ne/Google Compute Engine, BIOS Google 01/01/2011 [ 2819.481993] Call Trace: [ 2819.484802] dump_stack+0x1b2/0x283 [ 2819.488505] warn_alloc.cold+0x96/0x1cc [ 2819.492518] ? zone_watermark_ok_safe+0x220/0x220 [ 2819.497584] ? wait_for_completion_io+0x10/0x10 [ 2819.502841] __alloc_pages_nodemask+0x2127/0x2720 [ 2819.508058] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2819.513208] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2819.518073] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2819.523156] ? do_raw_spin_unlock+0x164/0x220 [ 2819.527785] alloc_pages_current+0x155/0x260 [ 2819.532701] kvm_mmu_create+0xda/0x1d0 [ 2819.536630] kvm_arch_vcpu_init+0x282/0x890 [ 2819.541403] ? alloc_pages_current+0x15d/0x260 [ 2819.546095] kvm_vcpu_init+0x26d/0x360 [ 2819.550174] vmx_create_vcpu+0xef/0x29a0 [ 2819.554537] ? __mutex_unlock_slowpath+0x75/0x770 [ 2819.559590] ? _raw_spin_unlock_irq+0x24/0x80 [ 2819.564444] ? alloc_loaded_vmcs+0x240/0x240 [ 2819.568876] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2819.573742] kvm_vm_ioctl+0x4ca/0x13e0 [ 2819.577674] ? __schedule+0x893/0x1de0 [ 2819.581581] ? kvm_vcpu_release+0xa0/0xa0 [ 2819.585762] ? retint_kernel+0x2d/0x2d [ 2819.589749] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2819.594809] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2819.599600] ? retint_kernel+0x2d/0x2d [ 2819.603529] ? do_vfs_ioctl+0xc8c/0xff0 [ 2819.607526] ? kvm_vcpu_release+0xa0/0xa0 [ 2819.611711] do_vfs_ioctl+0x75a/0xff0 [ 2819.615541] ? selinux_inode_setxattr+0x730/0x730 [ 2819.621151] ? ioctl_preallocate+0x1a0/0x1a0 [ 2819.625586] ? lock_downgrade+0x740/0x740 [ 2819.629766] ? __fget+0x225/0x360 [ 2819.633241] ? security_file_ioctl+0x83/0xb0 [ 2819.637674] SyS_ioctl+0x7f/0xb0 [ 2819.641069] ? do_vfs_ioctl+0xff0/0xff0 [ 2819.645092] do_syscall_64+0x1d5/0x640 [ 2819.649113] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2819.654319] RIP: 0033:0x45ce69 [ 2819.657514] RSP: 002b:00007ff3b8e13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2819.665247] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2819.672529] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2819.679914] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2819.687394] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c 22:33:14 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000000507800000f70000000000000000", @ANYRES32=r3, @ANYBLOB="0000639bf8a15ae3aa477ac9124258a3000000000100280003000000010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000810500000000000000000000009c", @ANYRESHEX, @ANYBLOB="00007479f037cc4cf544128009000100766c616e000000000c000280060001000000000008000500", @ANYRES16=r1, @ANYRES16=r1, @ANYRESHEX], 0x44}, 0x1, 0x0, 0x0, 0x10814}, 0x20000d4) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty, 0x100}, 0xffffffffffffff3f) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r4, 0x0, 0x18) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 22:33:14 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 2819.694688] R13: 00007fffdf1aef2f R14: 00007ff3b8e149c0 R15: 000000000118bf2c [ 2819.774130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1797 sclass=netlink_route_socket pid=3867 comm=syz-executor.2 [ 2819.805793] Mem-Info: [ 2819.812960] active_anon:429842 inactive_anon:8460 isolated_anon:0 22:33:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2819.812960] active_file:30098 inactive_file:15072 isolated_file:2 [ 2819.812960] unevictable:149081 dirty:209 writeback:0 unstable:0 [ 2819.812960] slab_reclaimable:20127 slab_unreclaimable:255805 [ 2819.812960] mapped:62087 shmem:179355 pagetables:64934 bounce:0 [ 2819.812960] free:513644 free_pcp:358 free_cma:0 [ 2819.855146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1797 sclass=netlink_route_socket pid=3870 comm=syz-executor.2 22:33:15 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 2819.861681] Node 0 active_anon:1381052kB inactive_anon:17280kB active_file:32kB inactive_file:4kB unevictable:211764kB isolated(anon):0kB isolated(file):0kB mapped:217120kB dirty:8kB writeback:0kB shmem:245736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 892928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2819.926187] Node 1 active_anon:338312kB inactive_anon:16560kB active_file:120380kB inactive_file:60296kB unevictable:384560kB isolated(anon):0kB isolated(file):0kB mapped:31932kB dirty:852kB writeback:0kB shmem:471684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2820.005805] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:112kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2820.076904] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2820.083784] Node 0 DMA32 free:35464kB min:36272kB low:45340kB high:54408kB active_anon:1381052kB inactive_anon:17280kB active_file:32kB inactive_file:4kB unevictable:211652kB writepending:8kB present:3129332kB managed:2621196kB mlocked:60kB kernel_stack:22304kB pagetables:60160kB bounce:0kB free_pcp:560kB local_pcp:328kB free_cma:0kB [ 2820.120982] lowmem_reserve[]: 0 0 0 0 0 [ 2820.126277] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2820.157902] lowmem_reserve[]: 0 0 0 0 0 [ 2820.164114] Node 1 Normal free:2009008kB min:53612kB low:67012kB high:80412kB active_anon:338212kB inactive_anon:16560kB active_file:120380kB inactive_file:60296kB unevictable:384560kB writepending:852kB present:3932160kB managed:3870192kB mlocked:4kB kernel_stack:73728kB pagetables:199456kB bounce:0kB free_pcp:1320kB local_pcp:648kB free_cma:0kB [ 2820.200367] lowmem_reserve[]: 0 0 0 0 0 [ 2820.205777] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (U) 0*64kB 2*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (ME) = 10316kB [ 2820.223900] Node 0 DMA32: 172*4kB (UME) 306*8kB (UMEH) 336*16kB (UME) 198*32kB (UME) 62*64kB (MH) 32*128kB (ME) 17*256kB (MEH) 12*512kB (UMEH) 2*1024kB (UH) 0*2048kB 0*4096kB = 35456kB [ 2820.242086] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2820.254135] Node 1 Normal: 97*4kB (UME) 38*8kB (ME) 43*16kB (UME) 9*32kB (UME) 1*64kB (U) 3*128kB (UME) 2*256kB (UE) 1*512kB (U) 1*1024kB (E) 3*2048kB (UME) 488*4096kB (M) = 2009156kB [ 2820.272755] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2820.282311] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2820.291545] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2820.300937] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2820.310023] 220799 total pagecache pages [ 2820.314121] 0 pages in swap cache [ 2820.317754] Swap cache stats: add 0, delete 0, find 0/0 [ 2820.323609] Free swap = 0kB [ 2820.326775] Total swap = 0kB [ 2820.330457] 1965979 pages RAM [ 2820.333571] 0 pages HighMem/MovableOnly [ 2820.337667] 339072 pages reserved [ 2820.341637] 0 pages cma reserved 22:33:16 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:33:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:16 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000000c0)={r6}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={r6, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}}, &(0x7f0000000100)=0x84) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:33:16 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 22:33:16 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) r2 = getpid() prctl$PR_SET_ENDIAN(0x14, 0x2) sched_setattr(r2, &(0x7f0000000300)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000080)=r2) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 22:33:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:17 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 2822.260543] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2822.273570] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2822.281848] CPU: 0 PID: 3898 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2822.289871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2822.299778] Call Trace: [ 2822.302381] dump_stack+0x1b2/0x283 [ 2822.306554] warn_alloc.cold+0x96/0x1cc [ 2822.310560] ? zone_watermark_ok_safe+0x220/0x220 [ 2822.315554] ? wait_for_completion_io+0x10/0x10 [ 2822.320255] __alloc_pages_nodemask+0x2127/0x2720 [ 2822.325144] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2822.330107] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2822.335002] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2822.339874] ? do_raw_spin_unlock+0x164/0x220 [ 2822.344416] alloc_pages_current+0x155/0x260 [ 2822.348850] kvm_mmu_create+0xda/0x1d0 [ 2822.352756] kvm_arch_vcpu_init+0x282/0x890 [ 2822.357292] ? alloc_pages_current+0x15d/0x260 [ 2822.362022] kvm_vcpu_init+0x26d/0x360 [ 2822.365936] vmx_create_vcpu+0xef/0x29a0 [ 2822.370035] ? __mutex_unlock_slowpath+0x75/0x770 [ 2822.374903] ? drop_futex_key_refs+0x2e/0xa0 [ 2822.379421] ? alloc_loaded_vmcs+0x240/0x240 [ 2822.383850] ? __lock_acquire+0x5fc/0x3f20 [ 2822.388219] kvm_vm_ioctl+0x4ca/0x13e0 [ 2822.392129] ? kvm_vcpu_release+0xa0/0xa0 [ 2822.396301] ? perf_trace_lock+0xf7/0x490 [ 2822.400471] ? check_preemption_disabled+0x35/0x240 [ 2822.405510] ? check_preemption_disabled+0x35/0x240 [ 2822.410552] ? perf_trace_lock+0xf7/0x490 [ 2822.414721] ? perf_trace_lock_acquire+0x510/0x510 [ 2822.419674] ? perf_trace_lock_acquire+0x510/0x510 [ 2822.424641] ? lock_acquire+0x170/0x3f0 [ 2822.428633] ? kvm_vcpu_release+0xa0/0xa0 [ 2822.432819] do_vfs_ioctl+0x75a/0xff0 [ 2822.436640] ? selinux_inode_setxattr+0x730/0x730 [ 2822.441507] ? ioctl_preallocate+0x1a0/0x1a0 [ 2822.445932] ? lock_downgrade+0x740/0x740 [ 2822.450128] ? __fget+0x225/0x360 [ 2822.453604] ? security_file_ioctl+0x83/0xb0 [ 2822.458110] SyS_ioctl+0x7f/0xb0 [ 2822.461502] ? do_vfs_ioctl+0xff0/0xff0 [ 2822.465502] do_syscall_64+0x1d5/0x640 [ 2822.469450] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2822.474749] RIP: 0033:0x45ce69 [ 2822.478035] RSP: 002b:00007ff3b8e13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2822.485761] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2822.493044] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2822.500419] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2822.507695] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2822.514982] R13: 00007fffdf1aef2f R14: 00007ff3b8e149c0 R15: 000000000118bf2c 22:33:17 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000140), 0x4) r1 = getpid() sched_setattr(r1, &(0x7f0000000300)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$setopts(0x4200, r1, 0x10060000000000, 0x100045) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_GET_NR_MMU_PAGES(r5, 0xae45, 0x7fffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:33:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2822.634830] Mem-Info: [ 2822.637869] active_anon:429915 inactive_anon:8460 isolated_anon:0 [ 2822.637869] active_file:30104 inactive_file:15078 isolated_file:0 [ 2822.637869] unevictable:149081 dirty:220 writeback:0 unstable:0 [ 2822.637869] slab_reclaimable:20144 slab_unreclaimable:255930 [ 2822.637869] mapped:62050 shmem:179355 pagetables:64996 bounce:0 [ 2822.637869] free:513367 free_pcp:429 free_cma:0 22:33:18 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:33:18 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$llc(r2, &(0x7f0000000080)={0x1a, 0x104, 0x8, 0x40, 0x3f, 0x1, @dev={[], 0x33}}, 0x10) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x9000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x5) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 2822.762751] Node 0 active_anon:1381052kB inactive_anon:17280kB active_file:32kB inactive_file:4kB unevictable:211764kB isolated(anon):0kB isolated(file):0kB mapped:217120kB dirty:8kB writeback:0kB shmem:245736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 892928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2822.945405] Node 1 active_anon:338628kB inactive_anon:16560kB active_file:120388kB inactive_file:60324kB unevictable:384560kB isolated(anon):0kB isolated(file):0kB mapped:31940kB dirty:896kB writeback:0kB shmem:471684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2823.130577] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:112kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2823.278777] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2823.304045] Node 0 DMA32 free:35456kB min:36272kB low:45340kB high:54408kB active_anon:1381052kB inactive_anon:17280kB active_file:36kB inactive_file:0kB unevictable:211652kB writepending:8kB present:3129332kB managed:2621196kB mlocked:60kB kernel_stack:22304kB pagetables:60160kB bounce:0kB free_pcp:588kB local_pcp:232kB free_cma:0kB 22:33:18 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x404182, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000180)=0x1000001, 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)={0x1, r1}) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000100)) r5 = dup(r3) clock_getres(0x3, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 2823.472909] lowmem_reserve[]: 0 0 0 0 0 [ 2823.504118] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 22:33:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:18 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 2823.700331] lowmem_reserve[]: 0 0 0 0 0 [ 2823.731038] Node 1 Normal free:2008492kB min:53612kB low:67012kB high:80412kB active_anon:338728kB inactive_anon:16560kB active_file:120388kB inactive_file:60324kB unevictable:384560kB writepending:896kB present:3932160kB managed:3870192kB mlocked:4kB kernel_stack:73920kB pagetables:200112kB bounce:0kB free_pcp:740kB local_pcp:548kB free_cma:0kB [ 2823.875118] lowmem_reserve[]: 0 0 0 0 0 [ 2823.892103] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (U) 0*64kB 2*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (ME) = 10316kB [ 2823.952787] Node 0 DMA32: 172*4kB (UME) 305*8kB (UME) 336*16kB (UME) 200*32kB (UMEH) 62*64kB (MH) 32*128kB (ME) 17*256kB (MEH) 12*512kB (UMEH) 2*1024kB (UH) 0*2048kB 0*4096kB = 35512kB [ 2824.021501] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2824.065795] Node 1 Normal: 85*4kB (UME) 145*8kB (UME) 40*16kB (UE) 10*32kB (UME) 0*64kB 5*128kB (UME) 3*256kB (UME) 0*512kB 3*1024kB (UME) 1*2048kB (E) 488*4096kB (M) = 2007836kB 22:33:19 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup3(r3, r0, 0x80000) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000040)) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 2824.131700] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2824.169902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2824.193820] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2824.222004] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2824.254328] 220808 total pagecache pages [ 2824.262727] 0 pages in swap cache [ 2824.266757] Swap cache stats: add 0, delete 0, find 0/0 [ 2824.275555] Free swap = 0kB [ 2824.282543] Total swap = 0kB [ 2824.286845] 1965979 pages RAM [ 2824.293562] 0 pages HighMem/MovableOnly [ 2824.301374] 339072 pages reserved [ 2824.305935] 0 pages cma reserved 22:33:19 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) [ 2824.600855] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2824.613583] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2824.624864] CPU: 0 PID: 3983 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2824.632706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2824.642071] Call Trace: [ 2824.644713] dump_stack+0x1b2/0x283 [ 2824.648368] warn_alloc.cold+0x96/0x1cc [ 2824.652371] ? zone_watermark_ok_safe+0x220/0x220 [ 2824.657249] ? wait_for_completion_io+0x10/0x10 [ 2824.661949] __alloc_pages_nodemask+0x2127/0x2720 [ 2824.666927] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2824.671839] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2824.677010] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2824.682048] ? do_raw_spin_unlock+0x164/0x220 [ 2824.686574] alloc_pages_current+0x155/0x260 [ 2824.691024] kvm_mmu_create+0xda/0x1d0 [ 2824.695217] kvm_arch_vcpu_init+0x282/0x890 22:33:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:19 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) [ 2824.699559] ? alloc_pages_current+0x15d/0x260 [ 2824.704174] kvm_vcpu_init+0x26d/0x360 [ 2824.708075] vmx_create_vcpu+0xef/0x29a0 [ 2824.712154] ? __mutex_unlock_slowpath+0x75/0x770 [ 2824.717063] ? drop_futex_key_refs+0x2e/0xa0 [ 2824.721491] ? alloc_loaded_vmcs+0x240/0x240 [ 2824.725917] ? __lock_acquire+0x5fc/0x3f20 [ 2824.730213] kvm_vm_ioctl+0x4ca/0x13e0 [ 2824.734252] ? kvm_vcpu_release+0xa0/0xa0 [ 2824.738426] ? perf_trace_lock+0xf7/0x490 [ 2824.742587] ? check_preemption_disabled+0x35/0x240 22:33:19 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 2824.747693] ? check_preemption_disabled+0x35/0x240 [ 2824.752736] ? perf_trace_lock+0xf7/0x490 [ 2824.756904] ? perf_trace_lock_acquire+0x510/0x510 [ 2824.761861] ? perf_trace_lock_acquire+0x510/0x510 [ 2824.766887] ? lock_acquire+0x170/0x3f0 [ 2824.770985] ? kvm_vcpu_release+0xa0/0xa0 [ 2824.775161] do_vfs_ioctl+0x75a/0xff0 [ 2824.778976] ? selinux_inode_setxattr+0x730/0x730 [ 2824.783846] ? ioctl_preallocate+0x1a0/0x1a0 [ 2824.788284] ? lock_downgrade+0x740/0x740 [ 2824.792598] ? __fget+0x225/0x360 [ 2824.796076] ? security_file_ioctl+0x83/0xb0 [ 2824.800508] SyS_ioctl+0x7f/0xb0 [ 2824.803895] ? do_vfs_ioctl+0xff0/0xff0 [ 2824.807945] do_syscall_64+0x1d5/0x640 [ 2824.811864] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2824.817072] RIP: 0033:0x45ce69 [ 2824.820388] RSP: 002b:00007ff3b8e13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2824.828114] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2824.835397] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2824.842679] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2824.849957] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2824.857349] R13: 00007fffdf1aef2f R14: 00007ff3b8e149c0 R15: 000000000118bf2c 22:33:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2824.900024] Mem-Info: [ 2824.902798] active_anon:429722 inactive_anon:8460 isolated_anon:0 [ 2824.902798] active_file:30109 inactive_file:15337 isolated_file:0 [ 2824.902798] unevictable:149081 dirty:233 writeback:0 unstable:0 [ 2824.902798] slab_reclaimable:20132 slab_unreclaimable:255994 [ 2824.902798] mapped:62044 shmem:179355 pagetables:65041 bounce:0 [ 2824.902798] free:513310 free_pcp:156 free_cma:0 22:33:20 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2824.975660] Node 0 active_anon:1381044kB inactive_anon:17280kB active_file:36kB inactive_file:0kB unevictable:211764kB isolated(anon):0kB isolated(file):0kB mapped:217120kB dirty:8kB writeback:0kB shmem:245736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 892928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2825.023256] Node 1 active_anon:337644kB inactive_anon:16560kB active_file:120400kB inactive_file:61648kB unevictable:384560kB isolated(anon):0kB isolated(file):0kB mapped:31056kB dirty:924kB writeback:0kB shmem:471684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2825.057306] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:112kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2825.087144] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2825.094033] Node 0 DMA32 free:36116kB min:36272kB low:45340kB high:54408kB active_anon:1381044kB inactive_anon:17280kB active_file:36kB inactive_file:0kB unevictable:211652kB writepending:8kB present:3129332kB managed:2621196kB mlocked:60kB kernel_stack:22272kB pagetables:60160kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 2825.145004] lowmem_reserve[]: 0 0 0 0 0 [ 2825.154273] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 22:33:20 executing program 4: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2825.193458] lowmem_reserve[]: 0 0 0 0 0 [ 2825.205113] Node 1 Normal free:2007596kB min:53612kB low:67012kB high:80412kB active_anon:337344kB inactive_anon:16560kB active_file:120400kB inactive_file:62048kB unevictable:384560kB writepending:924kB present:3932160kB managed:3870192kB mlocked:4kB kernel_stack:74208kB pagetables:200300kB bounce:0kB free_pcp:548kB local_pcp:240kB free_cma:0kB [ 2825.291707] lowmem_reserve[]: 0 0 0 0 0 [ 2825.296620] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (U) 0*64kB 2*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (ME) = 10316kB [ 2825.321716] Node 0 DMA32: 315*4kB (UME) 304*8kB (ME) 336*16kB (UME) 200*32kB (UME) 62*64kB (UM) 32*128kB (ME) 17*256kB (UME) 12*512kB (UME) 2*1024kB (U) 0*2048kB 0*4096kB = 36076kB [ 2825.356442] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2825.374075] Node 1 Normal: 2*4kB (UE) 30*8kB (UE) 18*16kB (ME) 6*32kB (UME) 1*64kB (U) 6*128kB (UME) 6*256kB (UME) 0*512kB 3*1024kB (UME) 1*2048kB (E) 488*4096kB (M) = 2007064kB [ 2825.399692] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2825.414642] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2825.432477] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2825.442832] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2825.456903] 220813 total pagecache pages [ 2825.461654] 0 pages in swap cache [ 2825.465231] Swap cache stats: add 0, delete 0, find 0/0 [ 2825.476292] Free swap = 0kB [ 2825.480424] Total swap = 0kB [ 2825.483766] 1965979 pages RAM [ 2825.487169] 0 pages HighMem/MovableOnly [ 2825.496590] 339072 pages reserved [ 2825.502257] 0 pages cma reserved 22:33:21 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:21 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 22:33:21 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x50, 0x1401, 0x100, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x9}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x802}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 2826.000237] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2826.067673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5121 sclass=netlink_route_socket pid=4050 comm=syz-executor.2 [ 2826.099369] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2826.153651] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2826.174735] CPU: 0 PID: 4036 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2826.182574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2826.191975] Call Trace: [ 2826.194757] dump_stack+0x1b2/0x283 [ 2826.198414] warn_alloc.cold+0x96/0x1cc [ 2826.202415] ? zone_watermark_ok_safe+0x220/0x220 [ 2826.207315] ? wait_for_completion_io+0x10/0x10 [ 2826.212361] __alloc_pages_nodemask+0x2127/0x2720 [ 2826.217248] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2826.222116] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2826.227081] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2826.231963] ? do_raw_spin_unlock+0x164/0x220 [ 2826.236500] alloc_pages_current+0x155/0x260 [ 2826.241040] kvm_mmu_create+0xda/0x1d0 [ 2826.244957] kvm_arch_vcpu_init+0x282/0x890 [ 2826.249490] ? alloc_pages_current+0x15d/0x260 [ 2826.254267] kvm_vcpu_init+0x26d/0x360 [ 2826.258182] vmx_create_vcpu+0xef/0x29a0 [ 2826.262375] ? __mutex_unlock_slowpath+0x75/0x770 [ 2826.267238] ? drop_futex_key_refs+0x2e/0xa0 [ 2826.271782] ? alloc_loaded_vmcs+0x240/0x240 [ 2826.276218] ? __lock_acquire+0x5fc/0x3f20 [ 2826.280501] kvm_vm_ioctl+0x4ca/0x13e0 [ 2826.284421] ? kvm_vcpu_release+0xa0/0xa0 [ 2826.288643] ? perf_trace_lock+0xf7/0x490 [ 2826.292825] ? check_preemption_disabled+0x35/0x240 [ 2826.298085] ? check_preemption_disabled+0x35/0x240 [ 2826.303141] ? perf_trace_lock+0xf7/0x490 [ 2826.307312] ? perf_trace_lock_acquire+0x510/0x510 [ 2826.312354] ? perf_trace_lock_acquire+0x510/0x510 [ 2826.317301] ? lock_acquire+0x170/0x3f0 [ 2826.321393] ? kvm_vcpu_release+0xa0/0xa0 [ 2826.325577] do_vfs_ioctl+0x75a/0xff0 [ 2826.329395] ? selinux_inode_setxattr+0x730/0x730 [ 2826.334251] ? ioctl_preallocate+0x1a0/0x1a0 [ 2826.338673] ? lock_downgrade+0x740/0x740 [ 2826.342873] ? __fget+0x225/0x360 [ 2826.346433] ? security_file_ioctl+0x83/0xb0 [ 2826.350863] SyS_ioctl+0x7f/0xb0 [ 2826.354241] ? do_vfs_ioctl+0xff0/0xff0 [ 2826.358247] do_syscall_64+0x1d5/0x640 [ 2826.362210] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2826.367684] RIP: 0033:0x45ce69 [ 2826.370882] RSP: 002b:00007ff3b8e13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2826.379579] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2826.386861] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2826.394242] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2826.401568] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2826.408855] R13: 00007fffdf1aef2f R14: 00007ff3b8e149c0 R15: 000000000118bf2c [ 2826.435804] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2826.452809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5121 sclass=netlink_route_socket pid=4035 comm=syz-executor.2 [ 2826.505486] Mem-Info: [ 2826.509546] active_anon:429302 inactive_anon:8460 isolated_anon:0 [ 2826.509546] active_file:30113 inactive_file:15847 isolated_file:0 [ 2826.509546] unevictable:149081 dirty:21 writeback:0 unstable:0 [ 2826.509546] slab_reclaimable:20124 slab_unreclaimable:255692 [ 2826.509546] mapped:62051 shmem:179355 pagetables:65196 bounce:0 [ 2826.509546] free:513273 free_pcp:303 free_cma:0 [ 2826.562911] Node 0 active_anon:1381044kB inactive_anon:17280kB active_file:36kB inactive_file:0kB unevictable:211764kB isolated(anon):0kB isolated(file):0kB mapped:217120kB dirty:8kB writeback:0kB shmem:245736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 892928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2826.633381] Node 1 active_anon:336164kB inactive_anon:16560kB active_file:120416kB inactive_file:63388kB unevictable:384560kB isolated(anon):0kB isolated(file):0kB mapped:31184kB dirty:76kB writeback:0kB shmem:471684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 22:33:21 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 22:33:21 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="0000ffff000000dfc74581a3166ade764958d1d8", @ANYRES32=0x0, @ANYBLOB="00000000000000000c0002800600010000000001080005004b9e26ff42d4e4c94811125e5e6c4119ead87789ca0bde268ac328e542eff6c4487f3be329a44d9c7285c4a9011ecbcc63071d3e4af1e5b545a9d17aecc28897437bc45b8bc2419500a45bf837f6453d55", @ANYRES32], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000105f448f60b547", @ANYRES32=0x0, @ANYBLOB="14af94ae032bd437dde45f414956698e1e7959148c0a373de10566f5f65a168a8013f6040d90f8f9d946de5bf872c4d697d94f147123e2cf6708285e0848ec4fc41440dc7afae21beb41415e73"], 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x8, 0x8, 0x4c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={[], [], @loopback}, 0x20, 0x40, 0x5, 0x407b}}) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x164) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) r2 = getpid() sched_setattr(r2, &(0x7f0000000300)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) wait4(r2, 0x0, 0x20000000, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000200)={0xffffffff, 0x80000001, 0x6, 0x5, 0x4}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 2826.665614] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:112kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2826.720345] lowmem_reserve[]: 0 2557 2557 2557 2557 22:33:22 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2826.743512] Node 0 DMA32 free:36060kB min:36272kB low:45340kB high:54408kB active_anon:1381044kB inactive_anon:17280kB active_file:36kB inactive_file:0kB unevictable:211652kB writepending:8kB present:3129332kB managed:2621196kB mlocked:60kB kernel_stack:22272kB pagetables:60160kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB 22:33:22 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:33:22 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @empty, 0x8000}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)={0x0, 0x3, 0x4, 0xe000, 0x5, {r3, r4/1000+10000}, {0x2, 0x2, 0x7, 0x5, 0x3, 0x9, "cfbad3c3"}, 0x800, 0x4, @userptr, 0x3, 0x0, r5}) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) [ 2826.891453] lowmem_reserve[]: 0 0 0 0 0 [ 2826.923165] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2827.084302] lowmem_reserve[]: 0 0 0 0 0 [ 2827.109908] Node 1 Normal free:2006232kB min:53612kB low:67012kB high:80412kB active_anon:336332kB inactive_anon:16560kB active_file:120424kB inactive_file:64004kB unevictable:384560kB writepending:188kB present:3932160kB managed:3870192kB mlocked:4kB kernel_stack:74272kB pagetables:200888kB bounce:0kB free_pcp:480kB local_pcp:164kB free_cma:0kB [ 2827.230151] lowmem_reserve[]: 0 0 0 0 0 [ 2827.245133] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (U) 0*64kB 2*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (ME) = 10316kB [ 2827.279171] Node 0 DMA32: 315*4kB (UME) 304*8kB (ME) 337*16kB (UMEH) 198*32kB (UME) 62*64kB (MH) 32*128kB (ME) 17*256kB (MEH) 12*512kB (UMEH) 2*1024kB (UH) 0*2048kB 0*4096kB = 36028kB [ 2827.306189] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2827.319900] Node 1 Normal: 1*4kB (E) 78*8kB (UME) 12*16kB (E) 11*32kB (UME) 1*64kB (U) 2*128kB (ME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 488*4096kB (M) = 2005460kB [ 2827.342740] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2827.353867] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2827.366581] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2827.379702] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2827.390053] 220829 total pagecache pages [ 2827.405380] 0 pages in swap cache [ 2827.416550] Swap cache stats: add 0, delete 0, find 0/0 [ 2827.437330] Free swap = 0kB [ 2827.449892] Total swap = 0kB [ 2827.459782] 1965979 pages RAM [ 2827.471361] 0 pages HighMem/MovableOnly [ 2827.484328] 339072 pages reserved [ 2827.496185] 0 pages cma reserved 22:33:22 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000000c0)=r2) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000140)=0x4, 0x4) ptrace$setopts(0x4206, r3, 0x7fffffff, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000100)=0x4) tkill(r3, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 22:33:22 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="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"/278, @ANYRESOCT, @ANYRES64, @ANYRES16, @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x809}, 0x4004800) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="64000000d78729b32708fb58ff56494c966c9511090c850c829992751bbf08af61f07f721ec72b9880c2f0f05c785eb7", @ANYRES16=r4, @ANYBLOB="100027a19014ce7f9ebd7000fbdbdf250300000008000500ac1414aa08000400ac1e000108000400ffffffff14000200fc010600000000000000000000000001050001000000000014080300fc020000000000000000000000000000050001000000000028f6e8e3f54b1261400be9755feefb1f23c288df40579e490225e824a712b5ccd3312ebacec4a320f3c13ed20ded41b439ea85d76bf41d8bcecc6dab208d44fb1d27ccefc871c058db47eeac6111786c987cabc639c84de38a4c31c246b84b7ecd41dc45869d0bdfbb9442486951859db03272a4301cf0cb2d3d9cce3de5d07dee0304200578b8216426582c1f792fc125f749c9711bf4c6"], 0x64}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x84, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:hwdata_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x84}, 0x1, 0x0, 0x0, 0x200400c0}, 0x800) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 22:33:22 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 22:33:22 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:23 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0x1f, 0x6, 0x2, 0x3, 0x80, 0x5, 0x3, 0x50, 0x2, 0x2, 0x0, 0x0, 0x1f, 0x4d}, 0xe) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 2828.257221] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2828.302476] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2828.322799] CPU: 1 PID: 4093 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2828.330640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2828.340059] Call Trace: [ 2828.342666] dump_stack+0x1b2/0x283 [ 2828.346409] warn_alloc.cold+0x96/0x1cc [ 2828.350414] ? zone_watermark_ok_safe+0x220/0x220 [ 2828.355298] ? wait_for_completion_io+0x10/0x10 [ 2828.360005] __alloc_pages_nodemask+0x2127/0x2720 [ 2828.364894] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2828.369767] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2828.375950] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2828.381020] ? do_raw_spin_unlock+0x164/0x220 [ 2828.385554] alloc_pages_current+0x155/0x260 [ 2828.389988] kvm_mmu_create+0xda/0x1d0 [ 2828.393907] kvm_arch_vcpu_init+0x282/0x890 [ 2828.398325] ? alloc_pages_current+0x15d/0x260 [ 2828.402938] kvm_vcpu_init+0x26d/0x360 [ 2828.406956] vmx_create_vcpu+0xef/0x29a0 [ 2828.411141] ? __mutex_unlock_slowpath+0x75/0x770 [ 2828.416020] ? drop_futex_key_refs+0x2e/0xa0 [ 2828.420457] ? alloc_loaded_vmcs+0x240/0x240 [ 2828.424891] ? __lock_acquire+0x5fc/0x3f20 [ 2828.429645] kvm_vm_ioctl+0x4ca/0x13e0 [ 2828.433562] ? kvm_vcpu_release+0xa0/0xa0 [ 2828.437739] ? perf_trace_lock+0xf7/0x490 [ 2828.441910] ? check_preemption_disabled+0x35/0x240 [ 2828.446999] ? check_preemption_disabled+0x35/0x240 [ 2828.452131] ? perf_trace_lock+0xf7/0x490 [ 2828.456400] ? perf_trace_lock_acquire+0x510/0x510 [ 2828.461442] ? perf_trace_lock_acquire+0x510/0x510 [ 2828.466399] ? lock_acquire+0x170/0x3f0 [ 2828.470578] ? kvm_vcpu_release+0xa0/0xa0 [ 2828.474765] do_vfs_ioctl+0x75a/0xff0 [ 2828.478604] ? selinux_inode_setxattr+0x730/0x730 [ 2828.484107] ? ioctl_preallocate+0x1a0/0x1a0 [ 2828.489154] ? lock_downgrade+0x740/0x740 [ 2828.493640] ? __fget+0x225/0x360 [ 2828.497124] ? security_file_ioctl+0x83/0xb0 [ 2828.501562] SyS_ioctl+0x7f/0xb0 [ 2828.504961] ? do_vfs_ioctl+0xff0/0xff0 [ 2828.508986] do_syscall_64+0x1d5/0x640 [ 2828.512929] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2828.518223] RIP: 0033:0x45ce69 [ 2828.521424] RSP: 002b:00007ff3b8e13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2828.529240] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2828.536529] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2828.543998] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2828.551282] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2828.558563] R13: 00007fffdf1aef2f R14: 00007ff3b8e149c0 R15: 000000000118bf2c [ 2828.601507] Mem-Info: [ 2828.604685] active_anon:429060 inactive_anon:8460 isolated_anon:0 [ 2828.604685] active_file:30119 inactive_file:16255 isolated_file:0 [ 2828.604685] unevictable:149081 dirty:43 writeback:0 unstable:0 [ 2828.604685] slab_reclaimable:20110 slab_unreclaimable:255880 [ 2828.604685] mapped:62058 shmem:179355 pagetables:65345 bounce:0 [ 2828.604685] free:512765 free_pcp:153 free_cma:0 22:33:23 executing program 4: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2828.643506] Node 0 active_anon:1381044kB inactive_anon:17280kB active_file:36kB inactive_file:0kB unevictable:211764kB isolated(anon):0kB isolated(file):0kB mapped:217120kB dirty:8kB writeback:0kB shmem:245736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 892928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 22:33:23 executing program 4: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2828.683806] Node 1 active_anon:335196kB inactive_anon:16560kB active_file:120440kB inactive_file:65020kB unevictable:384560kB isolated(anon):0kB isolated(file):0kB mapped:31112kB dirty:164kB writeback:0kB shmem:471684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2828.735097] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:112kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2828.796538] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2828.803152] Node 0 DMA32 free:36020kB min:36272kB low:45340kB high:54408kB active_anon:1381044kB inactive_anon:17280kB active_file:28kB inactive_file:8kB unevictable:211652kB writepending:8kB present:3129332kB managed:2621196kB mlocked:60kB kernel_stack:22272kB pagetables:60160kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 2828.836880] lowmem_reserve[]: 0 0 0 0 0 [ 2828.844238] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2828.872934] lowmem_reserve[]: 0 0 0 0 0 [ 2828.890183] Node 1 Normal free:2006700kB min:53612kB low:67012kB high:80412kB active_anon:335236kB inactive_anon:16560kB active_file:120456kB inactive_file:65140kB unevictable:384560kB writepending:304kB present:3932160kB managed:3870192kB mlocked:4kB kernel_stack:74144kB pagetables:201032kB bounce:0kB free_pcp:996kB local_pcp:512kB free_cma:0kB [ 2828.923719] lowmem_reserve[]: 0 0 0 0 0 [ 2828.931221] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (U) 0*64kB 2*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (ME) = 10316kB [ 2828.949092] Node 0 DMA32: 315*4kB (UME) 305*8kB (MEH) 336*16kB (UME) 198*32kB (UME) 62*64kB (MH) 32*128kB (ME) 17*256kB (MEH) 12*512kB (UMEH) 2*1024kB (UH) 0*2048kB 0*4096kB = 36020kB [ 2828.967235] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2828.981588] Node 1 Normal: 1*4kB (U) 261*8kB (UE) 17*16kB (UE) 9*32kB (UME) 1*64kB (M) 2*128kB (UE) 2*256kB (UE) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 488*4096kB (M) = 2006428kB [ 2829.000885] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2829.011482] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2829.022096] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2829.032840] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2829.043476] 220844 total pagecache pages [ 2829.049525] 0 pages in swap cache [ 2829.053641] Swap cache stats: add 0, delete 0, find 0/0 [ 2829.061953] Free swap = 0kB [ 2829.065601] Total swap = 0kB [ 2829.071771] 1965979 pages RAM [ 2829.075553] 0 pages HighMem/MovableOnly [ 2829.082420] 339072 pages reserved [ 2829.086590] 0 pages cma reserved 22:33:24 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 22:33:24 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000080)=0x2, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2a) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f00000000c0)={[{0x30, 0x0, 0x9, 0x3, 0x8, 0x3c, 0x81, 0x9, 0x6, 0x7, 0x40, 0xfd, 0x7}, {0x4, 0x2, 0x10, 0x20, 0x9, 0x81, 0x7, 0x0, 0x9c, 0x7, 0x80, 0x0, 0x6}, {0x0, 0x2, 0xff, 0xe9, 0x56, 0x40, 0x80, 0x57, 0x9, 0x80, 0xb6, 0x20, 0x1000}], 0x1}) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 22:33:24 executing program 4: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:24 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 22:33:24 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x800, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x3c}}, 0x8040) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={r5}) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 22:33:25 executing program 4: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) [ 2830.092719] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2830.119521] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2830.135123] CPU: 1 PID: 4126 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2830.142962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2830.152333] Call Trace: [ 2830.154942] dump_stack+0x1b2/0x283 [ 2830.158599] warn_alloc.cold+0x96/0x1cc [ 2830.162645] ? zone_watermark_ok_safe+0x220/0x220 [ 2830.167520] ? wait_for_completion_io+0x10/0x10 [ 2830.172221] __alloc_pages_nodemask+0x2127/0x2720 [ 2830.177112] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2830.181968] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2830.186839] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2830.191724] ? do_raw_spin_unlock+0x164/0x220 [ 2830.196391] alloc_pages_current+0x155/0x260 [ 2830.201189] kvm_mmu_create+0xda/0x1d0 [ 2830.205098] kvm_arch_vcpu_init+0x282/0x890 [ 2830.209430] ? alloc_pages_current+0x15d/0x260 [ 2830.214043] kvm_vcpu_init+0x26d/0x360 [ 2830.217949] vmx_create_vcpu+0xef/0x29a0 [ 2830.222047] ? __mutex_unlock_slowpath+0x75/0x770 [ 2830.226917] ? drop_futex_key_refs+0x2e/0xa0 [ 2830.231449] ? alloc_loaded_vmcs+0x240/0x240 [ 2830.235880] ? __lock_acquire+0x5fc/0x3f20 [ 2830.240225] kvm_vm_ioctl+0x4ca/0x13e0 [ 2830.244136] ? kvm_vcpu_release+0xa0/0xa0 [ 2830.248313] ? perf_trace_lock+0xf7/0x490 [ 2830.252492] ? check_preemption_disabled+0x35/0x240 [ 2830.257541] ? check_preemption_disabled+0x35/0x240 [ 2830.262621] ? perf_trace_lock+0xf7/0x490 [ 2830.266790] ? perf_trace_lock_acquire+0x510/0x510 [ 2830.271835] ? perf_trace_lock_acquire+0x510/0x510 [ 2830.276955] ? lock_acquire+0x170/0x3f0 [ 2830.280935] ? kvm_vcpu_release+0xa0/0xa0 [ 2830.285107] do_vfs_ioctl+0x75a/0xff0 [ 2830.289013] ? selinux_inode_setxattr+0x730/0x730 [ 2830.293952] ? ioctl_preallocate+0x1a0/0x1a0 [ 2830.298378] ? lock_downgrade+0x740/0x740 [ 2830.302589] ? __fget+0x225/0x360 [ 2830.306372] ? security_file_ioctl+0x83/0xb0 [ 2830.310899] SyS_ioctl+0x7f/0xb0 [ 2830.314275] ? do_vfs_ioctl+0xff0/0xff0 [ 2830.318652] do_syscall_64+0x1d5/0x640 [ 2830.322559] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2830.327752] RIP: 0033:0x45ce69 [ 2830.331015] RSP: 002b:00007ff3b8e13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2830.339415] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2830.346704] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2830.353986] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2830.361264] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2830.368850] R13: 00007fffdf1aef2f R14: 00007ff3b8e149c0 R15: 000000000118bf2c [ 2830.384717] Mem-Info: [ 2830.387209] active_anon:429057 inactive_anon:8461 isolated_anon:0 [ 2830.387209] active_file:30124 inactive_file:16298 isolated_file:0 [ 2830.387209] unevictable:149081 dirty:107 writeback:0 unstable:0 [ 2830.387209] slab_reclaimable:20137 slab_unreclaimable:255621 [ 2830.387209] mapped:62068 shmem:179355 pagetables:65325 bounce:0 [ 2830.387209] free:513083 free_pcp:60 free_cma:0 [ 2830.428762] Node 0 active_anon:1380980kB inactive_anon:17280kB active_file:40kB inactive_file:40kB unevictable:211764kB isolated(anon):0kB isolated(file):0kB mapped:217120kB dirty:8kB writeback:0kB shmem:245736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 892928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2830.459280] Node 1 active_anon:335248kB inactive_anon:16564kB active_file:120456kB inactive_file:65152kB unevictable:384560kB isolated(anon):0kB isolated(file):0kB mapped:31152kB dirty:420kB writeback:0kB shmem:471684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2830.490027] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:112kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2830.521110] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2830.526421] Node 0 DMA32 free:36000kB min:36272kB low:45340kB high:54408kB active_anon:1380980kB inactive_anon:17280kB active_file:40kB inactive_file:40kB unevictable:211652kB writepending:8kB present:3129332kB managed:2621196kB mlocked:60kB kernel_stack:22272kB pagetables:60160kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2830.558428] lowmem_reserve[]: 0 0 0 0 0 [ 2830.562641] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2830.591754] lowmem_reserve[]: 0 0 0 0 0 [ 2830.595762] Node 1 Normal free:2007068kB min:53612kB low:67012kB high:80412kB active_anon:335260kB inactive_anon:16564kB active_file:120456kB inactive_file:65164kB unevictable:384560kB writepending:440kB present:3932160kB managed:3870192kB mlocked:4kB kernel_stack:74176kB pagetables:201140kB bounce:0kB free_pcp:580kB local_pcp:8kB free_cma:0kB [ 2830.628385] lowmem_reserve[]: 0 0 0 0 0 [ 2830.632415] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (U) 0*64kB 2*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (ME) = 10316kB [ 2830.647150] Node 0 DMA32: 317*4kB (UME) 313*8kB (UME) 336*16kB (UME) 199*32kB (UME) 61*64kB (M) 32*128kB (ME) 17*256kB (UME) 12*512kB (UME) 2*1024kB (U) 0*2048kB 0*4096kB = 36060kB [ 2830.665058] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2830.676296] Node 1 Normal: 47*4kB (UME) 245*8kB (UME) 50*16kB (UME) 26*32kB (UME) 5*64kB (UM) 2*128kB (ME) 2*256kB (UE) 0*512kB 1*1024kB (E) 1*2048kB (E) 488*4096kB (M) = 2006788kB [ 2830.693969] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2830.703461] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2830.712696] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2830.722161] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2830.731564] 220853 total pagecache pages [ 2830.735646] 0 pages in swap cache [ 2830.739707] Swap cache stats: add 0, delete 0, find 0/0 [ 2830.745086] Free swap = 0kB [ 2830.749934] Total swap = 0kB [ 2830.753064] 1965979 pages RAM [ 2830.756160] 0 pages HighMem/MovableOnly [ 2830.760671] 339072 pages reserved [ 2830.764388] 0 pages cma reserved 22:33:26 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f00000000c0)={0x0, 0x1, 0x71, [], &(0x7f0000000080)=0xf8}) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'veth1_to_bond\x00', 0x800}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 22:33:26 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) listen(r3, 0x401) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:33:26 executing program 4: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 22:33:26 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f0000000080)={"470b5e8e498af5a76b7fa25077a0a6cb280c24987a963528df59da14d9c9", 0x1f, 0x1, 0x401, 0x40, 0x1f, 0x80, 0x4, 0x4, [0xcd, 0x68a1, 0x0, 0xf9, 0x8e, 0x9, 0xb8, 0x3, 0x3f, 0x2, 0x52, 0x3f, 0x4c5, 0x8, 0x80000000, 0x3f, 0x9, 0x80000001, 0x400]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040), 0x4) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000015c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000001600), &(0x7f0000001640)=0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 22:33:26 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 22:33:26 executing program 4: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) [ 2831.163932] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2831.223812] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2831.237173] CPU: 0 PID: 4160 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2831.245005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2831.254371] Call Trace: [ 2831.256993] dump_stack+0x1b2/0x283 [ 2831.260771] warn_alloc.cold+0x96/0x1cc [ 2831.264797] ? zone_watermark_ok_safe+0x220/0x220 [ 2831.269695] ? wait_for_completion_io+0x10/0x10 [ 2831.274393] __alloc_pages_nodemask+0x2127/0x2720 [ 2831.279280] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2831.284237] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2831.289133] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2831.294109] ? do_raw_spin_unlock+0x164/0x220 [ 2831.298759] alloc_pages_current+0x155/0x260 [ 2831.303268] kvm_mmu_create+0xda/0x1d0 [ 2831.307183] kvm_arch_vcpu_init+0x282/0x890 [ 2831.311539] ? alloc_pages_current+0x15d/0x260 [ 2831.316149] kvm_vcpu_init+0x26d/0x360 [ 2831.320058] vmx_create_vcpu+0xef/0x29a0 [ 2831.324150] ? __mutex_unlock_slowpath+0x75/0x770 [ 2831.329012] ? drop_futex_key_refs+0x2e/0xa0 [ 2831.333563] ? alloc_loaded_vmcs+0x240/0x240 [ 2831.337999] ? __lock_acquire+0x5fc/0x3f20 [ 2831.342261] kvm_vm_ioctl+0x4ca/0x13e0 [ 2831.346200] ? kvm_vcpu_release+0xa0/0xa0 [ 2831.350535] ? perf_trace_lock+0xf7/0x490 [ 2831.354792] ? check_preemption_disabled+0x35/0x240 [ 2831.359842] ? check_preemption_disabled+0x35/0x240 [ 2831.364899] ? perf_trace_lock+0xf7/0x490 [ 2831.369067] ? perf_trace_lock_acquire+0x510/0x510 [ 2831.374126] ? perf_trace_lock_acquire+0x510/0x510 [ 2831.379081] ? lock_acquire+0x170/0x3f0 [ 2831.383082] ? kvm_vcpu_release+0xa0/0xa0 [ 2831.387252] do_vfs_ioctl+0x75a/0xff0 [ 2831.391080] ? selinux_inode_setxattr+0x730/0x730 [ 2831.395988] ? ioctl_preallocate+0x1a0/0x1a0 [ 2831.400419] ? lock_downgrade+0x740/0x740 [ 2831.404597] ? __fget+0x225/0x360 [ 2831.408082] ? security_file_ioctl+0x83/0xb0 [ 2831.412513] SyS_ioctl+0x7f/0xb0 [ 2831.415898] ? do_vfs_ioctl+0xff0/0xff0 [ 2831.419891] do_syscall_64+0x1d5/0x640 [ 2831.423800] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2831.429239] RIP: 0033:0x45ce69 [ 2831.432439] RSP: 002b:00007ff3b8e13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2831.440188] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2831.447468] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2831.454750] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2831.462064] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2831.469346] R13: 00007fffdf1aef2f R14: 00007ff3b8e149c0 R15: 000000000118bf2c [ 2831.509290] Mem-Info: [ 2831.512068] active_anon:429203 inactive_anon:8460 isolated_anon:0 [ 2831.512068] active_file:30122 inactive_file:16295 isolated_file:0 [ 2831.512068] unevictable:149081 dirty:66 writeback:0 unstable:0 [ 2831.512068] slab_reclaimable:20147 slab_unreclaimable:255505 [ 2831.512068] mapped:62101 shmem:179355 pagetables:65445 bounce:0 [ 2831.512068] free:512639 free_pcp:335 free_cma:0 [ 2831.586637] Node 0 active_anon:1380980kB inactive_anon:17280kB active_file:32kB inactive_file:4kB unevictable:211764kB isolated(anon):0kB isolated(file):0kB mapped:217120kB dirty:8kB writeback:0kB shmem:245736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 892928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2831.621282] Node 1 active_anon:335832kB inactive_anon:16560kB active_file:120456kB inactive_file:65176kB unevictable:384560kB isolated(anon):0kB isolated(file):0kB mapped:31284kB dirty:156kB writeback:0kB shmem:471684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2831.679064] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:112kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2831.711093] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2831.716189] Node 0 DMA32 free:36060kB min:36272kB low:45340kB high:54408kB active_anon:1380980kB inactive_anon:17280kB active_file:32kB inactive_file:4kB unevictable:211652kB writepending:8kB present:3129332kB managed:2621196kB mlocked:60kB kernel_stack:22272kB pagetables:60160kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 2831.748483] lowmem_reserve[]: 0 0 0 0 0 [ 2831.752736] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2831.780297] lowmem_reserve[]: 0 0 0 0 0 [ 2831.784667] Node 1 Normal free:2004356kB min:53612kB low:67012kB high:80412kB active_anon:335732kB inactive_anon:16560kB active_file:120456kB inactive_file:65176kB unevictable:384560kB writepending:12kB present:3932160kB managed:3870192kB mlocked:4kB kernel_stack:74240kB pagetables:201472kB bounce:0kB free_pcp:1208kB local_pcp:636kB free_cma:0kB [ 2831.819519] lowmem_reserve[]: 0 0 0 0 0 [ 2831.824098] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (U) 0*64kB 2*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (ME) = 10316kB [ 2831.839891] Node 0 DMA32: 286*4kB (UME) 312*8kB (ME) 336*16kB (UME) 199*32kB (UME) 61*64kB (M) 32*128kB (ME) 17*256kB (UME) 12*512kB (UME) 2*1024kB (U) 0*2048kB 0*4096kB = 35928kB [ 2831.857239] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2831.869413] Node 1 Normal: 52*4kB (UME) 13*8kB (UME) 51*16kB (UME) 15*32kB (UME) 3*64kB (UM) 3*128kB (UME) 2*256kB (UE) 1*512kB (M) 2*1024kB (ME) 2*2048kB (ME) 487*4096kB (M) = 2004104kB [ 2831.893209] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2831.903304] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2831.919101] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2831.929290] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2831.939055] 220863 total pagecache pages [ 2831.943714] 0 pages in swap cache [ 2831.948342] Swap cache stats: add 0, delete 0, find 0/0 [ 2831.954244] Free swap = 0kB [ 2831.959059] Total swap = 0kB [ 2831.962691] 1965979 pages RAM [ 2831.966401] 0 pages HighMem/MovableOnly [ 2831.973040] 339072 pages reserved [ 2831.977057] 0 pages cma reserved 22:33:27 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:33:27 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:33:27 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000040), 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000009, 0x810, r1, 0xd75ac000) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 22:33:27 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:33:27 executing program 3: sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10005500}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 22:33:27 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 22:33:28 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000), 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup3(r0, r0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000000c0)={{0x7, 0x3, 0x1, 0x401, '\x00', 0x3}, 0x6, 0x30, 0xc25e, r1, 0x5, 0x10001, 'syz0\x00', &(0x7f0000000080)=['@\x00', '!\x00', '\x00', '(#\x00', '%\'\x00'], 0xb, [], [0x100, 0x1, 0x80, 0x1]}) socket$kcm(0x29, 0xb, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 22:33:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x4]}, 0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = getuid() mount$9p_rdma(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f0000000100)='\x00', &(0x7f0000000180)='9p\x00', 0x8041, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@sq={'sq', 0x3d, 0x80000000}}, {@timeout={'timeout', 0x3d, 0x101}}, {@common=@access_uid={'access'}}, {@common=@mmap='mmap'}, {@common=@version_9p2000='version=9p2000'}, {@common=@version_L='version=9p2000.L'}, {@timeout={'timeout', 0x3d, 0xffffffffffff4a67}}, {@sq={'sq', 0x3d, 0x101}}], [{@uid_gt={'uid>'}}, {@obj_user={'obj_user', 0x3d, '\'}'}}, {@euid_eq={'euid', 0x3d, r5}}, {@smackfstransmute={'smackfstransmute'}}, {@fsname={'fsname', 0x3d, '&!-\\'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsname={'fsname'}}]}}) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000080)={0x2, 0xfff, 0x1, 0x4000, r4}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 22:33:28 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 2832.940001] ptrace attach of "/root/syz-executor.3"[4220] was attempted by "/root/syz-executor.3"[4223] 22:33:28 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() sched_setattr(r1, &(0x7f0000000300)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$getsig(0x4202, r1, 0x5, &(0x7f0000000080)) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 22:33:28 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 22:33:28 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x3b, @private0={0xfc, 0x0, [], 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000080), 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 22:33:28 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:33:29 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:33:29 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000080)=""/23) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0xd) wait4(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0]}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 2833.925087] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2833.954834] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2833.969037] CPU: 1 PID: 4254 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2833.977058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2833.987072] Call Trace: [ 2833.989678] dump_stack+0x1b2/0x283 [ 2833.993607] warn_alloc.cold+0x96/0x1cc [ 2833.997614] ? zone_watermark_ok_safe+0x220/0x220 [ 2834.002631] ? wait_for_completion_io+0x10/0x10 [ 2834.008056] __alloc_pages_nodemask+0x2127/0x2720 [ 2834.013301] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2834.018802] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2834.024123] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2834.029209] ? do_raw_spin_unlock+0x164/0x220 [ 2834.034274] alloc_pages_current+0x155/0x260 [ 2834.039540] kvm_mmu_create+0xda/0x1d0 [ 2834.043693] kvm_arch_vcpu_init+0x282/0x890 [ 2834.048154] ? alloc_pages_current+0x15d/0x260 [ 2834.052967] kvm_vcpu_init+0x26d/0x360 [ 2834.058785] vmx_create_vcpu+0xef/0x29a0 [ 2834.063104] ? __mutex_unlock_slowpath+0x75/0x770 [ 2834.068078] ? drop_futex_key_refs+0x2e/0xa0 [ 2834.072976] ? alloc_loaded_vmcs+0x240/0x240 [ 2834.077641] ? __lock_acquire+0x5fc/0x3f20 [ 2834.082380] kvm_vm_ioctl+0x4ca/0x13e0 [ 2834.086560] ? kvm_vcpu_release+0xa0/0xa0 [ 2834.090756] ? perf_trace_lock+0xf7/0x490 [ 2834.095104] ? check_preemption_disabled+0x35/0x240 [ 2834.100549] ? check_preemption_disabled+0x35/0x240 [ 2834.106041] ? perf_trace_lock+0xf7/0x490 [ 2834.110386] ? perf_trace_lock_acquire+0x510/0x510 [ 2834.115352] ? perf_trace_lock_acquire+0x510/0x510 [ 2834.120612] ? lock_acquire+0x170/0x3f0 [ 2834.125302] ? kvm_vcpu_release+0xa0/0xa0 [ 2834.129587] do_vfs_ioctl+0x75a/0xff0 [ 2834.133597] ? selinux_inode_setxattr+0x730/0x730 [ 2834.138464] ? ioctl_preallocate+0x1a0/0x1a0 [ 2834.143061] ? lock_downgrade+0x740/0x740 [ 2834.147460] ? __fget+0x225/0x360 [ 2834.150946] ? security_file_ioctl+0x83/0xb0 [ 2834.155394] SyS_ioctl+0x7f/0xb0 [ 2834.158877] ? do_vfs_ioctl+0xff0/0xff0 [ 2834.163242] do_syscall_64+0x1d5/0x640 [ 2834.167691] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2834.172984] RIP: 0033:0x45ce69 [ 2834.176182] RSP: 002b:00007ff3b8e13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2834.184121] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2834.191518] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2834.199357] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2834.207503] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2834.215139] R13: 00007fffdf1aef2f R14: 00007ff3b8e149c0 R15: 000000000118bf2c [ 2834.340619] Mem-Info: [ 2834.343104] active_anon:429487 inactive_anon:8460 isolated_anon:0 [ 2834.343104] active_file:30124 inactive_file:16300 isolated_file:8 [ 2834.343104] unevictable:149081 dirty:112 writeback:0 unstable:0 [ 2834.343104] slab_reclaimable:20163 slab_unreclaimable:255576 [ 2834.343104] mapped:62109 shmem:179355 pagetables:65699 bounce:0 [ 2834.343104] free:511758 free_pcp:232 free_cma:0 [ 2834.446701] Node 0 active_anon:1380980kB inactive_anon:17280kB active_file:4kB inactive_file:0kB unevictable:211764kB isolated(anon):0kB isolated(file):32kB mapped:217120kB dirty:8kB writeback:0kB shmem:245736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 892928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 22:33:29 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000810500000000000000000000009c", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="0d1cf166a4decee7dff8b082a1e8e0c1b5910c1a059c0e0abde82cc5881fc21cb0ef03a5e2e6aa14df7f9c1d1dc03bcbb689b3ffa55f2e62cd06e27573f7f1d4f09909a8a301ac18af21bcd8fa0f68fd2fb7bed2a2a1bca74542983df8e30034de12ef05ee8a2c965878b2041a264db6d25babcec9a9a8fb092a5b44669e1cd788659e34064d7c0e852d221975e94fe798286f27b0f43a5e9046f9fe48217153112fb0c64a4820efcb153ea8021ef26d10a6279f76015e78d77ca14564eda2a76bf6e19608b142fa1cd37572e20348222aeda540f3f5ea596c8ca097", 0xdc, 0x44044, &(0x7f00000001c0)={0x11, 0x10, r2, 0x1, 0x2, 0x6, @remote}, 0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 2834.505580] Node 1 active_anon:336868kB inactive_anon:16560kB active_file:120492kB inactive_file:65200kB unevictable:384560kB isolated(anon):0kB isolated(file):0kB mapped:31316kB dirty:440kB writeback:0kB shmem:471684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2834.602845] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:112kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 22:33:29 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) [ 2834.754935] lowmem_reserve[]: 0 2557 2557 2557 2557 22:33:30 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 2834.804488] Node 0 DMA32 free:35740kB min:36272kB low:45340kB high:54408kB active_anon:1380980kB inactive_anon:17280kB active_file:32kB inactive_file:4kB unevictable:211652kB writepending:8kB present:3129332kB managed:2621196kB mlocked:60kB kernel_stack:22272kB pagetables:60160kB bounce:0kB free_pcp:244kB local_pcp:4kB free_cma:0kB 22:33:30 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) [ 2835.023758] lowmem_reserve[]: 0 0 0 0 0 [ 2835.046198] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2835.172964] lowmem_reserve[]: 0 0 0 0 0 [ 2835.202722] Node 1 Normal free:2001200kB min:53612kB low:67012kB high:80412kB active_anon:337452kB inactive_anon:16560kB active_file:120496kB inactive_file:65224kB unevictable:384560kB writepending:504kB present:3932160kB managed:3870192kB mlocked:4kB kernel_stack:75104kB pagetables:202912kB bounce:0kB free_pcp:816kB local_pcp:196kB free_cma:0kB [ 2835.352582] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2835.361149] lowmem_reserve[]: 0 0 0 0 0 [ 2835.382561] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2835.385730] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (U) 0*64kB 2*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (ME) = 10316kB [ 2835.401937] CPU: 0 PID: 4313 Comm: syz-executor.2 Not tainted 4.14.193-syzkaller #0 [ 2835.417241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2835.427213] Call Trace: [ 2835.429818] dump_stack+0x1b2/0x283 [ 2835.433464] warn_alloc.cold+0x96/0x1cc [ 2835.437464] ? zone_watermark_ok_safe+0x220/0x220 [ 2835.442098] Node 0 DMA32: 314*4kB (UME) [ 2835.442325] ? wait_for_completion_io+0x10/0x10 [ 2835.442333] 313*8kB [ 2835.446401] __alloc_pages_nodemask+0x2127/0x2720 [ 2835.446434] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2835.446446] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2835.468054] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2835.472930] ? do_raw_spin_unlock+0x164/0x220 [ 2835.477449] alloc_pages_current+0x155/0x260 [ 2835.481427] (UME) [ 2835.482016] kvm_mmu_create+0xda/0x1d0 [ 2835.482033] kvm_arch_vcpu_init+0x282/0x890 [ 2835.492515] ? alloc_pages_current+0x15d/0x260 [ 2835.496130] 336*16kB [ 2835.497142] kvm_vcpu_init+0x26d/0x360 [ 2835.497158] vmx_create_vcpu+0xef/0x29a0 [ 2835.497172] ? __mutex_unlock_slowpath+0x75/0x770 [ 2835.497183] ? drop_futex_key_refs+0x2e/0xa0 [ 2835.497194] ? alloc_loaded_vmcs+0x240/0x240 [ 2835.497205] ? __lock_acquire+0x5fc/0x3f20 [ 2835.497217] kvm_vm_ioctl+0x4ca/0x13e0 [ 2835.497233] ? kvm_vcpu_release+0xa0/0xa0 [ 2835.497247] ? perf_trace_lock+0xf7/0x490 [ 2835.497260] ? check_preemption_disabled+0x35/0x240 [ 2835.497272] ? check_preemption_disabled+0x35/0x240 [ 2835.497284] ? perf_trace_lock+0xf7/0x490 [ 2835.497294] ? perf_trace_lock_acquire+0x510/0x510 [ 2835.497305] ? perf_trace_lock_acquire+0x510/0x510 [ 2835.497316] ? lock_acquire+0x170/0x3f0 [ 2835.497333] ? kvm_vcpu_release+0xa0/0xa0 [ 2835.497347] do_vfs_ioctl+0x75a/0xff0 [ 2835.497360] ? selinux_inode_setxattr+0x730/0x730 [ 2835.497370] ? ioctl_preallocate+0x1a0/0x1a0 [ 2835.497379] ? lock_downgrade+0x740/0x740 [ 2835.497394] ? __fget+0x225/0x360 [ 2835.497410] ? security_file_ioctl+0x83/0xb0 [ 2835.497421] SyS_ioctl+0x7f/0xb0 [ 2835.497430] ? do_vfs_ioctl+0xff0/0xff0 [ 2835.497443] do_syscall_64+0x1d5/0x640 [ 2835.497461] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2835.497470] RIP: 0033:0x45ce69 [ 2835.497475] RSP: 002b:00007f35a0b4fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2835.497492] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2835.497497] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2835.497502] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2835.497508] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2835.497513] R13: 00007ffd412a0a7f R14: 00007f35a0b509c0 R15: 000000000118bf2c [ 2835.520892] Mem-Info: [ 2835.614261] (UME) [ 2835.645026] active_anon:429608 inactive_anon:8460 isolated_anon:0 [ 2835.645026] active_file:30132 inactive_file:16307 isolated_file:0 [ 2835.645026] unevictable:149081 dirty:128 writeback:0 unstable:0 [ 2835.645026] slab_reclaimable:20166 slab_unreclaimable:255557 [ 2835.645026] mapped:62088 shmem:179355 pagetables:65768 bounce:0 [ 2835.645026] free:511772 free_pcp:37 free_cma:0 [ 2835.669603] 199*32kB [ 2835.681491] Node 0 active_anon:1380980kB inactive_anon:17280kB active_file:32kB inactive_file:4kB unevictable:211764kB isolated(anon):0kB isolated(file):0kB mapped:217120kB dirty:8kB writeback:0kB shmem:245736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 892928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2835.712881] (UME) 22:33:30 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r3, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x1000000c8) [ 2835.725421] Node 1 active_anon:337452kB inactive_anon:16560kB active_file:120496kB inactive_file:65224kB unevictable:384560kB isolated(anon):0kB isolated(file):0kB mapped:31232kB dirty:504kB writeback:0kB shmem:471684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2835.747894] 63*64kB (UM) 34*128kB (UME) 17*256kB (UME) 11*512kB (UME) 2*1024kB (U) 0*2048kB 0*4096kB = 35920kB [ 2835.747943] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2835.747996] Node 1 Normal: 25*4kB (UE) 38*8kB (UME) 37*16kB (UME) 49*32kB (UME) 4*64kB (UM) 4*128kB (UE) 1*256kB (E) 1*512kB (U) 2*1024kB (UE) 2*2048kB (ME) 486*4096kB (M) = 2000900kB [ 2835.748089] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2835.748095] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2835.748102] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2835.748109] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2835.748113] 220876 total pagecache pages 22:33:31 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) [ 2835.748122] 0 pages in swap cache [ 2835.748128] Swap cache stats: add 0, delete 0, find 0/0 [ 2835.748132] Free swap = 0kB [ 2835.748135] Total swap = 0kB [ 2835.748142] 1965979 pages RAM [ 2835.748146] 0 pages HighMem/MovableOnly [ 2835.748149] 339072 pages reserved [ 2835.748153] 0 pages cma reserved [ 2835.911998] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:112kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2835.941909] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2835.949693] Node 0 DMA32 free:35904kB min:36272kB low:45340kB high:54408kB active_anon:1380980kB inactive_anon:17280kB active_file:32kB inactive_file:4kB unevictable:211652kB writepending:8kB present:3129332kB managed:2621196kB mlocked:60kB kernel_stack:22272kB pagetables:60160kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2835.982623] lowmem_reserve[]: 0 0 0 0 0 [ 2835.986954] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 22:33:31 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}}, 0x20008058) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r3, &(0x7f0000000000), 0x10) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 2836.111450] lowmem_reserve[]: 0 0 0 0 0 [ 2836.142874] Node 1 Normal free:1999784kB min:53612kB low:67012kB high:80412kB active_anon:337632kB inactive_anon:16560kB active_file:120512kB inactive_file:65240kB unevictable:384560kB writepending:272kB present:3932160kB managed:3870192kB mlocked:4kB kernel_stack:74912kB pagetables:202968kB bounce:0kB free_pcp:556kB local_pcp:380kB free_cma:0kB [ 2836.246023] lowmem_reserve[]: 0 0 0 0 0 [ 2836.255513] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (U) 0*64kB 2*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (ME) = 10316kB [ 2836.282151] Node 0 DMA32: 314*4kB (UMEH) 312*8kB (ME) 335*16kB (ME) 199*32kB (UMEH) 63*64kB (UMH) 34*128kB (UMEH) 17*256kB (MEH) 11*512kB (UME) 2*1024kB (UH) 0*2048kB 0*4096kB = 35896kB [ 2836.306744] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2836.331147] Node 1 Normal: 1*4kB (U) 149*8kB (UME) 29*16kB (UE) 11*32kB (UE) 5*64kB (UM) 4*128kB (UE) 1*256kB (E) 1*512kB (U) 2*1024kB (UE) 2*2048kB (ME) 486*4096kB (M) = 2000412kB [ 2836.362938] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2836.382912] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2836.393918] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2836.412280] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2836.429829] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2836.433406] 220885 total pagecache pages [ 2836.454603] 0 pages in swap cache [ 2836.463322] Swap cache stats: add 0, delete 0, find 0/0 [ 2836.463749] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2836.481144] Free swap = 0kB [ 2836.485723] Total swap = 0kB [ 2836.489835] CPU: 1 PID: 4347 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2836.489842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2836.489846] Call Trace: [ 2836.489873] dump_stack+0x1b2/0x283 [ 2836.489893] warn_alloc.cold+0x96/0x1cc [ 2836.489906] ? zone_watermark_ok_safe+0x220/0x220 [ 2836.489928] ? wait_for_completion_io+0x10/0x10 [ 2836.489945] __alloc_pages_nodemask+0x2127/0x2720 [ 2836.489976] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2836.489986] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2836.489996] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2836.490023] ? do_raw_spin_unlock+0x164/0x220 [ 2836.490040] alloc_pages_current+0x155/0x260 [ 2836.490053] kvm_mmu_create+0xda/0x1d0 [ 2836.490067] kvm_arch_vcpu_init+0x282/0x890 [ 2836.514417] 1965979 pages RAM [ 2836.517768] ? alloc_pages_current+0x15d/0x260 [ 2836.517787] kvm_vcpu_init+0x26d/0x360 [ 2836.517802] vmx_create_vcpu+0xef/0x29a0 [ 2836.517818] ? __mutex_unlock_slowpath+0x75/0x770 [ 2836.517828] ? drop_futex_key_refs+0x2e/0xa0 [ 2836.517839] ? alloc_loaded_vmcs+0x240/0x240 [ 2836.517850] ? __lock_acquire+0x5fc/0x3f20 [ 2836.517862] kvm_vm_ioctl+0x4ca/0x13e0 [ 2836.517875] ? kvm_vcpu_release+0xa0/0xa0 [ 2836.517890] ? perf_trace_lock+0xf7/0x490 [ 2836.517904] ? check_preemption_disabled+0x35/0x240 [ 2836.517915] ? check_preemption_disabled+0x35/0x240 [ 2836.517929] ? perf_trace_lock+0xf7/0x490 [ 2836.524143] 0 pages HighMem/MovableOnly [ 2836.527661] ? perf_trace_lock_acquire+0x510/0x510 [ 2836.527675] ? perf_trace_lock_acquire+0x510/0x510 [ 2836.527687] ? lock_acquire+0x170/0x3f0 [ 2836.527700] ? kvm_vcpu_release+0xa0/0xa0 [ 2836.527715] do_vfs_ioctl+0x75a/0xff0 [ 2836.527728] ? selinux_inode_setxattr+0x730/0x730 [ 2836.527738] ? ioctl_preallocate+0x1a0/0x1a0 [ 2836.527746] ? lock_downgrade+0x740/0x740 [ 2836.527766] ? __fget+0x225/0x360 [ 2836.527781] ? security_file_ioctl+0x83/0xb0 [ 2836.547128] 339072 pages reserved [ 2836.547250] SyS_ioctl+0x7f/0xb0 [ 2836.566847] 0 pages cma reserved [ 2836.569032] ? do_vfs_ioctl+0xff0/0xff0 [ 2836.569053] do_syscall_64+0x1d5/0x640 [ 2836.569076] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2836.569086] RIP: 0033:0x45ce69 22:33:31 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) [ 2836.569091] RSP: 002b:00007ff3b8e13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2836.710301] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2836.717586] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2836.725084] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2836.732676] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2836.740154] R13: 00007fffdf1aef2f R14: 00007ff3b8e149c0 R15: 000000000118bf2c 22:33:31 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r3, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x1000000c8) [ 2836.833761] Mem-Info: [ 2836.848555] active_anon:429693 inactive_anon:8460 isolated_anon:0 [ 2836.848555] active_file:30142 inactive_file:16312 isolated_file:0 [ 2836.848555] unevictable:149081 dirty:56 writeback:0 unstable:0 [ 2836.848555] slab_reclaimable:20189 slab_unreclaimable:255750 [ 2836.848555] mapped:62322 shmem:179355 pagetables:65805 bounce:0 [ 2836.848555] free:511237 free_pcp:303 free_cma:0 [ 2836.938623] Node 0 active_anon:1380980kB inactive_anon:17280kB active_file:24kB inactive_file:4kB unevictable:211764kB isolated(anon):0kB isolated(file):8kB mapped:217120kB dirty:8kB writeback:0kB shmem:245736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 892928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2837.002853] Node 1 active_anon:337548kB inactive_anon:16556kB active_file:120512kB inactive_file:65272kB unevictable:384560kB isolated(anon):0kB isolated(file):0kB mapped:31324kB dirty:212kB writeback:0kB shmem:471684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2837.054785] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:112kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2837.083190] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2837.090548] Node 0 DMA32 free:35772kB min:36272kB low:45340kB high:54408kB active_anon:1380980kB inactive_anon:17280kB active_file:24kB inactive_file:4kB unevictable:211652kB writepending:8kB present:3129332kB managed:2621196kB mlocked:60kB kernel_stack:22272kB pagetables:60160kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 2837.123417] lowmem_reserve[]: 0 0 0 0 0 [ 2837.128824] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2837.161263] lowmem_reserve[]: 0 0 0 0 0 [ 2837.165727] Node 1 Normal free:1999120kB min:53612kB low:67012kB high:80412kB active_anon:337548kB inactive_anon:16556kB active_file:120512kB inactive_file:65272kB unevictable:384560kB writepending:212kB present:3932160kB managed:3870192kB mlocked:4kB kernel_stack:74912kB pagetables:203000kB bounce:0kB free_pcp:824kB local_pcp:508kB free_cma:0kB [ 2837.201470] lowmem_reserve[]: 0 0 0 0 0 [ 2837.206176] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (U) 0*64kB 2*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (ME) = 10316kB [ 2837.223291] Node 0 DMA32: 283*4kB (UMEH) 312*8kB (ME) 335*16kB (ME) 199*32kB (UMEH) 63*64kB (UMH) 34*128kB (UMEH) 17*256kB (MEH) 11*512kB (UME) 2*1024kB (UH) 0*2048kB 0*4096kB = 35772kB [ 2837.243724] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2837.258967] Node 1 Normal: 62*4kB (UME) 84*8kB (UME) 81*16kB (UME) 15*32kB (UME) 2*64kB (UM) 2*128kB (UE) 2*256kB (ME) 2*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 486*4096kB (M) = 2000392kB [ 2837.278899] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2837.291053] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2837.301217] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2837.311780] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2837.321646] 220891 total pagecache pages [ 2837.326042] 0 pages in swap cache [ 2837.332774] Swap cache stats: add 0, delete 0, find 0/0 [ 2837.349053] Free swap = 0kB [ 2837.355895] Total swap = 0kB [ 2837.364795] 1965979 pages RAM [ 2837.373573] 0 pages HighMem/MovableOnly [ 2837.383448] 339072 pages reserved [ 2837.394060] 0 pages cma reserved 22:33:32 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) [ 2837.402264] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2837.439081] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2837.445073] CPU: 1 PID: 4364 Comm: syz-executor.2 Not tainted 4.14.193-syzkaller #0 [ 2837.453177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2837.463481] Call Trace: [ 2837.466343] dump_stack+0x1b2/0x283 [ 2837.470079] warn_alloc.cold+0x96/0x1cc [ 2837.474135] ? zone_watermark_ok_safe+0x220/0x220 [ 2837.479094] ? wait_for_completion_io+0x10/0x10 [ 2837.483785] __alloc_pages_nodemask+0x2127/0x2720 [ 2837.489461] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2837.494515] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2837.499526] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2837.504551] ? do_raw_spin_unlock+0x164/0x220 [ 2837.513215] alloc_pages_current+0x155/0x260 [ 2837.517741] kvm_mmu_create+0xda/0x1d0 [ 2837.521847] kvm_arch_vcpu_init+0x282/0x890 [ 2837.526797] ? alloc_pages_current+0x15d/0x260 [ 2837.532757] kvm_vcpu_init+0x26d/0x360 [ 2837.536840] vmx_create_vcpu+0xef/0x29a0 [ 2837.541098] ? __mutex_unlock_slowpath+0x75/0x770 [ 2837.545958] ? drop_futex_key_refs+0x2e/0xa0 [ 2837.550424] ? alloc_loaded_vmcs+0x240/0x240 [ 2837.554933] ? __lock_acquire+0x5fc/0x3f20 [ 2837.559758] kvm_vm_ioctl+0x4ca/0x13e0 [ 2837.563712] ? kvm_vcpu_release+0xa0/0xa0 [ 2837.568204] ? perf_trace_lock+0xf7/0x490 [ 2837.572569] ? check_preemption_disabled+0x35/0x240 [ 2837.577780] ? check_preemption_disabled+0x35/0x240 [ 2837.582949] ? perf_trace_lock+0xf7/0x490 [ 2837.587137] ? perf_trace_lock_acquire+0x510/0x510 [ 2837.593294] ? perf_trace_lock_acquire+0x510/0x510 [ 2837.598537] ? lock_acquire+0x170/0x3f0 [ 2837.602532] ? kvm_vcpu_release+0xa0/0xa0 [ 2837.606759] do_vfs_ioctl+0x75a/0xff0 [ 2837.610677] ? selinux_inode_setxattr+0x730/0x730 [ 2837.615762] ? ioctl_preallocate+0x1a0/0x1a0 [ 2837.620970] ? lock_downgrade+0x740/0x740 [ 2837.625321] ? __fget+0x225/0x360 [ 2837.629493] ? security_file_ioctl+0x83/0xb0 [ 2837.634102] SyS_ioctl+0x7f/0xb0 [ 2837.637598] ? do_vfs_ioctl+0xff0/0xff0 [ 2837.641603] do_syscall_64+0x1d5/0x640 [ 2837.645602] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2837.651008] RIP: 0033:0x45ce69 [ 2837.654291] RSP: 002b:00007f35a0b4fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2837.662524] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2837.670531] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2837.678286] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2837.685934] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2837.694095] R13: 00007ffd412a0a7f R14: 00007f35a0b509c0 R15: 000000000118bf2c 22:33:32 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) readahead(r0, 0x100000001, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000080), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x13}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x400}}}, {{@arp={@private=0xa010101, @multicast1, 0x0, 0x0, 0x1, 0x2, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0xfff9, 0x40, 0x4, 0x82, 0x0, 0x101, 'dummy0\x00', 'wg1\x00', {}, {0xff}, 0x0, 0x108}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={[], 0x3c}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:33:33 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r3, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x1000000c8) 22:33:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000040)) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002540)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x8011}, 0x40040) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000140)=0x20000000, 0x4) accept4$x25(r0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x1010c0, 0x0) bind$rds(r3, &(0x7f00000001c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f00000000c0)={0x1f, @none}, 0x8) dup(r4) 22:33:33 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 2837.917934] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2837.959088] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2837.988859] CPU: 0 PID: 4376 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2837.997057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2838.007299] Call Trace: [ 2838.010059] dump_stack+0x1b2/0x283 [ 2838.013885] warn_alloc.cold+0x96/0x1cc [ 2838.017978] ? zone_watermark_ok_safe+0x220/0x220 [ 2838.026882] ? wait_for_completion_io+0x10/0x10 [ 2838.031969] __alloc_pages_nodemask+0x2127/0x2720 [ 2838.037001] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2838.043207] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2838.048356] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2838.053449] ? do_raw_spin_unlock+0x164/0x220 [ 2838.058151] alloc_pages_current+0x155/0x260 [ 2838.062782] kvm_mmu_create+0xda/0x1d0 [ 2838.066880] kvm_arch_vcpu_init+0x282/0x890 [ 2838.071392] ? alloc_pages_current+0x15d/0x260 [ 2838.076147] kvm_vcpu_init+0x26d/0x360 [ 2838.080227] vmx_create_vcpu+0xef/0x29a0 [ 2838.084676] ? __mutex_unlock_slowpath+0x75/0x770 [ 2838.089763] ? drop_futex_key_refs+0x2e/0xa0 [ 2838.094205] ? alloc_loaded_vmcs+0x240/0x240 [ 2838.098732] ? __lock_acquire+0x5fc/0x3f20 [ 2838.103316] kvm_vm_ioctl+0x4ca/0x13e0 [ 2838.107440] ? kvm_vcpu_release+0xa0/0xa0 [ 2838.111648] ? perf_trace_lock+0xf7/0x490 [ 2838.115918] ? check_preemption_disabled+0x35/0x240 [ 2838.121213] ? check_preemption_disabled+0x35/0x240 [ 2838.126270] ? perf_trace_lock+0xf7/0x490 [ 2838.130442] ? perf_trace_lock_acquire+0x510/0x510 [ 2838.135399] ? perf_trace_lock_acquire+0x510/0x510 [ 2838.140356] ? lock_acquire+0x170/0x3f0 [ 2838.144357] ? kvm_vcpu_release+0xa0/0xa0 [ 2838.148532] do_vfs_ioctl+0x75a/0xff0 [ 2838.152367] ? selinux_inode_setxattr+0x730/0x730 [ 2838.157365] ? ioctl_preallocate+0x1a0/0x1a0 [ 2838.161794] ? lock_downgrade+0x740/0x740 [ 2838.165974] ? __fget+0x225/0x360 [ 2838.169482] ? security_file_ioctl+0x83/0xb0 [ 2838.173912] SyS_ioctl+0x7f/0xb0 [ 2838.177306] ? do_vfs_ioctl+0xff0/0xff0 [ 2838.181301] do_syscall_64+0x1d5/0x640 [ 2838.185856] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2838.191367] RIP: 0033:0x45ce69 [ 2838.194584] RSP: 002b:00007ff3b8e13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2838.202450] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 22:33:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000040)) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002540)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x8011}, 0x40040) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000140)=0x20000000, 0x4) accept4$x25(r0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x1010c0, 0x0) bind$rds(r3, &(0x7f00000001c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f00000000c0)={0x1f, @none}, 0x8) dup(r4) [ 2838.209737] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2838.217023] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2838.224311] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2838.231596] R13: 00007fffdf1aef2f R14: 00007ff3b8e149c0 R15: 000000000118bf2c [ 2838.513076] warn_alloc_show_mem: 1 callbacks suppressed [ 2838.513081] Mem-Info: [ 2838.526849] active_anon:429706 inactive_anon:8460 isolated_anon:0 [ 2838.526849] active_file:30126 inactive_file:16328 isolated_file:7 [ 2838.526849] unevictable:149081 dirty:94 writeback:0 unstable:0 [ 2838.526849] slab_reclaimable:20183 slab_unreclaimable:255293 [ 2838.526849] mapped:62114 shmem:179355 pagetables:65862 bounce:0 [ 2838.526849] free:511567 free_pcp:332 free_cma:0 22:33:33 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 2838.566657] Node 0 active_anon:1380980kB inactive_anon:17280kB active_file:4kB inactive_file:4kB unevictable:211764kB isolated(anon):0kB isolated(file):28kB mapped:217120kB dirty:8kB writeback:0kB shmem:245736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 892928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 22:33:33 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r3, &(0x7f0000000140)=""/156, 0x9c, 0x0) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) [ 2838.602215] Node 1 active_anon:337844kB inactive_anon:16560kB active_file:120500kB inactive_file:65308kB unevictable:384560kB isolated(anon):0kB isolated(file):0kB mapped:31336kB dirty:368kB writeback:0kB shmem:471684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2838.637870] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:112kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2838.706079] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2838.723362] Node 0 DMA32 free:35772kB min:36272kB low:45340kB high:54408kB active_anon:1380980kB inactive_anon:17280kB active_file:4kB inactive_file:4kB unevictable:211652kB writepending:8kB present:3129332kB managed:2621196kB mlocked:60kB kernel_stack:22272kB pagetables:60160kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB [ 2838.811276] lowmem_reserve[]: 0 0 0 0 0 [ 2838.826257] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2838.855710] lowmem_reserve[]: 0 0 0 0 0 [ 2838.868577] Node 1 Normal free:1999276kB min:53612kB low:67012kB high:80412kB active_anon:337856kB inactive_anon:16560kB active_file:120524kB inactive_file:65320kB unevictable:384560kB writepending:504kB present:3932160kB managed:3870192kB mlocked:4kB kernel_stack:75072kB pagetables:203324kB bounce:0kB free_pcp:1236kB local_pcp:568kB free_cma:0kB [ 2838.901915] lowmem_reserve[]: 0 0 0 0 0 [ 2838.910766] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (U) 0*64kB 2*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (ME) = 10316kB [ 2838.929398] Node 0 DMA32: 283*4kB (UMEH) 313*8kB (MEH) 336*16kB (MEH) 197*32kB (ME) 63*64kB (UMH) 34*128kB (UMEH) 17*256kB (MEH) 11*512kB (UME) 2*1024kB (UH) 0*2048kB 0*4096kB = 35732kB [ 2838.948949] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 22:33:34 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 2838.964403] Node 1 Normal: 1*4kB (U) 0*8kB 10*16kB (E) 50*32kB (UE) 9*64kB (UM) 3*128kB (UME) 2*256kB (UE) 2*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 486*4096kB (M) = 1999012kB [ 2838.986498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2839.028570] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2839.053312] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2839.081007] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2839.105702] 220906 total pagecache pages [ 2839.115843] 0 pages in swap cache [ 2839.121405] Swap cache stats: add 0, delete 0, find 0/0 [ 2839.133802] Free swap = 0kB [ 2839.137741] Total swap = 0kB [ 2839.140872] 1965979 pages RAM [ 2839.145116] 0 pages HighMem/MovableOnly [ 2839.156059] 339072 pages reserved [ 2839.174181] 0 pages cma reserved 22:33:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000040)) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002540)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000b0601010000000000000000bf000008055282ed92c0467b1b45d3ec000100070000000900020073797a3000000015598dbbf4f523e074ba91770f8516258c7c2f14c87789b3470705b3e0f0499d8eef63a030b7cf6e06c8efa7712986848b42530f3470992295d54160138645cb6c267af8839e1d58736ddf76c61dd633f07a494dc1334e9369fb6637d5c90eab0000000000000000000000000000fab3bf49d7f85461613feccad334a8398bcfa896a0f5fa0775a9f921ee656539ee3b401476860553717e66c525788bcaaf2e1fb112faf9a3a0786678bae328d370f8f5a4751d5a0a733d9fa241ebb55028b5c9ff4e376bcd258392149171f38b5d34ccd33ff9ad1fe9f4425538d6015c9de1093b067b1ab451298f58"], 0x28}, 0x1, 0x0, 0x0, 0x8011}, 0x40040) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000140)=0x20000000, 0x4) accept4$x25(r0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x1010c0, 0x0) bind$rds(r3, &(0x7f00000001c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f00000000c0)={0x1f, @none}, 0x8) dup(r4) 22:33:34 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 22:33:34 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendto$l2tp(r1, &(0x7f0000000080)="021537b2c60c9984d8d2bae70eb4b53e424449c086c3c8bb039bec4136006c213e9fd1eeeaccf982c4a6bae66e90dab4fb8f1b04e56661569718d0f6e632f709d0c4e9785707afb32445394823224be86f712d11b2799c2ec422dd7755145e3e61c6a6b6cd7c4dbfb66376228b8fb48547e3ee4f8618227bc58bcba2f3d6cf7ad2b04eeabc1983f3f6f75a6a2c92706a0b5cf2ce2f01f0556c17fc43b2cac13d8eda1b3c5c1771837c901e4db707b09702a96e073305ad0b27de87edec1e97cc7d8effc929ade930ebbd6b470677cd2eed3d3e0dda7d8ba7d6cf88ad1f56ae7008e8aba1dd696cb064507bfaa965bfdc", 0xf0, 0x42000, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() set_robust_list(&(0x7f0000000200)={&(0x7f00000001c0)={&(0x7f0000000180)}, 0x10000}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f0000000340)=""/183) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 22:33:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000040)) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002540)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x8011}, 0x40040) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000140)=0x20000000, 0x4) accept4$x25(r0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x1010c0, 0x0) bind$rds(r3, &(0x7f00000001c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2839.621518] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2839.641757] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2839.649277] CPU: 1 PID: 4437 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2839.657449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2839.667281] Call Trace: [ 2839.669977] dump_stack+0x1b2/0x283 [ 2839.674364] warn_alloc.cold+0x96/0x1cc [ 2839.679149] ? zone_watermark_ok_safe+0x220/0x220 [ 2839.684494] ? wait_for_completion_io+0x10/0x10 [ 2839.690045] __alloc_pages_nodemask+0x2127/0x2720 [ 2839.695830] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2839.701597] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2839.707548] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2839.715620] ? do_raw_spin_unlock+0x164/0x220 [ 2839.720904] alloc_pages_current+0x155/0x260 [ 2839.726230] kvm_mmu_create+0xda/0x1d0 [ 2839.730319] kvm_arch_vcpu_init+0x282/0x890 [ 2839.734744] ? alloc_pages_current+0x15d/0x260 [ 2839.739537] kvm_vcpu_init+0x26d/0x360 [ 2839.746831] vmx_create_vcpu+0xef/0x29a0 [ 2839.751832] ? __mutex_unlock_slowpath+0x75/0x770 [ 2839.758208] ? drop_futex_key_refs+0x2e/0xa0 [ 2839.762901] ? alloc_loaded_vmcs+0x240/0x240 [ 2839.767610] ? __lock_acquire+0x5fc/0x3f20 [ 2839.772403] kvm_vm_ioctl+0x4ca/0x13e0 [ 2839.776583] ? kvm_vcpu_release+0xa0/0xa0 [ 2839.781839] ? perf_trace_lock+0xf7/0x490 [ 2839.786346] ? check_preemption_disabled+0x35/0x240 [ 2839.791639] ? check_preemption_disabled+0x35/0x240 [ 2839.798012] ? perf_trace_lock+0xf7/0x490 [ 2839.803115] ? perf_trace_lock_acquire+0x510/0x510 [ 2839.808221] ? perf_trace_lock_acquire+0x510/0x510 [ 2839.814921] ? lock_acquire+0x170/0x3f0 [ 2839.824652] ? kvm_vcpu_release+0xa0/0xa0 [ 2839.829008] do_vfs_ioctl+0x75a/0xff0 [ 2839.832878] ? selinux_inode_setxattr+0x730/0x730 [ 2839.838097] ? ioctl_preallocate+0x1a0/0x1a0 [ 2839.843555] ? lock_downgrade+0x740/0x740 [ 2839.849326] ? __fget+0x225/0x360 [ 2839.853173] ? security_file_ioctl+0x83/0xb0 [ 2839.862275] SyS_ioctl+0x7f/0xb0 [ 2839.865951] ? do_vfs_ioctl+0xff0/0xff0 [ 2839.870641] do_syscall_64+0x1d5/0x640 [ 2839.876843] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2839.882813] RIP: 0033:0x45ce69 [ 2839.886720] RSP: 002b:00007ff3b8e13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2839.899940] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2839.909047] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2839.917180] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2839.926913] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2839.935805] R13: 00007fffdf1aef2f R14: 00007ff3b8e149c0 R15: 000000000118bf2c [ 2839.955052] Mem-Info: [ 2839.959243] active_anon:429746 inactive_anon:8460 isolated_anon:0 [ 2839.959243] active_file:30141 inactive_file:16335 isolated_file:0 [ 2839.959243] unevictable:149081 dirty:139 writeback:0 unstable:0 [ 2839.959243] slab_reclaimable:20209 slab_unreclaimable:255524 [ 2839.959243] mapped:62123 shmem:179355 pagetables:65899 bounce:0 [ 2839.959243] free:511256 free_pcp:299 free_cma:0 [ 2839.996559] Node 0 active_anon:1380980kB inactive_anon:17280kB active_file:28kB inactive_file:8kB unevictable:211764kB isolated(anon):0kB isolated(file):0kB mapped:217120kB dirty:8kB writeback:0kB shmem:245736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 892928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2840.026704] Node 1 active_anon:338004kB inactive_anon:16560kB active_file:120536kB inactive_file:65332kB unevictable:384560kB isolated(anon):0kB isolated(file):0kB mapped:31388kB dirty:548kB writeback:0kB shmem:471684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2840.057503] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:112kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2840.086418] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2840.092128] Node 0 DMA32 free:35724kB min:36272kB low:45340kB high:54408kB active_anon:1380980kB inactive_anon:17280kB active_file:28kB inactive_file:8kB unevictable:211652kB writepending:8kB present:3129332kB managed:2621196kB mlocked:60kB kernel_stack:22272kB pagetables:60160kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 2840.123514] lowmem_reserve[]: 0 0 0 0 0 [ 2840.128156] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2840.154787] lowmem_reserve[]: 0 0 0 0 0 [ 2840.159411] Node 1 Normal free:1999460kB min:53612kB low:67012kB high:80412kB active_anon:338004kB inactive_anon:16560kB active_file:120536kB inactive_file:65332kB unevictable:384560kB writepending:560kB present:3932160kB managed:3870192kB mlocked:4kB kernel_stack:74816kB pagetables:203436kB bounce:0kB free_pcp:1084kB local_pcp:448kB free_cma:0kB [ 2840.191794] lowmem_reserve[]: 0 0 0 0 0 [ 2840.195800] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (U) 0*64kB 2*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (ME) = 10316kB [ 2840.211725] Node 0 DMA32: 283*4kB (UMEH) 314*8kB (UMEH) 337*16kB (UMEH) 198*32kB (UME) 62*64kB (MH) 34*128kB (UMEH) 17*256kB (MEH) 11*512kB (UME) 2*1024kB (UH) 0*2048kB 0*4096kB = 35724kB [ 2840.229513] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2840.240899] Node 1 Normal: 69*4kB (UME) 161*8kB (UME) 14*16kB (ME) 9*32kB (UE) 9*64kB (U) 6*128kB (UME) 2*256kB (UE) 1*512kB (U) 2*1024kB (ME) 1*2048kB (E) 486*4096kB (M) = 1999196kB [ 2840.258542] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2840.268307] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2840.277377] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2840.286224] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2840.295389] 220915 total pagecache pages [ 2840.300031] 0 pages in swap cache [ 2840.303506] Swap cache stats: add 0, delete 0, find 0/0 [ 2840.309408] Free swap = 0kB [ 2840.312612] Total swap = 0kB [ 2840.315641] 1965979 pages RAM [ 2840.319270] 0 pages HighMem/MovableOnly [ 2840.323255] 339072 pages reserved [ 2840.326694] 0 pages cma reserved 22:33:36 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r3, &(0x7f0000000140)=""/156, 0x9c, 0x0) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) 22:33:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000040)) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002540)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x8011}, 0x40040) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000140)=0x20000000, 0x4) accept4$x25(r0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x1010c0, 0x0) bind$rds(r3, &(0x7f00000001c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:36 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:33:36 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x600000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0xfffffffd, 0xfffffffffffffea9) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) tkill(r1, 0x16) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 22:33:36 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 22:33:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000040)) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002540)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x8011}, 0x40040) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000140)=0x20000000, 0x4) accept4$x25(r0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x1010c0, 0x0) bind$rds(r3, &(0x7f00000001c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:36 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 22:33:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000040)) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002540)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x8011}, 0x40040) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000140)=0x20000000, 0x4) accept4$x25(r0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x1010c0, 0x0) bind$rds(r3, &(0x7f00000001c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000040)) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002540)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000b0601010000000000000000bf000008055282ed92c0467b1b45d3ec000100070000000900020073797a3000000015598dbbf4f523e074ba91770f8516258c7c2f14c87789b3470705b3e0f0499d8eef63a030b7cf6e06c8efa7712986848b42530f3470992295d54160138645cb6c267af8839e1d58736ddf76c61dd633f07a494dc1334e9369fb6637d5c90eab0000000000000000000000000000fab3bf49d7f85461613feccad334a8398bcfa896a0f5fa0775a9f921ee656539ee3b401476860553717e66c525788bcaaf2e1fb112faf9a3a0786678bae328d370f8f5a4751d5a0a733d9fa241ebb55028b5c9ff4e376bcd258392149171f38b5d34ccd33ff9ad1fe9f4425538d6015c9de1093b067b1ab451298f58"], 0x28}, 0x1, 0x0, 0x0, 0x8011}, 0x40040) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000140)=0x20000000, 0x4) accept4$x25(r0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x1010c0, 0x0) bind$rds(r3, &(0x7f00000001c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:36 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 22:33:37 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f00000002c0)=""/4096) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 22:33:37 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 22:33:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000040)) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002540)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x8011}, 0x40040) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000140)=0x20000000, 0x4) accept4$x25(r0, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x1010c0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:37 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000140)) sched_setparam(0x0, &(0x7f0000000240)=0x7fffffff) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000080)={0x1000, 0x360, 0x3c00, 0x280, 0xfff, 0xffff0000, 0x2, 0x2, {0x6, 0xa9, 0x1}, {0x7fffffff, 0x80000000}, {0xe0f, 0x0, 0x1}, {0x5, 0x81, 0x1}, 0x1, 0x2, 0xf7fff727, 0x3000, 0x1, 0xffffff03, 0x90f, 0x8000, 0x6, 0x101, 0x4, 0x8, 0x0, 0x0, 0x2, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 22:33:37 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:33:37 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r3, &(0x7f0000000140)=""/156, 0x9c, 0x0) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) 22:33:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000040)) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002540)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x8011}, 0x40040) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000140)=0x20000000, 0x4) accept4$x25(r0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:37 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 22:33:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000040)) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002540)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x8011}, 0x40040) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000140)=0x20000000, 0x4) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:37 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 22:33:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000040)) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002540)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x8011}, 0x40040) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000040)) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002540)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x8011}, 0x40040) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:40 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:33:40 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 22:33:40 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:33:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000040)) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002540)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000b0601010000000000000000bf000008055282ed92c0467b1b45d3ec000100070000000900020073797a3000000015598dbbf4f523e074ba91770f8516258c7c2f14c87789b3470705b3e0f0499d8eef63a030b7cf6e06c8efa7712986848b42530f3470992295d54160138645cb6c267af8839e1d58736ddf76c61dd633f07a494dc1334e9369fb6637d5c90eab0000000000000000000000000000fab3bf49d7f85461613feccad334a8398bcfa896a0f5fa0775a9f921ee656539ee3b401476860553717e66c525788bcaaf2e1fb112faf9a3a0786678bae328d370f8f5a4751d5a0a733d9fa241ebb55028b5c9ff4e376bcd258392149171f38b5d34ccd33ff9ad1fe9f4425538d6015c9de1093b067b1ab451298f58"], 0x28}, 0x1, 0x0, 0x0, 0x8011}, 0x40040) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:40 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000080)={0x5}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:33:40 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) fchown(0xffffffffffffffff, r2, r3) r4 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(0x0, 0xb) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 22:33:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000040)) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:40 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 22:33:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000040)) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:40 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 22:33:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) dup(0xffffffffffffffff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:41 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) tkill(0x0, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:33:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) dup(0xffffffffffffffff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:41 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:33:41 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendto$l2tp(r1, &(0x7f0000000080)="021537b2c60c9984d8d2bae70eb4b53e424449c086c3c8bb039bec4136006c213e9fd1eeeaccf982c4a6bae66e90dab4fb8f1b04e56661569718d0f6e632f709d0c4e9785707afb32445394823224be86f712d11b2799c2ec422dd7755145e3e61c6a6b6cd7c4dbfb66376228b8fb48547e3ee4f8618227bc58bcba2f3d6cf7ad2b04eeabc1983f3f6f75a6a2c92706a0b5cf2ce2f01f0556c17fc43b2cac13d8eda1b3c5c1771837c901e4db707b09702a96e073305ad0b27de87edec1e97cc7d8effc929ade930ebbd6b470677cd2eed3d3e0dda7d8ba7d6cf88ad1f56ae7008e8aba1dd696cb064507bfaa965bfdc", 0xf0, 0x42000, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() set_robust_list(&(0x7f0000000200)={&(0x7f00000001c0)={&(0x7f0000000180)}, 0x10000}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f0000000340)=""/183) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 22:33:43 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm], 0x1) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:33:43 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'os2.', '\\%]{::{\\.\x00'}, &(0x7f0000000180)=""/2, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000005533020000000800030000", @ANYRES32=0x0, @ANYBLOB="0c00990000000000fcffffff"], 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x138, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY={0x7c, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x6, 0x4, "d8f5"}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b66d4209dd21ccfd43a60d4c63"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "09e752bcabed26deee110030f2"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "c4b6ffe4f1ba160a3ab70efae8"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b30ee476750b66e1c4160fd6d9"}]}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "d0465387a7fdbd21e0c816ac14"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f71733d78cf4b4badef903a171"}, @NL80211_ATTR_KEY={0x58, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x10f407}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2f19ca1876"}]}, 0x138}, 0x1, 0x0, 0x0, 0x4806}, 0x40) 22:33:43 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) tkill(0x0, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:33:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) dup(0xffffffffffffffff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:43 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:33:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:43 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_RESUME(r5, 0x4147, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:33:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:44 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) tkill(0x0, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:33:44 executing program 1 (fault-call:6 fault-nth:0): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 22:33:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2849.329313] FAULT_INJECTION: forcing a failure. [ 2849.329313] name failslab, interval 1, probability 0, space 0, times 0 [ 2849.350281] CPU: 0 PID: 4707 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2849.358122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2849.367596] Call Trace: [ 2849.370205] dump_stack+0x1b2/0x283 [ 2849.373857] should_fail.cold+0x10a/0x154 [ 2849.378054] should_failslab+0xd6/0x130 [ 2849.382058] kmem_cache_alloc+0x28e/0x3c0 [ 2849.386232] vmx_create_vcpu+0x87/0x29a0 [ 2849.390422] ? __mutex_unlock_slowpath+0x75/0x770 [ 2849.395294] ? alloc_loaded_vmcs+0x240/0x240 [ 2849.399738] kvm_vm_ioctl+0x4ca/0x13e0 [ 2849.403651] ? kvm_vcpu_release+0xa0/0xa0 [ 2849.407827] ? perf_trace_lock+0xf7/0x490 [ 2849.411998] ? proc_fail_nth_write+0x7b/0x180 [ 2849.416511] ? check_preemption_disabled+0x35/0x240 [ 2849.421548] ? perf_trace_lock+0xf7/0x490 [ 2849.425731] ? perf_trace_lock_acquire+0x510/0x510 [ 2849.430690] ? kvm_vcpu_release+0xa0/0xa0 [ 2849.434859] do_vfs_ioctl+0x75a/0xff0 [ 2849.438845] ? selinux_inode_setxattr+0x730/0x730 [ 2849.443709] ? ioctl_preallocate+0x1a0/0x1a0 [ 2849.448140] ? lock_downgrade+0x740/0x740 [ 2849.452316] ? __fget+0x225/0x360 [ 2849.455794] ? security_file_ioctl+0x83/0xb0 [ 2849.460226] SyS_ioctl+0x7f/0xb0 [ 2849.463618] ? do_vfs_ioctl+0xff0/0xff0 [ 2849.467616] do_syscall_64+0x1d5/0x640 [ 2849.471535] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2849.477394] RIP: 0033:0x45ce69 [ 2849.480590] RSP: 002b:00007ff3b8e13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2849.488803] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2849.496087] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2849.503379] RBP: 00007ff3b8e13ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2849.510843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2849.520127] R13: 00007fffdf1aef2f R14: 00007ff3b8e149c0 R15: 000000000118bf2c 22:33:46 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x129200, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:33:46 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000080)=0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x6, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0xd) wait4(r3, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 22:33:46 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:33:46 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:33:46 executing program 1 (fault-call:6 fault-nth:1): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 22:33:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2851.467873] FAULT_INJECTION: forcing a failure. [ 2851.467873] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2851.482339] CPU: 0 PID: 4728 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2851.492774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2851.503302] Call Trace: [ 2851.506690] dump_stack+0x1b2/0x283 [ 2851.510602] should_fail.cold+0x10a/0x154 [ 2851.514863] ? static_obj+0x50/0x50 [ 2851.518552] __alloc_pages_nodemask+0x22c/0x2720 [ 2851.523508] ? __lock_acquire+0x5fc/0x3f20 [ 2851.528091] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2851.533427] ? check_preemption_disabled+0x35/0x240 [ 2851.538554] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 2851.546246] ? perf_trace_lock_acquire+0x510/0x510 [ 2851.551369] ? perf_trace_lock+0xf7/0x490 [ 2851.555833] cache_grow_begin+0x8f/0x420 [ 2851.561398] cache_alloc_refill+0x273/0x350 [ 2851.566671] kmem_cache_alloc+0x333/0x3c0 [ 2851.571287] vmx_create_vcpu+0x87/0x29a0 [ 2851.575672] ? __mutex_unlock_slowpath+0x75/0x770 [ 2851.580801] ? alloc_loaded_vmcs+0x240/0x240 [ 2851.585837] kvm_vm_ioctl+0x4ca/0x13e0 [ 2851.589744] ? kvm_vcpu_release+0xa0/0xa0 [ 2851.593913] ? perf_trace_lock+0xf7/0x490 [ 2851.598166] ? proc_fail_nth_write+0x7b/0x180 [ 2851.602795] ? check_preemption_disabled+0x35/0x240 [ 2851.607838] ? perf_trace_lock+0xf7/0x490 [ 2851.612400] ? perf_trace_lock_acquire+0x510/0x510 [ 2851.617593] ? kvm_vcpu_release+0xa0/0xa0 [ 2851.621869] do_vfs_ioctl+0x75a/0xff0 [ 2851.625690] ? selinux_inode_setxattr+0x730/0x730 [ 2851.631482] ? ioctl_preallocate+0x1a0/0x1a0 [ 2851.636345] ? lock_downgrade+0x740/0x740 [ 2851.640880] ? __fget+0x225/0x360 [ 2851.645486] ? security_file_ioctl+0x83/0xb0 [ 2851.650098] SyS_ioctl+0x7f/0xb0 [ 2851.654087] ? do_vfs_ioctl+0xff0/0xff0 [ 2851.659565] do_syscall_64+0x1d5/0x640 [ 2851.664003] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2851.669464] RIP: 0033:0x45ce69 [ 2851.673151] RSP: 002b:00007ff3b8e13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2851.681853] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2851.690781] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2851.698213] RBP: 00007ff3b8e13ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2851.705929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2851.714860] R13: 00007fffdf1aef2f R14: 00007ff3b8e149c0 R15: 000000000118bf2c 22:33:47 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:33:47 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) [ 2852.482646] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2852.505187] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2852.526885] CPU: 1 PID: 4728 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2852.535778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2852.546635] Call Trace: [ 2852.549256] dump_stack+0x1b2/0x283 [ 2852.553183] warn_alloc.cold+0x96/0x1cc [ 2852.558082] ? zone_watermark_ok_safe+0x220/0x220 [ 2852.563035] ? wait_for_completion_io+0x10/0x10 [ 2852.567844] __alloc_pages_nodemask+0x2127/0x2720 [ 2852.573087] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2852.578242] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2852.583843] alloc_pages_current+0x155/0x260 [ 2852.588651] kvm_mmu_create+0xda/0x1d0 [ 2852.592572] kvm_arch_vcpu_init+0x282/0x890 [ 2852.596911] ? alloc_pages_current+0x15d/0x260 [ 2852.601689] kvm_vcpu_init+0x26d/0x360 [ 2852.605593] vmx_create_vcpu+0xef/0x29a0 [ 2852.609786] ? __mutex_unlock_slowpath+0x75/0x770 [ 2852.615788] ? alloc_loaded_vmcs+0x240/0x240 [ 2852.620236] kvm_vm_ioctl+0x4ca/0x13e0 [ 2852.624208] ? kvm_vcpu_release+0xa0/0xa0 [ 2852.628799] ? perf_trace_lock+0xf7/0x490 [ 2852.633388] ? proc_fail_nth_write+0x7b/0x180 [ 2852.638520] ? check_preemption_disabled+0x35/0x240 [ 2852.644022] ? perf_trace_lock+0xf7/0x490 [ 2852.648394] ? perf_trace_lock_acquire+0x510/0x510 [ 2852.654417] ? kvm_vcpu_release+0xa0/0xa0 [ 2852.660063] do_vfs_ioctl+0x75a/0xff0 [ 2852.664062] ? selinux_inode_setxattr+0x730/0x730 [ 2852.669452] ? ioctl_preallocate+0x1a0/0x1a0 [ 2852.673973] ? lock_downgrade+0x740/0x740 [ 2852.678406] ? __fget+0x225/0x360 22:33:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:47 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 2852.681880] ? security_file_ioctl+0x83/0xb0 [ 2852.686308] SyS_ioctl+0x7f/0xb0 [ 2852.689693] ? do_vfs_ioctl+0xff0/0xff0 [ 2852.694505] do_syscall_64+0x1d5/0x640 [ 2852.698520] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2852.704016] RIP: 0033:0x45ce69 [ 2852.707496] RSP: 002b:00007ff3b8e13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2852.715218] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2852.722499] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2852.730775] RBP: 00007ff3b8e13ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2852.738158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2852.745473] R13: 00007fffdf1aef2f R14: 00007ff3b8e149c0 R15: 000000000118bf2c [ 2852.925285] Mem-Info: [ 2852.931588] active_anon:430626 inactive_anon:8460 isolated_anon:0 [ 2852.931588] active_file:30171 inactive_file:16347 isolated_file:0 [ 2852.931588] unevictable:149081 dirty:240 writeback:0 unstable:0 [ 2852.931588] slab_reclaimable:20156 slab_unreclaimable:255825 [ 2852.931588] mapped:62138 shmem:179355 pagetables:66691 bounce:0 [ 2852.931588] free:508830 free_pcp:341 free_cma:0 [ 2852.979035] Node 0 active_anon:1380980kB inactive_anon:17280kB active_file:36kB inactive_file:0kB unevictable:211764kB isolated(anon):0kB isolated(file):0kB mapped:217120kB dirty:8kB writeback:0kB shmem:245736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 892928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 22:33:48 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 2853.011019] Node 1 active_anon:341524kB inactive_anon:16560kB active_file:120648kB inactive_file:65388kB unevictable:384560kB isolated(anon):0kB isolated(file):0kB mapped:31432kB dirty:952kB writeback:0kB shmem:471684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2853.048552] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:112kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 22:33:48 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 2853.084873] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2853.091921] Node 0 DMA32 free:35568kB min:36272kB low:45340kB high:54408kB active_anon:1380980kB inactive_anon:17280kB active_file:36kB inactive_file:0kB unevictable:211652kB writepending:8kB present:3129332kB managed:2621196kB mlocked:60kB kernel_stack:22272kB pagetables:60160kB bounce:0kB free_pcp:236kB local_pcp:128kB free_cma:0kB [ 2853.154898] lowmem_reserve[]: 0 0 0 0 0 [ 2853.173117] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2853.215563] lowmem_reserve[]: 0 0 0 0 0 [ 2853.220272] Node 1 Normal free:1988920kB min:53612kB low:67012kB high:80412kB active_anon:341452kB inactive_anon:16560kB active_file:120652kB inactive_file:65400kB unevictable:384560kB writepending:968kB present:3932160kB managed:3870192kB mlocked:4kB kernel_stack:75744kB pagetables:206616kB bounce:0kB free_pcp:1008kB local_pcp:308kB free_cma:0kB [ 2853.254525] lowmem_reserve[]: 0 0 0 0 0 [ 2853.259783] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (U) 0*64kB 2*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (ME) = 10316kB [ 2853.276779] Node 0 DMA32: 252*4kB (UMEH) 320*8kB (UMEH) 336*16kB (UME) 198*32kB (UME) 61*64kB (M) 34*128kB (UMEH) 17*256kB (MEH) 11*512kB (UME) 2*1024kB (UH) 0*2048kB 0*4096kB = 35568kB [ 2853.294625] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2853.307387] Node 1 Normal: 74*4kB (UME) 130*8kB (UE) 24*16kB (UE) 12*32kB (UME) 0*64kB 1*128kB (E) 2*256kB (ME) 1*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 483*4096kB (M) = 1988792kB [ 2853.327069] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2853.336034] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2853.349282] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2853.358600] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2853.368692] 220958 total pagecache pages [ 2853.372890] 0 pages in swap cache [ 2853.378233] Swap cache stats: add 0, delete 0, find 0/0 [ 2853.383630] Free swap = 0kB [ 2853.387970] Total swap = 0kB [ 2853.391013] 1965979 pages RAM [ 2853.394127] 0 pages HighMem/MovableOnly [ 2853.399872] 339072 pages reserved [ 2853.403344] 0 pages cma reserved 22:33:49 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCX25SDTEFACILITIES(r3, 0x89eb, &(0x7f0000000080)={0x4900, 0x0, 0x0, 0x48, 0x1, 0x2, 0x15, "0cb1877a8dc3360ca66a00a3bea9302ba3b02942", "8b1d399eec882d0443dc5d39b836704a2ad16596"}) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@multicast1, @in6=@local}}, {{@in6=@loopback}, 0x0, @in6=@private1}}, &(0x7f00000001c0)=0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 22:33:49 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:33:49 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:33:49 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000440)={r1, &(0x7f00000002c0)="64ed3effd52fbaca6b29c5e8a987181412f2c0907b74a68e7470e0d04805e0bc1d2abe20ef5e16585e311267ee88a5cd327e2fd6375d22d970f4794d4e114d3bc0378b8a1f6269b7cc5fcde4eb0cf0107e9ca0a5693eb0b90dddbc7048e5fdc7301579d2d15e2311da8154c8d9d8eac093f236e2ca05db598015707795d2ba2b82d2b8883eae29fad4e0dbdf95934d8697298c23827db0d816a16bf65a082582773b8f870e61bc22d7345f5c5f77e61ca0b94516c845face6ca636193fa59a294a9e3b3c951e50a3dfb7b56358f50f4c1dc64c22f894738a", &(0x7f00000003c0)=""/97, 0x4}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'bridge0\x00'}) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r8, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0xf1918180a9c81f3e) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 22:33:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:49 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x8, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:33:49 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:33:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:49 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:33:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x6, 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:50 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:33:50 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:50 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:33:50 executing program 2: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2855.170079] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2855.202558] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2855.214287] CPU: 1 PID: 4799 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2855.222126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2855.232445] Call Trace: [ 2855.235056] dump_stack+0x1b2/0x283 [ 2855.238726] warn_alloc.cold+0x96/0x1cc [ 2855.242734] ? zone_watermark_ok_safe+0x220/0x220 [ 2855.247671] ? wait_for_completion_io+0x10/0x10 [ 2855.252371] __alloc_pages_nodemask+0x2127/0x2720 [ 2855.257252] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2855.262130] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2855.267037] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2855.271916] ? do_raw_spin_unlock+0x164/0x220 [ 2855.276419] alloc_pages_current+0x155/0x260 [ 2855.280817] kvm_mmu_create+0xda/0x1d0 [ 2855.284693] kvm_arch_vcpu_init+0x282/0x890 [ 2855.289005] ? alloc_pages_current+0x15d/0x260 [ 2855.293774] kvm_vcpu_init+0x26d/0x360 [ 2855.297656] vmx_create_vcpu+0xef/0x29a0 [ 2855.301984] ? __mutex_unlock_slowpath+0x75/0x770 [ 2855.307662] ? drop_futex_key_refs+0x2e/0xa0 [ 2855.312294] ? alloc_loaded_vmcs+0x240/0x240 [ 2855.316703] ? __lock_acquire+0x5fc/0x3f20 [ 2855.321027] kvm_vm_ioctl+0x4ca/0x13e0 [ 2855.324940] ? kvm_vcpu_release+0xa0/0xa0 [ 2855.329085] ? perf_trace_lock+0xf7/0x490 [ 2855.333305] ? check_preemption_disabled+0x35/0x240 [ 2855.338401] ? check_preemption_disabled+0x35/0x240 [ 2855.343487] ? perf_trace_lock+0xf7/0x490 [ 2855.347703] ? perf_trace_lock_acquire+0x510/0x510 [ 2855.352842] ? perf_trace_lock_acquire+0x510/0x510 [ 2855.357771] ? lock_acquire+0x170/0x3f0 [ 2855.361843] ? kvm_vcpu_release+0xa0/0xa0 [ 2855.365981] do_vfs_ioctl+0x75a/0xff0 [ 2855.369768] ? selinux_inode_setxattr+0x730/0x730 [ 2855.374595] ? ioctl_preallocate+0x1a0/0x1a0 [ 2855.378988] ? lock_downgrade+0x740/0x740 [ 2855.383131] ? __fget+0x225/0x360 [ 2855.386659] ? security_file_ioctl+0x83/0xb0 [ 2855.391222] SyS_ioctl+0x7f/0xb0 [ 2855.394657] ? do_vfs_ioctl+0xff0/0xff0 [ 2855.398805] do_syscall_64+0x1d5/0x640 [ 2855.402889] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2855.408071] RIP: 0033:0x45ce69 [ 2855.411241] RSP: 002b:00007ff3b8e13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2855.419387] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2855.426754] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 2855.434116] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2855.441596] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2855.448946] R13: 00007fffdf1aef2f R14: 00007ff3b8e149c0 R15: 000000000118bf2c 22:33:50 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) [ 2855.540891] Mem-Info: [ 2855.552671] active_anon:430917 inactive_anon:8460 isolated_anon:0 [ 2855.552671] active_file:30174 inactive_file:16351 isolated_file:4 [ 2855.552671] unevictable:149081 dirty:254 writeback:0 unstable:0 [ 2855.552671] slab_reclaimable:20126 slab_unreclaimable:255979 [ 2855.552671] mapped:62178 shmem:179355 pagetables:66994 bounce:0 [ 2855.552671] free:507891 free_pcp:360 free_cma:0 [ 2855.613331] Node 0 active_anon:1380980kB inactive_anon:17280kB active_file:16kB inactive_file:4kB unevictable:211764kB isolated(anon):0kB isolated(file):16kB mapped:217120kB dirty:8kB writeback:0kB shmem:245736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 892928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2855.653034] Node 1 active_anon:342688kB inactive_anon:16560kB active_file:120680kB inactive_file:65400kB unevictable:384560kB isolated(anon):0kB isolated(file):0kB mapped:31592kB dirty:1008kB writeback:0kB shmem:471684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2855.692021] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:112kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2855.727145] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2855.732737] Node 0 DMA32 free:35568kB min:36272kB low:45340kB high:54408kB active_anon:1380980kB inactive_anon:17280kB active_file:16kB inactive_file:4kB unevictable:211652kB writepending:8kB present:3129332kB managed:2621196kB mlocked:60kB kernel_stack:22272kB pagetables:60160kB bounce:0kB free_pcp:256kB local_pcp:108kB free_cma:0kB [ 2855.770519] lowmem_reserve[]: 0 0 0 0 0 [ 2855.775509] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2855.809655] lowmem_reserve[]: 0 0 0 0 0 [ 2855.814167] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2855.814341] Node 1 [ 2855.826830] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2855.834440] Normal free:1986884kB min:53612kB low:67012kB high:80412kB active_anon:342728kB inactive_anon:16560kB active_file:120700kB inactive_file:65412kB unevictable:384560kB writepending:1064kB present:3932160kB managed:3870192kB mlocked:4kB kernel_stack:76224kB pagetables:207724kB bounce:0kB free_pcp:0kB local_pcp:4kB free_cma:0kB [ 2855.835359] CPU: 1 PID: 4866 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2855.865254] lowmem_reserve[]: [ 2855.872507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2855.872512] Call Trace: [ 2855.872529] dump_stack+0x1b2/0x283 [ 2855.872546] warn_alloc.cold+0x96/0x1cc [ 2855.872558] ? zone_watermark_ok_safe+0x220/0x220 [ 2855.872579] ? wait_for_completion_io+0x10/0x10 [ 2855.872595] __alloc_pages_nodemask+0x2127/0x2720 [ 2855.881928] 0 [ 2855.886494] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2855.886506] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2855.886521] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2855.886556] ? do_raw_spin_unlock+0x164/0x220 [ 2855.889501] 0 [ 2855.892771] alloc_pages_current+0x155/0x260 [ 2855.892788] kvm_mmu_create+0xda/0x1d0 [ 2855.892800] kvm_arch_vcpu_init+0x282/0x890 [ 2855.901852] 0 [ 2855.906484] ? alloc_pages_current+0x15d/0x260 [ 2855.906507] kvm_vcpu_init+0x26d/0x360 [ 2855.906519] vmx_create_vcpu+0xef/0x29a0 [ 2855.906535] ? __mutex_unlock_slowpath+0x75/0x770 [ 2855.906548] ? drop_futex_key_refs+0x2e/0xa0 [ 2855.906558] ? alloc_loaded_vmcs+0x240/0x240 [ 2855.906572] ? __lock_acquire+0x5fc/0x3f20 [ 2855.917641] 0 [ 2855.918257] kvm_vm_ioctl+0x4ca/0x13e0 [ 2855.923605] 0 [ 2855.928171] ? kvm_vcpu_release+0xa0/0xa0 [ 2855.928189] ? perf_trace_lock+0xf7/0x490 [ 2855.928201] ? check_preemption_disabled+0x35/0x240 [ 2855.928212] ? check_preemption_disabled+0x35/0x240 [ 2855.928225] ? perf_trace_lock+0xf7/0x490 [ 2855.934655] ? perf_trace_lock_acquire+0x510/0x510 [ 2855.934668] ? perf_trace_lock_acquire+0x510/0x510 [ 2855.934679] ? lock_acquire+0x170/0x3f0 [ 2855.934692] ? kvm_vcpu_release+0xa0/0xa0 [ 2855.944955] Node 0 [ 2855.947475] do_vfs_ioctl+0x75a/0xff0 [ 2855.947489] ? selinux_inode_setxattr+0x730/0x730 [ 2855.947502] ? ioctl_preallocate+0x1a0/0x1a0 [ 2855.947514] ? lock_downgrade+0x740/0x740 [ 2855.947534] ? __fget+0x225/0x360 [ 2855.947553] ? security_file_ioctl+0x83/0xb0 [ 2855.953037] DMA: [ 2855.954099] SyS_ioctl+0x7f/0xb0 [ 2855.954111] ? do_vfs_ioctl+0xff0/0xff0 [ 2855.954123] do_syscall_64+0x1d5/0x640 [ 2855.954140] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2855.961039] 1*4kB [ 2855.962155] RIP: 0033:0x45ce69 [ 2855.962161] RSP: 002b:00007ff3b8df2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2855.962171] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2855.962179] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000008 [ 2855.969810] (U) [ 2855.971407] RBP: 000000000118c000 R08: 0000000000000000 R09: 0000000000000000 [ 2855.971413] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bfcc [ 2855.971418] R13: 00007fffdf1aef2f R14: 00007ff3b8df39c0 R15: 000000000118bfcc [ 2856.140520] 1*8kB (U) 2*16kB (UM) 1*32kB (U) 0*64kB 2*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (ME) = 10316kB [ 2856.153628] Node 0 DMA32: 281*4kB (UME) 323*8kB (UME) 336*16kB (UME) 198*32kB (UME) 61*64kB (M) 34*128kB (UME) 17*256kB (UME) 11*512kB (UME) 2*1024kB (U) 0*2048kB 0*4096kB = 35708kB [ 2856.171983] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2856.184705] Node 1 Normal: 103*4kB (UME) 72*8kB (UME) 30*16kB (UME) 19*32kB (UME) 5*64kB (U) 2*128kB (ME) 2*256kB (UE) 1*512kB (U) 1*1024kB (E) 1*2048kB (E) 483*4096kB (M) = 1985116kB [ 2856.203207] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2856.212902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2856.221920] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2856.231284] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2856.240265] 220976 total pagecache pages [ 2856.244338] 0 pages in swap cache [ 2856.248294] Swap cache stats: add 0, delete 0, find 0/0 [ 2856.253670] Free swap = 0kB [ 2856.257136] Total swap = 0kB [ 2856.260221] 1965979 pages RAM [ 2856.263330] 0 pages HighMem/MovableOnly [ 2856.267777] 339072 pages reserved 22:33:51 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="0f6741425bc42d8aa05c97b463a83d70a670484815219cc0f2c56e4c9b52360e191594809167a227111bcddb3f", 0x2d) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 22:33:51 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000080), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000000c0)="b33f253bf75f05a2d303e9b3a7ba2448", 0x10) socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 2856.271236] 0 pages cma reserved [ 2856.520276] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2856.555106] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2856.571190] CPU: 0 PID: 4895 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2856.579791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2856.589296] Call Trace: [ 2856.592030] dump_stack+0x1b2/0x283 [ 2856.595797] warn_alloc.cold+0x96/0x1cc [ 2856.600026] ? zone_watermark_ok_safe+0x220/0x220 [ 2856.604890] ? wait_for_completion_io+0x10/0x10 [ 2856.609580] __alloc_pages_nodemask+0x2127/0x2720 [ 2856.614472] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2856.619374] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2856.624248] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2856.629124] ? do_raw_spin_unlock+0x164/0x220 [ 2856.633645] alloc_pages_current+0x155/0x260 [ 2856.638193] kvm_mmu_create+0xda/0x1d0 [ 2856.642319] kvm_arch_vcpu_init+0x282/0x890 [ 2856.646700] ? alloc_pages_current+0x15d/0x260 [ 2856.651745] kvm_vcpu_init+0x26d/0x360 [ 2856.655743] vmx_create_vcpu+0xef/0x29a0 [ 2856.659841] ? __mutex_unlock_slowpath+0x75/0x770 [ 2856.664706] ? drop_futex_key_refs+0x2e/0xa0 [ 2856.669157] ? alloc_loaded_vmcs+0x240/0x240 [ 2856.673591] ? __lock_acquire+0x5fc/0x3f20 [ 2856.677900] kvm_vm_ioctl+0x4ca/0x13e0 [ 2856.681811] ? kvm_vcpu_release+0xa0/0xa0 [ 2856.685987] ? perf_trace_lock+0xf7/0x490 [ 2856.690249] ? check_preemption_disabled+0x35/0x240 [ 2856.695299] ? check_preemption_disabled+0x35/0x240 [ 2856.700343] ? perf_trace_lock+0xf7/0x490 [ 2856.704520] ? perf_trace_lock_acquire+0x510/0x510 [ 2856.709472] ? perf_trace_lock_acquire+0x510/0x510 [ 2856.714436] ? lock_acquire+0x170/0x3f0 [ 2856.718435] ? kvm_vcpu_release+0xa0/0xa0 [ 2856.722894] do_vfs_ioctl+0x75a/0xff0 [ 2856.726712] ? selinux_inode_setxattr+0x730/0x730 [ 2856.731698] ? ioctl_preallocate+0x1a0/0x1a0 [ 2856.736123] ? lock_downgrade+0x740/0x740 [ 2856.740704] ? __fget+0x225/0x360 [ 2856.744532] ? security_file_ioctl+0x83/0xb0 [ 2856.748960] SyS_ioctl+0x7f/0xb0 [ 2856.752351] ? do_vfs_ioctl+0xff0/0xff0 [ 2856.756340] do_syscall_64+0x1d5/0x640 [ 2856.760374] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2856.765570] RIP: 0033:0x45ce69 [ 2856.768762] RSP: 002b:00007ff3b8e13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2856.776607] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2856.783891] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2856.791252] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2856.798646] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2856.805915] R13: 00007fffdf1aef2f R14: 00007ff3b8e149c0 R15: 000000000118bf2c [ 2856.822895] warn_alloc_show_mem: 1 callbacks suppressed [ 2856.823052] Mem-Info: [ 2856.832788] active_anon:430902 inactive_anon:8460 isolated_anon:0 [ 2856.832788] active_file:30181 inactive_file:16356 isolated_file:0 [ 2856.832788] unevictable:149081 dirty:0 writeback:0 unstable:0 [ 2856.832788] slab_reclaimable:20138 slab_unreclaimable:256253 [ 2856.832788] mapped:62201 shmem:179355 pagetables:66934 bounce:0 [ 2856.832788] free:507788 free_pcp:347 free_cma:0 [ 2856.869926] Node 0 active_anon:1380980kB inactive_anon:17280kB active_file:24kB inactive_file:0kB unevictable:211764kB isolated(anon):0kB isolated(file):12kB mapped:217120kB dirty:8kB writeback:0kB shmem:245736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 892928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2856.904544] Node 1 active_anon:342480kB inactive_anon:16560kB active_file:120700kB inactive_file:65460kB unevictable:384560kB isolated(anon):0kB isolated(file):0kB mapped:31520kB dirty:68kB writeback:0kB shmem:471684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2856.973319] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:112kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2857.001471] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2857.007884] Node 0 DMA32 free:35708kB min:36272kB low:45340kB high:54408kB active_anon:1380980kB inactive_anon:17280kB active_file:24kB inactive_file:12kB unevictable:211652kB writepending:8kB present:3129332kB managed:2621196kB mlocked:60kB kernel_stack:22272kB pagetables:60160kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 2857.040638] lowmem_reserve[]: 0 0 0 0 0 [ 2857.044842] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2857.072011] lowmem_reserve[]: 0 0 0 0 0 [ 2857.076587] Node 1 Normal free:1987588kB min:53612kB low:67012kB high:80412kB active_anon:342480kB inactive_anon:16560kB active_file:120700kB inactive_file:65460kB unevictable:384560kB writepending:92kB present:3932160kB managed:3870192kB mlocked:4kB kernel_stack:76000kB pagetables:207492kB bounce:0kB free_pcp:1416kB local_pcp:700kB free_cma:0kB [ 2857.108844] lowmem_reserve[]: 0 0 0 0 0 [ 2857.112990] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (U) 0*64kB 2*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (ME) = 10316kB [ 2857.129147] Node 0 DMA32: 281*4kB (UME) 323*8kB (UME) 336*16kB (UME) 198*32kB (UME) 61*64kB (M) 34*128kB (UME) 17*256kB (UME) 11*512kB (UME) 2*1024kB (U) 0*2048kB 0*4096kB = 35708kB [ 2857.147476] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2857.158662] Node 1 Normal: 59*4kB (UME) 83*8kB (UME) 74*16kB (UME) 37*32kB (UME) 17*64kB (U) 2*128kB (ME) 2*256kB (UE) 1*512kB (U) 1*1024kB (E) 1*2048kB (E) 483*4096kB (M) = 1987076kB [ 2857.175810] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2857.185233] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2857.194351] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2857.203787] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2857.212860] 220989 total pagecache pages [ 2857.217326] 0 pages in swap cache [ 2857.220797] Swap cache stats: add 0, delete 0, find 0/0 [ 2857.226854] Free swap = 0kB [ 2857.229902] Total swap = 0kB [ 2857.232925] 1965979 pages RAM [ 2857.236525] 0 pages HighMem/MovableOnly [ 2857.240508] 339072 pages reserved [ 2857.243956] 0 pages cma reserved 22:33:52 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_dccp_buf(r1, 0x21, 0xe, &(0x7f0000000180)="71831daa8fd8118256a847a16b0fcc361a746157648b2aeda58a4b24a0b7aa6c4bcbe54c9f9ed23920a3b5de88d12451ef52e039f3d9ec5f01af72df0f285510d5f756338a4b1d24fd517add12f3498bae8dc17c2e32af0794c4cf3cb90a9bf15d3174581f7c6f1c7f9309d60ca4eb4b79da17079812060fa216433b52668d0103e8d00b2a950e280be2dabfa1afdfea596252ae06867b6e162541ae3fc026a4f646cc178472661ae0edf1a3db267fab2c433db4aa68352e8b6e8c5c6ae5457393f08b73e9a5e6", 0xc7) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000080)={'security\x00'}, &(0x7f0000000100)=0x54) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 22:33:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = accept4(r1, &(0x7f0000000440)=@ipx, &(0x7f0000000000)=0x80, 0x80000) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$UHID_CREATE2(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a900ff07030000000800000000080000010400004da254cefc569fe47eff94466df522bc4072231db686c73278c043ee86b1e42771c20a0261e176f2b7bbdab5648b9e22ef197306658fa71ab0ecd55f1382249f58e654a258863ee2cef5d0015e95852f5ec6484b8a1c89947584e1a1c44bb593ceb4a47558550e94bdc8d1d2c5f14ba5922f31d4f97e89685e870603ca4fd12fffa174bea3373c81c315eeb9d9f8f151bba668b960c4540cd1eaff9a227d260ad35932677e838c1a4904986c7dd9fba5b178cea1e1c6a0ec8ef80f58099379fcb5f98658a0304808318216bffc3004432295d4276e156a087c73902997d719347aab83a10eb6b103f5dffca02e1588447676c96099e22dea7129fe41149918d429b706b3653f54e2c291005033f8963ab19cc12f799e48871c7c6396cddf4dc0b2b3a5915a96d29127a70cfe13ceb2cc7d78fa3b067ef57fa0009ad6fa118b14d7e489ec7167a0821817aec7175bb9b187029e0977c6c6e3301fc77e68ad7cd0cae7f5a0fd9d8c0fefe2821c484f14f0931d531d293619d151838535b7faa219ce1e"], 0x1c1) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$UHID_DESTROY(r7, &(0x7f0000000180), 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, [], 0x3c}, 0x1}, 0x1c) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000000e00000a0000000500010085770db641070000000900020073797a300000000005000100070000001d0001ba0007000000050001000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x2080}, 0x8084) getsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000100), &(0x7f0000000400)=0x4) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x3, @remote, 'macvtap0\x00'}}, 0x1e) 22:33:52 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:33:52 executing program 2: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:33:52 executing program 5 (fault-call:2 fault-nth:0): clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:52 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:33:52 executing program 2: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:52 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) tkill(r0, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:33:52 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:52 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) tkill(r0, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:33:52 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r3, &(0x7f0000000000)="9f", 0x1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000)={r3, 0x5d, 0x63}, &(0x7f0000000180)={'enc=', 'oaep', ' hash=', {'wp512-generic\x00'}}, &(0x7f0000000200)="b673a2918ee829d9cfa1bccc099e49cc688752428eb1e2ed198dcb2ae75e9d1e34806533e934995bf69736dac40132aa3bf7eeb42f56dc841b059592e745539ddce225ca54163a740e3c13f1d8082fea29da29fb70723adc9c13ac1a93", &(0x7f0000000280)=""/99) [ 2858.150931] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2858.162696] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2858.172234] CPU: 0 PID: 4976 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2858.180220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2858.189577] Call Trace: [ 2858.192208] dump_stack+0x1b2/0x283 [ 2858.195858] warn_alloc.cold+0x96/0x1cc [ 2858.199864] ? zone_watermark_ok_safe+0x220/0x220 [ 2858.204757] ? wait_for_completion_io+0x10/0x10 [ 2858.209630] __alloc_pages_nodemask+0x2127/0x2720 [ 2858.214603] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2858.219688] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2858.224639] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2858.229524] ? do_raw_spin_unlock+0x164/0x220 [ 2858.234025] alloc_pages_current+0x155/0x260 [ 2858.238459] kvm_mmu_create+0xda/0x1d0 [ 2858.242364] kvm_arch_vcpu_init+0x282/0x890 [ 2858.246813] ? alloc_pages_current+0x15d/0x260 [ 2858.251413] kvm_vcpu_init+0x26d/0x360 [ 2858.255459] vmx_create_vcpu+0xef/0x29a0 [ 2858.259666] ? __mutex_unlock_slowpath+0x75/0x770 [ 2858.264885] ? drop_futex_key_refs+0x2e/0xa0 [ 2858.269313] ? alloc_loaded_vmcs+0x240/0x240 [ 2858.274056] ? __lock_acquire+0x5fc/0x3f20 [ 2858.278299] kvm_vm_ioctl+0x4ca/0x13e0 [ 2858.282202] ? kvm_vcpu_release+0xa0/0xa0 [ 2858.286380] ? perf_trace_lock+0xf7/0x490 [ 2858.290542] ? check_preemption_disabled+0x35/0x240 [ 2858.295564] ? check_preemption_disabled+0x35/0x240 [ 2858.300599] ? perf_trace_lock+0xf7/0x490 [ 2858.304762] ? perf_trace_lock_acquire+0x510/0x510 [ 2858.309701] ? perf_trace_lock_acquire+0x510/0x510 [ 2858.314670] ? lock_acquire+0x170/0x3f0 [ 2858.318660] ? kvm_vcpu_release+0xa0/0xa0 [ 2858.322829] do_vfs_ioctl+0x75a/0xff0 [ 2858.326664] ? selinux_inode_setxattr+0x730/0x730 [ 2858.331926] ? ioctl_preallocate+0x1a0/0x1a0 [ 2858.336438] ? lock_downgrade+0x740/0x740 [ 2858.340606] ? __fget+0x225/0x360 [ 2858.344190] ? security_file_ioctl+0x83/0xb0 [ 2858.348706] SyS_ioctl+0x7f/0xb0 [ 2858.352085] ? do_vfs_ioctl+0xff0/0xff0 [ 2858.356080] do_syscall_64+0x1d5/0x640 [ 2858.356533] FAULT_INJECTION: forcing a failure. [ 2858.356533] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2858.360012] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2858.360022] RIP: 0033:0x45ce69 [ 2858.360028] RSP: 002b:00007ff3b8e13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2858.360038] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2858.360048] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2858.402811] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2858.410098] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2858.417513] R13: 00007fffdf1aef2f R14: 00007ff3b8e149c0 R15: 000000000118bf2c [ 2858.425198] CPU: 1 PID: 4921 Comm: syz-executor.5 Not tainted 4.14.193-syzkaller #0 [ 2858.433014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2858.442462] Call Trace: [ 2858.445059] dump_stack+0x1b2/0x283 [ 2858.448707] should_fail.cold+0x10a/0x154 [ 2858.452867] __alloc_pages_nodemask+0x22c/0x2720 [ 2858.457636] ? __lock_acquire+0x5fc/0x3f20 [ 2858.461095] Mem-Info: [ 2858.461882] ? trace_hardirqs_on+0x10/0x10 [ 2858.461895] ? perf_trace_lock+0xf7/0x490 [ 2858.471508] active_anon:431044 inactive_anon:8460 isolated_anon:0 [ 2858.471508] active_file:30188 inactive_file:16370 isolated_file:0 [ 2858.471508] unevictable:149081 dirty:97 writeback:0 unstable:0 [ 2858.471508] slab_reclaimable:20144 slab_unreclaimable:256061 [ 2858.471508] mapped:62168 shmem:179355 pagetables:67072 bounce:0 [ 2858.471508] free:507510 free_pcp:377 free_cma:0 [ 2858.472709] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 2858.472838] ? check_preemption_disabled+0x35/0x240 [ 2858.472864] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2858.472874] ? perf_trace_lock+0xf7/0x490 [ 2858.472905] ? unwind_next_frame+0xe54/0x17d0 [ 2858.530991] Node 0 active_anon:1380980kB inactive_anon:17280kB active_file:32kB inactive_file:4kB unevictable:211764kB isolated(anon):0kB isolated(file):0kB mapped:217120kB dirty:8kB writeback:0kB shmem:245736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 892928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2858.532418] ? lock_acquire+0x170/0x3f0 [ 2858.532431] ? mem_cgroup_id_get_online+0xb0/0xb0 [ 2858.532443] ? __unlock_page_memcg+0x4f/0x100 [ 2858.561328] Node 1 active_anon:343196kB inactive_anon:16560kB active_file:120720kB inactive_file:65476kB unevictable:384560kB isolated(anon):0kB isolated(file):0kB mapped:31552kB dirty:380kB writeback:0kB shmem:471684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2858.564860] alloc_pages_current+0x155/0x260 [ 2858.564878] __get_free_pages+0xb/0x40 [ 2858.573311] Node 0 [ 2858.574280] __tlb_remove_page_size+0x272/0x440 [ 2858.574293] unmap_page_range+0xf92/0x1ce0 [ 2858.574320] ? vm_normal_page_pmd+0x340/0x340 [ 2858.606002] DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:112kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2858.607399] unmap_single_vma+0x147/0x2b0 [ 2858.607418] unmap_vmas+0x9d/0x160 [ 2858.607429] exit_mmap+0x271/0x4b0 [ 2858.607438] ? SyS_remap_file_pages+0x6a0/0x6a0 [ 2858.613521] lowmem_reserve[]: [ 2858.613567] ? kmem_cache_free+0x23a/0x2b0 [ 2858.621970] 0 [ 2858.622467] ? __khugepaged_exit+0x29b/0x3c0 [ 2858.627232] 2557 [ 2858.653031] mmput+0xfa/0x420 [ 2858.653047] do_exit+0x948/0x27f0 [ 2858.653077] ? perf_trace_lock_acquire+0x510/0x510 [ 2858.653089] ? mm_update_next_owner+0x5b0/0x5b0 [ 2858.653097] ? get_signal+0x323/0x1ca0 [ 2858.653118] ? lock_acquire+0x170/0x3f0 [ 2858.653131] ? lock_downgrade+0x740/0x740 [ 2858.653145] do_group_exit+0x100/0x2e0 [ 2858.658143] 2557 [ 2858.661317] get_signal+0x38d/0x1ca0 [ 2858.661341] do_signal+0x7c/0x1550 [ 2858.661352] ? lock_downgrade+0x740/0x740 [ 2858.661363] ? check_preemption_disabled+0x35/0x240 [ 2858.661373] ? setup_sigcontext+0x820/0x820 [ 2858.674042] 2557 [ 2858.677283] ? kick_process+0xe4/0x170 [ 2858.677297] ? task_work_add+0x87/0xe0 [ 2858.677410] ? sco_sock_create+0xf0/0xf0 [ 2858.677425] ? fput+0xaa/0x140 [ 2858.680270] 2557 [ 2858.683652] ? SyS_connect+0xf6/0x240 [ 2858.683662] ? SyS_accept+0x30/0x30 [ 2858.683681] ? vfs_write+0x319/0x4d0 [ 2858.683694] ? fput+0xb/0x140 [ 2858.697407] ? exit_to_usermode_loop+0x41/0x200 [ 2858.697420] exit_to_usermode_loop+0x160/0x200 [ 2858.697434] do_syscall_64+0x4a3/0x640 [ 2858.697450] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2858.702479] Node 0 [ 2858.706043] RIP: 0033:0x45ce69 [ 2858.706049] RSP: 002b:00007f01d84eac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2858.706057] RAX: fffffffffffffffc RBX: 0000000000002180 RCX: 000000000045ce69 [ 2858.706061] RDX: 0000000000000008 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2858.706065] RBP: 00007f01d84eaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2858.706069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2858.706074] R13: 00007ffd15b7a2ef R14: 00007f01d84eb9c0 R15: 000000000118bf2c [ 2858.852620] DMA32 free:35724kB min:36272kB low:45340kB high:54408kB active_anon:1380980kB inactive_anon:17280kB active_file:36kB inactive_file:0kB unevictable:211652kB writepending:8kB present:3129332kB managed:2621196kB mlocked:60kB kernel_stack:22272kB pagetables:60160kB bounce:0kB free_pcp:136kB local_pcp:132kB free_cma:0kB [ 2858.884490] lowmem_reserve[]: 0 0 0 0 0 [ 2858.889421] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2858.918066] lowmem_reserve[]: 0 0 0 0 0 [ 2858.922090] Node 1 Normal free:1984020kB min:53612kB low:67012kB high:80412kB active_anon:343064kB inactive_anon:16560kB active_file:120720kB inactive_file:65512kB unevictable:384560kB writepending:428kB present:3932160kB managed:3870192kB mlocked:4kB kernel_stack:76128kB pagetables:208048kB bounce:0kB free_pcp:1348kB local_pcp:672kB free_cma:0kB [ 2858.954292] lowmem_reserve[]: 0 0 0 0 0 [ 2858.959068] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (U) 0*64kB 2*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (ME) = 10316kB [ 2858.974194] Node 0 DMA32: 281*4kB (UME) 325*8kB (UME) 336*16kB (UME) 198*32kB (UME) 61*64kB (M) 34*128kB (UME) 17*256kB (UME) 11*512kB (UME) 2*1024kB (U) 0*2048kB 0*4096kB = 35724kB [ 2858.991915] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2859.003773] Node 1 Normal: 135*4kB (UME) 93*8kB (UME) 28*16kB (UME) 37*32kB (UME) 8*64kB (UM) 3*128kB (UE) 2*256kB (UE) 2*512kB (UM) 2*1024kB (ME) 3*2048kB (UME) 481*4096kB (M) = 1983716kB [ 2859.022903] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2859.032453] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2859.041646] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2859.051178] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2859.060258] 221003 total pagecache pages [ 2859.064555] 0 pages in swap cache [ 2859.069330] Swap cache stats: add 0, delete 0, find 0/0 [ 2859.078280] Free swap = 0kB [ 2859.081348] Total swap = 0kB [ 2859.084380] 1965979 pages RAM [ 2859.088005] 0 pages HighMem/MovableOnly [ 2859.092183] 339072 pages reserved [ 2859.095633] 0 pages cma reserved 22:33:55 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:55 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) tkill(r0, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:33:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:33:55 executing program 5: clone(0x2000000049102100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="0f42", 0x2) r1 = dup(0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup(r2) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000002c0)=@nat={'nat\x00', 0x1b, 0x5, 0x460, 0x2c0, 0x108, 0xffffffff, 0x1f0, 0x108, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, &(0x7f0000000240), {[{{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@set={{0x40, 'set\x00'}, {{0x4, [0x0, 0x0, 0x4, 0x1, 0x2, 0x3], 0x3, 0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2, @broadcast, @empty, @port=0x4e21, @icmp_id=0x66}}}}, {{@ip={@empty, @broadcast, 0xff, 0x0, 'netdevsim0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x42}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40, 'set\x00'}, {{0x3, [0x2, 0x6, 0x6, 0x1, 0x4], 0x5, 0x3}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x10}, @port=0x4e21, @icmp_id=0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0xfff, 0xe, [0x4, 0x0, 0x4, 0xc, 0x14, 0x23, 0x1d, 0x10, 0x7, 0xd, 0x1e, 0x1b, 0x19, 0x2a, 0x3d, 0xb], 0x0, 0x8, 0x100}}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x1, 0x7ff], 0x1}}, @common=@unspec=@mac={{0x30, 'mac\x00'}, {@broadcast, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x14, @multicast2, @private=0xa010102, @icmp_id=0x68, @icmp_id=0x66}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETISPACE(r5, 0x8010500d, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x20, 0x2, 0x1, 'queue1\x00', 0x2}) 22:33:55 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0xfffffffffffffff9, 0x48) tkill(r1, 0xd) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x2, 0x4, 0x0, 0x9}) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_int(r3, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 22:33:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 2860.623563] IPVS: ftp: loaded support on port[0] = 21 [ 2860.639885] Cannot find set identified by id 4 to match [ 2860.817875] ptrace attach of "/root/syz-executor.0"[5036] was attempted by "/root/syz-executor.0"[5037] 22:33:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:33:56 executing program 5: clone(0x8a120400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f0000000000)) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={[], 0x10}}, 0x8) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x5, 0x8}, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x26e1, 0x0) close(r6) socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYRES64=r3], &(0x7f0000000180)=0x4) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f00000000c0), 0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x1}, 0x8) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r4, r7, 0x1f}, 0x10) 22:33:56 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2861.428376] Cannot find set identified by id 4 to match 22:33:56 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) [ 2861.477607] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) 22:33:56 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r3}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={r3, 0x46, "19c18a7db640cefe96ad694c99779b9be0c2446fe8b1d7388268977ad33e991a6be5155cc051554b09935e73baf9e340a3783f828dd488f310e625eda7162e20bc1a5a7df312"}, &(0x7f0000000100)=0x4e) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 2861.566666] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2861.608379] CPU: 0 PID: 5012 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2861.617688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2861.627656] Call Trace: [ 2861.630416] dump_stack+0x1b2/0x283 [ 2861.634691] warn_alloc.cold+0x96/0x1cc [ 2861.639075] ? zone_watermark_ok_safe+0x220/0x220 [ 2861.644588] ? wait_for_completion_io+0x10/0x10 [ 2861.649366] __alloc_pages_nodemask+0x2127/0x2720 [ 2861.655517] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2861.660588] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2861.667286] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2861.672267] ? do_raw_spin_unlock+0x164/0x220 [ 2861.676965] alloc_pages_current+0x155/0x260 [ 2861.681807] kvm_mmu_create+0xda/0x1d0 [ 2861.687488] kvm_arch_vcpu_init+0x282/0x890 [ 2861.692721] ? alloc_pages_current+0x15d/0x260 [ 2861.697850] kvm_vcpu_init+0x26d/0x360 [ 2861.702023] vmx_create_vcpu+0xef/0x29a0 [ 2861.706111] ? __mutex_unlock_slowpath+0x75/0x770 [ 2861.711065] ? drop_futex_key_refs+0x2e/0xa0 [ 2861.715837] ? alloc_loaded_vmcs+0x240/0x240 [ 2861.720353] ? __lock_acquire+0x5fc/0x3f20 [ 2861.724601] kvm_vm_ioctl+0x4ca/0x13e0 [ 2861.729053] ? kvm_vcpu_release+0xa0/0xa0 [ 2861.733484] ? perf_trace_lock+0xf7/0x490 [ 2861.737992] ? check_preemption_disabled+0x35/0x240 [ 2861.744011] ? check_preemption_disabled+0x35/0x240 [ 2861.749144] ? perf_trace_lock+0xf7/0x490 [ 2861.753852] ? perf_trace_lock_acquire+0x510/0x510 [ 2861.758835] ? perf_trace_lock_acquire+0x510/0x510 [ 2861.764506] ? lock_acquire+0x170/0x3f0 [ 2861.768786] ? kvm_vcpu_release+0xa0/0xa0 [ 2861.773266] do_vfs_ioctl+0x75a/0xff0 [ 2861.777102] ? selinux_inode_setxattr+0x730/0x730 [ 2861.782137] ? ioctl_preallocate+0x1a0/0x1a0 [ 2861.787043] ? lock_downgrade+0x740/0x740 [ 2861.791794] ? __fget+0x225/0x360 [ 2861.795471] ? security_file_ioctl+0x83/0xb0 [ 2861.800257] SyS_ioctl+0x7f/0xb0 [ 2861.803735] ? do_vfs_ioctl+0xff0/0xff0 [ 2861.807756] do_syscall_64+0x1d5/0x640 [ 2861.811852] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2861.817156] RIP: 0033:0x45ce69 [ 2861.820483] RSP: 002b:00007ff3b8e13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2861.828455] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2861.836447] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000008 [ 2861.844346] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2861.851746] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2861.859197] R13: 00007fffdf1aef2f R14: 00007ff3b8e149c0 R15: 000000000118bf2c 22:33:57 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:57 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x8200, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000040)) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00000006c0)="0828d0628f2b0d60f2c6b1795fef73f2d9afb54984d5e78061b773d115cef40d75e1dc0522a6b2c2a5514d253a805c6113a3bf3e3a0dde967b7041ae11fe54744a26dd81274a7c76bcf13aea8e5a94f5eda1e39c73597e77c32b31068f9388577942b420667510845452f77adf8f2ff6066593cab0d936", 0x77) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2862.098360] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) 22:33:57 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 2862.189281] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2862.234390] CPU: 0 PID: 5073 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2862.242397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2862.251935] Call Trace: [ 2862.254702] dump_stack+0x1b2/0x283 [ 2862.258744] warn_alloc.cold+0x96/0x1cc [ 2862.262774] ? zone_watermark_ok_safe+0x220/0x220 [ 2862.267652] ? wait_for_completion_io+0x10/0x10 [ 2862.272539] __alloc_pages_nodemask+0x2127/0x2720 [ 2862.277590] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2862.282457] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2862.287496] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2862.293599] ? do_raw_spin_unlock+0x164/0x220 [ 2862.298923] alloc_pages_current+0x155/0x260 [ 2862.304389] kvm_mmu_create+0xda/0x1d0 [ 2862.308303] kvm_arch_vcpu_init+0x282/0x890 [ 2862.313104] ? alloc_pages_current+0x15d/0x260 [ 2862.317754] kvm_vcpu_init+0x26d/0x360 [ 2862.321795] vmx_create_vcpu+0xef/0x29a0 [ 2862.325966] ? __mutex_unlock_slowpath+0x75/0x770 [ 2862.330910] ? drop_futex_key_refs+0x2e/0xa0 [ 2862.335335] ? alloc_loaded_vmcs+0x240/0x240 [ 2862.339796] ? __lock_acquire+0x5fc/0x3f20 [ 2862.344139] kvm_vm_ioctl+0x4ca/0x13e0 [ 2862.348434] ? kvm_vcpu_release+0xa0/0xa0 [ 2862.352882] ? perf_trace_lock+0xf7/0x490 [ 2862.359935] ? check_preemption_disabled+0x35/0x240 [ 2862.366374] ? check_preemption_disabled+0x35/0x240 [ 2862.371590] ? perf_trace_lock+0xf7/0x490 [ 2862.375838] ? perf_trace_lock_acquire+0x510/0x510 [ 2862.381137] ? perf_trace_lock_acquire+0x510/0x510 [ 2862.386272] ? lock_acquire+0x170/0x3f0 [ 2862.394023] ? kvm_vcpu_release+0xa0/0xa0 [ 2862.398290] do_vfs_ioctl+0x75a/0xff0 [ 2862.402193] ? selinux_inode_setxattr+0x730/0x730 [ 2862.407627] ? ioctl_preallocate+0x1a0/0x1a0 [ 2862.412246] ? lock_downgrade+0x740/0x740 [ 2862.416613] ? __fget+0x225/0x360 [ 2862.420259] ? security_file_ioctl+0x83/0xb0 [ 2862.425192] SyS_ioctl+0x7f/0xb0 [ 2862.428751] ? do_vfs_ioctl+0xff0/0xff0 [ 2862.433275] do_syscall_64+0x1d5/0x640 [ 2862.434778] ptrace attach of "/root/syz-executor.0"[5128] was attempted by "/root/syz-executor.0"[5129] [ 2862.437280] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2862.437289] RIP: 0033:0x45ce69 [ 2862.437294] RSP: 002b:00007ff3b8dd1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2862.437304] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2862.437309] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000008 [ 2862.437315] RBP: 000000000118c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 2862.437321] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118c06c [ 2862.437326] R13: 00007fffdf1aef2f R14: 00007ff3b8dd29c0 R15: 000000000118c06c [ 2862.811012] Mem-Info: [ 2862.826279] active_anon:431262 inactive_anon:8460 isolated_anon:0 [ 2862.826279] active_file:30190 inactive_file:16382 isolated_file:3 [ 2862.826279] unevictable:149081 dirty:156 writeback:0 unstable:0 [ 2862.826279] slab_reclaimable:20199 slab_unreclaimable:256090 [ 2862.826279] mapped:62215 shmem:179355 pagetables:67269 bounce:0 [ 2862.826279] free:507005 free_pcp:327 free_cma:0 [ 2862.893260] Node 0 active_anon:1380980kB inactive_anon:17280kB active_file:32kB inactive_file:4kB unevictable:211764kB isolated(anon):0kB isolated(file):0kB mapped:217120kB dirty:8kB writeback:0kB shmem:245736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 892928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2862.934397] Node 1 active_anon:344068kB inactive_anon:16560kB active_file:120752kB inactive_file:65548kB unevictable:384560kB isolated(anon):0kB isolated(file):0kB mapped:31704kB dirty:660kB writeback:0kB shmem:471684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2862.977229] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:112kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2863.012863] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2863.020876] Node 0 DMA32 free:35796kB min:36272kB low:45340kB high:54408kB active_anon:1380980kB inactive_anon:17280kB active_file:32kB inactive_file:4kB unevictable:211652kB writepending:8kB present:3129332kB managed:2621196kB mlocked:60kB kernel_stack:22272kB pagetables:60160kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 2863.059925] lowmem_reserve[]: 0 0 0 0 0 [ 2863.064911] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2863.103780] lowmem_reserve[]: 0 0 0 0 0 [ 2863.108847] Node 1 Normal free:1981356kB min:53612kB low:67012kB high:80412kB active_anon:344068kB inactive_anon:16560kB active_file:120752kB inactive_file:65548kB unevictable:384560kB writepending:660kB present:3932160kB managed:3870192kB mlocked:4kB kernel_stack:76384kB pagetables:208952kB bounce:0kB free_pcp:1276kB local_pcp:612kB free_cma:0kB [ 2863.151805] lowmem_reserve[]: 0 0 0 0 0 [ 2863.158170] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (U) 0*64kB 2*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (ME) = 10316kB [ 2863.184168] Node 0 DMA32: 313*4kB (UME) 326*8kB (UME) 336*16kB (MEH) 198*32kB (MEH) 62*64kB (MH) 33*128kB (UME) 17*256kB (UME) 11*512kB (MEH) 2*1024kB (UH) 0*2048kB 0*4096kB = 35796kB [ 2863.209358] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2863.224625] Node 1 Normal: 85*4kB (UME) 20*8kB (ME) 28*16kB (UME) 54*32kB (UME) 6*64kB (UM) 5*128kB (UME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 2*2048kB (ME) 481*4096kB (M) = 1981044kB [ 2863.253661] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2863.272475] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2863.283394] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2863.303535] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2863.321908] 221020 total pagecache pages [ 2863.327091] 0 pages in swap cache [ 2863.330748] Swap cache stats: add 0, delete 0, find 0/0 [ 2863.348058] Free swap = 0kB [ 2863.353149] Total swap = 0kB [ 2863.362244] 1965979 pages RAM [ 2863.372390] 0 pages HighMem/MovableOnly [ 2863.380850] 339072 pages reserved [ 2863.384425] 0 pages cma reserved 22:33:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000000)={{0x4, @addr=0xe0a0}, 0x8, 0x7, 0xffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0xffffffe6) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 22:33:58 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x2b) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x5) 22:33:58 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:33:58 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:33:58 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000810500000000000000000000009c", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r8], 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', r8, 0x2f, 0x0, 0x0, 0x6, 0xc, @ipv4={[], [], @local}, @private2={0xfc, 0x2, [], 0x1}, 0x7800, 0x80, 0xff, 0x4}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000002c0)={0x374, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0x800, 0x81, 0x80}, {0x9, 0x40, 0x7}, {0x4, 0x6, 0x95, 0xf33}, {0xec, 0x81, 0x8, 0x80}, {0x1, 0x4, 0x63, 0x6}, {0x9, 0x7, 0x10, 0xff}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x9, 0x1f, 0x2, 0x1000}]}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x44, 0x4, [{0x7, 0x7, 0x1}, {0x2, 0x3, 0x80, 0xdf2}, {0x7f, 0x1c, 0xf8, 0x1}, {0x8, 0x5, 0x95, 0xf}, {0x7, 0x4, 0x7, 0x1ff}, {0x5, 0x8, 0x8, 0x10001}, {0x28e1, 0x9, 0x1, 0x8}, {0xfffd, 0x2, 0xc, 0x1}]}}}]}}, {{0x8, 0x1, r9}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x374}, 0x1, 0x0, 0x0, 0x800}, 0x4041050) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/47, &(0x7f0000000040)=0x2f) 22:33:58 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:33:58 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 22:33:58 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 2863.526451] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 22:33:58 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 22:33:58 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:33:58 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) [ 2863.752959] IPv6: ADDRCONF(NETDEV_UP): vlan118: link is not ready 22:33:59 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 2863.813989] bond0: Enslaving veth511 as an active interface with an up link [ 2864.060653] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2864.097470] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2864.103352] CPU: 0 PID: 5159 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2864.111816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2864.122070] Call Trace: [ 2864.124751] dump_stack+0x1b2/0x283 [ 2864.129051] warn_alloc.cold+0x96/0x1cc [ 2864.133194] ? zone_watermark_ok_safe+0x220/0x220 [ 2864.138261] ? wait_for_completion_io+0x10/0x10 [ 2864.144904] __alloc_pages_nodemask+0x2127/0x2720 [ 2864.150307] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2864.155468] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2864.161469] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2864.166436] ? do_raw_spin_unlock+0x164/0x220 [ 2864.171416] alloc_pages_current+0x155/0x260 [ 2864.176107] kvm_mmu_create+0xda/0x1d0 [ 2864.180276] kvm_arch_vcpu_init+0x282/0x890 [ 2864.184701] ? alloc_pages_current+0x15d/0x260 [ 2864.190524] kvm_vcpu_init+0x26d/0x360 [ 2864.194437] vmx_create_vcpu+0xef/0x29a0 [ 2864.198525] ? __mutex_unlock_slowpath+0x75/0x770 [ 2864.203527] ? drop_futex_key_refs+0x2e/0xa0 [ 2864.208100] ? alloc_loaded_vmcs+0x240/0x240 [ 2864.212718] ? __lock_acquire+0x5fc/0x3f20 [ 2864.217264] kvm_vm_ioctl+0x4ca/0x13e0 [ 2864.221182] ? kvm_vcpu_release+0xa0/0xa0 [ 2864.227326] ? perf_trace_lock+0xf7/0x490 [ 2864.231742] ? check_preemption_disabled+0x35/0x240 [ 2864.237465] ? check_preemption_disabled+0x35/0x240 [ 2864.242602] ? perf_trace_lock+0xf7/0x490 [ 2864.247206] ? perf_trace_lock_acquire+0x510/0x510 [ 2864.253208] ? perf_trace_lock_acquire+0x510/0x510 [ 2864.258504] ? lock_acquire+0x170/0x3f0 [ 2864.262505] ? kvm_vcpu_release+0xa0/0xa0 [ 2864.266880] do_vfs_ioctl+0x75a/0xff0 [ 2864.270806] ? selinux_inode_setxattr+0x730/0x730 [ 2864.275679] ? ioctl_preallocate+0x1a0/0x1a0 [ 2864.280209] ? lock_downgrade+0x740/0x740 [ 2864.284391] ? __fget+0x225/0x360 [ 2864.287864] ? security_file_ioctl+0x83/0xb0 [ 2864.292364] SyS_ioctl+0x7f/0xb0 [ 2864.295846] ? do_vfs_ioctl+0xff0/0xff0 [ 2864.299953] do_syscall_64+0x1d5/0x640 [ 2864.303863] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2864.309093] RIP: 0033:0x45ce69 [ 2864.312278] RSP: 002b:00007ff3b8e13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2864.320672] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2864.327950] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 2864.335322] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2864.342663] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2864.349941] R13: 00007fffdf1aef2f R14: 00007ff3b8e149c0 R15: 000000000118bf2c [ 2864.460589] warn_alloc_show_mem: 1 callbacks suppressed [ 2864.460594] Mem-Info: [ 2864.480910] active_anon:431466 inactive_anon:8460 isolated_anon:0 [ 2864.480910] active_file:30194 inactive_file:16393 isolated_file:7 [ 2864.480910] unevictable:149081 dirty:196 writeback:0 unstable:0 [ 2864.480910] slab_reclaimable:20187 slab_unreclaimable:256871 [ 2864.480910] mapped:62204 shmem:179355 pagetables:67472 bounce:0 [ 2864.480910] free:505668 free_pcp:321 free_cma:0 [ 2864.534563] Node 0 active_anon:1380980kB inactive_anon:17280kB active_file:8kB inactive_file:0kB unevictable:211764kB isolated(anon):0kB isolated(file):28kB mapped:217120kB dirty:8kB writeback:0kB shmem:245736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 892928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2864.580249] Node 1 active_anon:344884kB inactive_anon:16560kB active_file:120768kB inactive_file:65572kB unevictable:384560kB isolated(anon):0kB isolated(file):0kB mapped:32396kB dirty:776kB writeback:0kB shmem:471684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2864.614339] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:112kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2864.649913] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2864.664077] Node 0 DMA32 free:35524kB min:36272kB low:45340kB high:54408kB active_anon:1380980kB inactive_anon:17280kB active_file:8kB inactive_file:0kB unevictable:211652kB writepending:8kB present:3129332kB managed:2621196kB mlocked:60kB kernel_stack:22272kB pagetables:60160kB bounce:0kB free_pcp:244kB local_pcp:240kB free_cma:0kB [ 2864.696629] lowmem_reserve[]: 0 0 0 0 0 [ 2864.701060] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2864.728300] lowmem_reserve[]: 0 0 0 0 0 [ 2864.732524] Node 1 Normal free:1978824kB min:53612kB low:67012kB high:80412kB active_anon:344844kB inactive_anon:16560kB active_file:120768kB inactive_file:65572kB unevictable:384560kB writepending:784kB present:3932160kB managed:3870192kB mlocked:4kB kernel_stack:76640kB pagetables:209620kB bounce:0kB free_pcp:1184kB local_pcp:736kB free_cma:0kB [ 2864.765064] lowmem_reserve[]: 0 0 0 0 0 [ 2864.769739] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (U) 0*64kB 2*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (ME) = 10316kB [ 2864.784437] Node 0 DMA32: 251*4kB (UME) 327*8kB (UMEH) 336*16kB (MEH) 197*32kB (ME) 62*64kB (MH) 33*128kB (UME) 17*256kB (UME) 11*512kB (MEH) 2*1024kB (UH) 0*2048kB 0*4096kB = 35524kB [ 2864.803593] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2864.815087] Node 1 Normal: 99*4kB (UM) 218*8kB (UME) 21*16kB (UME) 9*32kB (UME) 2*64kB (UM) 3*128kB (UME) 2*256kB (ME) 1*512kB (M) 2*1024kB (ME) 1*2048kB (E) 481*4096kB (M) = 1978572kB [ 2864.833032] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2864.842509] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2864.851870] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2864.863112] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2864.864064] syz-executor.1: [ 2864.872656] 221037 total pagecache pages [ 2864.872666] 0 pages in swap cache [ 2864.872671] Swap cache stats: add 0, delete 0, find 0/0 [ 2864.872675] Free swap = 0kB [ 2864.872679] Total swap = 0kB [ 2864.872687] 1965979 pages RAM [ 2864.872690] 0 pages HighMem/MovableOnly [ 2864.872694] 339072 pages reserved [ 2864.872698] 0 pages cma reserved [ 2864.914138] page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2864.927933] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2864.933750] CPU: 0 PID: 5227 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2864.943974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2864.953564] Call Trace: [ 2864.956152] dump_stack+0x1b2/0x283 [ 2864.960284] warn_alloc.cold+0x96/0x1cc [ 2864.964358] ? zone_watermark_ok_safe+0x220/0x220 [ 2864.969782] ? wait_for_completion_io+0x10/0x10 [ 2864.975306] __alloc_pages_nodemask+0x2127/0x2720 [ 2864.980591] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2864.986327] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2864.992194] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2864.997166] ? do_raw_spin_unlock+0x164/0x220 [ 2865.001693] alloc_pages_current+0x155/0x260 [ 2865.006123] kvm_mmu_create+0xda/0x1d0 [ 2865.010119] kvm_arch_vcpu_init+0x282/0x890 [ 2865.014460] ? alloc_pages_current+0x15d/0x260 [ 2865.019305] kvm_vcpu_init+0x26d/0x360 [ 2865.025883] vmx_create_vcpu+0xef/0x29a0 [ 2865.030337] ? __mutex_unlock_slowpath+0x75/0x770 [ 2865.035192] ? alloc_loaded_vmcs+0x240/0x240 [ 2865.039863] ? __lock_acquire+0x5fc/0x3f20 [ 2865.044303] kvm_vm_ioctl+0x4ca/0x13e0 [ 2865.048414] ? kvm_vcpu_release+0xa0/0xa0 [ 2865.052573] ? perf_trace_lock+0xf7/0x490 [ 2865.056730] ? check_preemption_disabled+0x35/0x240 [ 2865.062211] ? check_preemption_disabled+0x35/0x240 [ 2865.067332] ? perf_trace_lock+0xf7/0x490 [ 2865.071602] ? perf_trace_lock_acquire+0x510/0x510 [ 2865.077473] ? perf_trace_lock_acquire+0x510/0x510 [ 2865.082660] ? lock_acquire+0x170/0x3f0 [ 2865.086860] ? kvm_vcpu_release+0xa0/0xa0 [ 2865.091302] do_vfs_ioctl+0x75a/0xff0 [ 2865.097443] ? selinux_inode_setxattr+0x730/0x730 [ 2865.103953] ? ioctl_preallocate+0x1a0/0x1a0 [ 2865.108396] ? lock_downgrade+0x740/0x740 [ 2865.112822] ? __fget+0x225/0x360 [ 2865.116575] ? security_file_ioctl+0x83/0xb0 [ 2865.121622] SyS_ioctl+0x7f/0xb0 [ 2865.126584] ? do_vfs_ioctl+0xff0/0xff0 [ 2865.131264] do_syscall_64+0x1d5/0x640 [ 2865.136877] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2865.142561] RIP: 0033:0x45ce69 [ 2865.145924] RSP: 002b:00007ff3b8dd1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2865.154399] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2865.162900] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 2865.175146] RBP: 000000000118c0a0 R08: 0000000000000000 R09: 0000000000000000 22:34:00 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup(r3) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r8 = dup2(0xffffffffffffffff, r6) write$P9_ROPEN(r8, &(0x7f0000000000)={0x18, 0x71, 0x2, {{0x10, 0x1, 0x1}, 0x10000}}, 0x18) [ 2865.183154] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118c06c [ 2865.190789] R13: 00007fffdf1aef2f R14: 00007ff3b8dd29c0 R15: 000000000118c06c [ 2865.337215] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2865.371888] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2865.399659] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2865.413717] CPU: 0 PID: 5236 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2865.421635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2865.431346] Call Trace: [ 2865.433936] dump_stack+0x1b2/0x283 [ 2865.437640] warn_alloc.cold+0x96/0x1cc [ 2865.441869] ? zone_watermark_ok_safe+0x220/0x220 [ 2865.446710] ? wait_for_completion_io+0x10/0x10 [ 2865.451380] __alloc_pages_nodemask+0x2127/0x2720 [ 2865.456217] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2865.462899] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2865.468014] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2865.472964] ? do_raw_spin_unlock+0x164/0x220 [ 2865.478052] alloc_pages_current+0x155/0x260 [ 2865.483154] kvm_mmu_create+0xda/0x1d0 [ 2865.487441] kvm_arch_vcpu_init+0x282/0x890 [ 2865.492108] ? alloc_pages_current+0x15d/0x260 [ 2865.496781] kvm_vcpu_init+0x26d/0x360 [ 2865.500769] vmx_create_vcpu+0xef/0x29a0 [ 2865.507297] ? __mutex_unlock_slowpath+0x75/0x770 [ 2865.514750] ? drop_futex_key_refs+0x2e/0xa0 [ 2865.524839] ? alloc_loaded_vmcs+0x240/0x240 [ 2865.529369] ? __lock_acquire+0x5fc/0x3f20 [ 2865.534654] kvm_vm_ioctl+0x4ca/0x13e0 [ 2865.538787] ? kvm_vcpu_release+0xa0/0xa0 [ 2865.543229] ? perf_trace_lock+0xf7/0x490 [ 2865.547833] ? check_preemption_disabled+0x35/0x240 [ 2865.552844] ? check_preemption_disabled+0x35/0x240 [ 2865.557964] ? perf_trace_lock+0xf7/0x490 [ 2865.562483] ? perf_trace_lock_acquire+0x510/0x510 [ 2865.567503] ? perf_trace_lock_acquire+0x510/0x510 [ 2865.572416] ? lock_acquire+0x170/0x3f0 [ 2865.576487] ? kvm_vcpu_release+0xa0/0xa0 [ 2865.581404] do_vfs_ioctl+0x75a/0xff0 [ 2865.585598] ? selinux_inode_setxattr+0x730/0x730 [ 2865.593884] ? ioctl_preallocate+0x1a0/0x1a0 [ 2865.599094] ? lock_downgrade+0x740/0x740 [ 2865.603318] ? __fget+0x225/0x360 [ 2865.606763] ? security_file_ioctl+0x83/0xb0 [ 2865.611154] SyS_ioctl+0x7f/0xb0 [ 2865.614500] ? do_vfs_ioctl+0xff0/0xff0 [ 2865.618553] do_syscall_64+0x1d5/0x640 [ 2865.622634] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2865.628009] RIP: 0033:0x45ce69 [ 2865.631195] RSP: 002b:00007ff3b8e13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2865.638884] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2865.646145] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2865.653405] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2865.663467] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2865.674592] R13: 00007fffdf1aef2f R14: 00007ff3b8e149c0 R15: 000000000118bf2c [ 2865.726634] warn_alloc_show_mem: 1 callbacks suppressed [ 2865.726639] Mem-Info: [ 2865.742575] active_anon:431437 inactive_anon:8460 isolated_anon:0 [ 2865.742575] active_file:30201 inactive_file:16403 isolated_file:0 [ 2865.742575] unevictable:149081 dirty:10 writeback:0 unstable:0 [ 2865.742575] slab_reclaimable:20179 slab_unreclaimable:256673 [ 2865.742575] mapped:62208 shmem:179355 pagetables:67441 bounce:0 [ 2865.742575] free:505927 free_pcp:360 free_cma:0 [ 2865.789102] Node 0 active_anon:1380980kB inactive_anon:17280kB active_file:32kB inactive_file:4kB unevictable:211764kB isolated(anon):0kB isolated(file):0kB mapped:217120kB dirty:8kB writeback:0kB shmem:245736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 892928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2865.826265] Node 1 active_anon:344820kB inactive_anon:16560kB active_file:120772kB inactive_file:65608kB unevictable:384560kB isolated(anon):0kB isolated(file):0kB mapped:31732kB dirty:28kB writeback:0kB shmem:471684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2865.861464] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:112kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2865.898134] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2865.903716] Node 0 DMA32 free:35644kB min:36272kB low:45340kB high:54408kB active_anon:1380980kB inactive_anon:17280kB active_file:16kB inactive_file:4kB unevictable:211652kB writepending:4kB present:3129332kB managed:2621196kB mlocked:60kB kernel_stack:22272kB pagetables:60160kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 2865.942112] lowmem_reserve[]: 0 0 0 0 0 [ 2865.947028] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2865.981710] lowmem_reserve[]: 0 0 0 0 0 [ 2865.988966] Node 1 Normal free:1978376kB min:53612kB low:67012kB high:80412kB active_anon:344820kB inactive_anon:16560kB active_file:120772kB inactive_file:65608kB unevictable:384560kB writepending:28kB present:3932160kB managed:3870192kB mlocked:4kB kernel_stack:76672kB pagetables:209608kB bounce:0kB free_pcp:1324kB local_pcp:648kB free_cma:0kB [ 2866.028195] lowmem_reserve[]: 0 0 0 0 0 [ 2866.032722] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (U) 0*64kB 2*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (ME) = 10316kB [ 2866.049095] Node 0 DMA32: 281*4kB (UME) 327*8kB (UME) 336*16kB (UME) 197*32kB (ME) 62*64kB (UM) 33*128kB (UME) 17*256kB (UME) 11*512kB (UME) 2*1024kB (U) 0*2048kB 0*4096kB = 35644kB [ 2866.071160] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2866.083781] Node 1 Normal: 2*4kB (UE) 182*8kB (UM) 70*16kB (UME) 28*32kB (UME) 6*64kB (UM) 2*128kB (ME) 2*256kB (ME) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 480*4096kB (M) = 1978904kB [ 2866.103115] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2866.113513] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2866.113559] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2866.123282] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2866.151071] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2866.164235] 221042 total pagecache pages [ 2866.171977] 0 pages in swap cache [ 2866.178951] Swap cache stats: add 0, delete 0, find 0/0 [ 2866.184938] Free swap = 0kB [ 2866.191533] Total swap = 0kB [ 2866.195045] 1965979 pages RAM [ 2866.201659] 0 pages HighMem/MovableOnly [ 2866.209315] 339072 pages reserved [ 2866.213164] 0 pages cma reserved 22:34:01 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) r2 = getpid() sched_setattr(r2, &(0x7f0000000300)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) getpgid(r2) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 22:34:01 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:01 executing program 2: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:01 executing program 5: clone(0x20000000e8a42d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{}], &(0x7f00000000c0)=0x8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4000, 0x0) connect$bt_sco(r0, &(0x7f0000000040), 0x1584) 22:34:01 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:34:01 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) uname(&(0x7f0000000180)=""/230) 22:34:01 executing program 2 (fault-call:3 fault-nth:0): socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:01 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:01 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) sysinfo(&(0x7f0000001100)=""/4092) 22:34:01 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:02 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:02 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000280)={0x5, &(0x7f0000000140)=[{0x1, 0x0, 0x1, 0x6}, {0x0, 0x81, 0x81, 0x401}, {0x7ff, 0x40, 0x20}, {0xfff, 0x0, 0x2, 0x5}, {0x1, 0x2, 0x0, 0x5}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000400)=ANY=[@ANYBLOB="222248a8226ccc07f6696b370f74d34e160da21bd2b2dc26a608e0dd00326f81bfe6e848b17e9d60017ba9a21e09febf1d5596fd437a0da23b3beeb6207f059495a8e73889aa8890bf18446e5008ed8fb4a22a7a705714d103607d73978ff40ffd4b5ce9f1571ae66a56bf750c322652f0f68a090f00"/130, @ANYRES32=0x0], &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f00000000c0), 0x8) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000340)={0x0, 0x5, 0x0, 0x0, 0x5, 0x102, 0x5, 0xffffb02c, {0x0, @in6={{0xa, 0x4e24, 0x3, @mcast2, 0x10000}}, 0x2, 0x1, 0xfffff37a, 0x1000, 0x401}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000000)=ANY=[@ANYRES32=r7, @ANYBLOB="71000000d7393e01aea2f2d2f2cfcc72a87c81e79904d34484df86869a483bff6ec01597a03ca07f69c82266797b138a9cc9078c0600a6231bb512aa1f202515369c2718299e38df32a0b9f781230b17a6462535638e1f6d2022637bc15e5c6ac66b3b05049336579bb615899d8dcde32728a7ffa63b6768cebfa84634529cd5c53a79ebd91bf753864544887253f5fecf11398159e06f3279fb0affd5381c3e44647e0fd0ebdb637d2f7f3ec74c656f0e56"], &(0x7f00000001c0)=0x79) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2867.021571] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2867.060600] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2867.078218] CPU: 0 PID: 5267 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2867.086975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2867.096452] Call Trace: [ 2867.099498] dump_stack+0x1b2/0x283 [ 2867.103357] warn_alloc.cold+0x96/0x1cc [ 2867.109352] ? zone_watermark_ok_safe+0x220/0x220 [ 2867.114216] ? wait_for_completion_io+0x10/0x10 [ 2867.118991] __alloc_pages_nodemask+0x2127/0x2720 [ 2867.124703] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2867.129734] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2867.135592] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2867.140774] ? do_raw_spin_unlock+0x164/0x220 [ 2867.145497] alloc_pages_current+0x155/0x260 [ 2867.149918] kvm_mmu_create+0xda/0x1d0 [ 2867.153890] kvm_arch_vcpu_init+0x282/0x890 [ 2867.158303] ? alloc_pages_current+0x15d/0x260 [ 2867.163965] kvm_vcpu_init+0x26d/0x360 [ 2867.171002] vmx_create_vcpu+0xef/0x29a0 [ 2867.176335] ? __mutex_unlock_slowpath+0x75/0x770 [ 2867.181458] ? drop_futex_key_refs+0x2e/0xa0 [ 2867.187078] ? alloc_loaded_vmcs+0x240/0x240 [ 2867.192199] ? __lock_acquire+0x5fc/0x3f20 [ 2867.196677] kvm_vm_ioctl+0x4ca/0x13e0 [ 2867.200707] ? kvm_vcpu_release+0xa0/0xa0 [ 2867.206679] ? perf_trace_lock+0xf7/0x490 [ 2867.211160] ? check_preemption_disabled+0x35/0x240 [ 2867.216719] ? check_preemption_disabled+0x35/0x240 [ 2867.224496] ? perf_trace_lock+0xf7/0x490 [ 2867.229196] ? perf_trace_lock_acquire+0x510/0x510 [ 2867.234898] ? perf_trace_lock_acquire+0x510/0x510 [ 2867.240020] ? lock_acquire+0x170/0x3f0 [ 2867.245577] ? kvm_vcpu_release+0xa0/0xa0 [ 2867.249775] do_vfs_ioctl+0x75a/0xff0 [ 2867.253605] ? selinux_inode_setxattr+0x730/0x730 [ 2867.258465] ? ioctl_preallocate+0x1a0/0x1a0 [ 2867.263496] ? lock_downgrade+0x740/0x740 [ 2867.267662] ? __fget+0x225/0x360 [ 2867.271346] ? security_file_ioctl+0x83/0xb0 [ 2867.276304] SyS_ioctl+0x7f/0xb0 [ 2867.279845] ? do_vfs_ioctl+0xff0/0xff0 [ 2867.283939] do_syscall_64+0x1d5/0x640 [ 2867.288385] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2867.293671] RIP: 0033:0x45ce69 [ 2867.297166] RSP: 002b:00007ff3b8e13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2867.305416] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2867.316552] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2867.324568] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2867.332545] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2867.340455] R13: 00007fffdf1aef2f R14: 00007ff3b8e149c0 R15: 000000000118bf2c [ 2867.370653] FAULT_INJECTION: forcing a failure. [ 2867.370653] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2867.382958] CPU: 0 PID: 5282 Comm: syz-executor.2 Not tainted 4.14.193-syzkaller #0 [ 2867.390787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2867.400165] Call Trace: [ 2867.402765] dump_stack+0x1b2/0x283 [ 2867.406419] should_fail.cold+0x10a/0x154 [ 2867.410810] __alloc_pages_nodemask+0x22c/0x2720 [ 2867.412883] Mem-Info: [ 2867.415585] ? __lock_acquire+0x5fc/0x3f20 [ 2867.415598] ? trace_hardirqs_on+0x10/0x10 [ 2867.415612] ? perf_trace_lock+0xf7/0x490 [ 2867.415621] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 2867.415631] ? check_preemption_disabled+0x35/0x240 [ 2867.415642] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2867.415649] ? perf_trace_lock+0xf7/0x490 [ 2867.415657] ? unwind_next_frame+0xe54/0x17d0 [ 2867.415669] ? lock_acquire+0x170/0x3f0 [ 2867.415679] ? mem_cgroup_id_get_online+0xb0/0xb0 [ 2867.415688] ? __unlock_page_memcg+0x4f/0x100 [ 2867.415704] alloc_pages_current+0x155/0x260 [ 2867.415714] __get_free_pages+0xb/0x40 [ 2867.415723] __tlb_remove_page_size+0x272/0x440 [ 2867.415735] unmap_page_range+0xf92/0x1ce0 [ 2867.415763] ? vm_normal_page_pmd+0x340/0x340 [ 2867.415777] unmap_single_vma+0x147/0x2b0 [ 2867.415791] unmap_vmas+0x9d/0x160 [ 2867.415803] exit_mmap+0x271/0x4b0 [ 2867.415812] ? SyS_remap_file_pages+0x6a0/0x6a0 [ 2867.415834] ? kmem_cache_free+0x23a/0x2b0 [ 2867.415844] ? __khugepaged_exit+0x29b/0x3c0 [ 2867.415855] mmput+0xfa/0x420 [ 2867.415867] do_exit+0x948/0x27f0 [ 2867.415877] ? perf_trace_lock_acquire+0x510/0x510 [ 2867.415890] ? mm_update_next_owner+0x5b0/0x5b0 [ 2867.415900] ? get_signal+0x323/0x1ca0 [ 2867.415912] ? lock_acquire+0x170/0x3f0 [ 2867.415921] ? lock_downgrade+0x740/0x740 [ 2867.415932] do_group_exit+0x100/0x2e0 [ 2867.415943] get_signal+0x38d/0x1ca0 [ 2867.415967] do_signal+0x7c/0x1550 [ 2867.415977] ? lock_downgrade+0x740/0x740 [ 2867.415986] ? check_preemption_disabled+0x35/0x240 [ 2867.415996] ? setup_sigcontext+0x820/0x820 [ 2867.416004] ? kick_process+0xe4/0x170 [ 2867.416014] ? task_work_add+0x87/0xe0 [ 2867.416028] ? sco_sock_create+0xf0/0xf0 [ 2867.416037] ? fput+0xaa/0x140 [ 2867.416048] ? SyS_connect+0xf6/0x240 [ 2867.416057] ? SyS_accept+0x30/0x30 [ 2867.416068] ? vfs_write+0x319/0x4d0 [ 2867.416077] ? fput+0xb/0x140 [ 2867.416088] ? exit_to_usermode_loop+0x41/0x200 [ 2867.416100] exit_to_usermode_loop+0x160/0x200 [ 2867.416112] do_syscall_64+0x4a3/0x640 [ 2867.416129] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2867.416137] RIP: 0033:0x45ce69 [ 2867.416142] RSP: 002b:00007f35a0b4fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2867.416152] RAX: fffffffffffffffc RBX: 0000000000002180 RCX: 000000000045ce69 [ 2867.416157] RDX: 0000000000000008 RSI: 00000000200000c0 RDI: 0000000000000005 [ 2867.416162] RBP: 00007f35a0b4fca0 R08: 0000000000000000 R09: 0000000000000000 [ 2867.416167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2867.416172] R13: 00007ffd412a0a7f R14: 00007f35a0b509c0 R15: 000000000118bf2c [ 2867.679643] active_anon:431643 inactive_anon:8460 isolated_anon:0 [ 2867.679643] active_file:30207 inactive_file:16417 isolated_file:0 [ 2867.679643] unevictable:149081 dirty:115 writeback:0 unstable:0 [ 2867.679643] slab_reclaimable:20164 slab_unreclaimable:256920 [ 2867.679643] mapped:62222 shmem:179355 pagetables:67603 bounce:0 [ 2867.679643] free:505116 free_pcp:354 free_cma:0 [ 2867.721351] Node 0 active_anon:1380980kB inactive_anon:17280kB active_file:32kB inactive_file:0kB unevictable:211764kB isolated(anon):0kB isolated(file):0kB mapped:217120kB dirty:4kB writeback:0kB shmem:245736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 892928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2867.760292] Node 1 active_anon:345548kB inactive_anon:16560kB active_file:120796kB inactive_file:65668kB unevictable:384560kB isolated(anon):0kB isolated(file):0kB mapped:31792kB dirty:456kB writeback:0kB shmem:471684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2867.794624] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:112kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2867.827600] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2867.832766] Node 0 DMA32 free:35600kB min:36272kB low:45340kB high:54408kB active_anon:1380980kB inactive_anon:17280kB active_file:32kB inactive_file:0kB unevictable:211652kB writepending:4kB present:3129332kB managed:2621196kB mlocked:60kB kernel_stack:22272kB pagetables:60160kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB [ 2867.867539] lowmem_reserve[]: 0 0 0 0 0 [ 2867.875822] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2867.903360] lowmem_reserve[]: 0 0 0 0 0 [ 2867.908431] Node 1 Normal free:1976908kB min:53612kB low:67012kB high:80412kB active_anon:345424kB inactive_anon:16560kB active_file:120796kB inactive_file:65668kB unevictable:384560kB writepending:464kB present:3932160kB managed:3870192kB mlocked:4kB kernel_stack:76736kB pagetables:210168kB bounce:0kB free_pcp:1280kB local_pcp:636kB free_cma:0kB [ 2867.942375] lowmem_reserve[]: 0 0 0 0 0 [ 2867.948943] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (U) 0*64kB 2*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (ME) = 10316kB [ 2867.966457] Node 0 DMA32: 282*4kB (UME) 325*8kB (UME) 336*16kB (UME) 198*32kB (UME) 61*64kB (M) 33*128kB (UME) 17*256kB (UME) 11*512kB (UME) 2*1024kB (U) 0*2048kB 0*4096kB = 35600kB [ 2867.984821] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2867.997853] Node 1 Normal: 71*4kB (UME) 38*8kB (UME) 26*16kB (UME) 16*32kB (UME) 1*64kB (U) 3*128kB (UME) 2*256kB (ME) 0*512kB 3*1024kB (UME) 2*2048kB (UE) 480*4096kB (M) = 1975724kB [ 2868.016226] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2868.027763] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2868.037191] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2868.047518] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2868.058098] 221063 total pagecache pages [ 2868.062190] 0 pages in swap cache [ 2868.066169] Swap cache stats: add 0, delete 0, find 0/0 [ 2868.072586] Free swap = 0kB [ 2868.077139] Total swap = 0kB [ 2868.080215] 1965979 pages RAM [ 2868.083430] 0 pages HighMem/MovableOnly [ 2868.087942] 339072 pages reserved [ 2868.091412] 0 pages cma reserved 22:34:04 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) r2 = getpid() sched_setattr(r2, &(0x7f0000000300)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$setopts(0x4206, r2, 0xfffffffffffffffb, 0x100000) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000300)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000180)=0x78) ptrace$poke(0x5, r3, &(0x7f0000000080), 0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 22:34:04 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:04 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000040)={0x0, 0xcd, 0x1f, &(0x7f0000000000)=0x8}) 22:34:04 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:34:04 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={[], 0x11}}, 0xfffffffffffffff2) 22:34:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) dup(0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400203) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 22:34:04 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000), 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:04 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000), 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:04 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x109) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r3}, 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r3, 0x6, 0x80b, 0x45bbd835, 0x7, 0x3}, 0x14) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f00000000c0)={0x1f, @none}, 0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000810500000000000000000000009c", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@private2={0xfc, 0x2, [], 0x1}}, 0x14) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) 22:34:04 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400200, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x528b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={r4}, 0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)={r4, 0x81, 0x3, [0x4, 0x4, 0x400]}, 0xe) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r7) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:05 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000), 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:05 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000340)=@urb_type_iso={0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, [{}]}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2869.887700] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2869.932305] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2869.960136] CPU: 0 PID: 5345 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2869.968082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2869.977548] Call Trace: [ 2869.980157] dump_stack+0x1b2/0x283 [ 2869.983823] warn_alloc.cold+0x96/0x1cc [ 2869.987825] ? zone_watermark_ok_safe+0x220/0x220 [ 2869.992698] ? wait_for_completion_io+0x10/0x10 [ 2869.997393] __alloc_pages_nodemask+0x2127/0x2720 [ 2870.002282] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2870.007150] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2870.012286] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2870.017438] ? do_raw_spin_unlock+0x164/0x220 [ 2870.021959] alloc_pages_current+0x155/0x260 [ 2870.026410] kvm_mmu_create+0xda/0x1d0 [ 2870.030326] kvm_arch_vcpu_init+0x282/0x890 [ 2870.034842] ? alloc_pages_current+0x15d/0x260 [ 2870.039456] kvm_vcpu_init+0x26d/0x360 [ 2870.043383] vmx_create_vcpu+0xef/0x29a0 [ 2870.047483] ? __mutex_unlock_slowpath+0x75/0x770 [ 2870.052336] ? drop_futex_key_refs+0x2e/0xa0 [ 2870.056764] ? alloc_loaded_vmcs+0x240/0x240 [ 2870.061538] ? __lock_acquire+0x5fc/0x3f20 [ 2870.066070] kvm_vm_ioctl+0x4ca/0x13e0 [ 2870.069983] ? kvm_vcpu_release+0xa0/0xa0 [ 2870.074244] ? perf_trace_lock+0xf7/0x490 [ 2870.078462] ? check_preemption_disabled+0x35/0x240 [ 2870.083514] ? check_preemption_disabled+0x35/0x240 [ 2870.088583] ? perf_trace_lock+0xf7/0x490 [ 2870.092760] ? perf_trace_lock_acquire+0x510/0x510 [ 2870.097711] ? perf_trace_lock_acquire+0x510/0x510 [ 2870.102662] ? lock_acquire+0x170/0x3f0 [ 2870.106656] ? kvm_vcpu_release+0xa0/0xa0 [ 2870.110823] do_vfs_ioctl+0x75a/0xff0 [ 2870.114646] ? selinux_inode_setxattr+0x730/0x730 [ 2870.119503] ? ioctl_preallocate+0x1a0/0x1a0 [ 2870.123924] ? lock_downgrade+0x740/0x740 [ 2870.128097] ? __fget+0x225/0x360 [ 2870.131689] ? security_file_ioctl+0x83/0xb0 [ 2870.136124] SyS_ioctl+0x7f/0xb0 [ 2870.139508] ? do_vfs_ioctl+0xff0/0xff0 [ 2870.143505] do_syscall_64+0x1d5/0x640 [ 2870.147422] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2870.152741] RIP: 0033:0x45ce69 [ 2870.156103] RSP: 002b:00007ff3b8e13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2870.163962] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2870.171273] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 000000000000000a [ 2870.178555] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2870.186777] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2870.194071] R13: 00007fffdf1aef2f R14: 00007ff3b8e149c0 R15: 000000000118bf2c [ 2870.253129] usb usb7: usbfs: interface 0 claimed by hub while 'syz-executor.5' sets config #0 [ 2870.312602] Mem-Info: [ 2870.315071] active_anon:431853 inactive_anon:8460 isolated_anon:0 [ 2870.315071] active_file:30204 inactive_file:16421 isolated_file:5 [ 2870.315071] unevictable:149081 dirty:145 writeback:0 unstable:0 [ 2870.315071] slab_reclaimable:20154 slab_unreclaimable:256918 [ 2870.315071] mapped:62245 shmem:179355 pagetables:67856 bounce:0 [ 2870.315071] free:504497 free_pcp:340 free_cma:0 [ 2870.459991] Node 0 active_anon:1380980kB inactive_anon:17280kB active_file:8kB inactive_file:4kB unevictable:211764kB isolated(anon):0kB isolated(file):20kB mapped:217120kB dirty:4kB writeback:0kB shmem:245736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 892928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 22:34:05 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:05 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) 22:34:05 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:34:05 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 2870.531184] Node 1 active_anon:346232kB inactive_anon:16560kB active_file:120808kB inactive_file:65680kB unevictable:384560kB isolated(anon):0kB isolated(file):0kB mapped:31860kB dirty:576kB writeback:0kB shmem:471684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 22:34:05 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20002, 0x0) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket(0x11, 0x80a, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000810500000000000000000000009c", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000080)={'batadv0\x00', @ifru_flags=0x4000}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={[], 0x10}}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) [ 2870.562723] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:112kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2870.612529] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2870.650527] Node 0 DMA32 free:35576kB min:36272kB low:45340kB high:54408kB active_anon:1380980kB inactive_anon:17280kB active_file:8kB inactive_file:4kB unevictable:211652kB writepending:4kB present:3129332kB managed:2621196kB mlocked:60kB kernel_stack:22272kB pagetables:60160kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB [ 2870.790106] lowmem_reserve[]: 0 0 0 0 0 [ 2870.805858] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2870.917042] lowmem_reserve[]: 0 0 0 0 0 [ 2870.929146] Node 1 Normal free:1972988kB min:53612kB low:67012kB high:80412kB active_anon:347192kB inactive_anon:16560kB active_file:120836kB inactive_file:65704kB unevictable:384560kB writepending:668kB present:3932160kB managed:3870192kB mlocked:4kB kernel_stack:77440kB pagetables:211496kB bounce:0kB free_pcp:596kB local_pcp:220kB free_cma:0kB [ 2871.044152] lowmem_reserve[]: 0 0 0 0 0 [ 2871.056470] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (U) 0*64kB 2*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (ME) = 10316kB [ 2871.074192] Node 0 DMA32: 282*4kB (UMEH) 320*8kB (UME) 337*16kB (UMEH) 199*32kB (UMEH) 62*64kB (MH) 32*128kB (ME) 17*256kB (MEH) 11*512kB (UME) 2*1024kB (UH) 0*2048kB 0*4096kB = 35544kB [ 2871.099248] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2871.113839] Node 1 Normal: 58*4kB (UME) 54*8kB (UME) 75*16kB (UE) 7*32kB (UE) 1*64kB (U) 2*128kB (ME) 2*256kB (ME) 2*512kB (UM) 2*1024kB (ME) 2*2048kB (ME) 479*4096kB (M) = 1972072kB [ 2871.139762] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2871.152044] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2871.170119] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2871.192550] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2871.203081] 221079 total pagecache pages [ 2871.213679] 0 pages in swap cache [ 2871.220029] Swap cache stats: add 0, delete 0, find 0/0 [ 2871.244259] Free swap = 0kB 22:34:06 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x280, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x254101) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 22:34:06 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:06 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000082001100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$CHAR_RAW_GETSIZE64(r4, 0x80081272, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) faccessat(r2, &(0x7f0000000040)='./file0\x00', 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x9, 0x3, 0x2d8, 0x140, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x4}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x14, 0x4, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfff, 0x8, 0x2, 'snmp_trap\x00', {0xffffffff}}}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [0xff000000, 0x0, 0xffffffff, 0xff], [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], 'ipvlan1\x00', 'vxcan1\x00', {0xff}, {0xff}, 0x3a, 0xa9, 0x3, 0x2}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 22:34:06 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0x37, &(0x7f0000000040)={&(0x7f0000000100)={0x140, 0x14, 0x800, 0x70bd27, 0x25dfdbff, {0x3, 0x1f}, [@INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "e6596bf53bfa4343428f90fe8179fc67926d2b2fafc2ee86d654c9d4ad0242bd132e45b4486314c6a397ac3de8557e35b53a8a2ab2e6f9dec21e57b5e61d2348aebe8b0a4b1d4a9e2ff3a491768c836798f110f00d1494c6511696115ae7ad83b6a25b2de73ec488c2f883869252f76cceb8cdcfe9470f2bafaeceba8ac7a3211f2b5111d236877420d0dc571b62cf7649393ca8fb865559745ae41faf1ebbd369fce476e2ec4f41f8dfc7d54e6f6095012c2ef7145f602b95cb0342257f7fd69ec400ad49be72b0eeebce2a52c590d5912f2ea31240c676a4154b7713b4bc9cf894d4db6e58b58d359352c7639026a20181089788cc5d8f34"}, @INET_DIAG_REQ_BYTECODE={0x28, 0x1, "a4deb2c02fb63d20eacd527a2ad2a7ed1d18bd5a0abe77383d333a3a2fa7059903f82306"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x140}, 0x1, 0x0, 0x0, 0x48880}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, r4, 0xb03, 0x0, 0x0, {0x13, 0x60}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x7}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x36051420}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r4, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7d6f}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc2}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x28, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000810500000000000000000000009c", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r7], 0x44}}, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000240)) [ 2871.267039] Total swap = 0kB [ 2871.279147] 1965979 pages RAM [ 2871.290952] 0 pages HighMem/MovableOnly [ 2871.302241] 339072 pages reserved [ 2871.306800] 0 pages cma reserved 22:34:06 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:06 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) [ 2871.410558] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 22:34:06 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 2871.796010] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2871.812430] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2871.820870] CPU: 0 PID: 5463 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2871.828729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2871.838096] Call Trace: [ 2871.840712] dump_stack+0x1b2/0x283 [ 2871.844645] warn_alloc.cold+0x96/0x1cc [ 2871.848660] ? zone_watermark_ok_safe+0x220/0x220 [ 2871.853719] ? wait_for_completion_io+0x10/0x10 [ 2871.858436] __alloc_pages_nodemask+0x2127/0x2720 [ 2871.863409] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2871.868261] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2871.873464] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2871.878348] ? do_raw_spin_unlock+0x164/0x220 [ 2871.883069] alloc_pages_current+0x155/0x260 [ 2871.887915] kvm_mmu_create+0xda/0x1d0 [ 2871.892199] kvm_arch_vcpu_init+0x282/0x890 [ 2871.896528] ? alloc_pages_current+0x15d/0x260 [ 2871.902422] kvm_vcpu_init+0x26d/0x360 [ 2871.906595] vmx_create_vcpu+0xef/0x29a0 [ 2871.910677] ? __mutex_unlock_slowpath+0x75/0x770 [ 2871.915906] ? drop_futex_key_refs+0x2e/0xa0 [ 2871.920862] ? alloc_loaded_vmcs+0x240/0x240 [ 2871.925614] ? __lock_acquire+0x5fc/0x3f20 [ 2871.929870] kvm_vm_ioctl+0x4ca/0x13e0 [ 2871.933762] ? kvm_vcpu_release+0xa0/0xa0 [ 2871.938114] ? perf_trace_lock+0xf7/0x490 [ 2871.942279] ? check_preemption_disabled+0x35/0x240 [ 2871.947958] ? check_preemption_disabled+0x35/0x240 [ 2871.953328] ? perf_trace_lock+0xf7/0x490 [ 2871.957489] ? perf_trace_lock_acquire+0x510/0x510 [ 2871.962740] ? perf_trace_lock_acquire+0x510/0x510 [ 2871.967703] ? lock_acquire+0x170/0x3f0 [ 2871.971832] ? kvm_vcpu_release+0xa0/0xa0 [ 2871.976325] do_vfs_ioctl+0x75a/0xff0 [ 2871.980263] ? selinux_inode_setxattr+0x730/0x730 [ 2871.986385] ? ioctl_preallocate+0x1a0/0x1a0 [ 2871.990903] ? lock_downgrade+0x740/0x740 [ 2871.995313] ? __fget+0x225/0x360 [ 2871.999068] ? security_file_ioctl+0x83/0xb0 [ 2872.003506] SyS_ioctl+0x7f/0xb0 [ 2872.006942] ? do_vfs_ioctl+0xff0/0xff0 [ 2872.011020] do_syscall_64+0x1d5/0x640 [ 2872.014919] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2872.020109] RIP: 0033:0x45ce69 [ 2872.023481] RSP: 002b:00007ff3b8e13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2872.031507] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2872.038785] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2872.046072] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2872.053337] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2872.060937] R13: 00007fffdf1aef2f R14: 00007ff3b8e149c0 R15: 000000000118bf2c [ 2872.078958] Mem-Info: [ 2872.081601] active_anon:432010 inactive_anon:8460 isolated_anon:0 [ 2872.081601] active_file:30221 inactive_file:16427 isolated_file:0 [ 2872.081601] unevictable:149081 dirty:67 writeback:0 unstable:0 [ 2872.081601] slab_reclaimable:20160 slab_unreclaimable:256945 [ 2872.081601] mapped:62239 shmem:179355 pagetables:67948 bounce:0 [ 2872.081601] free:504223 free_pcp:335 free_cma:0 [ 2872.118661] Node 0 active_anon:1380980kB inactive_anon:17280kB active_file:28kB inactive_file:4kB unevictable:211764kB isolated(anon):0kB isolated(file):0kB mapped:217120kB dirty:4kB writeback:0kB shmem:245736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 892928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2872.149080] Node 1 active_anon:347060kB inactive_anon:16560kB active_file:120856kB inactive_file:65704kB unevictable:384560kB isolated(anon):0kB isolated(file):0kB mapped:31852kB dirty:264kB writeback:0kB shmem:471684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2872.180387] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:112kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2872.208917] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2872.222590] Node 0 DMA32 free:35520kB min:36272kB low:45340kB high:54408kB active_anon:1380980kB inactive_anon:17280kB active_file:28kB inactive_file:4kB unevictable:211652kB writepending:4kB present:3129332kB managed:2621196kB mlocked:60kB kernel_stack:22272kB pagetables:60160kB bounce:0kB free_pcp:128kB local_pcp:128kB free_cma:0kB [ 2872.254510] lowmem_reserve[]: 0 0 0 0 0 [ 2872.260028] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2872.288699] lowmem_reserve[]: 0 0 0 0 0 [ 2872.292838] Node 1 Normal free:1971468kB min:53612kB low:67012kB high:80412kB active_anon:347160kB inactive_anon:16560kB active_file:120856kB inactive_file:65704kB unevictable:384560kB writepending:268kB present:3932160kB managed:3870192kB mlocked:4kB kernel_stack:77216kB pagetables:211636kB bounce:0kB free_pcp:1168kB local_pcp:492kB free_cma:0kB [ 2872.327972] lowmem_reserve[]: 0 0 0 0 0 [ 2872.332025] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (U) 0*64kB 2*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (ME) = 10316kB [ 2872.349085] Node 0 DMA32: 282*4kB (UMEH) 321*8kB (UMEH) 337*16kB (UMEH) 198*32kB (UME) 62*64kB (MH) 32*128kB (ME) 17*256kB (MEH) 11*512kB (UME) 2*1024kB (UH) 0*2048kB 0*4096kB = 35520kB [ 2872.367969] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2872.368975] syz-executor.1: [ 2872.380285] Node 1 Normal: 73*4kB (UME) 66*8kB (UME) 36*16kB (UME) 12*32kB (UME) 2*64kB (U) 1*128kB (E) 4*256kB (UME) 2*512kB (UM) 3*1024kB (UME) 3*2048kB (UME) 478*4096kB (M) = 1971188kB [ 2872.384000] page allocation failure: order:0 [ 2872.403906] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2872.415927] , mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2872.419985] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2872.429673] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2872.434635] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2872.440313] CPU: 1 PID: 5508 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2872.449496] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2872.455276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2872.455282] Call Trace: [ 2872.455304] dump_stack+0x1b2/0x283 [ 2872.455319] warn_alloc.cold+0x96/0x1cc [ 2872.455331] ? zone_watermark_ok_safe+0x220/0x220 [ 2872.455351] ? wait_for_completion_io+0x10/0x10 [ 2872.455365] __alloc_pages_nodemask+0x2127/0x2720 [ 2872.455391] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2872.468697] 221084 total pagecache pages [ 2872.474812] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2872.478604] 0 pages in swap cache [ 2872.481099] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2872.488565] Swap cache stats: add 0, delete 0, find 0/0 [ 2872.490643] ? do_raw_spin_unlock+0x164/0x220 [ 2872.496905] Free swap = 0kB [ 2872.500418] alloc_pages_current+0x155/0x260 [ 2872.507519] Total swap = 0kB [ 2872.510914] kvm_mmu_create+0xda/0x1d0 [ 2872.517588] 1965979 pages RAM [ 2872.520002] kvm_arch_vcpu_init+0x282/0x890 [ 2872.524934] 0 pages HighMem/MovableOnly [ 2872.530293] ? alloc_pages_current+0x15d/0x260 [ 2872.530309] kvm_vcpu_init+0x26d/0x360 [ 2872.530321] vmx_create_vcpu+0xef/0x29a0 [ 2872.530335] ? __mutex_unlock_slowpath+0x75/0x770 [ 2872.530345] ? drop_futex_key_refs+0x2e/0xa0 [ 2872.530355] ? alloc_loaded_vmcs+0x240/0x240 [ 2872.530373] ? __lock_acquire+0x5fc/0x3f20 [ 2872.530389] kvm_vm_ioctl+0x4ca/0x13e0 [ 2872.540666] 339072 pages reserved [ 2872.542840] ? kvm_vcpu_release+0xa0/0xa0 [ 2872.545888] 0 pages cma reserved [ 2872.550494] ? perf_trace_lock+0xf7/0x490 [ 2872.616608] ? check_preemption_disabled+0x35/0x240 [ 2872.622255] ? check_preemption_disabled+0x35/0x240 [ 2872.627265] ? perf_trace_lock+0xf7/0x490 [ 2872.631418] ? perf_trace_lock_acquire+0x510/0x510 [ 2872.636800] ? perf_trace_lock_acquire+0x510/0x510 [ 2872.643281] ? lock_acquire+0x170/0x3f0 [ 2872.647430] ? kvm_vcpu_release+0xa0/0xa0 [ 2872.652295] do_vfs_ioctl+0x75a/0xff0 [ 2872.656435] ? selinux_inode_setxattr+0x730/0x730 [ 2872.661674] ? ioctl_preallocate+0x1a0/0x1a0 [ 2872.666088] ? lock_downgrade+0x740/0x740 [ 2872.670873] ? __fget+0x225/0x360 [ 2872.674961] ? security_file_ioctl+0x83/0xb0 [ 2872.681228] SyS_ioctl+0x7f/0xb0 [ 2872.685973] ? do_vfs_ioctl+0xff0/0xff0 [ 2872.693402] do_syscall_64+0x1d5/0x640 [ 2872.697662] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2872.703121] RIP: 0033:0x45ce69 [ 2872.706774] RSP: 002b:00007ff3b8dd1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2872.716211] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2872.723478] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2872.731194] RBP: 000000000118c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 2872.739610] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118c06c [ 2872.747927] R13: 00007fffdf1aef2f R14: 00007ff3b8dd29c0 R15: 000000000118c06c [ 2872.761881] Bluetooth: hci3 command 0x0405 tx timeout 22:34:08 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0x3, 0x1}, 0x1ff, 0x4, &(0x7f0000000080)={0x0, 0x15, 0x40, 0x91, 0x678}, 0x8, 0xee, 0x9, 0x0, 0x6, 0x7, &(0x7f00000000c0)="5ab455eb3dab0d0393410a01054a00d46db7e7164d27b694a3c3358dfeb478b40edd850f108e6f6b122eb2494a426bb1efafb970bcdb744833c17788c6cdf036b6af18e1a271387aa84aceca3e0a2f54a89722e02661e38f2c3790380c1ba7c0db9cce91866f6295431f52b402e4b9ee29df213e33a15bfe84d73c7501f75e31fb336e20d60ff8b6a8a349d5c932efb71b04192444803b8e569f292431c6085b0ec9d4910a81"}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x4000}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000000)={0x1f, @fixed={[], 0x10}}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) 22:34:08 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) 22:34:08 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 22:34:08 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_ro(r1, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r2 = dup(0xffffffffffffffff) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000080)={0x4, 0xfffffffffffff61c, 0xfffffffffffffff7}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 22:34:08 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e2b, 0xff800001, @private2={0xfc, 0x2, [], 0x1}, 0x3ffffff6}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x31) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5400df250100000426d559c48e7740aa50f5b207971988bc446bbc77fa07dad5087f481646f2020ca5ba1d1e10e112b7080853a6078231f11cff6064932870ea55d9ec052a255196a8951d4e000000e914011b49c82ac11629a3786e97ea93000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20004801}, 0x8010) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$l2tp6(r4, &(0x7f0000000080)="f22bf8d63c46058f78ab7b72bb3a2fcca0fae1604a7930534c78336f840df2e8627a1d0b29fdd60b01d9d5378abbc80f815d57e65f68208d09257bd7361b3981ae251903af6dda4e0746e0a6c77e122f7d54dc1b23ba5355fc7cc2bfb1cc6247c50627c0332ccf792e8e50e4a093e4418caac0cad6b737e310b46fcd7707a54fe121bfae85996ccb1bde77bdc527f098ac3bfef9343435eb8cb243d0aa3d58c9d6cdb8b3f184aaee31149d27a04de845688c7a6b3f1e99507397302b11c5ed4e2049e1f1afe66853", 0xc8, 0x10, &(0x7f0000000180)={0xa, 0x0, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x34}}, 0x3, 0x4}, 0x20) dup(r2) 22:34:08 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:08 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:34:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x400000, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x23, 0x1, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)=0x2000) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, 0xd, 0xa, 0x304, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44050}, 0xc800) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) 22:34:08 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:09 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:09 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={[], 0x10}}, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0xff) 22:34:09 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:09 executing program 2: prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:09 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:09 executing program 5: clone(0x131200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = socket(0x2c, 0xa, 0xfffffffb) syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x7fffffff, 0x42) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x40000000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRES16=r1, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r4], 0x44}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="06002bbd7000fedbdf251c0000000c00990012090000010000000800ffffb7d6ff518b82b927d5da29588a057b8f9cea3d2243588b85c790110627c772c3fc51780c3dd4f4343525fbdefe77226b96632027842331e2aedf55c5eb42ba76396ef340123c5fc3330edc31f4004c6c87cb956367ef2288da66e32375970b289f3cb2275de076f19536a1170f95192435a2d0ade618d23a6790432a579810f300000000000000000009000000000000000000eda4", @ANYRES32=r4, @ANYBLOB="0c00990009000000000000000c00990052250000030000000c009900fcffffffffffffff0800010004000000080001000300000008000100020000000c0099000100000002000000"], 0x70}, 0x1, 0x0, 0x0, 0x20048850}, 0x1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = socket(0x11, 0x80a, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000480)={0x0, 0x2}, &(0x7f00000004c0)=0x8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00'}) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000000c0)=0x20, 0x8) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="0010103d4178238785591d0821f42e9567949f72a25089b23c5763b9049d116d5fdbcee428566b2df8a145c1efcc89917ed16e2b93444325aaf619721203506c7e16", @ANYRES16=r6, @ANYBLOB="000228bd70f3dcac8de514be5a00fbdbdf25030000800000f3006d643018fc35d5f0ecf39b"], 0x18}}, 0x4008001) [ 2874.256378] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2874.271146] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2874.286582] CPU: 1 PID: 5527 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2874.294982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2874.304892] Call Trace: [ 2874.307581] dump_stack+0x1b2/0x283 [ 2874.311330] warn_alloc.cold+0x96/0x1cc [ 2874.315528] ? zone_watermark_ok_safe+0x220/0x220 [ 2874.320491] ? wait_for_completion_io+0x10/0x10 [ 2874.325281] __alloc_pages_nodemask+0x2127/0x2720 [ 2874.330260] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2874.335391] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2874.340519] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2874.345580] ? do_raw_spin_unlock+0x164/0x220 [ 2874.351990] alloc_pages_current+0x155/0x260 [ 2874.356973] kvm_mmu_create+0xda/0x1d0 [ 2874.361231] kvm_arch_vcpu_init+0x282/0x890 [ 2874.367599] ? alloc_pages_current+0x15d/0x260 [ 2874.373090] kvm_vcpu_init+0x26d/0x360 [ 2874.377871] vmx_create_vcpu+0xef/0x29a0 [ 2874.382222] ? __mutex_unlock_slowpath+0x75/0x770 [ 2874.387534] ? drop_futex_key_refs+0x2e/0xa0 [ 2874.392133] ? alloc_loaded_vmcs+0x240/0x240 [ 2874.396547] ? __lock_acquire+0x5fc/0x3f20 [ 2874.402120] kvm_vm_ioctl+0x4ca/0x13e0 [ 2874.406130] ? kvm_vcpu_release+0xa0/0xa0 [ 2874.410551] ? perf_trace_lock+0xf7/0x490 [ 2874.414882] ? check_preemption_disabled+0x35/0x240 [ 2874.420357] ? check_preemption_disabled+0x35/0x240 [ 2874.425549] ? perf_trace_lock+0xf7/0x490 [ 2874.429800] ? perf_trace_lock_acquire+0x510/0x510 [ 2874.434768] ? perf_trace_lock_acquire+0x510/0x510 [ 2874.440004] ? lock_acquire+0x170/0x3f0 [ 2874.443988] ? kvm_vcpu_release+0xa0/0xa0 [ 2874.448161] do_vfs_ioctl+0x75a/0xff0 [ 2874.452212] ? selinux_inode_setxattr+0x730/0x730 [ 2874.457205] ? ioctl_preallocate+0x1a0/0x1a0 [ 2874.461731] ? lock_downgrade+0x740/0x740 [ 2874.466044] ? __fget+0x225/0x360 [ 2874.469503] ? security_file_ioctl+0x83/0xb0 [ 2874.473922] SyS_ioctl+0x7f/0xb0 [ 2874.477298] ? do_vfs_ioctl+0xff0/0xff0 [ 2874.481276] do_syscall_64+0x1d5/0x640 [ 2874.485177] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2874.490371] RIP: 0033:0x45ce69 [ 2874.493592] RSP: 002b:00007ff3b8e13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2874.501457] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2874.509114] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 2874.516500] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2874.523878] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2874.531840] R13: 00007fffdf1aef2f R14: 00007ff3b8e149c0 R15: 000000000118bf2c 22:34:09 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) [ 2874.556629] warn_alloc_show_mem: 1 callbacks suppressed [ 2874.556633] Mem-Info: [ 2874.565609] active_anon:432399 inactive_anon:8461 isolated_anon:0 [ 2874.565609] active_file:30233 inactive_file:16436 isolated_file:3 [ 2874.565609] unevictable:149081 dirty:131 writeback:0 unstable:0 [ 2874.565609] slab_reclaimable:20180 slab_unreclaimable:257083 [ 2874.565609] mapped:62232 shmem:179355 pagetables:68305 bounce:0 [ 2874.565609] free:502985 free_pcp:335 free_cma:0 [ 2874.611884] Node 0 active_anon:1380980kB inactive_anon:17280kB active_file:20kB inactive_file:0kB unevictable:211764kB isolated(anon):0kB isolated(file):12kB mapped:217120kB dirty:4kB writeback:0kB shmem:245736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 892928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2874.666788] Node 1 active_anon:348516kB inactive_anon:16564kB active_file:120912kB inactive_file:65744kB unevictable:384560kB isolated(anon):0kB isolated(file):0kB mapped:31808kB dirty:520kB writeback:0kB shmem:471684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2874.701180] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:112kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2874.731020] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2874.737617] Node 0 DMA32 free:35380kB min:36272kB low:45340kB high:54408kB active_anon:1380980kB inactive_anon:17280kB active_file:20kB inactive_file:0kB unevictable:211652kB writepending:4kB present:3129332kB managed:2621196kB mlocked:60kB kernel_stack:22272kB pagetables:60160kB bounce:0kB free_pcp:244kB local_pcp:120kB free_cma:0kB [ 2874.777104] lowmem_reserve[]: 0 0 0 0 0 [ 2874.781791] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2874.816793] lowmem_reserve[]: 0 0 0 0 0 [ 2874.822907] Node 1 Normal free:1966092kB min:53612kB low:67012kB high:80412kB active_anon:348572kB inactive_anon:16564kB active_file:120924kB inactive_file:65744kB unevictable:384560kB writepending:568kB present:3932160kB managed:3870192kB mlocked:4kB kernel_stack:77664kB pagetables:213172kB bounce:0kB free_pcp:888kB local_pcp:260kB free_cma:0kB [ 2874.859214] lowmem_reserve[]: 0 0 0 0 0 [ 2874.864413] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (U) 0*64kB 2*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (ME) = 10316kB [ 2874.882345] Node 0 DMA32: 251*4kB (MEH) 326*8kB (UME) 336*16kB (UME) 199*32kB (UMEH) 61*64kB (M) 32*128kB (ME) 17*256kB (MEH) 11*512kB (UME) 2*1024kB (UH) 0*2048kB 0*4096kB = 35388kB [ 2874.902788] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2874.915925] Node 1 Normal: 91*4kB (UME) 137*8kB (UME) 40*16kB (UME) 51*32kB (UME) 3*64kB (UM) 4*128kB (UME) 3*256kB (UE) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 477*4096kB (M) = 1967188kB [ 2874.937042] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2874.949194] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2874.958490] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2874.968366] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2874.978325] 221117 total pagecache pages [ 2874.982393] 0 pages in swap cache [ 2874.987060] Swap cache stats: add 0, delete 0, find 0/0 [ 2874.992445] Free swap = 0kB [ 2874.996072] Total swap = 0kB [ 2874.999105] 1965979 pages RAM [ 2875.002509] 0 pages HighMem/MovableOnly [ 2875.014057] 339072 pages reserved 22:34:10 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 22:34:10 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 2875.018196] 0 pages cma reserved [ 2875.194050] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2875.206331] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2875.211741] CPU: 0 PID: 5636 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2875.220877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2875.231339] Call Trace: [ 2875.235448] dump_stack+0x1b2/0x283 [ 2875.239225] warn_alloc.cold+0x96/0x1cc [ 2875.243220] ? zone_watermark_ok_safe+0x220/0x220 [ 2875.248341] ? wait_for_completion_io+0x10/0x10 [ 2875.253490] __alloc_pages_nodemask+0x2127/0x2720 [ 2875.258637] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2875.264194] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2875.269471] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2875.274791] ? do_raw_spin_unlock+0x164/0x220 [ 2875.290790] alloc_pages_current+0x155/0x260 [ 2875.296575] kvm_mmu_create+0xda/0x1d0 [ 2875.300481] kvm_arch_vcpu_init+0x282/0x890 [ 2875.305167] ? alloc_pages_current+0x15d/0x260 [ 2875.309917] kvm_vcpu_init+0x26d/0x360 [ 2875.313806] vmx_create_vcpu+0xef/0x29a0 [ 2875.317882] ? __mutex_unlock_slowpath+0x75/0x770 [ 2875.322828] ? drop_futex_key_refs+0x2e/0xa0 [ 2875.327936] ? alloc_loaded_vmcs+0x240/0x240 [ 2875.332518] ? __lock_acquire+0x5fc/0x3f20 [ 2875.337743] kvm_vm_ioctl+0x4ca/0x13e0 [ 2875.341915] ? kvm_vcpu_release+0xa0/0xa0 [ 2875.346252] ? perf_trace_lock+0xf7/0x490 [ 2875.350399] ? check_preemption_disabled+0x35/0x240 [ 2875.355435] ? check_preemption_disabled+0x35/0x240 [ 2875.361260] ? perf_trace_lock+0xf7/0x490 [ 2875.365551] ? perf_trace_lock_acquire+0x510/0x510 [ 2875.370586] ? perf_trace_lock_acquire+0x510/0x510 [ 2875.375886] ? lock_acquire+0x170/0x3f0 [ 2875.380093] ? kvm_vcpu_release+0xa0/0xa0 [ 2875.384637] do_vfs_ioctl+0x75a/0xff0 [ 2875.388700] ? selinux_inode_setxattr+0x730/0x730 [ 2875.393560] ? ioctl_preallocate+0x1a0/0x1a0 [ 2875.398246] ? lock_downgrade+0x740/0x740 [ 2875.402582] ? __fget+0x225/0x360 [ 2875.406044] ? security_file_ioctl+0x83/0xb0 [ 2875.410564] SyS_ioctl+0x7f/0xb0 [ 2875.414909] ? do_vfs_ioctl+0xff0/0xff0 [ 2875.419030] do_syscall_64+0x1d5/0x640 [ 2875.423071] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2875.428279] RIP: 0033:0x45ce69 [ 2875.431471] RSP: 002b:00007ff3b8e13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2875.444711] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2875.452268] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2875.459672] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2875.467603] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2875.475802] R13: 00007fffdf1aef2f R14: 00007ff3b8e149c0 R15: 000000000118bf2c 22:34:11 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_wait(r2, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4200, r3, 0x0, 0x15a126667fbd412d) tkill(r3, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getpid() 22:34:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0]}) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 22:34:11 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) 22:34:11 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup(r1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000080)={'HL\x00'}, &(0x7f0000000040)=0x1e) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:11 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:11 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 22:34:12 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:12 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000080)={0x38, 0xb, 0x6, 0x700, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000800}, 0x40880) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000000)={0x69, 0x1f, &(0x7f0000000100)="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"}) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:12 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r5}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @loopback}, r5}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {r5, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, @ib={0x1b, 0xffff, 0x1f, {"4153d670163249e1ebfec980e5fb9921"}, 0x10001, 0x744, 0x9aef}}}, 0x118) sendmmsg$sock(r1, &(0x7f0000004d00)=[{{&(0x7f00000002c0)=@l2={0x1f, 0xa5, @none, 0xfff, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="c01c32bcab657c33c727ac14a2dc1d61f9e3f987fcd224989d9df58cbf432c1fee22960a9068aa56cfc406c8e260a90742aa206d8ae6f13c41d640b28eb78e77ff3f444d45bdec4674ed0b121f85f6a0537fdf2a0c8b9203f59c266c47d29859521547d111dedcc453f7d9ec90b45d0d1d29a8e8340aa9f03603b4120715dda4911dd709887f1fe35297ec56e47d62d7b427ce46032222bd549cad93d44a8c6ac723e7b559bd2878c8782b064ffe2d60060df963f401ef64948f691747", 0xbd}, {&(0x7f0000000500)="116eadcb79e161ee3c7eb0108859ecdd5a244b59db872d35ef7e8b745826254cdbb747ec26c38980a3789b30ec9ce94cba1ea17bcff065867c12a4f37cbca01173027e951b7f1e2d312449f9455e03f030c9da694497ac6c3410d6100f8cbd9b98047d19aa042ac6d9e08f5c6b028dc6fdcd64f5673c85c6a44daa17e8f2f30c24ca7a", 0x83}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="13d5cab85e00a82245d1b2874e42e42041242e5f553fcebc5be4223ba7325fbdb8c3a8", 0x23}], 0x1}}, {{&(0x7f00000005c0)=@in={0x2, 0x4e23, @multicast2}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000000640)="06e5dce84ae45b76285e9f979dc5a45d3d47ad5b29a0c605643506a143d62ca895abc73a74da22ae7b169d014ece93c0b91b2a01a8bddc3293331dacafabe3f2621abb893e2d10ac", 0x48}, {&(0x7f00000006c0)="2c98bb8d1cef04a8dbf4b8836bda996770b33ae9f82bebadb1d95d312973abbb3a48404746c0a21898393fef2416c86a2694ccd24c4f89608fba9fac423b7fb40f6a859c6298eff7e4dff7c0e8f2f035607a0534f80fdee9ebcaeb710eb80c8e604b753485ae5c765a565e15718eb2fccc48c3166f2e8600be202eadadd8f5b2b5acbcacbf5c61a7568cea39424c6bf4a2b4895759f0751e1cdadff1362fba16699035e4014bc04f22c84358b646d345cf544a7707d47878b4dbafcdad7dafb34408218c00f10d278609b86e426764a075d850545bebb446eca077e583f1aba9f3ac56f6b19f36fe47199fe6ae417f0c3a27ba166559136e404879cebb0f578614869b3c984f7038e53226611b55d5fb8ce0aac3a3fa9395c6b2fe41038abdecff5d091e675a02a0d47f1f61544b310057e7dc1491d22b693b7fee98ad4d8f90e3529b1bd07ab08f6e881d93ad32a014437982cdf5ad1c006691aa71a249e12cb3108a8e8ee4ec390d3724c7f83bedfb0debbfcd5babfa382ea14384d9fb0f55756878afb3597b411e5f9cfd9d125e72c459a038685f6dd4a9d52106b961799c19ebadceb65de1a5e8f7432488e29bee2740a14471bfe65953a0e1ee5de10dac265fb0b679949a764618d1170a33445301ef1f0a7ff4fd32f100d08dffcafba0c389ae1a0cbaeb5d693271296cd2348fca35d1845507de04baa3fdc2215674decaf2eb626fefeb58137d8e4d279e8f58e0be26e4427d2c5882c98d9d8979f56d9952850700eaa7efbe667803a638915f2fd589b2b412223c15aea1cedc6be9324e267b9dceadfd2c12f95c212be06a3b408f358d7eea3639ce9b99ca7873bbccacfe069ebcf955f8f51e14164b3bb152e0edfa83b97a929d126b684e3aa3f728444d33068dfdc492716d91679ba26635ea413ac5ff3cb90afbbe0cde391dc76edd4af602d1585752b3a19609f9a996da171f1fa5de9546cd70d46951dc9571fc3a9c7427f2cd3540afb2b6537c0fded9f4e97520e40095589674c67ef000e5f9ffbd9bdf66e09b54bedc3a12da6bbf9d554ce1070a81d908374823a85826e99e200019d3d0165601ccfefbb408f59b4332146af237e868a033c24b3ccbd652d461024a26d550a5b3623a38cf05ee1a6b46eaa6e0f3b531948f364bfcf551e2850b86cb3b51ea106956b5954f105b77235a093ce1f6e21b3d758cc8173082667fc1dcccceddee221c6bf4fcb5204e6f48ad57c2a9984f8f1baaf36017a10927b0afea0b61ddbc1b661d32ccbd9a6ba34f0f2162c4d8b867ff125f053eb42a324987855d0a40b0cc27931951b910d9310ae75f17ecafee59bde35e123853dad549eba2aeae8acacf5404949b618dc9907ee8f969cfd2ec0664e2f2378f4e8b6553426d9928796041b4b8337163914f72aa539ff6043ed4b5452ae0e2f3735408d888021b9865ec27c2007b6cac8bf41510dec2448a92b76faaa1aeec599615a1c2a2e3cae387d15faeb904d9556f0f2953c3810cc91bd38296b432c8389a008fddf5f404b29bde139ac6015fb8ce2ae1adbadd0a214330eecb0c5477b7a5843a4216466cacd0e23a2ebb04d9efb6bfdb473de8c00e4b0947a5e5f992862e15bc089a325fc294403f4e8123f7075032685786399cc07400f93015be00a928839ef2758bbe3171d6e579f96e80311e1e6573d8bd12dbf577e99ac22de4ca2dcca6dd09eefed3e605e64edcf8745e74052db537e52567281c68e1c06ce2d60584f1d5cc1bfff7cd977f78d1745ad231b5c150957c339965326a3d72c411ab8058bd4ff449a2c85c962669e6c1eadb9c0a2e1ff8a8a8f92eacb9989769cd4841fdf150ac53e93658c7f81f5d5802696974ef96ab1803afe31c2af6227f83ca55550929115e6073aab6284173ee45a2a3599de42ad6fc0f3475e74be2eaaab8dfb7c901add4b0da379a32bbca080880ac41c76c568039a39439826ef10640a5c608933c49880e965ff0bcaae01dc99774488102f241135278c5d4ce84cd1fec5833b874dd5275eeaa85694fe6ab0e1005a0a7f9fcb26cb4138d145b05c185b1b3859d274fa48bf0ca1893558fbfe204199c155335cc989623752091423d1016679bb6dd9f43470324438386138c2a7c41a9d301f62ee0d8b0349791d8d7b20efd64fe48d5f2877349315afe56c47e2285b263a5af0c3652b6b5530ac8f9f93db6725419c2a65633c4fd00bd2c32cb5a12d27cd9491523bc235f2bda1194e851f5cfc8320445417d1025d0e22994e31519c7ff5cc908629e4860fb532155e2b9f6ab3226e6456f61fb5b38e8c64e9635adf4c7a8c3f15e4291a644d46ab7629f964e036a502164c075f3e83b73cb5bb0b5f05c56be56522a6ae28771dca9566397042676f7f7f4af318b609bd0e486ee163ae07251e773b91f995176a35e62b4943fe2bd3f695e3d974ebbcf5fdfb13c718fcddb0f0fb3d7f912be784f2145111ad6a5b085948e2dd762c3a2b439446149d0f33c163c03bc031d74994414365200e09c498cb45f52ae95ad90005909d12d62d8d605e8ce7dea33cb1c2b3b8eabef2b906d94ade01c579d0430023d576d43e3288bffe70e7e502ddec02a0f09d1df03a848f4490cf053a2d7fd4e6c671906b61f5dae37dea6b07a6242a73b40646ed617f4a66cd0be356ec9e2140b317ec325cb2ace8f3f9d0db4f3cf529397d8339e4474fbad28b70a89c6a12c6d21cb1385e4af8254d148dc9fea0abbf695b105be196db51ecafde09223fa5f224cf9bd35e8504df306282419d642857a9d65a5e03b8d4602c2ab5351551b7eacde0ff55cac393e780df37619bcacd59f85774404cc17641ea512c8b6bc9f9619b8ba5a9bd897f199e707f3ab314870d4269d940144d08e8c2bad416c6d5a4453253bf2a7d998fbf86973dfc2f1b351850abc57cb8a277b91d898957e895adb0e3fa847047ec5392c440391772e466d1353bf09f9c0c7ce47ea32c2d3b3f24d548b4a7ab2059e77d421bd25ea33afd5017b647e05fef54f36ab27d70a79b906255ec516d27cc601dcbe8774887891db0d49e7f1173f8dd125c2039a0e7220021eeea9abaf788e891f6a4b163664d83614bf169bdbb8e9f4c3d1e16dac82139f9e0cae78051be37517bd125ddce5455041db43a5ef5bcf96bc5402845c019d911cb04b5a6d88ff7fa54554529825bfd3e14b745df9c6fc5aa33982e75e552f78314f3a67a05b8a6db64810f450279948ec7c50be8012cf8fe54818925346012cf6c23dd7747396b802454a4693e210b8a707ba7ad5651901593500c19b92509203c27b4c24a79a372e68d2aa54f6d87b211f597eecb5045ac8591b66551ae380b2749c8ffc35d704d103ed50376df80783a78c2b16fb9153d626d052d27b3308ded3a8c756db04de1eb3965ba226a4f495d14df0a63f1074e1f8152478b97bce327b8ccb19a33f75dfa4123079cf9c2f0befcdac53f76cd79610beedee34b3449d2ec6ccbb386620d369815ccfef2a4edf027a8590fac14f46d6f28027bef95081c09f68711a2a5ed55a62b7782c543128f5e3e99fe184ada75c4fde1839522df4ac5efa42a849502beb1522d16910260de255f9810e10a837b429a2184a87bb94e63a86a7d15fc3950e6c316996cc7cca5b681d1302ba997bad989c9bae61bd97b6fd16260ea3910e4cac1a7e4767f0187a0680183b0bb9dd41308867f38df134db79f55784a69d41cf4cc7989d8ab7a64f089dd4cdc4632f7f455abd91b14b2cbe9a3304aff68abd4a06934386cdb9139b2a74527e5695b6b64914e4fd02b3343e19526e6b793cb9e58a8d53bf278e22f185868ce171865f1266e6e46c1df0bb566980b2f16e41f95335a8219e09b5bf02adcbcbb0889dccfb418cd588f550aca4184c0157fb9d0ecd4a7bf9b999079a69b1b7a8feec4f21d8f57029982e721fd2a093622d6ba317f2738643f07067ec0a483ab22b9d0d220c58c2a5e409ae32bb5a5b14648328664a1106885d9bc897d78b2ae276671c179792c9330628e92c15b6d6a512815fdecfff30c15b8242080b13f7dd226947cb91340a70adc0984052e1a7dca3a9c202ed3580b0003b7a6e859afa0727138ce65962a00e9aca817ae3267d116b85c6a979c6d83dce4a5853e6396f981db150c0be0ba1259419d07b8ee84f1becb585fd89619d0bbd7823d28dbc060773c54296d44cdfa7373fd903be8182bb64e5438a4d629d53dc73a0984781807b44454568c9a6082355a6e88868c904a6d08ea6506256e4b27a7d8b21fa95be8c11cbdd9623f2c2347588cc832735ca5ae774cbf334096f3fc5c83a61ec7ff38ace0502b3d5e062baf6340d95b3d70373194c7177a46828b1cf33e9b1ad40eb55d6b4c9fe58cb38c482ae1d893640fc440cd53c77794e0af5873751de10ff55b829c029bc2dae176a148976ef670656a027739432e0b3057481d4cd7a954c63b6ed4ce1762b904dcb37bbd060a80b41cb67eaa99a528bcc36da1695dce300397fcb040074421662879e8be10e51fd5f7d3cafbf9d6cd989e98d84314a820e008a26a593c62e12c89199aeadff4c83148aae110612e39ce47d32efe5280b5b564f80c814c3d0a7202f0428a05f327b862f72ce028f6e5dea8ef00eb984b2dc1b82fd66455d9a773be1b52db1c93a4c042a064d85c320b046815b04aabe09adc2accc6ed3de5a1aeddb5cb68490cb6d31e5f910ff55e97e0100c4abf410437ea3b4fbb6186db8303eb1a71fe08dc9f941425174c29748d3c4f25e8a48873beee8fb305cf6156cea78a324fa57237ea3618323ccd71c30b4f108db7b768138a1b8823e3595a18ba359ea7d300789d5f061c73915b22b883118ab670052a8ecd2edb8328401412d1cbed25fc343aa93b9a64c012ae3d07373d8be0ae193ed2248db82e7837a51d1774937a925c4842c2aeaa434e8a780fbafc2c9cd131d3399468b3b9e3af7607583aa7f48b369c94f886cc2d447718e89a9e4ee7a5d7c8698a113a4e0c38ec09b0f827fa7c18a486c01f708388264cfbf3783f85ad8ff3f86405477f048e45a0fff587dc13407683f8b6826910ff92141f86dc94ffd4ecc124ce9752a3f79c9fcf1a256a6ad335cd947247443a2077bc49ce3b82e3241da238886530e2e0ae6890b083a7a2a0d6fbc0648cf70fc502a1edc293d6c5e5b44a2712e30892580adfc926ee83ce91129583b14d1ceafac3a0ab354281d66e1b4cac046377c03130af6c0f69a59848a89e8e917fa8d6efc7b903712460ab0a153a9e871cf0c2be7117e8bdeec4780d1faf379e903f67bb65b05d7ebcb0c76a05ad08fe0d7f0155fd310497bfa849d74c63fdb11f32547d54aeb41ba8595dd8f4dca890838c6d5bbb3a5ec3183795c6ccd84f81f5053a060fb9a25f80f03d90b0d566c8c1eaecb4892e188c91ca607d84cc29acb0288f75ac8f6f47d8a6ca65d12c496dae9eea6d2cac8612772f1ef5d8047987b5b442dcfe726e77f93656031e638f5ca22da8800a1f3ff7d98e5dffc7b2727b38ca193f12b97cf8d633e24e9161c7eb2143e43dbaa450bb786f4f0ef27b1d3562740887b692bfd92339330f954a7fcef1088e71c656a4864fc48fef4abae0c0397ab3f9a5cdebbb35424a10bc577d0e548568484696508db374061d320f70a6b959ce44717c56f93b968bd01099cacfb27388c1d41fe5ec169fb1300754b31571aeda240e70429f5e2fbd74561982d93447827890266aa131948d887220670d50963a9a52f267daa3b640d498f16607b06d4ce", 0x1000}, {&(0x7f00000016c0)="e45da135c85d37384111c007564c4442a4519630c43b72924ed56a3d7f57d04ca073c53dd570ac9b3158af305f355c73ad4fa1d06d76f6225b3c5c1fd3ee6af7a9662754f0a99de730fd02a43e57bfd976f7d870e51e82bc7b9ea3d585ed012aef4d4e98458d28a185a4432437641ca2b2d5", 0x72}, {&(0x7f0000001740)="bd01739a498166b951785bcd5439e0c78dd29ccc7032b38f63e0014d01932f89d81734345f12c5b6252468e6f52d7f3211c8cbc0a05544a6aea2458f4647959ca575", 0x42}, {&(0x7f0000000380)="f4ba1d9143a93457d0a27ae65a44b17dcad6e4c628f45387dfcfddc8ca369169d31e00ac36a8fbc44e6685612d4ab02721b374a3193a79f01ec9", 0x3a}, {&(0x7f00000017c0)="0b7840e2344aba24bb0469f1bc35073c08ff6372828a2af7095eaf6a18d5232dc7181901d566295d8ebd9ed634a58a7a4d", 0x31}, {&(0x7f0000001800)="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", 0xfb}, {&(0x7f0000001900)="3306a3164e2e86839f99ad790623a7e1e8ba233b1630ed25206ee229f029ab0cadcdc82a1c3a57f3e094d647cc525a6b49805fefb1416ced91ee335e9736411b3456011b3113dd9939c3621bbbc32ff2f2bba6f20099856a6db78f65a3f384172b9ff2205375dacd6cf6356cd8e560d64c15609ca09921c502b5aa43af96f6c569938913730acdd75756cb91adc27bdd8b968593b90cab4144e378df91ebb3ecc2f816fe3cf4a783039b7cf58637f09269b435ceaee28b967548b38e6e6b5ac767759616d44b7d72ec7e59b6dcbdab354cefcb38ddc671e788cf1b013a16989e843d2554d92297675d46cc25139c49766cc8fb58c00bb4eb20604c9618835566cffe7fc4c8c07cddaa978846e38101c8f25107504df6294bd1061e0ea750d3cf029b2ec65451a9dd43ea590e5afba2ebeee217834ed73fc1e59dcade84d552beddcb0a89e6ba9f1b57aac4568c5e4f5a1c0abd2a78bfd07b706d68ed95096871eda4cf703511a0ab730f84b29fd996ee36b08c06fa9c1a0a976a337067c7280d6649942f243089da300414a943b90a457037805a4cbcad6075389ffd72ca4af90426c6d378b0b425fb3ad9d0325067227facef172bbabecc4afa7d40fa1f27e71f17ead7470ebdec500f59615436d148122229c76cb4cb63585faa5fb51aa56c35f1a7adf5d2bcbb1adb38652f81946d7d1e5d7648871faea296cb907b5c8496f2e9ff821501471bd721fc1a2470b8186d81f2c9f5391accad885b11bdb9bb2add050a64db3f527933c17869e7a680cc4da7d20cce76675a0dc38764329673b0c9b55e7903e226fd93945b09826dda7959db6cd5b23c8566c7d5c30fc5ec7d8361c0200b59ff4270151de76e103dea502b10e0e5a02236c11a553974dc4ae543bbffdba8405290fb9f6db1ffc3c232718dc5394670911e1ac96362acdf85d43f9c7252b16d2956e623d8535ac1a2bc3db5aa19c66dfd1a22dc8a9f7cc3b66893c272cc438c06882ac27f6755265bf674fc80b38a7068d4c0a1fb5208f84bfb3adc9b369dd13a8c23b924f0582131f83102bb8560baa114009e93bac950e36d5666931c996aef0a23491e8c51c86cefed4a28b8ae64a098bc638ab06a867e371f8e0397c61473ab074b063e37cf68ee0719a93de82a4c26db494fc3b37f8045050a72fcac2e66dec5a0dae89b007b0ddf79c40d1e85b7cd465edf2a748dd8d4a977d9a034962e1930fd4f1ca691c6b46fd468106d02824a1476332c8fbfe40cedec5ad734364a0079ab736494707e36d425d2832a7f7f1375986a4c35d415800f3d984f20010fad76c58db9ef0b2fe0f149599ccb713ea5c6548bc5e9632914aae2841a4fd80ea88e31613c3f565aa49e434e78c7e0a7101f95f6efce1d4e685dbe91afd8bbf94304c4b6a496c202906b725cf683597e9a015b582263226c2afc58c98ffd106ec60f3a7863ec1ab805ed0256aa475329bc541dc65e8671ef540f0434ffffbc228ce9ccbdec05a057c74a42b7ca047be0d60466f565f45274d424f9c05632bae70740b681b4f33513eec22367e944334e15805b6c6a63f7841100c878462220cdd3a5685afa4ee446f1412b69a2966eb0fbc6b95961d95f4cf09275decdebad54fc7ed5ef9d13353fb05a95be66a6ab9ea40e3c33d8962be32fff89844c860ca67ca709f474cea3ae8fdaeba96d015c8676744c889d7fdb89b241b16a65f6cbb4afbae33bfad5274e7a3fbbc269bb720ecfc3e46bd618893b9d5f9d1ff6b81970a3b08d46f5b3914fc0f623f7d72069da140d672762841c96412cddc50e63adaf65bdd9aeb3e305dfa9dfa77190fdfa2b91a399daf427a2824bc75fcf99374ddb547fd3841b84e26763508fb8bf706890e22ee41fc6e4509b92a3e578559c3e07038f29574d87254aa6d7e07f2110d4cee8a6d4704b04d6a36a54553f0154333e715e9fe8bd32d0e7725c288126abc3b889372f19c480cd1c657f45c330b70919b746cdf79030414e540a3bb2c7f837d32f45ce99a21c947a44bacc916b950d8a6345e825ced81238c2a8c497a2d13edaedda86346802a7775807b38cdd043076b774c4682e2e4690f886a9c1d8687916c826ee10cbb9b9333b669a92f7a00572887a3648ff4697c010c332204976372de53b1ad97ccac8125ffd8e7217d82f1751d99a21166eb3fc888a867a9180a25275b9499e98170c19898b63c2c1680ba3b9c304d5194a8147218f15d79679df5efbe975c35338d34ac521e23f917b69ac94a7e489b588e7e00704ffdbfbae1bd9095ee84bba70f34f47fea1707c327f9add231e385d65bcdb906daa0087557df0928e24fe6e2f2224f677912881e2cd50a256f41c1e65d89466a83710c8ac97df1e1e3b33ece3a516734eca91e581df3f14e5c6838cd730823d6822b6d59ee3220bbfb15389c65d24388b200bb9c39e127f563581824c4898b9837156224cb42b3d70cd25418e7b37226e6576ac85bc75959e158b2400f86a8dd0240139a33eaa80c5ae0fdf2b2ac6c099487ea7561db4d4ef2f8fa81f7958ec4ba6fc73745fa68b9d6237a0f2f7653d39f5ec705d34520d59f54374bf658659454ecd7d3377da669d2edbeea3861fa6beae0c8fb0ea820f88306a76e5889340e819b95ffb567eb9fcce470dd21f280de5ca0e3fa85e8096e30d9c2ec04f9c2fee70316d775d103e77fd135f00e808a3ef3c4338d530d26f661340835197857585305198e973b07e8675ba016e016b374c208cac07b49b6f487589ba122d4bee54cdeba1ba50c7e5e8561187627b9ad693a7230a09dc5580aba76f8559add081600c46b67d7c2849af6ffa014f68ad17fe46a20e2b656c710b685e5682ddcf415d212c6ee458ecbb6437b8a8b87b3d255a618f97462da2ef69eb7de7f163ed6e8430ea50e6310b8f5b2398914f96d15fa0d78400a4eb171a4f069165e682f0ece7facd54ea73fc78fc69c0fd2ef3a0ecf4d8456e83a600559de62e21856497e3d8dff882c7ded0be2a61ac353ff7e790ce5a30928f12a757541de5b6c0cea7b3935f5b8ee2fbd43ae082a5b33bd9d92893b0319a781b17d3434c175ee1470997b9c6d3bd18342cbbe42a6678569c5ca757c5c1cd02960857630f2b43e84f097037281c3ac8e0bef9589330f9ad6274498fc4491d21542dea0420b477443e0b0781942e7887f96fe3a4a9169ea87ea34712898e2984cd1e7e3ecc8e5fdae4cf554e0e0f4ea60b848aac3e5541fb99501e0cef07ae4d236cd281e7c390d83ab9a54710372e7b683961a0bc744445169c788e8feaaeeef8b162c4dca6e4d9e84f55d0f6fad0b5cf2988e875471fe11ea45e525ea752115f099a8e888dc0f698817111f511e8ac2d27c603acc5594c4c24302b56874fa07cb2bfeeb909ccae97e33337cbcea5f2359d45ba8bbed7ad260ce0a880d0b8c234092e2f24f66519c2331e77602e65125282b5021e3bbae401edc846c55684a89a43b4ec4ea14b01e9dd44c01124bd23804f0426ab1dfd62105cee3a4668c5994977a107f4c2f0494a9163bac131c17b3193a4e71780b45f4de1fb44c5cc03a95968d6f7e52c67352df429776421779c344ca5f4f9cdfd61451b1b76dbbb1603417acc0036f8676f4787a4ebf791c1fe15095528936f260b73114c4d6b1a400bd0e8e4081042cef11597fd85d546682a174161d2beddf64d87004e9c72042536214134f046cbcafcb05f027f7fcc8cabfd1a6dd14630463c33bedbd2a18c57164e1c90b18194b7bd39baa96116a76d80ab0b0de3864b596280f7830abccb72910950ed4b4bf1a5599d13f3db76d4bb2cbfad0597ef212458baaf27f6bcceb10b13a71f9b3040c11f7ce5c6a73e481e6278586e169884e043e97aac9ef1a3b3cfcbd8a4210b61ddcb0ac4f04e95d44ac16d835723aca8fdca22732414ec5ca9dc9205d6f1fe7562fb68e59ac11882e537d5154c005e5d830392d54bef3931230ea48cb0b51f3cb54c6ab55343931683f6c13bd360302fa6c9e49017693515b2152cff0d76dc0ab464177b92e07ce3a23a7ab48d8d1eaeea4c955da98613ffca364996802d601eb8da1ddd4f5cabc1ab31bbacee724688c6644dce6bf1862d1aaf18d09c5595d70981f5d905ec0ad008bf4fb0bd4c25c5dacd59b249384cc59665310dd0ea8a6b2441b2d5c87a048d8042ba913862936bd2c3fdfc655183c8e51a36593b8d25b017bdd92bc11d08a57bde32d9abcc618a8c0d43ad101d2e8ee89a153746281f643278271cb2776d9795e96d119230e0e20e04d8eb6d701f4e977fca9bb27c1a11c1c0fe41ea8542516efc5e4808f52db95a63e9312b60189d2b7f7b8a019ba1aa5f6de1d6955c13f655a45da9b35bd21c9fc6a958f099ab59afcc6d6242c7222178f05b474bd99af691e4a9d1e724f6916a014612c057ad7f8cfca351ab72ba86e41841bfd50ea78b9bff82ee8a79fb5d7ffdf638542a17c1c5ecab88ac246aadf70debf2ba6382472c2fb96df830c4bce27d92422670074bdbd8a734b9cd8ff4b6f06556381f7fb4efada792df8fc880b8ac4200713b7f2ac4a284ee827f2d5e688323ff7be51e0f74e335a42b81be6cec4b7bb5fe63aa5fbccafbc38b2c611847c6c7ec0e27c49c0e94a6231bcd7379c7b370aa276e42e0289f395b5ddd21853cac17ccc6e345da7a572ccf33a29d3e6a7b6f2538a654f45d82a37ee33935eed8d648b0d86aa837ffa3d8e9a09a2082ed48e78d758600c7c6207c01cabebdafe8a98b9aa7866df61a1d50c586ee6f1fec9b637f5c373544d224ea80c3e59a588dd3e6e1d4d9da92b76212f05109d03d8a77ed8cae0f3fcb99408c33a3aab5b0aaeab3497ce7409bb786277fe8dd541077db9e035bef79345d582ec6e4d53b7820f9f82522a354aa85568c35c1d77c79414c4d0edd4c1e49eb384427c040ad805bd589915d1dfc2a5b7f4e7260c807f4c2b5528ef1021338bf8cb3d2f9c058c7ede22581a10833b21e0b7ab810b1f13be6a17811255bec5a0240a2770da53898ba7a8838252bfcc323e23072bdf048f44839a87d1d4aac2bf5b0b0675d5952b5fc43a63043404ccfd3905c4f4b45c3c2fb1c8359cd07f891d115db1f11bfff52fa14649904e31e96b033320e31aba1cbb4c094f80bc6d40576e4b90341a00031e0eadd4d059e88a440316cf275f09ff4bc76041241ec76051233ec148bf3b32faa6b4d82e9c205946ff7e93f8f75c655775443a3e22840f06725e96a460affcd01d223eadcf5e50a19062915ebda66a57a670bb97dd022e1a628a738a77c5e6191820c231c84d7ba496e27cea1bb9e2d7e520eddbc74dec1170707fb97cb76fe02aea70cf273493f6878faac02bd7d3b4580244cf2a9530f8ac63f33869fa5a82b4bf8b130a410dc08aad28206d526f144fd7afa73a456c065a7d1b2f1eb4fb1786c3924623c59200f2a55dbe91bc53f0177f8a594eda0089ace53e77cac5e0b88c308928192a406267838f6ec8538c7056abf8c0847c34635e98e8fec5330dd78cb8c5bdb51a04f5ca3b4eda5dfdf6bac4f1016f45993e626e4af502babdf78ca0427dd7ce92376a9ea1d8cafab75a17892f8c309ea89cbb5ebf9b4fd4c25affe02efea29501f5b0db7eb6f59b62aec6965527f211239b82f0387ecfb8533f3796048df925862da43b918f94177bae8d87e0fba325c5071fad5a1ca78566c4818319b8ac5fd0f96483f86efd9ebdceddaa1b103fb6ca8a797973fde823d369e353ea647ef4653d96617fb010b0218e6f5795ad5fd4f", 0x1000}, {&(0x7f0000002900)="4cd192c3b35681c7cd8ed71770cfb140b31a317bf8", 0x15}, {&(0x7f0000002940)="cbfa2b26757519adc2fd4e9c42e3b32126f89aadc7a0be14158763996ee844ad01d52eed6eeca646c9ef469b241df3418ea3e5b8040ae628655c4c80354879172148aaa5887c95000d0b1146f794dbae53805457402966768333fb95ef6edb944e5ef4e5757b", 0x66}], 0xa, &(0x7f0000002a80)=[@mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff8}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x48}}, {{&(0x7f0000002b00)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b80)="0ad746b2571eaab77ae99bf5fcdd9b79ef6a7d7389cc095e750e30cda4ecf5a765542501f87c37f1bf69e41430403fabe39d5bd57eb306ed77bb31a9cdfad8b8dec0fd8b8ef8e177c1aec1ac2bb9e8e3b00541f723171227fa020e4fa27d6a63aa69019c775ad50937693c1b724e61e1d4d3d5ab4b4cf632e6b947afb1fdf1f7e2bf0ed7ed9e6fb4dd92a76f000c1a7e28334672ea4401d72b8454490d033f171390a5b206d2fe4af550194bf51bc11561f0bb8916890ec56f8ef9184d38cfe6c1e55145abe7ffa88bc055e9f42c0c379553a7f81441f749c335ca6aafa7f3faf69f9de0df8789", 0xe7}, {&(0x7f0000002c80)="c47bf5b4857504db756935456a6eb6238e77e77f907c90a4fdeed74b514db339f3b4600cf0c59459e75da7b1b190dd5e99eb20a8bc1344f4915bef73f07f075f2bbd7d5061961ff74de90be30503a6ab6399127c65efaae68c46ffcfd261fb2ea6a1028324c42143137caca03299", 0x6e}, {&(0x7f0000002d00)}, {&(0x7f0000002d40)="eddc5c114d218a7b7aed6bb31a07911a38533b2978bcced4aa47040d0a0793c9baaaf9056f6071485c8c7a253f37889ddadfd1847111d35947174c74d285f13d42b8b466d98e613197db3d42805555101c260c8ceb7aaf55c0f9604122ac0ea97143dc2f7f93a08759c00523a82b944618e04d8ce07c6b215c19564ebda386370fbf59bc4c42a6dce2b65dd9bd2e041e8f37a7f874cbce4d732fc36a5d0a161ad178b7937e5a213a4f51971c7fdbf71c", 0xb0}], 0x4}}, {{&(0x7f0000002e40)=@phonet={0x23, 0x7, 0x1, 0x80}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002ec0)="da1806609194800f1697a89353864065eee60b8b695a092b4fd24cfc244a9033643f038ea68ef8b1943e5f3ee286f7fd2568a1c2e9d3b15c6b2e9c68f66b9b5757ac8342ba328c432add47da84d7ee93d9effb9c81bff486c19da7612b713806c56ab0e9223b47d3759e4755dbed137735d348accf0d326155b8a0cf0fff0ab4d108c50e21fd3fda21f3bdf55efda6735991dd4b9222d3bf74c68f0d2963d4845ef8639c5c95fa708b4617b2dbcbe097b940794dd25a29863efba05b64ce1adbd63aabfdbdbdafa0b538f39f2e3786a8b30d3ab122ca314335a3c84daa7a9ecc986980dcb65326d8", 0xe8}, {&(0x7f0000002fc0)="731c95e42fffbfdf9134cd13c60389efe4f6998f930853a6a2a93931078f361f1be0ee7eac319e4ed0cb413c730a0d364673320dc9e19054cf075e0e8ea154adc2655990faa11a6392058d0e892e24e35d2cb9d2484ad8a1947749dfa121008883c69d1c4ce7350a1c", 0x69}], 0x2, &(0x7f0000003080)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x18}}, {{&(0x7f00000030c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @multicast1}, 0x0, 0x3, 0x1, 0x1}}, 0x80, &(0x7f0000004440)=[{&(0x7f0000003140)="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", 0xfb}, {&(0x7f0000003240)="225e665a93d7e24e7af3ebc3fe2dfc85c2e0f11fe713f8ead1b9882c490ed809fe588ae3057c53105c61c6b748aafea8b9111b7803fefce97c4c27a9ecc3d45362da267426c4490f6ce035c7b7bb4dbc06df8f1178ecf96bb731d07bc28a1ce6165ffccbd404c2af603ce2deda374f14f94f59169cdf2e5629950737843588de33be3db4e654d57e6a52b5e2e64f522748ac7a9e7b3e9025595c6021f6d02679bb8822a3e4307d6d9d409bd63014957074ffb025b00f18ea7981b10500f6a81271cb03c101b6939f2bc96bb080c4ad6083a6cc6a945521efd53b431ecb7a31b78cb0c9503d27b796b3bf62", 0xeb}, {&(0x7f0000003340)="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", 0x1000}, {&(0x7f0000004340)}, {&(0x7f0000004380)="5e1d79ef75abe77daa5c2c06c5c74d5e11a4b8fa3727ee1cc10c615fa0da4950cdeb798f35f223f733ad4a3118c8f6bf78383afa08dabaa5885e51e390b2e744fad785a149025d8fd4fb292e098a165f641550dd431554f19e91c1268a8898cced6802cd97628ef965c885df12d5bae84994beb8fb6d3d5fa4c47a5d", 0x7c}, {&(0x7f0000004400)="a7311f31af7a37a9a42ea51ab97b6eae51b3eb8ef03d4fdf13155c199b5a8592722ae7fac99ba44af0b16f576f96a7c533adc0cf249d4b", 0x37}], 0x6, &(0x7f00000044c0)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x2ff2d4c9}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x78}}, {{&(0x7f0000004540)=@sco={0x1f, @none}, 0x80, &(0x7f0000004800)=[{&(0x7f00000045c0)="2b00af61b089eef9586ef8b84bc1d60bef1dc38c7012094b0f2d789561186d7902cc9539acea52a433b9890f09d3780d62d2367b547bcdb64ae2f3470faa", 0x3e}, {&(0x7f0000004600)="668941f993fd96a1ab7896e93f71cc4abbaefc4ddc50b5b39de35991fc4a9a897148aa3ca394a3188b74ace4d8a852a45ed7848d486f829be106418c2a1bfbe0de6f01a52ae73f8da23a9b5cae54042c69c0be018937984da4f944fa0afdf67c221f65fd587ca976bbec2c8ddc06c142", 0x70}, {&(0x7f0000004680)="9b50b307817ceb4ee954af178e839a36fbbdf63e7e848c623af22a43a8acaacbc418d5bf788bf51a3aa694710cd27f3d63d7ab9c61f6bcf8bcc2b3c76c966a5d934f190f44057fa6d5928f502c5ad0b25a95135033b432897ed41c8ed3ddfe2884adb335aa02522fe6f73998ccbf266fc1a0d1e999a572a3473b974f35c75c0704e9c2a04f86fc8f9e7efc128b7c7eb6bc791d24808f6911ee3e06141a3bc6941745026b18eca1573ce76834286c418afc7e89afbdd43c1144158bbe3742c6fbc285d588b16c88112843f52241190abe0237a59b8961a8549f9dced3f618055d1e6737499e2d7c", 0xe7}, {&(0x7f0000004780)="9ace94625be4b5343781ca666df004724238f185fcda0b85b7cd8c066ed47087b48c638b9cf6776f4bdc", 0x2a}, {&(0x7f00000047c0)="02ae4d6afff5", 0x6}], 0x5, &(0x7f0000004880)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x100}}, @mark={{0x14, 0x1, 0x24, 0xf2}}, @timestamping={{0x14, 0x1, 0x25, 0xb2}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0xa8}}, {{&(0x7f0000004940)=@phonet={0x23, 0xde, 0x2, 0x1}, 0x80, &(0x7f0000004cc0)=[{&(0x7f00000049c0)="c66ff22cec8e39c4fba9bc17576e814818361c0ba440a9176393b708bd6a0b621effe76f52f84cd50f75216dd51e0e8a120454e322855da9da440ed61da73e3f0263b890e28b34160d557c3115ca9c761d053f5ad910a5ed1812f35752ecf9b19c05ca98dc35699d29b18f8e8bcd7c72e6152909423b7b91e4a15058f478955e3ad0edef7d7ca9b7fe5b5b3f3a7f59fef11cfed8f417c466c45df7e489435ea9c006eaea1fadbffeed4f0dccaa3a2f38", 0xb0}, {&(0x7f0000004a80)="cf5901b353ac19da58eb3a10293fe6f2e7bd3dcc922dca494add65d43e1a0fd8dc5a9fa469d3832c88", 0x29}, {&(0x7f0000004ac0)="0fc2fbc22eff98d05bba007ab7744a6d3e1519b112e2e6dc72d0a6af257f10ce6964b6c976b0b40f5d82a6a10ca0dba0a46dbcad70b179f074b726ed64c301394561edf595979a5ae4bef705c3db3ca86e3ac99c49660ef00898c33d8e033f7ca1d92b1399e8a12b333b69943a30ed5a98d415b4ec451415b3eb29e3500f14f22123d13ae95d2b408be452abc016785cbb526def643d4fd8b1d8c001c456e7d4815ca9b579903ecb190fe1b3dcd4722e51d858f46e7ee78e97f60470757b00147044f48716c5966e004e2c911f51cacd5b2849b5a7be5bbe0414790d450e7036f2be5327db3ce112db96a23c1c71f5f91361e4827b4866916c30fb9e3f", 0xfd}, {&(0x7f0000004bc0)="f2a55159770ad7248f946d51c1eaf2b6b244f97d8c946c89d4cefd386c3c702479c4cce73e1851ba4dfa843212b11b0746d9b092ff01b6b6bdaaeda696de39cac83ebd741279bf9e209b1254ffa3d23afe6f41489420f84a5d68f94a2fcb1cf94577d6f095f94b0290f67aa8b375d1547f63ce5fdc5a5ccf23bdb987d5a4d99e2008c641a07a7ed8105ca7413abf905c0a5840dddf290643a41f9b5a692a21db7abb39dd415c8924e727fa2ed7e36472e685b18cd7feede8a55d1db7d08413b230b4", 0xc2}], 0x4}}], 0x8, 0x4004004) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:12 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80104, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0x32, 0x6c, &(0x7f0000000040)="580d013eec8aa2c8735ff1d3790fc2d0e1c432d18621038a30f39809cf6a82fcad83898a29ff32cc78be09c4c7b5391a90ce", &(0x7f0000000100)=""/108, 0x7fffffff, 0x0, 0xde, 0x1000, &(0x7f0000000180)="1a673be9891c55b416ee94970984f7369445b08b76c294cd1693d66f34e118e95527d006d8c2f02bbaa295327d66a0d5074e667a1cc7c273c7530483f627c32be6f097ea25a3c1fab6aad058d89f758e8b73e692bcecf006817651678c21ab2b950f957dc0c30e48ddd10b1e7d43bd6c2fad97d516e86dc5993042674de8ea4d92a65ceda36cf0ddf20b39e5a69178101bb2af8839d64f40cfb8e616054baab63108ae8b52bfd8c393445bb6a09538a5bae56e0a7764ce222d2b50fa9ecdb54c5f6e45167627549ab4269f54cefdeba3765bdf1b5bb776abd2fb914f866a", &(0x7f0000000280)="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"}, 0x40) 22:34:12 executing program 5: clone(0x2000000002080100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2877.258577] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2877.343061] syz-executor.1 cpuset=/ mems_allowed=0-1 22:34:12 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000052020140, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x9, 0x4) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@null=' \x00', 0x8, 'rose0\x00'}) [ 2877.373692] CPU: 1 PID: 5659 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2877.383688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2877.393064] Call Trace: [ 2877.395691] dump_stack+0x1b2/0x283 [ 2877.399343] warn_alloc.cold+0x96/0x1cc [ 2877.403999] ? zone_watermark_ok_safe+0x220/0x220 [ 2877.409694] ? wait_for_completion_io+0x10/0x10 [ 2877.414392] __alloc_pages_nodemask+0x2127/0x2720 [ 2877.419444] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2877.424425] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2877.429373] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2877.434338] ? do_raw_spin_unlock+0x164/0x220 [ 2877.438852] alloc_pages_current+0x155/0x260 [ 2877.443369] kvm_mmu_create+0xda/0x1d0 [ 2877.447292] kvm_arch_vcpu_init+0x282/0x890 [ 2877.451878] ? alloc_pages_current+0x15d/0x260 [ 2877.456687] kvm_vcpu_init+0x26d/0x360 [ 2877.460797] vmx_create_vcpu+0xef/0x29a0 [ 2877.464885] ? __mutex_unlock_slowpath+0x75/0x770 [ 2877.470550] ? drop_futex_key_refs+0x2e/0xa0 [ 2877.475343] ? alloc_loaded_vmcs+0x240/0x240 [ 2877.479855] ? __lock_acquire+0x5fc/0x3f20 [ 2877.484114] kvm_vm_ioctl+0x4ca/0x13e0 [ 2877.488196] ? kvm_vcpu_release+0xa0/0xa0 [ 2877.492374] ? perf_trace_lock+0xf7/0x490 [ 2877.496795] ? check_preemption_disabled+0x35/0x240 [ 2877.502122] ? check_preemption_disabled+0x35/0x240 [ 2877.507427] ? perf_trace_lock+0xf7/0x490 [ 2877.511768] ? perf_trace_lock_acquire+0x510/0x510 [ 2877.516806] ? perf_trace_lock_acquire+0x510/0x510 [ 2877.522188] ? lock_acquire+0x170/0x3f0 [ 2877.526195] ? kvm_vcpu_release+0xa0/0xa0 [ 2877.530803] do_vfs_ioctl+0x75a/0xff0 [ 2877.534637] ? selinux_inode_setxattr+0x730/0x730 [ 2877.539515] ? ioctl_preallocate+0x1a0/0x1a0 [ 2877.544465] ? lock_downgrade+0x740/0x740 [ 2877.548951] ? __fget+0x225/0x360 [ 2877.552438] ? security_file_ioctl+0x83/0xb0 [ 2877.556871] SyS_ioctl+0x7f/0xb0 [ 2877.560260] ? do_vfs_ioctl+0xff0/0xff0 [ 2877.564256] do_syscall_64+0x1d5/0x640 [ 2877.568168] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2877.573371] RIP: 0033:0x45ce69 [ 2877.576571] RSP: 002b:00007ff3b8e13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2877.584377] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2877.592478] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000007 [ 2877.599851] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2877.607135] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2877.614416] R13: 00007fffdf1aef2f R14: 00007ff3b8e149c0 R15: 000000000118bf2c 22:34:12 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000100)={0x3ff, 0xffffffff, {r1}, {r3}, 0x9, 0x1}) move_pages(r4, 0x8, &(0x7f0000000140)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil], &(0x7f0000000180)=[0x4, 0x7eed9fc5, 0xdb2, 0x0, 0x7fffffff], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f00000000c0)={0x530}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 2877.659174] IPVS: ftp: loaded support on port[0] = 21 [ 2877.753588] warn_alloc_show_mem: 1 callbacks suppressed [ 2877.753592] Mem-Info: [ 2877.762755] active_anon:432799 inactive_anon:8460 isolated_anon:0 [ 2877.762755] active_file:30240 inactive_file:16445 isolated_file:0 [ 2877.762755] unevictable:149081 dirty:170 writeback:0 unstable:0 [ 2877.762755] slab_reclaimable:20229 slab_unreclaimable:256893 [ 2877.762755] mapped:62540 shmem:179355 pagetables:68595 bounce:0 [ 2877.762755] free:502451 free_pcp:268 free_cma:0 [ 2877.875180] Node 0 active_anon:1380980kB inactive_anon:17280kB active_file:20kB inactive_file:0kB unevictable:211764kB isolated(anon):0kB isolated(file):12kB mapped:217120kB dirty:4kB writeback:0kB shmem:245736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 892928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2878.025398] Node 1 active_anon:349416kB inactive_anon:16560kB active_file:120940kB inactive_file:65808kB unevictable:384560kB isolated(anon):0kB isolated(file):0kB mapped:32000kB dirty:768kB writeback:0kB shmem:471684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2878.081557] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:112kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2878.140057] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2878.152058] Node 0 DMA32 free:35332kB min:36272kB low:45340kB high:54408kB active_anon:1380980kB inactive_anon:17280kB active_file:20kB inactive_file:0kB unevictable:211652kB writepending:4kB present:3129332kB managed:2621196kB mlocked:60kB kernel_stack:22272kB pagetables:60160kB bounce:0kB free_pcp:448kB local_pcp:228kB free_cma:0kB [ 2878.207854] lowmem_reserve[]: 0 0 0 0 0 [ 2878.211923] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2878.239527] lowmem_reserve[]: 0 0 0 0 0 [ 2878.243569] Node 1 Normal free:1965596kB min:53612kB low:67012kB high:80412kB active_anon:349416kB inactive_anon:16560kB active_file:120940kB inactive_file:65808kB unevictable:384560kB writepending:768kB present:3932160kB managed:3870192kB mlocked:4kB kernel_stack:77792kB pagetables:213724kB bounce:0kB free_pcp:816kB local_pcp:332kB free_cma:0kB [ 2878.286849] lowmem_reserve[]: 0 0 0 0 0 [ 2878.291127] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (U) 0*64kB 2*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (ME) = 10316kB [ 2878.312319] Node 0 DMA32: 189*4kB (UME) 318*8kB (UME) 336*16kB (UME) 198*32kB (UME) 61*64kB (M) 32*128kB (ME) 17*256kB (UME) 11*512kB (UME) 2*1024kB (U) 0*2048kB 0*4096kB = 35044kB [ 2878.330679] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2878.342192] Node 1 Normal: 103*4kB (UME) 34*8kB (UME) 101*16kB (UME) 42*32kB (UME) 6*64kB (U) 3*128kB (UME) 3*256kB (UME) 1*512kB (M) 1*1024kB (E) 2*2048kB (UE) 477*4096kB (M) = 1964604kB [ 2878.363890] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2878.378821] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2878.389322] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2878.398905] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2878.408366] 221132 total pagecache pages 22:34:13 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = request_key(&(0x7f0000000340)='big_key\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='^&\x00', 0x0) r2 = add_key(0x0, 0x0, 0x0, 0x0, r1) keyctl$update(0x2, r2, &(0x7f0000000000)="9f", 0x1) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r2) r3 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r3, &(0x7f0000000000)="9f", 0x1) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080)={r3, 0xaa, 0xff}, &(0x7f0000000100)={'enc=', 'pkcs1', ' hash=', {'sha384-ssse3\x00'}}, &(0x7f0000000180)="f588043b28e220ba541d2c4030c958783793c14da7388c70bb93adbb29876ebbf5dc3c68607e18c05d8c493089c5ace09d6b68422a0f0ed9484991331a20d7f52e046570f5e6c2fa37fb1a6764b49dc8c8526195f3e58507a23c8bec6260d3bb73b89f3f1eeee64d930667ef5622249b65dd327af9e971f6c0cc58585b7d6716b576741dc8c210f650eca42ac2617d0dd57e0fb46796a4913fd4f27abd8e102a84118e803655a8d85332", &(0x7f0000000240)=""/255) 22:34:13 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r2, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x10005, 0x0) 22:34:13 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:13 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x101000, 0x0) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0xe) [ 2878.412655] 0 pages in swap cache [ 2878.416993] Swap cache stats: add 0, delete 0, find 0/0 [ 2878.422571] Free swap = 0kB [ 2878.428132] Total swap = 0kB [ 2878.434006] 1965979 pages RAM [ 2878.438033] 0 pages HighMem/MovableOnly [ 2878.442277] 339072 pages reserved [ 2878.446480] 0 pages cma reserved 22:34:13 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x28, r5, 0x1, 0x0, 0x0, {0x2}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r5, 0x800, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8015}, 0x20008001) 22:34:13 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) prctl$PR_CAPBSET_DROP(0x18, 0x6) 22:34:13 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@private1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000000)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', r2, 0x2f, 0x40, 0x38, 0x8, 0x4, @dev={0xfe, 0x80, [], 0x35}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80, 0x7, 0xfffff000, 0x8}}) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:13 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) accept$nfc_llcp(r1, &(0x7f0000000000), &(0x7f0000000080)=0x60) 22:34:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f0000000240)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 22:34:14 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000100)={0x0, {{0xa, 0x4e24, 0xfffffff5, @loopback, 0xffffffff}}}, 0x88) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000000)="9f", 0x1) keyctl$assume_authority(0x10, r2) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) [ 2878.890341] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:34:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) statx(0xffffffffffffffff, &(0x7f00000004c0)='./file0/file0\x00', 0x6000, 0x80, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuseblk\x00', 0x120001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r4, @ANYBLOB="00000000000300000004", @ANYRESDEC=r5, @ANYBLOB="2c64656661756c745f7065726d69737369462e91d92c558987697a253d3078303030303030303030303030303230302c666f776e65723e", @ANYRESDEC=r6, @ANYBLOB=',measure,audit,\x00']) r7 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000080)='-*/+,:-!.]Y\xb0][-$\')!\x00') setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0), 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x81, 0x9af5}, 0x8) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) init_module(&(0x7f0000000000)='&-\'\x00', 0x4, &(0x7f0000000040)='\x00') [ 2879.166195] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:34:15 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @window={0x3, 0x5, 0x100}, @timestamp, @timestamp, @timestamp, @window={0x3, 0x8, 0xfffa}, @timestamp, @timestamp], 0x8) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e22, 0x1f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xbe0e}, @in6={0xa, 0x4e21, 0x9, @remote, 0xffff}, @in6={0xa, 0x4e21, 0x10000, @private1, 0x100400}], 0x74) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 22:34:15 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:15 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket(0x10, 0x803, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x37) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x800, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f00000000c0)={r8}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000180)={r8, @in6={{0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f0000000100)=0x84) 22:34:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x66f, @local, 0xfff}, {0xa, 0x4e24, 0x1c, @private1, 0x4}, 0x3ff, [0x5, 0x40, 0x31c36557, 0x6, 0x4, 0x1c06, 0x3, 0x10000]}, 0x5c) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7, 0x80000) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000100)) 22:34:15 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x181c02, 0x8) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001100)='/proc/self/net/pfkey\x00', 0x200000, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_open_dev$vcsn(&(0x7f0000001140)='/dev/vcs#\x00', 0x0, 0x301000) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000080)={r8, &(0x7f0000000100)=""/4096}) 22:34:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r2, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x10005, 0x0) 22:34:16 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000000)=0xffffffff) 22:34:16 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000240)=0x2e) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x800, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f00000002c0)=0x9) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)=ANY=[@ANYBLOB="090000000000000001000000000000000500000000000000", @ANYRES32=r0, @ANYBLOB="000000004a0600"/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r2, @ANYBLOB="000000000300"/28, @ANYRES32=r0, @ANYBLOB="00000000060098330000000000000000000000000000002d58000000", @ANYRES32=r3, @ANYBLOB="000000000400"/28]) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VFIO_SET_IOMMU(r9, 0x3b66, 0x2) connect$bt_sco(r7, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:16 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2881.163929] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2881.422434] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2881.460767] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 22:34:16 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x402, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, &(0x7f0000000040)={0x1, 0x7, 0x0}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000100)=""/195) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f00000000c0), 0xfffffffffffffd09) [ 2881.523802] syz-executor.1 cpuset=/ mems_allowed=0-1 22:34:16 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 2881.573563] CPU: 1 PID: 5883 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2881.581404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2881.591446] Call Trace: [ 2881.594057] dump_stack+0x1b2/0x283 [ 2881.597717] warn_alloc.cold+0x96/0x1cc [ 2881.601736] ? zone_watermark_ok_safe+0x220/0x220 [ 2881.606796] ? wait_for_completion_io+0x10/0x10 [ 2881.611492] __alloc_pages_nodemask+0x2127/0x2720 [ 2881.616700] ? gfp_pfmemalloc_allowed+0x150/0x150 22:34:16 executing program 5: r0 = msgget(0x1, 0x0) msgctl$MSG_STAT_ANY(r0, 0xd, 0x0) msgrcv(r0, &(0x7f0000001980)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000abd0239ba1f775b9b933deb48f02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"/4118], 0x1008, 0x2, 0x2000) msgsnd(r0, &(0x7f0000000140)={0x1}, 0x8, 0x0) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000000)=""/186) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2881.621594] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2881.626464] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2881.631328] ? do_raw_spin_unlock+0x164/0x220 [ 2881.635848] alloc_pages_current+0x155/0x260 [ 2881.640289] kvm_mmu_create+0xda/0x1d0 [ 2881.644209] kvm_arch_vcpu_init+0x282/0x890 [ 2881.648548] ? alloc_pages_current+0x15d/0x260 [ 2881.653146] kvm_vcpu_init+0x26d/0x360 [ 2881.657057] vmx_create_vcpu+0xef/0x29a0 [ 2881.661696] ? __mutex_unlock_slowpath+0x75/0x770 [ 2881.666565] ? drop_futex_key_refs+0x2e/0xa0 [ 2881.670998] ? alloc_loaded_vmcs+0x240/0x240 [ 2881.675681] ? __lock_acquire+0x5fc/0x3f20 [ 2881.679941] kvm_vm_ioctl+0x4ca/0x13e0 [ 2881.683858] ? kvm_vcpu_release+0xa0/0xa0 [ 2881.688031] ? perf_trace_lock+0xf7/0x490 [ 2881.692204] ? check_preemption_disabled+0x35/0x240 [ 2881.697243] ? check_preemption_disabled+0x35/0x240 [ 2881.702288] ? perf_trace_lock+0xf7/0x490 [ 2881.706460] ? perf_trace_lock_acquire+0x510/0x510 [ 2881.711412] ? perf_trace_lock_acquire+0x510/0x510 [ 2881.716364] ? lock_acquire+0x170/0x3f0 [ 2881.720983] ? kvm_vcpu_release+0xa0/0xa0 [ 2881.725164] do_vfs_ioctl+0x75a/0xff0 [ 2881.728996] ? selinux_inode_setxattr+0x730/0x730 [ 2881.734087] ? ioctl_preallocate+0x1a0/0x1a0 [ 2881.738515] ? lock_downgrade+0x740/0x740 [ 2881.742699] ? __fget+0x225/0x360 [ 2881.746189] ? security_file_ioctl+0x83/0xb0 [ 2881.750621] SyS_ioctl+0x7f/0xb0 [ 2881.754026] ? do_vfs_ioctl+0xff0/0xff0 [ 2881.758020] do_syscall_64+0x1d5/0x640 [ 2881.761936] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2881.767149] RIP: 0033:0x45ce69 22:34:17 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r2, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x10005, 0x0) [ 2881.770344] RSP: 002b:00007ff3b8e13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2881.778066] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2881.785348] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2881.792627] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2881.799907] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2881.807190] R13: 00007fffdf1aef2f R14: 00007ff3b8e149c0 R15: 000000000118bf2c [ 2881.904263] Mem-Info: [ 2881.910075] active_anon:432967 inactive_anon:8460 isolated_anon:0 [ 2881.910075] active_file:30256 inactive_file:16457 isolated_file:0 [ 2881.910075] unevictable:149081 dirty:101 writeback:0 unstable:0 [ 2881.910075] slab_reclaimable:20375 slab_unreclaimable:256585 [ 2881.910075] mapped:62302 shmem:179355 pagetables:68839 bounce:0 [ 2881.910075] free:501864 free_pcp:383 free_cma:0 [ 2882.039122] Node 0 active_anon:1380980kB inactive_anon:17280kB active_file:32kB inactive_file:0kB unevictable:211764kB isolated(anon):0kB isolated(file):0kB mapped:217120kB dirty:4kB writeback:0kB shmem:245736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 892928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2882.143667] Node 1 active_anon:351088kB inactive_anon:16560kB active_file:120992kB inactive_file:65828kB unevictable:384560kB isolated(anon):0kB isolated(file):0kB mapped:32988kB dirty:400kB writeback:0kB shmem:471684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2882.227861] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:112kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2882.275060] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2882.284018] Node 0 DMA32 free:34964kB min:36272kB low:45340kB high:54408kB active_anon:1380980kB inactive_anon:17280kB active_file:32kB inactive_file:0kB unevictable:211652kB writepending:4kB present:3129332kB managed:2621196kB mlocked:60kB kernel_stack:22272kB pagetables:60160kB bounce:0kB free_pcp:440kB local_pcp:228kB free_cma:0kB [ 2882.316809] lowmem_reserve[]: 0 0 0 0 0 [ 2882.320990] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2882.373039] lowmem_reserve[]: 0 0 0 0 0 [ 2882.377694] Node 1 Normal free:1963264kB min:53612kB low:67012kB high:80412kB active_anon:350788kB inactive_anon:16560kB active_file:120992kB inactive_file:65828kB unevictable:384560kB writepending:400kB present:3932160kB managed:3870192kB mlocked:4kB kernel_stack:78144kB pagetables:215048kB bounce:0kB free_pcp:964kB local_pcp:316kB free_cma:0kB [ 2882.410069] lowmem_reserve[]: 0 0 0 0 0 [ 2882.414110] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (U) 0*64kB 2*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (ME) = 10316kB [ 2882.429523] Node 0 DMA32: 189*4kB (UME) 314*8kB (UME) 336*16kB (UME) 198*32kB (UME) 62*64kB (UM) 33*128kB (UME) 16*256kB (ME) 11*512kB (UME) 2*1024kB (U) 0*2048kB 0*4096kB = 34948kB [ 2882.448652] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2882.461133] Node 1 Normal: 135*4kB (UME) 154*8kB (UM) 41*16kB (UME) 33*32kB (UME) 13*64kB (U) 4*128kB (U) 2*256kB (U) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 476*4096kB (M) = 1963228kB [ 2882.479590] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2882.490206] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2882.499334] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2882.508728] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2882.518540] 221154 total pagecache pages 22:34:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(r0, &(0x7f0000000040)="0f40", 0x2) r1 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800a6c23a92662f761a00f70000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000810500000000000000000000009c", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@xdp={0x2c, 0x2, r6, 0x24}, {&(0x7f0000000180)=""/198, 0xc6}, &(0x7f0000000000), 0x10}, 0xa0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 22:34:17 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000000)={0x1d, 0x1, 0x0, 0xfffffffffffffe01, "6a901d357a"}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000810500000000000000000000009c", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r8], 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000040), &(0x7f0000000080)=0x4) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r9, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:17 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000004c0)={0x0, 0x4c, "0339c9a96d16a676bc53cf0c0f3c589fd56e59579b5c0095b3babbc1552634e4588a254221d4de22ff74f3925bc03fb652488e1f23ea5e3a17375ab542264ae0a690c60811a3f605ffe73519"}, &(0x7f0000000540)=0x54) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000003c0)={0x2, 0x1, 0x1f, 0x0, 0xbd4}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574bedc1596aafda3be504c445668"], 0x48}}, 0x0) fcntl$getown(r3, 0x9) open_by_handle_at(r0, &(0x7f0000000100)={0x104, 0xfffffffd, "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"}, 0x80000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x28, r6, 0x1, 0x0, 0x0, {0x2}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x38, r6, 0x300, 0x70bd05, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xc1}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1fc}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008881}, 0x4008041) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r7, &(0x7f00000000c0)={0x1f, @none}, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 22:34:17 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:34:17 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 2882.522726] 0 pages in swap cache [ 2882.526856] Swap cache stats: add 0, delete 0, find 0/0 [ 2882.532439] Free swap = 0kB [ 2882.536098] Total swap = 0kB [ 2882.539150] 1965979 pages RAM [ 2882.542260] 0 pages HighMem/MovableOnly [ 2882.546842] 339072 pages reserved [ 2882.550604] 0 pages cma reserved [ 2882.608582] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2882.728378] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2882.793639] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 22:34:19 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:19 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() sched_setattr(r0, &(0x7f0000000300)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000100)={{0x1, 0x6, 0x6, 0x443c, '\x00', 0x101}, 0x2, 0x10, 0x4, r0, 0x2, 0x9, 'syz0\x00', &(0x7f0000000000)=['\x00', ']\x00'], 0x3, [], [0x2, 0x2, 0x1, 0x8]}) r1 = getpid() sched_setattr(r1, &(0x7f0000000300)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$peekuser(0x3, r1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:19 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 22:34:19 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:19 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000240)={0x2a, 0x6, 0x0, {0x0, 0x0, 0x1, 0x0, '\xc8'}}, 0x2a) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) r4 = accept(r2, 0x0, &(0x7f0000000000)) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x3f2, 0x8, 0x70bd26, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000000) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) connect$bt_sco(r5, &(0x7f00000000c0)={0x1f, @none}, 0x8) r6 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00'}) dup(r6) 22:34:19 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) 22:34:19 executing program 2: r0 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000000)="9f", 0x1) r1 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r1, &(0x7f0000000000)="9f", 0x1) r2 = request_key(&(0x7f0000000080)='big_key\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='\x00', r1) keyctl$negate(0xd, r0, 0x608e6c3, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt(r3, 0x0, 0xfff, &(0x7f0000000000)=""/55, &(0x7f0000000040)=0x37) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:19 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) rt_sigprocmask(0x2, &(0x7f0000000000)={[0x9]}, &(0x7f0000000040), 0x8) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$CHAR_RAW_PG(r8, 0x1269, &(0x7f0000000240)={0x1, 0x2, 0x1000, &(0x7f0000000c80)="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"}) ppoll(&(0x7f0000000100)=[{r3, 0x2}, {r4, 0x20}, {r1, 0x110}, {r0, 0xe364}, {r0, 0x2}], 0x5, &(0x7f0000000140), &(0x7f0000000180)={[0xffff]}, 0x8) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:19 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000040)={0x0, 0x4, 0x1}) [ 2884.312822] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 22:34:19 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) [ 2884.378975] QAT: Invalid ioctl 22:34:20 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:34:20 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:20 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="05000004a50ea7850b6d471ac3e2188e9a935b1c36ad3b490e759acda051000008b43f9a58c33da32ed98cc549ae15e15b5a670045e3321f4654830bdbc30356213a0eb09e7e85341c597672556f703cf19fe24d51643ec1760c424211db6657720b77b42b2d9165ece3f94fe0be35bafc99b76fc24412be37500c32526f3d1abe514642d99f4bffe57f5da5ce2ece680e5c2f6a90672aced5dfb58fadfda81fe4c44aef717553b33a5f9d9e7d1c2aabe4cbbde8bf6b767430638df11899a6a3d1d1c3e791622095afcf804cca76b2f59f38bc3a7ad155d5737c95812d9f", @ANYRES32=0xffffffffffffffff], &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x10001}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000040)={r4}, 0x8) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x40002, 0x0) socketpair(0x26, 0x5, 0x3, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000440)=0x4) connect$bt_sco(r5, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:20 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000880)=""/4100, 0xffffff5c}], 0x1}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYBLOB="2ac67e5b988644923188e2413f20d664ee164b76de53987b021b83a8a6200c09d9ea381a5924d5707aaf1489d5c700c0a2fc5bffa7f1c00c0826b3ea8883c6df9ffbba71ede6bb947c5f413fde85113caa1f5d15ac72ac0a788b9256295f591aa8dd3c2594ed326beb82824c0a2f73d241e9987a9c2dfc7a6f47b0a2450fa2106992b50fc488e55514a2932f69599d834a91", @ANYRES64, @ANYRES32, @ANYRESDEC, @ANYRESHEX, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRESOCT], 0x1000001bd) semctl$GETVAL(0x0, 0x4, 0xc, &(0x7f0000000280)) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0xaa188980, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "1d0fe611f138a1ab", "e2e8a4a151581746679c6aa75da293b0", "3ec5de56", "d67d973838e75e87"}, 0x28) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x4, 0x4, 0xa65, r2}, &(0x7f0000000140)=0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000240), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) 22:34:20 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, [], 0x34}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x2080, 0x1d4) tkill(r2, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000340)={0x78, 0x0, 0x5, {0x8, 0x9, 0x0, {0x6, 0x3f, 0x100000000, 0x40, 0x0, 0x400, 0x1000, 0x3f, 0xffffff00, 0x2c6948f8, 0x3f, 0x0, 0x0, 0x519a5a2f, 0x10000}}}, 0x78) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0xa8]}, &(0x7f0000000140), &(0x7f0000000200)={r3, r4+60000000}, 0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 22:34:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = dup(0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) read(r3, &(0x7f0000000000)=""/47, 0x2f) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000007272ce713c1f091f997ee73702312fb2784a", @ANYRES16=r4, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40020}, 0x4004000) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080026bd7000fbdbdf2501000000080007000000000008000700ac1e010106000b000200000014000500ff02000000000000000000000000000114000600fe80000000000000000000000000000c0800080064010100080008000a010102080002000300000008000c0001000000bcf302c4068f08c55d24e9e44497fa65150745b016e997e19bc5e81d633842d05744de270acf59bd4f28495e0e98340def"], 0x74}}, 0x804) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x48, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '^\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x3000c010) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 22:34:20 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4200, 0x0, 0x200005, 0x20) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 22:34:20 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0xa40000, 0x10001, 0x1a164980, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990907, 0x7fff, [], @value64=0x3}}) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000000)=0xfffffffe, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 2885.718534] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) 22:34:20 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4206, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e22, 0xc221, @remote, 0x401}}, 0x0, 0x0, 0x4d, 0x0, "02abfb59b525873d3daff40e0ad2fdd9a7f4986e884769eee99bc2a114c1fbac2841857d0bf791b4d21ab46c082ae606a87b09f3cc7cad93790c57eb13126b3d0b70e7e693d9793c0c44ec372926c586"}, 0xd8) clone(0x2000000002044000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2885.803537] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2885.819349] CPU: 0 PID: 6178 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2885.827317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2885.838000] Call Trace: [ 2885.840614] dump_stack+0x1b2/0x283 [ 2885.844388] warn_alloc.cold+0x96/0x1cc [ 2885.848379] ? zone_watermark_ok_safe+0x220/0x220 [ 2885.853252] ? wait_for_completion_io+0x10/0x10 [ 2885.858029] __alloc_pages_nodemask+0x2127/0x2720 [ 2885.863765] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2885.868627] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2885.873501] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2885.878555] ? do_raw_spin_unlock+0x164/0x220 [ 2885.883288] alloc_pages_current+0x155/0x260 [ 2885.887923] kvm_mmu_create+0xda/0x1d0 [ 2885.892196] kvm_arch_vcpu_init+0x282/0x890 [ 2885.896622] ? alloc_pages_current+0x15d/0x260 [ 2885.903934] kvm_vcpu_init+0x26d/0x360 [ 2885.907931] vmx_create_vcpu+0xef/0x29a0 [ 2885.912572] ? __mutex_unlock_slowpath+0x75/0x770 [ 2885.917866] ? drop_futex_key_refs+0x2e/0xa0 [ 2885.923436] ? alloc_loaded_vmcs+0x240/0x240 [ 2885.927858] ? __lock_acquire+0x5fc/0x3f20 [ 2885.932289] kvm_vm_ioctl+0x4ca/0x13e0 [ 2885.936290] ? kvm_vcpu_release+0xa0/0xa0 [ 2885.940622] ? perf_trace_lock+0xf7/0x490 [ 2885.944799] ? check_preemption_disabled+0x35/0x240 [ 2885.949949] ? check_preemption_disabled+0x35/0x240 [ 2885.954986] ? perf_trace_lock+0xf7/0x490 [ 2885.959165] ? perf_trace_lock_acquire+0x510/0x510 [ 2885.964198] ? perf_trace_lock_acquire+0x510/0x510 [ 2885.969237] ? lock_acquire+0x170/0x3f0 [ 2885.973230] ? kvm_vcpu_release+0xa0/0xa0 [ 2885.977412] do_vfs_ioctl+0x75a/0xff0 [ 2885.981357] ? selinux_inode_setxattr+0x730/0x730 [ 2885.986380] ? ioctl_preallocate+0x1a0/0x1a0 [ 2885.991028] ? lock_downgrade+0x740/0x740 [ 2885.995225] ? __fget+0x225/0x360 [ 2885.999183] ? security_file_ioctl+0x83/0xb0 [ 2886.003708] SyS_ioctl+0x7f/0xb0 [ 2886.007100] ? do_vfs_ioctl+0xff0/0xff0 [ 2886.011124] do_syscall_64+0x1d5/0x640 [ 2886.015248] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2886.020455] RIP: 0033:0x45ce69 [ 2886.023653] RSP: 002b:00007ff3b8e13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2886.031582] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2886.038866] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 2886.046282] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2886.053590] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2886.060877] R13: 00007fffdf1aef2f R14: 00007ff3b8e149c0 R15: 000000000118bf2c [ 2886.080729] Mem-Info: [ 2886.083933] active_anon:433414 inactive_anon:8460 isolated_anon:0 [ 2886.083933] active_file:30269 inactive_file:16722 isolated_file:0 [ 2886.083933] unevictable:149081 dirty:159 writeback:0 unstable:0 22:34:21 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_int(r2, 0x6, 0x7, &(0x7f00000000c0)=0x1000004, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x6) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$l2tp6(0xa, 0x2, 0x73) [ 2886.083933] slab_reclaimable:20400 slab_unreclaimable:256759 [ 2886.083933] mapped:62283 shmem:179355 pagetables:69245 bounce:0 [ 2886.083933] free:500520 free_pcp:183 free_cma:0 [ 2886.121629] Node 0 active_anon:1379812kB inactive_anon:17280kB active_file:32kB inactive_file:1040kB unevictable:211764kB isolated(anon):0kB isolated(file):0kB mapped:217120kB dirty:4kB writeback:0kB shmem:245736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 892928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 22:34:21 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) fdatasync(r0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @timestamp, @sack_perm, @sack_perm], 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() sched_setattr(r1, &(0x7f0000000300)={0x38, 0x2, 0x10, 0x0, 0x5, 0x1000000000000000, 0x0, 0x0, 0x80000001}, 0x0) capset(&(0x7f00000000c0)={0x20071026, r1}, &(0x7f0000000100)={0x9, 0x40, 0x10000, 0x4, 0x5, 0x6}) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x20000, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 2886.166846] Node 1 active_anon:353844kB inactive_anon:16560kB active_file:121044kB inactive_file:65848kB unevictable:384560kB isolated(anon):0kB isolated(file):0kB mapped:32012kB dirty:632kB writeback:0kB shmem:471684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 22:34:21 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000080)=""/25, &(0x7f00000000c0)=0x19) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x5, 0x2, 0x3, 0x2, 0x9, 0x7}, 0x20) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 2886.197958] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:112kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2886.240182] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2886.246617] Node 0 DMA32 free:35412kB min:36272kB low:45340kB high:54408kB active_anon:1379812kB inactive_anon:17280kB active_file:32kB inactive_file:1040kB unevictable:211652kB writepending:4kB present:3129332kB managed:2621196kB mlocked:60kB kernel_stack:22272kB pagetables:60160kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2886.282218] lowmem_reserve[]: 0 0 0 0 0 [ 2886.296362] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2886.367487] lowmem_reserve[]: 0 0 0 0 0 [ 2886.378917] Node 1 Normal free:1954960kB min:53612kB low:67012kB high:80412kB active_anon:354044kB inactive_anon:16560kB active_file:121044kB inactive_file:65848kB unevictable:384560kB writepending:632kB present:3932160kB managed:3870192kB mlocked:4kB kernel_stack:79104kB pagetables:217116kB bounce:0kB free_pcp:260kB local_pcp:120kB free_cma:0kB [ 2886.481020] lowmem_reserve[]: 0 0 0 0 0 [ 2886.510315] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (U) 0*64kB 2*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (ME) = 10316kB [ 2886.538835] Node 0 DMA32: 268*4kB (UME) 330*8kB (UME) 336*16kB (UME) 198*32kB (UME) 62*64kB (UM) 32*128kB (ME) 16*256kB (ME) 11*512kB (UME) 2*1024kB (U) 0*2048kB 0*4096kB = 35264kB [ 2886.558488] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2886.573998] Node 1 Normal: 2*4kB (E) 67*8kB (UME) 5*16kB (UME) 3*32kB (UE) 2*64kB (UM) 1*128kB (M) 1*256kB (U) 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 476*4096kB (M) = 1954512kB [ 2886.593495] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2886.608142] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2886.621541] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2886.657834] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2886.671420] 221168 total pagecache pages [ 2886.690900] 0 pages in swap cache [ 2886.699738] Swap cache stats: add 0, delete 0, find 0/0 [ 2886.721175] Free swap = 0kB [ 2886.727511] Total swap = 0kB [ 2886.731634] 1965979 pages RAM [ 2886.739277] 0 pages HighMem/MovableOnly [ 2886.747840] 339072 pages reserved [ 2886.756052] 0 pages cma reserved 22:34:23 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:34:23 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) getsockopt$netlink(r2, 0x10e, 0x7, &(0x7f0000000100)=""/4096, &(0x7f0000001100)=0x1000) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x10000, 0x400) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000040)={0x1f, 0x1, 0x4, 0x70000, 0x6, {0x77359400}, {0x2, 0xc, 0x4, 0x7, 0x3, 0x9, 'b\x00rq'}, 0x7, 0x3, @fd=r4, 0x3, 0x0, r6}) 22:34:23 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) 22:34:23 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x200202, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x4d}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6a77da9576760aa7}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x49}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xbc3}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x804) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="12000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000000c0)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000240)={r6, @in6={{0xa, 0x4e21, 0x2, @remote, 0x78}}}, &(0x7f0000000340)=0x84) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) 22:34:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) dup(0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000600)={r3}, 0x8) sendmmsg$alg(r4, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000640)="4a77d9504b95b18654937b1f68f108a91c9e54ed1b21cb4000aef301550b685b60cefd9592c99a722ffa47352d93097a94d4ee9acb413c2ab051593ceb1b446a92ad0caa510f5462466c1b7cf25759089d3f05808c2f17f3eef5a4fc1c1afe6ae28c71b3a190defca714585091cdf15df3bcdcabfce30a49a9fcb1b0a086c2fbd1a7e57c08f3e3997c6113e70058f23a250c6e9225ca70d3a32d0727d0eab022fcb9921292f0b6c9a0a1e7acac35a9ddb4aef2b1b69b81268407e94095073e1583ac07a7f9a9787d6c695604437dbc34aa73d811c6fa20c3a94a992c0a96836eacf382a5268a4fa43eb0edff8261350d70333bf7f8233cb7", 0xf8}, {&(0x7f0000000740)="4275868ccbb3f0f30203c443e5225bcc0ae2b4929a2c4ddc369fa9b6cee6c3d9afe2e7bf9d18a46aafd5cd166702fd29dc5fa3605dbdef45d13d6dfa412ab3d13722564bb1b3f6d3a20661c60b7446831cd270b1fdec85cbe2be4d32b6908a321206a571532b52f567088042d5a627b8d5e815ac", 0x74}, {&(0x7f00000007c0)="af633b40fb317ebedd4c8efa6a7592e1f4a4c5a56f17e60212bfab46a3c587ab9ae2e0fc7d1563ddc733c8fe49fc213335fee363a08e0b4c70e02b8b08e170d328bf08fd4b04e598ae40dbd748cdbb3bd3387e062e8847368d672369fee1632d3088e10e68b8f3012d5eabb51d0d52ef699038e96afb673ee08d9d2ece303c00faec89e46e2afceb53c3407db4d608d1e523b6dc968ecdeefa6b005ef22a857f31f889d9a25b3dc0e846d485144d6b0b18501e2bdb62b18cde8338d811a1efa322b45ddd", 0xc4}, {&(0x7f00000008c0)="18d6b94e2bf9136a32edc64cb8d48500d1f7df7eb90f7a539d69fb74c6d516786fd386490baa9b040e4e8ef27f3f1088d4c043849a280de150700c9ca365412cd5b22b2cc5f40ae0aa21f3d24eaf71d3f9ae65a6e8375690d74b8652d14fc1263b64592bc7c3951de1b43721e67d09447bd1b6286dfb6516209d178b5516421fea4817f583db9aae62311b7be5a847e8efe1573c8c88e8547e36a4e06383367c2bcf0ac83751fe395667559450a08e8363d5d08bb2dcedf703126649cafbfdec1d07812f84da7b66e5ddaf9b7c9524c67d12d8cb29bd49", 0xd7}], 0x4, &(0x7f0000000a00)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18, 0x4084000}], 0x1, 0x8030) r5 = dup(r1) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000080)=@x={0x94, 0xf, "c0b53e73204d"}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 22:34:23 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:23 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) 22:34:24 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) 22:34:24 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x100, 0x0, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_EXPECT_MASTER={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xb}}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0x34, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_NAT={0x40, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1f}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x40011) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:24 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0), 0x8) 22:34:24 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000000)) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:24 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0), 0x8) [ 2889.173325] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2889.271996] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2889.301382] CPU: 1 PID: 6293 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 2889.313918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2889.323277] Call Trace: [ 2889.325891] dump_stack+0x1b2/0x283 [ 2889.329535] warn_alloc.cold+0x96/0x1cc [ 2889.333524] ? zone_watermark_ok_safe+0x220/0x220 [ 2889.338390] ? wait_for_completion_io+0x10/0x10 [ 2889.343083] __alloc_pages_nodemask+0x2127/0x2720 [ 2889.347959] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2889.353117] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2889.358152] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2889.364833] ? do_raw_spin_unlock+0x164/0x220 [ 2889.369372] alloc_pages_current+0x155/0x260 [ 2889.373987] kvm_mmu_create+0xda/0x1d0 [ 2889.377902] kvm_arch_vcpu_init+0x282/0x890 [ 2889.382326] ? alloc_pages_current+0x15d/0x260 [ 2889.388433] kvm_vcpu_init+0x26d/0x360 [ 2889.392352] vmx_create_vcpu+0xef/0x29a0 [ 2889.396439] ? __mutex_unlock_slowpath+0x75/0x770 [ 2889.402118] ? drop_futex_key_refs+0x2e/0xa0 [ 2889.407163] ? alloc_loaded_vmcs+0x240/0x240 [ 2889.411943] ? __lock_acquire+0x5fc/0x3f20 [ 2889.416395] kvm_vm_ioctl+0x4ca/0x13e0 [ 2889.420427] ? kvm_vcpu_release+0xa0/0xa0 [ 2889.424660] ? perf_trace_lock+0xf7/0x490 [ 2889.429277] ? check_preemption_disabled+0x35/0x240 [ 2889.434325] ? check_preemption_disabled+0x35/0x240 [ 2889.439363] ? perf_trace_lock+0xf7/0x490 [ 2889.443529] ? perf_trace_lock_acquire+0x510/0x510 [ 2889.449407] ? perf_trace_lock_acquire+0x510/0x510 [ 2889.454361] ? lock_acquire+0x170/0x3f0 [ 2889.458358] ? kvm_vcpu_release+0xa0/0xa0 [ 2889.462530] do_vfs_ioctl+0x75a/0xff0 [ 2889.466385] ? selinux_inode_setxattr+0x730/0x730 [ 2889.471251] ? ioctl_preallocate+0x1a0/0x1a0 [ 2889.475676] ? lock_downgrade+0x740/0x740 [ 2889.479851] ? __fget+0x225/0x360 [ 2889.483343] ? security_file_ioctl+0x83/0xb0 [ 2889.487765] SyS_ioctl+0x7f/0xb0 [ 2889.491121] ? do_vfs_ioctl+0xff0/0xff0 [ 2889.495080] do_syscall_64+0x1d5/0x640 [ 2889.498958] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2889.504152] RIP: 0033:0x45ce69 [ 2889.507358] RSP: 002b:00007ff3b8e13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2889.515210] RAX: ffffffffffffffda RBX: 000000000000fec0 RCX: 000000000045ce69 [ 2889.522486] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 000000000000000a [ 2889.529751] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2889.537006] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2889.544325] R13: 00007fffdf1aef2f R14: 00007ff3b8e149c0 R15: 000000000118bf2c [ 2889.741237] Mem-Info: [ 2889.743849] active_anon:433664 inactive_anon:8460 isolated_anon:0 [ 2889.743849] active_file:30276 inactive_file:16478 isolated_file:0 [ 2889.743849] unevictable:149081 dirty:183 writeback:0 unstable:0 [ 2889.743849] slab_reclaimable:20394 slab_unreclaimable:256816 [ 2889.743849] mapped:62526 shmem:179355 pagetables:69423 bounce:0 [ 2889.743849] free:500183 free_pcp:237 free_cma:0 [ 2889.803669] Node 0 active_anon:1379812kB inactive_anon:17280kB active_file:32kB inactive_file:32kB unevictable:211764kB isolated(anon):0kB isolated(file):0kB mapped:217120kB dirty:4kB writeback:0kB shmem:245736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 892928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2889.841419] Node 1 active_anon:354540kB inactive_anon:16560kB active_file:121084kB inactive_file:65892kB unevictable:384560kB isolated(anon):0kB isolated(file):0kB mapped:32060kB dirty:760kB writeback:0kB shmem:471684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2889.880486] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:112kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2889.914559] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 2889.919856] Node 0 DMA32 free:36248kB min:36272kB low:45340kB high:54408kB active_anon:1379812kB inactive_anon:17280kB active_file:24kB inactive_file:4kB unevictable:211652kB writepending:4kB present:3129332kB managed:2621196kB mlocked:60kB kernel_stack:22272kB pagetables:60160kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2889.956585] lowmem_reserve[]: 0 0 0 0 0 [ 2889.960853] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2889.994781] lowmem_reserve[]: 0 0 0 0 0 [ 2889.998836] Node 1 Normal free:1954468kB min:53612kB low:67012kB high:80412kB active_anon:354540kB inactive_anon:16560kB active_file:121084kB inactive_file:65892kB unevictable:384560kB writepending:760kB present:3932160kB managed:3870192kB mlocked:4kB kernel_stack:78784kB pagetables:217372kB bounce:0kB free_pcp:1364kB local_pcp:644kB free_cma:0kB [ 2890.037398] lowmem_reserve[]: 0 0 0 0 0 [ 2890.041867] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (U) 0*64kB 2*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (ME) = 10316kB [ 2890.058275] Node 0 DMA32: 292*4kB (UME) 445*8kB (UME) 336*16kB (ME) 197*32kB (ME) 62*64kB (UM) 32*128kB (ME) 16*256kB (ME) 11*512kB (UME) 2*1024kB (U) 0*2048kB 0*4096kB = 36248kB [ 2890.077918] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2890.089668] Node 1 Normal: 37*4kB (UME) 13*8kB (UME) 8*16kB (UME) 17*32kB (UME) 2*64kB (U) 1*128kB (E) 3*256kB (UE) 1*512kB (E) 0*1024kB 1*2048kB (E) 476*4096kB (M) = 1954204kB [ 2890.107650] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2890.117559] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2890.126697] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2890.136337] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2890.145385] 221191 total pagecache pages [ 2890.149479] 0 pages in swap cache [ 2890.153127] Swap cache stats: add 0, delete 0, find 0/0 [ 2890.159205] Free swap = 0kB [ 2890.162269] Total swap = 0kB [ 2890.165886] 1965979 pages RAM [ 2890.169161] 0 pages HighMem/MovableOnly [ 2890.173509] 339072 pages reserved [ 2890.177626] 0 pages cma reserved 22:34:26 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r3, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 22:34:26 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0), 0x8) 22:34:26 executing program 5: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000000)=0x100, 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:26 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x4181b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10048000}, 0x20008010) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x4280, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000240)={{0x84, @multicast1, 0x4e23, 0x2, 'lblcr\x00', 0x2, 0x20, 0x5a}, {@private=0xa010101, 0x4e22, 0x3, 0x3f15, 0x7, 0x100}}, 0x44) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000002c0)) 22:34:26 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:26 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 22:34:26 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) 22:34:26 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80, 0x800) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0xcd77, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_pts(r2, 0x600002) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000100)={0x40, "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"}) getsockopt$inet_mreq(r0, 0x0, 0x7, &(0x7f0000000340)={@private, @remote}, &(0x7f0000000380)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f00000014c0)=@urb_type_iso={0x0, {0x8}, 0x7, 0x0, &(0x7f00000003c0)="9955e4d9a0e716b43f9d4c43a180f9e79932e02f4ba63ce5a69fc328d5ba031910a3e04786168ef6e4d56afd2e64456b4c661c933a89dd15c6828cb89649cf59f830391186fdd9ed025eb7173a7a8a1ccba0131c3d9863d84659d53ae28875981154064bc7c31364b24b1c2e80d0065ae27cfdeeff37d94d03faf1ee92e0af5d5526d0f1b57dfe3f40e4c5b8b118ac31e0653d0249707851ef31ff0d6fb8a2f4dc66c5024c1daa13bc1fcc84c7062fb335dd2813dd9803528467a6533bbc6d54e4758bfaa1508eb1715b0d13566d332c50e64fea2506e0fa7089148d5dba40", 0xdf, 0x1, 0x8, 0x8, 0xc6, 0x5, &(0x7f00000004c0)="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", [{0x3, 0x8000, 0x9}, {0x0, 0xfffffffd, 0x3}, {0x6, 0x8000, 0x40}, {0x0, 0x3f, 0xfffffff9}, {0x40, 0xff, 0x8}, {0x401, 0x6, 0x3}, {0x6, 0x3946, 0x9}, {0x1000, 0x2, 0x7fffffff}]}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCGWINSZ(r7, 0x5413, &(0x7f0000001580)) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r8, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:27 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="0f42", 0xfffffffffffffd25) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 22:34:27 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x408040, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x101, 0x0, 0x0, {0xc, 0x0, 0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x20080884}, 0xd0) 22:34:27 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x9) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:29 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_SYNTH_INFO(r2, 0xc08c5102, &(0x7f0000000000)={"0854ea130043733d94a9b1f2b0b571f9b6ee736f2c5465ec88c1e939fe44", 0x2, 0x2, 0x0, 0x2, 0x10000, 0x7, 0xfd, 0x4, [0x0, 0x2, 0x7, 0x6, 0xffff, 0x7, 0x2, 0x1000, 0x9, 0x7, 0x0, 0x8, 0x80000001, 0x1, 0xff, 0x2, 0x7a299c5f, 0x9, 0x5]}) 22:34:29 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r3, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 22:34:29 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) 22:34:29 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={[], 0x10}}, 0x8) 22:34:29 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:29 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r3}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r3, 0x401, 0x20}, 0xc) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xbb, 0x46a000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0a0a2822673b5b0}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000828bd7000fbdb98250c00000005002a000100000005002a000100000008002b0009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x26000054}, 0x20048801) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000240)='syz1\x00') ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 22:34:29 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_setup(0x6, &(0x7f0000000000)) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x5897, &(0x7f0000000200)=0x0) io_cancel(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x81, r1, &(0x7f0000000100)="dd63da2d97ae0cbc10a3c302c02cbd801ee02aed3c4c995e8fa37511ddb4f0dd86f18552f6228647c712a2168bed39ef39b938b0e7d8925f184e0bfc3267fbe8d3457f767c9df37f1f7dac0a4b85cba24771dffb5049c79c43ebb5f357ac4bbbfea3ed7b5a2c0db9abb10e2f8faa7e281aea54862f2c8d09b6ea82912c506c663f76ae04a93bc54479a355b466f645851f8da84f2ef91b06800ce6effcf32bf8064bf74b0df6467d5dbc2c79d6496773c015e6531983e1aba533eafc164a802e42123caa345fe01ea38a704953d6e15068a4bd3d8b6f29dd8872e5cac17510be69cdd73a8302008048f95a187f70", 0xee, 0x800, 0x0, 0x0, r2}, &(0x7f0000000240)) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:29 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) 22:34:29 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2895.652706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2895.662063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2895.672584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2895.681881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2895.691271] device bridge_slave_1 left promiscuous mode [ 2895.697260] bridge0: port 2(bridge_slave_1) entered disabled state [ 2895.704888] device bridge_slave_0 left promiscuous mode [ 2895.710661] bridge0: port 1(bridge_slave_0) entered disabled state [ 2895.731221] device veth1_macvtap left promiscuous mode [ 2895.737701] device veth0_macvtap left promiscuous mode [ 2895.743060] device veth1_vlan left promiscuous mode [ 2895.748581] device veth0_vlan left promiscuous mode [ 2896.153551] Š (unregistering): Releasing backup interface veth199 [ 2896.175720] Š (unregistering): Releasing backup interface veth195 [ 2896.195072] Š (unregistering): Releasing backup interface veth189 [ 2896.229602] Š (unregistering): Releasing backup interface veth175 [ 2896.250438] Š (unregistering): Releasing backup interface veth169 [ 2896.271478] bond208 (unregistering): Releasing backup interface bridge157 [ 2896.286237] bond208 (unregistering): Released all slaves [ 2896.294432] bond207 (unregistering): Releasing backup interface bridge156 [ 2896.306022] bond207 (unregistering): Releasing backup interface bridge155 [ 2896.318366] bond207 (unregistering): Released all slaves [ 2896.326880] bond206 (unregistering): Releasing backup interface bridge154 [ 2896.340670] bond206 (unregistering): Released all slaves [ 2896.352442] bond205 (unregistering): Releasing backup interface bridge151 [ 2896.363269] bond205 (unregistering): Releasing backup interface bridge150 [ 2896.376059] bond205 (unregistering): Released all slaves [ 2896.385464] bond204 (unregistering): Releasing backup interface bridge149 [ 2896.398452] bond204 (unregistering): Released all slaves [ 2896.407175] bond203 (unregistering): Released all slaves [ 2896.416598] bond202 (unregistering): Releasing backup interface bridge148 [ 2896.428134] bond202 (unregistering): Released all slaves [ 2896.439973] bond201 (unregistering): Releasing backup interface bridge146 [ 2896.453165] bond201 (unregistering): Released all slaves [ 2896.462574] bond200 (unregistering): Releasing backup interface bridge145 [ 2896.477402] bond200 (unregistering): Released all slaves [ 2896.492223] bond199 (unregistering): Released all slaves [ 2896.502738] bond198 (unregistering): Released all slaves [ 2896.512729] bond197 (unregistering): Released all slaves [ 2896.526640] bond196 (unregistering): Releasing backup interface bridge143 [ 2896.541497] bond196 (unregistering): Released all slaves [ 2896.552373] bond195 (unregistering): Released all slaves [ 2896.562029] bond194 (unregistering): Released all slaves [ 2896.575050] bond193 (unregistering): Released all slaves [ 2896.582797] bond192 (unregistering): Releasing backup interface bridge139 [ 2896.594033] bond192 (unregistering): Releasing backup interface bridge138 [ 2896.606644] bond192 (unregistering): Released all slaves [ 2896.614669] Bluetooth: hci5 command 0x0405 tx timeout [ 2896.615176] bond191 (unregistering): Released all slaves [ 2896.630358] bond190 (unregistering): Released all slaves [ 2896.640674] bond189 (unregistering): Released all slaves [ 2896.656819] bond188 (unregistering): Released all slaves [ 2896.671589] bond187 (unregistering): Released all slaves [ 2896.679828] bond186 (unregistering): Releasing backup interface bridge134 [ 2896.692068] bond186 (unregistering): Releasing backup interface bridge133 [ 2896.702604] bond186 (unregistering): Released all slaves [ 2896.711112] bond185 (unregistering): Releasing backup interface bridge132 [ 2896.721126] bond185 (unregistering): Releasing backup interface bridge131 [ 2896.732337] bond185 (unregistering): Released all slaves [ 2896.741627] bond184 (unregistering): Released all slaves [ 2896.750891] bond183 (unregistering): Released all slaves [ 2896.759052] bond182 (unregistering): Releasing backup interface bridge130 [ 2896.769625] bond182 (unregistering): Releasing backup interface bridge129 [ 2896.780499] bond182 (unregistering): Released all slaves [ 2896.790381] bond181 (unregistering): Released all slaves [ 2896.802136] bond180 (unregistering): Released all slaves [ 2896.811722] bond179 (unregistering): Released all slaves [ 2896.823138] bond178 (unregistering): Released all slaves [ 2896.832589] bond177 (unregistering): Released all slaves [ 2896.841695] bond176 (unregistering): Released all slaves [ 2896.851991] bond175 (unregistering): Released all slaves [ 2896.867277] bond174 (unregistering): Released all slaves [ 2896.876976] bond173 (unregistering): Released all slaves [ 2896.887938] bond172 (unregistering): Released all slaves [ 2896.902800] bond171 (unregistering): Released all slaves [ 2896.912885] bond170 (unregistering): Released all slaves [ 2896.922264] bond169 (unregistering): Released all slaves [ 2896.931595] bond168 (unregistering): Releasing backup interface bridge122 [ 2896.942068] bond168 (unregistering): Releasing backup interface bridge121 [ 2896.953292] bond168 (unregistering): Released all slaves [ 2896.971550] bond167 (unregistering): Releasing backup interface bridge116 [ 2896.982661] bond167 (unregistering): Released all slaves [ 2896.996389] bond166 (unregistering): Releasing backup interface bridge115 [ 2897.007742] bond166 (unregistering): Releasing backup interface bridge114 [ 2897.020238] bond166 (unregistering): Released all slaves [ 2897.031035] bond165 (unregistering): Releasing backup interface bridge112 [ 2897.042506] bond165 (unregistering): Released all slaves [ 2897.053832] bond164 (unregistering): Released all slaves [ 2897.065749] bond163 (unregistering): Released all slaves [ 2897.073470] bond162 (unregistering): Releasing backup interface bridge109 [ 2897.085011] bond162 (unregistering): Released all slaves [ 2897.092766] bond161 (unregistering): Releasing backup interface bridge108 [ 2897.104850] bond161 (unregistering): Releasing backup interface bridge107 [ 2897.116905] bond161 (unregistering): Released all slaves [ 2897.129504] bond160 (unregistering): Releasing backup interface bridge106 [ 2897.139385] bond160 (unregistering): Releasing backup interface bridge105 [ 2897.150812] bond160 (unregistering): Released all slaves [ 2897.160434] bond159 (unregistering): Releasing backup interface bridge104 [ 2897.170766] bond159 (unregistering): Releasing backup interface bridge103 [ 2897.181811] bond159 (unregistering): Released all slaves [ 2897.191842] bond158 (unregistering): Released all slaves [ 2897.200238] bond157 (unregistering): Releasing backup interface bridge102 [ 2897.210499] bond157 (unregistering): Releasing backup interface bridge101 [ 2897.222124] bond157 (unregistering): Released all slaves [ 2897.231273] bond156 (unregistering): Released all slaves [ 2897.239762] bond155 (unregistering): Releasing backup interface bridge100 [ 2897.250341] bond155 (unregistering): Released all slaves [ 2897.258672] bond154 (unregistering): Releasing backup interface bridge99 [ 2897.269574] bond154 (unregistering): Released all slaves [ 2897.278610] bond153 (unregistering): Released all slaves [ 2897.290149] bond152 (unregistering): Released all slaves [ 2897.299433] bond151 (unregistering): Releasing backup interface bridge97 [ 2897.309208] bond151 (unregistering): Releasing backup interface bridge96 [ 2897.320192] bond151 (unregistering): Released all slaves [ 2897.328996] bond150 (unregistering): Releasing backup interface bridge95 [ 2897.339192] bond150 (unregistering): Releasing backup interface bridge94 [ 2897.350466] bond150 (unregistering): Released all slaves [ 2897.359158] bond149 (unregistering): Releasing backup interface bridge93 [ 2897.369764] bond149 (unregistering): Released all slaves [ 2897.382320] bond148 (unregistering): Released all slaves [ 2897.395408] bond147 (unregistering): Released all slaves [ 2897.404515] bond146 (unregistering): Released all slaves [ 2897.418179] bond145 (unregistering): Released all slaves [ 2897.427628] bond144 (unregistering): Releasing backup interface bridge87 [ 2897.438028] bond144 (unregistering): Released all slaves [ 2897.447805] bond143 (unregistering): Released all slaves [ 2897.460554] bond142 (unregistering): Released all slaves [ 2897.469482] bond141 (unregistering): Released all slaves [ 2897.479564] bond140 (unregistering): Released all slaves [ 2897.489180] bond139 (unregistering): Released all slaves [ 2897.497842] bond138 (unregistering): Released all slaves [ 2897.509488] bond137 (unregistering): Released all slaves [ 2897.518081] bond136 (unregistering): Released all slaves [ 2897.528248] bond135 (unregistering): Released all slaves [ 2897.537320] bond134 (unregistering): Released all slaves [ 2897.547224] bond133 (unregistering): Released all slaves [ 2897.556228] bond132 (unregistering): Released all slaves [ 2897.566129] bond131 (unregistering): Released all slaves [ 2897.576185] bond130 (unregistering): Released all slaves [ 2897.587883] bond129 (unregistering): Released all slaves [ 2897.596791] bond128 (unregistering): Released all slaves [ 2897.606182] bond127 (unregistering): Released all slaves [ 2897.615025] bond126 (unregistering): Released all slaves [ 2897.623152] bond125 (unregistering): Released all slaves [ 2897.632396] bond124 (unregistering): Released all slaves [ 2897.641355] bond123 (unregistering): Released all slaves [ 2897.651700] bond122 (unregistering): Released all slaves [ 2897.660523] bond121 (unregistering): Released all slaves [ 2897.670430] bond120 (unregistering): Released all slaves [ 2897.680200] bond119 (unregistering): Released all slaves [ 2897.689448] bond118 (unregistering): Released all slaves [ 2897.698901] bond117 (unregistering): Released all slaves [ 2897.708640] bond116 (unregistering): Released all slaves [ 2897.718055] bond115 (unregistering): Released all slaves [ 2897.728856] bond114 (unregistering): Released all slaves [ 2897.737899] bond113 (unregistering): Released all slaves [ 2897.749124] bond112 (unregistering): Released all slaves [ 2897.758340] bond111 (unregistering): Released all slaves [ 2897.768443] bond110 (unregistering): Released all slaves [ 2897.780515] bond109 (unregistering): Released all slaves [ 2897.793347] bond108 (unregistering): Released all slaves [ 2897.806548] bond107 (unregistering): Released all slaves [ 2897.817620] bond106 (unregistering): Released all slaves [ 2897.829518] bond105 (unregistering): Released all slaves [ 2897.841006] bond104 (unregistering): Released all slaves [ 2897.851915] bond103 (unregistering): Released all slaves [ 2897.865163] bond102 (unregistering): Released all slaves [ 2897.876997] bond101 (unregistering): Released all slaves [ 2897.888477] bond100 (unregistering): Released all slaves [ 2897.900419] bond99 (unregistering): Released all slaves [ 2897.916720] bond98 (unregistering): Released all slaves [ 2897.926848] bond97 (unregistering): Released all slaves [ 2897.936357] bond96 (unregistering): Released all slaves [ 2897.946341] bond95 (unregistering): Released all slaves [ 2897.956656] bond94 (unregistering): Released all slaves [ 2897.967578] bond93 (unregistering): Released all slaves [ 2897.976639] bond92 (unregistering): Released all slaves [ 2897.987736] bond91 (unregistering): Released all slaves [ 2897.998119] bond90 (unregistering): Released all slaves [ 2898.008603] bond89 (unregistering): Released all slaves [ 2898.018137] bond88 (unregistering): Released all slaves [ 2898.029529] bond87 (unregistering): Released all slaves [ 2898.046918] bond86 (unregistering): Released all slaves [ 2898.058905] bond85 (unregistering): Released all slaves [ 2898.070840] bond84 (unregistering): Released all slaves [ 2898.081819] bond83 (unregistering): Released all slaves [ 2898.090527] bond82 (unregistering): Released all slaves [ 2898.100819] bond81 (unregistering): Released all slaves [ 2898.111224] bond80 (unregistering): Released all slaves [ 2898.120258] bond79 (unregistering): Released all slaves [ 2898.129665] bond78 (unregistering): Released all slaves [ 2898.142003] bond77 (unregistering): Released all slaves [ 2898.151692] bond76 (unregistering): Released all slaves [ 2898.160291] bond75 (unregistering): Released all slaves [ 2898.172559] bond74 (unregistering): Released all slaves [ 2898.181251] bond73 (unregistering): Released all slaves [ 2898.190747] bond72 (unregistering): Released all slaves [ 2898.199993] bond71 (unregistering): Released all slaves [ 2898.209934] bond70 (unregistering): Released all slaves [ 2898.219597] bond69 (unregistering): Released all slaves [ 2898.228520] bond68 (unregistering): Released all slaves [ 2898.239072] bond67 (unregistering): Released all slaves [ 2898.249573] bond66 (unregistering): Released all slaves [ 2898.260796] bond65 (unregistering): Released all slaves [ 2898.269399] bond64 (unregistering): Releasing backup interface bridge71 [ 2898.279805] bond64 (unregistering): Released all slaves [ 2898.289252] bond63 (unregistering): Releasing backup interface bridge70 [ 2898.300005] bond63 (unregistering): Released all slaves [ 2898.309337] bond62 (unregistering): Releasing backup interface bridge69 [ 2898.321202] bond62 (unregistering): Released all slaves [ 2898.330159] bond61 (unregistering): Releasing backup interface bridge68 [ 2898.341090] bond61 (unregistering): Released all slaves [ 2898.349574] bond60 (unregistering): Releasing backup interface bridge67 [ 2898.360500] bond60 (unregistering): Released all slaves [ 2898.369030] bond59 (unregistering): Releasing backup interface bridge66 [ 2898.382461] bond59 (unregistering): Released all slaves [ 2898.390942] bond58 (unregistering): Releasing backup interface bridge65 [ 2898.403383] bond58 (unregistering): Released all slaves [ 2898.411481] bond57 (unregistering): Releasing backup interface bridge64 [ 2898.422214] bond57 (unregistering): Released all slaves [ 2898.430906] bond56 (unregistering): Releasing backup interface bridge63 [ 2898.441984] bond56 (unregistering): Released all slaves [ 2898.450796] bond55 (unregistering): Released all slaves [ 2898.460553] bond54 (unregistering): Released all slaves [ 2898.470373] bond53 (unregistering): Released all slaves [ 2898.479429] bond52 (unregistering): Releasing backup interface bridge62 [ 2898.489712] bond52 (unregistering): Released all slaves [ 2898.500228] bond51 (unregistering): Releasing backup interface bridge61 [ 2898.511883] bond51 (unregistering): Released all slaves [ 2898.520487] bond50 (unregistering): Releasing backup interface bridge60 [ 2898.531308] bond50 (unregistering): Released all slaves [ 2898.539680] bond49 (unregistering): Releasing backup interface bridge59 [ 2898.549837] bond49 (unregistering): Released all slaves [ 2898.559145] bond48 (unregistering): Releasing backup interface bridge58 [ 2898.569317] bond48 (unregistering): Released all slaves [ 2898.578833] bond47 (unregistering): Releasing backup interface bridge57 [ 2898.589055] bond47 (unregistering): Released all slaves [ 2898.598810] bond46 (unregistering): Releasing backup interface bridge56 [ 2898.609050] bond46 (unregistering): Released all slaves [ 2898.618412] bond45 (unregistering): Releasing backup interface bridge55 [ 2898.628862] bond45 (unregistering): Released all slaves [ 2898.639076] bond44 (unregistering): Releasing backup interface bridge54 [ 2898.649360] bond44 (unregistering): Released all slaves [ 2898.658142] bond43 (unregistering): Releasing backup interface bridge53 [ 2898.669303] bond43 (unregistering): Released all slaves [ 2898.678146] bond42 (unregistering): Releasing backup interface bridge52 [ 2898.688922] bond42 (unregistering): Released all slaves [ 2898.694000] Bluetooth: hci5 command 0x0405 tx timeout [ 2898.699566] bond41 (unregistering): Releasing backup interface bridge51 [ 2898.710298] bond41 (unregistering): Released all slaves [ 2898.734963] bond40 (unregistering): Released all slaves [ 2898.745652] bond39 (unregistering): Released all slaves [ 2898.757109] bond38 (unregistering): Released all slaves [ 2898.768482] bond37 (unregistering): Released all slaves [ 2898.783058] bond36 (unregistering): Released all slaves [ 2898.794343] bond35 (unregistering): Released all slaves [ 2898.805430] bond34 (unregistering): Released all slaves [ 2898.816256] bond33 (unregistering): Released all slaves [ 2898.827507] bond32 (unregistering): Released all slaves [ 2898.853286] bond31 (unregistering): Released all slaves [ 2898.866555] bond30 (unregistering): Released all slaves [ 2898.879782] bond29 (unregistering): Released all slaves [ 2898.895043] bond28 (unregistering): Released all slaves [ 2898.903327] bond27 (unregistering): Released all slaves [ 2898.912755] bond26 (unregistering): Released all slaves [ 2898.921681] bond25 (unregistering): Releasing backup interface bridge17 [ 2898.932494] bond25 (unregistering): Released all slaves [ 2898.942347] bond24 (unregistering): Releasing backup interface bridge16 [ 2898.953411] bond24 (unregistering): Released all slaves [ 2898.961837] bond23 (unregistering): Releasing backup interface bridge15 [ 2898.972013] bond23 (unregistering): Released all slaves [ 2898.980249] bond22 (unregistering): Releasing backup interface bridge14 [ 2898.990797] bond22 (unregistering): Released all slaves [ 2898.999338] bond21 (unregistering): Releasing backup interface bridge13 [ 2899.009862] bond21 (unregistering): Released all slaves [ 2899.019592] bond20 (unregistering): Releasing backup interface bridge12 [ 2899.030334] bond20 (unregistering): Released all slaves [ 2899.039047] bond19 (unregistering): Releasing backup interface bridge11 [ 2899.050083] bond19 (unregistering): Released all slaves [ 2899.058785] bond18 (unregistering): Releasing backup interface bridge10 [ 2899.069313] bond18 (unregistering): Released all slaves [ 2899.077795] bond17 (unregistering): Releasing backup interface bridge9 [ 2899.088388] bond17 (unregistering): Released all slaves [ 2899.097628] bond16 (unregistering): Releasing backup interface bridge8 [ 2899.107868] bond16 (unregistering): Released all slaves [ 2899.118282] bond15 (unregistering): Released all slaves [ 2899.126851] bond14 (unregistering): Released all slaves [ 2899.136675] bond13 (unregistering): Released all slaves [ 2899.146279] bond12 (unregistering): Released all slaves [ 2899.155996] bond11 (unregistering): Released all slaves [ 2899.164561] bond10 (unregistering): Released all slaves [ 2899.172124] bond9 (unregistering): Releasing backup interface bridge7 [ 2899.187131] bond9 (unregistering): Released all slaves [ 2899.195379] bond8 (unregistering): Releasing backup interface bridge6 [ 2899.206863] bond8 (unregistering): Released all slaves [ 2899.215289] bond7 (unregistering): Released all slaves [ 2899.223242] bond6 (unregistering): Released all slaves [ 2899.232411] bond5 (unregistering): Released all slaves [ 2899.240747] bond4 (unregistering): Releasing backup interface bridge5 [ 2899.251518] bond4 (unregistering): Released all slaves [ 2899.259743] bond3 (unregistering): Releasing backup interface bridge4 [ 2899.271197] bond3 (unregistering): Released all slaves [ 2899.280632] bond2 (unregistering): Releasing backup interface bridge3 [ 2899.293083] bond2 (unregistering): Released all slaves [ 2899.302395] bond1 (unregistering): Releasing backup interface bridge2 [ 2899.312788] bond1 (unregistering): Releasing backup interface bridge1 [ 2899.327538] bond1 (unregistering): Released all slaves [ 2899.369629] Š (unregistering): Releasing backup interface veth127 [ 2899.390954] Š (unregistering): Releasing backup interface veth123 [ 2899.417567] Š (unregistering): Releasing backup interface veth115 [ 2899.440788] Š (unregistering): Releasing backup interface veth107 [ 2899.459013] Š (unregistering): Releasing backup interface veth103 [ 2899.482185] Š (unregistering): Releasing backup interface veth93 [ 2899.497881] Š (unregistering): Releasing backup interface veth89 [ 2899.521570] Š (unregistering): Releasing backup interface veth81 [ 2899.536547] Š (unregistering): Releasing backup interface veth77 [ 2899.567450] Š (unregistering): Releasing backup interface veth63 [ 2899.579425] Š (unregistering): Releasing backup interface veth61 [ 2899.604749] Š (unregistering): Releasing backup interface veth53 [ 2899.635171] Š (unregistering): Releasing backup interface veth39 [ 2899.660007] Š (unregistering): Releasing backup interface veth33 [ 2899.756060] device hsr_slave_1 left promiscuous mode [ 2899.768998] device hsr_slave_0 left promiscuous mode [ 2899.788934] team0 (unregistering): Port device team_slave_1 removed [ 2899.800418] team0 (unregistering): Port device team_slave_0 removed [ 2899.811898] Š (unregistering): Releasing backup interface bond_slave_1 [ 2899.827859] Š (unregistering): Releasing backup interface bond_slave_0 [ 2899.861402] Š (unregistering): Released all slaves [ 2900.684148] IPVS: ftp: loaded support on port[0] = 21 [ 2900.832817] chnl_net:caif_netlink_parms(): no params data found [ 2900.908931] bridge0: port 1(bridge_slave_0) entered blocking state [ 2900.916373] bridge0: port 1(bridge_slave_0) entered disabled state [ 2900.927316] device bridge_slave_0 entered promiscuous mode [ 2900.936464] bridge0: port 2(bridge_slave_1) entered blocking state [ 2900.943075] bridge0: port 2(bridge_slave_1) entered disabled state [ 2900.951924] device bridge_slave_1 entered promiscuous mode [ 2900.981346] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2900.994614] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2901.020793] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2901.029853] team0: Port device team_slave_0 added [ 2901.036852] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2901.046021] team0: Port device team_slave_1 added [ 2901.072816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2901.079833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2901.106512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2901.119155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2901.126031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2901.152480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2901.164707] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2901.172904] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2901.208811] device hsr_slave_0 entered promiscuous mode [ 2901.215807] device hsr_slave_1 entered promiscuous mode [ 2901.222602] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2901.231169] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2901.344711] bridge0: port 2(bridge_slave_1) entered blocking state [ 2901.351348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2901.358068] bridge0: port 1(bridge_slave_0) entered blocking state [ 2901.364567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2901.410627] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2901.417491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2901.427781] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2901.441213] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2901.449403] bridge0: port 1(bridge_slave_0) entered disabled state [ 2901.457428] bridge0: port 2(bridge_slave_1) entered disabled state [ 2901.468270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2901.476241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2901.488168] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2901.494779] 8021q: adding VLAN 0 to HW filter on device team0 [ 2901.508867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2901.517518] bridge0: port 1(bridge_slave_0) entered blocking state [ 2901.523926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2901.536771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2901.545669] bridge0: port 2(bridge_slave_1) entered blocking state [ 2901.552474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2901.576356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2901.585268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2901.598233] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2901.608261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2901.624636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2901.637485] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2901.645221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2901.654154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2901.671359] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2901.681153] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2901.688473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2901.697492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2901.709898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2901.780717] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2901.794020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2901.835896] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2901.845398] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2901.852744] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2901.867334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2901.876257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2901.885278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2901.894632] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2901.905362] device veth0_vlan entered promiscuous mode [ 2901.919958] device veth1_vlan entered promiscuous mode [ 2901.939462] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2901.953872] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2901.961489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2901.971269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2901.983840] device veth0_macvtap entered promiscuous mode [ 2901.990136] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2902.000771] device veth1_macvtap entered promiscuous mode [ 2902.008053] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2902.019421] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2902.031896] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2902.042970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2902.053901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2902.063888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2902.074475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2902.084060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2902.094363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2902.104394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2902.114828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2902.124544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2902.135028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2902.146506] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2902.154487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2902.162315] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2902.171199] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2902.179366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2902.188466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2902.200553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2902.211512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2902.221577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2902.231717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2902.241272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2902.251720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2902.261630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2902.271801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2902.281531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2902.292139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2902.304264] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2902.311627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2902.320041] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2902.329272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 22:34:38 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:38 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYRES64=r6, @ANYRES16=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x844}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000810500000000000000000000009c", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r4], 0x44}}, 0x0) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}, {0x20, '\xf9}$!'}], 0xa, "43dcf79285e1a1e4cfb7f1c9891853440d3d1888aae594de40de0d03256034751e88de3c561ad7fbcbe313fb9173de05daffee067f891e622f67711ca479e586db24ca4ee622c841ec00b586aa79fcd0c589d195448f4872292c69104fb0b6ab936020be91a273e6d97f0b8fd449e6be5b4f2f7d04bb4402767d0f0745cde0a13b0e6c9ee76ed48a8bc2508026b4fe971dc83836be2c7e953252f0d3752355dded99e61660fb6b860e108b2bf91785829169113d9572c4ddc37215d098a2e4473984c119dea314"}, 0xe1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 22:34:38 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r3, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 22:34:38 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:38 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) 22:34:38 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000810500000000000000000000009c", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r9], 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000100)={@remote, @mcast1, @mcast2, 0x5, 0x3, 0x1, 0x500, 0xfff, 0x2900004, r9}) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) ptrace$cont(0x18, 0x0, 0x1, 0x4) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'L-', 0x3}, 0x16, 0x2) 22:34:38 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) [ 2903.771417] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 22:34:39 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x1, 0x6, 0xe5}, 0xc) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) [ 2903.958492] IPv6: ADDRCONF(NETDEV_UP): vlan119: link is not ready [ 2903.998863] bond0: Enslaving veth515 as an active interface with an up link 22:34:39 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:34:39 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000006004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x104800) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast1, @in=@rand_addr=0x64010101, 0x4e23, 0x445e, 0x4e20, 0x7fc, 0x2, 0xa0, 0x1a0, 0x3c, 0x0, r3}, {0xfffffffffffffffd, 0xfffffffffffffffb, 0x1ff, 0x19e2f8d2, 0x1, 0x7fffffff, 0x2, 0x7}, {0x2b2d, 0x9, 0x4, 0x8}, 0x798c, 0x6e6bba, 0x2, 0x0, 0x0, 0x5}, {{@in=@remote, 0x4d4, 0x33}, 0x2, @in=@broadcast, 0x3503, 0x4, 0x0, 0x0, 0x6, 0x4, 0x4}}, 0xe8) 22:34:39 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:39 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000000)="9f", 0x1) r1 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r1, &(0x7f0000000000)="9f", 0x1) keyctl$instantiate(0xc, r0, &(0x7f0000000000)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '', 0x20, 0x6}, 0x2a, r1) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:39 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000180)={0x3f, 0x5, &(0x7f0000000240)="1222109269de626b176703ceb51887300929bbc77002b5072c236293e7bf04d1f956ec698cee7b3e540a1d1b2f75059bd38ec6b0f725102f71b3c91e035d04918a455f813f3e196d1a17e0d205367a19d86a8821e9b91dee2fae614b03b74eeb67f56636936a68103efcb9027f1054a285ebad883de44c57bb27987cd9bd79056abdbe2be764d205d25f6089e78a392b99920bcac6ff03992f40ede9a07b0a7927c18b6f6ae2dce649c7fb6e32389ce21a6767b964f883328a2fd5e065bf8c8448212d11cacb392f6c7ae3ec564ad0a362c21f5c5114cfcfb0b08bc9c2cc05c3b39ac3874adb0be4bb491b1526a8abc3fe8227d5ef3b8cfc9d7fb7b15ebfa8c69a33ecb8e124433c444639d7a5a50be16c88e212fd79ea8df97df77e45369d81186341a913a748f641a57ad87b1ec5e451c727473f3df77b64254c89d5a706f71a6de0f08a17fa40a9bc5ea1019f432b63ffd3e904305d0003af5b22a2d78cd47c4300e13bca0d71933548a4378929ff9527ad2fc5b8d9ebb862eb9c083501d0dead5a44b4ddc8c83b8e012c654453d6ef7c43059e28e133ca664dc1b5572862e36ed84798c096aa89806991026cf5e84d0ebaa7b4d202c89c97ef91d618bb612498307946705818def944eabe0300dfc4daa955d6916d9f1cb99a0f7bbfe7b9059435ece78901f080b3d92287679596716e77eb00686fd76596f5db24ec331cca290d6fd74f8e2f3f918d437aab97ac899a2d8d8436d3004b2138c2261087c04d6cd0ae5c452071ceef49f380e191e7d7074f13ab19c73c803280bca33795a074e1ddc8807ed25781dbd505f3a94032b0745881241a71680053e433e1473d554d73913cc8669b7468067e103a2a0896fe370a71e4f0d23a94f5c930633c5a225582913a1d41f62ef6d67e1b110ed1d55ea45d5169c40d397c05ac058a6ad5de1b4efd8243b796fc4baa3852f82f7001cd6c8fc100b6aec659eacb6d4950585cddb4444d111de340c556996ea12aba404cd1216e5d92c8134077751ea738d6c09c830591baa89640fe7c42829ab4eb814c115efcebea2331306e9d799d92e0bc57fddde1cedd4fb99f60042713c1ce4d8432e272675a82195f1471f203072fe0ceb7acf858be65407b2f0d8f0cf6b4e9836dc822c22c15d1215ab90bbf85a545819b8f9aefb6fd83869b47a7654ffb94239cb6cc040d7a6fd6388c34c49c6fda669c2d3aa66857b5af3a2b89d9ec29a9de30858fb6b2f495f26085c446d8ac21f93fe11e192ce713df0ece444e2920ace97dcad17714bc5b54425f53c31806eb433f94e7696304b6f6daa6aea4cd9538ddee3802b2a0b899aba6cddb2a8503ed44ce4ecb8c0e2742fba28f03f6724fed848ae30905eb089ba3b1f2a2a4a3fa98eda716d54b255b04a142a3db62fb0fc63ce088a3ba9cdb61a64b3ef8d9c316cf"}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x10000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f00000000c0)={r7}, 0x8) r8 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SCSI_IOCTL_DOORUNLOCK(r8, 0x5381) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0xd948, 0x3, 0x8008, 0xa90, 0x7, 0x7ff, 0x3, 0x3ff, r7}, 0x20) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 22:34:39 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f00000000c0)={r4, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={r4, 0x95}, 0x8) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:39 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:39 executing program 5: clone(0x200000003a982780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000140), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/477]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x800, 0x0) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000040)=0x8, 0x4) 22:34:39 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:34:39 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) 22:34:39 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:40 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:34:40 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:40 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x1, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000280)=0x4, 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r2 = dup(0xffffffffffffffff) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000100)={0x3}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = signalfd(r1, &(0x7f0000000000), 0x8) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000000080)) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, &(0x7f0000000180), 0x4) 22:34:40 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x2b1, 0x42282) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:40 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:40 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0xc2401, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 22:34:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000300)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000300)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) setpgid(r1, r2) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:40 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) 22:34:40 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) 22:34:40 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000000)={0x3, 0xff, 0xfffffe00, 0x4, 0x5, 0x2}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 22:34:40 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x2}, 0x4) [ 2905.573698] Bluetooth: hci3 command 0x0409 tx timeout 22:34:40 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:40 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r3, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 22:34:42 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0), 0x8) 22:34:42 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0xa, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg(r1, &(0x7f0000000200)={&(0x7f0000000180)=@generic={0x26, "819415e7e88fda4f4ca0f1b29ec4daa5545ef54678730a632235b48168b62d33734632a7a8a061f00216070fb5598d87d0a28182ff05501b613fb8e665ec17e720be1d0befbfbc6a65cde739bf77165baefbea4fdce87e65de828f4468d7fe1c9c9d522b4b6eb7c2ae52698caed1beb062db7b6bed0ffc16650d599fce4a"}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)="c55568d4f4db116ae96ca441cc0f25ab38038349e9b5ed42555f535398776675139961", 0x23}], 0x1, &(0x7f0000000100)=[{0x20, 0xff, 0x0, "355ab83353df5b89315b5cd25b81"}], 0x20}, 0x48001) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 22:34:42 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2907.663417] Bluetooth: hci3 command 0x041b tx timeout [ 2907.670426] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:34:43 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:43 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0), 0x8) 22:34:43 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:43 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r3, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) [ 2907.977559] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:34:43 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0), 0x8) 22:34:43 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) [ 2909.733353] Bluetooth: hci3 command 0x040f tx timeout [ 2910.529216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2910.540919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2910.550396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2910.560146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2910.569276] device veth109 left promiscuous mode [ 2910.574834] bridge0: port 3(veth109) entered disabled state [ 2910.581707] device bridge_slave_1 left promiscuous mode [ 2910.587638] bridge0: port 2(bridge_slave_1) entered disabled state [ 2910.595034] device bridge_slave_0 left promiscuous mode [ 2910.600526] bridge0: port 1(bridge_slave_0) entered disabled state [ 2910.621578] device veth1_macvtap left promiscuous mode [ 2910.627128] device veth0_macvtap left promiscuous mode [ 2910.632592] device veth1_vlan left promiscuous mode [ 2910.638100] device veth0_vlan left promiscuous mode [ 2910.761185] bond0 (unregistering): Releasing backup interface veth515 [ 2910.782018] bond0 (unregistering): Releasing backup interface veth511 [ 2910.831471] bond0 (unregistering): Releasing backup interface veth495 [ 2910.871328] bond0 (unregistering): Releasing backup interface veth479 [ 2910.899261] bond0 (unregistering): Releasing backup interface veth469 [ 2910.911817] bond0 (unregistering): Releasing backup interface veth467 [ 2910.937744] bond0 (unregistering): Releasing backup interface veth461 [ 2910.950808] bond0 (unregistering): Releasing backup interface veth459 [ 2910.965881] bond0 (unregistering): Releasing backup interface veth457 [ 2911.036456] bond0 (unregistering): Releasing backup interface veth419 [ 2911.048516] bond0 (unregistering): Releasing backup interface veth417 [ 2911.066835] bond0 (unregistering): Releasing backup interface veth413 [ 2911.078733] bond0 (unregistering): Releasing backup interface veth411 [ 2911.090615] bond0 (unregistering): Releasing backup interface veth409 [ 2911.107372] bond0 (unregistering): Releasing backup interface veth405 [ 2911.188366] bond0 (unregistering): Releasing backup interface veth369 [ 2911.206432] bond0 (unregistering): Releasing backup interface veth365 [ 2911.251037] bond0 (unregistering): Releasing backup interface veth343 [ 2911.267293] bond0 (unregistering): Releasing backup interface veth341 [ 2911.304407] bond0 (unregistering): Releasing backup interface veth323 [ 2911.334559] bond0 (unregistering): Releasing backup interface veth311 [ 2911.354383] bond0 (unregistering): Releasing backup interface veth305 [ 2911.372618] bond0 (unregistering): Releasing backup interface veth301 [ 2911.426702] bond0 (unregistering): Releasing backup interface veth279 [ 2911.446551] bond0 (unregistering): Releasing backup interface veth277 [ 2911.467542] bond0 (unregistering): Releasing backup interface veth275 [ 2911.488710] bond0 (unregistering): Releasing backup interface veth273 [ 2911.526290] bond0 (unregistering): Releasing backup interface veth263 [ 2911.547177] bond0 (unregistering): Releasing backup interface veth257 [ 2911.560200] bond0 (unregistering): Releasing backup interface veth255 [ 2911.589865] bond0 (unregistering): Releasing backup interface veth247 [ 2911.613119] bond0 (unregistering): Releasing backup interface veth239 [ 2911.646512] bond0 (unregistering): Releasing backup interface veth227 [ 2911.665569] bond0 (unregistering): Releasing backup interface veth223 [ 2911.679757] bond0 (unregistering): Releasing backup interface veth221 [ 2911.710311] bond0 (unregistering): Releasing backup interface veth211 [ 2911.726608] bond0 (unregistering): Releasing backup interface veth207 [ 2911.747125] bond0 (unregistering): Releasing backup interface veth203 [ 2911.762684] bond0 (unregistering): Releasing backup interface veth199 [ 2911.779192] bond0 (unregistering): Releasing backup interface veth195 [ 2911.801032] bond0 (unregistering): Releasing backup interface veth191 [ 2911.813891] Bluetooth: hci3 command 0x0419 tx timeout [ 2911.822216] bond0 (unregistering): Releasing backup interface veth187 [ 2911.840934] bond0 (unregistering): Releasing backup interface veth181 [ 2911.867423] bond0 (unregistering): Releasing backup interface veth171 [ 2911.886073] bond0 (unregistering): Releasing backup interface veth167 [ 2911.910957] bond0 (unregistering): Releasing backup interface veth159 [ 2911.943748] bond0 (unregistering): Releasing backup interface veth143 [ 2911.965331] bond0 (unregistering): Releasing backup interface veth139 [ 2911.991294] bond0 (unregistering): Releasing backup interface veth131 [ 2912.005095] bond0 (unregistering): Releasing backup interface veth129 [ 2912.018654] bond0 (unregistering): Releasing backup interface veth127 [ 2912.042672] bond0 (unregistering): Releasing backup interface veth115 [ 2912.055689] bond0 (unregistering): Releasing backup interface veth113 [ 2912.092052] bond0 (unregistering): Releasing backup interface veth97 [ 2912.115283] bond0 (unregistering): Releasing backup interface veth89 [ 2912.139353] bond0 (unregistering): Releasing backup interface veth81 [ 2912.156959] bond0 (unregistering): Releasing backup interface veth77 [ 2912.174846] bond0 (unregistering): Releasing backup interface veth71 [ 2912.191861] bond0 (unregistering): Releasing backup interface veth65 [ 2912.210819] bond0 (unregistering): Releasing backup interface veth59 [ 2912.234394] bond0 (unregistering): Releasing backup interface veth53 [ 2912.247574] bond0 (unregistering): Releasing backup interface veth51 [ 2912.282548] bond0 (unregistering): Releasing backup interface veth35 [ 2912.388798] device hsr_slave_1 left promiscuous mode [ 2912.398959] device hsr_slave_0 left promiscuous mode [ 2912.412537] team0 (unregistering): Port device team_slave_1 removed [ 2912.428336] team0 (unregistering): Port device team_slave_0 removed [ 2912.438419] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2912.451285] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2912.484015] bond0 (unregistering): Released all slaves [ 2913.151379] IPVS: ftp: loaded support on port[0] = 21 [ 2913.291520] chnl_net:caif_netlink_parms(): no params data found [ 2913.362305] bridge0: port 1(bridge_slave_0) entered blocking state [ 2913.369127] bridge0: port 1(bridge_slave_0) entered disabled state [ 2913.377716] device bridge_slave_0 entered promiscuous mode [ 2913.386425] bridge0: port 2(bridge_slave_1) entered blocking state [ 2913.393724] bridge0: port 2(bridge_slave_1) entered disabled state [ 2913.401454] device bridge_slave_1 entered promiscuous mode [ 2913.428977] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2913.440032] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2913.468162] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2913.477196] team0: Port device team_slave_0 added [ 2913.484669] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2913.494858] team0: Port device team_slave_1 added [ 2913.518524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2913.525041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2913.551383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2913.564729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2913.572561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2913.600306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2913.611773] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2913.620071] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2913.648023] device hsr_slave_0 entered promiscuous mode [ 2913.654962] device hsr_slave_1 entered promiscuous mode [ 2913.661662] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2913.670198] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2913.769796] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2913.815951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2913.825836] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2913.838209] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2913.845743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2913.855165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2913.866238] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2913.873135] 8021q: adding VLAN 0 to HW filter on device team0 [ 2913.883320] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2913.890866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2913.900367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2913.908775] bridge0: port 1(bridge_slave_0) entered blocking state [ 2913.915393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2913.927861] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2913.935398] Bluetooth: hci3 command 0x0405 tx timeout [ 2913.941273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2913.949306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2913.958043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2913.966602] bridge0: port 2(bridge_slave_1) entered blocking state [ 2913.973054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2913.983896] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2913.991605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2914.006477] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2914.014234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2914.025971] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2914.033788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2914.044923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2914.056134] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2914.067803] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2914.077374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2914.086238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2914.104250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2914.112492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2914.126782] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2914.135188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2914.153498] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2914.165673] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2914.172378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2914.180481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2914.193483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2914.261436] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2914.276177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2914.308347] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2914.318565] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2914.326575] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2914.338695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2914.347749] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2914.355646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2914.365750] device veth0_vlan entered promiscuous mode [ 2914.377029] device veth1_vlan entered promiscuous mode [ 2914.384654] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2914.396360] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2914.412279] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2914.424977] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2914.433878] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2914.441648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2914.453662] device veth0_macvtap entered promiscuous mode [ 2914.459824] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2914.474560] device veth1_macvtap entered promiscuous mode [ 2914.487204] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2914.498293] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2914.509391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2914.519695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2914.529148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2914.540710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2914.550318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2914.560676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2914.570146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2914.580190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2914.590347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2914.600494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2914.611207] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2914.619595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2914.628053] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2914.636967] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2914.645837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2914.659002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2914.669160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2914.678874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2914.689085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2914.698728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2914.708821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2914.718723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2914.728837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2914.738685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2914.748790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2914.759788] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2914.768006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2914.778346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2914.787250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2915.975696] Bluetooth: hci3 command 0x0405 tx timeout 22:34:52 executing program 5: getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=""/140, &(0x7f0000000100)=0x8c) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$pptp(0x18, 0x1, 0x2) fcntl$setstatus(r1, 0x4, 0x40000) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:52 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000810500000000000000000000009c", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3], 0x44}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000)) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 22:34:52 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 22:34:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r3, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 22:34:52 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:34:52 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) dup(r0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x1b8, 0x1b8, 0x2a0, 0x1b8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, &(0x7f0000000100), {[{{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x2, 0x3, 0x4, 0x153, 0x100, 0x1, 0x1}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x4}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x1}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x82b, @ipv4=@broadcast, 0x4e23}}}, {{@uncond, 0x0, 0xb8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x4}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x81, 0x1, @broadcast, 0x4e21}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0x2e0, 0x4, 0x1, 0x1}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x2, 0x0, 0x2, 0x4, 0x2], 0x0, 0x5}, {0xffffffffffffffff, [0x1, 0x1, 0x5, 0x2, 0x0, 0x1], 0x6, 0x4}}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x3, 0xa}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xc}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x28, 0x5}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCGRS485(r4, 0x542e, &(0x7f0000000740)) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KDSETMODE(r6, 0x4b3a, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r7 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r7, 0x89e0, &(0x7f0000000040)={0x3}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r8, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:52 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 22:34:52 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket(0x10, 0x803, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000300)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) setpriority(0x3, r2, 0x2) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = signalfd(r1, &(0x7f0000000000)={[0x5]}, 0x8) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)=0x1) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2916.868756] xt_HL: TTL: invalid or unknown mode 3 [ 2916.880180] xt_HL: TTL: invalid or unknown mode 3 [ 2916.905513] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:34:52 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) 22:34:52 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000)=0x62c, 0x4) 22:34:52 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = getpid() sched_setattr(r1, &(0x7f0000000300)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) process_vm_writev(r1, &(0x7f0000001400)=[{&(0x7f0000000100)=""/125, 0x7d}, {&(0x7f0000000180)=""/233, 0xe9}, {&(0x7f0000000080)=""/7, 0x7}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000280)=""/79, 0x4f}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x6, &(0x7f0000001500)=[{&(0x7f0000001480)=""/79, 0x4f}], 0x1, 0x0) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) pipe(&(0x7f0000001540)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000001680)) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000001580)) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bind$alg(r6, &(0x7f0000001600)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 2917.153259] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:34:52 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x1, 0x101, 0x3, 0x3, 0x7fffffff, 0x1f, 0xde2, 0x8]}) 22:34:52 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2112180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:52 executing program 5: clone(0x20000000a1001180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000100)={0x1, &(0x7f0000000000), &(0x7f0000000080)=[{0x7, 0x3c, 0xffffffd3, &(0x7f0000000040)=""/60}]}) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000000c0)={r5}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x6e12, 0x68ed, 0x0, 0x3f, 0xfffffffd, 0x6, 0x34d2, 0x13, r5}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={r6, 0x3}, 0x8) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r7, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:34:52 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x5, 0x80) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000001100)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000100)=""/4096) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x20201, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000040)) 22:34:52 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(0xffffffffffffffff) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:34:52 executing program 5: clone(0x2000000002200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000140)={0x100, 0x5, &(0x7f0000000000)=[0x6a03, 0x7, 0x8, 0x400, 0x5], &(0x7f0000000040)=[0x400, 0x0, 0x8, 0x3, 0xffffffff], &(0x7f0000000080)=[0x3, 0x1f, 0x9], &(0x7f0000000100)=[0x1f], 0x0, 0x70c5}) 22:34:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001ff) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socket$inet_udp(0x2, 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 22:34:52 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000), 0x8) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000140)='SMC_PNETID\x00') sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x28}}, 0xc813) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4) 22:34:53 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) 22:34:53 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x50000) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r3, &(0x7f0000000000)="9f", 0x1) r4 = add_key$fscrypt_provisioning(&(0x7f0000000080)='fscrypt-provisioning\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000180)={0x1, 0x0, "d9bdf0a5baac260b39a249725ee52507623b8460dccc28d6affa17b77a9b34c93e"}, 0x29, r3) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f00000001c0)={{0x2, 0x0, @descriptor="eca81047f6fed44e"}, 0xb4, r4, [], "bf185c0c257dca8101b036b27f8e3999925a3ab05d69d4ccfb9a0a9b83f7561def4b8ae33125cb6ead0ead5fb623afe6e938d5c96dd85e55fca957acce11733cdc044655030161b37d7b1fe0285cf12957b30286914774874a68a4732e76562e91d3d42701e77fc37485efc0d6298e9acabc5358c1c6837318818a9cc77dc02ea486ffdc48c05c2ccf957ccb9fa5c4a8f4e7812c7a207e2a7f645940249c33ee08855cfb3fdb750ce6e195c5876de7f97be77d63"}) fallocate(r1, 0x0, 0x100, 0x5) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 22:34:53 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x2}}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) ioctl$TUNSETOWNER(r4, 0x400454cc, r6) r7 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$P9_RREADLINK(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="6c013000"/16], 0x10) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000000)={0x0, @bt={0x9, 0x9, 0x0, 0x2, 0x20, 0x7ff, 0x2, 0x200, 0x6, 0x6, 0x6, 0x2, 0x1, 0x7, 0x5, 0x20, {0x8, 0x9}, 0x0, 0x2}}) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r8, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:53 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000080)=0x1) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x204242) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000100)={0x21, 0x9, 0x4, 0x4000, 0x61, {0x77359400}, {0x2a6d46c36ecee960, 0xc, 0xf6, 0x80, 0x2, 0x7}, 0x1ff, 0x1, @planes=&(0x7f0000000040)={0x40, 0xdc, @userptr=0xd, 0x202}, 0x57, 0x0, r5}) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:53 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f0000000000)={0xdeda, "af2ea2d31c3bb1f02889e4139d547530ecadcde9086fc66cd7b8d6680c142c13", 0x2, 0x101, 0xa49, 0x0, 0x4}) [ 2917.983454] Bluetooth: hci4 command 0x0409 tx timeout 22:34:53 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) 22:34:53 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:34:53 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="87604c93e0169748ed35a9f7f2edefd0", 0x10) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2920.063210] Bluetooth: hci4 command 0x041b tx timeout 22:34:55 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(0xffffffffffffffff) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:34:55 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) dup(r0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x1b8, 0x1b8, 0x2a0, 0x1b8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, &(0x7f0000000100), {[{{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x2, 0x3, 0x4, 0x153, 0x100, 0x1, 0x1}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x4}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x1}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x82b, @ipv4=@broadcast, 0x4e23}}}, {{@uncond, 0x0, 0xb8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x4}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x81, 0x1, @broadcast, 0x4e21}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0x2e0, 0x4, 0x1, 0x1}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x2, 0x0, 0x2, 0x4, 0x2], 0x0, 0x5}, {0xffffffffffffffff, [0x1, 0x1, 0x5, 0x2, 0x0, 0x1], 0x6, 0x4}}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x3, 0xa}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xc}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x28, 0x5}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCGRS485(r4, 0x542e, &(0x7f0000000740)) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KDSETMODE(r6, 0x4b3a, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r7 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r7, 0x89e0, &(0x7f0000000040)={0x3}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r8, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:55 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000000)={0x1000, 0x3, 0x1000}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:55 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x1f, 0x4, &(0x7f0000001400)=[{&(0x7f0000000100)="638a4a5fca1d846eb68771534378227bf598a0f039ccd3ca0a1c39ce9e45a075707764db0e822a6dae2fef78138fb577b69eddc36c97c68360d6e4fb7e4ec5c671b91abf834fbdc63e23c3b65c711520b70838275570620ad115e07fb76651287b6e1b0b869713e9ab5cc4d584f6c451e1f74b17df13f4a67c6acd87703358eaed7ae10fbe2dcd4cab123567c78a16827c1f45a288709dcab2707bb1e724e786abee06d290753b8e2b43e6796ff81e2741e00470de089330a20705c02716924b7c03f49a3dfd5e069892d54c2f3f13e55295cf57037fa1015d04079f773bcee1a5e2160d808e4f4dec", 0xe9, 0x7f}, {&(0x7f0000000200)="a6ff9a2333c512d2a2264435c7a67a7fe719a1acbba1252356d68879c81c933fb93eb5c7d42e1296e9184944677fb395e73a8c00712c4ba5e3fd6ad44f5ca16c26279caf1958d849b61ea8ccdca5cd7149e92c6f3e009d42ff59da237bf1ab027f2fd083b8c572b8cdf839924ea585ba6529ab14664ce5ab2742f24ab77688c4804cbc439600e8af865f8d14d86b9bcb354ce6729d2a084d68382b90a049af50521c2ca208cd094bf383a0dad70328bdbf0d7d8d0b973128d1fda9f89f357d32ae5344f9bcd9b2679f", 0xc9, 0x10000}, {&(0x7f0000000300)="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", 0x1000, 0x2}, {&(0x7f0000001300)="5c91d2cf12eb340b5311874e9a9dbf2529bc9fca38b19506c10f3f8bb4137d0ea0346f94dba47f92fa077a90d5d00da53a9daa094fd1e0e345462f9d41dffab27188d7744867df3b1dba28d720e5f4f0c5d8bae425c2d1fbe3e862318688ae58ecd5c4a21775cd4e697ca45db7d8dc1f2147584008e464b201e7ff1ae001cc60ef588709c63392f67b0505a18d72456816cc2f6700b669cceabc02b0182df0831b5818b142b9d5a5cdb78260cfcf741603bd8913caf346c980447282a54d9eb3a7f65bbbe8888ec5a85faff0aee1125fadd302ae5553dc1df1f3f8c56c2d0eda5ce8bf787719509343", 0xe9, 0x4}], 0x1000, &(0x7f0000001480)={[{@mtpt='mtpt'}, {@grpid='grpid'}, {@logbufs={'logbufs', 0x3d, 0x3}}, {@nouuid='nouuid'}, {@uquota='uquota'}, {@swalloc='swalloc'}, {@ikeep='ikeep'}, {@wsync='wsync'}, {@pqnoenforce='pqnoenforce'}], [{@smackfsfloor={'smackfsfloor'}}, {@fowner_gt={'fowner>', r2}}, {@smackfshat={'smackfshat', 0x3d, '&/#%'}}]}) 22:34:55 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0xe) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r7, @ANYBLOB="000009000000000019144a0c62b7dff704657468"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000810500000000000000000000009c", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @dev, @remote}, &(0x7f00000001c0)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000200)={0x88c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x150, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0xa2, 0x5, "1bdaf585e9378694ab1dcc8c0b94382e27c440bec44c7b5ab06604dd03ed3ba7ba846279948461fce04f82b65c37458593c31f1dd49df5a6a432c7934989437e3ce03b1b92fca658689bb73f138128d5f4fe3536bdf9a2d2fc580aad8020c593447dbae87be7f3b7d1f39f6d52ba701f3e5144be6d691fd167334bca0b119bc54a2cbc24f35e9676a5ed51c9989d8d353d99b61fb819170186ca7f2d9288"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x3d, 0x5, "75327457d07c3aec0a1ddb17b2d14e1a5fc5483e263e3addbcf42c962dbe064b338b6217cfa9e1e5c2657d87481a60a3d4d50113fc624f0ee5"}, @ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x1a0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x148, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '-})#+#+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1dca0}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%*.\\\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '}&!)]\x00)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xef92}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x35}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4f7f}, @ETHTOOL_A_BITSET_MASK={0x3c, 0x5, "c090ca909968c040035156ef2f09be0de4aebf25aea3dcd765af732d1e30c6dee9b49a9066f1b6e216aba9bee19f3f963f9f278247e01b49"}]}, @ETHTOOL_A_FEATURES_WANTED={0x2b8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x16, 0x5, "ddc84e896d44937753560a2794840321b3bd"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0xc4, 0x5, "3b723bc4439525d4aed8b040c820c2398d86ac54c27d6a086b243d4acf780461b3c3c55efdf24e63fb0269e2fea209c3e898c225c5f15341e2450a70617228a8fdb1484e43314e2b159e578d32a0fc17704aae949a7a6f16bc23fa6045a575582c5182d1b37b9c8b3140d9e0db75f8ea448faa488b9d2c5718bdd1efd044aae45079dff60b3c42bb2926beb245566c28f793cb1397034d422ed1a12f1cabc1bbfcc17bebd0844dd81f9a46e8dd38ef4b2f586e75ab2ff2d6986e09da7aa7737b"}, @ETHTOOL_A_BITSET_MASK={0x84, 0x5, "80c6a6e38c701ca930422a6f50d3493fac674759c82e380cf57464338e5c26081159c28c90b064113f049b8783fec89f4a5ef176161f782699de701a55cfcb6f97057e5fde5bb6fe19f1a7121fed9031820aa1930c8adf9c2bf393b13ffce048d0656e60e53ca24b2ab6a2e038e81e0d30acb0e7679dcdd446b8bd7ca209563e"}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9c45}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xb7, 0x5, "7d2e2f3ae5fadcb321b8620b12e236b123c3e913a34adbeaa2919c42df9f84863f1c3810b6525132e5de4fc9b15b946ad500efc9d7860dccf3cf60775f0188cc4b9d9412d164b23f635b647812787d213cf4092cc12a4561d137e6761956e71e9e759a56269b38872e6869dbd5e0ba33b947a768af08bce23bac4073c023bb78887ac0a66dde73b13f71bcb31ed52c905b641e4487abfb6a3c0ffe579ea6344320fa4b87162b4f5f9590e5458353a0b314b684"}]}, @ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x1a0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xc, 0x4, "2f4932061687f548"}, @ETHTOOL_A_BITSET_VALUE={0x82, 0x4, "f5a55a87a4cce8f19fee6957661539e45343bdf367874517c4c8310ffe4f76a768531d45a18fc240382512d3b0b2ef040606c89c6788040ba141c23a5489246b16755a24d7818a992e70d369ff1c5037414c564a04bd76f948d44f20b8169f082db0578dfcc72739df96b2e2fc1a78215db47fe8dfed2c9b506510f15050"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x91, 0x5, "d0d56fc97fac2f0f22ae7e41fdf62bc08631b010f9577e957eb41dd8a656815c91cacc3e7a25b75d0d9e0f79521e4e47c452966a348f17520cfd930c221c239643b8b7f4162a5c4b405dd6407d0408a09ff2fd1a0908416bffbed972693865782640e0b2b4e053df0af2f4ada4edd2bf1b09c7b5ab49461081f68d3df2229fcd8c1d82efe3ea5a213d656d4b70"}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '}^/-v\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x88c}}, 0x4800) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 22:34:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:34:55 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000000)={0x2f}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x20043, 0x0) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2920.638657] xt_HL: TTL: invalid or unknown mode 3 [ 2920.645269] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 22:34:56 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$sock(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000040)="13f9740d74", 0x5}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="8f95ae7fbf700f8cb6f78c0b5f81542437507ba9d9656b137ef9c0736d6adc73ba4d53abbc89e7391e79736093f8accfb2cea4e705933780bcc0a89487b3393e882b21f8ce66c930be345d10ba4e4734ddcd2b135cc90428324ab4e491982084fedf49d4254e22a340cbf9ad65f9166657acfd3ca81f844fe3dc7d751e13c5eed725c70862d60a10c87cd7ed67", 0x8d}, {&(0x7f00000011c0)="8cc7b7b1cbfb8dbe0317164ff72813e8f195c3d1f02c0f10b529c7afe1ff05af901ac377dd413bf3a6042b8de52640c70b13dccabb54a93232dc8c0e2a247eeebfa0400bc6f54254af2186a8d44835c0fa7d5334e2bfbb7ca747607c967917452250eb13bb0d3af798bfbc42e268913f2de495e965e48942854433a4ab1e159c1b6c9746fa99bed0855240ef936e372b1be3a75ccab45d1c4f649d53b02c0cd12f284b8fe0d242b58c5a74b6d7060414c28ae94fe19c31138465d2", 0xbb}, {&(0x7f0000001280)="bcfeeb32e42f8aba9e150a9e769b65278df19787e994f0626e0fb6963276562de22c864d2d0d2df7aef89fad4befcee2e034b8ec66bf63c93a1f1a05c68ee0ee1f734e118cfa7a867ae11955503d430cd76b5e5ce1bcad12f992ee709243d3486e8b7d089f1b7e51360af614aa505dcb2f4577bd1b7caa27750cbfbbca13a765e9c78dd5a1c74c3a", 0x88}, {&(0x7f0000001340)="5968d62e2b485eb9c06571901cd7ed6e87d1bbadec0df7d3036e51db215b6467a400bb979176b97a98f76daf68287c53d3d46ea546015bb8da8f76bb6d5f726f3e943d6da2e3da63", 0x48}, {&(0x7f00000013c0)="e54e98b081c2ab2c9137c1e2a89ca5f36b9fb2a4f03a7b7944e660497679f5dd6de247ddf88af9f3ce8918912282675ba41ef218ec29651ffee0164c9499b2a4a09a46540c97aad61dba4cc4421331c3fa5b76ec0876099fe133a09d7ad9f8ea961430cc72130edee77bb193035dd36b529a49f7e0c3994e421a2da89f6f095a6044b63916", 0x85}, {&(0x7f0000000080)="8c8b40b4388a703d85b13b", 0xb}], 0x8, &(0x7f0000001500)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0xd4bd}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffe}}], 0x60}, 0x80) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x102, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000015c0)) connect$bt_sco(r1, &(0x7f00000000c0), 0x8) [ 2920.764141] print_req_error: I/O error, dev loop5, sector 0 22:34:56 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) dup(r0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x1b8, 0x1b8, 0x2a0, 0x1b8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, &(0x7f0000000100), {[{{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x2, 0x3, 0x4, 0x153, 0x100, 0x1, 0x1}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x4}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x1}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x82b, @ipv4=@broadcast, 0x4e23}}}, {{@uncond, 0x0, 0xb8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x4}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x81, 0x1, @broadcast, 0x4e21}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0x2e0, 0x4, 0x1, 0x1}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x2, 0x0, 0x2, 0x4, 0x2], 0x0, 0x5}, {0xffffffffffffffff, [0x1, 0x1, 0x5, 0x2, 0x0, 0x1], 0x6, 0x4}}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x3, 0xa}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xc}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x28, 0x5}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCGRS485(r4, 0x542e, &(0x7f0000000740)) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KDSETMODE(r6, 0x4b3a, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r7 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r7, 0x89e0, &(0x7f0000000040)={0x3}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r8, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2920.805869] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 22:34:56 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000000)={0x2, 0x7, 0x0, r2}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 22:34:56 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x101000, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) [ 2920.945506] xt_HL: TTL: invalid or unknown mode 3 22:34:56 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={r4}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={r4, 0x5090, 0x6, [0x9, 0xfff8, 0x3, 0x42, 0x4, 0x1ff]}, 0x14) [ 2922.143171] Bluetooth: hci4 command 0x040f tx timeout 22:34:58 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(0xffffffffffffffff) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:34:58 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) dup(r0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x1b8, 0x1b8, 0x2a0, 0x1b8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, &(0x7f0000000100), {[{{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x2, 0x3, 0x4, 0x153, 0x100, 0x1, 0x1}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x4}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x1}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x82b, @ipv4=@broadcast, 0x4e23}}}, {{@uncond, 0x0, 0xb8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x4}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x81, 0x1, @broadcast, 0x4e21}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0x2e0, 0x4, 0x1, 0x1}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x2, 0x0, 0x2, 0x4, 0x2], 0x0, 0x5}, {0xffffffffffffffff, [0x1, 0x1, 0x5, 0x2, 0x0, 0x1], 0x6, 0x4}}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x3, 0xa}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xc}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x28, 0x5}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCGRS485(r4, 0x542e, &(0x7f0000000740)) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KDSETMODE(r6, 0x4b3a, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r7 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r7, 0x89e0, &(0x7f0000000040)={0x3}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r8, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:58 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c, 0x40c00) 22:34:58 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x0, 0x1, 0xff, 0x4, 0xba3a, 0x8}, &(0x7f0000000080)=0x20) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 22:34:58 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:34:58 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x3f, 0x101, 0x24, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x7, 0xb3, 0x3}}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x17, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:58 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) [ 2923.693272] xt_HL: TTL: invalid or unknown mode 3 22:34:58 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000042010100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:34:59 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:34:59 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x408040, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x101, 0x0, 0x0, {0xc, 0x0, 0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x20080884}, 0xd0) 22:34:59 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x80000) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000100), 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r3}, 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r3, 0x101}, &(0x7f0000000140)=0x8) 22:34:59 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000000)={0x5, "e4b8becd5a5e7abf82b08fe642bce4a17abc8f2b303fa20a5381f4710842f669", 0x3, 0x1}) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2924.212595] Bluetooth: hci4 command 0x0419 tx timeout [ 2926.292437] Bluetooth: hci4 command 0x0405 tx timeout 22:35:01 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(0x0, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:35:01 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x408040, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x101, 0x0, 0x0, {0xc, 0x0, 0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x20080884}, 0xd0) 22:35:01 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4200, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={r2}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={r2, 0xff, 0x8001}, &(0x7f0000000180)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x21080, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 22:35:01 executing program 5: r0 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r3}, 0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r3, 0x401}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000280)={r4, 0x8, 0x0, 0x2}, 0x10) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvfrom$llc(r5, &(0x7f0000000000)=""/182, 0xb6, 0x40, &(0x7f0000000100)={0x1a, 0x30f, 0x8b, 0x3f, 0x8, 0x60, @remote}, 0x10) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f00000000c0), 0x8) socket$bt_hidp(0x1f, 0x3, 0x6) 22:35:01 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000200)={0x9f0000, 0xffffffff, 0xa5, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x990a7a, 0x5, [], @p_u32=&(0x7f0000000080)=0xaf15}}) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x501900, 0x21) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000100)={0x5, 0x7, 0x7ff, 0x0, 0x12}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0543e38d35cc9fe6ede56dd3f24aa932be4ab97367c85bd6518a6b007695e0948e1b7e55722fb3b5fa7e3c8ce31cedb323ac36d1c2109b2b490db405e504914f81b151feed447be11c171a118a4547372dc59d85e1ac0ee1aaa57fa079e8f14a88c33c60921c34130ef7d27e1e0b9eab49983cea60c380429df009adc17994aad2f8dca3c809e7a574a908d05be34a8472fd26aa8bb64f2069b8c12488b1d6baab33353932093dc7d36b35f4c792abdecdf30f736406807c3c55ed95bd072e27326d17b1e3a7e9862afc47d72848d9ed47664903e0953270e4da"], 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x884) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) connect$bt_sco(r6, &(0x7f00000000c0)={0x1f, @none}, 0x8) creat(&(0x7f0000000000)='./file0\x00', 0x449051a89341a4f4) 22:35:01 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:01 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x408040, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x101, 0x0, 0x0, {0xc, 0x0, 0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x20080884}, 0xd0) 22:35:01 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:02 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) 22:35:02 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:02 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(0x0, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:35:02 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_SYNTH_INFO(r2, 0xc08c5102, &(0x7f0000000000)={"0854ea130043733d94a9b1f2b0b571f9b6ee736f2c5465ec88c1e939fe44", 0x2, 0x2, 0x0, 0x2, 0x10000, 0x7, 0xfd, 0x4, [0x0, 0x2, 0x7, 0x6, 0xffff, 0x7, 0x2, 0x1000, 0x9, 0x7, 0x0, 0x8, 0x80000001, 0x1, 0xff, 0x2, 0x7a299c5f, 0x9, 0x5]}) 22:35:02 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 22:35:02 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x80a, 0x0) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000280)=0x401, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000707800000f70000000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000810500000000008000000000009c", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r9], 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x20000011) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:02 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_SYNTH_INFO(r2, 0xc08c5102, &(0x7f0000000000)={"0854ea130043733d94a9b1f2b0b571f9b6ee736f2c5465ec88c1e939fe44", 0x2, 0x2, 0x0, 0x2, 0x10000, 0x7, 0xfd, 0x4, [0x0, 0x2, 0x7, 0x6, 0xffff, 0x7, 0x2, 0x1000, 0x9, 0x7, 0x0, 0x8, 0x80000001, 0x1, 0xff, 0x2, 0x7a299c5f, 0x9, 0x5]}) 22:35:02 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(0x0, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:35:02 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x202000) 22:35:02 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000810500000000000000000000009c", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000240)='vxcan1\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2927.636426] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 22:35:02 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200043, 0x0) r3 = socket(0x11, 0x80a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x28, 0x0, 0x1, 0x0, 0x0, {0x2}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2008801}, 0x4040) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000810500000000000000000000009c", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r7], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'caif0\x00'}) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 22:35:02 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_SYNTH_INFO(r2, 0xc08c5102, &(0x7f0000000000)={"0854ea130043733d94a9b1f2b0b571f9b6ee736f2c5465ec88c1e939fe44", 0x2, 0x2, 0x0, 0x2, 0x10000, 0x7, 0xfd, 0x4, [0x0, 0x2, 0x7, 0x6, 0xffff, 0x7, 0x2, 0x1000, 0x9, 0x7, 0x0, 0x8, 0x80000001, 0x1, 0xff, 0x2, 0x7a299c5f, 0x9, 0x5]}) 22:35:02 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:03 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000100)={{0x1, 0x6179c6784757f28b, 0x0, 0x340, 'syz1\x00', 0xf556}, 0x1, [0x85, 0x6, 0x9, 0x7fffffff, 0x0, 0x9, 0x200, 0x5, 0x1, 0x690, 0x8001, 0x9, 0x80000001, 0x10001, 0x0, 0x9, 0xffffffffffffffff, 0x1000, 0x6, 0x0, 0x9, 0x800, 0x0, 0x0, 0x100000001, 0x8000, 0xc0, 0xfc, 0x31f, 0x0, 0x994, 0x8, 0x1, 0x2, 0x101, 0x80000001, 0x6, 0x3ff, 0x4, 0xffff, 0x5, 0x0, 0x5, 0xe5d, 0x1f, 0x0, 0x6, 0x7, 0x8, 0xeb, 0x7fffffff, 0x8001, 0x1e980, 0x0, 0xffffffffffffffba, 0x2, 0xfff, 0x0, 0x3, 0x2, 0x1, 0xfffffffffffffffd, 0x7f6, 0x0, 0x1, 0x64, 0x4, 0x6, 0x1ff, 0x6, 0x10001, 0x7, 0x8000, 0xa406, 0x8001, 0x7, 0x5, 0x6, 0x1, 0x81, 0x4, 0x97, 0x3, 0x7, 0x6b, 0x8, 0x0, 0x4da2be47, 0x13, 0x7, 0x80000001, 0x1, 0x3d, 0x3, 0x1, 0x10001, 0x81, 0x4, 0x3, 0xfffffffffffff7fc, 0x4, 0x8, 0x9a, 0x3ff, 0x8, 0x7, 0x1, 0x3ff, 0x7ff, 0x81, 0x4, 0x8e, 0x1000, 0x0, 0x1, 0x9, 0xb61, 0x7, 0x4, 0x100, 0xcec, 0x9, 0x4, 0xfff, 0x7, 0x7d49, 0x5, 0x1]}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2927.757395] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2927.835647] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:35:03 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:35:03 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x20000000f02b6900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sigaltstack(&(0x7f00003ff000/0xc00000)=nil, &(0x7f0000000040)) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) 22:35:03 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x7, 0xfffffffffffffffe}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={[], 0x10}}, 0x3683159de50fb623) 22:35:03 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 2928.009757] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:35:03 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup(r1) 22:35:03 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000180)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) 22:35:03 executing program 5: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7146, 0x8400) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x6, [0x1f, 0x9, 0x984, 0x1, 0x9, 0xcc44]}, &(0x7f0000000080)=0x10) 22:35:03 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) socket$inet_udp(0x2, 0x2, 0x0) 22:35:03 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:03 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x4, 0x401, 0x20, 0xffffff7f, 0x2, "f865bfeb115dc22b624a77c9b35f788644a69a"}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) [ 2928.372325] Bluetooth: hci4 command 0x0405 tx timeout 22:35:03 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:03 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:03 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket(0x10, 0x803, 0x9) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x500) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={[], 0x12}}, 0x8) 22:35:03 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x12c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x40, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}, @CTA_EXPECT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, [], 0x15}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20008040}, 0x40090) 22:35:03 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) getsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000000)={@dev, @broadcast, @empty}, &(0x7f0000000100)=0xc) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 22:35:03 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:35:03 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:03 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/dlm-monitor\x00', 0x4f4b61f3066c2dac, 0x0) sendto$rxrpc(r1, &(0x7f0000001300)="5654bf9e6c087782bcd9ae3848bb21b45a589a1a4b39f064e43d9fefcac800ab7344dad072688396bc9a4ffda6198c4ab7ccbef88710aa73070c93c749ba323b2322e01170bac56fd0b4ae8d9a9dc6e107743724c0a8", 0x56, 0x4000, &(0x7f0000001380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x40, @empty, 0x4}}, 0x24) 22:35:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:04 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:04 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:04 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:04 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r2 = accept4$rose(r1, &(0x7f0000000040)=@short={0xb, @dev, @netrom, 0x1, @netrom}, &(0x7f0000000080)=0x1c, 0x80400) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000100)={'ip6gre0\x00', 0x6}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$cgroup_freezer_state(r4, &(0x7f0000000000)='freezer.state\x00', 0x2, 0x0) 22:35:04 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket(0x11, 0x80a, 0x0) restart_syscall() ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/mice\x00', 0x103800) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:04 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r3, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 22:35:04 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:04 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={[], 0x11}}, 0xff10) 22:35:04 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:35:04 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) getsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$l2tp(r6, &(0x7f0000000200)="a436ed67f4af619b79d9edcede763479b467e12aad696555f860cde4fac2f8ed8281e2d2b582e92b03b9aca15ef9647b1d95de0d816e7ce870d7eaed1e4d1714980c78902fa8a8ea846f9d", 0x4b, 0x4081, &(0x7f0000000280)={0x2, 0x0, @multicast1, 0x2}, 0x10) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r6, @ANYRES16=r4, @ANYBLOB="00012cbd7000fddbdf25000000000c00160007000000000000000600030004000000"], 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0xc1) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:04 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r5, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r5, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x28}}, 0x8001) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 22:35:04 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:04 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:04 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:04 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) 22:35:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000080)={0x2f}) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x119180, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0xfffffffffffffffe) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x381, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 22:35:04 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={[], 0x12}}, 0x8) 22:35:05 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r3, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 22:35:05 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:05 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x200000) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000000)={0x1ff, 0x1, 0x3, 0x3c6, 0xa33, 0x3}) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:05 executing program 5: clone(0x2000000020173c80, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) 22:35:05 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_int(r2, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x8) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000240)={0x3c8, r4, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x11}, @TIPC_NLA_NODE_ID={0x3f, 0x3, "a88f928ff8d1ccba41de9744026013ff5621b78ec257594623777998a1073aa8a1bcb7ca31feeddf909d51c6b343002a3ab7660bda74a1e6a467bb"}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1c0000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x170, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "69b53fc4d8c0503fc9d43fd6c082f5eea7fa215c38c1cdad92f0b0cb0c85d2d3ec81b0fd"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0x102, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaaaf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x112}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6e}]}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc350}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x940}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffd5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}]}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000080)={0x7, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 22:35:05 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 22:35:05 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r3, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 22:35:05 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 22:35:05 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000810500000000000000000000009c", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r4], 0x44}}, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{}], 0xa, "f58a97faaa4bb82bb76c0a908257d0f2f76c68db0c3036814cad2d4d32576b39a815f8a39ea0c89569568017ee313f032e"}, 0x3d) 22:35:05 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x470403, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) read$snddsp(r0, &(0x7f0000000040)=""/17, 0x11) clone(0x80000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:05 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 22:35:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:05 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x442, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000810500000000000000000000009c", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r9], 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@dellink={0x9c, 0x11, 0x10, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, 0x6004, 0x36089}, [@IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'hsr0\x00'}, {0x14, 0x35, 'ip_vti0\x00'}, {0x14, 0x35, 'syzkaller0\x00'}, {0x14, 0x35, 'vxcan1\x00'}, {0x14, 0x35, 'vlan0\x00'}, {0x14, 0x35, 'geneve0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8014}, 0x40) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) [ 2930.325734] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 22:35:05 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 22:35:05 executing program 5: clone(0x2000000070ad0340, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:05 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x20000, 0x0) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x1, 0x2, 0x0, 0x38, 0x8, "db0612bd81c24b49f581d65039b333f13f6d37f709080afe6cad1ea3e93b65351e1c00a9674e90743926d8e59f1214c0ab0c0e9c7d93c9407184820bf1eed3", 0x2f}, 0x60) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) connect$bt_sco(r2, &(0x7f0000000040)={0x1f, @none}, 0x8) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2930.472043] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2930.485631] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2930.508823] ptrace attach of "/root/syz-executor.4"[8294] was attempted by "/root/syz-executor.4"[8297] 22:35:05 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r3, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) [ 2930.763061] IPv6: ADDRCONF(NETDEV_UP): vlan194: link is not ready [ 2930.789991] bond0: Enslaving veth657 as an active interface with an up link [ 2930.823604] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2931.651985] Bluetooth: hci4 command 0x0405 tx timeout 22:35:08 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 22:35:08 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sysinfo(&(0x7f0000000000)=""/31) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:08 executing program 5: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="9cda336d6c9b36b0423eb62cbc113dab33ac3dd395953e6846ac8ccc49f7d7e2dd3430744d81fc398f", 0x29) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = fanotify_init(0x2, 0x400) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$nfc_llcp(r5, 0x118, 0x2, &(0x7f0000000340)=""/239, 0xffffff31) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000180)={[], 0x9, 0x1, 0x3, 0x0, 0x4, 0x2, 0x1000, [], 0x401}) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)=0x1) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 22:35:08 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) accept$nfc_llcp(r1, &(0x7f0000000000), &(0x7f0000000080)=0x60) 22:35:08 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) accept$nfc_llcp(r1, &(0x7f0000000000), &(0x7f0000000080)=0x60) 22:35:08 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1404, 0x300, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x8004) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x5000, &(0x7f0000000140), 0x8, r4, 0xc}) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:08 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) accept$nfc_llcp(r1, &(0x7f0000000000), &(0x7f0000000080)=0x60) [ 2933.229098] ptrace attach of "/root/syz-executor.4"[8373] was attempted by "/root/syz-executor.4"[8375] 22:35:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(r0, &(0x7f0000000040)="0f42", 0x2) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x28, &(0x7f0000000240)}, 0x10) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="6465d9d00f20d835200000000f22d866baa10066ed470f0766ba6100ed660f3880bb8d36000064f04381860300000032757a69430fc76e090f01be00980000c744240004010000c7442402c7880000ff1c24", 0x52}], 0x1, 0x0, &(0x7f0000000200)=[@cr0={0x0, 0x20000008}, @vmwrite={0x8, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100000001}], 0x2) 22:35:08 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$bt_sco(r0, &(0x7f0000000040), 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f0000000000)) 22:35:08 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:35:11 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 22:35:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000140)=""/158, 0x9e, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='geneve0\x00', 0x10) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f00000038c0), 0x4000000000000a8, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') pipe2(0x0, 0x81000) r2 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x6000446) syz_open_procfs(0x0, 0x0) dup2(r2, 0xffffffffffffffff) r3 = getpid() sched_setattr(r3, &(0x7f0000000300)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfff9}, 0x1, 0xe9, 0xfff, 0x8, 0x0, r3, 0x100}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:11 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0x3, 0x1}, 0x1ff, 0x4, &(0x7f0000000080)={0x0, 0x15, 0x40, 0x91, 0x678}, 0x8, 0xee, 0x9, 0x0, 0x6, 0x7, &(0x7f00000000c0)="5ab455eb3dab0d0393410a01054a00d46db7e7164d27b694a3c3358dfeb478b40edd850f108e6f6b122eb2494a426bb1efafb970bcdb744833c17788c6cdf036b6af18e1a271387aa84aceca3e0a2f54a89722e02661e38f2c3790380c1ba7c0db9cce91866f6295431f52b402e4b9ee29df213e33a15bfe84d73c7501f75e31fb336e20d60ff8b6a8a349d5c932efb71b04192444803b8e569f292431c6085b0ec9d4910a81"}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x4000}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000000)={0x1f, @fixed={[], 0x10}}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) 22:35:11 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:11 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendfile(r0, r1, &(0x7f0000000000)=0x6, 0x80000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 22:35:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) [ 2936.204313] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:35:11 executing program 5: r0 = socket(0x0, 0x803, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000340)={{0x8a, 0x3}, 'port1\x00', 0x28, 0x80040, 0x1, 0xffffffff, 0x5, 0x1fffe, 0xf7, 0x0, 0x6, 0x1}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) accept4$alg(r4, 0x0, 0x0, 0x800) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000000)) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'bond0\x00', r3}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=""/73, &(0x7f00000000c0)=0x49) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_CROP(r6, 0xc038563c, &(0x7f0000000140)={0x1, 0x0, {0x800, 0x7, 0xff, 0x2}}) [ 2936.362439] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:35:11 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_ro(r1, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) write(r2, &(0x7f0000000240)="0293f7c9ef876e6717bd39c601b8ef1c7b86ff030000ccc31af736e9027500433a190284d38c9f9a93e755590e43166a9706710e0092b517c7e3816aef47acb24ecb02000000fdfa623c2fd5578331f2918939561f985f6a2b9cbced70b5968b8d6f91f6d3a172d019373e5ef08dc5140538b2d3281cb0061dd23fe482805415", 0xfffffffffffffe3e) r5 = dup(0xffffffffffffffff) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) [ 2936.604153] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:35:11 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000810500000000000000000000009c", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) [ 2936.735388] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:35:12 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) listen(r0, 0x7ff) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 22:35:12 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x20000000061b3500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) connect$bt_sco(r3, &(0x7f0000000140)={0x1f, @fixed={[], 0x10}}, 0x8) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="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"], 0x48}}, 0x0) r5 = accept(r1, &(0x7f0000000000)=@rc={0x1f, @fixed}, &(0x7f0000000080)=0x80) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100)=0x400) [ 2936.791092] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2936.931654] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2937.018654] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2938.212135] Bluetooth: hci4 command 0x0407 tx timeout 22:35:14 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) 22:35:14 executing program 5: clone(0xa220c200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:14 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0x3, 0x1}, 0x1ff, 0x4, &(0x7f0000000080)={0x0, 0x15, 0x40, 0x91, 0x678}, 0x8, 0xee, 0x9, 0x0, 0x6, 0x7, &(0x7f00000000c0)="5ab455eb3dab0d0393410a01054a00d46db7e7164d27b694a3c3358dfeb478b40edd850f108e6f6b122eb2494a426bb1efafb970bcdb744833c17788c6cdf036b6af18e1a271387aa84aceca3e0a2f54a89722e02661e38f2c3790380c1ba7c0db9cce91866f6295431f52b402e4b9ee29df213e33a15bfe84d73c7501f75e31fb336e20d60ff8b6a8a349d5c932efb71b04192444803b8e569f292431c6085b0ec9d4910a81"}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x4000}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000000)={0x1f, @fixed={[], 0x10}}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) 22:35:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_ro(r1, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 22:35:14 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[], 0x48}}, 0x20040004) bind(r0, &(0x7f0000000000)=@caif=@dbg={0x25, 0x9c, 0xfa}, 0x80) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:14 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:14 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:14 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) r1 = socket(0xf, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r2 = dup(r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)=0xff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xffbffffffffffffc) 22:35:14 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:14 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r2, 0x1}, 0x28}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x1000}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 22:35:14 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000079a9700bff09070c6dfc7f73602f8584f497066d3238b79443f9c3a24136efed185a5a1c037a63affa126fb9b2082189d5a4a94272117f30e3fb78dad760efc146e9f9d8b8dbd829318b8fe4b35e06f2d63cb2a92b7eb4f537f67c282db415d2ed926e64b1cd54ae03823ca9adb294cf8b9a07d0541848f9a3acb2f5e084bb60057b75beb5406c34786613159eaabf0119b305ebfc2957730a1bf564b9fb0dc57200"/177, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r3}, 0x8) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000240)={0x3, 0x0, [0x1ff, 0x4, 0x7fff, 0x40, 0x7fff, 0x0, 0x0, 0xe16f]}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={r3, 0x73e7, 0x30, 0x81, 0x1}, &(0x7f0000000080)=0x18) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00'}) connect$bt_sco(r5, &(0x7f0000000000)={0x1f, @none}, 0x8) 22:35:14 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 22:35:17 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) 22:35:17 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup(r1) getsockopt$inet_buf(r1, 0x0, 0x3d, &(0x7f0000000180)=""/153, &(0x7f0000000000)=0x99) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) dup(r7) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000080)={0x0, r7, 0x1, 0x9, 0xffff, 0x4}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 22:35:17 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0x3, 0x1}, 0x1ff, 0x4, &(0x7f0000000080)={0x0, 0x15, 0x40, 0x91, 0x678}, 0x8, 0xee, 0x9, 0x0, 0x6, 0x7, &(0x7f00000000c0)="5ab455eb3dab0d0393410a01054a00d46db7e7164d27b694a3c3358dfeb478b40edd850f108e6f6b122eb2494a426bb1efafb970bcdb744833c17788c6cdf036b6af18e1a271387aa84aceca3e0a2f54a89722e02661e38f2c3790380c1ba7c0db9cce91866f6295431f52b402e4b9ee29df213e33a15bfe84d73c7501f75e31fb336e20d60ff8b6a8a349d5c932efb71b04192444803b8e569f292431c6085b0ec9d4910a81"}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x4000}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000000)={0x1f, @fixed={[], 0x10}}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) 22:35:17 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x501040, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) 22:35:17 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) 22:35:17 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:17 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_CAPBSET_READ(0x17, 0x9) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x0) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = accept4$nfc_llcp(r1, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x800) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r4, 0x4) keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x3}) [ 2942.257901] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:35:17 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000000)=""/150, 0x96) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000100)) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:17 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) [ 2942.355715] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:35:17 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000)=0xd42, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 22:35:17 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:20 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) tkill(r1, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) 22:35:20 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000080)={0x886, 0x3, 0x29a, 0x40, 0xff, 0x3ff}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 22:35:20 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:20 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000810500000000008000000000009c", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = dup3(0xffffffffffffffff, r2, 0x80000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r7, @ANYBLOB="245d374c67a6e871258df14f70d45109f09a76a8b827b4467203771914ea74b4ed0baae3cdd7a11df93310f57c35d3c9dc2c9334a8f72af1c8cbc1bd4be49ff0037b0e40fcb11000a6b4e192b9f8d36991e57c2c8fd1aa4b778d3fa6f1b77748002d721b3c1f56265481f5e1c717099124913bc1fe421f4d8c144519ac1f05be218b65517daaf3b26785d7f7f753f33bb3cb9e1deeab"]) write$FUSE_ATTR(r3, &(0x7f0000000000)={0x78, 0xfffffffffffffffe, 0x3, {0xfffffffffffffffd, 0x8000, 0x0, {0x4, 0x5, 0x2, 0x7, 0x81, 0x40, 0x3, 0x6, 0x17de, 0xffff8001, 0x800, r5, r7, 0x1, 0x7fffffff}}}, 0x78) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r8, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:20 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x501040, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) 22:35:20 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) connect$bt_sco(r0, &(0x7f0000000040), 0xffffffffffffffc3) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x500, 0x0) getsockopt$inet6_dccp_buf(r2, 0x21, 0xf, &(0x7f0000000080)=""/83, &(0x7f0000000100)=0x53) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x12) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r7, @ANYBLOB="000000000024160028001200087b7eee76650068"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000810500000000000000000000009c", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000810000104000000ef5300000000000000", @ANYRES32=r7, @ANYBLOB="48100100004203000500270007000000"], 0x28}}, 0xc800) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000002cc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002c80)={&(0x7f00000029c0)=ANY=[@ANYBLOB="84020000", @ANYRES16=0x0, @ANYBLOB="fc0f26bd7000fbdbdf250e1c0f7d7585a347c7390000", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="080003002d92e30108000100", @ANYRES32=r1, @ANYBLOB="140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="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"], 0x284}, 0x1, 0x0, 0x0, 0x44010}, 0x8800) 22:35:20 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000), 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:20 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x501040, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) 22:35:20 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000280)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 22:35:20 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000), 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:20 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x501040, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) [ 2945.326818] ntfs: (device loop5): parse_options(): Invalid gid option argument: 0xffffffffffffffff$]7Lg¦èq%ñOpÔQ ðšv¨¸'´Frwêt´í ªãÍסù3õ|5ÓÉÜ 22:35:20 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) r1 = accept4$unix(r0, &(0x7f0000000040)=@abs, &(0x7f0000000100)=0x6e, 0x800) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000140)={'sit0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 22:35:23 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:23 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000040)={0x8, 0x2, 0x40, 0x9, 0xffffffff, 0x0, 0x9}) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:23 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x501200, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000053c0)={'ip6_vti0\x00', &(0x7f0000005340)={'sit0\x00', 0x0, 0x4, 0xff, 0x6, 0x3, 0x1, @local, @mcast2, 0x700, 0x7, 0xfffffff8, 0x9}}) sendmmsg$inet6(r1, &(0x7f000000b300)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4c, @mcast1, 0xebc4}, 0x1c, &(0x7f0000001400)=[{&(0x7f0000000180)="dc4e1d483cd40eb99b7a6bf4673f9726c88ffe0ccc947a50c5ba485cc5ba7b201f43fa02243d09def21bf4fd700d18fdb21d59d3346386949a2dea49b32072d5c8f07d6b806a2ed9c0ad5b8262a62cc2b4253e30b4bbc6d19285866a35271202c288288f954bd81a5e65a9666bbf28838a19b83a27237332662065f8b3", 0x7d}, {&(0x7f0000000200)="8e0fb484eca7ba1e6e04b6d25d26bd566c5ce3065a43c02ed21f3c616d0af2e1651d28d19e01d5ef783ab0f247daf782d17668080e96cbb73ef98ad1105d7438aa99d36f48b17605bcd22c8f918e797da33309433b0de1defd4572699bdd7d058c259d243e9b75f4fe088846215ea4053dc0d56aabfdda58685df86cd11b27647c07dadce9a0717ad0f6381359269a4f3e6bfb0c1cef09d1f962b290b017435ecd58", 0xa2}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="1d111ea86fe2ee158fbc6f2b800696f7f9bf8e6377eeb31987abfba3f778311367371df9e5e99e849a203a53957116e214095477339b68e13da5e522e4b14ff151eff91591a161f35314bc4a10e8525af229ee555d1fb248e809d14c5b5ce7d9117f26baab62b0bd2a692cdb6c88acf0796dfca3ec3d6f70cbad470f9bb2d9162da69392d38c20943ab8a55d725c17052d3ac3586b30860dd587eac8b2c1cac47a1e1e740327563574ed2c5146ed2da0953e634c6cba91df31a6cbdb4c68633d9a0c4b75320a233c88aaece28365c59692971d3a9f605579df5f21e0f8345d222207da1caab524b62cb2", 0xea}, {&(0x7f0000000100)="909a1852896c19dbacaaa0be027f", 0xe}, {&(0x7f00000013c0)="bb4ee21887", 0x5}], 0x6, &(0x7f0000001480)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x4, 0x0, [], [@jumbo={0xc2, 0x4, 0x1}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x16, 0x2, 0x1, 0x9, 0x0, [@local]}}}, @hopopts={{0x38, 0x29, 0x36, {0x2b, 0x3, [], [@generic={0x5, 0x1b, "4e59ba9d76b1ddd3db26b702e403563d3d40d0d9d0f73106a742e8"}]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x21, 0x2, [], [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x11, 0x3, [], [@hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x7}]}}}], 0xe8}}, {{&(0x7f0000001580)={0xa, 0x4e23, 0xfffffffa, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x41}}, 0x6}, 0x1c, &(0x7f0000002a40)=[{&(0x7f00000015c0)="dda1e130601f3ac91b6d7d8c3edcf1c4afddfdc14e73cb1ad6522285f580c09f70f22cae1887c5dd75bbc7a03c171a8b04465b2bb9b138edcfc63395a7394eba4444205f3d5bac5c6e359a5c79679e280ef25225b9fc6ba0bdec7da73328a5b3017ae861b94ee6d3bc8e8c38ce9383961a43", 0x72}, {&(0x7f0000001640)="c7fa593221739eeafe46a6eb593f019e42825b5af10450fac35f2cfb84e67bc0d4a16fca9e632e618ecf4d56e0a3931b6d751f42a3f24f487273c76069c0db566bc87b3fb938acfc5d92b482a9684855fe0b59a937a69260fade4412a059e10d5b5ae27b10e521f11c1d73abd3785e4cb7b1adf77a230e7dc18ae57995d4c1fe7653b0d84d", 0x85}, {&(0x7f0000001700)="5f157d8cb65a2069cb4b0ef99f9b4d37e67019047e03d58474dc84d903c0d77f68ca", 0x22}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000002740)="218d3c7b5548d3973ac74c9c54ac4e10ba35df4d31c94967641eb905b991a73f8e1b2a2dfedf26eec66102ef244958cf59fe7722e4a9e1bd938359a24778eeb9475ef6b96b7d6ec8f697be2352b0fd120793f5e79d5f7a65e3", 0x59}, {&(0x7f00000027c0)="5ea91964ae4b3e9dc29c2a2e5156ce8b5dfaa06e20c51a84073a722822d61945cfb40c95a1424c", 0x27}, {&(0x7f0000002800)="6fe16f78ad35d736f187c87f076fe6f8a36e2e316a6f16e267cf31b0cbe9404320e6352f84a011dd362236b0895cfc35677e1715bc91b3446965bc357b8bf754938d1b906cd087cbbfb6043218726ffdcd513bece716defd0d786e7983920e318ef92f5b023bec18f5251d4ccb", 0x6d}, {&(0x7f0000002880)="269492f51e420c5db190f3339f22dbb9802492bb32e4581d8ee811a05bde5d6c15198cb10aaa92127a0dfd146c335c596de86cb436a3375d211fc77282b43ca18b818bb5fa7da6eba7096a09c6c4f88d0f2c17b6cc9f011794d0f725869b651c2542dd7f370790968c853f6be49105a5a0f4c450496e09157511d1aae8cd0f19ba4a72f05c0b1f1e2eb518fa2f", 0x8d}, {&(0x7f0000002940)="c9520c40d075538c7f1c00e8c5d8e9c67f3bb03a275bd23665da35d5ce0a038a6e06a364a80046e3b9ffe86164c8859ef62967315c9d232d2ac18d3a1661a736dde2e60e30019b801c90e36a964a79d7959a8110d874a2f92246604ce819337166f5e67a4a29471f8b7fce634539bfa14d20284bcad4d8666c69bed8a8401fd384e5f65f1632fbafa2c01b84a3cd093964002100718be32ceeea3d1a0cdf229f1a528e64ebbdbf86604cc83c2e1da160b99b7a5448cd4f4fbc5f638b97dc10a800e076f26731ab", 0xc7}], 0x9, &(0x7f0000002b00)=[@rthdr={{0x78, 0x29, 0x39, {0x89, 0xc, 0x1, 0xff, 0x0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @remote}, @private0={0xfc, 0x0, [], 0x1}, @local, @dev={0xfe, 0x80, [], 0x1b}, @private2={0xfc, 0x2, [], 0x1}]}}}, @rthdrdstopts={{0x11f8, 0x29, 0x37, {0x3b, 0x23b, [], [@hao={0xc9, 0x10, @mcast2}, @generic={0x81, 0x66, "e217ed4145c77af6a13055578e76d36e5e790bd0496d6d2bbc6b697ef05199db8c06a96047674a27ff2765afcc488035bcb997c39c4a87a7bf1d9c195fffb9ff53ffb6a716bed2306a43b8e9b805132e46afaa9380ebc567bbcf11d7e0942750ea610caeeebc"}, @generic={0x8, 0x87, "8350acebdcb10e88a21a4735a47587519cfbb2f0c97665145ef596109a229dc680908dd0f957a2e2f31d568d7bdcf0f1553e767ac9bbccffcec54bcf3c4f2f59e9f77c9034e54575daac2e76636a363d92d69435738f5d371d3e64a27bcf0782cc5713ef8336e2128256b911fd48f952401114d4ae9e2deca35c2752166fc8377aba49218d6022"}, @generic={0x4, 0x87, "38b69436a6f1866cfd815892795415a1b8b19c13a305e42f81123cec0191064c7a9a6cf50b75ef0f985588d952bcc2110a73b5a2e24a951b1e71181132f40e4020fa3f38dc40dcd8c678b444b6a662e5656c6c3f8974a78b35c316a698085309382568403a8a18e60f6eb6c19472bf5a80dd83f8cf503044c5add61e9463d2247309eeb4ac4a0e"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x5, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x40, {0x3, 0xe, 0x58, 0x3, [0x7, 0x100000000, 0x4, 0x21df, 0x0, 0x1, 0x8000]}}, @enc_lim={0x4, 0x1, 0x1}]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x16, 0x0, 0x0, 0x3}}}], 0x1288}}, {{&(0x7f0000003dc0)={0xa, 0x4e21, 0x80000001, @rand_addr=' \x01\x00', 0x4}, 0x1c, &(0x7f0000003e00), 0x0, &(0x7f0000003e40)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x5e, 0x4, 0x1, 0x2d, 0x0, [@initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast1]}}}, @tclass={{0x14, 0x29, 0x43, 0xe1b1bb8}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x2c, 0xa, 0x0, 0x5, 0x0, [@remote, @remote, @dev={0xfe, 0x80, [], 0x41}, @initdev={0xfe, 0x88, [], 0xd7, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}}}], 0xd0}}, {{&(0x7f0000003f40)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0x11}, 0x9}, 0x1c, &(0x7f00000052c0)=[{&(0x7f0000003f80)="0fe596ec605ff80ab252b0c3ab845fc491a9ade25db6d675bffd7927450db3110e7051a90bd71403d1f92781e696aec6c476e9848a99bba212f8295ee22ba797204d19400518003009c9bf6d642c6c88ae3d16368fd8cbae0c428c93cf2d0b88dc2efcd610270b530a4c42c7ebb6794a10c1997f91f3f9fcd7841b1ec75d3a0e4079efeb0c0e4aa580301e05dd38b0283f955d316606761fd7561d5217f078a00c9d1eaba5307f9c5266464de5062011c155b5e343", 0xb5}, {&(0x7f0000004040)="6aedcef52a", 0x5}, {&(0x7f0000004080)="dc6016d9fd7b41a7260878fcdafec1483217e3250fbde3a4dead02121f686010f94225591bbe626dd3c5aac438e66482feb4c59507926ce3eb563c0d8545392f24912b4cbdf6c69a3f69e07b32207decd25a29e032a856a5f0695e506e5be62e98aaab85524ca7cf65cf29df74bd231c1a13b2f00bb964fae0f2522455f74492a39129696e2df2df39b1", 0x8a}, {&(0x7f0000004140)="822f31e17408fa9c48cfcc90ae846f569fe189af0427db01425e0436185a3b4c20c622637074900aaafca5e30e796e8f85f8562511c1047c930f08fe75d68235773670d0a8f5718ead7d864aab4eb227ee3df93b1b4e39e5fd00428233530e0d5713b480abe318803c8fe23e061b34d9a19f4ac388ab834e4acddb5cc28ed746c590b2b0a0119c4f562b3cb5e94b919006c26c45009b6d85b389221a4d", 0x9d}, {&(0x7f0000004200)="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", 0x1000}, {&(0x7f0000005200)="48cbda75bbc67f52a778dbf4fe071ed49b7fc3b44d131f9a51b30a082c3d5b560c9a7fb3b2b84c76a1015a92af13e5b12bdd0c3559926d8a7bd6d2de158c5278b64a5fac9126b0bb60f5c2ebbc77d0b69dffa0d5e156a4794770a2c3955d6bfabc21a5883406e14fd67ab3a6dcfc75d0370ce241e169dd77a2ff0152857b1b9939ec57c77273221dae125785aa5ab9e0fd0edf8642836d4ffce085e14a183c25488acf264a80735659a5089b130dc1e7523c7daa3ca5", 0xb6}], 0x6, &(0x7f0000005400)=[@rthdrdstopts={{0x88, 0x29, 0x37, {0x6, 0xd, [], [@pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @ra={0x5, 0x2, 0x1}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7fffffff}, @calipso={0x7, 0x20, {0x1, 0x6, 0x6, 0x6, [0x41, 0x800, 0x6e14]}}, @calipso={0x7, 0x20, {0x2, 0x6, 0x4, 0x417, [0x2, 0x3, 0x8]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x280}}, @hopopts={{0x100, 0x29, 0x36, {0x3b, 0x1c, [], [@hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x50, {0x0, 0x12, 0x1, 0x4, [0x6, 0x9, 0x57, 0xfffffffffffff800, 0x3, 0x9, 0x6, 0xfffffffffffff2c3, 0x1]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xd}, @calipso={0x7, 0x48, {0x0, 0x10, 0x0, 0x63, [0x0, 0x1000, 0x7ff, 0x4, 0x2, 0x9, 0x5, 0x0]}}, @enc_lim={0x4, 0x1, 0x1f}, @generic={0x8, 0x9, "b5818b7fbcc74f4fea"}, @jumbo={0xc2, 0x4, 0x81}, @hao={0xc9, 0x10, @remote}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r2}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x2, 0x3, [], [@jumbo={0xc2, 0x4, 0xfffffffb}, @pad1, @enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0x7ff}, @ra={0x5, 0x2, 0x8f}, @pad1, @ra={0x5, 0x2, 0x2}]}}}, @hopopts={{0x108, 0x29, 0x36, {0x29, 0x1d, [], [@ra, @generic={0x5, 0xdc, "ee120d8025a5557b0a58c1025e8973f36b0da87ab996646d0d14ad60c1caa83ec3ad51b77674d16c03bb92cd29a4c53b5998f4342616045888f9ce38c593793233408f5a056c7fec9f2c7d68986b0e7878126d6a94cc12401060f90f15222796588f675c9d6d97d97369e6d6cad07177572c91191f4cb74ce448d142e9f420b9598cfb3e2699c3c41f22091194eebe009e00cbc716d37b200e7570a0c8dbdbbf9cb9780794e09fa6d69a6dc70086ed4988395ce2884b4f1f619f7ac7893294bc712c1b86d5e047315e5d3d0dd25499a4c815f9f87505906f7f7c5ba5"}, @enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0xe3dd}]}}}, @rthdr={{0x78, 0x29, 0x39, {0x2b, 0xc, 0x2, 0x3, 0x0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}, @private1, @private2, @empty, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @private2={0xfc, 0x2, [], 0x1}]}}}], 0x380}}, {{0x0, 0x0, &(0x7f0000006a00)=[{&(0x7f0000005780)="abdc17dc27560617f83efd27935b2711a22da7ac04f4da950472669ae8c339245dfd31da590d80e5806a405a9b063ac9c94210bb5a94e21722de2395ab08f1d4932d6f3411dd26ec9cb7ec7dde3d88e68eb8b8814b7be11b7ea4809e5ab203cfb1bf475affb8aa2d87c4647c851b8c9fdc549735b7824e056b25cebfde01a1af780b31366c29279c9d6b8d0b905ce2d364d26bff95133b6836dbcffe013ae0613c4a3dfcacd84d2430322e8cb04a62f57bf7708eda48f77a7accf3c87dc40dddc576d0585b938e66e22b56f4", 0xcc}, {&(0x7f0000005880)="e9f258e9d0f9a317588b5f8dc2d54a5ac9d944559b04a2eb82db22ea00502a3e3c4bc27d0b3241386b01c694dd2548e0aa1fccde16efa33bc429ae4ba046f3c95e0ca6daec8734ba17f85c5f7e557683b098", 0x52}, {&(0x7f0000005900)="4b0f01a84decc26f583c585e014c103e5b7eb3d6618ac3025cf990aebd354fb835142a478430f3d1f56dd3991257dbc1eb8751f759a0727f4a08e14e21e850acb57292e574069e4ed720457c02e4ffd6b405242a1926f1e2e51e879b185567059f4c4e61457b85c7cff423c846d19a99920a96bf7510d474e15b2c544abcfffd19b55ff3b41b23a140eb2f011b96d6393ad27211e95055389d453820f519f83b56f11c739a8942636846a0e99d6130485fef742e0db8c6c3bb96c93f337a9246b381ee6778ecfe078a5e7cee854a707022", 0xd1}, {&(0x7f0000005a00)="b3397f280e227ed7e114d87704a747c8da8142ef83648f4b15c7173c5f698fc9bc35ca4a8953ade5cb80f97cccfc84c2b4c3cec1c3d534f58fb6fa3d815e731891be14d5b9aa88ee78272f3effededb44c78d20b6e1c1a418560f36498e61f8f5f431eed4972397e762a330317f19f493557c706db7119837bc99455a18f089757daa187121045a37933bf58e435eaa4945a818de81fe851dd2810c29a8263703f691131d0c0c9b7f6b605ac76b9f63276628db3b16a41bb0d023e4a79fad1de9734b97e5343bae0c063f0d6f2e5fff9d54dccdb542ae415758c4fafbda4f68798684920640af518f4ce989c71878c11999ac456209e692e129e7a2859efea254248ea00426bbfb938c3461d496ffeb365e1c630727017facf51a2b3bffb21c194cd49c0b4914154c1e62072cfedd072f5122a608ddc3ca03eb551f320e45510214286a30b1d9f0d3ae452fee06ce04e3b7cbe65fff7e6d3b1f533627f3758ee7be056f8544ec7390d6377e307d4ab483daae365e012d045245116ba37d10997a595d51d7d5f21b2b3e49ae064a23755831a49f9c46b6e46f08a711ad6970b4b2f575cde8778cda5862de146d6c4cae8a1333a069fa45adb0ed177f034c8b04fd3e9e2d8bc92b863a35eaff3bd0ce045e43683919f99c0bdc5c03aa5db160f1920c72fb1f9dbc6fc6add92effb0c053c031e30181588d23bea8f682ba6084602226e0fa6b24cf2b3eb119b93ddb9e29f4166e92aeb726cdb500ffd80efbb80e703bb1a6475ab900d13c78df8a4db6fbb4bd631b207547adfb6f12f7f62441bdd2bbbd6e5f7561b6f1ad0fb04750f4bcefc1f4a1002880c2458ab5574d8629f9487baa4cc877dcfc7e88a6c3709c6ff326fbdcfd95de399dd0125a0d64c979e677e08f56db88ef79cc61ecde3b7bc93be5b745699f3b254b169ad221c3ed7bbc91398ef03a34c59e66e20c87008c44b57c30163cafaa1b953067a917a2df6542a2bbf208379d822d00542d48ee2d311e5a69aefbd49d616332d38b35083c5a3382086bd96a1e43d3af084181edbc5bba473a25418d1e22ca3257a9f2c725f7d45a6145000d8de3fc8f2ef3bdfe49d3abd64b022c010f408ffb6295c158eaf977ad3fbe53d6ea6522d3e41e5ef65efb45635cf966e8f59c1069a63774b9d9b62072494f795bcfd6d6eae4e8ea107ef55b578ef11f68460852e0e95f955f45f348d16e71f8d7bc24144e89ec89ee4d71605764eea173d9f789e188a3d2c332b889400b97e846b9f375bc3219870c31d0a937aa8698249f42e36511712eec70dccb400e21861b792c08f96bbac02891e26f645d2fdeefa89200bdca28248a860b2c6371afab719c2dbc6b77d5d984ed83e92d50e2401964a1d47211cfd0c5feb6bb77b7bb86c1c6b88ca18c71817f2ba1b2652697f81010f2b2dc4629fefb5e611eafcd080db919f88b3d007c076f13d471e78e01befa432ba4e9a69e070a794ec0da64788de53c857ab5d651c19216ef47cb0578c84d62e6318ed78e7c1067508d51d6581904955562be32c527257a2d8662554ad0d1d8e3957fe167a34a94df177248795c4437614703faa29d70ed6fe75f400120affe89d9254e61fb75964be19c090b25fc3cead8b66a683e107a2e6d46b316b85d9e57eed4df3a1fab4dffb354e518e60d9656449064d1c87fd12dbc9d44bf31be9c3b7183aeb30846529b3adb1e99f856cc951089549da8b0fa893228407f4579bb29fddeb5753aa30ec40bd9bca7bdd8f8ee6e366efffb5c9f3a9c72cd115ab1e711df1773ae456efae842ebe426c22cd5bf69a4d8cd2a7b3013ed5ec5f9b7a7d4af28e2d6181ee6c456772de996495c7c703c0906ff7c243b97a93a89604d2b469fc84e410b69fdfc4a615026eed2d691469539c0696c286c1197c77727e537276f87ba68258c5d2d4e77e7a765585ec5d572b4739f65ed1e40b56284648a5b84b76ca999bbfb886a650d271d93e80b15215dcd439d585a70ebbf4e857fe42b984d447eeddf1217d6aaa0b6963c7278247542c3cdb94a8ea09947324604712c05f9372de00a310e632a0f2b1f3d86fdd2b089fb6028a145c7b2f29fc9c01dc25e4686992d3750db6973c94dc038c5ff6d20e63ff84c717c73a80bb66044dc4d1bdc438fb78ddc6c296a7aaa94432cc3ede00b3ad233c6d7515a4c901bc3167aced66d23ccfd57b0866c876efe617b43c5811a90b8bfacfc6abd83c80029afbdfe50f25dc8e7c57aeaf71f50f6102213d3d33154cfc28a85afaeaf97e81f0ee3d95412db53cf64ca898ac154cf74d0ff2fa29c98267f94a0219f2605e9665fab8a6abf29428a99ef3bef2b19db0259b6e0ff7d430b6b4e0267b230129fd5e15af146a0354bbfadcfab0e3d85a6ae848970fb0b773415048c355d0d05f1670e5b6bb9f5242b6103df6db81b9fbb9248b89d5cfd21c08d7b2e7e5a894f3c3fed8577bbd5c86d6bae3781a94f0b9affbc4aad270ce1016b57cb09d6ca7c54888654474c05b56a07e7bf7c26fcf0cf465272a3607cb8618ffdbd99d607bf69c5f1c8ff5f73a9fdda8a19728c356b3a0419e30fdf6fc1c165be4239b894d7de33db267dc35fd015f362bbc07687307fce02989c6c97514db43454a58769ec6240c21925a2fab4f31521857de29a93ceba4bd49332f8fba88e3a94de76d9874e872cb5ae589572b04556590698bd0f9c32b2cc1bc663c628bebed586d529a47a282d9056b94dbe4e65694a4cd902570162ac72918670609eb7d819d132c5b4bd8bd5abe908b563acc06221dabd34b46b59c5c420ee6e68b3915e2220132aaff445fdcd700a0696edcc05d5838b7196e3144b02a6d5792955c5c61f2330f7d47b8f1b5487e195fac013732e65aa8d50a8d700bad99a0fd37eb4969858c36932f54072686bda8e5cb2928e60d798f116fce0b3d479795ae3d29f1041cc652c0f2b47c6683996789cf9124127c602f65500a43348575403481c877fd653dc2ce7854c1b1e74efec4eef2a205dcf2031fe2f9f04b00930edcce8b9ec82efba82a656d5251abb0056c5e8f03ec10155d5d7f8c9caf236b8e95e325d41c1168a60cd394be0a12d1e143cadee3999cca6361fc4ac3c0173980e1d80d8fb18e8fc70fa76005675d6a461d43003726194929795398e7b055e8590ebd3317093c0f0c32e1abaf5403ee017a0e35d708a014b3d05a24e0ceeccfd4d01f22bce6d87c39e016cc47f4c49470ac4d90385611d60c69e72f0088c5f8368da1fd4afb88b72a08eb7b7226c64cebe3b348293f450745324d54df91fb558fc5eea2dc10cbb50e83d46ea763b805f41b84f70d6a1fb0b60c6fee782739f367779f840ed5b0e807f5add87087a945d196d500446ec0d50ccec3dd7bebe7ee1985dceecd7ba33c6ef9bc42168040f7cdadba772d35f1f2525bcaa60c834ea1ac2182ba7327879a62db41bd3e038b596990f4195191237adcad08b3bd48d0db46f61f0d242df212682a86086c561a46e4d0122a26e68fb73803fa4c1d4e9b8cf900a527aa840e87e29d61c5644195df4084121399a772c7e006f60dd871116a2a6306f9222f75f2affb72ddfee53981aab9b776b761b469a1a9f74194700d2b9b7a97cb11d66a3e315741a58abf18504e705aa82068a75b0270bd87d8b535ad32771dc82a4b4177b14476ac31b6919bbffda1ae00344882ce7cb4191ed1d010978a77e059ff9e2e2dfdc460a3c1a652531479d7b7f52f58bd12821de41d21494209821e69c9faf7693c23cb0301a890d4e5ae05d4dbf5324dddc8c7805d18d5a60bd6ab7b49fc43b24410470d8f1cb62a7bb3a7ccef87b7ffb2e584f1c379cc8eea586b17b6cee5495401ca65a597cfa035e8c2120020f5324b2377536ce92822b35bb1f355e237e29e714d9dc9fea0f8588fa913ba9a6be4612afd7587ad247423aae72faa0f18d3b39ab518ea42f2adf442ea93bff9d854ab46369d151eba6382c6472745f17c784909fca8f1db5349de7acef22b2093b785f02855e0a8725f0ca371b15c77b38ee41c6ddcdba3372841acf4d0ca5ff5470c69567b1e85656cdf205e95d9b18263e549fb0de36540bce51ab0376bd5ab97152dc5e968b9dce0f411c4d33fac5a61a88ef544aa690c2df651ab5eaed13f29b690025cff573855c2878b15a09003b6224c6f2a39630cf12a02e4169bfab24f2232886f4683842eca00c17c7cd78fadad8b560c9a094b6263eb9cdad88cdab40c327db54d94b1547d23b63eb63d8eeeee8e3af79464b7d6dd2a88e7e4473493ad457dd1ec6babc27b1302d19b54fc46251e680101e116b4683dfb785225ebc6dc6757fde9c689e8cd01661785d16202dbb4b28cb85c038a75aded2db7fd2a807395274a447ed553ef05245300b30231184b546aeabfe8f672203d18242358b984f2f4deed45cd9a2f3bcf2446bd0ff0bae9683cb59f301e2355d7c04942532c5a26de6c1b0f01bb53b02c86a2a90703d8bab88402b9084d3b9d312c7a9aafcb1f3066aa7a589c834abf7bf79f268284a063c1b9ee9a1736f77188c05d225f806a3c6b40fb49fb97690b5ce3b4c928b01383d5491599d698a8a2b7b7acd595a22fcb6f732de44c54e5825466d4cff517d7d8367f5edd69960382f79133e98a6cb6b50e97106a0ac2ad88a6d2e327fa78a3f5520ceda396277623dff2585254af2caa0f2c7bcd6f000cd454b246376e40c8a6cdfd94b866bed18f1467387b03ad2652081f75e17fb7e626a04210efdfc8f1c033f149e4772de29819dfed6b98635b16c0dc170f330ba0594fe7283df70c53390ade21e0f2c2dd19ce8f1e1f12ba37f0877e5b6f02b3e56b7d1db1c6ba9c3556cfd0476e58df3622a258a635608cf4010f982d741915f0ac4e8ea42d2994e78c0d414eb180dd303f904656946e8eeef7dee03f5306f65755066171df8644c9664a4ea63b06e0b11943c7b85f613eddd96c3e03f279cbaa6c75f66406373e3025101adc391242a590e0033714f9aca7da3435d797332c1e8e989822369fadb825e047fb1d5c35c4919e42cd95761dab2c64999072d16127389f5cc9e7ff023b82b6aa35c630d2eca9af2d3e21ec7b72455c1a91460de3e287cdcaa4c66af23b614a9c842cb75ce16f0d848a44828c0d6f92205df5a7f241e569b433eab2be82c418c1bd2dc39c499cd1a10c1403d373ab37f3a4aac8c0c3443154618022ed6ee97d3fda5efa7861d398341adc462e325da1134e1cc247e55a75a30ba86779d7486cfa57156b8b352ec572b1fce7ad86db6bfa861c4caf180064d603668528785733947f70722a4c2f1550a3c40be06ba8d2655da7f75991de9fe570c0623af8955d6ff70c3fb468dc99ef9114d1566e96d08b7279bd5c0221887f29b9999a10699323d0eecd2a9da64ef6ba81b609e92466db91f6b4c5412174530cf6458aa081767a32670b7a03dfef4c325f892fcdaaf5e38e821b1555400f84fd3438c353a9c5baf8fbdc1166d91800b32f3220a849f95a078fef65e58842f1ac85bd2681607c80c3f31c1d1521d7c2078899de6892f1948f2d2ed0719e4e18d97b54cb7a40a8ccac0b69994fd8ac69cf652d49407709f2215915e19f0216a923faa438ee664febf8c54aa4e0fe39630ea30cc3909725830a8b210ce58415edafa8083be791ba8cdb79de2ac8e79082f61620bc1900d58f0382235896c94cc7165e6041373a781ad4b6872d7c3436461bd14c563c082e8be410213061b76a3d1dbaa8b9e37bd81e3cf256ee9c9267df1497488892", 0x1000}], 0x4, &(0x7f0000006a40)=[@hopopts={{0x58, 0x29, 0x36, {0x8, 0x7, [], [@generic={0x2, 0x33, "730c1797d766de84e82db26d3423630dbf796dac32b6e678d65352699dba54dec5d21da0c5c1a635444698f7e0e09d88de9c51"}, @ra={0x5, 0x2, 0x30ba}, @jumbo={0xc2, 0x4, 0x46b}]}}}, @hopopts_2292={{0xd0, 0x29, 0x36, {0x1, 0x16, [], [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x8, 0x95, "554455b57da1aa078ad4611e3c275abf001a7a20cb8c39c6f6c711d65b3a12b9ef4b211ca3502f395768aa8a138d1fd9b5f750ac86a0eda686b2a88086ace09fb88c8a49b36d4dc1618f88a959e3b1cd276aa8b6262202b37c7ce61f855f37a339a26ef93bf10318038fa69640b0eefefa852c2efd67a35d8c939fd94dc73796fd6d88f2d742ef824b239fa80386a04f9c575e2629"}, @jumbo={0xc2, 0x4, 0x101}, @hao={0xc9, 0x10, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2e}}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2000}}, @rthdrdstopts={{0x90, 0x29, 0x37, {0x32, 0xe, [], [@padn, @generic={0x80, 0x59, "ed14a72db9c17cb786ac609b927f68676724c00b502469374cdafdc7e22eb46d003291f04a31abae8a1f56c4a1eef52cbcee5cc60fad6422eb2c2805d56bd7d706ccac42e9c9612b73fd0f58234501b0003336587f5702cba9"}, @hao={0xc9, 0x10, @private2}, @pad1]}}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x8, 0xa, [], [@calipso={0x7, 0x50, {0x0, 0x12, 0x1, 0xff, [0x2, 0x8, 0x1, 0x9, 0x8, 0x81, 0x7, 0x3, 0x400000000000000]}}]}}}], 0x240}}, {{&(0x7f0000006c80)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0x3e}}, 0x1c, &(0x7f000000a040)=[{&(0x7f0000006cc0)="efc5468d823bdd6bc255e6e5fc46dcbbc42b0d11c25c81dc7414d9c4424050c14eda51d919b36a567f835f816556d9c1b455874b674297faa15c0909e524596ca15d6d873b3c6d9c7bc4842a3a6be436e74c61c8a7ddc252fcbd852210dda3872943a62aa2c89a5a4a0dc90549ba23df930422856f44d668a9aecb6e836fcdfa83b97cb9c2920789bd9989443bef104fa943ced7a6b4f6d1fa99541a9dee8b36442a1f6c6e377c8a9fd03dbfa15227d14f72e27f5de96a54977455aa5c4da18843975d7ee1c3341e4ba32455c81420ef0b31f3dff54113842b03b6c180bb01e85ea098a810fa18b9d48309c6941e8fcc18cafeeb59ec5fa61e", 0xf9}, {&(0x7f0000006dc0)="ad9a0bce1a3ca93abffc30460ee3c5c7e8fa3efb809ba5e6460ec5271f2fa2a7478bce8515a8dddb392c04380297168c41bf266f46ae12f512bb22639270877885f5fd70", 0x44}, {&(0x7f0000006e40)="8546ed6ec6f80900679578c333ba68950385a8c45f74bdb407765d0a8c396eedb064fe3be97c19f78a8b4072f1fe887e2fcc12b79bc4b65363c50a99ea625d480b87a0", 0x43}, {&(0x7f0000006ec0)="5433ad90b5971093546d8baa2bd686f316869eec68a8d1cc60c97a384246763a620179daa93eb0a07c76f96a361aaa3f0dd06f51919c597cfefd01d5218b5949c4314306235d4eec66838aa6e698a0f623a9f0020bfee95037a5f1ef4e655986db03eaf7d93a58ea2a490e7e6555a25e9c447b50de90665d6b00edb6af1198c375ebf49fac4cafb33559b8785a7cc3e441097194f10d62fcca3ca3a314bb2734d926894710ad47c3feb8bd79d335fa0803356d0b377cb65b7718b3339c363dc69dc6b8d9c9fbacf9626e4765df74b19e196a48fd1172b3f800f6173e631486b45aa2b04d5219cfb8477faf0de6dab0fd56dd39cbdc01c1cc506197e33669371f2338b8ba9fcb4e3fe9a8b04e1f9b3ac8655e18d1e921396e00dca9c818c8514a7741c109d09e901d2d287058fa954333c08411577d3168f346a619c2049064b80812192a7571305d9e846d46ab8934081432b4b2d41de0076920461cae7055397f67e5e0125ba72c1e0e4ba5e5205ff2dbf5a1d8830f7f820997b845faeff5729c5ce5ce77afdfd83feb5dd72004a90d181f48414034904711b33a7bad79c8670996d185b4e01994f0a932e4b798e62aea9aa64448f90ce75ba7c9b7928c097e11c9c98c9b0494815a63729f924254a858e27453e59715e9a29d2e439626839464e153433b0df24f9ee63c26038b33b65702ea3c1bd72f779522b9db111fdd4714e31ff8f24b486fde457453059afca7a69cbdadb70fcdb2826fef9dbde69343c8ccf491951ddba1030361518c773c0fff7eb71e145cd8fe0ade8d6f93e4125c2b4b1052ca6f2ff07275732b7aa0541b0b6bd824c35fd38ea6aa0c0ddf16e5893bc2c2694ae4b03575f4ca71f334636cc01d544d89e32708f699478deb5c5ac1f354d04b1733affbf80301ee5fa42e02420cae776bd02cded641c07f627a4d6d3e5c266b9f8e21f6ca9b5a21134d6feb10f999dd849e315039e1988049101fc22ed4927f7fa0e3363169252e0d34eba6c28c1aa71d01620081471921b12b05c9934c8121a0944b4b435a1688c05a0ac49ed67544509e09bd8b418a50e12abf0cdce049fae9629a2d30529c8c110c27e07c82ef5775a8a7c088927910894260996e5f7586a964093021cad4ce116f85acae10c905034815db981b42c465132c97b1afcb0938e3151f7eb9eb744a43e1683a6516ec548b3b7f520a59a995b1bf7853c42577ef129fbc3756f92ba81adf4be75393ac8a8352b0111ebde339457fdbad812724ec1a01553167f142232f901a4605ac4d7c7f27f6a212c6067fc45d37145c3624e89c2eca6243876c09978262a0f30ffa887f968b1610b808926887ef53f6daab382bcb505f84877ea0a803fab8d0ac158ffe22edcde9af1f1e02a68803a85b9157fcdaa2ebde1f39255a391ee9dc8ec15630db5dff7dd6c40289c1135b705b2a256932fa66bd2641e9c855a9a7832591f4f64af6d5f90a2e191b8a38aa460f8a5b09290123fa310b52ddebb97ce3b35b1ebf4daccd4f0e6bf49403ea8d02530512f698b3c2d441455099c984999bebe7e1675bab413795fd93278bf64c595d08389cfa1ac5c65d5f44915966141072dd87bdc4212c26f3b6123b5da717dbe429c9662556b47370495b76547e5a64a03b81c4180c34bed68526358bbb65565876bcab709a6b153e41a6d4df69a3ec80fa83bb2ad5756f506683ee20be25625c59df39b40b80e181ac3df6d5470da743638f6034c1eaa71273dafb69f64f881bc3493ffa1bf1cfd80fc44d04e994b21fc76283dbb1e3ac5d82b473c8787b0f472d507827a6f9599fe9117275d20df44ddfc857ba6bdcff3e6f52098a837d3903a432d82d7c60fa28176305c24dc5c4ee2c8cbe0aaa493c1ce33758a77f06fd0453f0690a9007e4d8cec5ff59a2c00347a4a31cb323f54c2522700fa6a664e296d5497c958cfddec4a709ba0807793bb0d3b0e05c83ac3ed7e7a1a52bc7c68a971b4191ede6ec00f4052598e80cb7e1e0e872de42bd71f637d65d870e062d266ed81f96e497c5203321c9089ec6207b43ac02f82bc2a4c5bfd3f2654d322ec864700c2278612b6e9af98062390712b90fe7dc32eac62a3dc5bbf2bcd182c834cc307d90b56528dce936a26a15b0fcfbd5974371359d2db7d557d422851945cbd60763904e3ef46b18661937d6686b8a0ad0ade6033eb6b16231529861c8c8e7a0850b93a71af0637ddf18550342532a4f92a355c6fa660f1a471a098dc5f5215646296760f6896976423e7077905b94bf5a84ccc7090edda8da578613b4121c2e6c0ed6161ae11b8e0feac5b84d2989748bcb94726a86080cddc294f3b34e89c60cdcdae2807dde4a2ac48d5ea7aa79e5b6da8f3dbb35fa6ce99a2982760f0be7f2df0a920491b23c886f270ba7a2190d4f407b4226cf5b1dc64854ffea1f7e837c49fd12f089022403654bcb6243a0a6ec2dd144a4871f25ad35de0951e2f7e2d84e02889e399a862032463a2ce668704df5969cea24fe610f6b2e267a0654729243b30ba1b26bf87b2bb38b2806c5c55ac38e65c4ad45d29b553af5fbcbc8e3e90962f28320385e9f2827e06e700b4b2fe53f5591c103d658da824c52ca6fee99d29d70b7ca3e1fde951ff2217814e8b8ca051844a2e6eb2ab507e8f2a0a2c10fd3ab72c063aec6ba4dcd5820a95ffbf7c3c841f219208be018754936872c2ea663f811d265af1f70e385e1b9773db553cae7852cbc99c281836c0c64a5afccd620e51f44a00dc831e9f3cb427a56af8a0e922e8850b6d5ad9715cd708a39ef57cbd607400493032781515c7826d051345ca680bf2e61e9c6a9911392ecdbbbe77d1bb730a57c254b451debc132c2df54b790bff9957170e4a8404d685254418fe4d92d620a571f2b170af446f64a00748a6e75af66723febe179e6b9f16b36d27c3bef9133483e53fd8e4107b4dbb0c01bf3281cc0e5f4505cf9a9a8a33c3cc8c09ba47d6daa3978c3ef32484ea007310a083a9e6f9f96f3001a3838ed4e1b4b4918430cafba4d04618c6f547caa736ff5d6ea2971c6df1953ae95200849e4078b6be2325597ffa4361bb79d61d6bfd1fb29f377e27ff73a79704bd6dace83dfba2bdd0e9532db00f2fafd67f9650a50a2e7ef2e2248e820b7fca8dd5ea8c3bd6024ac0fa3dfc5c0725063f7faffc4baec3e418d481171c6bb7504ab01ecdd2e0e3e26fd9d788bae530738be0bd2919676bad7ed2b1166bf75c794facd19b5be5f4a9450acd1f9e00bb3e7f0825fa4810a2600fcbe281d687f17f414c579c64a719d5effb28b75a437addb2a59975764a4c1e077b158f5743107df24fe97b4fec2a39261b747052697962690111389315e5d85c97ccfbaa4a6e96a399cc1324ae515a9ed0a681bc2a68c433ffeb3a8dfd9afddf0528156a23e56883b1c60947dd1e8590b62d0650741331d052c5379c946e0fca4352bf0d926836e820c4f6f926e6ce1beb6015e8c596c92c3eac2864de4d36f7ff5805c9107dbed9d0abb74ddfc14a752dce90235ed0f1c513c5a9f8786a216c62f2fc0dd35bc86ea2428a528b3fd11a63d6881544b9c2e7ce8b73fa815946ae2975ffa0f1a5f6cde6dd7a8b17c96ff77fbf4434fb3410a0e517da4c3518dd2e507817e90f5d924722971b66f5812660590c14f9fbadc8f1ae516ae23f0f15c8d609b511e354a3fc705157ed47f5bf286f4d6a43b911dc812e7deeb6b8e819d27d2272bad67e4ff78e552a36e0b8cbf90209bfad2ae9b3060839d35bdb95ac5105f4953fd3b8d4634aa3485251bc940103990d45431805e3c17cc20af71f9041af05620c101ebdcc141681c3964eb5d6a4e6ea4b3c959cbbd2313817a9aa90b505d4df45fa792a57f11060ecf6628e01f3a4385be1e772f69487d2a6ab3e63e1918bc0256e48330259b21612bf269d46c5e2fd3f6f9ed59e8c1e4f9a152a775f32634a2fbc59673084a6c96fad3f2a200157360ed0917c6654377274a986bc421c0e314fa4b5b1e69b6143b05e8fe9c76c4cd41f1e059d01e71ee2ca2ae999faf1602880b14be879107c244bd6116effa06eb49a4266e084a9a96acf48f56491d985a9519032618962c9c9d4ab623d24af9cc0736614fd582d78ad4ae940b897eb83e047ae9a3aff5da4ae7a75a175a779bd5ee8baa16b7a0cb01982ae6fb41f1692e04065b11a45dd4cbcbe353035bbb61f67db758277bedd5cb9a7a96e9b4d93a09134b9d3392687e555e6690449615b879109bebead1a333bae5e87e441832a090e5c415a6b34cc9dcfbfb520df1a0e97ec4438902895d7814eaa80bef0d09984e08fa79676f66383176680e33652bf584c0fb67585a5ecad1ba7bce43729880720467c9f6b5d120b854235f3fbea10bc219020a68ad5bc4569cc1a8ffc4cca584ab77ae6743f5461717e0a0bf40dd179857d3a7423b7048476b5a51ccf9865a01fa6304924d76224348288b8fce4411dba9485a0e346913d160eed88908dacb785cfd1086c1fff38efa2dc0fb10194008ddbe5778be940c896dd899b7a5ba13edf423d5eadebcb549d61886d98235c80d6a962424248b3bc0375a65f02b2ee38da4e49c58a061407939a507567ad57534dbc2e6ce941605b41317c15555f65f0c764b28311e7bd8b9df01b1bf5452c375e4174473e3ca19ea8c6cf55727e2f70a40c62e66c4cac5944d4f94685a5c783c01d1534524927ab9ab10111983c379eae3688e0dd76c64d8a120a3ae62acdb053023dff860fd4f4a23080a9d59d75e0d19fe863b8d487c26818f2b7c6b23fb797ba464084f04d940b9698715b36611b9931c6a1a4b86dcdf423e4cf3cd0ef9baee047bcbf891ed498ee19450b18e2826d6f5a47977eb7e4ed748ec7400cda70d6a3d56e0a433ee2031a8c660aa271bc814f27ddf09c6575146cfef88b1aba55c911a92de347953623e656fcff61a8f5d266dbc3cba5128d80aed7d383a25faebc4063371da77eb1527ceb190d433137aafc46695c46f60ed5b6e2f1bcdf0cb4d972162e0d1e97c71e3c6fcf3b1bd80c87c4028e9d1b795e4cddf70501388d874c199edaa539996600fe439494294658c889f05e6ada2e8d9203b55a82f3c3c8986cf525fb10a264ac12064bce1033dc1ca45c992452ada4a467615fb3d42562251a2010f98055d67ce8c7e388603710473f50cd46e873650a8c79cec41a8ebd2b5fb74c5791557975a1082bf8c4d80fe22b7fb309c1849426dee2152f1bc514129e05d51d43b411b107f47b141a552528418a59ad5eb4a0500d167063dc2bf739cbb34b94f520dc2ab979ce80e0caca0c095addf5556bd9c8ac9f53d1308f639a6817bf0a6ce2288c7e3778612069d57e8d48cf570ce06e542e8c9c2aa153cf039063d242ad0f8cdc5f425d5d5e0debf716d0b419c8733538a699f7f2879cbeb5ea0654c750d77cc3e33d09b7ef6167d595ef18d0c9413cf06163ab31eb8c9404e6e6d99fdb356fcf1e291aa9e8e48b3d4af0171da89c3064b73dfb90ea47922d80eb9ac5d5e1566b73bcd3cde354c96e88008c5da5e9aabb663f5d995ff4073d6c73a3067e941e161bae11fafba93cf3a43084c31ddeef9b7fdbfe46b6753b12102b05c2eeb636d4a778b7a2a4fca6a40af1beb9a5161c3aa3bfcb3d43d1ecdf7e920f49faf2b046e87e61b6d4e7b538f07d6803f2c314f01f88b69f708c79ba53c61a57142a04b7d1f19a6cc3b2fcc2f4bfaf2dc251cf9d0b3577753ba1407953fb530285eee378e094874e9c5de50e2b6e547ea81", 0x1000}, {&(0x7f0000007ec0)="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", 0x1000}, {&(0x7f0000008ec0)="53e7c8ee1c6cb11ee88a717fa02ab5c9dcc8f62262e4a00a672f586ced77cd0a3bc871d0ca8dfd171701d8c490f560c22fd3b330d0aefd748b240aee874413996191f8e7ea44cf5d32e2e2f4bb0bcaed8b33d45ac32a1eedbc008251f8b6b441ce844cd0e189a073716f9682a9b39a2f230ead", 0x73}, {&(0x7f0000008f40)="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", 0x1000}, {&(0x7f0000009f40)="27010224a7c1db74dc0b9196981abecfc40360593666e208b04d6c376a11d5d7dec123748bc71d978b426ad6c421b0917564c680080347458e59e1cfe8a0835d0366f3890e1cc6f57e36cb78d38613ba124e86b36187c2052c99a9a55a0c78bfa46d794fe92f1511ba639fbb62423a614b64f46181197f06ea3e216ea0647345aae4659312e3005bebf502ac1376c36964a852d37d19b013a4f050250a267d3ef9e88c923fe193d8ff345565b01fe757f3124e4b2112b1e170cfaf6e6131258ca747bc433c9b924ea04e", 0xca}], 0x8, &(0x7f000000a0c0)=[@rthdr_2292={{0x88, 0x29, 0x39, {0x62, 0xe, 0x2, 0x0, 0x0, [@remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private0, @remote, @mcast2, @private0={0xfc, 0x0, [], 0x1}, @private0]}}}], 0x88}}, {{&(0x7f000000a180)={0xa, 0x4e23, 0x480, @private1, 0x4}, 0x1c, &(0x7f000000b240)=[{&(0x7f000000a1c0)="06bbd4bc90b9", 0x6}, {&(0x7f000000a200)="c4fc3a0e93d29397c2b11ae93b95bcb974dff7f6a0c6f8f86d55", 0x1a}, {&(0x7f000000a240)="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", 0x1000}], 0x3, &(0x7f000000b280)=[@dstopts_2292={{0x80, 0x29, 0x4, {0x87, 0xc, [], [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x9}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x2}, @calipso={0x7, 0x30, {0x3, 0xa, 0x3, 0x35, [0x40, 0x100000001, 0x100, 0x1, 0x39]}}]}}}], 0x80}}], 0x7, 0x4000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 22:35:23 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x501040, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0), 0x8) 22:35:23 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000), 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000140)=""/158, 0x9e, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='geneve0\x00', 0x10) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f00000038c0), 0x4000000000000a8, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') pipe2(0x0, 0x81000) r2 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x6000446) syz_open_procfs(0x0, 0x0) dup2(r2, 0xffffffffffffffff) r3 = getpid() sched_setattr(r3, &(0x7f0000000300)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfff9}, 0x1, 0xe9, 0xfff, 0x8, 0x0, r3, 0x100}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:23 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:23 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x501040, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0), 0x8) 22:35:23 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r4}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @loopback}, r4}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x1, r4, 0x10, 0x1, @ib={0x1b, 0x9ed2, 0x40, {"6c894baf8a751c3183b2276704f97095"}, 0x7, 0x3, 0x7fff}}}, 0xa0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f00000000c0)={0x1f, @none}, 0x8) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r8, @ANYBLOB="000000000000000028001270342e9bd664449dd1faf3ffe1000c006600766574686df09596eaa2dae8d65fccbff78493e317e1b3a0ce0f81c9113457e5375c8616f3794c12dae7e06ea6f621949d8fa7a7ea550927fa23f9458c42b466110420cdbbfaff935be38e7433cac04134711f15dd42a2c7ed8fa23f5f85bae84e5dbfc4acde7a661513f9477292fd63d8b3f6069426e7fa45b291f5055f1b6be40a76"], 0x48}}, 0x0) r9 = fcntl$getown(r6, 0x9) sched_setparam(r9, &(0x7f00000001c0)=0x117) 22:35:23 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:23 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x501040, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0), 0x8) 22:35:23 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) 22:35:23 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x29, 0xff, 0x7, 0x6, 0x8, @private0={0xfc, 0x0, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, 0x7, 0x8000, 0xac2b534, 0xf8000000}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffe6c) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000810500000000000000000000009c", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r9], 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)={0xd0, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4008010}, 0x8c0) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 22:35:23 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:23 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x210500, 0x0) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x6) 22:35:24 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) [ 2948.784099] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:35:24 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) [ 2948.998912] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:35:24 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:24 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={r4}, 0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000100)={r4, 0x1000, "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"}, &(0x7f0000000000)=0x1008) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:24 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:24 executing program 1: syz_mount_image$bfs(&(0x7f0000000100)='bfs\x00', &(0x7f0000000280)='./file0\x00', 0x6, 0x2, &(0x7f0000000480)=[{&(0x7f00000002c0)="8226bb1384bbf82a705f94bca812b870813b6a3031bf629e96c984e29c83fe6bef2a79f52f5f1a0b602efc863ecedf81229d13d9a34cde30d4828451014adbd6f2915dea5e4202e818779199664653c2227c152e3a960e72f783a8b6eed36772220ee165eeff025eefdc97be62451451b9d68d50dc67718fa944993533f94841752222d6d369f82940c56caeca1c2565717b52864101f1a0ff7bd7de684976b32553b377e492274eb202e94d7f", 0xad, 0x80000001}, {&(0x7f0000000380)="462037c6f79edb5f93c1174336921b2ae0b8f6c0e5b5fe201dd00cfb2f91e73fbb648ca3604fe774873c5548ce740bea7b587a99bf4831b4568b7f13d0d8ba50359a797debafb03009bafac9115ca3fd68f6974a605a32a6f8e2da52286dcd878458b67422f776e8438937dda72141d1fbf5ac79ae4b7056e2b6c0f923cc84eb6aaeda7a5fff6663f0a465badc859b756f7e5bb1f821c9538c81f16fe3bd7f5daec4cc9d570e66ce99f8f77722962dce40e6604b043d0e8cfe217e311618b5c1cc77cb0f68aa2d3d61c2519142b109448a6b4a8f037dcb1edcf7401be4", 0xdd, 0x7}], 0x842044, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x800, 0x8000}, {0x2, 0x6}, {0x23c, 0x71}, {0x7fff, 0xb160}, {0x0, 0x40}]}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @sliced={0x5, [0x5, 0xfff7, 0x0, 0xfffa, 0x401, 0x6, 0xf444, 0x8, 0xffc1, 0xd5b0, 0x400, 0x0, 0x4, 0x20, 0x5, 0xea22, 0x0, 0x1, 0x1958, 0x6, 0x7, 0x20, 0x8, 0x4, 0x7fff, 0x100, 0x1, 0x3, 0x9, 0x6, 0x7f00, 0x6, 0xa6, 0x8, 0x3, 0x8, 0x0, 0x3ff, 0xfc, 0x40, 0x7ff, 0x4, 0xfbb, 0x0, 0x4, 0x0, 0xfff, 0x7f], 0x7}}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 22:35:24 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:24 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x10800, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000740)=@broute={'broute\x00', 0x20, 0x2, 0x63c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x0, &(0x7f0000000040), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x3, 0xb, 0xa03, 'veth1_to_bridge\x00', 'ip6gre0\x00', 'macvtap0\x00', 'gretap0\x00', @dev={[], 0x1a}, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @multicast, [0xff, 0x0, 0xff, 0xff], 0x2be, 0x2be, 0x336, [@comment={{'comment\x00', 0x0, 0x100}}, @comment={{'comment\x00', 0x0, 0x100}}], [], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x3, 0x8001, 0x9, 0x0, 0x0, "41f924fee911ddbda9fb18bfeaa6d42f8751da303d68e415a9694c0b35baaf12027287d819de474b9af5bb0cbcd8b15932cab8d3502e5a23387066c3d771cf1a"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x1e, 0xd, 0x16, 'vcan0\x00', 'bond_slave_1\x00', 'dummy0\x00', 'ip6erspan0\x00', @random="30d7adddcd57", [0x0, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], 0xce, 0x246, 0x276, [@arp={{'arp\x00', 0x0, 0x38}, {{0x6, 0xd, 0x0, @multicast2, 0xff000000, @local, 0xff, @local, [0xff, 0xff, 0xff, 0xff], @random="5ba712f76ad6", [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0x20, 0x4}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0xffffffff, 'system_u:object_r:wireless_device_t:s0\x00'}}}, @common=@ERROR={'ERROR\x00', 0x20, {"54f01f56672c172a1552b3e348746a18b49d36aecff0cac6d6a9b9cd3884"}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x6}}}}]}]}, 0x6b4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000940)='/proc/self/net/pfkey\x00', 0x4000, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000980)={&(0x7f0000000080)="e00b80d6c162a2f447cf4eb704fd15a3162e1c9cdf", &(0x7f00000007c0)=""/227, &(0x7f00000008c0)="2d934cfcb8ca84965dac8fee", &(0x7f0000000900)="dd76926eb697af25bad72e5e2bddb18934c1eccc6b95571ab2cfa636ef383a72c36bf910f68d4df9f976f39f85dac2ef1a0d7dff", 0xe612, r1}, 0x38) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:24 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) 22:35:24 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 22:35:24 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:24 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000810500000000000000000000009c", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r8], 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r8, 0x2f, 0x14, 0x6, 0x101, 0x14, @dev={0xfe, 0x80, [], 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x80, 0x7, 0xc469}}) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r9 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00'}) ioctl$F2FS_IOC_SET_PIN_FILE(r9, 0x4004f50d, &(0x7f0000000000)) [ 2949.558081] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:35:24 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) [ 2949.661611] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2949.793686] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2949.846575] IPv6: ADDRCONF(NETDEV_UP): vlan2: link is not ready [ 2949.869156] bond0: Enslaving veth7 as an active interface with an up link 22:35:25 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x11000, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000080)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x1b1000, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x8100, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x2000008, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@nodevmap='nodevmap'}, {@msize={'msize', 0x3d, 0x1ff}}, {@uname={'uname', 0x3d, '/dev/bsg\x00'}}], [{@fsmagic={'fsmagic', 0x3d, 0x20}}, {@measure='measure'}, {@fowner_lt={'fowner<', r7}}, {@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '${,'}}, {@smackfsdef={'smackfsdef', 0x3d, 'cpuacct.stat\x00'}}]}}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) bind$netrom(r9, &(0x7f0000000340)={{0x3, @null, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x48) 22:35:25 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$setperm(0x5, r3, 0x2000531) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000810500000000000000000000009c", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5], 0x44}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e24, @local}}) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2949.922559] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2950.059861] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 22:35:25 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'ip6gre0\x00', {}, 0xff}) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:25 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x402800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 22:35:25 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:25 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:25 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:25 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:25 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:25 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) 22:35:25 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:25 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:35:25 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x7ff) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) 22:35:25 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:26 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:26 executing program 5: clone(0x8a1f1080, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) openat$mice(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/mice\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = signalfd4(r3, &(0x7f0000000280)={[0x7d]}, 0x8, 0x100800) r6 = getpid() sched_setattr(r6, &(0x7f0000000300)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r7 = getpgid(r6) write$FUSE_LK(r5, &(0x7f0000000200)={0x28, 0x0, 0x1000007, {{0x9, 0x40000000000007, 0x0, r7}}}, 0x28) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x4}, 0x4) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0x5, 0x4) 22:35:26 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x10000) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000040)=0x1) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x6, 0xfffffffffffffffb, 0x3}}, 0x30) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x26}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000140)={0x1, r4, 0x1}) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f0000000200)={0x0, 0x4, 0x2, [], &(0x7f00000001c0)=0x7f}) 22:35:26 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='net_prio.prioidx\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000810500000000000000000000009c", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32], 0x44}}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000200)=0x400) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r6, 0x1}, 0x28}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="aebf0f2f709d2ba93c241a8e4bc98ad8b7bf45e6ff7ac0db57df42fc34a3578e861224b0a2373bcf695aaf84bf9472ab43aef78f4de3115ec7d23c8925ab1cf7f959729e6e799b81c66e398e89a60657a1b64c774aece1e642c8da9aa4a527df194292e9aab494dd5bcff19dc8e392e6e9bc13387d00261db8ef7cb312a0ba1961586f0000000000", @ANYRES16=r6, @ANYBLOB="0100000000000000001400133a766574746170000000000000000000000854d286586515f057892add379cd800000000000000ff00000000"], 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x4000083}, 0x44080) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 22:35:26 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) 22:35:26 executing program 5: clone(0x2000000002181100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) prctl$PR_SVE_GET_VL(0x33, 0x5027) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x4000, 0x0) clock_gettime(0x0, &(0x7f00000012c0)={0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000015c0)=0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) syz_mount_image$btrfs(&(0x7f0000001340)='btrfs\x00', &(0x7f0000001380)='./file0\x00', 0xffffffffffffffff, 0x3, &(0x7f0000001540)=[{&(0x7f00000013c0)="12fcbba8465d8ec6c05ab25e63189a6203a984daf694f39bbb8772d0bc9d10155de281e8e6600af76c2ac07b50308cd0edf2e76cb4bdc6912328fe", 0x3b, 0x43a271d}, {&(0x7f0000001400)="7cab85520dd198", 0x7}, {&(0x7f0000001440)="42ad27c6fcc843c9574ba8917319dd23b163066dfffbcf9d353b99d007f4f443aa375e84e105bb184e45588fc851b1cb72d6a1f00151b1cf6453a8d080832e11a01a28dbd2590fd1927a8a85d18281727739cc2e75300ac982b7011f99571bbd935d5f91ad9260128f72754ccd2e8bb6e692e20998f8e15a719b2029594482f43bfaf4624ab1ad8117f9a98ff165b69e0166d28d9a857c2a8fb953a71bfe195aa60ea70bffc9fadf157afab9ffbf5ad3724fa52c27aadcb322541ae21d2e4f7130564bb8f38d82659119f55a23be8fe44a8d82d3d8d5d7ce", 0xd8, 0x2}], 0x18, &(0x7f0000001600)={[{@space_cache='space_cache'}, {@fragment_metadata='fragment=metadata'}, {@commit={'commit', 0x3d, 0x3}}, {@nossd_spread='nossd_spread'}], [{@uid_eq={'uid', 0x3d, r3}}, {@uid_gt={'uid>', r5}}]}) futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000000f00)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)=0x2, 0x2}, {&(0x7f0000000100)=0x1, 0x1}, {&(0x7f0000000140)=0x2}, {&(0x7f0000000180)=0x2}, {&(0x7f00000001c0)=0x1, 0x2}, {&(0x7f0000000200)}, {&(0x7f0000000240)=0x2}, {&(0x7f0000000280), 0x2}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=0x2, 0x2}, {&(0x7f0000000340)=0x1}, {&(0x7f0000000380)=0x1}, {&(0x7f00000003c0)=0x1}, {&(0x7f0000000400)=0x2, 0x1}, {&(0x7f0000000440)=0x1, 0x2}, {&(0x7f0000000480)=0x1, 0x2}, {&(0x7f00000004c0)=0x2, 0x1}, {&(0x7f0000000500), 0x1}, {&(0x7f0000000540), 0x2}, {&(0x7f0000000580)=0x1}, {&(0x7f00000005c0)}, {&(0x7f0000000600)}, {&(0x7f0000000640)=0x2, 0x1}, {&(0x7f0000000680)=0x2, 0x2}, {&(0x7f00000006c0)=0x1}, {&(0x7f0000000700), 0x1}, {&(0x7f0000000740)}, {&(0x7f0000000780)}, {&(0x7f00000007c0)=0x1, 0x2}, {&(0x7f0000000800)=0x2, 0x1}, {&(0x7f0000000840), 0x1}, {&(0x7f0000000880), 0x2}, {&(0x7f00000008c0), 0x1}, {&(0x7f0000000900)=0x1, 0x2}, {&(0x7f0000000940)}, {&(0x7f0000000980), 0x1}, {&(0x7f00000009c0)=0x2}, {&(0x7f0000000a00)=0x1}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)=0x1, 0x1}, {&(0x7f0000000ac0)=0x2, 0x1}, {&(0x7f0000000b00)}, {&(0x7f0000000b40)=0x2}, {&(0x7f0000000b80)=0x1, 0x1}, {&(0x7f0000000bc0)=0x2}, {&(0x7f0000000c00), 0x1}, {&(0x7f0000000c40)=0x2, 0x2}, {&(0x7f0000000c80)=0x2, 0x1}, {&(0x7f0000000cc0)=0x2}, {&(0x7f0000000d00)=0x2, 0x2}, {&(0x7f0000000d40), 0x2}, {&(0x7f0000000d80)=0x2, 0x2}, {&(0x7f0000000dc0)=0x1, 0x1}, {&(0x7f0000000e00)=0x2}, {&(0x7f0000000e40)=0x2, 0x1}, {&(0x7f0000000e80)=0x1}, {&(0x7f0000000ec0)=0x1, 0x1}], 0xd, 0x3a, &(0x7f0000001300)={r1, r2+60000000}, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) 22:35:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = dup(0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0xb6e3cddfd48e020b, 0x4, 0x8, r0, 0x0, &(0x7f0000000000)={0x99096c, 0x6, [], @value64=0x3d5}}) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000180)={0xcc, ""/204}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 22:35:27 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:27 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="bc00", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 22:35:28 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:35:28 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000810500000000000000000000009c", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000001140)={@empty, r3}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000000c0)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYBLOB="0010000014ff944e841b0934d360b40f48483a6de934c0407092cb4c2bc33a0b6763ccf99cf89b40f0fb14dce44d875c962d529290637c84f987ba3c1cde2f93e3ad1c600eb68f39f30c86076cb5389779f287f6abdb2a9b1caf17eaadc7bc89977b3e3313e608a49b32b46114b9d31c9b37272cc8ca7c301ebfa4606023805fd12aad50741186d9264def09290919c4dfe633c9075c8086e2772caa37398c603a1424252df2bb9982f4975cdd1a25427653f84395c18b3b43466dc0ca7baa24a47ba3ef02c967829aa875641130605891e51a6e76d7eac8f579eebbc2c7450974483f0c31d890d4149224de9ce2671aeaec4b5ad2d088f94e91ed76bcf656166066cc6ee5c8dd732d91517ef2d6db001bd6339db9ea40fe2984b2f7da64b7a40eb59c5fca113bf987d53f2a7490c3520f91fc48ec07586e6e39c2c2ed5cee4e3e07d27d0f5afdd95c0875d859618ce65ea6bb6c51d0c9cd32a8016c0189668c98ceeb87ca75d164b130ea1ad07280d108f1449ab23c16b7b63f06b6763794fbc5c5fd51e099a772aca051bf794dba9e1b33b8b5959e1fdc13441674815dc3f2c4fc13b3d2258ec0a71ac93ee462db61280f72fe7624e57e82dcd0898b87b4094d8dbb6a73dff461d15dcc6444fede12d1f4f5c8ca9f7829f970d6ff9373151bdb469c9a1670bc4078df9eb3b6498538e523c090cc782472da566f2b12842ba06aa79f7ba4e771497ad48c465c7a595b98871d2b029147283df0d6d27e4345833e992cca70beb310ffb359b407b2fb76304738657ef535332b214565451edf0c12b4d585b94b8475cfc32df95ff5457b50ad639e0a7d36a498e851b23354372620adc4d06ce61e4de83cddd5cdb599aed5d23cd5bc8ab541f67c7d15dd0a7ee835d4eae1924d7d07b2cb1ceb03fe942b2817588db55c1da1f967dd6e9da9e19d4b3894c76b24d713e9994b822ab9f43ce54cf2bf8ffcc0ab6fbe057706a1ec72dc664285e47ec881b0363de4425fa34f4075ba8334ef10132176be2c88c55eaf3c7f456ad951789e77e879ff08ac38f4020f0fa3f697f69eb7a489d5ec43aac04c0949ed828811a76671b24c4537c6a1f363ea343d2f22b58fe89556c2069efed73c771ff56914e1d0b255e803df9cd6685908a2a15a87a889ee6f1c7b4dbc70be70546a3e0fca4ac54f00e148ac39caf95e0fa8554244d207bd39eaefb50ca5e21d1c4966e8f16335e96644890f5552fd544a7dbaade447d29a33b739845aa763723206e6f7843d1635a7f1a6a05d8d79321cd7e9eabbeb40748d0947f14cd233fb9567e7b2367aa96f3f36cf298f3f4407a4e59735f209bbea064d0c90468d0ad0d4bc34606072db59d8d5e98673f4632100f4c1fb357ec0b7edb41cd65a68143ec69a1cdc62bcb473353879426379e3f535da08f82e8be38d5dfb5dcb9ffcf016c2e2c985579db881e36e38c7a4d2cfbf08bf126807938336fa3dd3f941132fafcd5d143191f3125b4dd955a01970f2cd0442be6d930d52a6b2e85c18fb781d05f31e135d9bff8827a125650085a1937e0020e26282a4a0357b1265744da47198d9b38fc78bbfa7940496644811a52dff491edaad102e530bbce587ce9293ec2a1ebb3b6ebde4fb2b4f3b6a34fb8bee9cd7b1fc1c2baf5e5c9bec1086ad70424fb7d6236d608bae6e6decfe8d6d9d8097999fe41d57ce62fb21738b0750b0ec08d711ccb582da4598bfd303a53f1c5f46a69047eaa157ee586fb5e0676ea8c84e0393423f02e84adca2f0b2b10283806dcb7bf73a7d5c2492e1d2e15ae0aeb177bda1ffdf0b17252f1088b451078449e3d551de8a31c65bbef9e910243a81391144ed3edbe9b7cac11b3c9d77498288e932014d2445b269d187d59fb35055ef3837dd93370c0af6cba6ba95940cfe882ca9e9b609fb53a312fd8d6910c0d2abdd6c82a9f30ae8165281c04a2c1641075ccc16e3b17c1aa83deac79d0347e8e1a51f3e87ef8fe0e1a8f4bfc524a4fbedf4cdbf16c21747d36a47ca8926a4bafb420616c1c666f1ff5e3ee4994950a6ce51f70d1868406749e8595da20b3350bb9ce0ff88d5808cb7c93fab82e0594e04378592beb1fd55757950f9575e4ca28e924d8c87cb27b88d954a16563df4e8dbe526ed7efd2a435cd7e6eae2ff84357e15d4b32e2db427cb63c8b1fc709924b5565d54d6f1e9c7022b7c1c19fbde12551ea00ab23ffc0c203493e27083189ea2390606e8735aaa6fb7753813f8df5ec04f844fddb0e1fa259e090118022d334b241240d6c1c3ef9754c703863491fd144a0f726f0da6b4d5868135550de28f91b39d7eeab0878d1f109054ba8b3f45f0d4bae14875a58f76f5164067b67339b5e6e8deac1afce187939050d8c09cc100e013e01cb1c19f6f7490adcb0ec83838fb63e878436b06267a71a458e6edc23fa70587d4a327e8fb4d7ebda6b3b0615004bbbbac9804d49874afc7791574467822f2c1007c95f880c4b5ba2d53e93b3f654469a8b27b861528815a9c04ad373892bb4a5bde89d9b1cac3e477509c04cd17b5b9d085fb1722edd653b84d21862c8d67290a58cc2e5fc2fe7fc258173e58fbaee7f55496ea6590ea734ade2ce1eda6cd4845eb5ca48711a828e9157b60cb8bcb7b895a0c058c0771ea5bf9b1dfaa08c5121fe2d9e91fa7dc7b558db9dae0ea9ceefca0d40272ce70915a908f1ba1d6a1db5ad368524f3a4d2dcb040ec82f22d607068e280f60fecab6f4b70c6372edc37b15b825f3ac2e4e25e4e4be24eea9cac9e9180565b26c02f9be8be17316a57e0ddc832c8158a73bbcd16e27f51e0cbee93950becf25e6141cc1ed9b92066f4243aa3b79e57c8c3474ec1e10613a46e1088317c36862c88f3ee0d20de57e457b05100ea37ae5540d1aa4edaa7c8830a0d3b29b46d2c10b2765efaaa057a1ae173d8e5112b3e062985834129b25bdb21f26da08ae41a8b0bb56de0efba5d1a58836b31c0c237fafa740b13fc707c714934b45702fb97b6dfc8a276d4bf976a03efaa93e81d76854b96d5bf51d6735075c9b0308a9dc149bc4f57734a00ff881f54e2df8acf53606b1e014732f3255a7dd8a4fb47dd809c5736025ab62ce18b472b3b8e7884dad6affe3b821eb5787842d9a3dd9a8bd477331d45a75e2d36ffe1c39d68fccdaec33a25807a01b7227b32468be63114b92e9fcf54810b417cad8ed065ededf34c53c277cd235275078ef4dee5da71c00780ddc0c3589e011414e26feba45b732ddf2765a4da80b46e1e12ef4497c15c9f456f9650092afea248eb77476d983422040c9cd18a00bf05b5d69c3d69226ab288f2a126da8581448b0731fa270002f065d6ae9aac74a3a0b15ef30e82ea3224c010a44445f76ff9a825eee29ce49e0833f5173dac37219112b590f80a455a4c53ea872ba7c7b4af49d3067f4cf37099f131b864e8f73f80ba768eaa3c4e21285217afbbf41551cd823ef2275ab5904eab1ed5c76a10b2e5ae42ffc0ec5ed14551f545bdc6901955f4d964c7d17c2c76524ef87621450c3be0cec18d9ab923fa95cc5fde896bcbd49c88e7e3c27b56086e016c7f956d9e43aa1e0f39486ee403390f21b34de98993d3c6b63a7839bc92ec632c1f1f3aecfbb0b170f16c0aa699fdfec34e62e1c21eb5fef0a7775fe6d712f12cad42888cdf6e277f1c535a9a828355d8abbb432125f9ea014ff4f78a2375c0317307e09935a29b9f63765d963f7969c4bbcb7acc880871b003f8ca98877591caf31efdbff2f3a56108a70a10bebaba5411e7b1b13c72869e861925836075d97dc8455a239fd13c30b6fa211dfba5a6af9954a34449e93dd1c07afe762c22c612b3a86481c316c6e3592a464d472e63c14c9c29b82ce98ded83b909d55690f8cb051fad0369dbce89a5527f3d763291a67bb02234844b35b191186a0c9455a3cda7017c812642652dd33baffbf26f9403c735c24f298ac5498db1cd49baa3373aa3d1f361f1e6bd6a83c5040e23d609b8d36d3c71dcdd745ee9fe39b969d4137f3d502a144d50fc8ad6e88c090566d255adb893f52a6e4e9d6d0a46a6fe450b12fbfe205aa01ad8dfebb1c50f0b0146839a011904be18027743cef98b6566ef0e9f4c8fd8daaae7c647c54569dde70bf1d41e1daff8de7aecdea0eb2c14bb479bee22a6b767130ec407b873d80c5326f0584dd6aeae97033657b70d1173d244414c1e085405a8ec4c64baad23464cc70a68bb086e29f8f5b9804dc85e813c45a16d83cdbacad27a85e7d903462941181472dcc44c4d4ce23dd698d3192ea7eb069f62efb2ef0ad9dfeddf39825eabf55fb1bc634a0355449c8898cbfe9711355b7dd7f8b7ed6c8a9635dc8312abaff8f4f143eb5956cb5b753c0fe17a5072de8fda18697852ab9f01e99322244f3633f208992bfea0d638e04d424e946706d351fb1b56d79f386d87d5dbee59dffd76be60e577b43e66c10358156e67fb7e2d6592c4ee04b57f9903e34e759379642a3d71810e9e9ed99b8f4d97bc2c7cdf13b9345c9afd0e205d8740294b7dbf6a83f3472143dcb151145ec90f32a75dcc949a0848e70c414a3676acb55d3c9aeda7001cc6ea805c7758e0353f432498d807ba29667afb61cf6a0e508a5e77194b9067991f350a2d5170f0af1d5c63cbf2cee069dd00641d898d992807a6debed557846b32b7399c1cdcaa4aec5565b524beb908263e2650da489dc6ded6031cfad281f7978015917b4a1e4f3fa1e9a3947afe049e4755251554f0d7ab3d57bcf2194a400c5cfdc3985d301a539fb689f2f3db03751a523116041c1bfd4e30f3fb1aaa87cd6a70626481eb39a315a8fd07281a806447799aebd154c85c13923e053700c2df46cae239ce73021cf7df679ce3579d9ba55bef9b547277d990b1934f24c161d841c55b5cbdba8196c039c2ba8d8fe1777bf3f78a30f0008e0e4da8a4402e9b114d952453c17a35a640b2a389ec464c9c9fc52b344d90b58a99210ba4d9dbd8470673d9dcbc38af4ba6733260e77e8a3fd6ac1d3c2578b922f568c6e2f3173e307baf0b20bfe55025192aa0f326a3926386bcd278694154e81fabb27c3f27740084682f5683c8db8f3d674f62ac3015b5525af81c0131f74285cb2abbb8eddad8ea949217433b89aac46c0f97f8a8bd3fbf3bf89d684b1f53e5fe528f52b58766cf2db775a28ca4d7fbe54239568872807547dcfcfac7c7ccb5c148e5fc296e6bcdae44f6611d54a9d664051c8501193c47a966814bb816244147159b9eebf0b98a4622287ba1c4b66e07c876a12fdcb8bfe10db8d493866fe0a0273968fe75693bba5ac89d89057ee5f9cbd609e2f389260304bd57b4b8ab39ca26cdb76dc75b3b2e9ec6c38b2861b715f02f6e1e386334149427640c61eab955edc6643e9fde1c880d218aee77ebda53256b8cfb50154cbcf931976caaad61b4085803336a8ce3d3342b68ae70a80cb883b4e44339f656a2dfca355f5abf7fbc791cb05f53b651cdf9ac12badb3d081e2fb07b3330797341672c53db64694b58d547b32774c99b2311485aebc59d2007f013696b8aeb18d024cb4e20029606c3271b3a0769a66955c3e400c7b5b0f2b3a9e748c8920183662e66c50d762a1b31c3b1560bb5eadb3a197692611b1bcb5c263487af02f76202e31128ed373922558fa41e46ac08ddb75f43f962cce2d6963c1d55d51911240ef2e6dcb24a44083cd33069c1b08a91570a2544f96ca71ab9e3393b54c9235a6524e0dfe68a389f7151e1e59"], &(0x7f0000000000)=0x1008) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r7, 0x3}, &(0x7f0000000080)=0x8) 22:35:28 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000810500000000000000000000009c", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100761f00"/32, @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x400e800}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@deltclass={0x34, 0x29, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xffe0, 0x1a}, {0xffe0, 0xf}, {0x8, 0xfff3}}, [@tclass_kind_options=@c_fq_codel={0xd, 0x1, 'fq_codel\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000084) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 22:35:28 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000000206d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="3250087cef5517e5518a5930304ec30d8c5e4806c76419b6a48f48d3a77e6de3c54d8db77b2d4cfb2355f65325bf18b95a539e202040a864b7de888a996554abcf1ff61e22eae61ea2901579c373828ceb085fcecfdd9969454f4f623b0fa1530569999670a483ed47cc077a5277eb5592375de78108f3bb9b6cac3d91509352bd46cca77fe531c18ce4ff34cdd340e4bfb5e422c0bf", 0x96) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x13) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x1c, r4, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r4, 0xd04, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00'}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$CHAR_RAW_BSZSET(r5, 0x40081271, &(0x7f0000000000)=0x4) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r6, 0x300, 0x70bd2d, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000028) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r6, 0x20, 0x70bd2a, 0x711879ee, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) unlink(&(0x7f0000000240)='./file0\x00') 22:35:28 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) 22:35:28 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) [ 2953.782189] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:35:29 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) [ 2953.882699] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2953.936798] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 22:35:29 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) [ 2953.986142] bond0: Enslaving veth667 as an active interface with an up link [ 2954.042816] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:35:29 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0), 0x8) 22:35:29 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x10400, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = dup(r7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r8, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x24008010}, 0x8080) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000240)={'dummy0\x00', {0x2, 0x4e20, @multicast1}}) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x1409, 0x100, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) 22:35:29 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0), 0x8) 22:35:29 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0), 0x8) 22:35:32 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) 22:35:32 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:35:32 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 22:35:32 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) accept4$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:32 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x800, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x2, &(0x7f0000000040)='./file0/file0\x00', r4, &(0x7f0000000100)="fc39b9c21551a1e369373b88a173a9552503d2c5caddc6fdd9b2b76b5b1d7ae5164d697df4ea907803c3cd8de89fb6395846b384ab62246897e7810419eda812b9815ed65d4ab3acbe59e05c54a9f1c7948a4f450a16cb309263ec80f0a759387c18750a86a3d4ebb6c48bed16b7ea5b700f14df4b08832667c0dd194e342d5d1407602341d76eb2c4dcf148643e8fd6b97ed32a25bbfafdfab532bae00780f604c5b208fe1872d72436981bbd12030c66210a908d84134964d44b9ee9cfe8514a88858d56956045d0db1f2ca83fa76cc3b89b7f78e17e44ff374bf794ae04499cd9dc12db78c3c9981d8c9e9df6a2dc247977c162844f0da15c61359cec795ac348240ebdb4b94bca785008219ce62f000438fc893872b5156f364132a89009b642df8c44dfa5c406724a860d2c0a5e") clone(0x2000000010100500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:32 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 22:35:32 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) setuid(r2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:32 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) 22:35:32 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 22:35:32 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SOUND_OLD_MIXER_INFO(r5, 0x80304d65, &(0x7f0000000080)) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x40000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 22:35:32 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x7ff) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) 22:35:32 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNAPSHOT_CREATE_IMAGE(r5, 0x40043311, &(0x7f0000000140)) syz_extract_tcp_res(&(0x7f0000000100), 0x80000001, 0x11) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_DEVMASK(r6, 0x80044dfe, &(0x7f0000000000)) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$CHAR_RAW_IOMIN(r5, 0x1278, &(0x7f0000000040)) [ 2958.290472] [ 2958.292556] ================================ [ 2958.299658] WARNING: inconsistent lock state [ 2958.305080] 4.14.193-syzkaller #0 Not tainted [ 2958.311401] -------------------------------- [ 2958.318128] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 2958.327150] swapper/1/0 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 2958.334046] (slock-AF_BLUETOOTH-BTPROTO_SCO){+.?.}, at: [] sco_sock_timeout+0x1a/0x150 [ 2958.344850] {SOFTIRQ-ON-W} state was registered at: [ 2958.351971] lock_acquire+0x170/0x3f0 [ 2958.357533] _raw_spin_lock+0x2a/0x40 [ 2958.361415] sco_conn_del+0xb0/0x1e0 [ 2958.365294] sco_disconn_cfm+0x50/0x60 [ 2958.370288] hci_conn_hash_flush+0x114/0x220 [ 2958.375057] hci_dev_do_close+0x542/0xc50 [ 2958.383598] hci_unregister_dev+0x170/0x7a0 [ 2958.388746] vhci_release+0x70/0xe0 [ 2958.394070] __fput+0x25f/0x7a0 [ 2958.399591] task_work_run+0x11f/0x190 [ 2958.406934] do_exit+0xa08/0x27f0 [ 2958.412101] do_group_exit+0x100/0x2e0 [ 2958.420723] get_signal+0x38d/0x1ca0 [ 2958.425531] do_signal+0x7c/0x1550 [ 2958.429531] exit_to_usermode_loop+0x160/0x200 [ 2958.434742] do_syscall_64+0x4a3/0x640 [ 2958.439411] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2958.445095] irq event stamp: 37331864 [ 2958.450069] hardirqs last enabled at (37331864): [] _raw_spin_unlock_irq+0x24/0x80 [ 2958.465597] hardirqs last disabled at (37331863): [] _raw_spin_lock_irq+0x35/0x80 [ 2958.476365] softirqs last enabled at (37331856): [] irq_enter+0xbd/0xd0 [ 2958.485369] softirqs last disabled at (37331857): [] irq_exit+0x193/0x240 [ 2958.497237] [ 2958.497237] other info that might help us debug this: [ 2958.507144] Possible unsafe locking scenario: [ 2958.507144] [ 2958.515709] CPU0 [ 2958.519836] ---- [ 2958.522867] lock(slock-AF_BLUETOOTH-BTPROTO_SCO); [ 2958.528591] [ 2958.531849] lock(slock-AF_BLUETOOTH-BTPROTO_SCO); [ 2958.538898] [ 2958.538898] *** DEADLOCK *** [ 2958.538898] [ 2958.548481] 1 lock held by swapper/1/0: [ 2958.554136] #0: (((&sk->sk_timer))#2){+.-.}, at: [] call_timer_fn+0xb8/0x650 [ 2958.565771] [ 2958.565771] stack backtrace: [ 2958.572547] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.14.193-syzkaller #0 [ 2958.581636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2958.594031] Call Trace: [ 2958.596999] [ 2958.599335] dump_stack+0x1b2/0x283 [ 2958.603338] print_usage_bug.cold+0x42e/0x570 [ 2958.608794] mark_lock+0xb4d/0x1050 [ 2958.613589] ? print_irq_inversion_bug+0xd0/0xd0 [ 2958.619903] __lock_acquire+0xc81/0x3f20 [ 2958.624343] ? trace_hardirqs_on+0x10/0x10 [ 2958.629044] ? __lock_acquire+0x5fc/0x3f20 [ 2958.633570] ? trace_hardirqs_on+0x10/0x10 [ 2958.638849] ? mark_held_locks+0xa6/0xf0 [ 2958.643351] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2958.650358] ? debug_object_deactivate+0x1da/0x2e0 [ 2958.655689] lock_acquire+0x170/0x3f0 [ 2958.660569] ? sco_sock_timeout+0x1a/0x150 [ 2958.665449] _raw_spin_lock+0x2a/0x40 [ 2958.669747] ? sco_sock_timeout+0x1a/0x150 [ 2958.674329] sco_sock_timeout+0x1a/0x150 [ 2958.678794] call_timer_fn+0x14a/0x650 [ 2958.683738] ? sco_sock_shutdown+0x1f0/0x1f0 [ 2958.689160] ? collect_expired_timers+0x250/0x250 [ 2958.696366] ? _raw_spin_unlock_irq+0x24/0x80 [ 2958.701471] ? sco_sock_shutdown+0x1f0/0x1f0 [ 2958.706752] expire_timers+0x232/0x4d0 [ 2958.710882] run_timer_softirq+0x1d5/0x5a0 [ 2958.715490] ? expire_timers+0x4d0/0x4d0 [ 2958.721144] ? kvm_sched_clock_read+0x5/0x10 [ 2958.726288] ? sched_clock+0x2a/0x40 [ 2958.731199] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2958.736662] __do_softirq+0x254/0xa1d [ 2958.740640] ? check_preemption_disabled+0x35/0x240 [ 2958.746545] irq_exit+0x193/0x240 [ 2958.750432] smp_apic_timer_interrupt+0x141/0x5e0 [ 2958.755864] apic_timer_interrupt+0x93/0xa0 [ 2958.760264] [ 2958.762499] RIP: 0010:native_safe_halt+0xe/0x10 [ 2958.767581] RSP: 0018:ffff8880a98d7ea8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff10 [ 2958.775966] RAX: 1ffffffff0fa2d24 RBX: dffffc0000000000 RCX: 0000000000000000 [ 2958.783931] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff8880a98c4bc4 [ 2958.791738] RBP: ffffffff87d16910 R08: 0000000000000000 R09: 0000000000000000 [ 2958.799969] R10: 0000000000000000 R11: 0000000000000000 R12: ffffed1015318868 [ 2958.808542] R13: ffff8880a98c4340 R14: 0000000000000000 R15: 0000000000000000 [ 2958.816695] default_idle+0x47/0x370 [ 2958.820637] do_idle+0x250/0x3c0 [ 2958.824338] cpu_startup_entry+0x14/0x20 [ 2958.829381] start_secondary+0x488/0x5f0 [ 2958.834008] secondary_startup_64+0xa5/0xb0 22:35:35 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup(r2) 22:35:35 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00'}) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000000)={0x18, 0x7}) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:35 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000040)={0x0, 0xcd, 0x1f, &(0x7f0000000000)=0x8}) 22:35:35 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r5 = dup3(r4, r3, 0x9cccd866d227e22e) ioctl$DRM_IOCTL_MODE_GETFB(r5, 0xc01c64ad, &(0x7f0000000000)={0x5, 0x1, 0x0, 0x6, 0x2, 0xff, 0x7}) 22:35:35 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x2, 'veth0_to_team\x00', {0x9}, 0x1}) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket(0xa, 0x3, 0xfffeffff) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000100)=0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80001, 0x0) 22:35:35 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:35 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) 22:35:35 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000040)={0x0, 0xcd, 0x1f, &(0x7f0000000000)=0x8}) 22:35:35 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x2, 'veth0_to_team\x00', {0x9}, 0x1}) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket(0xa, 0x3, 0xfffeffff) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000100)=0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80001, 0x0) 22:35:35 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000000)={@private0}, &(0x7f0000000080)=0x14) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 22:35:35 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000040)={0x0, 0xcd, 0x1f, &(0x7f0000000000)=0x8}) 22:35:35 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x2, 'veth0_to_team\x00', {0x9}, 0x1}) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket(0xa, 0x3, 0xfffeffff) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000100)=0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80001, 0x0) 22:35:38 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup(r2) 22:35:38 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:38 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:38 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x2, 'veth0_to_team\x00', {0x9}, 0x1}) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) r1 = socket(0xa, 0x3, 0xfffeffff) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000100)=0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80001, 0x0) 22:35:38 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000810500000000000000000000009c", @ANYRESOCT=r0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES16=r0, @ANYRESOCT], 0x44}}, 0x0) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000080)=0x4, 0x4) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x6, 0x4) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 22:35:38 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) [ 2962.943772] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 22:35:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wg1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13, 0xb9, 0x1, 0x200}}) [ 2963.051713] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:35:38 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup(r2) [ 2963.135408] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2963.188023] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2963.207747] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 22:35:38 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) copy_file_range(r3, &(0x7f0000000080)=0x10001, r5, &(0x7f0000000100), 0x0, 0x0) 22:35:38 executing program 2: r0 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000000c0)={r5}, 0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={r5, 0x823}, 0x8) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:38 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3f, 0x400000) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000180)={0x3, [0x3f0, 0x6, 0x7]}, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x5, &(0x7f0000000100)=""/82) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x3, 0x2, 0xc35c000, 0x7b21b77b, 0xffffffff, 0x6}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mq_getsetattr(r2, &(0x7f0000000200)={0x1, 0x401, 0x1f, 0x1f16}, 0x0) connect$bt_sco(r4, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0xa46) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 22:35:41 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup(r2) 22:35:41 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x448880, 0x0) signalfd(r0, &(0x7f0000000040)={[0x56]}, 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) 22:35:41 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 22:35:41 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pread64(r4, &(0x7f0000000140)=""/156, 0x9c, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 22:35:41 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) copy_file_range(r3, &(0x7f0000000080)=0x10001, r5, &(0x7f0000000100), 0x0, 0x0) 22:35:41 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) copy_file_range(r3, &(0x7f0000000080)=0x10001, r5, &(0x7f0000000100), 0x0, 0x0) [ 2966.004524] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:35:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x8000}, {r2, 0x10}, {r0}, {r0, 0x48}], 0x4, 0x3) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r4, 0x300, 0x70bd2a, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x9}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x408d1) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f00000000c0)={0x1f, @none}, 0x8) ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, &(0x7f0000000000)={"d26bffdafbf7af9207d358bf4c4004aaf426996c86d25313675575b6a4d8", 0x4, 0x7, 0x1, [0x200, 0xec, 0x0, 0x8, 0x7, 0x293952c7, 0xb25, 0x20, 0x4, 0x1000, 0x6, 0x7fffffff, 0xfffffff8, 0x400, 0x7f, 0x5, 0x6, 0x10001]}) 22:35:41 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup(r2) 22:35:41 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) copy_file_range(r3, &(0x7f0000000080)=0x10001, r5, &(0x7f0000000100), 0x0, 0x0) [ 2966.161002] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:35:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_ro(r1, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 22:35:41 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(r4) copy_file_range(r3, &(0x7f0000000080)=0x10001, r5, &(0x7f0000000100), 0x0, 0x0) 22:35:41 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x3, 0x2, 0x0, 0x3f, 0xfffffffffffffa81, 0x5458, 0xffffffff, 0x4, 0x8}, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)