bounce:0
[  421.787333]  free:25521 free_pcp:134 free_cma:0
[  422.041676] Node 0 active_anon:1937468kB inactive_anon:748kB active_file:4kB inactive_file:44kB unevictable:2396kB isolated(anon):0kB isolated(file):0kB mapped:210248kB dirty:0kB writeback:12kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 989184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  422.072364] Node 1 active_anon:3411580kB inactive_anon:24kB active_file:8kB inactive_file:172kB unevictable:20848kB isolated(anon):0kB isolated(file):0kB mapped:3916kB dirty:0kB writeback:28kB shmem:36kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  422.100755] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4704kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  422.128440] lowmem_reserve[]: 0 2557 2557 2557 2557
[  422.135428] Node 0 DMA32 free:36144kB min:36272kB low:45340kB high:54408kB active_anon:1932800kB inactive_anon:748kB active_file:28kB inactive_file:28kB unevictable:2964kB writepending:0kB present:3129332kB managed:2621272kB mlocked:2964kB kernel_stack:9824kB pagetables:23088kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  422.212979] lowmem_reserve[]: 0 0 0 0 0
[  422.217539] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  422.251384] lowmem_reserve[]: 0 0 0 0 0
[  422.255480] Node 1 Normal free:53116kB min:53612kB low:67012kB high:80412kB active_anon:3411588kB inactive_anon:24kB active_file:164kB inactive_file:44kB unevictable:21980kB writepending:0kB present:3932160kB managed:3870192kB mlocked:21980kB kernel_stack:18624kB pagetables:57204kB bounce:0kB free_pcp:632kB local_pcp:236kB free_cma:0kB
[  422.289706] lowmem_reserve[]: 0 0 0 0 0
[  422.307730] Node 0 DMA: 2*4kB (M) 1*8kB (M) 1*16kB (M) 8*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10336kB
[  422.328116] Node 0 DMA32: 870*4kB (UM) 73*8kB (UME) 1042*16kB (UM) 294*32kB (UM) 18*64kB (ME) 3*128kB (ME) 1*256kB (E) 2*512kB (ME) 1*1024kB (M) 1*2048kB (U) 0*4096kB = 36032kB
[  422.405825] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  422.433708] Node 1 Normal: 38*4kB (UMH) 49*8kB (UMEH) 32*16kB (UMEH) 238*32kB (UMEH) 132*64kB (UMEH) 5*128kB (UM) 1*256kB (E) 2*512kB (UM) 2*1024kB (UE) 0*2048kB 8*4096kB (M) = 53856kB
[  422.456339] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  422.465679] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  422.480265] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  422.489305] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  422.502636] 2029 total pagecache pages
[  422.506578] 0 pages in swap cache
[  422.512170] Swap cache stats: add 0, delete 0, find 0/0
[  422.517582] Free swap  = 0kB
[  422.525997] Total swap = 0kB
[  422.529253] 1965979 pages RAM
[  422.534186] 0 pages HighMem/MovableOnly
[  422.538204] 339049 pages reserved
[  422.566415] 0 pages cma reserved
[  422.569864] Out of memory: Kill process 18585 (syz-executor.4) score 1007 or sacrifice child
[  422.586569] Killed process 18585 (syz-executor.4) total-vm:74832kB, anon-rss:17956kB, file-rss:39108kB, shmem-rss:0kB
[  422.622154] oom_reaper: reaped process 18585 (syz-executor.4), now anon-rss:18020kB, file-rss:6956kB, shmem-rss:0kB
[  422.669465] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null),  order=0, oom_score_adj=0
[  422.754241] syz-executor.5 cpuset=syz5 mems_allowed=0-1
[  422.759686] CPU: 0 PID: 7540 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0
[  422.767616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  422.777087] Call Trace:
[  422.779710]  dump_stack+0x13e/0x194
[  422.783480]  dump_header+0x178/0x6d4
[  422.787294]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  422.792308]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  422.797398]  ? ___ratelimit+0x50/0x519
[  422.801284]  oom_kill_process.cold+0x10/0xae3
[  422.805796]  ? lock_downgrade+0x6e0/0x6e0
[  422.809946]  out_of_memory+0x2d5/0x1110
[  422.813922]  ? oom_killer_disable+0x1c0/0x1c0
[  422.818418]  ? mutex_trylock+0x152/0x1a0
[  422.822485]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  422.827337]  ? warn_alloc+0xf0/0xf0
[  422.830973]  __alloc_pages_nodemask+0x5d3/0x700
[  422.835636]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  422.840686]  ? lock_downgrade+0x6e0/0x6e0
[  422.844959]  alloc_pages_current+0xe7/0x1e0
[  422.849274]  __page_cache_alloc+0x245/0x3d0
[  422.853601]  filemap_fault+0xc21/0x1c30
[  422.857606]  ? __lock_page_or_retry+0x8a0/0x8a0
[  422.862282]  ? lock_acquire+0x170/0x3f0
[  422.866248]  ? ext4_filemap_fault+0x7c/0xb0
[  422.870576]  ext4_filemap_fault+0x84/0xb0
[  422.874745]  __do_fault+0xfa/0x380
[  422.878283]  __handle_mm_fault+0x22e9/0x3280
[  422.882699]  ? copy_page_range+0x1d70/0x1d70
[  422.887120]  ? find_held_lock+0x2d/0x110
[  422.891381]  handle_mm_fault+0x288/0x7a0
[  422.895452]  __do_page_fault+0x4bc/0xb40
[  422.899526]  ? vmalloc_fault+0xdf0/0xdf0
[  422.904637]  ? do_page_fault+0x60/0x4f2
[  422.908603]  ? page_fault+0x2f/0x50
[  422.912362]  page_fault+0x45/0x50
[  422.915805] RIP: 81c21660:0x66614
[  422.919251] RSP: 6667e:000000000000065a EFLAGS: 00000011
[  422.957393] Mem-Info:
[  422.965504] active_anon:1337273 inactive_anon:4668 isolated_anon:0
[  422.965504]  active_file:1585 inactive_file:79 isolated_file:85
[  422.965504]  unevictable:36 dirty:2 writeback:0 unstable:0
[  422.965504]  slab_reclaimable:16327 slab_unreclaimable:116025
[  422.965504]  mapped:52472 shmem:251 pagetables:20074 bounce:0
[  422.965504]  free:24947 free_pcp:95 free_cma:0
[  422.999491] Node 0 active_anon:1937504kB inactive_anon:1848kB active_file:1456kB inactive_file:280kB unevictable:64kB isolated(anon):0kB isolated(file):212kB mapped:209472kB dirty:0kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 989184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  423.029321] Node 1 active_anon:3411588kB inactive_anon:24kB active_file:5084kB inactive_file:36kB unevictable:80kB isolated(anon):0kB isolated(file):0kB mapped:416kB dirty:8kB writeback:0kB shmem:36kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  423.057242] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4704kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  423.084867] lowmem_reserve[]: 0 2557 2557 2557 2557
[  423.094042] Node 0 DMA32 free:36392kB min:36272kB low:45340kB high:54408kB active_anon:1932800kB inactive_anon:748kB active_file:1360kB inactive_file:336kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:9824kB pagetables:23080kB bounce:0kB free_pcp:1108kB local_pcp:368kB free_cma:0kB
[  423.124590] lowmem_reserve[]: 0 0 0 0 0
[  423.130488] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  423.170402] lowmem_reserve[]: 0 0 0 0 0
[  423.174545] Node 1 Normal free:70196kB min:53612kB low:67012kB high:80412kB active_anon:3411568kB inactive_anon:24kB active_file:4496kB inactive_file:976kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:18560kB pagetables:57076kB bounce:0kB free_pcp:424kB local_pcp:312kB free_cma:0kB
[  423.205102] lowmem_reserve[]: 0 0 0 0 0
[  423.210339] Node 0 DMA: 2*4kB (M) 1*8kB (M) 1*16kB (M) 8*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10336kB
[  423.244823] Node 0 DMA32: 871*4kB (UM) 145*8kB (UM) 1042*16kB (UME) 293*32kB (UM) 17*64kB (M) 3*128kB (ME) 1*256kB (E) 2*512kB (ME) 1*1024kB (M) 1*2048kB (U) 0*4096kB = 36516kB
[  423.292737] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  423.307083] Node 1 Normal: 7*4kB (UMH) 266*8kB (UMEH) 377*16kB (UMEH) 316*32kB (UMH) 168*64kB (UMEH) 11*128kB (UME) 1*256kB (M) 2*512kB (UM) 2*1024kB (UE) 0*2048kB 8*4096kB (M) = 66556kB
[  423.342716] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  423.353225] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
14:22:13 executing program 4:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfd53)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x40003e, 0x0)
pipe(&(0x7f0000000180))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
open(0x0, 0x0, 0x0)
mlockall(0x1)
mbind(&(0x7f000078b000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000180), 0x6, 0x3)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000080)=0x20)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  423.385453] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  423.399606] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  423.422883] 3025 total pagecache pages
14:22:14 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x0, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  423.433658] 0 pages in swap cache
[  423.443722] Swap cache stats: add 0, delete 0, find 0/0
[  423.459967] Free swap  = 0kB
[  423.469228] Total swap = 0kB
[  423.479523] 1965979 pages RAM
[  423.487627] 0 pages HighMem/MovableOnly
[  423.498496] 339049 pages reserved
[  423.539847] 0 pages cma reserved
14:22:14 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(0xffffffffffffffff, r3, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r5 = socket(0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:22:14 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  423.579646] Out of memory: Kill process 9330 (syz-executor.2) score 1007 or sacrifice child
14:22:14 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

[  423.711622] Killed process 9330 (syz-executor.2) total-vm:75228kB, anon-rss:16572kB, file-rss:34816kB, shmem-rss:0kB
14:22:14 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x0, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  424.004862] serio: Serial port pts5
[  424.154180] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  424.382719] serio: Serial port pts7
[  424.528396] modprobe invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),  order=0, oom_score_adj=-1000
[  424.609754] modprobe cpuset=/ mems_allowed=0-1
[  424.620990] CPU: 1 PID: 18647 Comm: modprobe Not tainted 4.14.172-syzkaller #0
[  424.628407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  424.637766] Call Trace:
[  424.640368]  dump_stack+0x13e/0x194
[  424.644017]  dump_header+0x178/0x6d4
[  424.647746]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  424.652784]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  424.658075]  ? ___ratelimit+0x50/0x519
[  424.661985]  oom_kill_process.cold+0x10/0xae3
[  424.666640]  ? lock_downgrade+0x6e0/0x6e0
[  424.670806]  out_of_memory+0x2d5/0x1110
[  424.674796]  ? oom_killer_disable+0x1c0/0x1c0
[  424.679307]  ? mutex_trylock+0x152/0x1a0
[  424.683382]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  424.688283]  ? warn_alloc+0xf0/0xf0
[  424.692034]  __alloc_pages_nodemask+0x5d3/0x700
[  424.696872]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  424.701903]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  424.706931]  ? retint_kernel+0x2d/0x2d
[  424.710988]  alloc_pages_current+0xe7/0x1e0
[  424.715321]  pte_alloc_one+0x15/0x100
[  424.719133]  __handle_mm_fault+0x2ad5/0x3280
[  424.723552]  ? copy_page_range+0x1d70/0x1d70
[  424.728011]  ? find_held_lock+0x2d/0x110
[  424.732093]  handle_mm_fault+0x288/0x7a0
[  424.736157]  __do_page_fault+0x4bc/0xb40
[  424.740353]  ? vmalloc_fault+0xdf0/0xdf0
[  424.744427]  ? do_page_fault+0x60/0x4f2
[  424.748409]  ? page_fault+0x2f/0x50
[  424.752041]  page_fault+0x45/0x50
[  424.755505] RIP: 0000:0x7ffe82b8c228
[  424.759352] RSP: f15461c8:00007ffe82b8c210 EFLAGS: 556dfd8a4040
[  424.770370] Mem-Info:
[  424.779447] active_anon:1341361 inactive_anon:193 isolated_anon:0
[  424.779447]  active_file:54 inactive_file:68 isolated_file:14
[  424.779447]  unevictable:2903 dirty:29 writeback:0 unstable:0
[  424.779447]  slab_reclaimable:16499 slab_unreclaimable:115783
[  424.779447]  mapped:53559 shmem:250 pagetables:20115 bounce:0
[  424.779447]  free:23810 free_pcp:337 free_cma:0
[  424.813707] Node 0 active_anon:1932636kB inactive_anon:756kB active_file:28kB inactive_file:184kB unevictable:1344kB isolated(anon):0kB isolated(file):56kB mapped:210096kB dirty:16kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 974848kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  424.841998] Node 1 active_anon:3432768kB inactive_anon:16kB active_file:112kB inactive_file:12kB unevictable:10268kB isolated(anon):0kB isolated(file):0kB mapped:4108kB dirty:52kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  424.870090] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4704kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  424.898018] lowmem_reserve[]: 0 2557 2557 2557 2557
[  424.903180] Node 0 DMA32 free:40768kB min:36272kB low:45340kB high:54408kB active_anon:1927852kB inactive_anon:756kB active_file:368kB inactive_file:252kB unevictable:1344kB writepending:0kB present:3129332kB managed:2621272kB mlocked:1344kB kernel_stack:9984kB pagetables:23208kB bounce:0kB free_pcp:272kB local_pcp:0kB free_cma:0kB
[  424.932980] lowmem_reserve[]: 0 0 0 0 0
[  424.937068] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  424.963336] lowmem_reserve[]: 0 0 0 0 0
[  424.968024] Node 1 Normal free:45104kB min:53612kB low:67012kB high:80412kB active_anon:3432500kB inactive_anon:16kB active_file:140kB inactive_file:0kB unevictable:10268kB writepending:0kB present:3932160kB managed:3870192kB mlocked:10268kB kernel_stack:18624kB pagetables:57140kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  424.998333] lowmem_reserve[]: 0 0 0 0 0
[  425.002410] Node 0 DMA: 2*4kB (M) 1*8kB (M) 1*16kB (M) 8*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10336kB
[  425.017324] Node 0 DMA32: 512*4kB (UMEH) 135*8kB (UME) 993*16kB (UMEH) 261*32kB (UME) 7*64kB (M) 1*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 6*2048kB (UME) 0*4096kB = 40488kB
[  425.034535] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  425.046429] Node 1 Normal: 73*4kB (UMH) 176*8kB (UMEH) 45*16kB (UMEH) 249*32kB (UMEH) 127*64kB (UMH) 4*128kB (UME) 2*256kB (UM) 1*512kB (U) 1*1024kB (E) 0*2048kB 6*4096kB (M) = 45652kB
[  425.063950] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  425.076760] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  425.089021] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  425.098408] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  425.109307] 1799 total pagecache pages
[  425.113984] 0 pages in swap cache
[  425.118321] Swap cache stats: add 0, delete 0, find 0/0
[  425.137617] Free swap  = 0kB
[  425.140746] Total swap = 0kB
[  425.143841] 1965979 pages RAM
[  425.146981] 0 pages HighMem/MovableOnly
[  425.156120] 339049 pages reserved
[  425.159630] 0 pages cma reserved
[  425.163836] Out of memory: Kill process 18630 (syz-executor.0) score 1007 or sacrifice child
[  425.266876] udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=-1000
[  425.282750] udevd cpuset=/ mems_allowed=0-1
[  425.288770] CPU: 0 PID: 3717 Comm: udevd Not tainted 4.14.172-syzkaller #0
[  425.295840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  425.305212] Call Trace:
[  425.307909]  dump_stack+0x13e/0x194
[  425.311643]  dump_header+0x178/0x6d4
[  425.315339]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  425.320347]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  425.325436]  ? ___ratelimit+0x50/0x519
[  425.329336]  oom_kill_process.cold+0x10/0xae3
[  425.333883]  ? lock_acquire+0x170/0x3f0
[  425.337981]  ? lock_downgrade+0x6e0/0x6e0
[  425.342130]  out_of_memory+0x2d5/0x1110
[  425.346105]  ? oom_killer_disable+0x1c0/0x1c0
[  425.350593]  ? mutex_trylock+0x152/0x1a0
[  425.354701]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  425.359685]  ? warn_alloc+0xf0/0xf0
[  425.363299]  ? find_held_lock+0x2d/0x110
[  425.367375]  ? fs_reclaim_acquire+0x10/0x10
[  425.371807]  __alloc_pages_nodemask+0x5d3/0x700
[  425.376483]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  425.381493]  ? find_held_lock+0x2d/0x110
[  425.385658]  ? cache_grow_begin+0x32d/0x410
[  425.390077]  cache_grow_begin+0x7b/0x410
[  425.394215]  ? __cpuset_node_allowed+0xfa/0x450
[  425.399005]  fallback_alloc+0x205/0x2b0
[  425.402993]  kmem_cache_alloc+0x1ea/0x770
[  425.407152]  ? find_held_lock+0x2d/0x110
[  425.411212]  getname_flags+0xc8/0x560
[  425.415020]  do_sys_open+0x1c4/0x3f0
[  425.419016]  ? filp_open+0x60/0x60
[  425.422664]  ? __do_page_fault+0x35b/0xb40
[  425.426906]  ? do_syscall_64+0x4c/0x640
[  425.430866]  ? do_sys_open+0x3f0/0x3f0
[  425.434755]  do_syscall_64+0x1d5/0x640
[  425.438640]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  425.443819] RIP: 0033:0x7fa473b82120
[  425.447514] RSP: 002b:00007ffcb9354cc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  425.455207] RAX: ffffffffffffffda RBX: 0000000000f0d950 RCX: 00007fa473b82120
[  425.462470] RDX: 00000000000001b6 RSI: 0000000000080000 RDI: 00007ffcb9354da0
[  425.469781] RBP: 00007ffcb9354d40 R08: 0000000000000008 R09: 0000000000000001
[  425.477034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[  425.484295] R13: 000000000041f57a R14: 0000000000f20190 R15: 0000000000000000
[  425.500197] Mem-Info:
[  425.503413] active_anon:1341346 inactive_anon:193 isolated_anon:0
[  425.503413]  active_file:1 inactive_file:66 isolated_file:0
[  425.503413]  unevictable:3751 dirty:0 writeback:0 unstable:0
[  425.503413]  slab_reclaimable:16525 slab_unreclaimable:115595
[  425.503413]  mapped:53538 shmem:250 pagetables:20094 bounce:0
[  425.503413]  free:23457 free_pcp:152 free_cma:0
[  425.539867] Node 0 active_anon:1932676kB inactive_anon:756kB active_file:176kB inactive_file:56kB unevictable:5728kB isolated(anon):0kB isolated(file):0kB mapped:210076kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 974848kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  425.568588] Node 1 active_anon:3432708kB inactive_anon:16kB active_file:12kB inactive_file:0kB unevictable:10268kB isolated(anon):0kB isolated(file):0kB mapped:4108kB dirty:0kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  425.607028] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4704kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  425.672887] lowmem_reserve[]: 0 2557 2557 2557 2557
[  425.678138] Node 0 DMA32 free:36204kB min:36272kB low:45340kB high:54408kB active_anon:1927972kB inactive_anon:756kB active_file:92kB inactive_file:204kB unevictable:5728kB writepending:0kB present:3129332kB managed:2621272kB mlocked:5728kB kernel_stack:9888kB pagetables:23224kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  425.715918] lowmem_reserve[]: 0 0 0 0 0
[  425.725371] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  425.765429] lowmem_reserve[]: 0 0 0 0 0
[  425.769494] Node 1 Normal free:46664kB min:53612kB low:67012kB high:80412kB active_anon:3432708kB inactive_anon:16kB active_file:16kB inactive_file:0kB unevictable:10268kB writepending:0kB present:3932160kB managed:3870192kB mlocked:10268kB kernel_stack:18528kB pagetables:57152kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  425.813877] lowmem_reserve[]: 0 0 0 0 0
[  425.829649] Node 0 DMA: 2*4kB (M) 1*8kB (M) 1*16kB (M) 8*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10336kB
[  425.858126] Node 0 DMA32: 511*4kB (UM) 118*8kB (UME) 981*16kB (UE) 252*32kB (UME) 2*64kB (ME) 1*128kB (E) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 36476kB
[  425.878388] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  425.894510] Node 1 Normal: 80*4kB (UMH) 229*8kB (UMEH) 76*16kB (UMEH) 251*32kB (UMEH) 127*64kB (UMH) 4*128kB (UME) 2*256kB (UM) 1*512kB (U) 1*1024kB (E) 0*2048kB 6*4096kB (M) = 46664kB
[  425.920585] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  425.929491] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  425.942360] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  425.953031] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  425.963478] 1599 total pagecache pages
[  425.967588] 0 pages in swap cache
[  425.972972] Swap cache stats: add 0, delete 0, find 0/0
[  425.978373] Free swap  = 0kB
[  425.992303] Total swap = 0kB
[  425.995348] 1965979 pages RAM
[  425.998474] 0 pages HighMem/MovableOnly
[  426.019444] 339049 pages reserved
[  426.026502] 0 pages cma reserved
[  426.033916] Out of memory: Kill process 18654 (syz-executor.2) score 1007 or sacrifice child
[  426.046234] Killed process 18654 (syz-executor.2) total-vm:75096kB, anon-rss:16564kB, file-rss:35708kB, shmem-rss:0kB
[  426.169206] oom_reaper: reaped process 18654 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[  426.236290] syz-executor.3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[  426.262655] syz-executor.3 cpuset=syz3 mems_allowed=0-1
[  426.268204] CPU: 1 PID: 7543 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0
[  426.276646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  426.286006] Call Trace:
[  426.288603]  dump_stack+0x13e/0x194
[  426.292249]  dump_header+0x178/0x6d4
[  426.295969]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  426.301103]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  426.306219]  ? ___ratelimit+0x50/0x519
[  426.310126]  oom_kill_process.cold+0x10/0xae3
[  426.314635]  ? lock_acquire+0x170/0x3f0
[  426.318698]  ? lock_downgrade+0x6e0/0x6e0
[  426.322999]  out_of_memory+0x2d5/0x1110
[  426.327074]  ? oom_killer_disable+0x1c0/0x1c0
[  426.331599]  ? mutex_trylock+0x152/0x1a0
[  426.335655]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  426.340501]  ? warn_alloc+0xf0/0xf0
[  426.344142]  ? find_held_lock+0x2d/0x110
[  426.348311]  ? fs_reclaim_acquire+0x10/0x10
[  426.352749]  __alloc_pages_nodemask+0x5d3/0x700
[  426.357412]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  426.362427]  ? find_held_lock+0x2d/0x110
[  426.366503]  ? cache_grow_begin+0x32d/0x410
[  426.370828]  cache_grow_begin+0x7b/0x410
[  426.374899]  ? __cpuset_node_allowed+0xfa/0x450
[  426.379581]  fallback_alloc+0x205/0x2b0
[  426.383578]  kmem_cache_alloc+0x1ea/0x770
[  426.387737]  ? find_held_lock+0x2d/0x110
[  426.391803]  getname_flags+0xc8/0x560
[  426.395607]  user_path_mountpoint_at+0x23/0x40
[  426.400195]  SyS_umount+0x10a/0x340
[  426.403829]  ? __detach_mounts+0x2e0/0x2e0
[  426.408063]  ? __do_page_fault+0x35b/0xb40
[  426.412397]  ? do_syscall_64+0x4c/0x640
[  426.416412]  ? __detach_mounts+0x2e0/0x2e0
[  426.420655]  do_syscall_64+0x1d5/0x640
[  426.424708]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  426.429911] RIP: 0033:0x45eea7
[  426.433106] RSP: 002b:00007ffc0b9e3328 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  426.440992] RAX: ffffffffffffffda RBX: 0000000000067b3d RCX: 000000000045eea7
[  426.448266] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffc0b9e4460
[  426.455726] RBP: 00000000000003b3 R08: 0000000000000001 R09: 00000000022c3940
[  426.463087] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc0b9e4460
[  426.470451] R13: 00007ffc0b9e4450 R14: 0000000000000000 R15: 00007ffc0b9e4460
[  426.484405] Mem-Info:
[  426.494844] active_anon:1337221 inactive_anon:193 isolated_anon:0
[  426.494844]  active_file:43 inactive_file:91 isolated_file:0
[  426.494844]  unevictable:6298 dirty:0 writeback:0 unstable:0
[  426.494844]  slab_reclaimable:16535 slab_unreclaimable:115340
[  426.494844]  mapped:54071 shmem:250 pagetables:20066 bounce:0
[  426.494844]  free:25210 free_pcp:0 free_cma:0
[  426.529939] Node 0 active_anon:1927500kB inactive_anon:756kB active_file:264kB inactive_file:576kB unevictable:10748kB isolated(anon):0kB isolated(file):128kB mapped:210680kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 974848kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  426.563825] Node 1 active_anon:3421384kB inactive_anon:16kB active_file:68kB inactive_file:68kB unevictable:14444kB isolated(anon):0kB isolated(file):0kB mapped:6104kB dirty:0kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  426.592476] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4704kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  426.619945] lowmem_reserve[]: 0 2557 2557 2557 2557
[  426.625053] Node 0 DMA32 free:36724kB min:36272kB low:45340kB high:54408kB active_anon:1922796kB inactive_anon:756kB active_file:0kB inactive_file:48kB unevictable:10748kB writepending:0kB present:3129332kB managed:2621272kB mlocked:10748kB kernel_stack:9856kB pagetables:23136kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB
[  426.659497] lowmem_reserve[]: 0 0 0 0 0
[  426.664120] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  426.694090] lowmem_reserve[]: 0 0 0 0 0
[  426.698582] Node 1 Normal free:54400kB min:53612kB low:67012kB high:80412kB active_anon:3421384kB inactive_anon:16kB active_file:304kB inactive_file:0kB unevictable:14444kB writepending:0kB present:3932160kB managed:3870192kB mlocked:14444kB kernel_stack:18528kB pagetables:57124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  426.732280] lowmem_reserve[]: 0 0 0 0 0
[  426.736577] Node 0 DMA: 2*4kB (M) 1*8kB (M) 1*16kB (M) 8*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10336kB
[  426.764792] Node 0 DMA32: 643*4kB (UME) 124*8kB (UME) 980*16kB (UME) 247*32kB (UM) 0*64kB 4*128kB (ME) 2*256kB (ME) 1*512kB (E) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 35852kB
[  426.781310] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  426.792206] Node 1 Normal: 105*4kB (UMEH) 249*8kB (UMEH) 93*16kB (UMEH) 269*32kB (UMEH) 128*64kB (UMH) 4*128kB (UME) 4*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 0*2048kB 7*4096kB (M) = 54492kB
[  426.809376] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  426.818306] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  426.840216] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  426.849127] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  426.893521] 2122 total pagecache pages
[  426.897609] 0 pages in swap cache
[  426.912005] Swap cache stats: add 0, delete 0, find 0/0
[  426.917452] Free swap  = 0kB
[  426.924576] Total swap = 0kB
[  426.927756] 1965979 pages RAM
[  426.933706] 0 pages HighMem/MovableOnly
[  426.945639] 339049 pages reserved
[  426.949147] 0 pages cma reserved
[  426.987078] Out of memory: Kill process 18612 (syz-executor.4) score 1008 or sacrifice child
[  427.003763] Killed process 18612 (syz-executor.4) total-vm:74964kB, anon-rss:17972kB, file-rss:41192kB, shmem-rss:0kB
[  427.041786] oom_reaper: reaped process 18612 (syz-executor.4), now anon-rss:17956kB, file-rss:6376kB, shmem-rss:0kB
[  427.067582] syz-executor.2 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[  427.111439] syz-executor.2 cpuset=syz2 mems_allowed=0-1
[  427.132132] CPU: 1 PID: 7544 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0
[  427.140089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  427.149451] Call Trace:
[  427.152060]  dump_stack+0x13e/0x194
[  427.155703]  dump_header+0x178/0x6d4
[  427.159442]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  427.164505]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  427.169619]  ? ___ratelimit+0x50/0x519
[  427.173549]  oom_kill_process.cold+0x10/0xae3
[  427.178056]  ? lock_acquire+0x170/0x3f0
[  427.182038]  ? lock_downgrade+0x6e0/0x6e0
[  427.186202]  out_of_memory+0x2d5/0x1110
[  427.190300]  ? oom_killer_disable+0x1c0/0x1c0
[  427.194805]  ? mutex_trylock+0x152/0x1a0
[  427.198909]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  427.203783]  ? warn_alloc+0xf0/0xf0
[  427.207425]  ? find_held_lock+0x2d/0x110
[  427.211495]  ? fs_reclaim_acquire+0x10/0x10
[  427.215935]  __alloc_pages_nodemask+0x5d3/0x700
[  427.220616]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  427.225644]  ? find_held_lock+0x2d/0x110
[  427.229838]  ? cache_grow_begin+0x32d/0x410
[  427.234173]  cache_grow_begin+0x7b/0x410
[  427.238250]  ? __cpuset_node_allowed+0xfa/0x450
[  427.242940]  fallback_alloc+0x205/0x2b0
[  427.247037]  kmem_cache_alloc+0x1ea/0x770
[  427.251206]  ? find_held_lock+0x2d/0x110
[  427.255279]  getname_flags+0xc8/0x560
[  427.259091]  user_path_mountpoint_at+0x23/0x40
[  427.263680]  SyS_umount+0x10a/0x340
[  427.267925]  ? __detach_mounts+0x2e0/0x2e0
[  427.272165]  ? __do_page_fault+0x35b/0xb40
[  427.276402]  ? do_syscall_64+0x4c/0x640
[  427.280554]  ? __detach_mounts+0x2e0/0x2e0
[  427.284907]  do_syscall_64+0x1d5/0x640
[  427.288836]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  427.294034] RIP: 0033:0x45eea7
[  427.297225] RSP: 002b:00007ffd086e7af8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  427.305154] RAX: ffffffffffffffda RBX: 0000000000067c09 RCX: 000000000045eea7
[  427.312435] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffd086e8c30
[  427.319800] RBP: 0000000000000663 R08: 0000000000000001 R09: 000000000233e940
[  427.327197] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd086e8c30
[  427.334477] R13: 00007ffd086e8c20 R14: 0000000000000000 R15: 00007ffd086e8c30
[  427.453190] Mem-Info:
[  427.455738] active_anon:1337228 inactive_anon:193 isolated_anon:0
[  427.455738]  active_file:16 inactive_file:7 isolated_file:0
[  427.455738]  unevictable:6300 dirty:0 writeback:0 unstable:0
[  427.455738]  slab_reclaimable:16565 slab_unreclaimable:115371
[  427.455738]  mapped:54053 shmem:250 pagetables:20068 bounce:0
[  427.455738]  free:25081 free_pcp:0 free_cma:0
[  427.542643] Node 0 active_anon:1927504kB inactive_anon:756kB active_file:92kB inactive_file:40kB unevictable:10748kB isolated(anon):0kB isolated(file):0kB mapped:210044kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 974848kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  427.571088] Node 1 active_anon:3421408kB inactive_anon:16kB active_file:0kB inactive_file:0kB unevictable:14452kB isolated(anon):0kB isolated(file):0kB mapped:6040kB dirty:0kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  427.600584] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4704kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  427.627288] lowmem_reserve[]: 0 2557 2557 2557 2557
[  427.633010] Node 0 DMA32 free:36560kB min:36272kB low:45340kB high:54408kB active_anon:1922800kB inactive_anon:756kB active_file:268kB inactive_file:140kB unevictable:10748kB writepending:0kB present:3129332kB managed:2621272kB mlocked:10748kB kernel_stack:9856kB pagetables:23140kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  427.663687] lowmem_reserve[]: 0 0 0 0 0
[  427.667747] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  427.792122] lowmem_reserve[]: 0 0 0 0 0
[  427.796174] Node 1 Normal free:53268kB min:53612kB low:67012kB high:80412kB active_anon:3421408kB inactive_anon:16kB active_file:272kB inactive_file:0kB unevictable:14452kB writepending:0kB present:3932160kB managed:3870192kB mlocked:14452kB kernel_stack:18464kB pagetables:57128kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  427.825841] lowmem_reserve[]: 0 0 0 0 0
[  427.829877] Node 0 DMA: 2*4kB (M) 1*8kB (M) 1*16kB (M) 8*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10336kB
[  427.848585] Node 0 DMA32: 650*4kB (UME) 147*8kB (UM) 992*16kB (UME) 251*32kB (UME) 2*64kB (ME) 3*128kB (E) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 36896kB
[  427.864839] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  427.875783] Node 1 Normal: 63*4kB (UMH) 237*8kB (UMEH) 82*16kB (UMEH) 266*32kB (UMEH) 128*64kB (UMH) 4*128kB (UME) 4*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 0*2048kB 7*4096kB (M) = 53956kB
[  427.918018] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  427.943212] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  427.952029] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  427.961074] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  427.969923] 2151 total pagecache pages
[  427.973932] 0 pages in swap cache
[  427.977410] Swap cache stats: add 0, delete 0, find 0/0
[  427.982830] Free swap  = 0kB
[  427.985863] Total swap = 0kB
[  427.988895] 1965979 pages RAM
[  427.992366] 0 pages HighMem/MovableOnly
[  427.996329] 339049 pages reserved
[  427.999843] 0 pages cma reserved
[  428.003520] Out of memory: Kill process 9400 (syz-executor.2) score 1007 or sacrifice child
[  428.012126] Killed process 9400 (syz-executor.2) total-vm:75228kB, anon-rss:16572kB, file-rss:34816kB, shmem-rss:0kB
[  428.076609] oom_reaper: reaped process 9400 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
14:22:18 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(0xffffffffffffffff, r3, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r5 = socket(0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:22:19 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

14:22:19 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r3 = getpid()
tkill(r3, 0x9)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@ipv4={[], [], @empty}, @in=@multicast2}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe4)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0xfb, 0x3]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80000000000]})
syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7f, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000002c0)={'filter\x00', 0x6f, "afb6cc97e591386f31d56eb2cdbb082c5bff709467184217c473157f85eb1d01663bd3bfa3dcd51379c39bd1158bbe29593f6c4828c62d1d958ae1cdbb0c55bc3727589ddcf126f3ce3f7055efca8a6f69e17106d0e7b10db9ffc2e5d0272ce19a42cdfa65e0cc7c8036058d84cb18"}, &(0x7f0000000080)=0x93)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@iv={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10}, @iv={0xc4, 0x117, 0x2, 0xb2, "5c5f68b8b1f93617cf7a433a751d573c267c0e472b99f5874067371a1eb727f313be2d5f19953b56b9605dc304250cace1c755efcc6952ac740803432ff9a96885187f23ce4e68e73a81fda42636177c535e0e15a55cc9a23d49b5e8052f5c2ab45f1f7259a450dde0ef04d116718a01361697f8adbc423662138bafca78604f6ed65ea74007e81440a985023d26b78e26c65f5039cb09cb33c9e6cd5ddd8264f212728e2e17b716d61363d3e78eb6cec0a0"}, @iv={0x30, 0x117, 0x2, 0x1e, "f816bb6a233b55a9291805f6785e0241cb0e9f040a83b70c19ae2055148e"}, @assoc={0x10, 0x117, 0x4, 0x8000}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}], 0x154, 0x20000000}], 0x1, 0x800)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:22:19 executing program 4:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfd53)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x40003e, 0x0)
pipe(&(0x7f0000000180))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
open(0x0, 0x0, 0x0)
mlockall(0x1)
mbind(&(0x7f000078b000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000180), 0x6, 0x3)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000080)=0x20)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

14:22:19 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:22:19 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  428.713078] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
14:22:19 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r3 = getpid()
tkill(r3, 0x9)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@ipv4={[], [], @empty}, @in=@multicast2}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe4)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0xfb, 0x3]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80000000000]})
syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7f, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000002c0)={'filter\x00', 0x6f, "afb6cc97e591386f31d56eb2cdbb082c5bff709467184217c473157f85eb1d01663bd3bfa3dcd51379c39bd1158bbe29593f6c4828c62d1d958ae1cdbb0c55bc3727589ddcf126f3ce3f7055efca8a6f69e17106d0e7b10db9ffc2e5d0272ce19a42cdfa65e0cc7c8036058d84cb18"}, &(0x7f0000000080)=0x93)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@iv={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10}, @iv={0xc4, 0x117, 0x2, 0xb2, "5c5f68b8b1f93617cf7a433a751d573c267c0e472b99f5874067371a1eb727f313be2d5f19953b56b9605dc304250cace1c755efcc6952ac740803432ff9a96885187f23ce4e68e73a81fda42636177c535e0e15a55cc9a23d49b5e8052f5c2ab45f1f7259a450dde0ef04d116718a01361697f8adbc423662138bafca78604f6ed65ea74007e81440a985023d26b78e26c65f5039cb09cb33c9e6cd5ddd8264f212728e2e17b716d61363d3e78eb6cec0a0"}, @iv={0x30, 0x117, 0x2, 0x1e, "f816bb6a233b55a9291805f6785e0241cb0e9f040a83b70c19ae2055148e"}, @assoc={0x10, 0x117, 0x4, 0x8000}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}], 0x154, 0x20000000}], 0x1, 0x800)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  429.015079] serio: Serial port pts5
14:22:19 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:22:19 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(0xffffffffffffffff, r3, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000100))
socket(0x0, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  429.360905] serio: Serial port pts5
14:22:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

[  429.668227] serio: Serial port pts1
[  429.794429] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
14:22:20 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:22:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

14:22:20 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x4, 0x0, 0x0, &(0x7f0000000140), 0x0)
shmctl$IPC_INFO(0x0, 0x3, 0x0)

14:22:20 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(0xffffffffffffffff, r3, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000100))
socket(0x0, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  430.221327] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  430.345886] serio: Serial port pts5
14:22:21 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)

14:22:23 executing program 4:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open(0x0, 0x141042, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
futex(&(0x7f0000000080), 0x4, 0x2, &(0x7f0000000100)={r0, r1+30000000}, &(0x7f0000000140), 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
open(0x0, 0x141042, 0x110)
clock_adjtime(0x0, &(0x7f0000000280)={0x2, 0x2, 0xe9, 0x0, 0x0, 0x0, 0x0, 0xd3d4, 0x0, 0x0, 0x0, 0xffffffff, 0x9, 0x4, 0x0, 0x8000, 0x6, 0x8, 0x8, 0x8001, 0x0, 0x80000001, 0xfffffff9})
keyctl$chown(0x4, 0x0, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
recvmmsg(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

14:22:23 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:22:23 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

[  433.180861] serio: Serial port pts1
[  435.681784] NOHZ: local_softirq_pending 08
[  435.686450] NOHZ: local_softirq_pending 08
[  436.962857] NOHZ: local_softirq_pending 08
14:22:29 executing program 4:
r0 = gettid()
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
tkill(r0, 0x0)

[  440.207617] audit: type=1326 audit(1583072550.772:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=18766 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f2ba code=0x0
14:22:31 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:22:31 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(0xffffffffffffffff, r3, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000100))
socket(0x0, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  441.047128] audit: type=1326 audit(1583072551.592:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=18766 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f2ba code=0x0
14:22:36 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00')
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4cb]})
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x3d2, 0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00')
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
open(0x0, 0x0, 0x0)

14:22:36 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r3, r0, 0x0)

14:22:37 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x0, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  452.551708] syz-executor.1 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),  order=3, oom_score_adj=1000
[  452.565748] syz-executor.1 cpuset=syz1 mems_allowed=0-1
[  452.591443] CPU: 1 PID: 18777 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0
[  452.599406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  452.608787] Call Trace:
[  452.611387]  dump_stack+0x13e/0x194
[  452.615155]  dump_header+0x178/0x6d4
[  452.618885]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  452.623920]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  452.629021]  ? ___ratelimit+0x50/0x519
[  452.632919]  oom_kill_process.cold+0x10/0xae3
[  452.637427]  ? lock_acquire+0x170/0x3f0
[  452.641412]  ? lock_downgrade+0x6e0/0x6e0
[  452.645582]  out_of_memory+0x2d5/0x1110
[  452.649573]  ? oom_killer_disable+0x1c0/0x1c0
[  452.654078]  ? mutex_trylock+0x152/0x1a0
[  452.658145]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  452.663014]  ? warn_alloc+0xf0/0xf0
[  452.666648]  ? find_held_lock+0x2d/0x110
[  452.670742]  ? fs_reclaim_acquire+0x10/0x10
[  452.675074]  __alloc_pages_nodemask+0x5d3/0x700
[  452.679889]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  452.686347]  ? copy_process.part.0+0x17d5/0x6a70
[  452.691127]  ? rcu_read_lock_sched_held+0x10a/0x130
[  452.696256]  ? save_trace+0x290/0x290
[  452.700078]  copy_process.part.0+0x26a/0x6a70
[  452.704586]  ? find_held_lock+0x2d/0x110
[  452.709026]  ? __handle_mm_fault+0x1af7/0x3280
[  452.713631]  ? lock_downgrade+0x6e0/0x6e0
[  452.717789]  ? pud_val+0xd0/0xd0
[  452.721283]  ? do_raw_spin_unlock+0x164/0x250
[  452.725791]  ? __cleanup_sighand+0x40/0x40
[  452.730042]  _do_fork+0x180/0xc80
[  452.733500]  ? fork_idle+0x270/0x270
[  452.737361]  ? up_read+0x17/0x30
[  452.740711]  ? __do_page_fault+0x35b/0xb40
[  452.745027]  ? do_syscall_64+0x4c/0x640
[  452.748998]  ? sys_vfork+0x20/0x20
[  452.752530]  do_syscall_64+0x1d5/0x640
[  452.756642]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  452.761831] RIP: 0033:0x45ee49
[  452.765004] RSP: 002b:00007ffd4baf9f68 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[  452.772703] RAX: ffffffffffffffda RBX: 00007fe226046700 RCX: 000000000045ee49
[  452.779996] RDX: 00007fe2260469d0 RSI: 00007fe226045db0 RDI: 00000000003d0f00
[  452.787265] RBP: 00007ffd4bafa180 R08: 00007fe226046700 R09: 00007fe226046700
[  452.794532] R10: 00007fe2260469d0 R11: 0000000000000202 R12: 0000000000000000
[  452.801924] R13: 00007ffd4bafa01f R14: 00007fe2260469c0 R15: 000000000076c06c
[  452.811594] Mem-Info:
[  452.814025] active_anon:1344312 inactive_anon:195 isolated_anon:0
[  452.814025]  active_file:42 inactive_file:37 isolated_file:0
[  452.814025]  unevictable:0 dirty:2 writeback:0 unstable:0
[  452.814025]  slab_reclaimable:17142 slab_unreclaimable:113958
[  452.814025]  mapped:52243 shmem:250 pagetables:20098 bounce:0
[  452.814025]  free:24940 free_pcp:167 free_cma:0
[  452.850020] Node 0 active_anon:1937092kB inactive_anon:752kB active_file:52kB inactive_file:152kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208944kB dirty:0kB writeback:0kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  452.879500] Node 1 active_anon:3440156kB inactive_anon:28kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:8kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  452.907202] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:4704kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  452.934546] lowmem_reserve[]: 0 2557 2557 2557 2557
[  452.940700] Node 0 DMA32 free:35796kB min:36272kB low:45340kB high:54408kB active_anon:1932388kB inactive_anon:752kB active_file:24kB inactive_file:244kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:9856kB pagetables:23132kB bounce:0kB free_pcp:296kB local_pcp:44kB free_cma:0kB
[  452.971175] lowmem_reserve[]: 0 0 0 0 0
[  452.975599] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  453.001886] lowmem_reserve[]: 0 0 0 0 0
[  453.006514] Node 1 Normal free:53696kB min:53612kB low:67012kB high:80412kB active_anon:3439788kB inactive_anon:28kB active_file:192kB inactive_file:848kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:18400kB pagetables:57252kB bounce:0kB free_pcp:440kB local_pcp:108kB free_cma:0kB
[  453.041370] lowmem_reserve[]: 0 0 0 0 0
[  453.045648] Node 0 DMA: 2*4kB (M) 10*8kB (UM) 2*16kB (UM) 9*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10456kB
[  453.061119] Node 0 DMA32: 600*4kB (UME) 572*8kB (UME) 1087*16kB (UME) 296*32kB (UME) 3*64kB (M) 1*128kB (M) 0*256kB 0*512kB 2*1024kB (ME) 0*2048kB 0*4096kB = 36208kB
[  453.096034] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  453.116539] Node 1 Normal: 47*4kB (UMEH) 136*8kB (UMEH) 73*16kB (UMEH) 471*32kB (UMEH) 170*64kB (UMEH) 1*128kB (M) 3*256kB (UME) 1*512kB (U) 0*1024kB 2*2048kB (UM) 5*4096kB (M) = 54380kB
[  453.153596] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  453.165127] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  453.174470] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  453.184077] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  453.194994] 589 total pagecache pages
[  453.198889] 0 pages in swap cache
[  453.210748] Swap cache stats: add 0, delete 0, find 0/0
[  453.216164] Free swap  = 0kB
[  453.219222] Total swap = 0kB
[  453.222283] 1965979 pages RAM
[  453.225381] 0 pages HighMem/MovableOnly
[  453.229466] 339049 pages reserved
[  453.233083] 0 pages cma reserved
[  453.236452] Out of memory: Kill process 9439 (syz-executor.1) score 1007 or sacrifice child
[  453.245760] Killed process 9439 (syz-executor.1) total-vm:75228kB, anon-rss:16572kB, file-rss:34816kB, shmem-rss:0kB
[  453.277160] oom_reaper: reaped process 9439 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[  453.484944] kworker/u4:1 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),  order=3, oom_score_adj=0
[  453.511754] kworker/u4:1 cpuset=/ mems_allowed=0-1
[  453.517437] CPU: 1 PID: 22 Comm: kworker/u4:1 Not tainted 4.14.172-syzkaller #0
[  453.524897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  453.534670] Workqueue: events_unbound call_usermodehelper_exec_work
[  453.541089] Call Trace:
[  453.543675]  dump_stack+0x13e/0x194
[  453.547445]  dump_header+0x178/0x6d4
[  453.551154]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  453.556252]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  453.561392]  ? ___ratelimit+0x50/0x519
[  453.565449]  oom_kill_process.cold+0x10/0xae3
[  453.569944]  ? lock_downgrade+0x6e0/0x6e0
[  453.574095]  out_of_memory+0x2d5/0x1110
[  453.578076]  ? oom_killer_disable+0x1c0/0x1c0
[  453.582579]  ? mutex_trylock+0x152/0x1a0
[  453.586637]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  453.591486]  ? warn_alloc+0xf0/0xf0
[  453.595123]  __alloc_pages_nodemask+0x5d3/0x700
[  453.600588]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  453.605609]  ? copy_process.part.0+0x17d5/0x6a70
[  453.610462]  ? rcu_read_lock_sched_held+0x10a/0x130
[  453.615495]  copy_process.part.0+0x26a/0x6a70
[  453.619991]  ? __lock_acquire+0x5f7/0x4620
[  453.624214]  ? __lock_acquire+0x5f7/0x4620
[  453.628526]  ? depot_save_stack+0x10d/0x401
[  453.632862]  ? umh_complete+0x80/0x80
[  453.636661]  ? __cleanup_sighand+0x40/0x40
[  453.640883]  ? save_trace+0x290/0x290
[  453.644693]  ? umh_complete+0x80/0x80
[  453.648511]  _do_fork+0x180/0xc80
[  453.651966]  ? fork_idle+0x270/0x270
[  453.655675]  ? mark_held_locks+0xa6/0xf0
[  453.659735]  ? _raw_spin_unlock_irq+0x24/0x80
[  453.664317]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  453.669345]  ? _raw_spin_unlock_irq+0x5a/0x80
[  453.673828]  ? kernel_sigaction+0x13b/0x200
[  453.678137]  ? recalc_sigpending+0x90/0x90
[  453.682362]  ? umh_complete+0x80/0x80
[  453.686173]  kernel_thread+0x2f/0x40
[  453.689907]  call_usermodehelper_exec_work+0x97/0x210
[  453.695095]  ? call_usermodehelper_exec_async+0x4c0/0x4c0
[  453.700636]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[  453.706091]  process_one_work+0x813/0x1540
[  453.710332]  ? pwq_dec_nr_in_flight+0x2b0/0x2b0
[  453.714990]  ? worker_thread+0x15d/0x1070
[  453.719251]  ? _raw_spin_unlock_irq+0x24/0x80
[  453.723763]  worker_thread+0x5d1/0x1070
[  453.727878]  ? process_one_work+0x1540/0x1540
[  453.732369]  kthread+0x30d/0x420
[  453.735740]  ? kthread_create_on_node+0xd0/0xd0
[  453.740407]  ret_from_fork+0x24/0x30
[  453.768950] Mem-Info:
[  453.771506] active_anon:1342579 inactive_anon:195 isolated_anon:0
[  453.771506]  active_file:53 inactive_file:19 isolated_file:27
[  453.771506]  unevictable:0 dirty:0 writeback:0 unstable:0
[  453.771506]  slab_reclaimable:17175 slab_unreclaimable:113536
[  453.771506]  mapped:52278 shmem:250 pagetables:20101 bounce:0
[  453.771506]  free:27267 free_pcp:169 free_cma:0
[  453.808749] Node 0 active_anon:1929392kB inactive_anon:752kB active_file:148kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):108kB mapped:209012kB dirty:0kB writeback:0kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  453.843389] Node 1 active_anon:3440924kB inactive_anon:28kB active_file:64kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  453.872602] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:4704kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  453.905459] lowmem_reserve[]: 0 2557 2557 2557 2557
[  453.922420] Node 0 DMA32 free:43204kB min:36272kB low:45340kB high:54408kB active_anon:1924352kB inactive_anon:752kB active_file:408kB inactive_file:0kB unevictable:0kB writepending:56kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:9888kB pagetables:23032kB bounce:0kB free_pcp:456kB local_pcp:136kB free_cma:0kB
[  454.009235] lowmem_reserve[]: 0 0 0 0 0
[  454.013488] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  454.039159] lowmem_reserve[]: 0 0 0 0 0
[  454.044146] Node 1 Normal free:55300kB min:53612kB low:67012kB high:80412kB active_anon:3440928kB inactive_anon:24kB active_file:84kB inactive_file:16kB unevictable:0kB writepending:28kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:18432kB pagetables:57264kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  454.073451] lowmem_reserve[]: 0 0 0 0 0
[  454.077433] Node 0 DMA: 2*4kB (M) 8*8kB (UM) 2*16kB (UM) 9*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10440kB
[  454.093613] Node 0 DMA32: 554*4kB (UM) 401*8kB (UM) 1045*16kB (UME) 279*32kB (UME) 8*64kB (ME) 0*128kB 1*256kB (E) 2*512kB (ME) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 43104kB
[  454.109310] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  454.121358] Node 1 Normal: 71*4kB (UMEH) 158*8kB (UMEH) 79*16kB (UMEH) 494*32kB (UMEH) 174*64kB (UMEH) 1*128kB (M) 3*256kB (UME) 1*512kB (U) 0*1024kB 2*2048kB (UM) 5*4096kB (M) = 55740kB
[  454.138815] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  454.148258] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  454.157238] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  454.186068] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  454.225047] 1445 total pagecache pages
[  454.230774] 0 pages in swap cache
[  454.244398] Swap cache stats: add 0, delete 0, find 0/0
[  454.268604] Free swap  = 0kB
[  454.280101] Total swap = 0kB
[  454.283905] 1965979 pages RAM
[  454.288902] 0 pages HighMem/MovableOnly
[  454.299352] 339049 pages reserved
[  454.302979] 0 pages cma reserved
[  454.306436] Out of memory: Kill process 12236 (syz-executor.2) score 1007 or sacrifice child
[  454.315959] Killed process 12236 (syz-executor.2) total-vm:75228kB, anon-rss:16572kB, file-rss:34816kB, shmem-rss:0kB
[  454.358316] oom_reaper: reaped process 12236 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
14:22:45 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup2(r0, 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0)
r2 = socket(0x29, 0x80002, 0x0)
sendfile(r2, r1, 0x0, 0x6000002000b00)

[  455.957976] serio: Serial port pts1
14:22:47 executing program 5:

14:22:47 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:22:47 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x0, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:22:47 executing program 5:

[  458.721327] NOHZ: local_softirq_pending 08
[  459.347938] serio: Serial port pts1
[  460.453320] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
14:22:51 executing program 5:

14:22:51 executing program 4:

14:22:56 executing program 5:

14:22:57 executing program 4:
r0 = memfd_create(&(0x7f00000000c0)='/dev/sequencer2\x00', 0x0)
ioctl$BLKBSZGET(r0, 0x5451, 0x0)

14:22:58 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:22:58 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(0xffffffffffffffff, r3, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r5 = socket(0x0, 0x2, 0x0)
recvmmsg(r5, 0x0, 0x0, 0x0, 0x0)

14:22:58 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x0, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:23:02 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000b40), 0x24, 0x0)

[  473.612779] syz-executor.1 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null),  order=0, oom_score_adj=1000
[  473.630474] syz-executor.1 cpuset=syz1 mems_allowed=0-1
[  473.635893] CPU: 0 PID: 18848 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0
[  473.643777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  473.653184] Call Trace:
[  473.656089]  dump_stack+0x13e/0x194
[  473.659703]  dump_header+0x178/0x6d4
[  473.663419]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  473.668427]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  473.673683]  ? ___ratelimit+0x50/0x519
[  473.677563]  oom_kill_process.cold+0x10/0xae3
[  473.682180]  ? lock_acquire+0x170/0x3f0
[  473.686177]  ? lock_downgrade+0x6e0/0x6e0
[  473.690328]  out_of_memory+0x2d5/0x1110
[  473.694300]  ? oom_killer_disable+0x1c0/0x1c0
[  473.698781]  ? mutex_trylock+0x152/0x1a0
[  473.702846]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  473.707696]  ? warn_alloc+0xf0/0xf0
[  473.711451]  __alloc_pages_nodemask+0x5d3/0x700
[  473.716224]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  473.721250]  ? find_held_lock+0x2d/0x110
[  473.725310]  alloc_pages_vma+0xc2/0x4a0
[  473.729422]  wp_page_copy+0xa22/0x1300
[  473.733329]  ? follow_pfn+0x200/0x200
[  473.737234]  do_wp_page+0x244/0x11d0
[  473.740942]  ? lock_acquire+0x170/0x3f0
[  473.744924]  ? finish_mkwrite_fault+0x640/0x640
[  473.749725]  __handle_mm_fault+0x1c0e/0x3280
[  473.754178]  ? copy_page_range+0x1d70/0x1d70
[  473.758630]  ? find_held_lock+0x2d/0x110
[  473.762690]  handle_mm_fault+0x288/0x7a0
[  473.766760]  __do_page_fault+0x4bc/0xb40
[  473.770831]  ? vmalloc_fault+0xdf0/0xdf0
[  473.774880]  ? do_page_fault+0x60/0x4f2
[  473.778853]  page_fault+0x25/0x50
[  473.782306] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20
[  473.788178] RSP: 0000:ffff88820bb37b60 EFLAGS: 00010206
[  473.793548] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000500
[  473.800803] RDX: 0000000000001000 RSI: ffff88820f774b00 RDI: 000000002086f000
[  473.808122] RBP: 000000002086e500 R08: ffffed1041eeea00 R09: 0000000000000000
[  473.815391] R10: ffffed1041eee9ff R11: ffff88820f774fff R12: ffff88820f774000
[  473.822656] R13: 00007ffffffff000 R14: 000000002086f500 R15: ffff88820bb37de0
[  473.829940]  copyout+0x99/0xc0
[  473.833139]  copy_page_to_iter+0x32a/0xc80
[  473.837375]  pipe_to_user+0xa8/0x160
[  473.841083]  ? anon_pipe_buf_release+0x21a/0x2e0
[  473.845841]  __splice_from_pipe+0x332/0x740
[  473.850179]  ? iter_to_pipe+0x4c0/0x4c0
[  473.854154]  vmsplice_to_user+0x197/0x1c0
[  473.858305]  ? __splice_from_pipe+0x740/0x740
[  473.862806]  ? save_trace+0x290/0x290
[  473.866721]  ? __might_fault+0x104/0x1b0
[  473.870785]  ? find_held_lock+0x2d/0x110
[  473.874897]  ? lock_downgrade+0x6e0/0x6e0
[  473.879049]  ? __fget+0x228/0x360
[  473.882506]  SyS_vmsplice+0x12a/0x150
[  473.886304]  ? default_file_splice_write+0x80/0x80
[  473.891230]  do_syscall_64+0x1d5/0x640
[  473.895217]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  473.900573] RIP: 0033:0x45c479
[  473.903756] RSP: 002b:00007fe226066c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  473.911587] RAX: ffffffffffffffda RBX: 00007fe2260676d4 RCX: 000000000045c479
[  473.918852] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000006
[  473.926118] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000
[  473.933435] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  473.940771] R13: 0000000000000c45 R14: 00000000004ce26e R15: 000000000076bfcc
[  473.961382] Mem-Info:
[  473.963945] active_anon:1346434 inactive_anon:195 isolated_anon:0
[  473.963945]  active_file:42 inactive_file:14 isolated_file:0
[  473.963945]  unevictable:0 dirty:0 writeback:0 unstable:0
[  473.963945]  slab_reclaimable:17673 slab_unreclaimable:112136
[  473.963945]  mapped:52232 shmem:250 pagetables:20146 bounce:0
[  473.963945]  free:24501 free_pcp:4 free_cma:0
[  473.997810] Node 0 active_anon:1940444kB inactive_anon:756kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208928kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 954368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  474.033758] Node 1 active_anon:3445292kB inactive_anon:24kB active_file:80kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  474.064713] Node 0 DMA free:10392kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  474.111118] lowmem_reserve[]: 0 2557 2557 2557 2557
[  474.117242] Node 0 DMA32 free:33968kB min:36272kB low:45340kB high:54408kB active_anon:1935700kB inactive_anon:756kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:9856kB pagetables:22912kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB
[  474.146184] lowmem_reserve[]: 0 0 0 0 0
[  474.150670] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  474.176380] lowmem_reserve[]: 0 0 0 0 0
[  474.180893] Node 1 Normal free:53256kB min:53612kB low:67012kB high:80412kB active_anon:3445360kB inactive_anon:24kB active_file:0kB inactive_file:180kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:18528kB pagetables:57664kB bounce:0kB free_pcp:460kB local_pcp:120kB free_cma:0kB
[  474.210450] lowmem_reserve[]: 0 0 0 0 0
[  474.214572] Node 0 DMA: 10*4kB (M) 6*8kB (U) 2*16kB (UM) 7*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10392kB
[  474.230710] Node 0 DMA32: 448*4kB (UM) 605*8kB (UM) 1057*16kB (UME) 264*32kB (UME) 4*64kB (ME) 1*128kB (E) 0*256kB 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 33912kB
[  474.246396] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  474.257409] Node 1 Normal: 7*4kB (UEH) 30*8kB (UMH) 52*16kB (UEH) 584*32kB (UH) 201*64kB (UMEH) 7*128kB (UM) 3*256kB (UM) 3*512kB (UME) 1*1024kB (E) 2*2048kB (UE) 3*4096kB (M) = 53260kB
[  474.274469] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  474.283383] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  474.292333] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  474.301331] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  474.310152] 300 total pagecache pages
[  474.313957] 0 pages in swap cache
[  474.317406] Swap cache stats: add 0, delete 0, find 0/0
[  474.323050] Free swap  = 0kB
[  474.326050] Total swap = 0kB
[  474.329073] 1965979 pages RAM
[  474.332222] 0 pages HighMem/MovableOnly
[  474.336201] 339049 pages reserved
[  474.339645] 0 pages cma reserved
[  474.344079] Out of memory: Kill process 15839 (syz-executor.2) score 1007 or sacrifice child
[  474.364540] Killed process 15839 (syz-executor.2) total-vm:75228kB, anon-rss:16572kB, file-rss:34816kB, shmem-rss:0kB
14:23:04 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  474.887286] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  477.920653] NOHZ: local_softirq_pending 08
[  477.925283] NOHZ: local_softirq_pending 08
[  478.560717] NOHZ: local_softirq_pending 08
14:23:09 executing program 5:

[  479.698864] serio: Serial port pts1
[  479.852465] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[  479.879247] syz-executor.5 cpuset=syz5 mems_allowed=0-1
[  479.890229] CPU: 0 PID: 7540 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0
[  479.898071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  479.907421] Call Trace:
[  479.910050]  dump_stack+0x13e/0x194
[  479.914121]  dump_header+0x178/0x6d4
[  479.917827]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  479.922981]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  479.928091]  ? ___ratelimit+0x50/0x519
[  479.931980]  oom_kill_process.cold+0x10/0xae3
[  479.936483]  ? lock_acquire+0x170/0x3f0
[  479.940446]  ? lock_downgrade+0x6e0/0x6e0
[  479.944602]  out_of_memory+0x2d5/0x1110
[  479.948589]  ? oom_killer_disable+0x1c0/0x1c0
[  479.953080]  ? mutex_trylock+0x152/0x1a0
[  479.957143]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  479.962178]  ? warn_alloc+0xf0/0xf0
[  479.965833]  ? find_held_lock+0x2d/0x110
[  479.969930]  ? fs_reclaim_acquire+0x10/0x10
[  479.974250]  __alloc_pages_nodemask+0x5d3/0x700
[  479.978968]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  479.983997]  ? find_held_lock+0x2d/0x110
[  479.988053]  ? cache_grow_begin+0x32d/0x410
[  479.992431]  cache_grow_begin+0x7b/0x410
[  479.996503]  ? __cpuset_node_allowed+0xfa/0x450
[  480.001178]  fallback_alloc+0x205/0x2b0
[  480.005145]  kmem_cache_alloc+0x1ea/0x770
[  480.009276]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  480.014358]  ? _raw_spin_unlock_irq+0x5a/0x80
[  480.018948]  ? finish_task_switch+0x178/0x620
[  480.023532]  getname_flags+0xc8/0x560
[  480.027345]  user_path_mountpoint_at+0x23/0x40
[  480.031918]  SyS_umount+0x10a/0x340
[  480.035805]  ? __sched_text_start+0x8/0x8
[  480.039953]  ? __detach_mounts+0x2e0/0x2e0
[  480.044322]  ? __do_page_fault+0x35b/0xb40
[  480.048548]  ? do_syscall_64+0x4c/0x640
[  480.052512]  ? __detach_mounts+0x2e0/0x2e0
[  480.056744]  do_syscall_64+0x1d5/0x640
[  480.060630]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  480.065825] RIP: 0033:0x45eea7
[  480.069027] RSP: 002b:00007ffc81c20538 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6
[  480.076830] RAX: ffffffffffffffda RBX: 0000000000075136 RCX: 000000000045eea7
[  480.084101] RDX: 0000000000403720 RSI: 0000000000000002 RDI: 00007ffc81c205e0
[  480.091360] RBP: 000000000000067b R08: 0000000000000000 R09: 0000000000000010
[  480.099086] R10: 000000000000000a R11: 0000000000000206 R12: 00007ffc81c21670
[  480.106356] R13: 00000000010af940 R14: 0000000000000000 R15: 00007ffc81c21670
[  480.156992] Mem-Info:
[  480.159475] active_anon:1348343 inactive_anon:195 isolated_anon:0
[  480.159475]  active_file:18 inactive_file:41 isolated_file:0
[  480.159475]  unevictable:0 dirty:1 writeback:3 unstable:0
[  480.159475]  slab_reclaimable:17801 slab_unreclaimable:111746
[  480.159475]  mapped:52270 shmem:250 pagetables:20163 bounce:0
[  480.159475]  free:22884 free_pcp:3 free_cma:0
[  480.209237] Node 0 active_anon:1946760kB inactive_anon:756kB active_file:8kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208912kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 954368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  480.271332] Node 1 active_anon:3436712kB inactive_anon:24kB active_file:56kB inactive_file:144kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:16kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  480.298498] Node 0 DMA free:10360kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  480.325577] lowmem_reserve[]: 0 2557 2557 2557 2557
[  480.330770] Node 0 DMA32 free:27312kB min:36272kB low:45340kB high:54408kB active_anon:1941516kB inactive_anon:756kB active_file:4kB inactive_file:200kB unevictable:0kB writepending:8kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:9952kB pagetables:22976kB bounce:0kB free_pcp:1028kB local_pcp:720kB free_cma:0kB
[  480.361057] lowmem_reserve[]: 0 0 0 0 0
[  480.365793] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  480.400232] lowmem_reserve[]: 0 0 0 0 0
[  480.406107] Node 1 Normal free:61936kB min:53612kB low:67012kB high:80412kB active_anon:3437036kB inactive_anon:24kB active_file:0kB inactive_file:864kB unevictable:0kB writepending:20kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:18432kB pagetables:57668kB bounce:0kB free_pcp:356kB local_pcp:180kB free_cma:0kB
[  480.436663] lowmem_reserve[]: 0 0 0 0 0
[  480.442331] Node 0 DMA: 10*4kB (M) 6*8kB (U) 2*16kB (UM) 6*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10360kB
[  480.458103] Node 0 DMA32: 44*4kB (UM) 490*8kB (UME) 965*16kB (UME) 246*32kB (UMEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27408kB
[  480.472708] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  480.484278] Node 1 Normal: 23*4kB (UMH) 168*8kB (UMEH) 123*16kB (UMEH) 648*32kB (UMEH) 216*64kB (UMEH) 28*128kB (UME) 8*256kB (UM) 4*512kB (UM) 2*1024kB (ME) 3*2048kB (UME) 2*4096kB (M) = 62028kB
[  480.502716] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  480.530708] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  480.540230] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  480.549603] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  480.558604] 1704 total pagecache pages
[  480.563036] 0 pages in swap cache
[  480.566501] Swap cache stats: add 0, delete 0, find 0/0
[  480.572194] Free swap  = 0kB
[  480.575620] Total swap = 0kB
[  480.578836] 1965979 pages RAM
[  480.582588] 0 pages HighMem/MovableOnly
[  480.587482] 339049 pages reserved
[  480.591471] 0 pages cma reserved
[  480.595025] Out of memory: Kill process 18856 (syz-executor.0) score 1007 or sacrifice child
14:23:11 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(0xffffffffffffffff, r3, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r5 = socket(0x0, 0x2, 0x0)
recvmmsg(r5, 0x0, 0x0, 0x0, 0x0)

[  481.059730] syz-executor.4 invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null),  order=0, oom_score_adj=1000
[  481.106717] syz-executor.4 cpuset=syz4 mems_allowed=0-1
[  481.120523] CPU: 1 PID: 18870 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0
[  481.128441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  481.137794] Call Trace:
[  481.140383]  dump_stack+0x13e/0x194
[  481.144010]  dump_header+0x178/0x6d4
[  481.147710]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  481.152719]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  481.157836]  ? ___ratelimit+0x50/0x519
[  481.161727]  oom_kill_process.cold+0x10/0xae3
[  481.166227]  ? lock_downgrade+0x6e0/0x6e0
[  481.170374]  out_of_memory+0x2d5/0x1110
[  481.174374]  ? oom_killer_disable+0x1c0/0x1c0
[  481.178877]  ? mutex_trylock+0x152/0x1a0
[  481.182941]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  481.187803]  ? warn_alloc+0xf0/0xf0
[  481.191446]  __alloc_pages_nodemask+0x5d3/0x700
[  481.196119]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  481.201287]  ? _raw_spin_unlock_irq+0x24/0x80
[  481.205843]  ? _raw_spin_unlock_irq+0x5a/0x80
[  481.210357]  alloc_pages_vma+0xc2/0x4a0
[  481.214337]  wp_page_copy+0x1f1/0x1300
[  481.218221]  ? follow_pfn+0x200/0x200
[  481.222030]  do_wp_page+0x244/0x11d0
[  481.225880]  ? finish_mkwrite_fault+0x640/0x640
[  481.230551]  __handle_mm_fault+0x1c0e/0x3280
[  481.234993]  ? copy_page_range+0x1d70/0x1d70
[  481.239421]  ? find_held_lock+0x2d/0x110
[  481.243500]  handle_mm_fault+0x288/0x7a0
[  481.247555]  __do_page_fault+0x4bc/0xb40
[  481.251778]  ? vmalloc_fault+0xdf0/0xdf0
[  481.255830]  ? do_page_fault+0x60/0x4f2
[  481.259932]  ? page_fault+0x2f/0x50
[  481.263562]  page_fault+0x45/0x50
[  481.267016] RIP: 756a5:0x76bf20
[  481.270407] RSP: 32e20014:0000001b32e20018 EFLAGS: 1b32e2001c
[  481.270426]  ? __do_page_fault+0x286/0xb40
[  481.280595]  ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  481.370783] Mem-Info:
[  481.381805] active_anon:1347381 inactive_anon:192 isolated_anon:0
[  481.381805]  active_file:346 inactive_file:331 isolated_file:0
[  481.381805]  unevictable:0 dirty:42 writeback:0 unstable:0
[  481.381805]  slab_reclaimable:17862 slab_unreclaimable:111612
[  481.381805]  mapped:52728 shmem:250 pagetables:20221 bounce:0
[  481.381805]  free:23060 free_pcp:88 free_cma:0
[  481.434326] Node 0 active_anon:1946108kB inactive_anon:756kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208912kB dirty:16kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 954368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  481.464840] Node 1 active_anon:3443416kB inactive_anon:12kB active_file:1124kB inactive_file:1020kB unevictable:0kB isolated(anon):0kB isolated(file):136kB mapped:1700kB dirty:152kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  481.496513] Node 0 DMA free:10360kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  481.530353] lowmem_reserve[]: 0 2557 2557 2557 2557
[  481.535437] Node 0 DMA32 free:28488kB min:36272kB low:45340kB high:54408kB active_anon:1941364kB inactive_anon:756kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:16kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:9888kB pagetables:22960kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB
[  481.585084] lowmem_reserve[]: 0 0 0 0 0
[  481.604316] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  481.649718] lowmem_reserve[]: 0 0 0 0 0
[  481.653995] Node 1 Normal free:55364kB min:53612kB low:67012kB high:80412kB active_anon:3443360kB inactive_anon:12kB active_file:592kB inactive_file:352kB unevictable:0kB writepending:28kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:18720kB pagetables:57916kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB
[  481.710164] lowmem_reserve[]: 0 0 0 0 0
[  481.714757] Node 0 DMA: 10*4kB (M) 6*8kB (U) 2*16kB (UM) 6*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10360kB
[  481.730603] Node 0 DMA32: 169*4kB (UME) 516*8kB (UM) 983*16kB (UME) 248*32kB (UME) 0*64kB 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28596kB
[  481.747427] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  481.765401] Node 1 Normal: 20*4kB (UH) 41*8kB (UMEH) 27*16kB (UMEH) 594*32kB (UMEH) 202*64kB (UMEH) 10*128kB (UM) 5*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 3*2048kB (UME) 2*4096kB (M) = 53256kB
[  481.800579] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  481.809538] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  481.826756] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  481.852559] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  481.868915] 293 total pagecache pages
[  481.875106] 0 pages in swap cache
[  481.878594] Swap cache stats: add 0, delete 0, find 0/0
[  481.889691] Free swap  = 0kB
[  481.894396] Total swap = 0kB
[  481.897450] 1965979 pages RAM
[  481.958498] 0 pages HighMem/MovableOnly
[  481.969638] 339049 pages reserved
[  481.979122] 0 pages cma reserved
[  481.986223] Out of memory: Kill process 16335 (syz-executor.2) score 1007 or sacrifice child
[  481.999598] Killed process 16335 (syz-executor.2) total-vm:75228kB, anon-rss:16572kB, file-rss:34816kB, shmem-rss:0kB
14:23:12 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

[  482.140775] oom_reaper: reaped process 16335 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
14:23:12 executing program 5:

14:23:12 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:23:12 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(0xffffffffffffffff, r3, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r5 = socket(0x0, 0x2, 0x0)
recvmmsg(r5, 0x0, 0x0, 0x0, 0x0)

14:23:12 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:23:13 executing program 5:

[  482.524451] serio: Serial port pts1
[  482.715726] syz-executor.5 invoked oom-killer: gfp_mask=0x14082c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), nodemask=(null),  order=0, oom_score_adj=0
[  482.744117] syz-executor.5 cpuset=syz5 mems_allowed=0-1
[  482.756597] CPU: 1 PID: 7540 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0
[  482.764442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  482.774033] Call Trace:
[  482.776628]  dump_stack+0x13e/0x194
[  482.780269]  dump_header+0x178/0x6d4
[  482.783987]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  482.789007]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  482.794553]  ? ___ratelimit+0x50/0x519
[  482.798451]  oom_kill_process.cold+0x10/0xae3
[  482.802970]  ? lock_acquire+0x170/0x3f0
[  482.807735]  ? lock_downgrade+0x6e0/0x6e0
[  482.811892]  out_of_memory+0x2d5/0x1110
[  482.815884]  ? oom_killer_disable+0x1c0/0x1c0
[  482.820400]  ? mutex_trylock+0x152/0x1a0
[  482.824475]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  482.829356]  ? warn_alloc+0xf0/0xf0
[  482.832989]  ? find_held_lock+0x2d/0x110
[  482.837061]  ? fs_reclaim_acquire+0x10/0x10
[  482.841503]  __alloc_pages_nodemask+0x5d3/0x700
[  482.846185]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  482.851257]  ? __kmalloc_node+0x38/0x70
[  482.855348]  ? rcu_read_lock_sched_held+0x10a/0x130
[  482.860378]  ? kasan_unpoison_shadow+0x30/0x40
[  482.864948]  alloc_pages_current+0xe7/0x1e0
[  482.869403]  __vmalloc_node_range+0x40b/0x6c0
[  482.873931]  vzalloc+0x42/0x50
[  482.877199]  ? xt_counters_alloc+0x30/0x50
[  482.881644]  xt_counters_alloc+0x30/0x50
[  482.885854]  __do_replace+0x79/0x580
[  482.889563]  ? compat_do_ip6t_get_ctl+0x7c0/0x7c0
[  482.894416]  do_ip6t_set_ctl+0x255/0x3a3
[  482.898601]  ? compat_do_ip6t_set_ctl+0x140/0x140
[  482.903522]  ? nf_sockopt_find.constprop.0+0x1ad/0x220
[  482.908809]  nf_setsockopt+0x5f/0xb0
[  482.912772]  ipv6_setsockopt+0xfd/0x130
[  482.916743]  tcp_setsockopt+0x7b/0xc0
[  482.920558]  SyS_setsockopt+0x110/0x1e0
[  482.924644]  ? SyS_recv+0x40/0x40
[  482.928101]  ? up_read+0x17/0x30
[  482.931456]  ? __do_page_fault+0x35b/0xb40
[  482.935701]  ? do_syscall_64+0x4c/0x640
[  482.939675]  ? SyS_recv+0x40/0x40
[  482.943128]  do_syscall_64+0x1d5/0x640
[  482.947026]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  482.952211] RIP: 0033:0x45efaa
[  482.955392] RSP: 002b:00007ffc81c20e98 EFLAGS: 00000202 ORIG_RAX: 0000000000000036
[  482.963089] RAX: ffffffffffffffda RBX: 00007ffc81c20ec0 RCX: 000000000045efaa
[  482.970349] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[  482.977616] RBP: 000000000071dcc0 R08: 00000000000002e8 R09: 0000000000004000
[  482.984879] R10: 000000000071cfa0 R11: 0000000000000202 R12: 0000000000000003
[  482.992141] R13: 0000000000000000 R14: 0000000000000029 R15: 000000000071cf40
[  483.074468] Mem-Info:
[  483.077064] active_anon:1348113 inactive_anon:193 isolated_anon:0
[  483.077064]  active_file:240 inactive_file:200 isolated_file:65
[  483.077064]  unevictable:0 dirty:54 writeback:21 unstable:0
[  483.077064]  slab_reclaimable:17942 slab_unreclaimable:111281
[  483.077064]  mapped:52637 shmem:250 pagetables:20220 bounce:0
[  483.077064]  free:22579 free_pcp:150 free_cma:0
[  483.111327] Node 0 active_anon:1947028kB inactive_anon:756kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208912kB dirty:0kB writeback:28kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 954368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  483.141102] Node 1 active_anon:3445492kB inactive_anon:16kB active_file:796kB inactive_file:796kB unevictable:0kB isolated(anon):0kB isolated(file):156kB mapped:1432kB dirty:208kB writeback:12kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  483.172520] Node 0 DMA free:10360kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  483.219973] lowmem_reserve[]: 0 2557 2557 2557 2557
[  483.241511] Node 0 DMA32 free:27420kB min:36272kB low:45340kB high:54408kB active_anon:1942368kB inactive_anon:756kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:9920kB pagetables:22960kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  483.296372] lowmem_reserve[]: 0 0 0 0 0
[  483.301748] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  483.328936] lowmem_reserve[]: 0 0 0 0 0
[  483.333414] Node 1 Normal free:54136kB min:53612kB low:67012kB high:80412kB active_anon:3445492kB inactive_anon:16kB active_file:292kB inactive_file:568kB unevictable:0kB writepending:220kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:18624kB pagetables:58036kB bounce:0kB free_pcp:672kB local_pcp:164kB free_cma:0kB
[  483.364702] lowmem_reserve[]: 0 0 0 0 0
[  483.369027] Node 0 DMA: 10*4kB (M) 6*8kB (U) 2*16kB (UM) 6*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10360kB
[  483.385506] Node 0 DMA32: 122*4kB (UM) 505*8kB (UE) 947*16kB (U) 238*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27296kB
[  483.399470] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  483.414687] Node 1 Normal: 346*4kB (MH) 346*8kB (UMEH) 196*16kB (UMEH) 690*32kB (UMH) 228*64kB (UMEH) 7*128kB (UM) 1*256kB (U) 1*512kB (U) 1*1024kB (E) 2*2048kB (UE) 1*4096kB (M) = 54840kB
[  483.434045] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  483.443896] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  483.452973] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  483.462852] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  483.471850] 321 total pagecache pages
[  483.476187] 0 pages in swap cache
[  483.479796] Swap cache stats: add 0, delete 0, find 0/0
[  483.485639] Free swap  = 0kB
[  483.489207] Total swap = 0kB
[  483.492380] 1965979 pages RAM
[  483.495567] 0 pages HighMem/MovableOnly
[  483.499642] 339049 pages reserved
[  483.503385] 0 pages cma reserved
[  483.507218] Out of memory: Kill process 18870 (syz-executor.4) score 1007 or sacrifice child
[  483.516804] Killed process 18888 (syz-executor.4) total-vm:75096kB, anon-rss:3716kB, file-rss:34816kB, shmem-rss:0kB
[  483.567605] oom_reaper: reaped process 18888 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[  483.641245] syz-executor.5 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),  order=3, oom_score_adj=0
[  483.655292] syz-executor.5 cpuset=syz5 mems_allowed=0-1
[  483.660794] CPU: 1 PID: 7540 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0
[  483.668592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  483.678354] Call Trace:
[  483.680953]  dump_stack+0x13e/0x194
[  483.684589]  dump_header+0x178/0x6d4
[  483.688316]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  483.693347]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  483.698474]  ? ___ratelimit+0x50/0x519
[  483.702381]  oom_kill_process.cold+0x10/0xae3
[  483.706887]  ? lock_downgrade+0x6e0/0x6e0
[  483.711050]  out_of_memory+0x2d5/0x1110
[  483.715042]  ? oom_killer_disable+0x1c0/0x1c0
[  483.719669]  ? mutex_trylock+0x152/0x1a0
[  483.723744]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  483.728591]  ? warn_alloc+0xf0/0xf0
[  483.733166]  ? find_held_lock+0x2d/0x110
[  483.738033]  ? fs_reclaim_acquire+0x10/0x10
[  483.742399]  __alloc_pages_nodemask+0x5d3/0x700
[  483.747080]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  483.754630]  ? copy_process.part.0+0x17d5/0x6a70
[  483.759396]  ? rcu_read_lock_sched_held+0x10a/0x130
[  483.764416]  ? __lock_acquire+0x5f7/0x4620
[  483.768636]  ? save_trace+0x290/0x290
[  483.772442]  copy_process.part.0+0x26a/0x6a70
[  483.777197]  ? trace_hardirqs_on+0x10/0x10
[  483.781476]  ? save_trace+0x290/0x290
[  483.785282]  ? lock_downgrade+0x6e0/0x6e0
[  483.789435]  ? find_held_lock+0x2d/0x110
[  483.793503]  ? __cleanup_sighand+0x40/0x40
[  483.797786]  ? lock_downgrade+0x6e0/0x6e0
[  483.802098]  _do_fork+0x180/0xc80
[  483.805571]  ? put_timespec64+0xaa/0xf0
[  483.809545]  ? fork_idle+0x270/0x270
[  483.813418]  ? SyS_clock_gettime+0xf5/0x180
[  483.817742]  ? SyS_clock_settime+0x1a0/0x1a0
[  483.822149]  ? do_syscall_64+0x4c/0x640
[  483.826119]  ? sys_vfork+0x20/0x20
[  483.829661]  do_syscall_64+0x1d5/0x640
[  483.833555]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  483.838751] RIP: 0033:0x45aa4a
[  483.841949] RSP: 002b:00007ffc81c215e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  483.849739] RAX: ffffffffffffffda RBX: 00007ffc81c215e0 RCX: 000000000045aa4a
[  483.857007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  483.864271] RBP: 00007ffc81c21620 R08: 0000000000000001 R09: 00000000010ae940
[  483.871543] R10: 00000000010aec10 R11: 0000000000000246 R12: 0000000000000001
[  483.878907] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc81c21670
[  483.890524] Mem-Info:
[  483.898608] active_anon:1348132 inactive_anon:193 isolated_anon:0
[  483.898608]  active_file:12 inactive_file:216 isolated_file:71
[  483.898608]  unevictable:0 dirty:1 writeback:0 unstable:0
[  483.898608]  slab_reclaimable:17953 slab_unreclaimable:111259
[  483.898608]  mapped:52362 shmem:250 pagetables:20264 bounce:0
[  483.898608]  free:23007 free_pcp:106 free_cma:0
[  483.933497] Node 0 active_anon:1947092kB inactive_anon:756kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208912kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 954368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  483.962327] Node 1 active_anon:3445436kB inactive_anon:16kB active_file:404kB inactive_file:260kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:336kB dirty:4kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  483.997396] Node 0 DMA free:10360kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  484.026237] lowmem_reserve[]: 0 2557 2557 2557 2557
[  484.031467] Node 0 DMA32 free:27400kB min:36272kB low:45340kB high:54408kB active_anon:1942348kB inactive_anon:756kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:9920kB pagetables:22960kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  484.060082] lowmem_reserve[]: 0 0 0 0 0
[  484.064240] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  484.089930] lowmem_reserve[]: 0 0 0 0 0
[  484.094313] Node 1 Normal free:55084kB min:53612kB low:67012kB high:80412kB active_anon:3445436kB inactive_anon:16kB active_file:100kB inactive_file:80kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:18560kB pagetables:57988kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  484.123301] lowmem_reserve[]: 0 0 0 0 0
[  484.127333] Node 0 DMA: 10*4kB (M) 6*8kB (U) 2*16kB (UM) 6*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10360kB
[  484.146817] Node 0 DMA32: 127*4kB (UM) 504*8kB (U) 954*16kB (UE) 238*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27420kB
[  484.160927] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  484.171764] Node 1 Normal: 260*4kB (UMEH) 347*8kB (UMH) 201*16kB (UMEH) 692*32kB (UMH) 229*64kB (UMEH) 7*128kB (UM) 1*256kB (U) 1*512kB (U) 1*1024kB (E) 2*2048kB (UE) 1*4096kB (M) = 54712kB
[  484.189160] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  484.198339] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  484.206985] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  484.216000] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  484.224904] 335 total pagecache pages
[  484.228737] 0 pages in swap cache
[  484.232375] Swap cache stats: add 0, delete 0, find 0/0
[  484.237774] Free swap  = 0kB
[  484.240932] Total swap = 0kB
[  484.243952] 1965979 pages RAM
[  484.247075] 0 pages HighMem/MovableOnly
[  484.251110] 339049 pages reserved
[  484.254660] 0 pages cma reserved
[  484.258050] Out of memory: Kill process 16512 (syz-executor.2) score 1007 or sacrifice child
[  484.268047] Killed process 16512 (syz-executor.2) total-vm:75228kB, anon-rss:16572kB, file-rss:34816kB, shmem-rss:0kB
[  484.319616] oom_reaper: reaped process 16512 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
14:23:15 executing program 5:

14:23:15 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:23:15 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  484.712390] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  484.819886] serio: Serial port pts5
14:23:15 executing program 5:

[  485.226297] syz-executor.0 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),  order=0, oom_score_adj=1000
[  485.268655] syz-executor.0 cpuset=syz0 mems_allowed=0-1
[  485.283967] CPU: 0 PID: 18917 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0
[  485.292006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  485.301467] Call Trace:
[  485.304077]  dump_stack+0x13e/0x194
[  485.307713]  dump_header+0x178/0x6d4
[  485.311427]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  485.316555]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  485.321674]  ? ___ratelimit+0x50/0x519
[  485.325823]  oom_kill_process.cold+0x10/0xae3
[  485.330333]  ? lock_downgrade+0x6e0/0x6e0
[  485.334500]  out_of_memory+0x2d5/0x1110
[  485.338495]  ? oom_killer_disable+0x1c0/0x1c0
[  485.343002]  ? mutex_trylock+0x152/0x1a0
[  485.347080]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  485.351940]  ? warn_alloc+0xf0/0xf0
[  485.355596]  __alloc_pages_nodemask+0x5d3/0x700
[  485.360271]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  485.365287]  ? __lock_acquire+0x5f7/0x4620
[  485.369512]  alloc_pages_current+0xe7/0x1e0
[  485.373837]  pte_alloc_one+0x15/0x100
[  485.377631]  __handle_mm_fault+0x2ad5/0x3280
[  485.382037]  ? copy_page_range+0x1d70/0x1d70
[  485.386473]  ? find_held_lock+0x2d/0x110
[  485.390654]  handle_mm_fault+0x288/0x7a0
[  485.394710]  __do_page_fault+0x4bc/0xb40
[  485.398762]  ? vmalloc_fault+0xdf0/0xdf0
[  485.402836]  ? do_page_fault+0x60/0x4f2
[  485.406804]  ? page_fault+0x2f/0x50
[  485.410563]  page_fault+0x45/0x50
[  485.414008] RIP: 0074:0x4c2d06
[  485.417186] RSP: c29f66d4:000000000076c100 EFLAGS: ffffffff
[  485.476264] serio: Serial port pts5
[  485.515962] Mem-Info:
[  485.532280] active_anon:1350321 inactive_anon:194 isolated_anon:0
[  485.532280]  active_file:163 inactive_file:274 isolated_file:106
[  485.532280]  unevictable:0 dirty:78 writeback:12 unstable:0
[  485.532280]  slab_reclaimable:18053 slab_unreclaimable:111334
[  485.532280]  mapped:52558 shmem:250 pagetables:20320 bounce:0
[  485.532280]  free:20368 free_pcp:42 free_cma:0
[  485.666941] Node 0 active_anon:1946796kB inactive_anon:756kB active_file:0kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208896kB dirty:4kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 954368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  485.746900] Node 1 active_anon:3435000kB inactive_anon:20kB active_file:980kB inactive_file:2664kB unevictable:0kB isolated(anon):0kB isolated(file):180kB mapped:2064kB dirty:344kB writeback:76kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  485.844835] Node 0 DMA free:10360kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  485.984673] lowmem_reserve[]: 0 2557 2557 2557 2557
[  485.993164] Node 0 DMA32 free:27536kB min:36272kB low:45340kB high:54408kB active_anon:1941752kB inactive_anon:756kB active_file:0kB inactive_file:24kB unevictable:0kB writepending:4kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:9952kB pagetables:22968kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB
[  486.022928] lowmem_reserve[]: 0 0 0 0 0
[  486.028794] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  486.086143] lowmem_reserve[]: 0 0 0 0 0
[  486.120816] Node 1 Normal free:54608kB min:53612kB low:67012kB high:80412kB active_anon:3437380kB inactive_anon:16kB active_file:1868kB inactive_file:5120kB unevictable:0kB writepending:132kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:18720kB pagetables:58368kB bounce:0kB free_pcp:764kB local_pcp:320kB free_cma:0kB
[  486.167762] lowmem_reserve[]: 0 0 0 0 0
[  486.176250] Node 0 DMA: 10*4kB (M) 6*8kB (U) 2*16kB (UM) 6*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10360kB
[  486.195864] Node 0 DMA32: 145*4kB (UME) 518*8kB (UME) 949*16kB (UME) 242*32kB (UME) 1*64kB (E) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27716kB
[  486.210694] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  486.221752] Node 1 Normal: 240*4kB (UMEH) 171*8kB (UME) 84*16kB (UMEH) 693*32kB (UMH) 304*64kB (UMH) 19*128kB (UM) 8*256kB (UM) 3*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 0*4096kB = 56440kB
[  486.238743] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  486.247909] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  486.256863] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  486.265901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  486.276910] 1752 total pagecache pages
[  486.289834] 0 pages in swap cache
[  486.376033] Swap cache stats: add 0, delete 0, find 0/0
[  486.420171] Free swap  = 0kB
[  486.423239] Total swap = 0kB
[  486.440668] 1965979 pages RAM
[  486.443819] 0 pages HighMem/MovableOnly
[  486.447837] 339049 pages reserved
[  486.455940] 0 pages cma reserved
[  486.463823] Out of memory: Kill process 18896 (syz-executor.0) score 1007 or sacrifice child
14:23:16 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:23:16 executing program 5:

14:23:16 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:23:16 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(0xffffffffffffffff, r3, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r5 = socket(0x0, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

14:23:18 executing program 5:

[  492.264645] syz-executor.1 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),  order=3, oom_score_adj=1000
[  492.303557] syz-executor.1 cpuset=syz1 mems_allowed=0-1
[  492.309599] CPU: 1 PID: 18944 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0
[  492.317607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  492.326968] Call Trace:
[  492.329667]  dump_stack+0x13e/0x194
[  492.333299]  dump_header+0x178/0x6d4
[  492.337024]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  492.342063]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  492.347173]  ? ___ratelimit+0x50/0x519
[  492.351056]  oom_kill_process.cold+0x10/0xae3
[  492.355601]  ? lock_acquire+0x170/0x3f0
[  492.359621]  ? lock_downgrade+0x6e0/0x6e0
[  492.363778]  out_of_memory+0x2d5/0x1110
[  492.367794]  ? oom_killer_disable+0x1c0/0x1c0
[  492.372287]  ? mutex_trylock+0x152/0x1a0
[  492.376347]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  492.381232]  ? warn_alloc+0xf0/0xf0
[  492.384858]  ? find_held_lock+0x2d/0x110
[  492.388906]  ? fs_reclaim_acquire+0x10/0x10
[  492.393235]  __alloc_pages_nodemask+0x5d3/0x700
[  492.398026]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  492.403024]  ? copy_process.part.0+0x17d5/0x6a70
[  492.407794]  ? rcu_read_lock_sched_held+0x10a/0x130
[  492.412840]  ? save_trace+0x290/0x290
[  492.416649]  copy_process.part.0+0x26a/0x6a70
[  492.421201]  ? find_held_lock+0x2d/0x110
[  492.425370]  ? __handle_mm_fault+0x1af7/0x3280
[  492.429951]  ? lock_downgrade+0x6e0/0x6e0
[  492.434359]  ? pud_val+0xd0/0xd0
[  492.437720]  ? do_raw_spin_unlock+0x164/0x250
[  492.442214]  ? __cleanup_sighand+0x40/0x40
[  492.446450]  _do_fork+0x180/0xc80
[  492.449902]  ? fork_idle+0x270/0x270
[  492.453605]  ? up_read+0x17/0x30
[  492.456959]  ? __do_page_fault+0x35b/0xb40
[  492.461186]  ? do_syscall_64+0x4c/0x640
[  492.465158]  ? sys_vfork+0x20/0x20
[  492.468695]  do_syscall_64+0x1d5/0x640
[  492.472634]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  492.477919] RIP: 0033:0x45ee49
[  492.481099] RSP: 002b:00007ffd4baf9f68 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[  492.488875] RAX: ffffffffffffffda RBX: 00007fe226046700 RCX: 000000000045ee49
[  492.496146] RDX: 00007fe2260469d0 RSI: 00007fe226045db0 RDI: 00000000003d0f00
[  492.503417] RBP: 00007ffd4bafa180 R08: 00007fe226046700 R09: 00007fe226046700
[  492.510677] R10: 00007fe2260469d0 R11: 0000000000000202 R12: 0000000000000000
[  492.517944] R13: 00007ffd4bafa01f R14: 00007fe2260469c0 R15: 000000000076c06c
[  492.544811] Mem-Info:
[  492.547319] active_anon:1347595 inactive_anon:195 isolated_anon:0
[  492.547319]  active_file:10 inactive_file:6 isolated_file:0
[  492.547319]  unevictable:0 dirty:4 writeback:0 unstable:0
[  492.547319]  slab_reclaimable:18182 slab_unreclaimable:111428
[  492.547319]  mapped:52242 shmem:250 pagetables:20318 bounce:0
[  492.547319]  free:23015 free_pcp:208 free_cma:0
[  492.582829] Node 0 active_anon:1946628kB inactive_anon:756kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208912kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 954368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  492.626325] Node 1 active_anon:3443752kB inactive_anon:24kB active_file:112kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):124kB mapped:256kB dirty:16kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  492.654614] Node 0 DMA free:10360kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  492.681441] lowmem_reserve[]: 0 2557 2557 2557 2557
[  492.686492] Node 0 DMA32 free:28192kB min:36272kB low:45340kB high:54408kB active_anon:1941884kB inactive_anon:756kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:9952kB pagetables:22968kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB
[  492.715784] lowmem_reserve[]: 0 0 0 0 0
[  492.719793] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  492.745521] lowmem_reserve[]: 0 0 0 0 0
[  492.749739] Node 1 Normal free:53876kB min:53612kB low:67012kB high:80412kB active_anon:3443660kB inactive_anon:24kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:16kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:18656kB pagetables:58296kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  492.778890] lowmem_reserve[]: 0 0 0 0 0
[  492.783549] Node 0 DMA: 10*4kB (M) 6*8kB (U) 2*16kB (UM) 6*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10360kB
[  492.798137] Node 0 DMA32: 146*4kB (UM) 582*8kB (UM) 947*16kB (UME) 241*32kB (UME) 1*64kB (E) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28168kB
[  492.812323] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  492.823153] Node 1 Normal: 85*4kB (UMEH) 54*8kB (UME) 20*16kB (UEH) 686*32kB (UMEH) 307*64kB (UMH) 21*128kB (UME) 9*256kB (UME) 2*512kB (UM) 1*1024kB (M) 2*2048kB (UE) 0*4096kB = 53828kB
[  492.840333] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  492.849203] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  492.857869] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  492.866900] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  492.891970] 425 total pagecache pages
[  492.896515] 0 pages in swap cache
[  492.900072] Swap cache stats: add 0, delete 0, find 0/0
[  492.905449] Free swap  = 0kB
[  492.908500] Total swap = 0kB
[  492.915254] 1965979 pages RAM
[  492.921487] 0 pages HighMem/MovableOnly
[  492.925502] 339049 pages reserved
[  492.928997] 0 pages cma reserved
[  492.936694] Out of memory: Kill process 17883 (syz-executor.2) score 1007 or sacrifice child
[  492.947786] Killed process 17883 (syz-executor.2) total-vm:75228kB, anon-rss:16572kB, file-rss:34816kB, shmem-rss:0kB
14:23:23 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:23:23 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(0xffffffffffffffff, r3, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r5 = socket(0x0, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

14:23:23 executing program 5:

14:23:23 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028c7ae65099fc397e3d31e4351b96bcb9024c32a7761d2bafe91e5c6396058a41bd754f8fafdf03bb32a4484eba5c21ec3fb10ac6efb4aa7403632c4d24e54f4f44f08f9c79f44bc90444caf5d48c4903bf8bbac59cc4b7d1cece174bd26dcfaa23bb965417037739c3e77900e868c3a0324f41f35cf67b6ea011bdf9afc1c39063fdec9281f16796efa6d9d53c044cbafc017dbc5949a7159eb058e406bc2db60cdbaa4f7c391265ef2c7940219a069af10a3dfdff14f621aa0e1aaffcc518b062f7af10ce9883d048d68bd4627f672e66f9b75f5015e91d79119bd92361eea13903afb60d7614e164f2218a0cf379811c56e61714012534bc9847202ad62340cdf62c690836313924f56ad048b62fcfca0a48934df4ea0d84557e6525f4c6a95b66c8a222f7bfb07c5c4e39b09361deb58a36715dfe9d038f1cbba3c634b1f95907c4d58eaca29d7334e4956e3c603ab84275917aa344b565020"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

[  493.498080] serio: Serial port pts1
[  493.699817] syz-executor.1 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null),  order=0, oom_score_adj=1000
[  493.726796] syz-executor.1 cpuset=syz1 mems_allowed=0-1
[  493.732339] CPU: 0 PID: 18951 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0
[  493.740361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  493.749725] Call Trace:
[  493.752330]  dump_stack+0x13e/0x194
[  493.755981]  dump_header+0x178/0x6d4
[  493.759714]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  493.764865]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  493.769980]  ? ___ratelimit+0x50/0x519
[  493.773891]  oom_kill_process.cold+0x10/0xae3
[  493.778412]  ? lock_downgrade+0x6e0/0x6e0
[  493.782579]  out_of_memory+0x2d5/0x1110
[  493.786575]  ? oom_killer_disable+0x1c0/0x1c0
[  493.791084]  ? mutex_trylock+0x152/0x1a0
[  493.795158]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  493.800466]  ? warn_alloc+0xf0/0xf0
[  493.804120]  __alloc_pages_nodemask+0x5d3/0x700
[  493.808957]  ? __anon_vma_prepare+0x172/0x370
[  493.813470]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  493.818502]  ? ___preempt_schedule+0x16/0x18
[  493.822946]  alloc_pages_vma+0xc2/0x4a0
[  493.826938]  __handle_mm_fault+0x17b6/0x3280
[  493.831367]  ? copy_page_range+0x1d70/0x1d70
[  493.835824]  ? find_held_lock+0x2d/0x110
[  493.839918]  handle_mm_fault+0x288/0x7a0
[  493.843981]  __do_page_fault+0x4bc/0xb40
[  493.848048]  ? vmalloc_fault+0xdf0/0xdf0
[  493.852108]  ? do_page_fault+0x60/0x4f2
[  493.856080]  ? page_fault+0x2f/0x50
[  493.859696]  page_fault+0x45/0x50
[  493.863271] RIP: 26025700:0x3
[  493.866368] RSP: 20000:00007ffd4bafa090 EFLAGS: 7ffd4bafa180
[  493.883161] Mem-Info:
[  493.894374] active_anon:1350421 inactive_anon:195 isolated_anon:0
[  493.894374]  active_file:349 inactive_file:332 isolated_file:59
[  493.894374]  unevictable:0 dirty:62 writeback:0 unstable:0
[  493.894374]  slab_reclaimable:18205 slab_unreclaimable:111145
[  493.894374]  mapped:52828 shmem:250 pagetables:20287 bounce:0
[  493.894374]  free:19466 free_pcp:227 free_cma:0
[  493.938142] Node 0 active_anon:1947412kB inactive_anon:756kB active_file:4kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208912kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 954368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  493.970665] Node 1 active_anon:3454304kB inactive_anon:24kB active_file:1188kB inactive_file:1244kB unevictable:0kB isolated(anon):0kB isolated(file):20kB mapped:2196kB dirty:196kB writeback:80kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  494.026510] Node 0 DMA free:10392kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  494.084523] lowmem_reserve[]: 0 2557 2557 2557 2557
[  494.089729] Node 0 DMA32 free:27304kB min:36272kB low:45340kB high:54408kB active_anon:1942460kB inactive_anon:756kB active_file:20kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:10016kB pagetables:22968kB bounce:0kB free_pcp:344kB local_pcp:344kB free_cma:0kB
[  494.120114] lowmem_reserve[]: 0 0 0 0 0
[  494.128572] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  494.156156] lowmem_reserve[]: 0 0 0 0 0
[  494.160224] Node 1 Normal free:51072kB min:53612kB low:67012kB high:80412kB active_anon:3444688kB inactive_anon:24kB active_file:728kB inactive_file:680kB unevictable:0kB writepending:224kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:19040kB pagetables:58740kB bounce:0kB free_pcp:1300kB local_pcp:572kB free_cma:0kB
[  494.205896] lowmem_reserve[]: 0 0 0 0 0
[  494.209941] Node 0 DMA: 10*4kB (M) 6*8kB (U) 2*16kB (UM) 7*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10392kB
[  494.246460] Node 0 DMA32: 133*4kB (UME) 564*8kB (UME) 942*16kB (UME) 236*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27732kB
[  494.300085] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  494.324151] Node 1 Normal: 747*4kB (UMEH) 382*8kB (UMEH) 167*16kB (UMEH) 635*32kB (UMEH) 248*64kB (UMH) 10*128kB (UME) 4*256kB (UME) 2*512kB (UM) 1*1024kB (M) 2*2048kB (UE) 0*4096kB = 53356kB
[  494.348876] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  494.358062] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  494.367171] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  494.376393] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  494.385436] 432 total pagecache pages
[  494.389499] 0 pages in swap cache
[  494.393306] Swap cache stats: add 0, delete 0, find 0/0
[  494.398870] Free swap  = 0kB
[  494.402337] Total swap = 0kB
[  494.405567] 1965979 pages RAM
[  494.408985] 0 pages HighMem/MovableOnly
[  494.413348] 339049 pages reserved
[  494.417069] 0 pages cma reserved
[  494.421622] Out of memory: Kill process 18949 (syz-executor.4) score 1007 or sacrifice child
[  494.560312] Dropped {multi|broad}cast of type= [86dd]
[  494.789078] blkid invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=-1000
[  494.830412] blkid cpuset=/ mems_allowed=0-1
[  494.837514] CPU: 1 PID: 18970 Comm: blkid Not tainted 4.14.172-syzkaller #0
[  494.844641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  494.853994] Call Trace:
[  494.856597]  dump_stack+0x13e/0x194
[  494.860213]  dump_header+0x178/0x6d4
[  494.864005]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  494.869026]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  494.874149]  ? ___ratelimit+0x50/0x519
[  494.878044]  oom_kill_process.cold+0x10/0xae3
[  494.882539]  ? lock_downgrade+0x6e0/0x6e0
[  494.886758]  out_of_memory+0x2d5/0x1110
[  494.890768]  ? oom_killer_disable+0x1c0/0x1c0
[  494.895270]  ? mutex_trylock+0x152/0x1a0
[  494.899347]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  494.904205]  ? warn_alloc+0xf0/0xf0
[  494.907909]  ? find_held_lock+0x2d/0x110
[  494.911965]  ? fs_reclaim_acquire+0x10/0x10
[  494.916298]  __alloc_pages_nodemask+0x5d3/0x700
[  494.920975]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  494.925979]  ? find_held_lock+0x2d/0x110
[  494.930651]  ? cache_grow_begin+0x32d/0x410
[  494.934979]  cache_grow_begin+0x7b/0x410
[  494.939176]  ? __cpuset_node_allowed+0xfa/0x450
[  494.943864]  fallback_alloc+0x205/0x2b0
[  494.947843]  kmem_cache_alloc+0x1ea/0x770
[  494.951994]  ? memcpy+0x35/0x50
[  494.955265]  getname_flags+0xc8/0x560
[  494.959062]  user_path_at_empty+0x2a/0x50
[  494.963200]  SyS_access+0x21a/0x680
[  494.966846]  ? SyS_faccessat+0x680/0x680
[  494.971018]  ? __do_page_fault+0x35b/0xb40
[  494.975263]  ? do_syscall_64+0x4c/0x640
[  494.979431]  ? SyS_faccessat+0x680/0x680
[  494.983486]  do_syscall_64+0x1d5/0x640
[  494.987368]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  494.992576] RIP: 0033:0x7f026e09a267
[  494.996276] RSP: 002b:00007fff6b85fa18 EFLAGS: 00000246 ORIG_RAX: 0000000000000015
[  495.003980] RAX: ffffffffffffffda RBX: 0000000000400f31 RCX: 00007f026e09a267
[  495.011245] RDX: 00000000000033ef RSI: 0000000000000000 RDI: 00007f026e09e2e6
[  495.018678] RBP: 00007f026e29d000 R08: 0000000000000003 R09: 0000000000000000
[  495.025955] R10: 0000000000000002 R11: 0000000000000246 R12: 00007f026e2a51c8
[  495.033231] R13: 00007f026e29d718 R14: 00000000000033ef R15: 00007f026e2a5570
[  495.064044] Mem-Info:
[  495.066640] active_anon:1347941 inactive_anon:193 isolated_anon:0
[  495.066640]  active_file:24 inactive_file:22 isolated_file:26
[  495.066640]  unevictable:0 dirty:0 writeback:0 unstable:0
[  495.066640]  slab_reclaimable:18208 slab_unreclaimable:111214
[  495.066640]  mapped:52232 shmem:250 pagetables:20374 bounce:0
[  495.066640]  free:22886 free_pcp:55 free_cma:0
[  495.100721] Node 0 active_anon:1947076kB inactive_anon:756kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208912kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 954368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  495.128286] Node 1 active_anon:3444688kB inactive_anon:16kB active_file:28kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):84kB mapped:0kB dirty:0kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  495.155101] Node 0 DMA free:10360kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  495.183502] lowmem_reserve[]: 0 2557 2557 2557 2557
[  495.188554] Node 0 DMA32 free:27704kB min:36272kB low:45340kB high:54408kB active_anon:1942332kB inactive_anon:756kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:9952kB pagetables:22952kB bounce:0kB free_pcp:128kB local_pcp:8kB free_cma:0kB
[  495.217310] lowmem_reserve[]: 0 0 0 0 0
[  495.221397] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  495.246924] lowmem_reserve[]: 0 0 0 0 0
[  495.251138] Node 1 Normal free:53764kB min:53612kB low:67012kB high:80412kB active_anon:3444688kB inactive_anon:16kB active_file:28kB inactive_file:40kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:18880kB pagetables:58536kB bounce:0kB free_pcp:160kB local_pcp:80kB free_cma:0kB
[  495.280560] lowmem_reserve[]: 0 0 0 0 0
[  495.284545] Node 0 DMA: 10*4kB (M) 6*8kB (U) 2*16kB (UM) 6*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10360kB
[  495.299268] Node 0 DMA32: 130*4kB (UME) 550*8kB (UME) 942*16kB (UME) 237*32kB (UME) 2*64kB (ME) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27704kB
[  495.314538] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  495.325292] Node 1 Normal: 34*4kB (UEH) 39*8kB (UEH) 35*16kB (UMEH) 635*32kB (UMEH) 323*64kB (UMH) 21*128kB (UME) 10*256kB (UME) 2*512kB (UM) 1*1024kB (M) 2*2048kB (UE) 0*4096kB = 53392kB
[  495.342253] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  495.351163] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  495.359769] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  495.368725] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  495.377353] 382 total pagecache pages
[  495.381195] 0 pages in swap cache
[  495.384642] Swap cache stats: add 0, delete 0, find 0/0
[  495.390094] Free swap  = 0kB
[  495.393107] Total swap = 0kB
[  495.396167] 1965979 pages RAM
[  495.399287] 0 pages HighMem/MovableOnly
[  495.403413] 339049 pages reserved
[  495.406861] 0 pages cma reserved
[  495.410392] Out of memory: Kill process 18045 (syz-executor.2) score 1007 or sacrifice child
[  495.419093] Killed process 18045 (syz-executor.2) total-vm:75228kB, anon-rss:16572kB, file-rss:34816kB, shmem-rss:0kB
[  495.467727] oom_reaper: reaped process 18045 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
14:23:26 executing program 4:

14:23:26 executing program 5:

[  495.827826] serio: Serial port pts1
[  496.031353] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null),  order=0, oom_score_adj=0
[  496.059063] syz-fuzzer cpuset=/ mems_allowed=0-1
[  496.072025] CPU: 0 PID: 7529 Comm: syz-fuzzer Not tainted 4.14.172-syzkaller #0
[  496.079536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  496.088889] Call Trace:
[  496.091481]  dump_stack+0x13e/0x194
[  496.095102]  dump_header+0x178/0x6d4
[  496.098846]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  496.103873]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  496.108966]  ? ___ratelimit+0x50/0x519
[  496.112861]  oom_kill_process.cold+0x10/0xae3
[  496.117350]  ? lock_downgrade+0x6e0/0x6e0
[  496.121493]  out_of_memory+0x2d5/0x1110
[  496.125555]  ? oom_killer_disable+0x1c0/0x1c0
[  496.130049]  ? mutex_trylock+0x152/0x1a0
[  496.134114]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  496.138964]  ? warn_alloc+0xf0/0xf0
[  496.142595]  __alloc_pages_nodemask+0x5d3/0x700
[  496.147374]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  496.152387]  ? lock_downgrade+0x6e0/0x6e0
[  496.156670]  alloc_pages_current+0xe7/0x1e0
[  496.160994]  __page_cache_alloc+0x245/0x3d0
[  496.165317]  filemap_fault+0xc21/0x1c30
[  496.169283]  ? __lock_page_or_retry+0x8a0/0x8a0
[  496.173969]  ? lock_acquire+0x170/0x3f0
[  496.177932]  ? ext4_filemap_fault+0x7c/0xb0
[  496.182362]  ext4_filemap_fault+0x84/0xb0
[  496.186501]  __do_fault+0xfa/0x380
[  496.190078]  __handle_mm_fault+0x22e9/0x3280
[  496.194491]  ? copy_page_range+0x1d70/0x1d70
[  496.198898]  ? find_held_lock+0x2d/0x110
[  496.202959]  handle_mm_fault+0x288/0x7a0
[  496.207021]  __do_page_fault+0x4bc/0xb40
[  496.211081]  ? vmalloc_fault+0xdf0/0xdf0
[  496.215252]  ? do_page_fault+0x60/0x4f2
[  496.219235]  ? page_fault+0x2f/0x50
[  496.222860]  page_fault+0x45/0x50
[  496.226312] RIP: 0020:0x13
[  496.229149] RSP: 866820:000000c43ed338b0 EFLAGS: 00000000
[  496.295083] Mem-Info:
[  496.314260] active_anon:1348736 inactive_anon:192 isolated_anon:0
[  496.314260]  active_file:374 inactive_file:395 isolated_file:32
[  496.314260]  unevictable:0 dirty:66 writeback:0 unstable:0
[  496.314260]  slab_reclaimable:18071 slab_unreclaimable:111347
[  496.314260]  mapped:52977 shmem:250 pagetables:20405 bounce:0
[  496.314260]  free:21276 free_pcp:123 free_cma:0
[  496.358663] Node 0 active_anon:1948436kB inactive_anon:756kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208912kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 954368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  496.404726] Node 1 active_anon:3446508kB inactive_anon:12kB active_file:980kB inactive_file:1048kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:1896kB dirty:264kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  496.440217] Node 0 DMA free:10352kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  496.484046] lowmem_reserve[]: 0 2557 2557 2557 2557
[  496.501998] Node 0 DMA32 free:27384kB min:36272kB low:45340kB high:54408kB active_anon:1943692kB inactive_anon:756kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:9984kB pagetables:22948kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  496.566655] lowmem_reserve[]: 0 0 0 0 0
[  496.575570] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  496.601516] lowmem_reserve[]: 0 0 0 0 0
[  496.605777] Node 1 Normal free:50780kB min:53612kB low:67012kB high:80412kB active_anon:3446508kB inactive_anon:12kB active_file:620kB inactive_file:508kB unevictable:0kB writepending:264kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:18816kB pagetables:58664kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  496.635438] lowmem_reserve[]: 0 0 0 0 0
[  496.639657] Node 0 DMA: 10*4kB (M) 5*8kB (U) 2*16kB (UM) 6*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10352kB
[  496.654861] Node 0 DMA32: 165*4kB (UME) 558*8kB (UME) 938*16kB (UME) 226*32kB (UME) 2*64kB (ME) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27492kB
[  496.669530] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  496.681057] Node 1 Normal: 403*4kB (UMEH) 276*8kB (UME) 175*16kB (UMEH) 587*32kB (UME) 219*64kB (UMH) 18*128kB (UME) 11*256kB (UME) 3*512kB (UM) 1*1024kB (M) 2*2048kB (UE) 0*4096kB = 51196kB
[  496.699587] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  496.709484] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  496.718329] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  496.727371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  496.736273] 387 total pagecache pages
[  496.740257] 0 pages in swap cache
[  496.743825] Swap cache stats: add 0, delete 0, find 0/0
[  496.749231] Free swap  = 0kB
[  496.752379] Total swap = 0kB
[  496.755421] 1965979 pages RAM
[  496.758533] 0 pages HighMem/MovableOnly
[  496.762646] 339049 pages reserved
[  496.766280] 0 pages cma reserved
[  496.769825] Out of memory: Kill process 18974 (syz-executor.1) score 1007 or sacrifice child
[  496.779106] Killed process 18974 (syz-executor.1) total-vm:75096kB, anon-rss:16564kB, file-rss:34840kB, shmem-rss:0kB
[  496.871858] oom_reaper: reaped process 18974 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[  497.220263] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  497.221122] syz-executor.3 (18976) used greatest stack depth: 23504 bytes left
14:23:28 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(0xffffffffffffffff, r3, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r5 = socket(0x0, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

14:23:28 executing program 5:
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f00000006c0)='Xo\x00\x96o\xd6Q\xb9\x06\t\xc8J,\x00\xd2\x97\x04\v\xdc\x81\xdc}_\x91\xac\x13\xdd0d\x99\x16:pAT\xf6p\xfb\xf3O\xe3>z!B\xba\xcf\xe3\x91\xcc\xac/\x89\xa0w=\xee\x9f\xc8\xf6\xa5\xb8\xd4\xa2\x7f\v\x82X\xf5\xd1>\x8a\x9f\xffw\aT^!B9\x0f\xad\fN\x14u\x02\xd9\x18+\xe8?\x8f\xe9r\x81\x05\fuVM/\xb1F\x83\xec\x15:5\xb3K\x00\x00\x00\x00mp\x14\xe2m4J\xf0pxrFg\x9d\xc9}\x9bd\x19\xe9\x1d)\x9a%\x8f\x00u\xea\x83ih\x93\xa1\xb5\xd5\xfb\x8c\xa2\xb9\xa8\xd8\xb7\xectG\xb1\xaeDm}wDc3\xb5ELR\bq\xa7\xea\xd9\xd6\xb7!\xd2t\x96F\xadyh\xd7\t\x90\aV\xc6T_\xcc\'\r%\xa4\x02\xa1\x8a\x82\xfd\x7f\x91\x91\xea|(\x16\xdc\xc7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd9\xf0m\x9f\xc4.\xb9lnm^\xd0\xce\xf0 Q\xa4\x86\"\xd4\xcc\x9c\x1c\xa0]\xe9\f4|4>z\xd6\x90\xe1\xcc\xe1f\xf8\x7f5\x10\xbe\xed\xf8p\xa37x~\xab\x8aL(E\xb4B\x83/:\x9a,%t\xfb\x03\x01\xea\xf59t.\xa6#p1g7\xba<L\x19\xaa\xe8\x80\x1f\xe3\x8e\x96\xf1Uh\xf0b0R\xd6\x02\x16\xde\xc6\n\x16A\xa5|@8UlH\xcfP\xbe\xef\x02M\xb37\xc5?\xf8')
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

14:23:28 executing program 4:

14:23:28 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:23:28 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

14:23:28 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8)

14:23:28 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef07", 0x9, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:23:28 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, 0x0)
syz_open_procfs(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x0, 0x84)
inotify_rm_watch(0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, r1, 0x0)
r2 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x7ff}, 0x3f4)
write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32)
recvmmsg(r2, &(0x7f0000002ec0), 0x4000000000004e4, 0x2, &(0x7f00000001c0)={0x77359400})

[  497.713743] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
14:23:28 executing program 5:
syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0})
socket$inet6_tcp(0xa, 0x1, 0x0)
read(0xffffffffffffffff, &(0x7f00000000c0)=""/165, 0x370)
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, 0x0)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x80c002000104082, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0)
clock_gettime(0x0, &(0x7f0000000300)={<r1=>0x0, <r2=>0x0})
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000280)={0x8, 0xb, 0x4, 0x2000000, 0x101, {r1, r2/1000+10000}, {0x0, 0x1, 0x0, 0x9, 0x3, 0x1, "06fb4a05"}, 0xffffffff, 0x0, @fd, 0x90})
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0x301, 0x0)

[  497.812514] serio: Serial port pts5
14:23:28 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(0xffffffffffffffff, r3, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r5 = socket(0x0, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

14:23:29 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef07", 0x9, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:23:29 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028c7ae65099fc397e3d31e4351b96bcb9024c32a7761d2bafe91e5c6396058a41bd754f8fafdf03bb32a4484eba5c21ec3fb10ac6efb4aa7403632c4d24e54f4f44f08f9c79f44bc90444caf5d48c4903bf8bbac59cc4b7d1cece174bd26dcfaa23bb965417037739c3e77900e868c3a0324f41f35cf67b6ea011bdf9afc1c39063fdec9281f16796efa6d9d53c044cbafc017dbc5949a7159eb058e406bc2db60cdbaa4f7c391265ef2c7940219a069af10a3dfdff14f621aa0e1aaffcc518b062f7af10ce9883d048d68bd4627f672e66f9b75f5015e91d79119bd92361eea13903afb60d7614e164f2218a0cf379811c56e61714012534bc9847202ad62340cdf62c690836313924f56ad048b62fcfca0a48934df4ea0d84557e6525f4c6a95b66c8a222f7bfb07c5c4e39b09361deb58a36715dfe9d038f1cbba3c634b1f95907c4d58eaca29d7334e4956e3c603ab84275917aa344b565020"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

14:23:29 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:23:29 executing program 5:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x0)
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x7ff}, 0x3f4)
write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32)
recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x4000000000004e4, 0x0, &(0x7f00000001c0)={0x77359400})

[  498.703285] serio: Serial port pts5
14:23:29 executing program 4:
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  499.766921] syz-executor.1 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[  499.782545] syz-executor.1 cpuset=syz1 mems_allowed=0-1
[  499.788112] CPU: 1 PID: 7542 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0
[  499.795998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  499.805357] Call Trace:
[  499.808084]  dump_stack+0x13e/0x194
[  499.811738]  dump_header+0x178/0x6d4
[  499.815456]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  499.820493]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  499.825599]  ? ___ratelimit+0x50/0x519
[  499.829503]  oom_kill_process.cold+0x10/0xae3
[  499.834114]  ? lock_acquire+0x170/0x3f0
[  499.838094]  ? lock_downgrade+0x6e0/0x6e0
[  499.842239]  out_of_memory+0x2d5/0x1110
[  499.846221]  ? oom_killer_disable+0x1c0/0x1c0
[  499.850716]  ? mutex_trylock+0x152/0x1a0
[  499.854997]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  499.859982]  ? warn_alloc+0xf0/0xf0
[  499.863605]  ? find_held_lock+0x2d/0x110
[  499.867660]  ? fs_reclaim_acquire+0x10/0x10
[  499.871983]  __alloc_pages_nodemask+0x5d3/0x700
[  499.876651]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  499.881661]  ? find_held_lock+0x2d/0x110
[  499.885722]  ? cache_grow_begin+0x32d/0x410
[  499.890050]  cache_grow_begin+0x7b/0x410
[  499.894102]  ? __cpuset_node_allowed+0xfa/0x450
[  499.898773]  fallback_alloc+0x205/0x2b0
[  499.902751]  kmem_cache_alloc+0x1ea/0x770
[  499.906909]  ? find_held_lock+0x2d/0x110
[  499.911104]  getname_flags+0xc8/0x560
[  499.914911]  user_path_mountpoint_at+0x23/0x40
[  499.919497]  SyS_umount+0x10a/0x340
[  499.923115]  ? __detach_mounts+0x2e0/0x2e0
[  499.927352]  ? __do_page_fault+0x35b/0xb40
[  499.931636]  ? do_syscall_64+0x4c/0x640
[  499.935631]  ? __detach_mounts+0x2e0/0x2e0
[  499.939863]  do_syscall_64+0x1d5/0x640
[  499.943944]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  499.949155] RIP: 0033:0x45eea7
[  499.952339] RSP: 002b:00007ffd4baf9158 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  499.960055] RAX: ffffffffffffffda RBX: 0000000000079e5a RCX: 000000000045eea7
[  499.968112] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffd4bafa290
[  499.975386] RBP: 0000000000000543 R08: 0000000000000001 R09: 0000000002b7c940
[  499.982674] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4bafa290
[  499.990077] R13: 00007ffd4bafa280 R14: 0000000000000000 R15: 00007ffd4bafa290
[  500.001663] Mem-Info:
[  500.004108] active_anon:1347214 inactive_anon:194 isolated_anon:0
[  500.004108]  active_file:18 inactive_file:11 isolated_file:31
[  500.004108]  unevictable:0 dirty:0 writeback:0 unstable:0
[  500.004108]  slab_reclaimable:17819 slab_unreclaimable:111727
[  500.004108]  mapped:52243 shmem:250 pagetables:20475 bounce:0
[  500.004108]  free:23273 free_pcp:46 free_cma:0
[  500.037622] Node 0 active_anon:1948964kB inactive_anon:756kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208912kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 954368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  500.065176] Node 1 active_anon:3439892kB inactive_anon:20kB active_file:80kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):84kB mapped:60kB dirty:0kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  500.092001] Node 0 DMA free:10328kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  500.118727] lowmem_reserve[]: 0 2557 2557 2557 2557
[  500.124633] Node 0 DMA32 free:27708kB min:36272kB low:45340kB high:54408kB active_anon:1944220kB inactive_anon:756kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:10016kB pagetables:22944kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  500.230164] lowmem_reserve[]: 0 0 0 0 0
[  500.239161] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  500.269322] lowmem_reserve[]: 0 0 0 0 0
[  500.274095] Node 1 Normal free:53620kB min:53612kB low:67012kB high:80412kB active_anon:3439892kB inactive_anon:20kB active_file:524kB inactive_file:1000kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:18848kB pagetables:58948kB bounce:0kB free_pcp:312kB local_pcp:120kB free_cma:0kB
[  500.310727] lowmem_reserve[]: 0 0 0 0 0
[  500.314932] Node 0 DMA: 10*4kB (M) 2*8kB (U) 2*16kB (UM) 6*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10328kB
[  500.334182] Node 0 DMA32: 212*4kB (UME) 548*8kB (UME) 927*16kB (UME) 228*32kB (UME) 3*64kB (ME) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27680kB
[  500.365711] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  500.376790] Node 1 Normal: 345*4kB (UM) 702*8kB (UME) 150*16kB (UM) 445*32kB (UM) 243*64kB (UM) 36*128kB (UME) 11*256kB (UME) 3*512kB (UM) 1*1024kB (M) 2*2048kB (UE) 0*4096kB = 53268kB
[  500.397873] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  500.409817] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  500.422570] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  500.446341] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  500.456163] 591 total pagecache pages
[  500.460142] 0 pages in swap cache
[  500.463822] Swap cache stats: add 0, delete 0, find 0/0
[  500.469288] Free swap  = 0kB
[  500.476605] Total swap = 0kB
[  500.479752] 1965979 pages RAM
[  500.490345] 0 pages HighMem/MovableOnly
[  500.494480] 339049 pages reserved
[  500.498044] 0 pages cma reserved
[  500.505839] Out of memory: Kill process 19053 (syz-executor.2) score 1007 or sacrifice child
[  500.514667] Killed process 19053 (syz-executor.2) total-vm:75096kB, anon-rss:16564kB, file-rss:34816kB, shmem-rss:0kB
14:23:31 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(0xffffffffffffffff, r3, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r5 = socket(0x0, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

14:23:31 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef07", 0x9, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  500.695321] oom_reaper: reaped process 19053 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
14:23:31 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
write$USERIO_CMD_SET_PORT_TYPE(r1, 0x0, 0x0)

[  500.785795] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  500.797150] serio: Serial port pts1
[  501.000265] serio: Serial port pts5
[  501.017301] syz-executor.0 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),  order=0, oom_score_adj=1000
[  501.054549] syz-executor.0 cpuset=syz0 mems_allowed=0-1
[  501.061933] syz-executor.3 (19050) used greatest stack depth: 23488 bytes left
[  501.106125] CPU: 1 PID: 19065 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0
[  501.114096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  501.123598] Call Trace:
[  501.126339]  dump_stack+0x13e/0x194
[  501.129983]  dump_header+0x178/0x6d4
[  501.133824]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  501.138873]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  501.143989]  ? ___ratelimit+0x50/0x519
[  501.147903]  oom_kill_process.cold+0x10/0xae3
[  501.152414]  ? lock_downgrade+0x6e0/0x6e0
[  501.156579]  out_of_memory+0x2d5/0x1110
[  501.160568]  ? oom_killer_disable+0x1c0/0x1c0
[  501.170131]  ? mutex_trylock+0x152/0x1a0
[  501.174244]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  501.179104]  ? warn_alloc+0xf0/0xf0
[  501.182761]  __alloc_pages_nodemask+0x5d3/0x700
[  501.187451]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  501.192220]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  501.197258]  alloc_pages_current+0xe7/0x1e0
[  501.201604]  pte_alloc_one+0x15/0x100
[  501.205553]  __handle_mm_fault+0x2ad5/0x3280
[  501.209977]  ? copy_page_range+0x1d70/0x1d70
[  501.214512]  ? find_held_lock+0x2d/0x110
[  501.218593]  handle_mm_fault+0x288/0x7a0
[  501.222667]  __do_page_fault+0x4bc/0xb40
[  501.226753]  ? vmalloc_fault+0xdf0/0xdf0
[  501.230830]  ? do_page_fault+0x60/0x4f2
[  501.234818]  ? page_fault+0x2f/0x50
[  501.238455]  page_fault+0x45/0x50
[  501.242017] RIP: 0074:0x4c2d06
[  501.245208] RSP: c29f66d4:000000000076c100 EFLAGS: ffffffff
[  501.393028] Mem-Info:
[  501.401493] active_anon:1350940 inactive_anon:194 isolated_anon:0
[  501.401493]  active_file:159 inactive_file:160 isolated_file:39
[  501.401493]  unevictable:0 dirty:44 writeback:0 unstable:0
[  501.401493]  slab_reclaimable:17846 slab_unreclaimable:111594
[  501.401493]  mapped:52514 shmem:250 pagetables:20491 bounce:0
[  501.401493]  free:19389 free_pcp:111 free_cma:0
[  501.436812] Node 0 active_anon:1949408kB inactive_anon:756kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208912kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 954368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  501.464889] Node 1 active_anon:3454352kB inactive_anon:20kB active_file:524kB inactive_file:436kB unevictable:0kB isolated(anon):0kB isolated(file):180kB mapped:844kB dirty:176kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  501.493503] Node 0 DMA free:10360kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  501.526205] lowmem_reserve[]: 0 2557 2557 2557 2557
[  501.532683] Node 0 DMA32 free:27112kB min:36272kB low:45340kB high:54408kB active_anon:1944664kB inactive_anon:756kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:10080kB pagetables:22944kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  501.561962] lowmem_reserve[]: 0 0 0 0 0
[  501.566101] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  501.594111] lowmem_reserve[]: 0 0 0 0 0
[  501.607606] Node 1 Normal free:40884kB min:53612kB low:67012kB high:80412kB active_anon:3454396kB inactive_anon:20kB active_file:640kB inactive_file:668kB unevictable:0kB writepending:80kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:19072kB pagetables:59024kB bounce:0kB free_pcp:328kB local_pcp:228kB free_cma:0kB
[  501.644711] lowmem_reserve[]: 0 0 0 0 0
[  501.648754] Node 0 DMA: 10*4kB (M) 2*8kB (U) 2*16kB (UM) 7*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10360kB
[  501.664376] Node 0 DMA32: 239*4kB (UME) 555*8kB (UME) 917*16kB (UME) 221*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27140kB
[  501.678317] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  501.689241] Node 1 Normal: 205*4kB (UMH) 96*8kB (UMEH) 65*16kB (UMH) 440*32kB (UH) 206*64kB (UMH) 15*128kB (UME) 11*256kB (UME) 3*512kB (UM) 1*1024kB (M) 2*2048kB (UE) 0*4096kB = 41284kB
[  501.706273] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  501.715336] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  501.724000] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  501.732884] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  501.741615] 338 total pagecache pages
[  501.745549] 0 pages in swap cache
[  501.748990] Swap cache stats: add 0, delete 0, find 0/0
[  501.754380] Free swap  = 0kB
[  501.757399] Total swap = 0kB
[  501.761309] 1965979 pages RAM
[  501.764508] 0 pages HighMem/MovableOnly
[  501.768596] 339049 pages reserved
[  501.772382] 0 pages cma reserved
[  501.775864] Out of memory: Kill process 19054 (syz-executor.0) score 1007 or sacrifice child
[  501.786319] Killed process 19065 (syz-executor.0) total-vm:75096kB, anon-rss:3500kB, file-rss:34816kB, shmem-rss:0kB
[  501.806513] oom_reaper: reaped process 19065 (syz-executor.0), now anon-rss:0kB, file-rss:12kB, shmem-rss:0kB
[  501.843982] rsyslogd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null),  order=0, oom_score_adj=0
[  501.857464] rsyslogd cpuset=/ mems_allowed=0-1
[  501.866010] CPU: 1 PID: 7373 Comm: rsyslogd Not tainted 4.14.172-syzkaller #0
[  501.873329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  501.882688] Call Trace:
[  501.885290]  dump_stack+0x13e/0x194
[  501.888931]  dump_header+0x178/0x6d4
[  501.892653]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  501.897682]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  501.902870]  ? ___ratelimit+0x50/0x519
[  501.906867]  oom_kill_process.cold+0x10/0xae3
[  501.911561]  ? lock_downgrade+0x6e0/0x6e0
[  501.915839]  out_of_memory+0x2d5/0x1110
[  501.919834]  ? oom_killer_disable+0x1c0/0x1c0
[  501.924328]  ? mutex_trylock+0x152/0x1a0
[  501.928386]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  501.933249]  ? warn_alloc+0xf0/0xf0
[  501.936902]  __alloc_pages_nodemask+0x5d3/0x700
[  501.941591]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  501.946607]  ? lock_downgrade+0x6e0/0x6e0
[  501.950875]  alloc_pages_current+0xe7/0x1e0
[  501.955206]  __page_cache_alloc+0x245/0x3d0
[  501.959536]  filemap_fault+0xc21/0x1c30
[  501.963662]  ? __lock_page_or_retry+0x8a0/0x8a0
[  501.968374]  ? lock_acquire+0x170/0x3f0
[  501.972349]  ? ext4_filemap_fault+0x7c/0xb0
[  501.976686]  ext4_filemap_fault+0x84/0xb0
[  501.980838]  __do_fault+0xfa/0x380
[  501.984386]  __handle_mm_fault+0x22e9/0x3280
[  501.988803]  ? copy_page_range+0x1d70/0x1d70
[  501.993213]  ? find_held_lock+0x2d/0x110
[  501.997296]  handle_mm_fault+0x288/0x7a0
[  502.001362]  __do_page_fault+0x4bc/0xb40
[  502.005423]  ? vmalloc_fault+0xdf0/0xdf0
[  502.009468]  ? do_page_fault+0x60/0x4f2
[  502.013469]  ? page_fault+0x2f/0x50
[  502.017099]  page_fault+0x45/0x50
[  502.020746] RIP: 00bd:0x7f87f277f5a3
[  502.024550] RSP: 173e7d0:000000000173e9f0 EFLAGS: 00000000
[  502.044152] Mem-Info:
[  502.074051] active_anon:1348313 inactive_anon:194 isolated_anon:0
[  502.074051]  active_file:28 inactive_file:3 isolated_file:0
[  502.074051]  unevictable:0 dirty:9 writeback:0 unstable:0
[  502.074051]  slab_reclaimable:17847 slab_unreclaimable:111587
[  502.074051]  mapped:52254 shmem:250 pagetables:20470 bounce:0
[  502.074051]  free:22363 free_pcp:0 free_cma:0
[  502.124015] Node 0 active_anon:1947836kB inactive_anon:756kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208912kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 954368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  502.154706] Node 1 active_anon:3439452kB inactive_anon:20kB active_file:1148kB inactive_file:1432kB unevictable:0kB isolated(anon):0kB isolated(file):216kB mapped:2200kB dirty:40kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  502.209860] Node 0 DMA free:10360kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  502.236802] lowmem_reserve[]: 0 2557 2557 2557 2557
[  502.242103] Node 0 DMA32 free:28736kB min:36272kB low:45340kB high:54408kB active_anon:1943084kB inactive_anon:756kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:10016kB pagetables:22944kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  502.270782] lowmem_reserve[]: 0 0 0 0 0
[  502.274933] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  502.306952] lowmem_reserve[]: 0 0 0 0 0
[  502.312133] Node 1 Normal free:55588kB min:53612kB low:67012kB high:80412kB active_anon:3439416kB inactive_anon:20kB active_file:520kB inactive_file:452kB unevictable:0kB writepending:40kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:18752kB pagetables:58792kB bounce:0kB free_pcp:416kB local_pcp:236kB free_cma:0kB
[  502.346757] lowmem_reserve[]: 0 0 0 0 0
[  502.350868] Node 0 DMA: 10*4kB (M) 2*8kB (U) 2*16kB (UM) 7*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10360kB
[  502.369874] Node 0 DMA32: 276*4kB (UME) 575*8kB (UME) 933*16kB (UME) 236*32kB (UME) 5*64kB (ME) 1*128kB (E) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28632kB
[  502.389277] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  502.408735] Node 1 Normal: 388*4kB (UMH) 198*8kB (UMEH) 348*16kB (UMH) 631*32kB (UMH) 243*64kB (UMH) 16*128kB (UME) 11*256kB (UME) 3*512kB (UM) 1*1024kB (M) 2*2048kB (UE) 0*4096kB = 55968kB
[  502.431402] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  502.444821] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  502.456120] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  502.485766] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  502.496097] 784 total pagecache pages
[  502.499956] 0 pages in swap cache
[  502.506305] Swap cache stats: add 0, delete 0, find 0/0
[  502.513285] Free swap  = 0kB
[  502.516324] Total swap = 0kB
[  502.519370] 1965979 pages RAM
[  502.525364] 0 pages HighMem/MovableOnly
[  502.529413] 339049 pages reserved
[  502.534263] 0 pages cma reserved
[  502.537667] Out of memory: Kill process 18085 (syz-executor.2) score 1007 or sacrifice child
[  502.583365] Killed process 18085 (syz-executor.2) total-vm:75228kB, anon-rss:16572kB, file-rss:34816kB, shmem-rss:0kB
[  502.667715] oom_reaper: reaped process 18085 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
14:23:33 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5", 0xe, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:23:33 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:23:33 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028c7ae65099fc397e3d31e4351b96bcb9024c32a7761d2bafe91e5c6396058a41bd754f8fafdf03bb32a4484eba5c21ec3fb10ac6efb4aa7403632c4d24e54f4f44f08f9c79f44bc90444caf5d48c4903bf8bbac59cc4b7d1cece174bd26dcfaa23bb965417037739c3e77900e868c3a0324f41f35cf67b6ea011bdf9afc1c39063fdec9281f16796efa6d9d53c044cbafc017dbc5949a7159eb058e406bc2db60cdbaa4f7c391265ef2c7940219a069af10a3dfdff14f621aa0e1aaffcc518b062f7af10ce9883d048d68bd4627f672e66f9b75f5015e91d79119bd92361eea13903afb60d7614e164f2218a0cf379811c56e61714012534bc9847202ad62340cdf62c690836313924f56ad048b62fcfca0a48934df4ea0d84557e6525f4c6a95b66c8a222f7bfb07c5c4e39b09361deb58a36715dfe9d038f1cbba3c634b1f95907c4d58eaca29d7334e4956e3c603ab84275917aa344b565020"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

14:23:33 executing program 5:
getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
inotify_rm_watch(0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080), 0x3f4)
write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32)
recvmmsg(r0, &(0x7f0000002ec0), 0x4000000000004e4, 0x2, &(0x7f00000001c0)={0x77359400})

14:23:33 executing program 4:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$IMHOLD_L1(r0, 0x80044948, 0x0)

14:23:33 executing program 4:
r0 = socket(0x10, 0x2, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)

[  503.187277] serio: Serial port pts5
[  503.413801] syz-executor.1 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null),  order=0, oom_score_adj=1000
[  503.478274] syz-executor.1 cpuset=syz1 mems_allowed=0-1
[  503.495523] CPU: 0 PID: 19086 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0
[  503.503457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  503.512964] Call Trace:
[  503.515570]  dump_stack+0x13e/0x194
[  503.519211]  dump_header+0x178/0x6d4
[  503.523544]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  503.528573]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  503.533711]  ? ___ratelimit+0x50/0x519
[  503.537613]  oom_kill_process.cold+0x10/0xae3
[  503.542126]  ? lock_downgrade+0x6e0/0x6e0
[  503.546289]  out_of_memory+0x2d5/0x1110
[  503.550265]  ? oom_killer_disable+0x1c0/0x1c0
[  503.554757]  ? mutex_trylock+0x152/0x1a0
[  503.558824]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  503.563769]  ? warn_alloc+0xf0/0xf0
[  503.567397]  __alloc_pages_nodemask+0x5d3/0x700
[  503.572079]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  503.577098]  ? trace_hardirqs_on+0x10/0x10
[  503.581364]  alloc_pages_vma+0xc2/0x4a0
[  503.585341]  wp_page_copy+0xa22/0x1300
[  503.589230]  ? follow_pfn+0x200/0x200
[  503.593026]  do_wp_page+0x244/0x11d0
[  503.596740]  ? lock_acquire+0x170/0x3f0
[  503.600709]  ? finish_mkwrite_fault+0x640/0x640
[  503.605405]  __handle_mm_fault+0x1c0e/0x3280
[  503.609829]  ? copy_page_range+0x1d70/0x1d70
[  503.614234]  ? find_held_lock+0x2d/0x110
[  503.618307]  handle_mm_fault+0x288/0x7a0
[  503.622395]  __do_page_fault+0x4bc/0xb40
[  503.626629]  ? vmalloc_fault+0xdf0/0xdf0
[  503.630783]  ? do_page_fault+0x60/0x4f2
[  503.634752]  page_fault+0x25/0x50
[  503.638235] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20
[  503.644108] RSP: 0018:ffff8881ce9c7b60 EFLAGS: 00010206
[  503.649466] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000500
[  503.656728] RDX: 0000000000001000 RSI: ffff8881b56c6b00 RDI: 00000000203c1000
[  503.663993] RBP: 00000000203c0500 R08: ffffed1036ad8e00 R09: 0000000000000000
[  503.671364] R10: ffffed1036ad8dff R11: ffff8881b56c6fff R12: ffff8881b56c6000
[  503.678632] R13: 00007ffffffff000 R14: 00000000203c1500 R15: ffff8881ce9c7de0
[  503.685921]  copyout+0x99/0xc0
[  503.689107]  copy_page_to_iter+0x32a/0xc80
[  503.693335]  pipe_to_user+0xa8/0x160
[  503.697035]  __splice_from_pipe+0x332/0x740
[  503.701344]  ? iter_to_pipe+0x4c0/0x4c0
[  503.705420]  vmsplice_to_user+0x197/0x1c0
[  503.709578]  ? __splice_from_pipe+0x740/0x740
[  503.714083]  ? save_trace+0x290/0x290
[  503.717933]  ? __might_fault+0x104/0x1b0
[  503.721997]  ? find_held_lock+0x2d/0x110
[  503.726053]  ? lock_downgrade+0x6e0/0x6e0
[  503.730194]  ? __fget+0x228/0x360
[  503.733658]  SyS_vmsplice+0x12a/0x150
[  503.737468]  ? default_file_splice_write+0x80/0x80
[  503.742406]  do_syscall_64+0x1d5/0x640
[  503.746295]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  503.751494] RIP: 0033:0x45c479
[  503.754788] RSP: 002b:00007fe226045c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  503.762517] RAX: ffffffffffffffda RBX: 00007fe2260466d4 RCX: 000000000045c479
[  503.769804] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000006
[  503.777065] RBP: 000000000076c060 R08: 0000000000000000 R09: 0000000000000000
[  503.784317] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  503.791579] R13: 0000000000000c45 R14: 00000000004ce26e R15: 000000000076c06c
[  503.804352] Mem-Info:
[  503.807066] active_anon:1347742 inactive_anon:195 isolated_anon:0
[  503.807066]  active_file:488 inactive_file:460 isolated_file:88
[  503.807066]  unevictable:0 dirty:49 writeback:0 unstable:0
[  503.807066]  slab_reclaimable:17878 slab_unreclaimable:111529
[  503.807066]  mapped:53112 shmem:250 pagetables:20495 bounce:0
[  503.807066]  free:21856 free_pcp:21 free_cma:0
[  503.843188] Node 0 active_anon:1949568kB inactive_anon:756kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208912kB dirty:4kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 954368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  503.871000] Node 1 active_anon:3441400kB inactive_anon:24kB active_file:1820kB inactive_file:1788kB unevictable:0kB isolated(anon):0kB isolated(file):236kB mapped:3336kB dirty:192kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  503.898989] Node 0 DMA free:10360kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  503.926431] lowmem_reserve[]: 0 2557 2557 2557 2557
[  503.937249] Node 0 DMA32 free:26828kB min:36272kB low:45340kB high:54408kB active_anon:1944544kB inactive_anon:756kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:10048kB pagetables:22932kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  503.981095] lowmem_reserve[]: 0 0 0 0 0
[  503.985254] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  504.035434] lowmem_reserve[]: 0 0 0 0 0
[  504.040848] Node 1 Normal free:51244kB min:53612kB low:67012kB high:80412kB active_anon:3440704kB inactive_anon:24kB active_file:1384kB inactive_file:1560kB unevictable:0kB writepending:292kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:19040kB pagetables:59040kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  504.072334] lowmem_reserve[]: 0 0 0 0 0
[  504.076700] Node 0 DMA: 10*4kB (M) 2*8kB (U) 2*16kB (UM) 7*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10360kB
[  504.100727] Node 0 DMA32: 197*4kB (UME) 556*8kB (UME) 913*16kB (UME) 220*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26948kB
[  504.120515] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  504.131577] Node 1 Normal: 918*4kB (UMH) 398*8kB (UMEH) 229*16kB (UMH) 423*32kB (UMH) 206*64kB (UMH) 27*128kB (UME) 16*256kB (UME) 5*512kB (UM) 1*1024kB (M) 2*2048kB (UE) 0*4096kB = 52472kB
[  504.149046] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  504.172818] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  504.186115] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  504.195555] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  504.204666] 504 total pagecache pages
[  504.208810] 0 pages in swap cache
[  504.229192] Swap cache stats: add 0, delete 0, find 0/0
[  504.241865] Free swap  = 0kB
[  504.248426] Total swap = 0kB
[  504.256290] 1965979 pages RAM
[  504.263018] 0 pages HighMem/MovableOnly
[  504.271311] 339049 pages reserved
[  504.276249] 0 pages cma reserved
[  504.279918] Out of memory: Kill process 19084 (syz-executor.2) score 1007 or sacrifice child
[  504.324618] udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=-1000
[  504.347935] udevd cpuset=/ mems_allowed=0-1
[  504.356134] CPU: 1 PID: 3717 Comm: udevd Not tainted 4.14.172-syzkaller #0
[  504.363169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  504.372523] Call Trace:
[  504.375120]  dump_stack+0x13e/0x194
[  504.378764]  dump_header+0x178/0x6d4
[  504.382584]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  504.387607]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  504.392716]  ? ___ratelimit+0x50/0x519
[  504.396613]  oom_kill_process.cold+0x10/0xae3
[  504.401115]  ? lock_acquire+0x170/0x3f0
[  504.405096]  ? lock_downgrade+0x6e0/0x6e0
[  504.409260]  out_of_memory+0x2d5/0x1110
[  504.413251]  ? oom_killer_disable+0x1c0/0x1c0
[  504.417756]  ? mutex_trylock+0x152/0x1a0
[  504.421821]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  504.426696]  ? warn_alloc+0xf0/0xf0
[  504.430334]  ? find_held_lock+0x2d/0x110
[  504.434406]  ? fs_reclaim_acquire+0x10/0x10
[  504.438736]  __alloc_pages_nodemask+0x5d3/0x700
[  504.443514]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  504.448668]  cache_grow_begin+0x7b/0x410
[  504.452739]  ? __cpuset_node_allowed+0xfa/0x450
[  504.457437]  fallback_alloc+0x205/0x2b0
[  504.461423]  kmem_cache_alloc+0x1ea/0x770
[  504.465586]  getname_flags+0xc8/0x560
[  504.469514]  do_sys_open+0x1c4/0x3f0
[  504.473258]  ? filp_open+0x60/0x60
[  504.476824]  ? do_syscall_64+0x4c/0x640
[  504.480810]  ? do_sys_open+0x3f0/0x3f0
[  504.484703]  do_syscall_64+0x1d5/0x640
[  504.488601]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  504.493792] RIP: 0033:0x7fa473b82120
[  504.497501] RSP: 002b:00007ffcb9354cc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  504.505311] RAX: ffffffffffffffda RBX: 0000000000f1d1e0 RCX: 00007fa473b82120
[  504.512698] RDX: 00000000000001b6 RSI: 0000000000080000 RDI: 00007ffcb9354da0
[  504.519977] RBP: 00007ffcb9354d40 R08: 0000000000000008 R09: 0000000000000001
[  504.527255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[  504.534661] R13: 000000000041f57a R14: 0000000000f264e0 R15: 0000000000ed6030
[  504.546924] Mem-Info:
[  504.549379] active_anon:1347826 inactive_anon:194 isolated_anon:0
[  504.549379]  active_file:34 inactive_file:62 isolated_file:34
[  504.549379]  unevictable:0 dirty:32 writeback:7 unstable:0
[  504.549379]  slab_reclaimable:17880 slab_unreclaimable:111419
[  504.549379]  mapped:52269 shmem:250 pagetables:20502 bounce:0
[  504.549379]  free:22913 free_pcp:59 free_cma:0
[  504.582930] Node 0 active_anon:1949708kB inactive_anon:756kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208912kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 954368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  504.610522] Node 1 active_anon:3441596kB inactive_anon:20kB active_file:156kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:92kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  504.637752] Node 0 DMA free:10360kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  504.666788] lowmem_reserve[]: 0 2557 2557 2557 2557
[  504.677018] Node 0 DMA32 free:27000kB min:36272kB low:45340kB high:54408kB active_anon:1944964kB inactive_anon:756kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:10048kB pagetables:22936kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  504.705880] lowmem_reserve[]: 0 0 0 0 0
[  504.709897] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  504.735433] lowmem_reserve[]: 0 0 0 0 0
[  504.739579] Node 1 Normal free:53820kB min:53612kB low:67012kB high:80412kB active_anon:3441596kB inactive_anon:20kB active_file:112kB inactive_file:164kB unevictable:0kB writepending:28kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:18880kB pagetables:59064kB bounce:0kB free_pcp:264kB local_pcp:0kB free_cma:0kB
[  504.769042] lowmem_reserve[]: 0 0 0 0 0
[  504.773084] Node 0 DMA: 10*4kB (M) 2*8kB (U) 2*16kB (UM) 7*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10360kB
[  504.803480] Node 0 DMA32: 175*4kB (UME) 557*8kB (UME) 913*16kB (UME) 220*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26868kB
[  504.870100] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  504.885724] Node 1 Normal: 534*4kB (UMEH) 471*8kB (UMEH) 334*16kB (UMH) 433*32kB (UMH) 207*64kB (UMH) 28*128kB (UME) 16*256kB (UME) 5*512kB (UM) 1*1024kB (M) 2*2048kB (UE) 0*4096kB = 53712kB
[  504.903644] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  504.920127] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  504.928839] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  504.938076] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  504.946787] 334 total pagecache pages
[  504.951214] 0 pages in swap cache
[  504.954675] Swap cache stats: add 0, delete 0, find 0/0
[  504.965937] Free swap  = 0kB
[  504.969007] Total swap = 0kB
[  504.973280] 1965979 pages RAM
[  504.976441] 0 pages HighMem/MovableOnly
[  504.983945] 339049 pages reserved
[  504.987611] 0 pages cma reserved
[  505.005472] Out of memory: Kill process 19103 (syz-executor.2) score 1007 or sacrifice child
[  505.014193] Killed process 19103 (syz-executor.2) total-vm:75096kB, anon-rss:16564kB, file-rss:34816kB, shmem-rss:0kB
[  505.059822] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  505.345886] serio: Serial port pts1
[  505.847205] modprobe invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=-1000
[  505.875050] modprobe cpuset=/ mems_allowed=0-1
[  505.885212] CPU: 1 PID: 19114 Comm: modprobe Not tainted 4.14.172-syzkaller #0
[  505.892607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  505.901964] Call Trace:
[  505.904567]  dump_stack+0x13e/0x194
[  505.908204]  dump_header+0x178/0x6d4
[  505.911933]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  505.916971]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  505.922219]  ? ___ratelimit+0x50/0x519
[  505.926127]  oom_kill_process.cold+0x10/0xae3
[  505.930640]  ? lock_downgrade+0x6e0/0x6e0
[  505.934806]  out_of_memory+0x2d5/0x1110
[  505.938828]  ? oom_killer_disable+0x1c0/0x1c0
[  505.943454]  ? mutex_trylock+0x152/0x1a0
[  505.947523]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  505.952386]  ? warn_alloc+0xf0/0xf0
[  505.956032]  __alloc_pages_nodemask+0x5d3/0x700
[  505.960692]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  505.965872]  ? find_held_lock+0x2d/0x110
[  505.970041]  ? mark_held_locks+0xa6/0xf0
[  505.974103]  ? cache_grow_begin+0x32d/0x410
[  505.978423]  cache_grow_begin+0x7b/0x410
[  505.982476]  ? __cpuset_node_allowed+0xfa/0x450
[  505.987437]  fallback_alloc+0x205/0x2b0
[  505.991422]  kmem_cache_alloc+0x1ea/0x770
[  505.995657]  ima_d_path+0x4d/0x1d3
[  505.999221]  process_measurement+0x904/0xb20
[  506.003639]  ? ima_rdwr_violation_check+0x3a0/0x3a0
[  506.008823]  ? generic_file_open+0x68/0x90
[  506.013110]  ? ext4_release_file+0x2d0/0x2d0
[  506.017534]  ? inode_has_perm.isra.0+0x1d0/0x1d0
[  506.022300]  ? lock_downgrade+0x6e0/0x6e0
[  506.026469]  ? file_ra_state_init+0xc4/0x1e0
[  506.030971]  ? do_dentry_open+0x442/0xe90
[  506.035124]  ? ext4_release_file+0x2d0/0x2d0
[  506.039536]  ? __inode_permission+0x7c/0x300
[  506.043955]  ? vfs_open+0x10d/0x220
[  506.047586]  path_openat+0x15ad/0x3c50
[  506.051522]  ? path_lookupat.isra.0+0x7b0/0x7b0
[  506.056210]  do_filp_open+0x18e/0x250
[  506.060020]  ? may_open_dev+0xe0/0xe0
[  506.063842]  ? lock_downgrade+0x6e0/0x6e0
[  506.068003]  ? do_raw_spin_unlock+0x164/0x250
[  506.072504]  ? __alloc_fd+0x1bf/0x490
[  506.076317]  do_sys_open+0x29d/0x3f0
[  506.080040]  ? filp_open+0x60/0x60
[  506.083612]  ? __do_page_fault+0x35b/0xb40
[  506.087867]  ? do_syscall_64+0x4c/0x640
[  506.091859]  ? do_sys_open+0x3f0/0x3f0
[  506.095767]  do_syscall_64+0x1d5/0x640
[  506.099670]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  506.104868] RIP: 0033:0x7f7d6967b1a7
[  506.108589] RSP: 002b:00007ffd1a9c3788 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  506.116450] RAX: ffffffffffffffda RBX: 000055a1c4ea65c1 RCX: 00007f7d6967b1a7
[  506.123723] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f7d6967f282
[  506.131085] RBP: 0000000000000001 R08: 00007f7d69886570 R09: 0000000000000000
[  506.138363] R10: ffffffffffffffb0 R11: 0000000000000246 R12: 00007f7d69886090
[  506.145661] R13: 00007f7d69885040 R14: 0000000000000000 R15: 00007f7d69886570
[  506.169613] Mem-Info:
[  506.177908] active_anon:1345068 inactive_anon:193 isolated_anon:0
[  506.177908]  active_file:174 inactive_file:630 isolated_file:40
[  506.177908]  unevictable:0 dirty:4 writeback:1 unstable:0
[  506.177908]  slab_reclaimable:17873 slab_unreclaimable:111193
[  506.177908]  mapped:52832 shmem:250 pagetables:20498 bounce:0
[  506.177908]  free:24688 free_pcp:390 free_cma:0
[  506.212839] Node 0 active_anon:1948764kB inactive_anon:756kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208912kB dirty:0kB writeback:4kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 954368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  506.241400] Node 1 active_anon:3429508kB inactive_anon:16kB active_file:776kB inactive_file:1672kB unevictable:0kB isolated(anon):0kB isolated(file):160kB mapped:2116kB dirty:16kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  506.273090] Node 0 DMA free:10352kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  506.329614] lowmem_reserve[]: 0 2557 2557 2557 2557
[  506.335578] Node 0 DMA32 free:27224kB min:36272kB low:45340kB high:54408kB active_anon:1944020kB inactive_anon:756kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:4kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:10048kB pagetables:22936kB bounce:0kB free_pcp:844kB local_pcp:120kB free_cma:0kB
[  506.368796] lowmem_reserve[]: 0 0 0 0 0
[  506.380248] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  506.415637] lowmem_reserve[]: 0 0 0 0 0
[  506.419861] Node 1 Normal free:65300kB min:53612kB low:67012kB high:80412kB active_anon:3429412kB inactive_anon:16kB active_file:1576kB inactive_file:728kB unevictable:0kB writepending:16kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:18784kB pagetables:59048kB bounce:0kB free_pcp:648kB local_pcp:156kB free_cma:0kB
[  506.454133] lowmem_reserve[]: 0 0 0 0 0
[  506.458981] Node 0 DMA: 10*4kB (M) 1*8kB (U) 2*16kB (UM) 7*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10352kB
[  506.478540] Node 0 DMA32: 199*4kB (UME) 561*8kB (UE) 906*16kB (UE) 227*32kB (UME) 2*64kB (E) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27172kB
[  506.493229] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  506.504366] Node 1 Normal: 405*4kB (UMEH) 382*8kB (UMEH) 389*16kB (UMH) 631*32kB (UMH) 273*64kB (UMH) 31*128kB (UME) 15*256kB (UME) 5*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 0*4096kB = 65076kB
[  506.521958] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  506.535219] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  506.546852] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  506.556515] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  506.565817] 752 total pagecache pages
[  506.569786] 0 pages in swap cache
[  506.590116] Swap cache stats: add 0, delete 0, find 0/0
[  506.595588] Free swap  = 0kB
[  506.598640] Total swap = 0kB
[  506.602706] 1965979 pages RAM
[  506.605827] 0 pages HighMem/MovableOnly
[  506.609833] 339049 pages reserved
[  506.613743] 0 pages cma reserved
[  506.617151] Out of memory: Kill process 18196 (syz-executor.2) score 1007 or sacrifice child
[  506.627072] Killed process 18196 (syz-executor.2) total-vm:75228kB, anon-rss:16572kB, file-rss:34816kB, shmem-rss:0kB
14:23:37 executing program 4:
r0 = socket(0x10, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0)

14:23:37 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5", 0xe, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:23:37 executing program 5:
syz_open_dev$ndb(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]})
socket$inet6_tcp(0xa, 0x1, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)

14:23:37 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028c7ae65099fc397e3d31e4351b96bcb9024c32a7761d2bafe91e5c6396058a41bd754f8fafdf03bb32a4484eba5c21ec3fb10ac6efb4aa7403632c4d24e54f4f44f08f9c79f44bc90444caf5d48c4903bf8bbac59cc4b7d1cece174bd26dcfaa23bb965417037739c3e77900e868c3a0324f41f35cf67b6ea011bdf9afc1c39063fdec9281f16796efa6d9d53c044cbafc017dbc5949a7159eb058e406bc2db60cdbaa4f7c391265ef2c7940219a069af10a3dfdff14f621aa0e1aaffcc518b062f7af10ce9883d048d68bd4627f672e66f9b75f5015e91d79119bd92361eea13903afb60d7614e164f2218a0cf379811c56e61714012534bc9847202ad62340cdf62c690836313924f56ad048b62fcfca0a48934df4ea0d84557e6525f4c6a95b66c8a222f7bfb07c5c4e39b09361deb58a36715dfe9d038f1cbba3c634b1f95907c4d58eaca29d7334e4956e3c603ab84275917aa344b565020"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

[  506.743798] oom_reaper: reaped process 18196 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
14:23:37 executing program 1:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(0xffffffffffffffff, r3, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r5 = socket(0x0, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

14:23:37 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:23:37 executing program 4:
socket$inet6(0xa, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev, 0x0, 0x0, 0x103, 0x1}, 0x20)

[  506.897557] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  506.980476] serio: Serial port pts1
[  507.285603] udevd invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null),  order=0, oom_score_adj=-1000
[  507.373780] udevd cpuset=/ mems_allowed=0-1
[  507.398980] CPU: 0 PID: 3717 Comm: udevd Not tainted 4.14.172-syzkaller #0
[  507.406048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  507.415412] Call Trace:
[  507.418017]  dump_stack+0x13e/0x194
[  507.421663]  dump_header+0x178/0x6d4
[  507.425386]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  507.430413]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  507.435527]  ? ___ratelimit+0x50/0x519
[  507.439416]  oom_kill_process.cold+0x10/0xae3
[  507.443905]  ? lock_downgrade+0x6e0/0x6e0
[  507.448040]  out_of_memory+0x2d5/0x1110
[  507.452022]  ? oom_killer_disable+0x1c0/0x1c0
[  507.456520]  ? mutex_trylock+0x152/0x1a0
[  507.460583]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  507.465444]  ? warn_alloc+0xf0/0xf0
[  507.469091]  __alloc_pages_nodemask+0x5d3/0x700
[  507.473758]  ? __sched_text_start+0x8/0x8
[  507.477899]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  507.482921]  ? preempt_schedule_common+0x4a/0xc0
[  507.487673]  alloc_pages_current+0xe7/0x1e0
[  507.491997]  __get_free_pages+0xb/0x40
[  507.495871]  inode_doinit_with_dentry+0x7b6/0xe30
[  507.500711]  ? selinux_cred_free+0x70/0x70
[  507.504957]  selinux_d_instantiate+0x23/0x30
[  507.509386]  security_d_instantiate+0x54/0xd0
[  507.513872]  d_splice_alias+0x7b/0xb70
[  507.517942]  kernfs_iop_lookup+0x196/0x200
[  507.522185]  lookup_slow+0x213/0x410
[  507.525906]  ? page_put_link+0x1b0/0x1b0
[  507.529956]  ? lookup_fast+0x458/0xeb0
[  507.533855]  walk_component+0x648/0x1bd0
[  507.537929]  ? wait_for_completion+0x390/0x390
[  507.542521]  ? path_init+0x1920/0x1920
[  507.546420]  ? security_inode_permission+0xb7/0xf0
[  507.551693]  ? kernfs_iop_getattr+0xd0/0xd0
[  507.556016]  ? __inode_permission+0x7c/0x300
[  507.560431]  link_path_walk+0x717/0xed0
[  507.564402]  ? path_init+0x26e/0x1920
[  507.568201]  ? walk_component+0x1bd0/0x1bd0
[  507.572513]  path_openat+0x16e/0x3c50
[  507.576313]  ? __lock_acquire+0x5f7/0x4620
[  507.580533]  ? _raw_spin_unlock_irq+0x5a/0x80
[  507.585029]  ? path_lookupat.isra.0+0x7b0/0x7b0
[  507.589693]  ? __lock_is_held+0xad/0x140
[  507.593762]  do_filp_open+0x18e/0x250
[  507.597559]  ? may_open_dev+0xe0/0xe0
[  507.601360]  ? lock_downgrade+0x6e0/0x6e0
[  507.605507]  ? do_raw_spin_unlock+0x164/0x250
[  507.610040]  ? __alloc_fd+0x1bf/0x490
[  507.613848]  do_sys_open+0x29d/0x3f0
[  507.617550]  ? filp_open+0x60/0x60
[  507.621089]  ? do_syscall_64+0x4c/0x640
[  507.625058]  ? do_sys_open+0x3f0/0x3f0
[  507.628936]  do_syscall_64+0x1d5/0x640
[  507.632833]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  507.638013] RIP: 0033:0x7fa473b82120
[  507.641822] RSP: 002b:00007ffcb9354cc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  507.649646] RAX: ffffffffffffffda RBX: 0000000000f0a8d0 RCX: 00007fa473b82120
[  507.656907] RDX: 00000000000001b6 RSI: 0000000000080000 RDI: 00007ffcb9354da0
[  507.664171] RBP: 00007ffcb9354d40 R08: 0000000000000008 R09: 0000000000000001
[  507.671443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[  507.678703] R13: 000000000041f57a R14: 0000000000f264e0 R15: 0000000000ed6030
[  507.729526] Mem-Info:
[  507.736726] active_anon:1346590 inactive_anon:194 isolated_anon:0
[  507.736726]  active_file:604 inactive_file:694 isolated_file:30
[  507.736726]  unevictable:0 dirty:25 writeback:0 unstable:0
[  507.736726]  slab_reclaimable:17903 slab_unreclaimable:111008
[  507.736726]  mapped:53359 shmem:250 pagetables:20545 bounce:0
[  507.736726]  free:23068 free_pcp:123 free_cma:0
[  507.789773] Node 0 active_anon:1949244kB inactive_anon:756kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208912kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 954368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  507.862034] audit: type=1326 audit(1583072618.432:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=19121 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f2ba code=0x0
[  507.864406] Node 1 active_anon:3439716kB inactive_anon:20kB active_file:2144kB inactive_file:1960kB unevictable:0kB isolated(anon):0kB isolated(file):208kB mapped:3424kB dirty:0kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  507.964147] audit: type=1326 audit(1583072618.532:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=19121 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f2ba code=0x0
[  507.993682] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  508.029278] lowmem_reserve[]: 0 2557 2557 2557 2557
[  508.035569] Node 0 DMA32 free:27240kB min:36272kB low:45340kB high:54408kB active_anon:1944004kB inactive_anon:756kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:10048kB pagetables:22932kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  508.069539] lowmem_reserve[]: 0 0 0 0 0
[  508.073902] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  508.107665] lowmem_reserve[]: 0 0 0 0 0
[  508.112217] Node 1 Normal free:54640kB min:53612kB low:67012kB high:80412kB active_anon:3439988kB inactive_anon:20kB active_file:1164kB inactive_file:1216kB unevictable:0kB writepending:116kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:18976kB pagetables:59140kB bounce:0kB free_pcp:692kB local_pcp:68kB free_cma:0kB
[  508.172106] lowmem_reserve[]: 0 0 0 0 0
[  508.180352] Node 0 DMA: 10*4kB (M) 1*8kB (U) 1*16kB (M) 7*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10336kB
[  508.232969] Node 0 DMA32: 237*4kB (UME) 566*8kB (UME) 912*16kB (UME) 226*32kB (UME) 1*64kB (E) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27492kB
[  508.268993] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  508.292391] Node 1 Normal: 525*4kB (UMEH) 740*8kB (UMEH) 314*16kB (UMH) 471*32kB (UMH) 237*64kB (UM) 11*128kB (UME) 8*256kB (UME) 6*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 0*4096kB = 55956kB
[  508.328726] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  508.346716] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  508.365156] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  508.381848] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  508.402894] 541 total pagecache pages
[  508.412465] 0 pages in swap cache
[  508.421808] Swap cache stats: add 0, delete 0, find 0/0
[  508.430752] Free swap  = 0kB
[  508.433866] Total swap = 0kB
[  508.437117] 1965979 pages RAM
[  508.441627] 0 pages HighMem/MovableOnly
[  508.445686] 339049 pages reserved
[  508.449231] 0 pages cma reserved
[  508.453837] Out of memory: Kill process 19130 (syz-executor.0) score 1007 or sacrifice child
[  508.487933] udevd invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null),  order=0, oom_score_adj=-1000
[  508.498887] udevd cpuset=/ mems_allowed=0-1
[  508.503431] CPU: 1 PID: 3717 Comm: udevd Not tainted 4.14.172-syzkaller #0
[  508.510440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  508.519787] Call Trace:
[  508.522386]  dump_stack+0x13e/0x194
[  508.526012]  dump_header+0x178/0x6d4
[  508.529710]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  508.534721]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  508.539832]  ? ___ratelimit+0x50/0x519
[  508.543837]  oom_kill_process.cold+0x10/0xae3
[  508.548342]  ? lock_downgrade+0x6e0/0x6e0
[  508.552503]  out_of_memory+0x2d5/0x1110
[  508.556489]  ? oom_killer_disable+0x1c0/0x1c0
[  508.560991]  ? mutex_trylock+0x152/0x1a0
[  508.565070]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  508.569938]  ? warn_alloc+0xf0/0xf0
[  508.573584]  __alloc_pages_nodemask+0x5d3/0x700
[  508.578261]  ? __sched_text_start+0x8/0x8
[  508.582412]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  508.587439]  ? preempt_schedule_common+0x4a/0xc0
[  508.592206]  alloc_pages_current+0xe7/0x1e0
[  508.596541]  __get_free_pages+0xb/0x40
[  508.600446]  inode_doinit_with_dentry+0x7b6/0xe30
[  508.605307]  ? selinux_cred_free+0x70/0x70
[  508.609558]  selinux_d_instantiate+0x23/0x30
[  508.614260]  security_d_instantiate+0x54/0xd0
[  508.618772]  d_splice_alias+0x7b/0xb70
[  508.622670]  kernfs_iop_lookup+0x196/0x200
[  508.627142]  lookup_slow+0x213/0x410
[  508.630872]  ? page_put_link+0x1b0/0x1b0
[  508.635070]  ? lookup_fast+0x458/0xeb0
[  508.638976]  walk_component+0x648/0x1bd0
[  508.643054]  ? wait_for_completion+0x390/0x390
[  508.647643]  ? path_init+0x1920/0x1920
[  508.651548]  ? security_inode_permission+0xb7/0xf0
[  508.656492]  ? kernfs_iop_getattr+0xd0/0xd0
[  508.660821]  ? __inode_permission+0x7c/0x300
[  508.665241]  link_path_walk+0x717/0xed0
[  508.669227]  ? path_init+0x26e/0x1920
[  508.673219]  ? walk_component+0x1bd0/0x1bd0
[  508.677555]  path_openat+0x16e/0x3c50
[  508.681366]  ? __lock_acquire+0x5f7/0x4620
[  508.685603]  ? _raw_spin_unlock_irq+0x5a/0x80
[  508.690137]  ? path_lookupat.isra.0+0x7b0/0x7b0
[  508.694817]  ? __lock_is_held+0xad/0x140
[  508.698880]  do_filp_open+0x18e/0x250
[  508.702687]  ? may_open_dev+0xe0/0xe0
[  508.706500]  ? lock_downgrade+0x6e0/0x6e0
[  508.710659]  ? do_raw_spin_unlock+0x164/0x250
[  508.715160]  ? __alloc_fd+0x1bf/0x490
[  508.718968]  do_sys_open+0x29d/0x3f0
[  508.722688]  ? filp_open+0x60/0x60
[  508.726529]  ? do_syscall_64+0x4c/0x640
[  508.730660]  ? do_sys_open+0x3f0/0x3f0
[  508.734596]  do_syscall_64+0x1d5/0x640
[  508.738498]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  508.743695] RIP: 0033:0x7fa473b82120
[  508.747404] RSP: 002b:00007ffcb9354cc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  508.755125] RAX: ffffffffffffffda RBX: 0000000000f0a8d0 RCX: 00007fa473b82120
[  508.762402] RDX: 00000000000001b6 RSI: 0000000000080000 RDI: 00007ffcb9354da0
[  508.769674] RBP: 00007ffcb9354d40 R08: 0000000000000008 R09: 0000000000000001
[  508.776950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[  508.784221] R13: 000000000041f57a R14: 0000000000f264e0 R15: 0000000000ed6030
[  508.814735] Mem-Info:
[  508.818082] active_anon:1348046 inactive_anon:194 isolated_anon:0
[  508.818082]  active_file:46 inactive_file:176 isolated_file:0
[  508.818082]  unevictable:0 dirty:1 writeback:0 unstable:0
[  508.818082]  slab_reclaimable:17905 slab_unreclaimable:111049
[  508.818082]  mapped:52319 shmem:250 pagetables:20522 bounce:0
[  508.818082]  free:23038 free_pcp:74 free_cma:0
[  508.853836] Node 0 active_anon:1949212kB inactive_anon:756kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208912kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 954368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  508.882102] Node 1 active_anon:3442972kB inactive_anon:20kB active_file:168kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):44kB mapped:0kB dirty:4kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  508.911268] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  508.938760] lowmem_reserve[]: 0 2557 2557 2557 2557
[  508.945027] Node 0 DMA32 free:27492kB min:36272kB low:45340kB high:54408kB active_anon:1944468kB inactive_anon:756kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:10048kB pagetables:22932kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  508.974281] lowmem_reserve[]: 0 0 0 0 0
[  508.978791] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  509.004918] lowmem_reserve[]: 0 0 0 0 0
[  509.008941] Node 1 Normal free:54128kB min:53612kB low:67012kB high:80412kB active_anon:3442972kB inactive_anon:20kB active_file:108kB inactive_file:464kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:18976kB pagetables:59148kB bounce:0kB free_pcp:448kB local_pcp:168kB free_cma:0kB
[  509.040496] lowmem_reserve[]: 0 0 0 0 0
[  509.044521] Node 0 DMA: 10*4kB (M) 1*8kB (U) 1*16kB (M) 7*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10336kB
[  509.059288] Node 0 DMA32: 240*4kB (UME) 567*8kB (UME) 912*16kB (UME) 226*32kB (UME) 1*64kB (E) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27512kB
[  509.074596] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  509.085426] Node 1 Normal: 169*4kB (UMH) 680*8kB (UMEH) 317*16kB (UMH) 483*32kB (UMH) 237*64kB (UM) 11*128kB (UME) 8*256kB (UME) 6*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 0*4096kB = 54484kB
[  509.107789] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  509.118320] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  509.129548] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  509.138609] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  509.147405] 377 total pagecache pages
[  509.156279] 0 pages in swap cache
[  509.160338] Swap cache stats: add 0, delete 0, find 0/0
[  509.165720] Free swap  = 0kB
[  509.168758] Total swap = 0kB
[  509.172578] 1965979 pages RAM
[  509.177432] 0 pages HighMem/MovableOnly
[  509.181450] 339049 pages reserved
[  509.184895] 0 pages cma reserved
[  509.188281] Out of memory: Kill process 19120 (syz-executor.2) score 1007 or sacrifice child
[  509.197915] Killed process 19140 (syz-executor.2) total-vm:75360kB, anon-rss:16580kB, file-rss:34820kB, shmem-rss:0kB
[  509.248458] oom_reaper: reaped process 19140 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
14:23:40 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5", 0xe, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:23:40 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:23:40 executing program 5:
syz_mount_image$jfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

14:23:40 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

14:23:40 executing program 1:
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c)

14:23:40 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000280)={'dummy0\x00', @ifru_mtu=0x70c100})
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)

14:23:40 executing program 4:
r0 = add_key$user(&(0x7f0000001f00)='user\x00', &(0x7f0000001f40)={'syz', 0x1}, &(0x7f0000001f80)="e1", 0x1, 0xffffffffffffffff)
keyctl$get_keyring_id(0x0, r0, 0x0)

[  509.903351] serio: Serial port pts1
[  510.057376] oom_reaper: reaped process 19164 (syz-executor.5), now anon-rss:0kB, file-rss:8kB, shmem-rss:0kB
[  510.192239] syz-executor.1 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),  order=0, oom_score_adj=0
[  510.224892] syz-executor.1 cpuset=syz1 mems_allowed=0-1
[  510.237128] CPU: 1 PID: 19181 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0
[  510.245043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  510.254400] Call Trace:
[  510.257001]  dump_stack+0x13e/0x194
[  510.260641]  dump_header+0x178/0x6d4
[  510.264360]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  510.269386]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  510.274500]  ? ___ratelimit+0x50/0x519
[  510.278400]  oom_kill_process.cold+0x10/0xae3
[  510.282920]  ? lock_downgrade+0x6e0/0x6e0
[  510.287101]  out_of_memory+0x2d5/0x1110
[  510.291087]  ? oom_killer_disable+0x1c0/0x1c0
[  510.295591]  ? mutex_trylock+0x152/0x1a0
[  510.299658]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  510.304522]  ? warn_alloc+0xf0/0xf0
[  510.308164]  __alloc_pages_nodemask+0x5d3/0x700
[  510.312839]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  510.317859]  ? __lock_acquire+0x5f7/0x4620
[  510.322190]  ? save_trace+0x290/0x290
[  510.325986]  ? copy_page_range+0x1d70/0x1d70
[  510.330398]  alloc_pages_current+0xe7/0x1e0
[  510.334724]  pte_alloc_one+0x15/0x100
[  510.338721]  __handle_mm_fault+0x2ad5/0x3280
[  510.343160]  ? copy_page_range+0x1d70/0x1d70
[  510.347575]  ? find_held_lock+0x2d/0x110
[  510.351653]  handle_mm_fault+0x288/0x7a0
[  510.355733]  __do_page_fault+0x4bc/0xb40
[  510.359818]  ? vmalloc_fault+0xdf0/0xdf0
[  510.363890]  ? do_page_fault+0x60/0x4f2
[  510.367868]  ? page_fault+0x2f/0x50
[  510.371510]  page_fault+0x45/0x50
[  510.374958] RIP: 0000:          (null)
[  510.378836] RSP: 4bafa200:00007ffd4bafa240 EFLAGS: 00000001
[  510.456682] Mem-Info:
[  510.465033] active_anon:1348038 inactive_anon:193 isolated_anon:0
[  510.465033]  active_file:209 inactive_file:196 isolated_file:58
[  510.465033]  unevictable:0 dirty:68 writeback:0 unstable:0
[  510.465033]  slab_reclaimable:17919 slab_unreclaimable:111053
[  510.465033]  mapped:52568 shmem:250 pagetables:20617 bounce:0
[  510.465033]  free:22512 free_pcp:0 free_cma:0
[  510.499618] Node 0 active_anon:1950352kB inactive_anon:756kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208912kB dirty:4kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 954368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  510.530327] Node 1 active_anon:3441800kB inactive_anon:16kB active_file:656kB inactive_file:772kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:1160kB dirty:268kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  510.582831] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  510.609649] lowmem_reserve[]: 0 2557 2557 2557 2557
[  510.632108] Node 0 DMA32 free:26452kB min:36272kB low:45340kB high:54408kB active_anon:1945212kB inactive_anon:756kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:10048kB pagetables:22932kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  510.663999] lowmem_reserve[]: 0 0 0 0 0
[  510.674525] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  510.701711] lowmem_reserve[]: 0 0 0 0 0
[  510.706351] Node 1 Normal free:55020kB min:53612kB low:67012kB high:80412kB active_anon:3441500kB inactive_anon:16kB active_file:736kB inactive_file:636kB unevictable:0kB writepending:368kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:18976kB pagetables:59528kB bounce:0kB free_pcp:364kB local_pcp:116kB free_cma:0kB
[  510.736590] lowmem_reserve[]: 0 0 0 0 0
[  510.740786] Node 0 DMA: 10*4kB (M) 1*8kB (U) 1*16kB (M) 7*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10336kB
[  510.755272] Node 0 DMA32: 103*4kB (UME) 575*8kB (UE) 902*16kB (UE) 219*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26452kB
[  510.768899] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  510.779872] Node 1 Normal: 437*4kB (UMH) 474*8kB (UMEH) 246*16kB (UMH) 431*32kB (UMH) 249*64kB (UM) 30*128kB (UME) 8*256kB (UME) 6*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 0*4096kB = 54308kB
[  510.803687] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  510.812628] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  510.821271] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  510.830168] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  510.838777] 355 total pagecache pages
[  510.842636] 0 pages in swap cache
[  510.846091] Swap cache stats: add 0, delete 0, find 0/0
[  510.851552] Free swap  = 0kB
[  510.854571] Total swap = 0kB
[  510.857610] 1965979 pages RAM
[  510.860762] 0 pages HighMem/MovableOnly
[  510.864735] 339049 pages reserved
[  510.868214] 0 pages cma reserved
[  510.871645] Out of memory: Kill process 19159 (syz-executor.0) score 1007 or sacrifice child
[  510.880665] Killed process 19163 (syz-executor.0) total-vm:75360kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB
[  510.972148] oom_reaper: reaped process 19163 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
14:23:41 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x8, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f0000000100)=0x10)

14:23:41 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:23:41 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185", 0x10, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:23:41 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[], 0x0)

[  511.110599] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
14:23:41 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0)

14:23:41 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

14:23:41 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @ipv6=@generic={0x0, 0x6, "e96955", 0x0, 0x16, 0x0, @remote, @local}}, 0x32)

14:23:41 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
sendto$inet6(r1, &(0x7f0000000040)='v', 0x1, 0x0, 0x0, 0x0)

[  511.464556] serio: Serial port pts1
14:23:42 executing program 1:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGKEYCODE(r1, 0x80084504, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000300)=0x2000000000005ea, 0x4)
pipe(0x0)
close(0xffffffffffffffff)
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fb, &(0x7f0000000540)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0xfe20)
write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[], 0xffffffa8)

[  511.582907] serio: Serial port pts5
[  511.792140] kworker/1:4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=0, oom_score_adj=0
[  511.818731] kworker/1:4 cpuset=/ mems_allowed=0-1
[  511.838807] CPU: 1 PID: 7593 Comm: kworker/1:4 Not tainted 4.14.172-syzkaller #0
[  511.846566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  511.856002] Workqueue: events_long serio_handle_event
[  511.861325] Call Trace:
[  511.863931]  dump_stack+0x13e/0x194
[  511.867687]  dump_header+0x178/0x6d4
[  511.871413]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  511.876436]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  511.881549]  ? ___ratelimit+0x50/0x519
[  511.885466]  oom_kill_process.cold+0x10/0xae3
[  511.889980]  ? lock_downgrade+0x6e0/0x6e0
[  511.894149]  out_of_memory+0x2d5/0x1110
[  511.898578]  ? oom_killer_disable+0x1c0/0x1c0
[  511.903088]  ? mutex_trylock+0x152/0x1a0
[  511.907162]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  511.912121]  ? warn_alloc+0xf0/0xf0
[  511.915770]  __alloc_pages_nodemask+0x5d3/0x700
[  511.920441]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  511.925468]  cache_grow_begin+0x7b/0x410
[  511.929519]  ? __cpuset_node_allowed+0xfa/0x450
[  511.934199]  fallback_alloc+0x205/0x2b0
[  511.938169]  kmem_cache_alloc+0x1ea/0x770
[  511.942383]  ? kstrdup+0x56/0x70
[  511.945746]  __kernfs_new_node+0x6f/0x470
[  511.949900]  kernfs_new_node+0x7b/0xe0
[  511.953792]  kernfs_create_dir_ns+0x3c/0x130
[  511.958216]  sysfs_create_dir_ns+0xb7/0x1d0
[  511.962544]  kobject_add_internal+0x27f/0x830
[  511.967034]  kobject_add+0x11f/0x180
[  511.970737]  ? kset_create_and_add+0x190/0x190
[  511.975330]  ? __raw_spin_lock_init+0x28/0x100
[  511.980125]  ? __device_link_free_srcu+0xa0/0xa0
[  511.984879]  device_add+0x36a/0x1400
[  511.988597]  ? device_private_init+0x180/0x180
[  511.993298]  ? _raw_spin_unlock_irqrestore+0x67/0xe0
[  511.998404]  serio_handle_event+0x362/0x7f0
[  512.002723]  process_one_work+0x813/0x1540
[  512.006964]  ? pwq_dec_nr_in_flight+0x2b0/0x2b0
[  512.011623]  ? worker_thread+0x15d/0x1070
[  512.015781]  ? _raw_spin_unlock_irq+0x24/0x80
[  512.020268]  worker_thread+0x5d1/0x1070
[  512.024251]  ? process_one_work+0x1540/0x1540
[  512.028752]  kthread+0x30d/0x420
[  512.032116]  ? kthread_create_on_node+0xd0/0xd0
[  512.036782]  ret_from_fork+0x24/0x30
[  512.132440] Mem-Info:
[  512.134993] active_anon:1349449 inactive_anon:192 isolated_anon:0
[  512.134993]  active_file:328 inactive_file:335 isolated_file:7
[  512.134993]  unevictable:0 dirty:40 writeback:2 unstable:0
[  512.134993]  slab_reclaimable:17915 slab_unreclaimable:110765
[  512.134993]  mapped:52777 shmem:250 pagetables:20634 bounce:0
[  512.134993]  free:20713 free_pcp:359 free_cma:0
[  512.187756] Node 0 active_anon:1949596kB inactive_anon:756kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208912kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 954368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  512.224695] Node 1 active_anon:3448200kB inactive_anon:12kB active_file:932kB inactive_file:876kB unevictable:0kB isolated(anon):0kB isolated(file):156kB mapped:1796kB dirty:160kB writeback:8kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  512.264800] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  512.305914] lowmem_reserve[]: 0 2557 2557 2557 2557
[  512.311349] Node 0 DMA32 free:27208kB min:36272kB low:45340kB high:54408kB active_anon:1944852kB inactive_anon:756kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:10080kB pagetables:22932kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  512.345999] lowmem_reserve[]: 0 0 0 0 0
[  512.353578] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  512.406450] lowmem_reserve[]: 0 0 0 0 0
[  512.422986] Node 1 Normal free:47548kB min:53612kB low:67012kB high:80412kB active_anon:3447976kB inactive_anon:12kB active_file:912kB inactive_file:604kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:19072kB pagetables:59596kB bounce:0kB free_pcp:1352kB local_pcp:680kB free_cma:0kB
[  512.456517] lowmem_reserve[]: 0 0 0 0 0
[  512.475954] Node 0 DMA: 10*4kB (M) 1*8kB (U) 1*16kB (M) 7*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10336kB
[  512.495143] Node 0 DMA32: 208*4kB (UME) 607*8kB (UME) 917*16kB (UME) 223*32kB (UE) 1*64kB (E) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27560kB
[  512.511183] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  512.526317] Node 1 Normal: 675*4kB (UM) 352*8kB (UME) 96*16kB (UM) 392*32kB (UMH) 204*64kB (UMH) 28*128kB (UMEH) 8*256kB (UME) 6*512kB (UM) 3*1024kB (UM) 2*2048kB (UE) 0*4096kB = 48524kB
[  512.550575] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  512.559712] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  512.568412] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  512.577465] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  512.586083] 303 total pagecache pages
[  512.589907] 0 pages in swap cache
[  512.593870] Swap cache stats: add 0, delete 0, find 0/0
[  512.599267] Free swap  = 0kB
[  512.602319] Total swap = 0kB
[  512.605350] 1965979 pages RAM
[  512.608463] 0 pages HighMem/MovableOnly
[  512.613566] 339049 pages reserved
[  512.617063] 0 pages cma reserved
[  512.620637] Out of memory: Kill process 19199 (syz-executor.0) score 1007 or sacrifice child
[  512.629780] Killed process 19219 (syz-executor.0) total-vm:75096kB, anon-rss:3192kB, file-rss:34816kB, shmem-rss:0kB
[  512.729143] oom_reaper: reaped process 19219 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[  512.775437] syz-executor.1 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[  512.801713] syz-executor.1 cpuset=syz1 mems_allowed=0-1
[  512.807169] CPU: 0 PID: 7542 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0
[  512.814963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  512.824318] Call Trace:
[  512.826913]  dump_stack+0x13e/0x194
[  512.830535]  dump_header+0x178/0x6d4
[  512.834236]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  512.839248]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  512.844336]  ? ___ratelimit+0x50/0x519
[  512.848329]  oom_kill_process.cold+0x10/0xae3
[  512.852854]  ? lock_downgrade+0x6e0/0x6e0
[  512.857004]  out_of_memory+0x2d5/0x1110
[  512.860973]  ? oom_killer_disable+0x1c0/0x1c0
[  512.865478]  ? mutex_trylock+0x152/0x1a0
[  512.869649]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  512.874513]  ? warn_alloc+0xf0/0xf0
[  512.878151]  ? find_held_lock+0x2d/0x110
[  512.882228]  ? fs_reclaim_acquire+0x10/0x10
[  512.886556]  __alloc_pages_nodemask+0x5d3/0x700
[  512.891233]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  512.896249]  ? find_held_lock+0x2d/0x110
[  512.900409]  ? cache_grow_begin+0x32d/0x410
[  512.904785]  cache_grow_begin+0x7b/0x410
[  512.908990]  ? __cpuset_node_allowed+0xfa/0x450
[  512.913662]  fallback_alloc+0x205/0x2b0
[  512.917628]  kmem_cache_alloc+0x1ea/0x770
[  512.921777]  ? find_held_lock+0x2d/0x110
[  512.926828]  getname_flags+0xc8/0x560
[  512.930776]  user_path_mountpoint_at+0x23/0x40
[  512.935399]  SyS_umount+0x10a/0x340
[  512.939013]  ? __detach_mounts+0x2e0/0x2e0
[  512.943231]  ? __do_page_fault+0x35b/0xb40
[  512.947451]  ? do_syscall_64+0x4c/0x640
[  512.951421]  ? __detach_mounts+0x2e0/0x2e0
[  512.955748]  do_syscall_64+0x1d5/0x640
[  512.959635]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  512.964822] RIP: 0033:0x45eea7
[  512.968051] RSP: 002b:00007ffd4baf9158 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  512.975748] RAX: ffffffffffffffda RBX: 000000000007cdd5 RCX: 000000000045eea7
[  512.983011] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffd4bafa290
[  512.990352] RBP: 0000000000000558 R08: 0000000000000001 R09: 0000000002b7c940
[  512.997619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4bafa290
[  513.004904] R13: 00007ffd4bafa280 R14: 0000000000000000 R15: 00007ffd4bafa290
[  513.018081] Mem-Info:
[  513.049716] active_anon:1349439 inactive_anon:193 isolated_anon:0
[  513.049716]  active_file:17 inactive_file:9 isolated_file:0
[  513.049716]  unevictable:0 dirty:2 writeback:0 unstable:0
[  513.049716]  slab_reclaimable:17912 slab_unreclaimable:110742
[  513.049716]  mapped:52228 shmem:250 pagetables:20553 bounce:0
[  513.049716]  free:21944 free_pcp:66 free_cma:0
[  513.094284] Node 0 active_anon:1949604kB inactive_anon:756kB active_file:0kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208912kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 954368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  513.128053] Node 1 active_anon:3448152kB inactive_anon:16kB active_file:60kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  513.156842] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  513.227395] lowmem_reserve[]: 0 2557 2557 2557 2557
[  513.240317] Node 0 DMA32 free:27440kB min:36272kB low:45340kB high:54408kB active_anon:1944860kB inactive_anon:756kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:10080kB pagetables:22932kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB
[  513.287845] lowmem_reserve[]: 0 0 0 0 0
[  513.298083] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  513.334846] lowmem_reserve[]: 0 0 0 0 0
[  513.338919] Node 1 Normal free:50000kB min:53612kB low:67012kB high:80412kB active_anon:3448152kB inactive_anon:16kB active_file:152kB inactive_file:0kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:19008kB pagetables:59272kB bounce:0kB free_pcp:140kB local_pcp:140kB free_cma:0kB
[  513.380459] lowmem_reserve[]: 0 0 0 0 0
[  513.384506] Node 0 DMA: 10*4kB (M) 1*8kB (U) 1*16kB (M) 7*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10336kB
[  513.411102] Node 0 DMA32: 178*4kB (UME) 607*8kB (UME) 917*16kB (UME) 223*32kB (UE) 1*64kB (E) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27440kB
[  513.438798] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  513.463076] Node 1 Normal: 726*4kB (UM) 405*8kB (UME) 133*16kB (UM) 400*32kB (UMH) 204*64kB (UMH) 28*128kB (UMEH) 8*256kB (UME) 6*512kB (UM) 3*1024kB (UM) 2*2048kB (UE) 0*4096kB = 50000kB
[  513.493481] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  513.515729] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  513.537643] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  513.559694] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  513.572400] 276 total pagecache pages
[  513.576229] 0 pages in swap cache
[  513.579709] Swap cache stats: add 0, delete 0, find 0/0
[  513.592622] Free swap  = 0kB
[  513.595695] Total swap = 0kB
[  513.598794] 1965979 pages RAM
[  513.615016] 0 pages HighMem/MovableOnly
[  513.619069] 339049 pages reserved
[  513.630047] 0 pages cma reserved
[  513.633459] Out of memory: Kill process 19199 (syz-executor.0) score 1007 or sacrifice child
[  513.659428] Killed process 19210 (syz-executor.0) total-vm:75360kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB
[  513.794612] oom_reaper: reaped process 19210 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[  514.323917] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
14:23:44 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4)

14:23:45 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185", 0x10, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:23:45 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:23:45 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

14:23:45 executing program 4:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

14:23:45 executing program 5:
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0)

[  515.416807] serio: Serial port pts1
[  515.591625] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null),  order=0, oom_score_adj=1000
[  515.606578] syz-executor.3 cpuset=syz3 mems_allowed=0-1
[  515.612869] CPU: 0 PID: 19241 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0
[  515.620761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  515.630105] Call Trace:
[  515.632693]  dump_stack+0x13e/0x194
[  515.636309]  dump_header+0x178/0x6d4
[  515.640054]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  515.645109]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  515.650208]  ? ___ratelimit+0x50/0x519
[  515.654126]  oom_kill_process.cold+0x10/0xae3
[  515.658636]  ? lock_downgrade+0x6e0/0x6e0
[  515.662918]  out_of_memory+0x2d5/0x1110
[  515.666893]  ? oom_killer_disable+0x1c0/0x1c0
[  515.671391]  ? mutex_trylock+0x152/0x1a0
[  515.675456]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  515.680293]  ? warn_alloc+0xf0/0xf0
[  515.683930]  __alloc_pages_nodemask+0x5d3/0x700
[  515.688618]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  515.693631]  ? __lock_acquire+0x5f7/0x4620
[  515.697907]  ? check_preemption_disabled+0x35/0x240
[  515.703013]  ? balance_dirty_pages_ratelimited+0x8a9/0x17e0
[  515.708735]  alloc_pages_vma+0xc2/0x4a0
[  515.712705]  __handle_mm_fault+0x17b6/0x3280
[  515.717119]  ? copy_page_range+0x1d70/0x1d70
[  515.721532]  ? find_held_lock+0x2d/0x110
[  515.725604]  handle_mm_fault+0x288/0x7a0
[  515.729675]  __do_page_fault+0x4bc/0xb40
[  515.733725]  ? vmalloc_fault+0xdf0/0xdf0
[  515.737892]  ? do_page_fault+0x60/0x4f2
[  515.741859]  ? page_fault+0x2f/0x50
[  515.745583]  page_fault+0x45/0x50
[  515.749029] RIP: 770bd0:0x7dcfc
[  515.752305] RSP: 76c920:0000000000770bc8 EFLAGS: 0076bfc0
[  515.767200] Mem-Info:
[  515.775777] active_anon:1348937 inactive_anon:195 isolated_anon:0
[  515.775777]  active_file:1077 inactive_file:927 isolated_file:127
[  515.775777]  unevictable:0 dirty:42 writeback:0 unstable:0
[  515.775777]  slab_reclaimable:17993 slab_unreclaimable:110279
[  515.775777]  mapped:53983 shmem:250 pagetables:20573 bounce:0
[  515.775777]  free:20404 free_pcp:0 free_cma:0
[  515.818807] Node 0 active_anon:1949712kB inactive_anon:756kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208912kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 954368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  515.849836] Node 1 active_anon:3446036kB inactive_anon:24kB active_file:3304kB inactive_file:3364kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:5520kB dirty:168kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  515.889892] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  515.935097] lowmem_reserve[]: 0 2557 2557 2557 2557
[  515.963355] Node 0 DMA32 free:27228kB min:36272kB low:45340kB high:54408kB active_anon:1944968kB inactive_anon:756kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:10048kB pagetables:22932kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  516.005493] lowmem_reserve[]: 0 0 0 0 0
[  516.009779] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  516.045176] lowmem_reserve[]: 0 0 0 0 0
[  516.049879] Node 1 Normal free:50100kB min:53612kB low:67012kB high:80412kB active_anon:3445848kB inactive_anon:24kB active_file:1684kB inactive_file:2108kB unevictable:0kB writepending:368kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:19168kB pagetables:59352kB bounce:0kB free_pcp:364kB local_pcp:136kB free_cma:0kB
[  516.085615] lowmem_reserve[]: 0 0 0 0 0
[  516.090357] Node 0 DMA: 10*4kB (M) 1*8kB (U) 1*16kB (M) 7*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10336kB
[  516.136113] Node 0 DMA32: 125*4kB (UME) 604*8kB (UME) 919*16kB (UME) 224*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27268kB
[  516.164047] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  516.178157] Node 1 Normal: 588*4kB (UMEH) 352*8kB (UMEH) 258*16kB (UMEH) 403*32kB (UMEH) 206*64kB (UMEH) 26*128kB (UME) 7*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 3*2048kB (UE) 0*4096kB = 52272kB
[  516.212032] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  516.237228] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  516.259293] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  516.281700] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  516.300105] 510 total pagecache pages
[  516.303948] 0 pages in swap cache
[  516.307425] Swap cache stats: add 0, delete 0, find 0/0
[  516.327856] Free swap  = 0kB
[  516.330998] Total swap = 0kB
[  516.334040] 1965979 pages RAM
[  516.337299] 0 pages HighMem/MovableOnly
[  516.341897] 339049 pages reserved
[  516.350724] 0 pages cma reserved
[  516.354118] Out of memory: Kill process 19242 (syz-executor.0) score 1007 or sacrifice child
[  516.369994] Killed process 19258 (syz-executor.0) total-vm:75096kB, anon-rss:5440kB, file-rss:34816kB, shmem-rss:0kB
[  516.408613] oom_reaper: reaped process 19258 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[  516.497951] oom_reaper: reaped process 19234 (syz-executor.1), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB
[  516.755149] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[  516.768187] syz-executor.5 cpuset=syz5 mems_allowed=0-1
[  516.774455] CPU: 0 PID: 7540 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0
[  516.782375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  516.791893] Call Trace:
[  516.794485]  dump_stack+0x13e/0x194
[  516.798108]  dump_header+0x178/0x6d4
[  516.801827]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  516.807033]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  516.812137]  ? ___ratelimit+0x50/0x519
[  516.816015]  oom_kill_process.cold+0x10/0xae3
[  516.820503]  ? lock_downgrade+0x6e0/0x6e0
[  516.824646]  out_of_memory+0x2d5/0x1110
[  516.828614]  ? oom_killer_disable+0x1c0/0x1c0
[  516.833100]  ? mutex_trylock+0x152/0x1a0
[  516.837153]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  516.841991]  ? warn_alloc+0xf0/0xf0
[  516.845777]  ? find_held_lock+0x2d/0x110
[  516.849830]  ? fs_reclaim_acquire+0x10/0x10
[  516.854149]  __alloc_pages_nodemask+0x5d3/0x700
[  516.858808]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  516.863891]  ? find_held_lock+0x2d/0x110
[  516.868491]  ? cache_grow_begin+0x32d/0x410
[  516.872857]  cache_grow_begin+0x7b/0x410
[  516.876914]  ? __cpuset_node_allowed+0xfa/0x450
[  516.881612]  fallback_alloc+0x205/0x2b0
[  516.885586]  kmem_cache_alloc+0x1ea/0x770
[  516.889727]  ? find_held_lock+0x2d/0x110
[  516.894391]  getname_flags+0xc8/0x560
[  516.898193]  user_path_mountpoint_at+0x23/0x40
[  516.902821]  SyS_umount+0x10a/0x340
[  516.906507]  ? __detach_mounts+0x2e0/0x2e0
[  516.910808]  ? __do_page_fault+0x35b/0xb40
[  516.915039]  ? do_syscall_64+0x4c/0x640
[  516.919082]  ? __detach_mounts+0x2e0/0x2e0
[  516.923322]  do_syscall_64+0x1d5/0x640
[  516.927244]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  516.932427] RIP: 0033:0x45eea7
[  516.935600] RSP: 002b:00007ffc81c20538 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6
[  516.943299] RAX: ffffffffffffffda RBX: 000000000007dcd6 RCX: 000000000045eea7
[  516.950562] RDX: 0000000000403720 RSI: 0000000000000002 RDI: 00007ffc81c205e0
[  516.957818] RBP: 00000000000006a1 R08: 0000000000000000 R09: 0000000000000010
[  516.965081] R10: 000000000000000a R11: 0000000000000206 R12: 00007ffc81c21670
[  516.972405] R13: 00000000010af940 R14: 0000000000000000 R15: 00007ffc81c21670
[  516.982824] Mem-Info:
[  516.986067] active_anon:1348906 inactive_anon:195 isolated_anon:0
[  516.986067]  active_file:12 inactive_file:165 isolated_file:16
[  516.986067]  unevictable:0 dirty:1 writeback:1 unstable:0
[  516.986067]  slab_reclaimable:18013 slab_unreclaimable:109836
[  516.986067]  mapped:52291 shmem:250 pagetables:20550 bounce:0
[  516.986067]  free:23034 free_pcp:158 free_cma:0
[  517.020619] Node 0 active_anon:1949452kB inactive_anon:756kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208912kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 954368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  517.050539] Node 1 active_anon:3429648kB inactive_anon:24kB active_file:500kB inactive_file:916kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:752kB dirty:8kB writeback:8kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  517.078523] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  517.105659] lowmem_reserve[]: 0 2557 2557 2557 2557
[  517.110979] Node 0 DMA32 free:27184kB min:36272kB low:45340kB high:54408kB active_anon:1944708kB inactive_anon:756kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:10048kB pagetables:22932kB bounce:0kB free_pcp:524kB local_pcp:120kB free_cma:0kB
[  517.141776] lowmem_reserve[]: 0 0 0 0 0
[  517.147026] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  517.187076] lowmem_reserve[]: 0 0 0 0 0
[  517.192308] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  517.212554] Node 1 Normal free:65248kB min:53612kB low:67012kB high:80412kB active_anon:3429648kB inactive_anon:24kB active_file:672kB inactive_file:4248kB unevictable:0kB writepending:12kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:18816kB pagetables:59124kB bounce:0kB free_pcp:420kB local_pcp:296kB free_cma:0kB
[  517.268613] lowmem_reserve[]: 0 0 0 0 0
[  517.272976] Node 0 DMA: 10*4kB (M) 1*8kB (U) 1*16kB (M) 7*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10336kB
[  517.294861] Node 0 DMA32: 89*4kB (UM) 598*8kB (UME) 918*16kB (UME) 224*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27060kB
14:23:47 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f0000007900), 0x4000099, 0x41)
socket$nl_route(0x10, 0x3, 0x0)

14:23:48 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185", 0x10, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  517.386245] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  517.400478] Node 1 Normal: 3*4kB (MH) 21*8kB (UMH) 226*16kB (UMEH) 639*32kB (UMEH) 277*64kB (UMH) 31*128kB (UME) 7*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 3*2048kB (UE) 0*4096kB = 59508kB
[  517.419498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
14:23:48 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

[  517.447201] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  517.465248] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
14:23:48 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
read(0xffffffffffffffff, &(0x7f00000000c0)=""/165, 0x370)
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, 0x0)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x80c002000104082, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0)
clock_gettime(0x0, &(0x7f0000000300)={<r1=>0x0, <r2=>0x0})
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000280)={0x8, 0xb, 0x4, 0x2000000, 0x101, {r1, r2/1000+10000}, {0x0, 0x1, 0x0, 0x0, 0x3, 0x1, "06fb4a05"}, 0x0, 0x2, @fd, 0x90})

14:23:48 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef07", 0x9, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  517.490722] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  517.501015] 3900 total pagecache pages
[  517.509825] 0 pages in swap cache
[  517.514955] Swap cache stats: add 0, delete 0, find 0/0
[  517.521146] Free swap  = 0kB
[  517.526086] Total swap = 0kB
[  517.530433] 1965979 pages RAM
[  517.534626] 0 pages HighMem/MovableOnly
[  517.538662] 339049 pages reserved
[  517.543537] 0 pages cma reserved
[  517.546970] Out of memory: Kill process 19242 (syz-executor.0) score 1007 or sacrifice child
[  517.650263] serio: Serial port pts1
[  517.878971] kworker/1:3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=0, oom_score_adj=0
[  517.917142] kworker/1:3 cpuset=/ mems_allowed=0-1
[  517.933344] CPU: 1 PID: 7589 Comm: kworker/1:3 Not tainted 4.14.172-syzkaller #0
[  517.940990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  517.950492] Workqueue: events_long serio_handle_event
[  517.955703] Call Trace:
[  517.958417]  dump_stack+0x13e/0x194
[  517.962180]  dump_header+0x178/0x6d4
[  517.965898]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  517.970938]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  517.976145]  ? ___ratelimit+0x50/0x519
[  517.980053]  oom_kill_process.cold+0x10/0xae3
[  517.984551]  ? lock_downgrade+0x6e0/0x6e0
[  517.988708]  out_of_memory+0x2d5/0x1110
[  517.992689]  ? oom_killer_disable+0x1c0/0x1c0
[  517.997189]  ? mutex_trylock+0x152/0x1a0
[  518.001251]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  518.006101]  ? warn_alloc+0xf0/0xf0
[  518.009734]  __alloc_pages_nodemask+0x5d3/0x700
[  518.014393]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  518.019403]  cache_grow_begin+0x7b/0x410
[  518.023601]  ? __cpuset_node_allowed+0xfa/0x450
[  518.028273]  fallback_alloc+0x205/0x2b0
[  518.032244]  kmem_cache_alloc+0x1ea/0x770
[  518.036395]  ? kstrdup+0x56/0x70
[  518.039770]  __kernfs_new_node+0x6f/0x470
[  518.043958]  kernfs_new_node+0x7b/0xe0
[  518.047920]  kernfs_create_dir_ns+0x3c/0x130
[  518.053191]  sysfs_create_dir_ns+0xb7/0x1d0
[  518.057542]  kobject_add_internal+0x27f/0x830
[  518.062105]  kobject_add+0x11f/0x180
[  518.065813]  ? kset_create_and_add+0x190/0x190
[  518.070387]  ? __raw_spin_lock_init+0x28/0x100
[  518.074974]  ? __device_link_free_srcu+0xa0/0xa0
[  518.079749]  device_add+0x36a/0x1400
[  518.083467]  ? device_private_init+0x180/0x180
[  518.088137]  ? _raw_spin_unlock_irqrestore+0x67/0xe0
[  518.093246]  serio_handle_event+0x362/0x7f0
[  518.097751]  process_one_work+0x813/0x1540
[  518.101980]  ? pwq_dec_nr_in_flight+0x2b0/0x2b0
[  518.106660]  ? worker_thread+0x15d/0x1070
[  518.110814]  ? _raw_spin_unlock_irq+0x24/0x80
[  518.115358]  worker_thread+0x5d1/0x1070
[  518.119358]  ? process_one_work+0x1540/0x1540
[  518.123853]  kthread+0x30d/0x420
[  518.127220]  ? kthread_create_on_node+0xd0/0xd0
[  518.131898]  ret_from_fork+0x24/0x30
[  518.164999] Mem-Info:
[  518.167642] active_anon:1348895 inactive_anon:196 isolated_anon:0
[  518.167642]  active_file:386 inactive_file:414 isolated_file:32
[  518.167642]  unevictable:0 dirty:78 writeback:0 unstable:0
[  518.167642]  slab_reclaimable:18046 slab_unreclaimable:110040
[  518.167642]  mapped:52978 shmem:250 pagetables:20503 bounce:0
[  518.167642]  free:21794 free_pcp:340 free_cma:0
[  518.208968] Node 0 active_anon:1950076kB inactive_anon:756kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208912kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 954368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  518.259010] Node 1 active_anon:3445504kB inactive_anon:28kB active_file:1124kB inactive_file:1016kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:2100kB dirty:312kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  518.295948] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  518.327677] lowmem_reserve[]: 0 2557 2557 2557 2557
[  518.333798] Node 0 DMA32 free:26964kB min:36272kB low:45340kB high:54408kB active_anon:1945332kB inactive_anon:756kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:10048kB pagetables:22932kB bounce:0kB free_pcp:76kB local_pcp:0kB free_cma:0kB
[  518.362677] lowmem_reserve[]: 0 0 0 0 0
[  518.366696] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  518.400157] lowmem_reserve[]: 0 0 0 0 0
[  518.404210] Node 1 Normal free:51528kB min:53612kB low:67012kB high:80412kB active_anon:3445324kB inactive_anon:28kB active_file:992kB inactive_file:1228kB unevictable:0kB writepending:180kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:18976kB pagetables:59072kB bounce:0kB free_pcp:1396kB local_pcp:676kB free_cma:0kB
[  518.451289] lowmem_reserve[]: 0 0 0 0 0
[  518.458684] Node 0 DMA: 10*4kB (M) 1*8kB (U) 1*16kB (M) 7*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10336kB
[  518.473472] Node 0 DMA32: 107*4kB (UME) 596*8kB (UME) 908*16kB (UME) 225*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26988kB
[  518.488228] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  518.499412] Node 1 Normal: 577*4kB (UMEH) 402*8kB (UM) 212*16kB (UM) 448*32kB (UME) 207*64kB (UH) 18*128kB (UME) 7*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 3*2048kB (UE) 0*4096kB = 52372kB
[  518.516545] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  518.525912] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  518.534821] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  518.544085] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  518.553069] 546 total pagecache pages
[  518.557101] 0 pages in swap cache
[  518.560778] Swap cache stats: add 0, delete 0, find 0/0
[  518.566350] Free swap  = 0kB
[  518.569540] Total swap = 0kB
[  518.574410] 1965979 pages RAM
[  518.577732] 0 pages HighMem/MovableOnly
[  518.582062] 339049 pages reserved
[  518.585716] 0 pages cma reserved
[  518.589407] Out of memory: Kill process 19266 (syz-executor.2) score 1007 or sacrifice child
[  518.611307] Killed process 19266 (syz-executor.2) total-vm:75096kB, anon-rss:16560kB, file-rss:34956kB, shmem-rss:0kB
[  518.658435] oom_reaper: reaped process 19266 (syz-executor.2), now anon-rss:0kB, file-rss:28kB, shmem-rss:0kB
14:23:49 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5818553", 0x11, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:23:49 executing program 4:
r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="a0", 0x1, r0)
keyctl$read(0xb, r1, 0x0, 0x0)

[  518.853721] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  518.954914] serio: Serial port pts1
[  518.966346] syz-executor.3 (19271) used greatest stack depth: 23472 bytes left
[  519.124780] syz-executor.4 invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null),  order=0, oom_score_adj=0
[  519.137797] syz-executor.4 cpuset=syz4 mems_allowed=0-1
[  519.155415] serio: Serial port pts1
[  519.282389] CPU: 0 PID: 19287 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0
[  519.290325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  519.299694] Call Trace:
[  519.302310]  dump_stack+0x13e/0x194
[  519.305951]  dump_header+0x178/0x6d4
[  519.309672]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  519.314703]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  519.319811]  ? ___ratelimit+0x50/0x519
[  519.323711]  oom_kill_process.cold+0x10/0xae3
[  519.328240]  ? lock_downgrade+0x6e0/0x6e0
[  519.332518]  out_of_memory+0x2d5/0x1110
[  519.336504]  ? oom_killer_disable+0x1c0/0x1c0
[  519.341011]  ? mutex_trylock+0x152/0x1a0
[  519.345208]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  519.350071]  ? warn_alloc+0xf0/0xf0
[  519.353718]  __alloc_pages_nodemask+0x5d3/0x700
[  519.358404]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  519.363431]  ? save_trace+0x290/0x290
[  519.367271]  alloc_pages_vma+0xc2/0x4a0
[  519.371256]  wp_page_copy+0x1f1/0x1300
[  519.375161]  ? follow_pfn+0x200/0x200
[  519.378982]  do_wp_page+0x244/0x11d0
[  519.382817]  ? finish_mkwrite_fault+0x640/0x640
[  519.387695]  __handle_mm_fault+0x1c0e/0x3280
[  519.392122]  ? copy_page_range+0x1d70/0x1d70
[  519.396539]  ? find_held_lock+0x2d/0x110
[  519.400623]  handle_mm_fault+0x288/0x7a0
[  519.404705]  __do_page_fault+0x4bc/0xb40
[  519.408784]  ? vmalloc_fault+0xdf0/0xdf0
[  519.412861]  ? do_page_fault+0x60/0x4f2
[  519.416847]  ? page_fault+0x2f/0x50
[  519.420501]  page_fault+0x45/0x50
[  519.423955] RIP: 0000:          (null)
[  519.427846] RSP: ce1e5ea0:00007fffce1e5ee0 EFLAGS: 00000001
[  519.441764] Mem-Info:
[  519.460551] active_anon:1348911 inactive_anon:192 isolated_anon:0
[  519.460551]  active_file:362 inactive_file:323 isolated_file:65
[  519.460551]  unevictable:0 dirty:53 writeback:0 unstable:0
[  519.460551]  slab_reclaimable:18124 slab_unreclaimable:109754
[  519.460551]  mapped:52934 shmem:250 pagetables:20577 bounce:0
[  519.460551]  free:22335 free_pcp:111 free_cma:0
[  519.495085] Node 0 active_anon:1949948kB inactive_anon:756kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208912kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 954368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  519.523052] Node 1 active_anon:3445752kB inactive_anon:12kB active_file:1268kB inactive_file:1280kB unevictable:0kB isolated(anon):0kB isolated(file):200kB mapped:2216kB dirty:200kB writeback:28kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  519.553191] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  519.598870] lowmem_reserve[]: 0 2557 2557 2557 2557
[  519.611066] Node 0 DMA32 free:27092kB min:36272kB low:45340kB high:54408kB active_anon:1945204kB inactive_anon:756kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:10048kB pagetables:22932kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  519.640131] lowmem_reserve[]: 0 0 0 0 0
[  519.644205] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  519.672622] lowmem_reserve[]: 0 0 0 0 0
[  519.690591] Node 1 Normal free:61096kB min:53612kB low:67012kB high:80412kB active_anon:3438524kB inactive_anon:12kB active_file:1136kB inactive_file:1256kB unevictable:0kB writepending:228kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:19104kB pagetables:59492kB bounce:0kB free_pcp:1188kB local_pcp:680kB free_cma:0kB
[  519.734383] lowmem_reserve[]: 0 0 0 0 0
[  519.741641] Node 0 DMA: 10*4kB (M) 1*8kB (U) 1*16kB (M) 7*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10336kB
[  519.758823] Node 0 DMA32: 98*4kB (UME) 591*8kB (UE) 913*16kB (UME) 225*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26992kB
[  519.773722] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  519.785997] Node 1 Normal: 493*4kB (MH) 639*8kB (UMEH) 395*16kB (UMEH) 585*32kB (UMH) 245*64kB (UMEH) 14*128kB (UM) 5*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (U) 0*4096kB = 60092kB
[  519.821672] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  519.832506] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  519.890279] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  519.899301] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  519.917699] 1189 total pagecache pages
[  519.934734] 0 pages in swap cache
[  519.951163] Swap cache stats: add 0, delete 0, find 0/0
[  519.958338] Free swap  = 0kB
[  519.961956] Total swap = 0kB
[  519.986372] 1965979 pages RAM
[  519.989521] 0 pages HighMem/MovableOnly
[  519.995202] 339049 pages reserved
[  520.011278] 0 pages cma reserved
[  520.022672] Out of memory: Kill process 18716 (syz-executor.2) score 1007 or sacrifice child
[  520.037701] Killed process 18716 (syz-executor.2) total-vm:75228kB, anon-rss:16572kB, file-rss:34816kB, shmem-rss:0kB
14:23:52 executing program 5:
set_mempolicy(0x40000000004003, 0x0, 0x0)

14:23:52 executing program 1:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_FP_MODE(0x2d, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)

14:23:53 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$VT_RESIZEX(r0, 0x560a, 0x0)

14:23:53 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5818553", 0x11, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:23:54 executing program 5:
r0 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r0, 0x0, 0x0)

14:23:54 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

14:23:54 executing program 1:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_FP_MODE(0x2d, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)

14:23:54 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef07", 0x9, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:23:54 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, 0x0)
r1 = syz_open_procfs(0x0, 0xffffffffffffffff)
fcntl$notify(r1, 0x402, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x0, 0x84)
r3 = inotify_init()
r4 = inotify_add_watch(r3, &(0x7f0000000240)='.\x00', 0xc0000080)
inotify_rm_watch(0xffffffffffffffff, 0x0)
inotify_rm_watch(0xffffffffffffffff, r4)
dup3(0xffffffffffffffff, r2, 0x0)
r5 = socket(0x10, 0x2, 0x0)
write(r5, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32)
recvmmsg(r5, &(0x7f0000002ec0), 0x4000000000004e4, 0x2, &(0x7f00000001c0)={0x77359400})

14:23:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440)='wireguard\x00')
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000e00)={0x14, r1, 0x1}, 0x14}}, 0x0)

[  523.682883] serio: Serial port pts1
14:24:04 executing program 5:

14:24:13 executing program 5:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef07", 0x9, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:24:13 executing program 1:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_FP_MODE(0x2d, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)

14:24:14 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5818553", 0x11, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  546.157415] serio: Serial port pts1
[  549.627965] udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null),  order=0, oom_score_adj=-1000
[  549.656518] udevd cpuset=/ mems_allowed=0-1
[  549.666809] CPU: 0 PID: 18936 Comm: udevd Not tainted 4.14.172-syzkaller #0
[  549.675941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  549.685310] Call Trace:
[  549.687910]  dump_stack+0x13e/0x194
[  549.691541]  dump_header+0x178/0x6d4
[  549.695239]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  549.700243]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  549.705333]  ? ___ratelimit+0x50/0x519
[  549.709248]  oom_kill_process.cold+0x10/0xae3
[  549.713916]  ? lock_downgrade+0x6e0/0x6e0
[  549.718058]  out_of_memory+0x2d5/0x1110
[  549.722035]  ? oom_killer_disable+0x1c0/0x1c0
[  549.726525]  ? mutex_trylock+0x152/0x1a0
[  549.730582]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  549.735413]  ? warn_alloc+0xf0/0xf0
[  549.739077]  __alloc_pages_nodemask+0x5d3/0x700
[  549.743733]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  549.748732]  ? lock_downgrade+0x6e0/0x6e0
[  549.752899]  alloc_pages_current+0xe7/0x1e0
[  549.757222]  __page_cache_alloc+0x245/0x3d0
[  549.761562]  filemap_fault+0xc21/0x1c30
[  549.765544]  ? __lock_page_or_retry+0x8a0/0x8a0
[  549.770228]  ? lock_acquire+0x170/0x3f0
[  549.774204]  ? ext4_filemap_fault+0x7c/0xb0
[  549.778612]  ext4_filemap_fault+0x84/0xb0
[  549.782759]  __do_fault+0xfa/0x380
[  549.786292]  __handle_mm_fault+0x22e9/0x3280
[  549.790686]  ? copy_page_range+0x1d70/0x1d70
[  549.795075]  ? find_held_lock+0x2d/0x110
[  549.799137]  handle_mm_fault+0x288/0x7a0
[  549.803203]  __do_page_fault+0x4bc/0xb40
[  549.807261]  ? vmalloc_fault+0xdf0/0xdf0
[  549.811306]  ? do_page_fault+0x60/0x4f2
[  549.815307]  ? page_fault+0x2f/0x50
[  549.818914]  page_fault+0x45/0x50
[  549.822354] RIP: b9357300:0x1f
[  549.825539] RSP: b9357190:00007ffcb93573e0 EFLAGS: 00000001
[  549.829982] Mem-Info:
[  549.840281] active_anon:1350822 inactive_anon:194 isolated_anon:0
[  549.840281]  active_file:95 inactive_file:423 isolated_file:27
[  549.840281]  unevictable:0 dirty:7 writeback:0 unstable:0
[  549.840281]  slab_reclaimable:18596 slab_unreclaimable:107156
[  549.840281]  mapped:52495 shmem:250 pagetables:20463 bounce:0
[  549.840281]  free:22960 free_pcp:279 free_cma:0
[  549.874972] Node 0 active_anon:1949044kB inactive_anon:760kB active_file:140kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):108kB mapped:209116kB dirty:0kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 950272kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  549.903704] Node 1 active_anon:3454244kB inactive_anon:16kB active_file:480kB inactive_file:532kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:564kB dirty:28kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  549.931452] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  549.958665] lowmem_reserve[]: 0 2557 2557 2557 2557
[  549.964018] Node 0 DMA32 free:27452kB min:36272kB low:45340kB high:54408kB active_anon:1944300kB inactive_anon:760kB active_file:0kB inactive_file:288kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:9952kB pagetables:22792kB bounce:0kB free_pcp:928kB local_pcp:668kB free_cma:0kB
[  549.993919] lowmem_reserve[]: 0 0 0 0 0
[  549.998390] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  550.024914] lowmem_reserve[]: 0 0 0 0 0
[  550.029437] Node 1 Normal free:54340kB min:53612kB low:67012kB high:80412kB active_anon:3453916kB inactive_anon:16kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:28kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:18688kB pagetables:59052kB bounce:0kB free_pcp:436kB local_pcp:44kB free_cma:0kB
[  550.059117] lowmem_reserve[]: 0 0 0 0 0
[  550.064283] Node 0 DMA: 10*4kB (M) 1*8kB (U) 1*16kB (M) 7*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10336kB
[  550.130626] Node 0 DMA32: 57*4kB (UM) 667*8kB (UMEH) 885*16kB (UMEH) 217*32kB (UMEH) 2*64kB (ME) 1*128kB (M) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 27948kB
[  550.151040] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  550.162799] Node 1 Normal: 1*4kB (M) 75*8kB (UMEH) 63*16kB (UMEH) 552*32kB (UMEH) 257*64kB (UMEH) 23*128kB (UMH) 6*256kB (UM) 1*512kB (U) 3*1024kB (UME) 1*2048kB (U) 2*4096kB (UM) = 54028kB
[  550.180699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  550.190193] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  550.199473] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  550.209172] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  550.218627] 362 total pagecache pages
[  550.224486] 0 pages in swap cache
[  550.228713] Swap cache stats: add 0, delete 0, find 0/0
[  550.235045] Free swap  = 0kB
[  550.238115] Total swap = 0kB
[  550.241767] 1965979 pages RAM
[  550.244891] 0 pages HighMem/MovableOnly
[  550.249382] 339049 pages reserved
[  550.253013] 0 pages cma reserved
[  550.256382] Out of memory: Kill process 19327 (syz-executor.2) score 1007 or sacrifice child
[  550.272987] Killed process 19327 (syz-executor.2) total-vm:75228kB, anon-rss:16572kB, file-rss:34816kB, shmem-rss:0kB
[  550.341702] oom_reaper: reaped process 19327 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[  550.565215] serio: Serial port pts1
14:24:21 executing program 4:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef07", 0x9, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:24:22 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef07", 0x9, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:24:23 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

14:24:23 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:24:23 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

[  553.935809] serio: Serial port pts1
[  555.415159] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  555.441869] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  555.620998] serio: Serial port pts1
[  555.707635] kworker/0:4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[  555.727656] kworker/0:4 cpuset=/ mems_allowed=0-1
[  555.732723] CPU: 0 PID: 7613 Comm: kworker/0:4 Not tainted 4.14.172-syzkaller #0
[  555.740412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  555.749783] Workqueue: events_long serio_handle_event
[  555.754969] Call Trace:
[  555.757549]  dump_stack+0x13e/0x194
[  555.761174]  dump_header+0x178/0x6d4
[  555.764891]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  555.769907]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  555.775004]  ? ___ratelimit+0x50/0x519
[  555.778896]  oom_kill_process.cold+0x10/0xae3
[  555.783383]  ? lock_downgrade+0x6e0/0x6e0
[  555.787737]  out_of_memory+0x2d5/0x1110
[  555.791709]  ? oom_killer_disable+0x1c0/0x1c0
[  555.796227]  ? mutex_trylock+0x152/0x1a0
[  555.800288]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  555.805231]  ? warn_alloc+0xf0/0xf0
[  555.808906]  __alloc_pages_nodemask+0x5d3/0x700
[  555.813600]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  555.818887]  ? find_held_lock+0x2d/0x110
[  555.823045]  ? mark_held_locks+0xa6/0xf0
[  555.827227]  ? cache_grow_begin+0x32d/0x410
[  555.831741]  cache_grow_begin+0x7b/0x410
[  555.835809]  ? __cpuset_node_allowed+0xfa/0x450
[  555.840485]  fallback_alloc+0x205/0x2b0
[  555.844481]  kmem_cache_alloc_trace+0x20f/0x7b0
[  555.849183]  ? devm_device_remove_groups+0x50/0x50
[  555.854121]  kobject_uevent_env+0x1fa/0xc50
[  555.858463]  ? up_read+0x17/0x30
[  555.861919]  device_add+0xa02/0x1400
[  555.865662]  ? device_private_init+0x180/0x180
[  555.870243]  ? _raw_spin_unlock_irqrestore+0x67/0xe0
[  555.875579]  serio_handle_event+0x362/0x7f0
[  555.880114]  process_one_work+0x813/0x1540
[  555.884453]  ? pwq_dec_nr_in_flight+0x2b0/0x2b0
[  555.889205]  ? worker_thread+0x15d/0x1070
[  555.893490]  ? _raw_spin_unlock_irq+0x24/0x80
[  555.898004]  worker_thread+0x5d1/0x1070
[  555.901979]  ? process_one_work+0x1540/0x1540
[  555.906468]  kthread+0x30d/0x420
[  555.909882]  ? kthread_create_on_node+0xd0/0xd0
[  555.914579]  ret_from_fork+0x24/0x30
[  555.984722] Mem-Info:
[  555.987913] active_anon:1352131 inactive_anon:193 isolated_anon:0
[  555.987913]  active_file:303 inactive_file:330 isolated_file:50
[  555.987913]  unevictable:0 dirty:68 writeback:1 unstable:0
[  555.987913]  slab_reclaimable:18619 slab_unreclaimable:107250
[  555.987913]  mapped:52818 shmem:250 pagetables:20541 bounce:0
[  555.987913]  free:20931 free_pcp:399 free_cma:0
[  556.030676] Node 0 active_anon:1950452kB inactive_anon:760kB active_file:60kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):36kB mapped:208976kB dirty:68kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 948224kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  556.071896] Node 1 active_anon:3458072kB inactive_anon:12kB active_file:604kB inactive_file:652kB unevictable:0kB isolated(anon):0kB isolated(file):116kB mapped:1176kB dirty:204kB writeback:8kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  556.109945] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  556.136983] lowmem_reserve[]: 0 2557 2557 2557 2557
[  556.142315] Node 0 DMA32 free:26968kB min:36272kB low:45340kB high:54408kB active_anon:1945612kB inactive_anon:760kB active_file:56kB inactive_file:40kB unevictable:0kB writepending:68kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:9952kB pagetables:22884kB bounce:0kB free_pcp:336kB local_pcp:336kB free_cma:0kB
[  556.171743] lowmem_reserve[]: 0 0 0 0 0
[  556.175890] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  556.220865] lowmem_reserve[]: 0 0 0 0 0
[  556.225988] Node 1 Normal free:48848kB min:53612kB low:67012kB high:80412kB active_anon:3457804kB inactive_anon:12kB active_file:532kB inactive_file:608kB unevictable:0kB writepending:112kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:18816kB pagetables:59272kB bounce:0kB free_pcp:1308kB local_pcp:636kB free_cma:0kB
[  556.256433] lowmem_reserve[]: 0 0 0 0 0
[  556.262326] Node 0 DMA: 10*4kB (M) 1*8kB (U) 1*16kB (M) 7*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10336kB
[  556.276973] Node 0 DMA32: 10*4kB (UM) 625*8kB (UME) 867*16kB (UME) 206*32kB (UE) 4*64kB (ME) 0*128kB 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 26784kB
[  556.291538] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  556.302432] Node 1 Normal: 410*4kB (UMEH) 258*8kB (UMEH) 57*16kB (UMEH) 474*32kB (UMEH) 214*64kB (UMEH) 24*128kB (UMEH) 8*256kB (UME) 4*512kB (UME) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (U) = 49864kB
[  556.320625] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  556.329729] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  556.338473] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  556.347877] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  556.356969] 359 total pagecache pages
[  556.361028] 0 pages in swap cache
[  556.364516] Swap cache stats: add 0, delete 0, find 0/0
[  556.380239] Free swap  = 0kB
[  556.383300] Total swap = 0kB
[  556.386466] 1965979 pages RAM
[  556.389695] 0 pages HighMem/MovableOnly
[  556.393732] 339049 pages reserved
[  556.397178] 0 pages cma reserved
[  556.400748] Out of memory: Kill process 19394 (syz-executor.4) score 1007 or sacrifice child
[  556.409487] Killed process 19404 (syz-executor.4) total-vm:75096kB, anon-rss:6632kB, file-rss:34816kB, shmem-rss:0kB
[  556.472512] oom_reaper: reaped process 19404 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[  556.495161] kworker/0:4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[  556.511967] kworker/0:4 cpuset=/ mems_allowed=0-1
[  556.517385] CPU: 0 PID: 7613 Comm: kworker/0:4 Not tainted 4.14.172-syzkaller #0
[  556.524917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  556.534305] Workqueue: events_long serio_handle_event
[  556.539495] Call Trace:
[  556.542100]  dump_stack+0x13e/0x194
[  556.545743]  dump_header+0x178/0x6d4
[  556.549466]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  556.554493]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  556.559685]  ? ___ratelimit+0x50/0x519
[  556.563580]  oom_kill_process.cold+0x10/0xae3
[  556.568092]  ? lock_acquire+0x170/0x3f0
[  556.572586]  ? lock_downgrade+0x6e0/0x6e0
[  556.576754]  out_of_memory+0x2d5/0x1110
[  556.580747]  ? oom_killer_disable+0x1c0/0x1c0
[  556.585418]  ? mutex_trylock+0x152/0x1a0
[  556.589535]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  556.594388]  ? warn_alloc+0xf0/0xf0
[  556.598032]  __alloc_pages_nodemask+0x5d3/0x700
[  556.602715]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  556.607743]  ? find_held_lock+0x2d/0x110
[  556.611818]  ? mark_held_locks+0xa6/0xf0
[  556.615889]  ? cache_grow_begin+0x32d/0x410
[  556.620216]  cache_grow_begin+0x7b/0x410
[  556.624417]  ? __cpuset_node_allowed+0xfa/0x450
[  556.629157]  fallback_alloc+0x205/0x2b0
[  556.633173]  kmem_cache_alloc_trace+0x20f/0x7b0
[  556.637862]  ? devm_device_remove_groups+0x50/0x50
[  556.642802]  kobject_uevent_env+0x1fa/0xc50
[  556.647147]  ? up_read+0x17/0x30
[  556.650526]  device_add+0xa02/0x1400
[  556.654253]  ? device_private_init+0x180/0x180
[  556.658839]  ? _raw_spin_unlock_irqrestore+0x67/0xe0
[  556.664054]  serio_handle_event+0x362/0x7f0
[  556.668469]  process_one_work+0x813/0x1540
[  556.672714]  ? pwq_dec_nr_in_flight+0x2b0/0x2b0
[  556.677379]  ? worker_thread+0x15d/0x1070
[  556.681535]  ? _raw_spin_unlock_irq+0x24/0x80
[  556.686057]  worker_thread+0x5d1/0x1070
[  556.690111]  ? process_one_work+0x1540/0x1540
[  556.694631]  kthread+0x30d/0x420
[  556.698120]  ? kthread_create_on_node+0xd0/0xd0
[  556.702803]  ret_from_fork+0x24/0x30
[  556.710562] Mem-Info:
[  556.713058] active_anon:1352139 inactive_anon:193 isolated_anon:0
[  556.713058]  active_file:15 inactive_file:26 isolated_file:0
[  556.713058]  unevictable:0 dirty:1 writeback:2 unstable:0
[  556.713058]  slab_reclaimable:18626 slab_unreclaimable:107110
[  556.713058]  mapped:52232 shmem:250 pagetables:20513 bounce:0
[  556.713058]  free:22329 free_pcp:68 free_cma:0
[  556.750348] Node 0 active_anon:1950500kB inactive_anon:760kB active_file:0kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208912kB dirty:0kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 948224kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  556.786665] Node 1 active_anon:3458056kB inactive_anon:12kB active_file:80kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:4kB writeback:8kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  556.817099] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  556.848998] lowmem_reserve[]: 0 2557 2557 2557 2557
[  556.854117] Node 0 DMA32 free:27308kB min:36272kB low:45340kB high:54408kB active_anon:1945756kB inactive_anon:760kB active_file:0kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:9888kB pagetables:22892kB bounce:0kB free_pcp:132kB local_pcp:0kB free_cma:0kB
[  556.888506] lowmem_reserve[]: 0 0 0 0 0
[  556.892579] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  556.922020] lowmem_reserve[]: 0 0 0 0 0
[  556.926063] Node 1 Normal free:51672kB min:53612kB low:67012kB high:80412kB active_anon:3458056kB inactive_anon:12kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:12kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:18784kB pagetables:59152kB bounce:0kB free_pcp:140kB local_pcp:8kB free_cma:0kB
[  556.958903] lowmem_reserve[]: 0 0 0 0 0
[  556.963017] Node 0 DMA: 10*4kB (M) 1*8kB (U) 1*16kB (M) 7*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10336kB
[  556.981890] Node 0 DMA32: 21*4kB (ME) 633*8kB (UME) 871*16kB (UME) 215*32kB (UME) 3*64kB (ME) 1*128kB (M) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 27308kB
[  556.996823] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  557.011174] Node 1 Normal: 390*4kB (UMEH) 327*8kB (UMEH) 124*16kB (UMEH) 481*32kB (UMEH) 215*64kB (UMEH) 24*128kB (UMEH) 8*256kB (UME) 4*512kB (UME) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (U) = 51696kB
[  557.030730] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  557.039578] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  557.049802] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  557.060717] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  557.069315] 291 total pagecache pages
[  557.075025] 0 pages in swap cache
[  557.078494] Swap cache stats: add 0, delete 0, find 0/0
[  557.085780] Free swap  = 0kB
[  557.088923] Total swap = 0kB
[  557.093737] 1965979 pages RAM
[  557.096850] 0 pages HighMem/MovableOnly
[  557.102799] 339049 pages reserved
[  557.106279] 0 pages cma reserved
[  557.109659] Out of memory: Kill process 9313 (syz-executor.3) score 1007 or sacrifice child
[  557.119797] Killed process 9313 (syz-executor.3) total-vm:75096kB, anon-rss:16564kB, file-rss:34816kB, shmem-rss:0kB
[  557.229752] oom_reaper: reaped process 9313 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[  557.255943] syz-executor.1 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[  557.338788] syz-executor.1 cpuset=syz1 mems_allowed=0-1
[  557.353942] CPU: 0 PID: 7542 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0
[  557.361893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  557.371267] Call Trace:
[  557.373864]  dump_stack+0x13e/0x194
[  557.377667]  dump_header+0x178/0x6d4
[  557.381388]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  557.386410]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  557.391700]  ? ___ratelimit+0x50/0x519
[  557.395664]  oom_kill_process.cold+0x10/0xae3
[  557.400165]  ? lock_acquire+0x170/0x3f0
[  557.404251]  ? lock_downgrade+0x6e0/0x6e0
[  557.408402]  out_of_memory+0x2d5/0x1110
[  557.412377]  ? oom_killer_disable+0x1c0/0x1c0
[  557.416880]  ? mutex_trylock+0x152/0x1a0
[  557.420952]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  557.426959]  ? warn_alloc+0xf0/0xf0
[  557.430597]  ? find_held_lock+0x2d/0x110
[  557.434932]  ? fs_reclaim_acquire+0x10/0x10
[  557.439268]  __alloc_pages_nodemask+0x5d3/0x700
[  557.443955]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  557.448975]  ? find_held_lock+0x2d/0x110
[  557.453060]  ? cache_grow_begin+0x32d/0x410
[  557.457538]  cache_grow_begin+0x7b/0x410
[  557.461642]  ? __cpuset_node_allowed+0xfa/0x450
[  557.466342]  fallback_alloc+0x205/0x2b0
[  557.470320]  kmem_cache_alloc+0x1ea/0x770
[  557.474521]  ? find_held_lock+0x2d/0x110
[  557.478581]  getname_flags+0xc8/0x560
[  557.482384]  user_path_mountpoint_at+0x23/0x40
[  557.486974]  SyS_umount+0x10a/0x340
[  557.490607]  ? __detach_mounts+0x2e0/0x2e0
[  557.494846]  ? __do_page_fault+0x35b/0xb40
[  557.499231]  ? do_syscall_64+0x4c/0x640
[  557.503249]  ? __detach_mounts+0x2e0/0x2e0
[  557.507505]  do_syscall_64+0x1d5/0x640
[  557.511415]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  557.516599] RIP: 0033:0x45eea7
[  557.519840] RSP: 002b:00007ffd4baf9158 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  557.527541] RAX: ffffffffffffffda RBX: 00000000000879c3 RCX: 000000000045eea7
[  557.534927] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffd4bafa290
[  557.542199] RBP: 000000000000056a R08: 0000000000000001 R09: 0000000002b7c940
[  557.549509] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4bafa290
[  557.556839] R13: 00007ffd4bafa280 R14: 0000000000000000 R15: 00007ffd4bafa290
[  557.593406] Mem-Info:
[  557.596148] active_anon:1347984 inactive_anon:193 isolated_anon:0
[  557.596148]  active_file:0 inactive_file:71 isolated_file:0
[  557.596148]  unevictable:0 dirty:22 writeback:2 unstable:0
[  557.596148]  slab_reclaimable:18620 slab_unreclaimable:106928
[  557.596148]  mapped:52249 shmem:250 pagetables:20481 bounce:0
[  557.596148]  free:26606 free_pcp:40 free_cma:0
[  557.633440] Node 0 active_anon:1933984kB inactive_anon:760kB active_file:284kB inactive_file:328kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209524kB dirty:76kB writeback:4kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 931840kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  557.663767] Node 1 active_anon:3457952kB inactive_anon:12kB active_file:20kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:4kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  557.694065] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  557.735681] lowmem_reserve[]: 0 2557 2557 2557 2557
[  557.752526] Node 0 DMA32 free:43084kB min:36272kB low:45340kB high:54408kB active_anon:1929240kB inactive_anon:760kB active_file:0kB inactive_file:496kB unevictable:0kB writepending:80kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:9856kB pagetables:22764kB bounce:0kB free_pcp:148kB local_pcp:0kB free_cma:0kB
[  557.787876] lowmem_reserve[]: 0 0 0 0 0
[  557.792370] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  557.825075] lowmem_reserve[]: 0 0 0 0 0
[  557.829225] Node 1 Normal free:52696kB min:53612kB low:67012kB high:80412kB active_anon:3458052kB inactive_anon:12kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:16kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:18784kB pagetables:59152kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  557.871697] lowmem_reserve[]: 0 0 0 0 0
[  557.884211] Node 0 DMA: 10*4kB (M) 1*8kB (U) 1*16kB (M) 7*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10336kB
[  557.901290] Node 0 DMA32: 37*4kB (UME) 649*8kB (UE) 864*16kB (U) 224*32kB (UME) 16*64kB (ME) 11*128kB (M) 4*256kB (M) 1*512kB (M) 0*1024kB 4*2048kB (M) 1*4096kB (M) = 42588kB
[  557.917970] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  557.929830] Node 1 Normal: 415*4kB (UMEH) 368*8kB (UMEH) 148*16kB (UMEH) 489*32kB (UMEH) 215*64kB (UMEH) 24*128kB (UMEH) 8*256kB (UME) 4*512kB (UME) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (U) = 52764kB
[  557.948587] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  557.958435] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  557.967849] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  557.977648] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  557.987165] 524 total pagecache pages
[  557.992779] 0 pages in swap cache
[  557.997498] Swap cache stats: add 0, delete 0, find 0/0
[  558.006870] Free swap  = 0kB
[  558.010481] Total swap = 0kB
[  558.014101] 1965979 pages RAM
[  558.018799] 0 pages HighMem/MovableOnly
[  558.023410] 339049 pages reserved
[  558.027092] 0 pages cma reserved
[  558.030875] Out of memory: Kill process 10250 (syz-executor.4) score 1007 or sacrifice child
[  558.039680] Killed process 10250 (syz-executor.4) total-vm:75228kB, anon-rss:16568kB, file-rss:34816kB, shmem-rss:0kB
[  558.081668] oom_reaper: reaped process 10250 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
14:24:28 executing program 1:
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000940)='/dev/dlm-monitor\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)

14:24:28 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:24:28 executing program 4:
pipe(&(0x7f00000002c0))
close(0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2)
read(0xffffffffffffffff, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r4)
dup3(0xffffffffffffffff, r3, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r5 = socket(0x0, 0x2, 0x0)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[  558.601814] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[  559.841541] NOHZ: local_softirq_pending 08
14:24:31 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5", 0xe, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:24:31 executing program 1:
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000080)={0x3, @null})

14:24:31 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0}}, 0x0)

14:24:31 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

[  561.367979] audit: type=1400 audit(1583072671.932:82): avc:  denied  { write } for  pid=19419 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_rdma_socket permissive=1
14:24:32 executing program 5:
syz_open_procfs(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0xc0000080)
inotify_rm_watch(r0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)

14:24:32 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

[  561.609645] serio: Serial port pts1
14:24:32 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

14:24:32 executing program 4:
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0xc0000080)

[  561.715557] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
14:24:32 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028c7ae65099fc397e3d31e4351b96bcb9024c32a7761d2bafe91e5c6396058a41bd754f8fafdf03bb32a4484eba5c21ec3fb10ac6efb4aa7403632c4d24e54f4f44f08f9c79f44bc90444caf5d48c4903bf8bbac59cc4b7d1cece174bd26dcfaa23bb965417037739c3e77900e868c3a0324f41f35cf67b6ea011bdf9afc1c39063fdec9281f16796efa6d9d53c044cbafc017dbc5949a7159eb058e406bc2db60cdbaa4f7c391265ef2c7940219a069af10a3dfdff14f621aa0e1aaffcc518b062f7af10ce9883d048d68bd4627f672e66f9b75f5015e91d79119bd92361eea13903afb60d7614e164f2218a0cf379811c56e61714012534bc9847202ad62340cdf62c690836313924f56ad048b62fcfca0a48934df4ea0d84557e6525f4c6a95b66c8a222f7bfb07c5c4e39b09361deb58a36715dfe9d038f1cbba3c634b1f95907c4d58eaca29d7334e4956e3c603ab84275917aa344b565020"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

14:24:32 executing program 5:
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000b40)={0x0}, 0x10)

14:24:32 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000100)={0xa, 0x4e22, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@rthdrdstopts={{0x14}}], 0x14}, 0x0)

14:24:32 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000000175b5542d6e9b52c46b20747d05a434dd88e9796381b70ed1d0bb54ef1633899c215988fdce57fd987ee7a66a3dba91f0762dfb96f89a25be36a16f97ecaca4ffe581ed8f9623d52e9fc39681d02c277af0742f771d3051c563fba833fe5ec8f8012867431513b6422f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}}, 0x0)

[  561.849421] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
14:24:32 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  561.982624] serio: Serial port pts5
[  562.091815] blkid invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=-1000
[  562.174108] blkid cpuset=/ mems_allowed=0-1
[  562.185677] CPU: 1 PID: 19462 Comm: blkid Not tainted 4.14.172-syzkaller #0
[  562.192950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  562.202313] Call Trace:
[  562.204911]  dump_stack+0x13e/0x194
[  562.208554]  dump_header+0x178/0x6d4
[  562.212281]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  562.217474]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  562.222688]  ? ___ratelimit+0x50/0x519
[  562.226591]  oom_kill_process.cold+0x10/0xae3
[  562.231109]  ? lock_downgrade+0x6e0/0x6e0
[  562.235269]  out_of_memory+0x2d5/0x1110
[  562.239258]  ? oom_killer_disable+0x1c0/0x1c0
[  562.243863]  ? mutex_trylock+0x152/0x1a0
[  562.247951]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  562.252821]  ? warn_alloc+0xf0/0xf0
[  562.256466]  ? find_held_lock+0x2d/0x110
[  562.260649]  ? fs_reclaim_acquire+0x10/0x10
[  562.264988]  __alloc_pages_nodemask+0x5d3/0x700
[  562.269678]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  562.274706]  ? find_held_lock+0x2d/0x110
[  562.278803]  ? cache_grow_begin+0x32d/0x410
[  562.283148]  cache_grow_begin+0x7b/0x410
[  562.287223]  ? __cpuset_node_allowed+0xfa/0x450
[  562.291909]  fallback_alloc+0x205/0x2b0
[  562.295904]  kmem_cache_alloc+0x1ea/0x770
[  562.300075]  ? memcpy+0x35/0x50
[  562.303365]  getname_flags+0xc8/0x560
[  562.307187]  user_path_at_empty+0x2a/0x50
[  562.311344]  SyS_access+0x21a/0x680
[  562.315068]  ? SyS_faccessat+0x680/0x680
[  562.319242]  ? __do_page_fault+0x35b/0xb40
[  562.323492]  ? do_syscall_64+0x4c/0x640
[  562.327476]  ? SyS_faccessat+0x680/0x680
[  562.331550]  do_syscall_64+0x1d5/0x640
[  562.335460]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  562.340751] RIP: 0033:0x7f9ddf91f267
[  562.344461] RSP: 002b:00007ffed24b0998 EFLAGS: 00000246 ORIG_RAX: 0000000000000015
[  562.352174] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9ddf91f267
[  562.359454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f9ddf9232e6
[  562.366731] RBP: 00007ffed24b0a30 R08: 000000000000003c R09: 0000000000000000
[  562.374008] R10: 00007ffed25cf120 R11: 0000000000000246 R12: 0000000000000001
[  562.381289] R13: 0000000000000004 R14: 00007f9ddfb2a758 R15: 00007f9ddf923931
[  562.408702] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  562.418432] Mem-Info:
[  562.421336] active_anon:1343144 inactive_anon:193 isolated_anon:0
[  562.421336]  active_file:1125 inactive_file:1002 isolated_file:32
[  562.421336]  unevictable:0 dirty:32 writeback:0 unstable:0
[  562.421336]  slab_reclaimable:18626 slab_unreclaimable:107568
[  562.421336]  mapped:54104 shmem:250 pagetables:20602 bounce:0
[  562.421336]  free:27712 free_pcp:610 free_cma:0
14:24:33 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, 0x0, 0x0, 0x0, 0x0)

14:24:33 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5", 0xe, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  562.461482] Node 0 active_anon:1921620kB inactive_anon:764kB active_file:3544kB inactive_file:3496kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:214888kB dirty:112kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 921600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  562.498471] Node 1 active_anon:3450956kB inactive_anon:8kB active_file:72kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128kB dirty:16kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
14:24:33 executing program 4:
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
inotify_init()

14:24:33 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB='[d::],0::6:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0)
sendto$inet(r0, 0x0, 0x12c, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[  562.587711] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  562.638536] lowmem_reserve[]: 0 2557 2557 2557 2557
[  562.644027] Node 0 DMA32 free:41556kB min:36272kB low:45340kB high:54408kB active_anon:1916768kB inactive_anon:764kB active_file:4484kB inactive_file:5724kB unevictable:0kB writepending:336kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:9984kB pagetables:22980kB bounce:0kB free_pcp:608kB local_pcp:260kB free_cma:0kB
[  562.675080] lowmem_reserve[]: 0 0 0 0 0
[  562.679804] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  562.706419] lowmem_reserve[]: 0 0 0 0 0
14:24:33 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r1, 0x1, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[  562.712157] Node 1 Normal free:57660kB min:53612kB low:67012kB high:80412kB active_anon:3450964kB inactive_anon:4kB active_file:356kB inactive_file:140kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:19136kB pagetables:59544kB bounce:0kB free_pcp:1416kB local_pcp:684kB free_cma:0kB
[  562.872096] serio: Serial port pts1
14:24:33 executing program 2:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
r7 = socket(0x10, 0x2, 0x0)
sendto(r7, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, 0x0, 0x0, 0x0, 0x0)

[  562.994358] syz-executor.1: page allocation failure: order:5, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null)
[  563.034969] syz-executor.1 cpuset=syz1 mems_allowed=0-1
[  563.049675] CPU: 0 PID: 19489 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0
[  563.057607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  563.066969] Call Trace:
[  563.069578]  dump_stack+0x13e/0x194
[  563.073230]  warn_alloc.cold+0x96/0x1af
[  563.077215]  ? zone_watermark_ok_safe+0x280/0x280
[  563.082164]  ? __alloc_pages_direct_compact+0xba/0x360
[  563.087451]  __alloc_pages_slowpath+0x2114/0x26c0
[  563.092434]  ? warn_alloc+0xf0/0xf0
[  563.096199]  ? find_held_lock+0x2d/0x110
[  563.100273]  ? fs_reclaim_acquire+0x10/0x10
[  563.104771]  __alloc_pages_nodemask+0x5d3/0x700
[  563.109453]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  563.114492]  ? find_held_lock+0x2d/0x110
[  563.118570]  ? cache_grow_begin+0x32d/0x410
[  563.119326] lowmem_reserve[]:
[  563.122906]  cache_grow_begin+0x7b/0x410
[  563.122919]  ? __cpuset_node_allowed+0xfa/0x450
[  563.122929]  fallback_alloc+0x205/0x2b0
[  563.122942]  __kmalloc+0x214/0x7c0
[  563.122953]  ? mempool_create_node+0x2cd/0x3c0
[  563.122963]  ? __phys_addr+0x73/0xe0
[  563.122971]  ? kasan_poison_kfree+0xa/0xa0
[  563.122979]  ? mempool_resize+0x5d0/0x5d0
[  563.122989]  mempool_create_node+0x2cd/0x3c0
[  563.123035]  ceph_mount+0x6f9/0x164d
[  563.123049]  mount_fs+0x92/0x2a0
[  563.170690]  vfs_kern_mount.part.0+0x5b/0x3c0
[  563.172507]  0
[  563.175195]  do_mount+0x3c9/0x24f0
[  563.175211]  ? copy_mount_string+0x40/0x40
[  563.175224]  ? __might_fault+0x177/0x1b0
[  563.188287]  0 0
[  563.188820]  ? _copy_from_user+0x94/0x100
[  563.188821]  0 0
[  563.190806]  ? memdup_user+0x54/0xa0
[  563.190817]  ? copy_mount_options+0x1ec/0x2e0
[  563.190825]  ? copy_mnt_ns+0x8a0/0x8a0
[  563.190834]  SyS_mount+0xa8/0x120
[  563.190842]  ? copy_mnt_ns+0x8a0/0x8a0
[  563.190853]  do_syscall_64+0x1d5/0x640
[  563.190868]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  563.190876] RIP: 0033:0x45c479
[  563.190881] RSP: 002b:00007fe226087c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  563.190890] RAX: ffffffffffffffda RBX: 00007fe2260886d4 RCX: 000000000045c479
[  563.190895] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000020000100
[  563.190902] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  563.200745] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  563.200752] R13: 000000000000074a R14: 00000000004c9d34 R15: 000000000076bf2c
[  563.474011] Mem-Info:
[  563.491140] active_anon:1345138 inactive_anon:192 isolated_anon:0
[  563.491140]  active_file:58 inactive_file:346 isolated_file:40
[  563.491140]  unevictable:0 dirty:18 writeback:1 unstable:0
[  563.491140]  slab_reclaimable:18658 slab_unreclaimable:107851
[  563.491140]  mapped:52418 shmem:250 pagetables:20645 bounce:0
[  563.491140]  free:27585 free_pcp:332 free_cma:0
[  563.505025] Node 0 
[  563.534566] Node 0 active_anon:1928248kB inactive_anon:764kB active_file:324kB inactive_file:2672kB unevictable:0kB isolated(anon):0kB isolated(file):160kB mapped:210672kB dirty:68kB writeback:4kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 925696kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  563.539625] DMA: 10*4kB (M) 1*8kB (U) 1*16kB (M) 7*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10336kB
[  563.599316] Node 1 active_anon:3452204kB inactive_anon:4kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  563.606671] Node 0 
[  563.627841] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  563.631553] DMA32: 28*4kB (UME) 232*8kB (UM) 1012*16kB (UME) 317*32kB (UME) 74*64kB (UME) 18*128kB (UM) 1*256kB (U) 2*512kB (UM) 1*1024kB (U) 2*2048kB (H) 0*4096kB = 41744kB
[  563.733103] lowmem_reserve[]: 0 2557 2557 2557 2557
[  563.733888] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  563.738705] Node 0 DMA32 free:41040kB min:36272kB low:45340kB high:54408kB active_anon:1923504kB inactive_anon:764kB active_file:1392kB inactive_file:2264kB unevictable:0kB writepending:72kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:9984kB pagetables:23120kB bounce:0kB free_pcp:1016kB local_pcp:36kB free_cma:0kB
[  563.817326] Node 1 Normal: 142*4kB (UMEH) 154*8kB (UME) 131*16kB (UMEH) 581*32kB (UMEH) 263*64kB (UMEH) 21*128kB (UMEH) 9*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UM) 1*4096kB (U) = 57112kB
[  563.867610] lowmem_reserve[]: 0 0 0 0 0
[  563.870154] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  563.875155] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  563.920078] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
14:24:34 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$notify(r0, 0x402, 0x4)

14:24:34 executing program 0:
pipe(&(0x7f00000002c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x3, 0x4, 0x1}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
read(r6, 0x0, 0x6c00)
dup2(0xffffffffffffffff, r6)
dup3(r6, r5, 0x0)
ioctl$int_out(r5, 0x5460, &(0x7f0000000100))
sendto(0xffffffffffffffff, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf5", 0xe, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  563.938915] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  563.974223] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  564.028815] 2833 total pagecache pages
[  564.059667] 0 pages in swap cache
14:24:34 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x81)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000240))

[  564.083776] Swap cache stats: add 0, delete 0, find 0/0
[  564.130497] Free swap  = 0kB
[  564.159934] lowmem_reserve[]: 0 0 0 0 0
[  564.169125] Total swap = 0kB
[  564.179149] Node 1 Normal free:55476kB min:53612kB low:67012kB high:80412kB active_anon:3452284kB inactive_anon:0kB active_file:112kB inactive_file:220kB unevictable:0kB writepending:24kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:19168kB pagetables:59440kB bounce:0kB free_pcp:196kB local_pcp:0kB free_cma:0kB
14:24:34 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, 0x0, 0x0)

[  564.183556] 1965979 pages RAM
[  564.349932] lowmem_reserve[]: 0 0 0 0 0
[  564.401180] serio: Serial port pts1
[  564.436327] Node 0 DMA: 10*4kB (M) 1*8kB (U) 1*16kB (M) 7*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 2*4096kB (M) = 10336kB
[  564.450377] 0 pages HighMem/MovableOnly
[  564.465561] 339049 pages reserved
[  564.496273] 0 pages cma reserved
[  564.578161] Out of memory: Kill process 19421 (syz-executor.0) score 1007 or sacrifice child
[  564.611951] Node 0 DMA32: 61*4kB (UME) 260*8kB (UME) 871*16kB (UME) 211*32kB (UME) 9*64kB (UME) 17*128kB (M) 1*256kB (U) 2*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 28068kB
[  564.654434] syz-executor.4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[  564.654528] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  564.679592] syz-executor.4 cpuset=
[  564.702231] Node 1 
[  564.710008] syz4
[  564.710058] Normal: 110*4kB (UMEH) 20*8kB (MEH) 15*16kB (MEH) 455*32kB (UME) 245*64kB (UMEH) 21*128kB (UMEH) 9*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UM) 1*4096kB (U) = 48872kB
[  564.717875]  mems_allowed=0-1
[  564.752099] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  564.759883] CPU: 1 PID: 19515 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0
[  564.762762] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  564.768878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  564.768883] Call Trace:
[  564.768903]  dump_stack+0x13e/0x194
[  564.768916]  dump_header+0x178/0x6d4
[  564.768926]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  564.768934]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  564.768943]  ? ___ratelimit+0x50/0x519
[  564.768954]  oom_kill_process.cold+0x10/0xae3
[  564.777858] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  564.786924]  ? lock_acquire+0x170/0x3f0
[  564.786934]  ? lock_downgrade+0x6e0/0x6e0
[  564.786947]  out_of_memory+0x2d5/0x1110
[  564.786961]  ? oom_killer_disable+0x1c0/0x1c0
[  564.786972]  ? mutex_trylock+0x152/0x1a0
[  564.786981]  __alloc_pages_slowpath+0x1fbf/0x26c0
[  564.786999]  ? warn_alloc+0xf0/0xf0
[  564.787006]  ? find_held_lock+0x2d/0x110
[  564.787013]  ? fs_reclaim_acquire+0x10/0x10
[  564.787029]  __alloc_pages_nodemask+0x5d3/0x700
[  564.789889] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  564.793231]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  564.793241]  ? find_held_lock+0x2d/0x110
[  564.793255]  ? cache_grow_begin+0x32d/0x410
[  564.793266]  cache_grow_begin+0x7b/0x410
[  564.793275]  ? __cpuset_node_allowed+0xfa/0x450
[  564.793285]  fallback_alloc+0x205/0x2b0
[  564.793295]  kmem_cache_alloc+0x1ea/0x770
[  564.793306]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[  564.797224] 690 total pagecache pages
[  564.802030]  getname_flags+0xc8/0x560
[  564.802044]  SyS_symlink+0x6a/0x1f0
[  564.802053]  ? SyS_symlinkat+0x200/0x200
[  564.802061]  ? __do_page_fault+0x35b/0xb40
[  564.802070]  ? do_syscall_64+0x4c/0x640
[  564.802077]  ? SyS_symlinkat+0x200/0x200
[  564.802086]  do_syscall_64+0x1d5/0x640
[  564.802100]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  564.802108] RIP: 0033:0x45c1a7
[  564.802115] RSP: 002b:00007fffce1e5ee8 EFLAGS: 00000206
[  564.807713] 0 pages in swap cache
[  564.811282]  ORIG_RAX: 0000000000000058
[  564.811287] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045c1a7
[  564.811292] RDX: 00007fffce1e5f83 RSI: 00000000004c1ff0 RDI: 00007fffce1e5f70
[  564.811295] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000013
[  564.811300] R10: 0000000000000075 R11: 0000000000000206 R12: 0000000000000001
[  564.811304] R13: 00007fffce1e5f20 R14: 0000000000000000 R15: 00007fffce1e5f30
[  564.954126] Mem-Info:
[  565.007207] Swap cache stats: add 0, delete 0, find 0/0
[  565.017219] Free swap  = 0kB
[  565.020437] Total swap = 0kB
[  565.023679] 1965979 pages RAM
[  565.026909] 0 pages HighMem/MovableOnly
[  565.030624] active_anon:1349839 inactive_anon:190 isolated_anon:0
[  565.030624]  active_file:19 inactive_file:14 isolated_file:6
[  565.030624]  unevictable:0 dirty:26 writeback:18 unstable:0
[  565.030624]  slab_reclaimable:18629 slab_unreclaimable:108019
[  565.030624]  mapped:52250 shmem:250 pagetables:20659 bounce:0
[  565.030624]  free:23338 free_pcp:99 free_cma:0
[  565.035256] 339049 pages reserved
[  565.065529] Node 0 active_anon:1939960kB inactive_anon:764kB active_file:136kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):80kB mapped:209044kB dirty:96kB writeback:44kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 925696kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  565.068994] 0 pages cma reserved
[  565.114846] ==================================================================
[  565.122689] BUG: KASAN: use-after-free in ceph_destroy_options+0xda/0x100
[  565.129624] Read of size 8 at addr ffff888074a83610 by task syz-executor.1/19489
[  565.137148] 
[  565.138777] CPU: 0 PID: 19489 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0
[  565.146655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  565.156112] Call Trace:
[  565.158726]  dump_stack+0x13e/0x194
[  565.162344]  ? ceph_destroy_options+0xda/0x100
[  565.166996]  print_address_description.cold+0x7c/0x1e2
[  565.172306]  ? ceph_destroy_options+0xda/0x100
[  565.176889]  kasan_report.cold+0xa9/0x2ae
[  565.181024]  ceph_destroy_options+0xda/0x100
[  565.185442]  ceph_mount+0xbc7/0x164d
[  565.189148]  mount_fs+0x92/0x2a0
[  565.192539]  vfs_kern_mount.part.0+0x5b/0x3c0
[  565.197115]  do_mount+0x3c9/0x24f0
[  565.200644]  ? copy_mount_string+0x40/0x40
[  565.204990]  ? __might_fault+0x177/0x1b0
[  565.209058]  ? _copy_from_user+0x94/0x100
[  565.213212]  ? memdup_user+0x54/0xa0
[  565.216917]  ? copy_mount_options+0x1ec/0x2e0
[  565.221490]  ? copy_mnt_ns+0x8a0/0x8a0
[  565.225384]  SyS_mount+0xa8/0x120
[  565.228840]  ? copy_mnt_ns+0x8a0/0x8a0
[  565.232736]  do_syscall_64+0x1d5/0x640
[  565.236637]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  565.241825] RIP: 0033:0x45c479
[  565.245008] RSP: 002b:00007fe226087c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  565.252826] RAX: ffffffffffffffda RBX: 00007fe2260886d4 RCX: 000000000045c479
[  565.260269] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000020000100
[  565.267530] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  565.274802] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  565.282072] R13: 000000000000074a R14: 00000000004c9d34 R15: 000000000076bf2c
[  565.289356] 
[  565.290980] Allocated by task 19489:
[  565.294703]  save_stack+0x32/0xa0
[  565.298143]  kasan_kmalloc+0xbf/0xe0
[  565.301855]  kmem_cache_alloc_trace+0x14d/0x7b0
[  565.306527]  ceph_parse_options+0xb8/0xe80
[  565.310759]  ceph_mount+0x39f/0x164d
[  565.314470]  mount_fs+0x92/0x2a0
[  565.317822]  vfs_kern_mount.part.0+0x5b/0x3c0
[  565.322325]  do_mount+0x3c9/0x24f0
[  565.325868]  SyS_mount+0xa8/0x120
[  565.329331]  do_syscall_64+0x1d5/0x640
[  565.333216]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  565.338391] 
[  565.340010] Freed by task 19489:
[  565.343381]  save_stack+0x32/0xa0
[  565.346828]  kasan_slab_free+0x75/0xc0
[  565.350702]  kfree+0xcb/0x260
[  565.353807]  ceph_destroy_client+0x90/0xb0
[  565.358039]  ceph_mount+0xba0/0x164d
[  565.361741]  mount_fs+0x92/0x2a0
[  565.365103]  vfs_kern_mount.part.0+0x5b/0x3c0
[  565.369590]  do_mount+0x3c9/0x24f0
[  565.373116]  SyS_mount+0xa8/0x120
[  565.376557]  do_syscall_64+0x1d5/0x640
[  565.380431]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  565.385611] 
[  565.387227] The buggy address belongs to the object at ffff888074a83540
[  565.387227]  which belongs to the cache kmalloc-256 of size 256
[  565.399982] The buggy address is located 208 bytes inside of
[  565.399982]  256-byte region [ffff888074a83540, ffff888074a83640)
[  565.411854] The buggy address belongs to the page:
[  565.416793] page:ffffea0001d2a0c0 count:1 mapcount:0 mapping:ffff888074a83040 index:0x0
[  565.424933] flags: 0xfffe0000000100(slab)
[  565.429069] raw: 00fffe0000000100 ffff888074a83040 0000000000000000 000000010000000c
[  565.436942] raw: ffffea0001d39260 ffffea0002223d20 ffff88812fe567c0 0000000000000000
[  565.445381] page dumped because: kasan: bad access detected
[  565.451080] 
[  565.452693] Memory state around the buggy address:
[  565.457612]  ffff888074a83500: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb
[  565.464971]  ffff888074a83580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  565.472429] >ffff888074a83600: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  565.479787]                          ^
[  565.483684]  ffff888074a83680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  565.491138]  ffff888074a83700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  565.498489] ==================================================================
[  565.505934] Disabling lock debugging due to kernel taint
[  565.516388] Node 1 active_anon:3459484kB inactive_anon:0kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:4kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  565.542822] Kernel panic - not syncing: panic_on_warn set ...
[  565.542822] 
[  565.542833] CPU: 0 PID: 19489 Comm: syz-executor.1 Tainted: G    B           4.14.172-syzkaller #0
[  565.542837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  565.542841] Call Trace:
[  565.542862]  dump_stack+0x13e/0x194
[  565.542871]  panic+0x1f9/0x42d
[  565.542878]  ? add_taint.cold+0x16/0x16
[  565.542886]  ? preempt_schedule_common+0x4a/0xc0
[  565.542896]  ? ceph_destroy_options+0xda/0x100
[  565.542905]  ? ___preempt_schedule+0x16/0x18
[  565.542914]  ? ceph_destroy_options+0xda/0x100
[  565.542923]  kasan_end_report+0x43/0x49
[  565.542937]  kasan_report.cold+0x12f/0x2ae
[  565.551079] Node 0 
[  565.559611]  ceph_destroy_options+0xda/0x100
[  565.559625]  ceph_mount+0xbc7/0x164d
[  565.569108] DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  565.571917]  mount_fs+0x92/0x2a0
[  565.571928]  vfs_kern_mount.part.0+0x5b/0x3c0
[  565.571946]  do_mount+0x3c9/0x24f0
[  565.575586] lowmem_reserve[]:
[  565.578755]  ? copy_mount_string+0x40/0x40
[  565.578764]  ? __might_fault+0x177/0x1b0
[  565.578821]  ? _copy_from_user+0x94/0x100
[  565.582891]  0
[  565.587559]  ? memdup_user+0x54/0xa0
[  565.587567]  ? copy_mount_options+0x1ec/0x2e0
[  565.587577]  ? copy_mnt_ns+0x8a0/0x8a0
[  565.592219]  2557
[  565.596667]  SyS_mount+0xa8/0x120
[  565.596675]  ? copy_mnt_ns+0x8a0/0x8a0
[  565.596685]  do_syscall_64+0x1d5/0x640
[  565.596699]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  565.601416]  2557
[  565.605371] RIP: 0033:0x45c479
[  565.609617]  2557
[  565.611937] RSP: 002b:00007fe226087c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  565.611945] RAX: ffffffffffffffda RBX: 00007fe2260886d4 RCX: 000000000045c479
[  565.611949] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000020000100
[  565.611953] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  565.611957] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  565.611960] R13: 000000000000074a R14: 00000000004c9d34 R15: 000000000076bf2c
[  565.613568] Kernel Offset: disabled
[  565.762673] Rebooting in 86400 seconds..