d:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3026.063737] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3026.069030] Node 0 DMA32 free:66072kB min:36296kB low:45368kB high:54440kB active_anon:1501340kB inactive_anon:58924kB active_file:1124kB inactive_file:7976kB unevictable:16156kB writepending:192kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:17472kB pagetables:61416kB bounce:0kB free_pcp:276kB local_pcp:136kB free_cma:0kB [ 3026.100548] lowmem_reserve[]: 0 0 0 0 0 [ 3026.104552] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3026.130408] lowmem_reserve[]: 0 0 0 0 0 [ 3026.134413] Node 1 Normal free:55696kB min:53592kB low:66988kB high:80384kB active_anon:2545084kB inactive_anon:803564kB active_file:4kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:38848kB pagetables:88544kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3026.164665] lowmem_reserve[]: 0 0 0 0 0 [ 3026.168736] Node 0 DMA: 6*4kB (UE) 2*8kB (UM) 2*16kB (M) 1*32kB (E) 3*64kB (ME) 3*128kB (UME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10408kB [ 3026.183946] Node 0 DMA32: 82*4kB (ME) 235*8kB (UE) 291*16kB (UME) 385*32kB (UMH) 160*64kB (UME) 28*128kB (UME) 7*256kB (M) 3*512kB (UM) 1*1024kB (E) 13*2048kB (M) 0*4096kB = 63984kB [ 3026.200638] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3026.211474] Node 1 Normal: 168*4kB (UMEH) 1672*8kB (UMEH) 749*16kB (UMEH) 561*32kB (UMEH) 172*64kB (UMEH) 5*128kB (UME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55632kB [ 3026.227239] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3026.236079] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3026.244768] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3026.253697] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3026.263278] 16777 total pagecache pages [ 3026.270225] 0 pages in swap cache [ 3026.273685] Swap cache stats: add 0, delete 0, find 0/0 [ 3026.281927] Free swap = 0kB 09:32:34 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000180)="9d884c3a049b159b720c6ef1ee8853f3048e6174ee1a699a3ccdd659c46890caa5551669f149f663c32a2e7248261487a73f8cd172bf90377b9878c3fbac42dc59f1cc468cdf8445b11b3c836ff36410cad1983b05707feb20652ed5f132051d18decdf53e", 0x65, r0) 09:32:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000005340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005300)={&(0x7f0000004c00)={0x6b4, 0x0, 0x200, 0x0, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x20b7fdc}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0x1ff, 0x0, 0xb2, 0x401}, {0x3, 0xe1, 0x81, 0x2bf}, {0x1, 0x8, 0x0, 0x7}, {0xfffc, 0x8, 0x7f, 0xffffff81}, {0x0, 0x81, 0x8, 0xb69b}, {0x2, 0x3, 0x1, 0x8001}]}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x6b4}}, 0x4000) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x110) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, @perf_config_ext={0x200000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x13, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x4000001) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="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", 0x1d9, 0x805, 0x0, 0x0) [ 3026.284946] Total swap = 0kB [ 3026.290784] 1965979 pages RAM [ 3026.293874] 0 pages HighMem/MovableOnly [ 3026.299528] 338456 pages reserved [ 3026.302974] 0 pages cma reserved [ 3026.306316] Out of memory: Kill process 23558 (syz-executor.3) score 1005 or sacrifice child [ 3026.318924] Killed process 23558 (syz-executor.3) total-vm:75372kB, anon-rss:6564kB, file-rss:34816kB, shmem-rss:0kB 09:32:35 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000180)="9d884c3a049b159b720c6ef1ee8853f3048e6174ee1a699a3ccdd659c46890caa5551669f149f663c32a2e7248261487a73f8cd172bf90377b9878c3fbac42dc59f1cc468cdf8445b11b3c836ff36410cad1983b05707feb20652ed5f132051d18decdf53e", 0x65, r0) [ 3026.380066] encrypted_key: master key parameter 'e.Õñ2ÞÍõ>' is invalid 09:32:35 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r2, 0xc004500a, 0x0) 09:32:35 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffffba, &(0x7f0000000340), 0x0, 0x0, 0x6686}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') creat(0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x101) openat$vcsa(0xffffffffffffff9c, 0x0, 0x440000, 0x0) tee(0xffffffffffffffff, r1, 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') 09:32:35 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) dup3(r0, r1, 0x0) 09:32:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x130042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) 09:32:35 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000180)="9d884c3a049b159b720c6ef1ee8853f3048e6174ee1a699a3ccdd659c46890caa5551669f149f663c32a2e7248261487a73f8cd172bf90377b9878c3fbac42dc59f1cc468cdf8445b11b3c836ff36410cad1983b05707feb20652ed5f132051d18decdf53e", 0x65, r0) 09:32:35 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chroot(&(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000180)='./file0\x00', 0x2) chroot(&(0x7f0000000080)='./file0\x00') 09:32:35 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) dup3(r0, r1, 0x0) [ 3026.879622] encrypted_key: master key parameter 'e.Õñ2ÞÍõ>' is invalid [ 3027.002061] syz-executor.1 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3027.040964] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 3027.054169] CPU: 1 PID: 6351 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 3027.061978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3027.071324] Call Trace: [ 3027.073912] dump_stack+0x1b2/0x283 [ 3027.077552] dump_header+0x178/0x7aa [ 3027.081262] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3027.086279] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3027.091378] ? ___ratelimit+0x2cd/0x522 [ 3027.095357] oom_kill_process.cold+0x10/0xc16 [ 3027.099854] ? lock_downgrade+0x6e0/0x6e0 [ 3027.104004] out_of_memory+0x2d5/0x10f0 [ 3027.107996] ? oom_killer_disable+0x1c0/0x1c0 [ 3027.112488] ? mutex_trylock+0x152/0x1a0 [ 3027.116575] __alloc_pages_nodemask+0x2556/0x2730 [ 3027.121435] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3027.126276] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3027.131121] ? HARDIRQ_verbose+0x10/0x10 [ 3027.135178] ? cache_grow_begin+0x3f/0x410 [ 3027.139400] cache_grow_begin+0x91/0x410 [ 3027.143443] fallback_alloc+0x205/0x2b0 [ 3027.147398] kmem_cache_alloc+0x1e5/0x3c0 [ 3027.151526] getname_flags+0xc8/0x550 [ 3027.155305] user_path_at_empty+0x2a/0x50 [ 3027.159435] vfs_statx+0xd1/0x160 [ 3027.162867] ? vfs_statx_fd+0x90/0x90 [ 3027.166652] ? lock_downgrade+0x6e0/0x6e0 [ 3027.170778] SyS_newlstat+0x83/0xe0 [ 3027.174381] ? SyS_newstat+0xe0/0xe0 [ 3027.178074] ? SyS_umount+0x180/0xc00 [ 3027.181852] ? SyS_old_readdir+0x130/0x130 [ 3027.186172] ? __detach_mounts+0x2e0/0x2e0 [ 3027.190387] ? __do_page_fault+0x19a/0xb50 [ 3027.194599] ? do_syscall_64+0x4c/0x640 [ 3027.198551] ? SyS_newstat+0xe0/0xe0 [ 3027.202243] do_syscall_64+0x1d5/0x640 [ 3027.206116] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3027.211282] RIP: 0033:0x45be75 [ 3027.214449] RSP: 002b:00007ffc53b21868 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 3027.222155] RAX: ffffffffffffffda RBX: 00000000002e3009 RCX: 000000000045be75 [ 3027.229411] RDX: 00007ffc53b21880 RSI: 00007ffc53b21880 RDI: 00007ffc53b21910 [ 3027.236658] RBP: 00000000000030f1 R08: 0000000000000000 R09: 0000000000000011 [ 3027.243904] R10: 000000000000000a R11: 0000000000000246 R12: 00007ffc53b229a0 [ 3027.251152] R13: 00000000019ac940 R14: 0000000000000000 R15: 00007ffc53b229a0 09:32:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000005340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005300)={&(0x7f0000004c00)={0x6b4, 0x0, 0x200, 0x0, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x20b7fdc}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0x1ff, 0x0, 0xb2, 0x401}, {0x3, 0xe1, 0x81, 0x2bf}, {0x1, 0x8, 0x0, 0x7}, {0xfffc, 0x8, 0x7f, 0xffffff81}, {0x0, 0x81, 0x8, 0xb69b}, {0x2, 0x3, 0x1, 0x8001}]}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x6b4}}, 0x4000) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x110) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, @perf_config_ext={0x200000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x13, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x4000001) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="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", 0x1d9, 0x805, 0x0, 0x0) [ 3027.333711] encrypted_key: master key parameter 'e.Õñ2ÞÍõ>' is invalid 09:32:36 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) dup3(r0, r1, 0x0) 09:32:36 executing program 4: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0xd, r2}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 3027.475487] Mem-Info: [ 3027.503802] active_anon:1011651 inactive_anon:215622 isolated_anon:0 [ 3027.503802] active_file:817 inactive_file:2020 isolated_file:0 [ 3027.503802] unevictable:10062 dirty:99 writeback:8 unstable:0 [ 3027.503802] slab_reclaimable:22825 slab_unreclaimable:171700 [ 3027.503802] mapped:59692 shmem:8366 pagetables:37560 bounce:0 [ 3027.503802] free:32755 free_pcp:53 free_cma:0 09:32:36 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x9f9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x5) recvmmsg(r1, &(0x7f0000000c00)=[{{&(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, 0x0}}, {{&(0x7f0000000b80)=@generic, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/118, 0x76}], 0x1, &(0x7f0000000780)=""/58, 0x3a}}, {{&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0}, 0xfffffffa}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f00)=""/132, 0x84}], 0x1}}, {{&(0x7f0000001000)=@nfc_llcp, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x7e, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400f7fffff8) syz_genetlink_get_family_id$fou(0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x20008000) [ 3027.588932] nla_parse: 50 callbacks suppressed [ 3027.593741] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3027.603042] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3027.612028] Node 0 active_anon:1503552kB inactive_anon:58924kB active_file:3192kB inactive_file:8128kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:233392kB dirty:460kB writeback:64kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 782336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3027.653408] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3027.663454] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3027.673585] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 09:32:36 executing program 2: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000070605640000000000008000000000000500010006"], 0x1c}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) [ 3027.683624] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3027.693815] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3027.704114] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3027.713583] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3027.723533] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 09:32:36 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @random="0982e32fef90", @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010105, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0x38, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev]}, @timestamp={0x44, 0x4}]}}}}}}, 0x0) [ 3027.915044] Node 1 active_anon:2545084kB inactive_anon:803564kB active_file:4kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5604kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3028.015124] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3028.063575] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3028.073585] Node 0 DMA32 free:62896kB min:36296kB low:45368kB high:54440kB active_anon:1513536kB inactive_anon:58924kB active_file:604kB inactive_file:600kB unevictable:16156kB writepending:300kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:17568kB pagetables:61544kB bounce:0kB free_pcp:144kB local_pcp:0kB free_cma:0kB [ 3028.110405] lowmem_reserve[]: 0 0 0 0 0 [ 3028.114967] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3028.141450] lowmem_reserve[]: 0 0 0 0 0 [ 3028.145625] Node 1 Normal free:55688kB min:53592kB low:66988kB high:80384kB active_anon:2545084kB inactive_anon:803564kB active_file:4kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:38848kB pagetables:88544kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3028.176223] lowmem_reserve[]: 0 0 0 0 0 [ 3028.187730] Node 0 DMA: 6*4kB (UE) 1*8kB (M) 3*16kB (UM) 2*32kB (UE) 3*64kB (ME) 3*128kB (UME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10448kB 09:32:36 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) dup3(r0, r1, 0x0) [ 3028.213227] Node 0 DMA32: 549*4kB (UME) 872*8kB (UME) 238*16kB (UME) 388*32kB (UM) 174*64kB (UME) 35*128kB (UME) 7*256kB (M) 3*512kB (UM) 1*1024kB (E) 8*2048kB (UM) 0*4096kB = 61748kB [ 3028.273975] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3028.293246] Node 1 Normal: 168*4kB (UMEH) 1655*8kB (UMEH) 752*16kB (UMEH) 560*32kB (UMEH) 172*64kB (UMEH) 5*128kB (UME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55512kB [ 3028.319009] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3028.334046] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 09:32:37 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x1, 0x0) recvfrom$inet(r0, 0x0, 0x202, 0x0, 0x0, 0x10000007c) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(0x0, &(0x7f00000004c0)) r2 = socket(0x27, 0x0, 0x9) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'gre0\x00', 0x20}) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000000)) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000380)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0/file0\x00', 0xe, 0x0) getsockname$tipc(r2, 0x0, &(0x7f0000000080)) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8) lstat(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000580)) r5 = syz_open_dev$loop(0x0, 0x4, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000240)={@any, 0x1}) ioctl$TIOCSCTTY(r0, 0x540e, 0x100000000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x114, 0x0, 0x7], 0x2, 0x400, 0x200, 0x0, 0x47fffffff}) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x1c, 0x9, 0x0, 0x3ff, 0x0, 0x0, 0x8429, 0x0, 0xd00, 0x0, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x8000000000000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x6, 0x0, 0x7, 0xfffffffffffffffe, 0x200, 0x0, 0x80000000, 0x6, @perf_config_ext={0x3}, 0x18136a86e1929510, 0x40, 0x5, 0x7, 0x0, 0x8880, 0xc23}, 0x0, 0x10000e, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000740)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) io_setup(0x2, &(0x7f0000000180)) [ 3028.373503] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3028.383529] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 09:32:37 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x5}, 0x100, 0x0, 0x0, 0x4, 0x80, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x8000, 0x9}) clone(0x24221500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) sched_getattr(0x0, &(0x7f0000000180)={0x38}, 0x38, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @private=0xa010101}], 0x10) 09:32:37 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x5, {0xa, 0x0, 0x0, @private0}}, 0x24) [ 3028.416339] 17291 total pagecache pages [ 3028.421996] 0 pages in swap cache [ 3028.425977] Swap cache stats: add 0, delete 0, find 0/0 [ 3028.438202] Free swap = 0kB [ 3028.442435] Total swap = 0kB [ 3028.452587] 1965979 pages RAM [ 3028.473207] 0 pages HighMem/MovableOnly [ 3028.495098] 338456 pages reserved [ 3028.499149] 0 pages cma reserved [ 3028.504392] Out of memory: Kill process 17968 (syz-executor.4) score 1005 or sacrifice child [ 3028.520945] Killed process 17968 (syz-executor.4) total-vm:75108kB, anon-rss:4268kB, file-rss:35840kB, shmem-rss:0kB [ 3028.665669] audit: type=1800 audit(1592213557.339:1993): pid=7786 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=16739 res=0 [ 3029.206520] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3029.219517] systemd-journal cpuset=/ mems_allowed=0-1 [ 3029.224778] CPU: 1 PID: 3635 Comm: systemd-journal Not tainted 4.14.184-syzkaller #0 [ 3029.232647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3029.241989] Call Trace: [ 3029.244585] dump_stack+0x1b2/0x283 [ 3029.248211] dump_header+0x178/0x7aa [ 3029.252021] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3029.257017] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3029.262124] ? ___ratelimit+0x2cd/0x522 [ 3029.266080] oom_kill_process.cold+0x10/0xc16 [ 3029.270563] ? lock_downgrade+0x6e0/0x6e0 [ 3029.274702] out_of_memory+0x2d5/0x10f0 [ 3029.278666] ? oom_killer_disable+0x1c0/0x1c0 [ 3029.283158] ? mutex_trylock+0x152/0x1a0 [ 3029.287224] __alloc_pages_nodemask+0x2556/0x2730 [ 3029.292406] ? kmemdup+0x23/0x50 [ 3029.295763] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3029.300600] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3029.305436] ? HARDIRQ_verbose+0x10/0x10 [ 3029.309500] ? cache_grow_begin+0x3f/0x410 [ 3029.314150] cache_grow_begin+0x91/0x410 [ 3029.318207] fallback_alloc+0x205/0x2b0 [ 3029.322174] kmem_cache_alloc+0x1e5/0x3c0 [ 3029.326304] getname_flags+0xc8/0x550 [ 3029.330096] user_path_at_empty+0x2a/0x50 [ 3029.334227] SyS_faccessat+0x21b/0x680 [ 3029.338100] ? SyS_fallocate+0x80/0x80 [ 3029.341967] ? do_syscall_64+0x4c/0x640 [ 3029.345919] ? SyS_faccessat+0x680/0x680 [ 3029.349959] do_syscall_64+0x1d5/0x640 [ 3029.353842] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3029.359008] RIP: 0033:0x7f86d07dc9c7 [ 3029.362697] RSP: 002b:00007ffe17a63f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 3029.370392] RAX: ffffffffffffffda RBX: 00007ffe17a66e30 RCX: 00007f86d07dc9c7 [ 3029.377641] RDX: 00007f86d124da00 RSI: 0000000000000000 RDI: 000055b94d14b9a3 [ 3029.384899] RBP: 00007ffe17a63f50 R08: 0000000000000000 R09: 0000000000000000 [ 3029.392146] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 3029.399392] R13: 0000000000000000 R14: 00007ffe17a66e30 R15: 00007ffe17a64440 [ 3029.412898] Mem-Info: [ 3029.415402] active_anon:1018308 inactive_anon:215622 isolated_anon:0 [ 3029.415402] active_file:1481 inactive_file:2215 isolated_file:0 [ 3029.415402] unevictable:10062 dirty:422 writeback:0 unstable:0 [ 3029.415402] slab_reclaimable:22770 slab_unreclaimable:171457 [ 3029.415402] mapped:60873 shmem:8366 pagetables:37531 bounce:0 [ 3029.415402] free:25572 free_pcp:41 free_cma:0 [ 3029.484290] audit: type=1800 audit(1592213558.149:1994): pid=7786 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=16739 res=0 [ 3029.616963] Node 0 active_anon:1509440kB inactive_anon:58924kB active_file:5920kB inactive_file:6396kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:235324kB dirty:532kB writeback:8kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 770048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3029.696707] Node 1 active_anon:2545084kB inactive_anon:803564kB active_file:12kB inactive_file:188kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5604kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3029.745998] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 09:32:38 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002500)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0xfce8) 09:32:38 executing program 2: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000070605640000000000008000000000000500010006"], 0x1c}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) 09:32:38 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x4000024) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 09:32:38 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x5}, 0x100, 0x0, 0x0, 0x4, 0x80, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x8000, 0x9}) clone(0x24221500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) sched_getattr(0x0, &(0x7f0000000180)={0x38}, 0x38, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @private=0xa010101}], 0x10) 09:32:38 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chroot(&(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000180)='./file0\x00', 0x2) chroot(&(0x7f0000000080)='./file0\x00') 09:32:38 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x9f9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x5) recvmmsg(r1, &(0x7f0000000c00)=[{{&(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, 0x0}}, {{&(0x7f0000000b80)=@generic, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/118, 0x76}], 0x1, &(0x7f0000000780)=""/58, 0x3a}}, {{&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0}, 0xfffffffa}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f00)=""/132, 0x84}], 0x1}}, {{&(0x7f0000001000)=@nfc_llcp, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x7e, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400f7fffff8) syz_genetlink_get_family_id$fou(0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x20008000) [ 3029.836074] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3029.853526] Node 0 DMA32 free:64064kB min:36296kB low:45368kB high:54440kB active_anon:1509272kB inactive_anon:58924kB active_file:3360kB inactive_file:3964kB unevictable:16156kB writepending:440kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:17248kB pagetables:61384kB bounce:0kB free_pcp:216kB local_pcp:44kB free_cma:0kB [ 3030.055422] lowmem_reserve[]: 0 0 0 0 0 [ 3030.074614] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 09:32:38 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chroot(&(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000180)='./file0\x00', 0x2) chroot(&(0x7f0000000080)='./file0\x00') [ 3030.154902] lowmem_reserve[]: 0 0 0 0 0 [ 3030.163590] Node 1 Normal free:55840kB min:53592kB low:66988kB high:80384kB active_anon:2545080kB inactive_anon:803564kB active_file:4kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:38880kB pagetables:88544kB bounce:0kB free_pcp:124kB local_pcp:28kB free_cma:0kB [ 3030.411256] lowmem_reserve[]: 0 0 0 0 0 [ 3030.465848] Node 0 DMA: 6*4kB (UE) 1*8kB (M) 3*16kB (UM) 2*32kB (UE) 3*64kB (ME) 3*128kB (UME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10448kB [ 3030.541266] Node 0 DMA32: 1010*4kB (UME) 441*8kB (ME) 284*16kB (UME) 321*32kB (UM) 190*64kB (UME) 41*128kB (UME) 7*256kB (M) 3*512kB (UM) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 50288kB 09:32:39 executing program 2: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000070605640000000000008000000000000500010006"], 0x1c}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) [ 3030.587718] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3030.601179] Node 1 Normal: 106*4kB (UMEH) 1596*8kB (UMEH) 768*16kB (UMEH) 570*32kB (UMEH) 174*64kB (UMEH) 7*128kB (UME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55752kB [ 3030.627977] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3030.637584] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3030.680970] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3030.703302] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3030.727213] 15802 total pagecache pages 09:32:39 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chroot(&(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000180)='./file0\x00', 0x2) chroot(&(0x7f0000000080)='./file0\x00') [ 3030.733900] 0 pages in swap cache [ 3030.737757] Swap cache stats: add 0, delete 0, find 0/0 [ 3030.743387] Free swap = 0kB [ 3030.746835] Total swap = 0kB [ 3030.750282] 1965979 pages RAM [ 3030.762664] 0 pages HighMem/MovableOnly [ 3030.771410] 338456 pages reserved [ 3030.789899] 0 pages cma reserved [ 3030.802794] Out of memory: Kill process 23368 (syz-executor.0) score 1005 or sacrifice child 09:32:39 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x4000024) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) [ 3030.843090] Killed process 23368 (syz-executor.0) total-vm:75240kB, anon-rss:6324kB, file-rss:34816kB, shmem-rss:0kB 09:32:39 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chroot(&(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000180)='./file0\x00', 0x2) chroot(&(0x7f0000000080)='./file0\x00') [ 3030.941859] oom_reaper: reaped process 23368 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3031.060269] audit: type=1800 audit(1592213559.739:1995): pid=7835 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=17117 res=0 09:32:39 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x5}, 0x100, 0x0, 0x0, 0x4, 0x80, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x8000, 0x9}) clone(0x24221500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) sched_getattr(0x0, &(0x7f0000000180)={0x38}, 0x38, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @private=0xa010101}], 0x10) 09:32:40 executing program 2: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000070605640000000000008000000000000500010006"], 0x1c}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) 09:32:40 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chroot(&(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000180)='./file0\x00', 0x2) chroot(&(0x7f0000000080)='./file0\x00') 09:32:40 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x9f9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x5) recvmmsg(r1, &(0x7f0000000c00)=[{{&(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, 0x0}}, {{&(0x7f0000000b80)=@generic, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/118, 0x76}], 0x1, &(0x7f0000000780)=""/58, 0x3a}}, {{&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0}, 0xfffffffa}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f00)=""/132, 0x84}], 0x1}}, {{&(0x7f0000001000)=@nfc_llcp, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x7e, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400f7fffff8) syz_genetlink_get_family_id$fou(0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x20008000) 09:32:40 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x4000024) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 09:32:41 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chroot(&(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000180)='./file0\x00', 0x2) chroot(&(0x7f0000000080)='./file0\x00') 09:32:41 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x5}, 0x100, 0x0, 0x0, 0x4, 0x80, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x8000, 0x9}) clone(0x24221500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) sched_getattr(0x0, &(0x7f0000000180)={0x38}, 0x38, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @private=0xa010101}], 0x10) [ 3032.461281] audit: type=1800 audit(1592213561.139:1996): pid=7865 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=16792 res=0 09:32:41 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x4000024) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 09:32:41 executing program 1: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40002002) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94}], 0x100488, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000), 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0x1}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5, &(0x7f0000000740)=[{&(0x7f0000000380)="010bff579e3e7be05c49f2fbcc64179491a2d72c16a80275fbb1997e8e843efcace6906dd2f5b30a8bfe6de96d5b8555611cd554c15d3b5a06d69deb54251acadcdc13ece08552baca3ae583e134a21b46b2ed363857c623d8e2c0f05ed718f0e8b3f1d486bc9400a2b82e6bbda3eaf9f8fc3eb24853f3e1a6501e41ccbc73fd991b0b8b2c3cf9761759e2c60ee3f5d7f658d47a679bab8fe51cbdcdd075fab7", 0xa0, 0x4000000000000}, {0x0}, {&(0x7f0000000540)="90a56b3263c24fdec4233a7fee0e91bc8d701a1b70e3289c64db0020f8baa06db49b93bd12cb2e3194a25c3892ad0ad91856cef980e31df3401a50", 0x3b}, {&(0x7f0000000640)="7f2ed0f738b4dba3373c199a65ef13cb6b9574cfe0578fc1872ddc2da1a4e10f7a829c99042ba86f28fc97424c2bb93e6c01c3b5fe59dec07408ba5cf92793c2cda0312681", 0x45}, {&(0x7f00000006c0)="84342630314c1b7e53738cddda539274d81b3a9aada1c2f5d775728f4d8dd706784c290e485b807d34b365b8ddb97e89592f500bcc3ea95aaa87a8f8900d693d09a8a771b7ee0f632f807cbe09a5dbc867ce35fb392a1b6648ef205050badbf6ac1d1c45806961eac266afba", 0x6c, 0x100000000}], 0x100000, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x10b, &(0x7f00000002c0)="2178492b96330d831587cb88eda68ff76e5a4ad0edd088d3fbc2dbb0961a5bf395b37f1a27dd4df063a6e7e8f6e784364ddc188f8cc60a2bfe5237868d7a9653d74368cbe1652cca00bc89c7ac3487e40ddb5980ddd6c768cb475e6a86d4320c19130f14f7152b8e59b925a7bf488fa4625801857370c7", 0x77) [ 3032.760793] syz-executor.4 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3032.862139] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3032.895859] CPU: 1 PID: 7862 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 3032.903678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3032.913028] Call Trace: [ 3032.915614] dump_stack+0x1b2/0x283 [ 3032.919245] dump_header+0x178/0x7aa [ 3032.922952] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3032.927955] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3032.933045] ? ___ratelimit+0x2cd/0x522 [ 3032.937011] oom_kill_process.cold+0x10/0xc16 [ 3032.941487] ? lock_downgrade+0x6e0/0x6e0 [ 3032.945612] out_of_memory+0x2d5/0x10f0 [ 3032.949566] ? oom_killer_disable+0x1c0/0x1c0 [ 3032.954035] ? mutex_trylock+0x152/0x1a0 [ 3032.958074] __alloc_pages_nodemask+0x2556/0x2730 [ 3032.962896] ? HARDIRQ_verbose+0x10/0x10 [ 3032.966946] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3032.971789] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3032.976782] ? kmem_cache_alloc_node+0x387/0x400 [ 3032.981518] copy_process.part.0+0x26a/0x6fa0 [ 3032.986019] ? do_raw_spin_unlock+0x164/0x250 [ 3032.990500] ? _raw_spin_unlock+0x29/0x40 [ 3032.994622] ? do_anonymous_page+0x62d/0x17d0 [ 3032.999095] ? finish_fault+0x290/0x290 [ 3033.003047] ? check_preemption_disabled+0x35/0x240 [ 3033.008054] ? __cleanup_sighand+0x40/0x40 [ 3033.012271] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 3033.017176] ? vm_insert_mixed_mkwrite+0x30/0x30 [ 3033.021920] ? HARDIRQ_verbose+0x10/0x10 [ 3033.025959] _do_fork+0x180/0xc80 [ 3033.029394] ? fork_idle+0x270/0x270 [ 3033.033087] ? up_read+0x17/0x30 [ 3033.036429] ? __do_page_fault+0x19a/0xb50 [ 3033.040645] ? do_syscall_64+0x4c/0x640 [ 3033.044596] ? sys_vfork+0x20/0x20 [ 3033.048114] do_syscall_64+0x1d5/0x640 [ 3033.051982] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3033.057147] RIP: 0033:0x45f429 [ 3033.060328] RSP: 002b:00007ffe62ee3808 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3033.068014] RAX: ffffffffffffffda RBX: 00007fc9d7a34700 RCX: 000000000045f429 [ 3033.075259] RDX: 00007fc9d7a349d0 RSI: 00007fc9d7a33db0 RDI: 00000000003d0f00 [ 3033.082506] RBP: 00007ffe62ee3a30 R08: 00007fc9d7a34700 R09: 00007fc9d7a34700 [ 3033.089757] R10: 00007fc9d7a349d0 R11: 0000000000000202 R12: 0000000000000000 [ 3033.097113] R13: 00007ffe62ee38bf R14: 00007fc9d7a349c0 R15: 000000000078bfac 09:32:41 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x9f9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x5) recvmmsg(r1, &(0x7f0000000c00)=[{{&(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, 0x0}}, {{&(0x7f0000000b80)=@generic, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/118, 0x76}], 0x1, &(0x7f0000000780)=""/58, 0x3a}}, {{&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0}, 0xfffffffa}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f00)=""/132, 0x84}], 0x1}}, {{&(0x7f0000001000)=@nfc_llcp, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x7e, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400f7fffff8) syz_genetlink_get_family_id$fou(0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x20008000) [ 3034.181656] Mem-Info: [ 3034.185410] active_anon:1016283 inactive_anon:215622 isolated_anon:0 [ 3034.185410] active_file:19 inactive_file:2083 isolated_file:128 [ 3034.185410] unevictable:10062 dirty:1058 writeback:501 unstable:0 [ 3034.185410] slab_reclaimable:22422 slab_unreclaimable:171066 [ 3034.185410] mapped:58585 shmem:8366 pagetables:37588 bounce:0 [ 3034.185410] free:29678 free_pcp:192 free_cma:0 [ 3034.390915] Node 0 active_anon:1520152kB inactive_anon:58924kB active_file:292kB inactive_file:1988kB unevictable:16156kB isolated(anon):0kB isolated(file):256kB mapped:227236kB dirty:232kB writeback:4kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 794624kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3034.428593] Node 1 active_anon:2545080kB inactive_anon:803564kB active_file:4kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5604kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3034.575852] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3034.765775] lowmem_reserve[]: 0 2559 2559 2559 2559 09:32:43 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x4000024) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 09:32:43 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) 09:32:43 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30009, 0x0) [ 3034.821956] Node 0 DMA32 free:56200kB min:36296kB low:45368kB high:54440kB active_anon:1519784kB inactive_anon:58924kB active_file:192kB inactive_file:5224kB unevictable:16156kB writepending:416kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:17376kB pagetables:61660kB bounce:0kB free_pcp:684kB local_pcp:636kB free_cma:0kB [ 3035.021077] lowmem_reserve[]: 0 0 0 0 0 [ 3035.032075] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3035.064916] lowmem_reserve[]: 0 0 0 0 0 [ 3035.070111] Node 1 Normal free:55572kB min:53592kB low:66988kB high:80384kB active_anon:2545080kB inactive_anon:803564kB active_file:4kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:38912kB pagetables:88544kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3035.112666] lowmem_reserve[]: 0 0 0 0 0 [ 3035.117097] Node 0 DMA: 6*4kB (UE) 2*8kB (UM) 2*16kB (M) 2*32kB (UE) 3*64kB (ME) 3*128kB (UME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10440kB [ 3035.132906] Node 0 DMA32: 1344*4kB (UME) 780*8kB (UME) 362*16kB (UME) 351*32kB (UM) 202*64kB (UME) 43*128kB (UME) 6*256kB (M) 4*512kB (UM) 1*1024kB (E) 5*2048kB (M) 0*4096kB = 61920kB [ 3035.152891] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3035.163878] Node 1 Normal: 105*4kB (UMEH) 1517*8kB (UMEH) 759*16kB (UMEH) 582*32kB (UMEH) 177*64kB (UMEH) 7*128kB (UME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55548kB [ 3035.183683] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3035.192845] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3035.202505] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3035.211558] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3035.220390] 14130 total pagecache pages [ 3035.224471] 0 pages in swap cache [ 3035.228163] Swap cache stats: add 0, delete 0, find 0/0 [ 3035.233615] Free swap = 0kB [ 3035.236899] Total swap = 0kB [ 3035.240015] 1965979 pages RAM [ 3035.243201] 0 pages HighMem/MovableOnly [ 3035.247375] 338456 pages reserved [ 3035.250903] 0 pages cma reserved [ 3035.254367] Out of memory: Kill process 23507 (syz-executor.3) score 1005 or sacrifice child [ 3035.263238] Killed process 23507 (syz-executor.3) total-vm:75240kB, anon-rss:6328kB, file-rss:34816kB, shmem-rss:0kB [ 3035.372869] oom_reaper: reaped process 23507 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3037.623344] audit: type=1800 audit(1592213566.299:1997): pid=7908 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=15887 res=0 09:32:46 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f00000001c0), 0x4) 09:32:46 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x4000024) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 09:32:46 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x4000024) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 09:32:46 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) 09:32:46 executing program 1: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40002002) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94}], 0x100488, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000), 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0x1}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5, &(0x7f0000000740)=[{&(0x7f0000000380)="010bff579e3e7be05c49f2fbcc64179491a2d72c16a80275fbb1997e8e843efcace6906dd2f5b30a8bfe6de96d5b8555611cd554c15d3b5a06d69deb54251acadcdc13ece08552baca3ae583e134a21b46b2ed363857c623d8e2c0f05ed718f0e8b3f1d486bc9400a2b82e6bbda3eaf9f8fc3eb24853f3e1a6501e41ccbc73fd991b0b8b2c3cf9761759e2c60ee3f5d7f658d47a679bab8fe51cbdcdd075fab7", 0xa0, 0x4000000000000}, {0x0}, {&(0x7f0000000540)="90a56b3263c24fdec4233a7fee0e91bc8d701a1b70e3289c64db0020f8baa06db49b93bd12cb2e3194a25c3892ad0ad91856cef980e31df3401a50", 0x3b}, {&(0x7f0000000640)="7f2ed0f738b4dba3373c199a65ef13cb6b9574cfe0578fc1872ddc2da1a4e10f7a829c99042ba86f28fc97424c2bb93e6c01c3b5fe59dec07408ba5cf92793c2cda0312681", 0x45}, {&(0x7f00000006c0)="84342630314c1b7e53738cddda539274d81b3a9aada1c2f5d775728f4d8dd706784c290e485b807d34b365b8ddb97e89592f500bcc3ea95aaa87a8f8900d693d09a8a771b7ee0f632f807cbe09a5dbc867ce35fb392a1b6648ef205050badbf6ac1d1c45806961eac266afba", 0x6c, 0x100000000}], 0x100000, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x10b, &(0x7f00000002c0)="2178492b96330d831587cb88eda68ff76e5a4ad0edd088d3fbc2dbb0961a5bf395b37f1a27dd4df063a6e7e8f6e784364ddc188f8cc60a2bfe5237868d7a9653d74368cbe1652cca00bc89c7ac3487e40ddb5980ddd6c768cb475e6a86d4320c19130f14f7152b8e59b925a7bf488fa4625801857370c7", 0x77) [ 3037.975766] syz-executor.3 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3037.998247] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3038.016471] CPU: 1 PID: 6355 Comm: syz-executor.3 Not tainted 4.14.184-syzkaller #0 [ 3038.016477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3038.016480] Call Trace: [ 3038.016497] dump_stack+0x1b2/0x283 [ 3038.016512] dump_header+0x178/0x7aa [ 3038.016520] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3038.016530] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3038.016540] ? ___ratelimit+0x2cd/0x522 [ 3038.016550] oom_kill_process.cold+0x10/0xc16 [ 3038.016561] ? lock_downgrade+0x6e0/0x6e0 [ 3038.066344] out_of_memory+0x2d5/0x10f0 [ 3038.070325] ? oom_killer_disable+0x1c0/0x1c0 [ 3038.074818] ? mutex_trylock+0x152/0x1a0 [ 3038.078892] __alloc_pages_nodemask+0x2556/0x2730 [ 3038.083845] ? HARDIRQ_verbose+0x10/0x10 [ 3038.087905] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3038.092758] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3038.097770] ? kmem_cache_alloc_node+0x387/0x400 [ 3038.102614] copy_process.part.0+0x26a/0x6fa0 [ 3038.107100] ? check_preemption_disabled+0x35/0x240 [ 3038.112125] ? perf_trace_lock+0x109/0x4b0 [ 3038.116356] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 3038.121282] ? HARDIRQ_verbose+0x10/0x10 [ 3038.125347] ? __cleanup_sighand+0x40/0x40 [ 3038.129573] ? lock_downgrade+0x6e0/0x6e0 [ 3038.133727] _do_fork+0x180/0xc80 [ 3038.137180] ? put_timespec64+0xaa/0xf0 [ 3038.141149] ? fork_idle+0x270/0x270 [ 3038.144860] ? SyS_clock_gettime+0xf5/0x180 [ 3038.149177] ? SyS_clock_settime+0x1a0/0x1a0 [ 3038.153591] ? do_syscall_64+0x4c/0x640 [ 3038.157559] ? sys_vfork+0x20/0x20 [ 3038.161096] do_syscall_64+0x1d5/0x640 [ 3038.164990] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3038.170175] RIP: 0033:0x45b08a [ 3038.173355] RSP: 002b:00007ffe12d769f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3038.181165] RAX: ffffffffffffffda RBX: 00007ffe12d769f0 RCX: 000000000045b08a [ 3038.188415] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3038.195660] RBP: 00007ffe12d76a30 R08: 0000000000000001 R09: 0000000001e7e940 [ 3038.202907] R10: 0000000001e7ec10 R11: 0000000000000246 R12: 0000000000000001 [ 3038.210179] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe12d76a80 [ 3038.285742] Mem-Info: [ 3038.297990] active_anon:1017230 inactive_anon:215622 isolated_anon:0 [ 3038.297990] active_file:593 inactive_file:1237 isolated_file:0 [ 3038.297990] unevictable:10062 dirty:70 writeback:25 unstable:0 [ 3038.297990] slab_reclaimable:22589 slab_unreclaimable:170845 [ 3038.297990] mapped:58972 shmem:8366 pagetables:37566 bounce:0 [ 3038.297990] free:28482 free_pcp:106 free_cma:0 [ 3038.385724] Node 0 active_anon:1517996kB inactive_anon:58924kB active_file:3068kB inactive_file:9804kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:231684kB dirty:3380kB writeback:100kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 794624kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 09:32:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x60, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) [ 3038.504661] Node 1 active_anon:2545080kB inactive_anon:803564kB active_file:4kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5604kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3038.689471] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3038.837802] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3038.869173] Node 0 DMA32 free:65036kB min:36296kB low:45368kB high:54440kB active_anon:1513712kB inactive_anon:58924kB active_file:704kB inactive_file:1160kB unevictable:16156kB writepending:388kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:17344kB pagetables:61860kB bounce:0kB free_pcp:1092kB local_pcp:492kB free_cma:0kB [ 3039.005390] lowmem_reserve[]: 0 0 0 0 0 [ 3039.020169] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3039.084996] lowmem_reserve[]: 0 0 0 0 0 [ 3039.094484] Node 1 Normal free:56824kB min:53592kB low:66988kB high:80384kB active_anon:2545080kB inactive_anon:803564kB active_file:4kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39296kB pagetables:88544kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3039.128446] lowmem_reserve[]: 0 0 0 0 0 [ 3039.132797] Node 0 DMA: 6*4kB (UE) 1*8kB (M) 3*16kB (UM) 2*32kB (UE) 3*64kB (ME) 3*128kB (UME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10448kB [ 3039.150024] Node 0 DMA32: 773*4kB (UME) 725*8kB (UME) 300*16kB (UME) 348*32kB (UM) 205*64kB (UME) 44*128kB (UME) 6*256kB (M) 4*512kB (UM) 1*1024kB (E) 8*2048kB (M) 0*4096kB = 64572kB [ 3039.167184] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3039.178244] Node 1 Normal: 104*4kB (UMEH) 1734*8kB (UMEH) 734*16kB (UMEH) 573*32kB (UMEH) 180*64kB (UMEH) 8*128kB (UME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 56912kB [ 3039.194099] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3039.203153] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3039.212233] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3039.221236] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3039.232370] 14539 total pagecache pages [ 3039.236700] 0 pages in swap cache [ 3039.240241] Swap cache stats: add 0, delete 0, find 0/0 [ 3039.245907] Free swap = 0kB [ 3039.249170] Total swap = 0kB [ 3039.252278] 1965979 pages RAM [ 3039.258612] 0 pages HighMem/MovableOnly [ 3039.270636] 338456 pages reserved [ 3039.278004] 0 pages cma reserved [ 3039.283697] Out of memory: Kill process 23613 (syz-executor.3) score 1005 or sacrifice child [ 3039.292541] Killed process 23613 (syz-executor.3) total-vm:75372kB, anon-rss:6104kB, file-rss:34816kB, shmem-rss:0kB 09:32:48 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) 09:32:48 executing program 1: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40002002) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94}], 0x100488, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000), 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0x1}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5, &(0x7f0000000740)=[{&(0x7f0000000380)="010bff579e3e7be05c49f2fbcc64179491a2d72c16a80275fbb1997e8e843efcace6906dd2f5b30a8bfe6de96d5b8555611cd554c15d3b5a06d69deb54251acadcdc13ece08552baca3ae583e134a21b46b2ed363857c623d8e2c0f05ed718f0e8b3f1d486bc9400a2b82e6bbda3eaf9f8fc3eb24853f3e1a6501e41ccbc73fd991b0b8b2c3cf9761759e2c60ee3f5d7f658d47a679bab8fe51cbdcdd075fab7", 0xa0, 0x4000000000000}, {0x0}, {&(0x7f0000000540)="90a56b3263c24fdec4233a7fee0e91bc8d701a1b70e3289c64db0020f8baa06db49b93bd12cb2e3194a25c3892ad0ad91856cef980e31df3401a50", 0x3b}, {&(0x7f0000000640)="7f2ed0f738b4dba3373c199a65ef13cb6b9574cfe0578fc1872ddc2da1a4e10f7a829c99042ba86f28fc97424c2bb93e6c01c3b5fe59dec07408ba5cf92793c2cda0312681", 0x45}, {&(0x7f00000006c0)="84342630314c1b7e53738cddda539274d81b3a9aada1c2f5d775728f4d8dd706784c290e485b807d34b365b8ddb97e89592f500bcc3ea95aaa87a8f8900d693d09a8a771b7ee0f632f807cbe09a5dbc867ce35fb392a1b6648ef205050badbf6ac1d1c45806961eac266afba", 0x6c, 0x100000000}], 0x100000, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x10b, &(0x7f00000002c0)="2178492b96330d831587cb88eda68ff76e5a4ad0edd088d3fbc2dbb0961a5bf395b37f1a27dd4df063a6e7e8f6e784364ddc188f8cc60a2bfe5237868d7a9653d74368cbe1652cca00bc89c7ac3487e40ddb5980ddd6c768cb475e6a86d4320c19130f14f7152b8e59b925a7bf488fa4625801857370c7", 0x77) 09:32:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x60, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) 09:32:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x60, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) 09:32:48 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) 09:32:48 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) 09:32:48 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0xd5, &(0x7f00000001c0), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, 0x0, 0x280001, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x200000d, 0x0, @perf_bp={0x0}, 0x5430, 0x0, 0x0, 0x0, 0x2, 0x10001}, 0x0, 0x0, r5, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000280)=""/171) write$nbd(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESOCT=0x0], 0x2b) ioctl$KVM_RUN(r4, 0xae80, 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000240)) dup3(r2, r3, 0x80000) dup2(r1, r4) getdents(0xffffffffffffffff, 0x0, 0x700000000000000) 09:32:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3200, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002000000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, 0x0) mremap(&(0x7f0000115000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000048c000/0x1000)=nil) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) mmap$usbmon(&(0x7f0000113000/0x3000)=nil, 0x3000, 0x4, 0x8010, r1, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x4) 09:32:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x60, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) 09:32:48 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4400000000000000, 0x0}) 09:32:49 executing program 3: renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000001340)="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", 0x3ab}], 0x1) 09:32:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3200, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002000000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, 0x0) mremap(&(0x7f0000115000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000048c000/0x1000)=nil) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) mmap$usbmon(&(0x7f0000113000/0x3000)=nil, 0x3000, 0x4, 0x8010, r1, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x4) 09:32:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/icmp\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000277, 0x0) 09:32:51 executing program 3: renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000001340)="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", 0x3ab}], 0x1) 09:32:51 executing program 0: renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000001340)="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", 0x3ab}], 0x1) 09:32:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3200, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002000000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, 0x0) mremap(&(0x7f0000115000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000048c000/0x1000)=nil) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) mmap$usbmon(&(0x7f0000113000/0x3000)=nil, 0x3000, 0x4, 0x8010, r1, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x4) 09:32:51 executing program 1: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40002002) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94}], 0x100488, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000), 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0x1}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5, &(0x7f0000000740)=[{&(0x7f0000000380)="010bff579e3e7be05c49f2fbcc64179491a2d72c16a80275fbb1997e8e843efcace6906dd2f5b30a8bfe6de96d5b8555611cd554c15d3b5a06d69deb54251acadcdc13ece08552baca3ae583e134a21b46b2ed363857c623d8e2c0f05ed718f0e8b3f1d486bc9400a2b82e6bbda3eaf9f8fc3eb24853f3e1a6501e41ccbc73fd991b0b8b2c3cf9761759e2c60ee3f5d7f658d47a679bab8fe51cbdcdd075fab7", 0xa0, 0x4000000000000}, {0x0}, {&(0x7f0000000540)="90a56b3263c24fdec4233a7fee0e91bc8d701a1b70e3289c64db0020f8baa06db49b93bd12cb2e3194a25c3892ad0ad91856cef980e31df3401a50", 0x3b}, {&(0x7f0000000640)="7f2ed0f738b4dba3373c199a65ef13cb6b9574cfe0578fc1872ddc2da1a4e10f7a829c99042ba86f28fc97424c2bb93e6c01c3b5fe59dec07408ba5cf92793c2cda0312681", 0x45}, {&(0x7f00000006c0)="84342630314c1b7e53738cddda539274d81b3a9aada1c2f5d775728f4d8dd706784c290e485b807d34b365b8ddb97e89592f500bcc3ea95aaa87a8f8900d693d09a8a771b7ee0f632f807cbe09a5dbc867ce35fb392a1b6648ef205050badbf6ac1d1c45806961eac266afba", 0x6c, 0x100000000}], 0x100000, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x10b, &(0x7f00000002c0)="2178492b96330d831587cb88eda68ff76e5a4ad0edd088d3fbc2dbb0961a5bf395b37f1a27dd4df063a6e7e8f6e784364ddc188f8cc60a2bfe5237868d7a9653d74368cbe1652cca00bc89c7ac3487e40ddb5980ddd6c768cb475e6a86d4320c19130f14f7152b8e59b925a7bf488fa4625801857370c7", 0x77) 09:32:51 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0xd5, &(0x7f00000001c0), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, 0x0, 0x280001, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x200000d, 0x0, @perf_bp={0x0}, 0x5430, 0x0, 0x0, 0x0, 0x2, 0x10001}, 0x0, 0x0, r5, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000280)=""/171) write$nbd(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESOCT=0x0], 0x2b) ioctl$KVM_RUN(r4, 0xae80, 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000240)) dup3(r2, r3, 0x80000) dup2(r1, r4) getdents(0xffffffffffffffff, 0x0, 0x700000000000000) 09:32:51 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @random="32970b4fa595", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x4, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x2}]}}}}}}}}, 0x0) 09:32:51 executing program 4: ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="70000000000119050301000008000000027d0000240001001400010008000100ffffffff08000200ac1e00e70b0002000500010000000000240002000c00020005000100000000001400010008000100e000000208000200d58dd400080007"], 0x70}, 0x1, 0x0, 0x0, 0x20800}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000580)={0x0, 0x60, &(0x7f0000000200)={0x0}, 0xb, 0x6000000}, 0x0) 09:32:51 executing program 0: renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000001340)="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", 0x3ab}], 0x1) 09:32:52 executing program 3: renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000001340)="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", 0x3ab}], 0x1) 09:32:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3200, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002000000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, 0x0) mremap(&(0x7f0000115000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000048c000/0x1000)=nil) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) mmap$usbmon(&(0x7f0000113000/0x3000)=nil, 0x3000, 0x4, 0x8010, r1, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x4) 09:32:52 executing program 3: renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000001340)="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", 0x3ab}], 0x1) 09:32:52 executing program 1: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) clone(0x5fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2e5d947a0fbad9392d2b3a"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) 09:32:53 executing program 0: renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000001340)="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", 0x3ab}], 0x1) 09:32:53 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) write$UHID_INPUT(r0, &(0x7f0000000900)={0x8, {"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", 0x1000}}, 0x1006) [ 3045.121948] libceph: resolve '.]”zºÙ9-+' (ret=-3): failed [ 3045.122027] libceph: resolve '.]”zºÙ9-+' (ret=-3): failed [ 3045.127940] libceph: parse_ips bad ip '.]”zºÙ9-+' [ 3045.139302] libceph: parse_ips bad ip '.]”zºÙ9-+' 09:32:53 executing program 2: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0, r2}}, 0x20) 09:32:54 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0xd5, &(0x7f00000001c0), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, 0x0, 0x280001, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x200000d, 0x0, @perf_bp={0x0}, 0x5430, 0x0, 0x0, 0x0, 0x2, 0x10001}, 0x0, 0x0, r5, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000280)=""/171) write$nbd(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESOCT=0x0], 0x2b) ioctl$KVM_RUN(r4, 0xae80, 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000240)) dup3(r2, r3, 0x80000) dup2(r1, r4) getdents(0xffffffffffffffff, 0x0, 0x700000000000000) 09:32:54 executing program 1: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) clone(0x5fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2e5d947a0fbad9392d2b3a"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) 09:32:54 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10000000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:32:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x64, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x10, 0xffffffffffffffff, 0x12) r0 = socket$alg(0x26, 0x5, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x6017e, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r4 = dup(r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x3, r6, 0x1c, 0x1, @ib={0x1b, 0x9, 0x31, {"3289179faf4ba8d93de98468cc71ec23"}, 0x2, 0xeb14, 0x5}}}, 0xa0) r7 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x800fe) sendfile(r4, r7, 0x0, 0x8000fffffffe) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f0000000180)=""/132, &(0x7f0000000240)=0x84) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) 09:32:54 executing program 3: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) 09:32:54 executing program 2: perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r2 = socket$inet(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000600)={0x0, 0x36, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1c, r1, 0x31905e13403123b7, 0x0, 0x0, {0xb, 0x0, 0xf000}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x50000}, 0x0) 09:32:54 executing program 1: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) clone(0x5fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2e5d947a0fbad9392d2b3a"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) [ 3045.448523] libceph: resolve '.]”zºÙ9-+' (ret=-3): failed [ 3045.463675] libceph: parse_ips bad ip '.]”zºÙ9-+' [ 3045.477438] audit: type=1804 audit(1592213574.159:1998): pid=8062 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir430635961/syzkaller.uvhcnn/3717/bus" dev="sda1" ino=16818 res=1 09:32:54 executing program 3: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) [ 3045.879861] libceph: resolve '.]”zºÙ9-+' (ret=-3): failed [ 3045.913034] libceph: parse_ips bad ip '.]”zºÙ9-+' 09:32:54 executing program 1: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) clone(0x5fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2e5d947a0fbad9392d2b3a"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) 09:32:54 executing program 3: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) [ 3046.460567] libceph: resolve '.]”zºÙ9-+' (ret=-3): failed [ 3046.482230] audit: type=1804 audit(1592213575.159:1999): pid=8083 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir430635961/syzkaller.uvhcnn/3717/bus" dev="sda1" ino=16818 res=1 [ 3046.524329] libceph: parse_ips bad ip '.]”zºÙ9-+' 09:32:55 executing program 3: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) 09:32:55 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='status\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) preadv(r0, &(0x7f00000017c0), 0x375, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmdt(0x0) 09:32:55 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0xd5, &(0x7f00000001c0), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, 0x0, 0x280001, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x200000d, 0x0, @perf_bp={0x0}, 0x5430, 0x0, 0x0, 0x0, 0x2, 0x10001}, 0x0, 0x0, r5, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000280)=""/171) write$nbd(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESOCT=0x0], 0x2b) ioctl$KVM_RUN(r4, 0xae80, 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000240)) dup3(r2, r3, 0x80000) dup2(r1, r4) getdents(0xffffffffffffffff, 0x0, 0x700000000000000) 09:32:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x64, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x10, 0xffffffffffffffff, 0x12) r0 = socket$alg(0x26, 0x5, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x6017e, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r4 = dup(r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x3, r6, 0x1c, 0x1, @ib={0x1b, 0x9, 0x31, {"3289179faf4ba8d93de98468cc71ec23"}, 0x2, 0xeb14, 0x5}}}, 0xa0) r7 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x800fe) sendfile(r4, r7, 0x0, 0x8000fffffffe) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f0000000180)=""/132, &(0x7f0000000240)=0x84) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) 09:32:56 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10000000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:32:56 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='status\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) preadv(r0, &(0x7f00000017c0), 0x375, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmdt(0x0) 09:32:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x64, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x10, 0xffffffffffffffff, 0x12) r0 = socket$alg(0x26, 0x5, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x6017e, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r4 = dup(r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x3, r6, 0x1c, 0x1, @ib={0x1b, 0x9, 0x31, {"3289179faf4ba8d93de98468cc71ec23"}, 0x2, 0xeb14, 0x5}}}, 0xa0) r7 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x800fe) sendfile(r4, r7, 0x0, 0x8000fffffffe) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f0000000180)=""/132, &(0x7f0000000240)=0x84) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) 09:32:56 executing program 5: timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x3, @thr={0x0, 0x0}}, 0x0) 09:32:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000ff02000000000000000000000000000108000a0000001700060002000100000014001f00000000000000000000b9"], 0x5c}}, 0x0) 09:32:56 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10000000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:32:56 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='status\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) preadv(r0, &(0x7f00000017c0), 0x375, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmdt(0x0) [ 3047.870480] audit: type=1804 audit(1592213576.549:2000): pid=8113 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir430635961/syzkaller.uvhcnn/3718/bus" dev="sda1" ino=16919 res=1 [ 3048.258017] audit: type=1804 audit(1592213576.939:2001): pid=8119 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir318074168/syzkaller.GpgOHj/3827/bus" dev="sda1" ino=16417 res=1 09:32:57 executing program 3: r0 = memfd_create(&(0x7f0000000340)='\vbm1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff\xc4\xf3yz\x02\x00kM\xb2\xd4k\xa2\xcc\x19\x1b\x12\b%\x92ACa\xeb\xf3\xe6L\\\xbcZ\x8b?\xd9\xc3\xf5\xbd\xb7B~D)\xfb\xa5x\x119Q\xbc1\xeak\x1aj`\xb5\x8e\xd1H\'\x11\xf2P\x01h\xb8\f\xb6\xd6\x96\x9d1\xedo\xe1\x8b\xcc\xf5\xba\xa4a#efb\x8f\xd2\x9a\xbf|\x15\xd7\x16S&\x18\x89;\xf8\\\x80\xec\xaa\xdb\\\xaa\\Y7S\xb9\xb3\x17T\xfb\x92\xbac\xe6\x95|\xbfB\xf0\x8b', 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[], 0x72) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f00000002c0)=[{}], 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0xc, 0x0, &(0x7f00000000c0)) 09:32:57 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='status\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) preadv(r0, &(0x7f00000017c0), 0x375, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmdt(0x0) 09:32:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x64, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x10, 0xffffffffffffffff, 0x12) r0 = socket$alg(0x26, 0x5, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x6017e, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r4 = dup(r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x3, r6, 0x1c, 0x1, @ib={0x1b, 0x9, 0x31, {"3289179faf4ba8d93de98468cc71ec23"}, 0x2, 0xeb14, 0x5}}}, 0xa0) r7 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x800fe) sendfile(r4, r7, 0x0, 0x8000fffffffe) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f0000000180)=""/132, &(0x7f0000000240)=0x84) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) [ 3049.137566] audit: type=1804 audit(1592213577.819:2002): pid=8136 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir430635961/syzkaller.uvhcnn/3719/bus" dev="sda1" ino=16943 res=1 09:32:58 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10000000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:32:58 executing program 5: perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r2 = socket$inet(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000600)={0x0, 0x36, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1c, r1, 0x31905e13403123b7, 0x0, 0x0, {0xb, 0x0, 0xf000}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x50000}, 0x0) 09:32:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x64, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x10, 0xffffffffffffffff, 0x12) r0 = socket$alg(0x26, 0x5, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x6017e, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r4 = dup(r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x3, r6, 0x1c, 0x1, @ib={0x1b, 0x9, 0x31, {"3289179faf4ba8d93de98468cc71ec23"}, 0x2, 0xeb14, 0x5}}}, 0xa0) r7 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x800fe) sendfile(r4, r7, 0x0, 0x8000fffffffe) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f0000000180)=""/132, &(0x7f0000000240)=0x84) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) 09:32:58 executing program 3: r0 = memfd_create(&(0x7f0000000340)='\vbm1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff\xc4\xf3yz\x02\x00kM\xb2\xd4k\xa2\xcc\x19\x1b\x12\b%\x92ACa\xeb\xf3\xe6L\\\xbcZ\x8b?\xd9\xc3\xf5\xbd\xb7B~D)\xfb\xa5x\x119Q\xbc1\xeak\x1aj`\xb5\x8e\xd1H\'\x11\xf2P\x01h\xb8\f\xb6\xd6\x96\x9d1\xedo\xe1\x8b\xcc\xf5\xba\xa4a#efb\x8f\xd2\x9a\xbf|\x15\xd7\x16S&\x18\x89;\xf8\\\x80\xec\xaa\xdb\\\xaa\\Y7S\xb9\xb3\x17T\xfb\x92\xbac\xe6\x95|\xbfB\xf0\x8b', 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[], 0x72) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f00000002c0)=[{}], 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0xc, 0x0, &(0x7f00000000c0)) 09:32:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x64, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x10, 0xffffffffffffffff, 0x12) r0 = socket$alg(0x26, 0x5, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x6017e, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r4 = dup(r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x3, r6, 0x1c, 0x1, @ib={0x1b, 0x9, 0x31, {"3289179faf4ba8d93de98468cc71ec23"}, 0x2, 0xeb14, 0x5}}}, 0xa0) r7 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x800fe) sendfile(r4, r7, 0x0, 0x8000fffffffe) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f0000000180)=""/132, &(0x7f0000000240)=0x84) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) [ 3050.571206] audit: type=1804 audit(1592213579.249:2003): pid=8143 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir430635961/syzkaller.uvhcnn/3720/bus" dev="sda1" ino=16997 res=1 [ 3050.788613] audit: type=1804 audit(1592213579.469:2004): pid=8147 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir318074168/syzkaller.GpgOHj/3828/bus" dev="sda1" ino=17029 res=1 09:33:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x64, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x10, 0xffffffffffffffff, 0x12) r0 = socket$alg(0x26, 0x5, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x6017e, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r4 = dup(r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x3, r6, 0x1c, 0x1, @ib={0x1b, 0x9, 0x31, {"3289179faf4ba8d93de98468cc71ec23"}, 0x2, 0xeb14, 0x5}}}, 0xa0) r7 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x800fe) sendfile(r4, r7, 0x0, 0x8000fffffffe) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f0000000180)=""/132, &(0x7f0000000240)=0x84) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) 09:33:00 executing program 3: r0 = memfd_create(&(0x7f0000000340)='\vbm1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff\xc4\xf3yz\x02\x00kM\xb2\xd4k\xa2\xcc\x19\x1b\x12\b%\x92ACa\xeb\xf3\xe6L\\\xbcZ\x8b?\xd9\xc3\xf5\xbd\xb7B~D)\xfb\xa5x\x119Q\xbc1\xeak\x1aj`\xb5\x8e\xd1H\'\x11\xf2P\x01h\xb8\f\xb6\xd6\x96\x9d1\xedo\xe1\x8b\xcc\xf5\xba\xa4a#efb\x8f\xd2\x9a\xbf|\x15\xd7\x16S&\x18\x89;\xf8\\\x80\xec\xaa\xdb\\\xaa\\Y7S\xb9\xb3\x17T\xfb\x92\xbac\xe6\x95|\xbfB\xf0\x8b', 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[], 0x72) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f00000002c0)=[{}], 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0xc, 0x0, &(0x7f00000000c0)) 09:33:00 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0x1c0, 0xf0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@empty}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) 09:33:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) getsockopt$inet_tcp_int(r1, 0x6, 0x13, 0x0, &(0x7f0000000040)) 09:33:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110700000000000000000800000008000300", @ANYRES32=r2], 0x24}}, 0x0) 09:33:00 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x10}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 09:33:00 executing program 3: r0 = memfd_create(&(0x7f0000000340)='\vbm1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff\xc4\xf3yz\x02\x00kM\xb2\xd4k\xa2\xcc\x19\x1b\x12\b%\x92ACa\xeb\xf3\xe6L\\\xbcZ\x8b?\xd9\xc3\xf5\xbd\xb7B~D)\xfb\xa5x\x119Q\xbc1\xeak\x1aj`\xb5\x8e\xd1H\'\x11\xf2P\x01h\xb8\f\xb6\xd6\x96\x9d1\xedo\xe1\x8b\xcc\xf5\xba\xa4a#efb\x8f\xd2\x9a\xbf|\x15\xd7\x16S&\x18\x89;\xf8\\\x80\xec\xaa\xdb\\\xaa\\Y7S\xb9\xb3\x17T\xfb\x92\xbac\xe6\x95|\xbfB\xf0\x8b', 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[], 0x72) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f00000002c0)=[{}], 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0xc, 0x0, &(0x7f00000000c0)) [ 3052.499961] audit: type=1804 audit(1592213581.179:2005): pid=8166 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir318074168/syzkaller.GpgOHj/3829/bus" dev="sda1" ino=16838 res=1 [ 3053.170976] xt_CONNSECMARK: cannot load conntrack support for proto=10 09:33:02 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00') sendfile(r0, r1, 0x0, 0x88) 09:33:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000006eb09f0e4231cff4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) msgctl$MSG_STAT(0x0, 0xb, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:33:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELRULE={0x128, 0x8, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_USERDATA={0xe5, 0x7, 0x1, 0x0, "cbe780a26a52d5d067045bcf598823aa78a601924a2dbd519bb72f01a79a74c9bf663b01c0888b6de4224b47c68eac730cbc30d13b4c1432af4a34572b5cdaf23f3a3559e8e14bfb37c23998683384013be0ae020bdca0b4842e0abc3af0b5693accb18ef94849e332738d6512dd0d767faf8108618a111ccb4f0b51536945eff80bd8161e57ee6ac0fb927d17ac96804015373f169aedb3a58a61969978d27623d852450825d492e36292a41c6e43444b057a4c11bdcd329192c18ff9e1be84d5afad7ff34fb6713c4701c7372784254ecaeeb89c6da5adb349cc70ee50af037a"}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}]}]}, @NFT_MSG_DELOBJ={0x80, 0x14, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_HANDLE={0xc}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x0, 0x0, 0x0, {}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_DELOBJ={0x68, 0x14, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_OBJ_HANDLE={0xc}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc}, @NFTA_OBJ_HANDLE={0xc}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x30, 0x14, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TYPE={0x8}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x0, 0x0, 0x0, {}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_POSITION={0xc}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_USERDATA={0x4}, @NFTA_SET_OBJ_TYPE={0x8}]}], {0x14}}, 0x2e8}}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:33:02 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/236, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x1, r1}) dup3(r0, r1, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, 0x0) 09:33:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00') sendfile(r0, r1, 0x0, 0x88) 09:33:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000006eb09f0e4231cff4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) msgctl$MSG_STAT(0x0, 0xb, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:33:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000006eb09f0e4231cff4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) msgctl$MSG_STAT(0x0, 0xb, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:33:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000006eb09f0e4231cff4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) msgctl$MSG_STAT(0x0, 0xb, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:33:04 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00') sendfile(r0, r1, 0x0, 0x88) 09:33:04 executing program 1: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:33:04 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x200}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'veth0_vlan\x00'}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r1 = socket$inet6(0xa, 0x803, 0x1) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) socket(0x0, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[], 0x2e7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000480), 0xa198) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = memfd_create(&(0x7f0000000040)='dummy0\x00', 0x0) r4 = geteuid() geteuid() fsetxattr$system_posix_acl(r3, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="0200000001000000", @ANYRES32=r4, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="040000000700000008000000", @ANYRES32=0x0], 0x3c, 0x0) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x4000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x7, 0x7}, 0x0) [ 3056.279212] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 3056.403451] audit: type=1800 audit(1592213585.079:2006): pid=8207 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="file0" dev="sda1" ino=16927 res=0 [ 3056.926587] ip6_tables: ip6tables: counters copy to user failed while replacing table 09:33:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00') sendfile(r0, r1, 0x0, 0x88) 09:33:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000006eb09f0e4231cff4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) msgctl$MSG_STAT(0x0, 0xb, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:33:05 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 09:33:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000006eb09f0e4231cff4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) msgctl$MSG_STAT(0x0, 0xb, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:33:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000006eb09f0e4231cff4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) msgctl$MSG_STAT(0x0, 0xb, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:33:06 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x200}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'veth0_vlan\x00'}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r1 = socket$inet6(0xa, 0x803, 0x1) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) socket(0x0, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[], 0x2e7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000480), 0xa198) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = memfd_create(&(0x7f0000000040)='dummy0\x00', 0x0) r4 = geteuid() geteuid() fsetxattr$system_posix_acl(r3, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="0200000001000000", @ANYRES32=r4, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="040000000700000008000000", @ANYRES32=0x0], 0x3c, 0x0) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x4000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x7, 0x7}, 0x0) 09:33:06 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{0x8, 0x2}, {}, {0x8, 0x5}, {}, {}, {0x8, 0x1}, {0x8, 0x4}, {}], {0x10, 0x2}}, 0x64, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x6) chown(&(0x7f00000001c0)='./file0\x00', r1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x140900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) socket(0x2c, 0x4, 0x0) chdir(&(0x7f0000000200)='./file0/file0\x00') 09:33:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000006eb09f0e4231cff4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) msgctl$MSG_STAT(0x0, 0xb, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:33:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000006eb09f0e4231cff4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) msgctl$MSG_STAT(0x0, 0xb, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 3057.681028] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 3057.757617] audit: type=1800 audit(1592213586.439:2007): pid=8230 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="file0" dev="sda1" ino=17006 res=0 09:33:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000006eb09f0e4231cff4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) msgctl$MSG_STAT(0x0, 0xb, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:33:06 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 09:33:06 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) pipe(&(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:33:07 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 09:33:07 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x2, 0x1000000000000002, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x602c2, 0x0) write$P9_RSTATu(r4, &(0x7f00000001c0)=ANY=[], 0x26) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000040)=0xfa, 0x4) fallocate(r4, 0x0, 0xffff, 0x9) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) sendfile(r3, r4, 0x0, 0x10001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:33:07 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x5, 0x1, {0x4}}) 09:33:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x10005, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000200)={0x1000, 0x0, 0xffff}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:33:07 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x200}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'veth0_vlan\x00'}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r1 = socket$inet6(0xa, 0x803, 0x1) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) socket(0x0, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[], 0x2e7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000480), 0xa198) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = memfd_create(&(0x7f0000000040)='dummy0\x00', 0x0) r4 = geteuid() geteuid() fsetxattr$system_posix_acl(r3, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="0200000001000000", @ANYRES32=r4, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="040000000700000008000000", @ANYRES32=0x0], 0x3c, 0x0) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x4000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x7, 0x7}, 0x0) 09:33:07 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472612eafc09225240e6e733d66642c7266646e963d", @ANYRESHEX=r2, @ANYRESHEX=r1]) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x0, 0x1, 0xfffffffe, 0x20, 0x7, "4e118ab93d6e0ef4b6941bf3a4c62c5efe2d72", 0x1000}) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x6c) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$UI_GET_VERSION(r1, 0x8004552d, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x24, &(0x7f0000000340)={{{@in6=@mcast2, @in6=@remote}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, 0x10000}, {{@in6=@remote}, 0x0, @in6=@dev={0xfe, 0x80, [], 0x1a}}}, 0xe8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:33:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) 09:33:07 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) close(r0) r4 = socket$unix(0x1, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000c85000)) shutdown(r4, 0x0) [ 3058.685212] ip6_tables: ip6tables: counters copy to user failed while replacing table 09:33:07 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x41) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) dup2(r0, r1) [ 3058.730249] audit: type=1800 audit(1592213587.409:2008): pid=8263 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="file0" dev="sda1" ino=15969 res=0 09:33:07 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) close(r0) r4 = socket$unix(0x1, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000c85000)) shutdown(r4, 0x0) 09:33:07 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 09:33:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x84}]}}]}, 0x38}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 09:33:07 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) close(r0) r4 = socket$unix(0x1, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000c85000)) shutdown(r4, 0x0) [ 3059.290796] nla_parse: 4 callbacks suppressed [ 3059.290802] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 09:33:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x4, 0x590, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"/1424]}, 0x608) 09:33:08 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) close(r0) r4 = socket$unix(0x1, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000c85000)) shutdown(r4, 0x0) [ 3059.518408] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 09:33:08 executing program 2: r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x40101, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 09:33:08 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x200}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'veth0_vlan\x00'}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r1 = socket$inet6(0xa, 0x803, 0x1) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) socket(0x0, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[], 0x2e7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000480), 0xa198) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = memfd_create(&(0x7f0000000040)='dummy0\x00', 0x0) r4 = geteuid() geteuid() fsetxattr$system_posix_acl(r3, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="0200000001000000", @ANYRES32=r4, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="040000000700000008000000", @ANYRES32=0x0], 0x3c, 0x0) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x4000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x7, 0x7}, 0x0) 09:33:08 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getitimer(0x4, &(0x7f0000000100)) [ 3059.876419] audit: type=1800 audit(1592213588.549:2009): pid=8308 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="file0" dev="sda1" ino=17065 res=0 [ 3060.022814] ip6_tables: ip6tables: counters copy to user failed while replacing table 09:33:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40402, 0x0) r1 = inotify_init() r2 = dup3(r0, r1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50}, 0xa2) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TCXONC(r2, 0x540a, 0x1) 09:33:09 executing program 5: unshare(0x8020000) r0 = mq_open(&(0x7f0000000640)='\xab\x0f\xfd\xf7\xbfH\xdc\x86B\xb5)L6\xc8Y\xde\xc4P5\x88\x98\xfe\x908J\xbf\x1c\b\x10\xc1\xae\xc0\x04[\x9aG,Q3`_\x1aF\x12\xe6a\x0e\xd28\xde\xf0Wa\x93\xe2g@\x1c\x9f\x9e{\x01I\xd2\xda\xd1V\xf4\x03\x90f\xcd\x02\xc4<@\x8c\xefS\x14\xc3\x853(XF\x7fQ\xa3?\x9eT\x17\x8d}\xe8\xbd\x0eQ\xd4\bo4\x14\xaa\xfa0l\xcbm:\x1eav\xcd\"\xae\x8f\xd9\xb3\xfc4c\xb3X\xbe:\x87*\xa6\xcd\x02\x8d', 0x42, 0x0, 0x0) close(r0) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') setns(r1, 0x0) 09:33:09 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8002}, 0x1c) 09:33:09 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r0, &(0x7f0000004240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4) recvmmsg(r0, &(0x7f0000002280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2f}}], 0x300, 0x43, 0x0) 09:33:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x4b45, 0x0) 09:33:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) 09:33:10 executing program 3: io_setup(0x3, &(0x7f00000001c0)=0x0) r1 = socket(0x23, 0x805, 0x0) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x2}]) 09:33:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$dh_compute(0x14, 0x0, 0x0, 0x0, 0x0) 09:33:10 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xb732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @private}}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="bffb67f3bc103c9d4648bc1088a8", 0xe}], 0x1) 09:33:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7bcb9e"], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 09:33:10 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00"], 0x80}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 09:33:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x2, 0x0, [{0x0, 0x1, 0x0, 0x0, @msi}, {0x0, 0x0, 0x0, 0x0, @sint}]}) [ 3061.874213] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3061.887296] device ip6gretap2 entered promiscuous mode [ 3061.900332] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 09:33:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000140)={r6}) r7 = dup3(r5, r3, 0x0) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000100)={r6, 0x0, 0x1}) write$sndseq(r7, &(0x7f0000001140)=[{0x57, 0xff, 0x64, 0x4, @tick=0x58b, {0x4, 0x7f}, {0x3, 0x1}, @control={0x1, 0x10001, 0x10000000}}, {0x5b, 0x4, 0xcb, 0xe0, @time={0x4, 0x5}, {0x2}, {0x9, 0xc6}, @note={0x5, 0x5, 0xad}}, {0x8, 0x9, 0xc0, 0xf, @tick=0x4, {0x6, 0x1}, {0x9, 0x3f}, @connect={{0x2, 0x3}, {0x3, 0x7}}}, {0xa2, 0x0, 0x7f, 0x6, @time={0x5, 0x4}, {0x3, 0x1}, {0xc4, 0x5b}, @ext={0x1000, &(0x7f0000000140)="1ed699fa0f8658b2a6166cfeea545f5f2b5b1ba8550618fd59d213bedcd8a4fcb7b2a28a0c560be56fae5bfb4caa4325c8987714d2b7b2f97e7e77d588add8022814d96a13a2ca9864d6664ddd5d3ef44cf8582086f16a237d3aa5b83ff4225feeea29ae7afd85e657c2a223def7cb2c64d7f00510fdd54beb819565f26fdcc7af997c58554659ab56983dbe753c01dac6899187adc46635cb1186efa9cd7a9a01625d64669f35f11936890dfaca3cbf33c18cb6638d5a9667fa136fc55f7a48612f29f9b103b9b84c06ba9edd3ab06e50b8f735549076ea0368248af2f7cf5b88a1eefedba70ace80bb121509fd2edf7eab1dbcb29bdf8128e5b418807ce8abb455e7663bf0ad0edb5f0ec84942a32b630950abc956da85112f13fa52917436e9944468fde4d1fed67120c9038e7cc4b4281b6a450f09eb01571312b61bcf84393f061c18b253750d9ce1fbe701f881a463422e86f77dfd1f16c6a9cb9c343a0eed16ad4505406b3b81ef86a10e720a73f4ab450021a03dc347853bdffb4a5462a07ddc13e9659fc1b9c50ac9bf82f73fc1e28fe1765647e83df144c481ebf378d6b79f6725d3474070db7f44f3f3fa79b66c987c98799a15721d8c5ce79b00558a451b152dca3f552d9df9c3184731466dc83869babfe182bf85a839e52ea6d81efa1d22584a18bcd2c1872a7f9b93a1bc1290e129ad6174b9d435cfe6e98ce0af10a67078e1596d14494f38b7f5c9f11281c8dccf916e1b4f6d9002e923c44643cd0ddda6bac612bd2b1cf36017474523a661dc6ddbeae6ccc8e4580b2b21eb4586df36bcb248ec311936168606e8fdbb47be0412d0a961625333f953d716583e5e52b4dfa924148c15b1fd2bfb5f952a966cb35d03993d4e40cc5f450a2abc167fb89c0b060fec1f43d1e6232013eddab45094c6e2e41d388f4eb8a1c1aa0b182cf531ac0fba1e4f8bcea1037638ebd0f63e91d1485082e5291a746652e1e4a264e796027ed05cb796fc832713ffd746905618eb79b5c0ea938f689fe0f6cac2c51e7ec366167ac07dfbe53bc0f43069a6a7e2898d152942c16a54a5199cf5fe21782f171ac698fec7ceff0ba61d4d6d657334ca0f485380830eafb20057f81b0b32cb9688de75d5ed4acab258747c3d79219e5491bd2e37481e14c2bb9fe933218108e63c5ba5f8e1d1e287eaaacd0901387b163eda2da14a9ab3fe31ba3de42282afb121ac09702a9d769d7f3b1fa9ea28a88e64ba53288767427161e4f4da929350855cd90a5d18435bdc0abe52d880c4c7a5f70866ff31f9edb5a85a52f4f6cd02e73bef80ff34774fb023660e4d46b3edafaa2fd1e5f8566bd63e8426027e3c43d13d84d2726cca29e671c6d690e8650836404118e1f375f7ce7c76a05523a33f7e8b3a6f85f55d4fea961fb8ac51a795d40b4f536b04427dd12e38cbe7090dccb5d1cd8605c2065e489f935362979e10a9b13038b68a23b59a0cfba793887ba0fe096476f1794627f7e446c5c15375ed8b770b9efa7d2730f9593092765a9c7ae86c4d8fefbe729daf555d5cfbc303abb648b115792eb0b8cb13cb59ddb071b05c6fabee77f18251a8c823cdbfacff51401f3cfc76002d879961c57fecb7c7ce635477787f447ac859b8a6089a3b6f012c6f42a5d242714e87fdf604d8b7b7807aeee3398036477ff49ea51699b2fadfd3919c51d4322eca27c67ca56da0fa9296d3bebbe796f5826636d4aebc6f3299466a7ad3123ecc1034112ddc554885700e452c605bb3d99918e26a5055a5b7692162a973fed4adfe1195a237e4a28353a48f299ede3aa645f30a1a09c1259adf150553b3af20366cb0298435b84a2da08e7a0de7ceb20e4bc89ae44237e9a1671ab4c94f0a81e2e607eeae098adfd13854a1f2cc1cf56262f0ee899a391d3c2507fd9690505a1317b74c4b5c7d73f31ac67de0b0dc472dbc5ee86038bf50e43cbfa5c32c7286a03452ffc03ed8f27895da1f9412e9c1cbdfdf0edd03f80e551c5f2083aec09d583c84f8a2da2a1c44553e88153b87a424f83931caff061132cdbe541b84831ae946b1afdc89381c61ac017f9a0d7c72a9cb4a62e6258f954988f65126e7424ed867e44b2aae414fc0b7f51f75d8eb5699a81af264065d19102b6717ac2c9255a08f4272345e4722a79ea510e3a8a775235d2277a4f07d988f33fdd4610f9635a57d8378301d87fd686c1c9ad8c5207a491ddd77ff151e1d5263e0d092eedb44a9ddc83f3b3965db2920f254234f4467d0cd7d26a65b5b3274a644a3f45dd15e72339129b970a447eaf2f6d5849b5256b85bb74a9faef31b849ccbf6b5963a00fdc8c95a90f4c13bf1e345241bb4a5b9ad981999c482914de0030de6be8f8f11f1c43810a1535e94893d88adb0726c333b0892e1549d9e2dc7fa9eef9d8e69385cf00b048ba8b077c18f3d6a439375056c910ed47c9b36376ea2cc3d7b100da9f9432c10e1d3dd5763acdd6ecaa62bbc1732208b53c5e9b051ec2738c5471a5ca520a510f73cbd15998a194b502c62d9d4952de789ce1141017b2f4262b8dbd5404b249e1d1190782a2606bc8f48a58cb70bb45827ed8cb997afd6976dea04ec8a7d2e0b54545ea38d61a90d31eea2b4dec1bf328f90df1c454b839bc82123f265e1621f5d8bfddf8619356d41d39878a4663eab327b963f26fff84a8933bb89c369853c8058f820bc1317d9de8449494bc663ad9cc8dd63a20b970f732535889fb586c7a24f62638634a5ffb2da85f273e2b2c2abda719bb9903b1f3d01cd7f4bf354de3dd21191478e777f9f79d696f5bad96c3d4af894b381340196b619163abe91ce13548eafcc48c2614f65d2d989d9510a14dae13273c3cd601c8b4483f99b2bc2657de22e068f743d734deb3f55de527010fd4ef0e258df35cfd4464b1f85440971c1eb73ee03fac94fdf2a85a18bae0ac4aca6d90021782da3d2977ef49b57df06683c4c718ccf4c6f59419d94a5709212b26e6fcef5785539c34342442034f491d6b287baeb5b66446f97474f8859070fdb238d1284ed977cd8083ef527de6ec9ba79ffab439ad010a9ae04a6a1e185519e754b849ce3aac8b9c9f32613059ee601a407839560ba5fb88d06551cdb2c23fe82d709cad7995d8338f826050c6b334f215b8db066bfba8f5886db023df48c31ed962e13842d16da79d45fbe156a60ff86ea77f9a650b53c6fc7ae53575651a5a26eb3da2f80f0df76c49dc2e9f25e726e6a70fc707dd389be7f8b8b7d7f6004abaa28a57e11ccdc86473060e3dd18c075107f20c323c845dab3dd2d5ac0a5a7f95916ba4176da5d8923c8ce9b90dda1040a85de8f42d3cf8faeb01426aaa4f0198e3899c594938ab5e6be3ab667cfcfc708f9e840c9829b9c18d77208bdc3a218b402e92dbe1e2045d793742776189f534eb419407ddf2264c04aaa80055b557410ae82da07bb14963982d5ad35d9b04203ac2ea915986a6ea8b4e646952fc51dea52063129dc83aaf3e7b73c39b721de08f03f37186df6fbdc5e64b13fe7c98f485b85fbeff376191cef603fbe4c8551a9a945ed62b25f24c59ac26bb2333e6229f60f081976ebc40e7c341bfaa6b30828a258d9e15a75d2eaa7508495cdcf0d28fbab1bad7ea0090972e069bb527196f3389f241e8ba3737b020acd212811552992b4215ad9e15b14716ffc6d153357c5a1d81b91dcad3613fc19d8af6abfd378cd523eaccd1852884adbd78c28871e201dadd638e27fca0ac510aac7651ec0a961d91d0f9dc9e7bc9e1c7b797fae1606b7fdb37c9e48a5e762417eeb23bf79546f2c46e45077a0595ca189866e98a2e69d7dce4a60fcb22adff268bfe8481f11f82584e2d8dcadb2c9e9dbd76be14cd8d5ae6d769973caf97b40bf4b14dbaef08cded6b4f17634f1043dd37af960c93a8cf5560b99a27bbfbed1e5915cc1d0d6468defb51c7b524bd9a06152b3d845e6be57ca68d103f11a2b57613ef8288a12f279f23665936df9efb3bcb7e5ef2b9ad8616bd63dd726e40cb0d4f6ec4007c506bdcd3af90477d33918742e20aefccd223804d69648a80968c9c54d13b7a20a9fd0590b705271d4d6e60c3722d82a44743ed011358c97de14c85b3791d33246c59bbea31568c7fa6ba9eec387da2e40c924fce654777cc4eaf8dc212178072dc0f9738eda276c6eb5fed15c8d27c9fe32ff6e1ab3e026516d834b2e768826da80621262d416e37065955a388faf5019f939ee067e75f48525d1a69e7a84964fc2026c8c97de4b5e6ea2b7d7eb6729620acd5cb6d655367e9c84422ed06e7078bd67fd111f2fdbfd956b07bf419ec47c04f0a2881f8a2407311f359018d1c297edf080a6eb7bf6d9d26790195fd6317b5229925f2c616fcc5da1f2a38174388720d4515e4c56f316444b6e207b3deab10af31f7f991dca1296a4caa86d83d7f2dc2b517ac25b56243e84c36b011cdf456379b2b481433d18255a7bda072f0026ef90ec4fb23e960abf7d83aea927c66ae6e9ba494689e3ca0439ca16d5dd03c0f4ea7ed5c8b08cee33e766f155783da905dc8a503b113b68878eae3c1b61a0975171ab3c320669702d451073b594a84388579bf4e19e21a981105cbf565059b1f217498ccf653192a1a14b264d918a4e4c767f0bd53dc5ae9fec8eda9664bc998e51b1ac2d77af931f250ab1c772540df68bb15e0ed25abaf0fd2bef0760afbda288d37a64cd3deef00cf7a07265aa98465a66191ab575721991b2a5f40ec7bd5929de83d561537409301bec034aaec47d76dfea00c816b1e72adccbe24b14303efaa93cfbec69a3b2f7f77e80b2699649a693237db375827c9fc3bb948b2ed1be55b01747ef3c2dcbe11261c933cad9875a662a26d823a2ba93736feeb0eccd27b324b44ebd5d1ce27967ebc4d2aa25f8f8c1151d71b9f5b7f93579a9f783dd7a5fe8fba3ace5114f94c5d01445a514d62283e1c9cae57d38897ca146e7db6edf46fab15da8998d526fd4e49a849022d5effd9e044c2a1c8b7ec26c9e54be4b47c0045a3341ab7bac71481b026063ee99fd6b658d54c91d166b538139ee4dd57008ed8674f243bf504a36bb9e5779a9f6908e51ef595262c097ab722408b46c9bb3e7fef86614e314d0689d0d1e71d18bb6dfb5d90cdfeff84c5fec5a74c36b2c7b88ff19dcc5ac1deee91d69a7c71821e183c9c720f39ac3e7870f50434a5686c94d7e9f748d47e90db82292c50681fb51b5dd78b6bb9acebe8494d502baeaadd9b9b38019ef68ee28b4eeadd861f7c14733bdd218d0f3c1ad21d46e9cc486514a7384717496f8797a643695883ce7572d13693ee0c40a6ccb6ecc00156b94a4c27135205fd4a4fbbc3725c80d52c2579a90403a40729ec61d85a9c29e45850d54c4c54e903a5d03f17018e5dcfec428d110406b6eaa33095bad647ca2f8b460443a9e6bf6c5f66226de0916e232d52c0bfdcf25969bc4cfad0a8c0bf7086bc13f1d5eb721ecf3030bbdf803af5700e21abebc3bbd14b3d0a2abff02c9b700223c630d2d88a0ff1403fe275eaf82b9f7ddd996d27497b5a949ddf17d196469a0f45ce896050ee4a7ba88f974fadb90b1ede2673414e6a6d89cb2ad315a8360aadad58b3ecb2bc5caeaaa88df84c638608dc3ba7b97cbd792cbf39639c109a0f16a842eaa3bbc82eab92ca287d7320e2de46df138e7f712973c36f9c1c45afb3d07445a597a0e90ec7f2c38ffcaeff3ef0bec970e43028f376f2b26d6b4da7a757b4edffe975d55172e084a7c"}}, {0x1, 0x9, 0x1, 0x3f, @tick=0x5, {0x7, 0x80}, {0x40, 0xc8}, @note={0x0, 0x0, 0x9, 0x81, 0xffffff18}}], 0x8c) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x159, &(0x7f0000000100)=[@op={0x18}], 0x24}], 0x4924924924924b1, 0x0) 09:33:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = creat(0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000140)={0x3, 0xfffffffb}) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}}, 0xfffffdef) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x2bf, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e3a66696c6530ff776f726b6469723d2e2f66696c6531"]) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, 0x0) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000000)={0x3}) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000008000000380000000000d44d02cd002000"/53], 0xfffffdef) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x800, 0xfff, 0x0, 0x0, 0x0, {0x4e1, 0x5, 0x4, 0xf6a, 0x5, 0x0, 0x5, 0x40, 0xff81, 0x40, 0x0, 0x7f, 0xfffffffa, 0x3f, "f946b0ba1e16a07b978e6c17bbb3aadc7c0e4984da8dabdbf37211e47093b20d"}}) 09:33:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = creat(0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000140)={0x3, 0xfffffffb}) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}}, 0xfffffdef) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x2bf, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e3a66696c6530ff776f726b6469723d2e2f66696c6531"]) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, 0x0) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000000)={0x3}) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000008000000380000000000d44d02cd002000"/53], 0xfffffdef) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x800, 0xfff, 0x0, 0x0, 0x0, {0x4e1, 0x5, 0x4, 0xf6a, 0x5, 0x0, 0x5, 0x40, 0xff81, 0x40, 0x0, 0x7f, 0xfffffffa, 0x3f, "f946b0ba1e16a07b978e6c17bbb3aadc7c0e4984da8dabdbf37211e47093b20d"}}) 09:33:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = creat(0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000140)={0x3, 0xfffffffb}) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}}, 0xfffffdef) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x2bf, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e3a66696c6530ff776f726b6469723d2e2f66696c6531"]) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, 0x0) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000000)={0x3}) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000008000000380000000000d44d02cd002000"/53], 0xfffffdef) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x800, 0xfff, 0x0, 0x0, 0x0, {0x4e1, 0x5, 0x4, 0xf6a, 0x5, 0x0, 0x5, 0x40, 0xff81, 0x40, 0x0, 0x7f, 0xfffffffa, 0x3f, "f946b0ba1e16a07b978e6c17bbb3aadc7c0e4984da8dabdbf37211e47093b20d"}}) 09:33:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000200)=0x40, 0x4) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x300, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x1ff, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8000000001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x8ab80, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/anycast6\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) [ 3063.004930] overlayfs: missing 'workdir' [ 3063.249108] overlayfs: missing 'workdir' [ 3063.557525] kworker/u4:15 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3063.637088] kworker/u4:15 cpuset=/ mems_allowed=0-1 [ 3063.658369] CPU: 1 PID: 18522 Comm: kworker/u4:15 Not tainted 4.14.184-syzkaller #0 [ 3063.666173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3063.675635] Workqueue: events_unbound call_usermodehelper_exec_work [ 3063.682043] Call Trace: [ 3063.684632] dump_stack+0x1b2/0x283 [ 3063.688277] dump_header+0x178/0x7aa [ 3063.691996] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3063.697012] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3063.702110] ? ___ratelimit+0x2cd/0x522 [ 3063.706086] oom_kill_process.cold+0x10/0xc16 [ 3063.710585] ? lock_downgrade+0x6e0/0x6e0 [ 3063.714725] out_of_memory+0x2d5/0x10f0 [ 3063.718698] ? oom_killer_disable+0x1c0/0x1c0 [ 3063.723189] ? mutex_trylock+0x152/0x1a0 [ 3063.727248] __alloc_pages_nodemask+0x2556/0x2730 [ 3063.732094] ? HARDIRQ_verbose+0x10/0x10 [ 3063.736159] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3063.741015] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3063.746023] ? kmem_cache_alloc_node+0x387/0x400 [ 3063.750764] copy_process.part.0+0x26a/0x6fa0 [ 3063.755241] ? __lock_acquire+0x655/0x42a0 [ 3063.759458] ? trace_hardirqs_on+0x10/0x10 [ 3063.763672] ? check_preemption_disabled+0x35/0x240 [ 3063.768667] ? umh_complete+0x80/0x80 [ 3063.772446] ? __cleanup_sighand+0x40/0x40 [ 3063.776668] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 3063.781579] ? HARDIRQ_verbose+0x10/0x10 [ 3063.785629] ? umh_complete+0x80/0x80 [ 3063.789429] _do_fork+0x180/0xc80 [ 3063.792866] ? fork_idle+0x270/0x270 [ 3063.796560] ? mark_held_locks+0xa6/0xf0 [ 3063.800601] ? _raw_spin_unlock_irq+0x24/0x90 [ 3063.805072] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3063.810061] ? _raw_spin_unlock_irq+0x5a/0x90 [ 3063.814532] ? kernel_sigaction+0x13b/0x200 [ 3063.818831] ? flush_sigqueue_mask.isra.0+0x340/0x340 [ 3063.823999] ? umh_complete+0x80/0x80 [ 3063.827776] kernel_thread+0x2f/0x40 [ 3063.831469] call_usermodehelper_exec_work+0x97/0x210 [ 3063.836637] ? call_usermodehelper_exec_async+0x4c0/0x4c0 [ 3063.842151] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3063.847579] process_one_work+0x7c0/0x14c0 [ 3063.851797] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 3063.856445] ? worker_thread+0x163/0x1080 [ 3063.860573] worker_thread+0x5d7/0x1080 [ 3063.864530] ? process_one_work+0x14c0/0x14c0 [ 3063.869003] kthread+0x30d/0x420 [ 3063.872349] ? kthread_create_on_node+0xd0/0xd0 [ 3063.876994] ret_from_fork+0x24/0x30 [ 3063.999581] Mem-Info: [ 3064.002268] active_anon:1018146 inactive_anon:215622 isolated_anon:0 [ 3064.002268] active_file:195 inactive_file:1506 isolated_file:3 [ 3064.002268] unevictable:10062 dirty:105 writeback:1 unstable:0 [ 3064.002268] slab_reclaimable:22430 slab_unreclaimable:171191 [ 3064.002268] mapped:58582 shmem:8366 pagetables:37790 bounce:0 [ 3064.002268] free:27667 free_pcp:145 free_cma:0 [ 3064.048339] Node 0 active_anon:1527504kB inactive_anon:58924kB active_file:876kB inactive_file:9116kB unevictable:16156kB isolated(anon):0kB isolated(file):12kB mapped:230824kB dirty:420kB writeback:4kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 796672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3064.080678] Node 1 active_anon:2545080kB inactive_anon:803564kB active_file:4kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5604kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3064.111692] Node 0 DMA free:10400kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3064.141699] lowmem_reserve[]: 0 2559 2559 2559 2559 09:33:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000200)=0x40, 0x4) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x300, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x1ff, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8000000001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x8ab80, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/anycast6\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 09:33:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$cont(0x1f, r0, 0x7ff, 0x3f) recvmmsg(r1, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001980)=""/105, 0x69}, {&(0x7f0000000640)=""/224, 0xe0}], 0x2}}, {{0x0, 0x0, 0x0}, 0xfff}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000080)="3b0f83f745be607d150a019ca6aa36b1134fb5738c9d84510e8264edb2305ee0d0e46d6581ce18bf69948de5630d8a6093bdbf249a4e1200b2", 0x39) socket$inet6_udp(0xa, 0x2, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0xa) sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000000, 0x10, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000240)='./bus\x00', &(0x7f0000000440)='trusted.overlay.opaque\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0) fcntl$setstatus(r4, 0x4, 0x6100) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 09:33:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000200)=0x40, 0x4) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x300, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x1ff, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8000000001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x8ab80, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/anycast6\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) [ 3064.155590] Node 0 DMA32 free:40744kB min:36296kB low:45368kB high:54440kB active_anon:1527436kB inactive_anon:58924kB active_file:3248kB inactive_file:5804kB unevictable:16156kB writepending:572kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:17632kB pagetables:62764kB bounce:0kB free_pcp:924kB local_pcp:236kB free_cma:0kB [ 3064.674418] lowmem_reserve[]: 0 0 0 0 0 [ 3064.717654] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3064.835495] lowmem_reserve[]: 0 0 0 0 0 [ 3064.845766] Node 1 Normal free:40180kB min:53592kB low:66988kB high:80384kB active_anon:2559980kB inactive_anon:803564kB active_file:104kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39200kB pagetables:88692kB bounce:0kB free_pcp:20kB local_pcp:0kB free_cma:0kB [ 3065.015416] lowmem_reserve[]: 0 0 0 0 0 [ 3065.040430] Node 0 DMA: 6*4kB (UE) 1*8kB (M) 2*16kB (M) 2*32kB (UE) 4*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10368kB [ 3065.082467] Node 0 DMA32: 1675*4kB (UME) 446*8kB (UME) 251*16kB (UME) 93*32kB (UME) 138*64kB (UME) 67*128kB (UME) 12*256kB (UM) 8*512kB (UM) 1*1024kB (E) 0*2048kB 0*4096kB = 42860kB [ 3065.131077] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3065.171197] Node 1 Normal: 55*4kB (UMEH) 1616*8kB (UMEH) 503*16kB (UMEH) 589*32kB (UMEH) 185*64kB (UMEH) 14*128kB (UME) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54188kB [ 3065.192863] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3065.212476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3065.221389] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3065.235242] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3065.252549] 14011 total pagecache pages [ 3065.258046] 0 pages in swap cache [ 3065.261523] Swap cache stats: add 0, delete 0, find 0/0 [ 3065.300525] Free swap = 0kB [ 3065.304789] Total swap = 0kB [ 3065.324242] 1965979 pages RAM [ 3065.339685] 0 pages HighMem/MovableOnly [ 3065.343669] 338456 pages reserved [ 3065.347444] 0 pages cma reserved [ 3065.350808] Out of memory: Kill process 23584 (syz-executor.0) score 1005 or sacrifice child [ 3065.362210] Killed process 23584 (syz-executor.0) total-vm:75372kB, anon-rss:5372kB, file-rss:34816kB, shmem-rss:0kB [ 3065.430897] syz-executor.0 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3065.445730] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3065.460055] CPU: 1 PID: 6350 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 3065.467856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3065.477205] Call Trace: [ 3065.479791] dump_stack+0x1b2/0x283 [ 3065.483418] dump_header+0x178/0x7aa [ 3065.487132] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3065.492140] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3065.497238] ? ___ratelimit+0x2cd/0x522 [ 3065.501210] oom_kill_process.cold+0x10/0xc16 [ 3065.505698] ? lock_downgrade+0x6e0/0x6e0 [ 3065.509842] out_of_memory+0x2d5/0x10f0 [ 3065.513821] ? oom_killer_disable+0x1c0/0x1c0 [ 3065.518308] ? mutex_trylock+0x152/0x1a0 [ 3065.522367] __alloc_pages_nodemask+0x2556/0x2730 [ 3065.527226] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3065.532063] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3065.536910] ? HARDIRQ_verbose+0x10/0x10 [ 3065.540973] ? cache_grow_begin+0x3f/0x410 [ 3065.545208] cache_grow_begin+0x91/0x410 [ 3065.549266] fallback_alloc+0x205/0x2b0 [ 3065.553244] kmem_cache_alloc+0x1e5/0x3c0 [ 3065.557392] getname_flags+0xc8/0x550 [ 3065.561193] ? SyS_unlinkat+0x70/0x70 [ 3065.564994] do_unlinkat+0x9e/0x5c0 [ 3065.568632] ? do_rmdir+0x340/0x340 [ 3065.572265] ? __do_page_fault+0x19a/0xb50 [ 3065.576497] ? do_syscall_64+0x4c/0x640 [ 3065.580469] ? SyS_unlinkat+0x70/0x70 [ 3065.584269] do_syscall_64+0x1d5/0x640 [ 3065.588160] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3065.593343] RIP: 0033:0x45c807 [ 3065.596526] RSP: 002b:00007ffdcf73d568 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 3065.604230] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045c807 [ 3065.611490] RDX: 00007ffdcf73d580 RSI: 00007ffdcf73d580 RDI: 00007ffdcf73d610 [ 3065.618751] RBP: 0000000000002f1d R08: 0000000000000000 R09: 000000000000000d [ 3065.626013] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffdcf73e6a0 [ 3065.633276] R13: 000000000262f940 R14: 0000000000000000 R15: 00007ffdcf73e6a0 [ 3065.655585] Mem-Info: [ 3065.658168] active_anon:1018914 inactive_anon:215622 isolated_anon:0 [ 3065.658168] active_file:71 inactive_file:71 isolated_file:0 [ 3065.658168] unevictable:10062 dirty:149 writeback:5 unstable:0 [ 3065.658168] slab_reclaimable:22433 slab_unreclaimable:171314 [ 3065.658168] mapped:57664 shmem:8366 pagetables:37805 bounce:0 [ 3065.658168] free:28289 free_pcp:127 free_cma:0 [ 3065.702866] Node 0 active_anon:1529260kB inactive_anon:58924kB active_file:284kB inactive_file:412kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:225152kB dirty:596kB writeback:20kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 796672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3065.739582] Node 1 active_anon:2546396kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5604kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3065.770379] Node 0 DMA free:10400kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3065.806205] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3065.811255] Node 0 DMA32 free:48892kB min:36296kB low:45368kB high:54440kB active_anon:1529064kB inactive_anon:58924kB active_file:332kB inactive_file:200kB unevictable:16156kB writepending:552kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:17536kB pagetables:62604kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 3065.860689] lowmem_reserve[]: 0 0 0 0 0 [ 3065.872718] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3065.872736] lowmem_reserve[]: 0 0 0 0 0 [ 3065.872756] Node 1 Normal free:54276kB min:53592kB low:66988kB high:80384kB active_anon:2546396kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39008kB pagetables:88656kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3065.872773] lowmem_reserve[]: 0 0 0 0 0 [ 3065.872793] Node 0 DMA: 6*4kB (UE) 1*8kB (M) 2*16kB (M) 3*32kB (UE) 4*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10400kB [ 3065.961011] Node 0 DMA32: 1955*4kB (UME) 592*8kB (UME) 309*16kB (UME) 130*32kB (UME) 160*64kB (UME) 68*128kB (UME) 14*256kB (UM) 8*512kB (UM) 1*1024kB (E) 0*2048kB 0*4096kB = 49308kB [ 3066.005080] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3066.022612] Node 1 Normal: 55*4kB (UMEH) 1628*8kB (UMEH) 503*16kB (UMEH) 590*32kB (UMEH) 185*64kB (UMEH) 14*128kB (UME) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54316kB [ 3066.038788] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3066.047693] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3066.062163] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3066.085554] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3066.099662] 13940 total pagecache pages [ 3066.114102] 0 pages in swap cache [ 3066.117642] Swap cache stats: add 0, delete 0, find 0/0 [ 3066.122992] Free swap = 0kB [ 3066.133774] Total swap = 0kB [ 3066.175053] 1965979 pages RAM [ 3066.196734] 0 pages HighMem/MovableOnly [ 3066.200707] 338456 pages reserved [ 3066.204150] 0 pages cma reserved [ 3066.225518] Out of memory: Kill process 23559 (syz-executor.5) score 1005 or sacrifice child [ 3066.238344] Killed process 23559 (syz-executor.5) total-vm:75372kB, anon-rss:5324kB, file-rss:34816kB, shmem-rss:0kB [ 3066.315376] syz-executor.0 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3066.345674] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3066.409281] CPU: 1 PID: 6350 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 3066.417203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3066.426546] Call Trace: [ 3066.429134] dump_stack+0x1b2/0x283 [ 3066.432760] dump_header+0x178/0x7aa [ 3066.436470] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3066.441481] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3066.446584] ? ___ratelimit+0x2cd/0x522 [ 3066.450558] oom_kill_process.cold+0x10/0xc16 [ 3066.455048] ? lock_downgrade+0x6e0/0x6e0 [ 3066.459207] out_of_memory+0x2d5/0x10f0 [ 3066.463185] ? oom_killer_disable+0x1c0/0x1c0 [ 3066.467678] ? mutex_trylock+0x152/0x1a0 [ 3066.471739] __alloc_pages_nodemask+0x2556/0x2730 [ 3066.476598] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3066.481437] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3066.486280] ? HARDIRQ_verbose+0x10/0x10 [ 3066.490345] ? cache_grow_begin+0x3f/0x410 [ 3066.494579] cache_grow_begin+0x91/0x410 [ 3066.498639] fallback_alloc+0x205/0x2b0 [ 3066.502619] kmem_cache_alloc+0x1e5/0x3c0 [ 3066.506768] getname_flags+0xc8/0x550 [ 3066.510562] ? SyS_unlinkat+0x70/0x70 [ 3066.514354] do_unlinkat+0x9e/0x5c0 [ 3066.517974] ? do_rmdir+0x340/0x340 [ 3066.521600] ? __do_page_fault+0x19a/0xb50 [ 3066.525832] ? do_syscall_64+0x4c/0x640 [ 3066.529802] ? SyS_unlinkat+0x70/0x70 [ 3066.533600] do_syscall_64+0x1d5/0x640 [ 3066.537488] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3066.542669] RIP: 0033:0x45c807 [ 3066.545847] RSP: 002b:00007ffdcf73d568 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 3066.553572] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045c807 [ 3066.560839] RDX: 00007ffdcf73d580 RSI: 00007ffdcf73d580 RDI: 00007ffdcf73d610 [ 3066.568109] RBP: 0000000000002f1d R08: 0000000000000000 R09: 000000000000000d [ 3066.575462] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffdcf73e6a0 [ 3066.582724] R13: 000000000262f940 R14: 0000000000000000 R15: 00007ffdcf73e6a0 [ 3066.602667] Mem-Info: [ 3066.605095] active_anon:1017585 inactive_anon:215622 isolated_anon:0 [ 3066.605095] active_file:11 inactive_file:70 isolated_file:11 [ 3066.605095] unevictable:10062 dirty:11 writeback:5 unstable:0 [ 3066.605095] slab_reclaimable:22424 slab_unreclaimable:171272 [ 3066.605095] mapped:57722 shmem:8366 pagetables:37787 bounce:0 [ 3066.605095] free:29787 free_pcp:56 free_cma:0 [ 3066.639474] Node 0 active_anon:1523944kB inactive_anon:58924kB active_file:0kB inactive_file:140kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:225096kB dirty:88kB writeback:12kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 794624kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3066.667983] Node 1 active_anon:2546396kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5604kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3066.695678] Node 0 DMA free:10400kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3066.743450] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3066.752966] Node 0 DMA32 free:55108kB min:36296kB low:45368kB high:54440kB active_anon:1523776kB inactive_anon:58924kB active_file:212kB inactive_file:36kB unevictable:16156kB writepending:68kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:17472kB pagetables:62492kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3066.824620] lowmem_reserve[]: 0 0 0 0 0 [ 3066.885707] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3066.922754] lowmem_reserve[]: 0 0 0 0 0 [ 3066.926907] Node 1 Normal free:54320kB min:53592kB low:66988kB high:80384kB active_anon:2546396kB inactive_anon:803564kB active_file:8kB inactive_file:4kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39008kB pagetables:88656kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3066.962894] lowmem_reserve[]: 0 0 0 0 0 [ 3066.967139] Node 0 DMA: 6*4kB (UE) 1*8kB (M) 2*16kB (M) 3*32kB (UE) 4*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10400kB [ 3066.984892] Node 0 DMA32: 2272*4kB (UME) 757*8kB (UME) 343*16kB (UME) 142*32kB (UME) 164*64kB (UME) 68*128kB (UME) 14*256kB (UM) 8*512kB (UM) 1*1024kB (E) 1*2048kB (M) 0*4096kB = 55128kB [ 3067.012445] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3067.031114] Node 1 Normal: 54*4kB (UMEH) 1627*8kB (UMEH) 502*16kB (UMEH) 589*32kB (UMEH) 186*64kB (UMEH) 14*128kB (UME) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54320kB [ 3067.049054] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3067.065086] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3067.085495] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3067.094505] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3067.114471] 14011 total pagecache pages [ 3067.118512] 0 pages in swap cache [ 3067.121956] Swap cache stats: add 0, delete 0, find 0/0 [ 3067.127473] Free swap = 0kB [ 3067.130486] Total swap = 0kB [ 3067.133499] 1965979 pages RAM [ 3067.137515] 0 pages HighMem/MovableOnly [ 3067.141488] 338456 pages reserved [ 3067.144929] 0 pages cma reserved [ 3067.149759] Out of memory: Kill process 21558 (syz-executor.5) score 1005 or sacrifice child [ 3067.158442] Killed process 21558 (syz-executor.5) total-vm:75108kB, anon-rss:4272kB, file-rss:35840kB, shmem-rss:0kB [ 3068.347681] oom_reaper: reaped process 8393 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3068.411814] syz-executor.0 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3068.428836] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3068.433964] CPU: 1 PID: 6350 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 3068.441756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3068.451105] Call Trace: [ 3068.453694] dump_stack+0x1b2/0x283 [ 3068.457324] dump_header+0x178/0x7aa [ 3068.461035] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3068.466049] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3068.471148] ? ___ratelimit+0x2cd/0x522 [ 3068.475121] oom_kill_process.cold+0x10/0xc16 [ 3068.479622] ? lock_downgrade+0x6e0/0x6e0 [ 3068.483777] out_of_memory+0x2d5/0x10f0 [ 3068.487758] ? oom_killer_disable+0x1c0/0x1c0 [ 3068.492250] ? mutex_trylock+0x152/0x1a0 [ 3068.496312] __alloc_pages_nodemask+0x2556/0x2730 [ 3068.501171] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3068.506013] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3068.510859] ? HARDIRQ_verbose+0x10/0x10 [ 3068.514916] ? cache_grow_begin+0x3f/0x410 [ 3068.519141] cache_grow_begin+0x91/0x410 [ 3068.523203] fallback_alloc+0x205/0x2b0 [ 3068.527170] kmem_cache_alloc+0x1e5/0x3c0 [ 3068.531309] getname_flags+0xc8/0x550 [ 3068.535153] ? SyS_unlinkat+0x70/0x70 [ 3068.538930] do_unlinkat+0x9e/0x5c0 [ 3068.542535] ? do_rmdir+0x340/0x340 [ 3068.546157] ? __do_page_fault+0x19a/0xb50 [ 3068.550368] ? do_syscall_64+0x4c/0x640 [ 3068.554316] ? SyS_unlinkat+0x70/0x70 [ 3068.558091] do_syscall_64+0x1d5/0x640 [ 3068.561957] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3068.567118] RIP: 0033:0x45c807 [ 3068.570303] RSP: 002b:00007ffdcf73d568 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 3068.578088] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045c807 [ 3068.585429] RDX: 00007ffdcf73d580 RSI: 00007ffdcf73d580 RDI: 00007ffdcf73d610 [ 3068.592678] RBP: 0000000000002f1d R08: 0000000000000000 R09: 000000000000000d [ 3068.599925] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffdcf73e6a0 [ 3068.607187] R13: 000000000262f940 R14: 0000000000000000 R15: 00007ffdcf73e6a0 [ 3068.620619] Mem-Info: [ 3068.623146] active_anon:1016502 inactive_anon:215622 isolated_anon:0 [ 3068.623146] active_file:22 inactive_file:12 isolated_file:0 [ 3068.623146] unevictable:10062 dirty:25 writeback:0 unstable:0 [ 3068.623146] slab_reclaimable:22427 slab_unreclaimable:171121 [ 3068.623146] mapped:57671 shmem:8366 pagetables:37723 bounce:0 [ 3068.623146] free:31179 free_pcp:118 free_cma:0 [ 3068.661307] Node 0 active_anon:1519612kB inactive_anon:58924kB active_file:264kB inactive_file:340kB unevictable:16156kB isolated(anon):0kB isolated(file):128kB mapped:225380kB dirty:100kB writeback:0kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 790528kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3068.694810] Node 1 active_anon:2546396kB inactive_anon:803564kB active_file:4kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5604kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3068.722664] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3068.749937] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3068.754969] Node 0 DMA32 free:60520kB min:36296kB low:45368kB high:54440kB active_anon:1519444kB inactive_anon:58924kB active_file:424kB inactive_file:332kB unevictable:16156kB writepending:148kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:17408kB pagetables:62236kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3068.785150] lowmem_reserve[]: 0 0 0 0 0 [ 3068.789339] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3068.814752] lowmem_reserve[]: 0 0 0 0 0 [ 3068.818848] Node 1 Normal free:54320kB min:53592kB low:66988kB high:80384kB active_anon:2546396kB inactive_anon:803564kB active_file:4kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39008kB pagetables:88656kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3068.848555] lowmem_reserve[]: 0 0 0 0 0 [ 3068.852552] Node 0 DMA: 6*4kB (UE) 1*8kB (M) 2*16kB (M) 2*32kB (UE) 3*64kB (ME) 3*128kB (UME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10432kB [ 3068.867897] Node 0 DMA32: 2018*4kB (UME) 811*8kB (UME) 373*16kB (UME) 153*32kB (UME) 164*64kB (UME) 69*128kB (UME) 16*256kB (UM) 8*512kB (UM) 1*1024kB (E) 3*2048kB (M) 0*4096kB = 60112kB [ 3068.886202] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3068.904425] Node 1 Normal: 54*4kB (UMEH) 1627*8kB (UMEH) 502*16kB (UMEH) 589*32kB (UMEH) 186*64kB (UMEH) 14*128kB (UME) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54320kB [ 3068.920646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3068.929547] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3068.938193] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3068.955862] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3068.964564] 14163 total pagecache pages [ 3068.975920] 0 pages in swap cache [ 3068.979376] Swap cache stats: add 0, delete 0, find 0/0 [ 3068.984722] Free swap = 0kB [ 3068.992743] Total swap = 0kB [ 3069.002057] 1965979 pages RAM [ 3069.005158] 0 pages HighMem/MovableOnly [ 3069.065954] 338456 pages reserved [ 3069.069409] 0 pages cma reserved [ 3069.072766] Out of memory: Kill process 23528 (syz-executor.1) score 1005 or sacrifice child [ 3069.104571] Killed process 23528 (syz-executor.1) total-vm:75372kB, anon-rss:5300kB, file-rss:34816kB, shmem-rss:0kB 09:33:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000140)={r6}) r7 = dup3(r5, r3, 0x0) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000100)={r6, 0x0, 0x1}) write$sndseq(r7, &(0x7f0000001140)=[{0x57, 0xff, 0x64, 0x4, @tick=0x58b, {0x4, 0x7f}, {0x3, 0x1}, @control={0x1, 0x10001, 0x10000000}}, {0x5b, 0x4, 0xcb, 0xe0, @time={0x4, 0x5}, {0x2}, {0x9, 0xc6}, @note={0x5, 0x5, 0xad}}, {0x8, 0x9, 0xc0, 0xf, @tick=0x4, {0x6, 0x1}, {0x9, 0x3f}, @connect={{0x2, 0x3}, {0x3, 0x7}}}, {0xa2, 0x0, 0x7f, 0x6, @time={0x5, 0x4}, {0x3, 0x1}, {0xc4, 0x5b}, @ext={0x1000, &(0x7f0000000140)="1ed699fa0f8658b2a6166cfeea545f5f2b5b1ba8550618fd59d213bedcd8a4fcb7b2a28a0c560be56fae5bfb4caa4325c8987714d2b7b2f97e7e77d588add8022814d96a13a2ca9864d6664ddd5d3ef44cf8582086f16a237d3aa5b83ff4225feeea29ae7afd85e657c2a223def7cb2c64d7f00510fdd54beb819565f26fdcc7af997c58554659ab56983dbe753c01dac6899187adc46635cb1186efa9cd7a9a01625d64669f35f11936890dfaca3cbf33c18cb6638d5a9667fa136fc55f7a48612f29f9b103b9b84c06ba9edd3ab06e50b8f735549076ea0368248af2f7cf5b88a1eefedba70ace80bb121509fd2edf7eab1dbcb29bdf8128e5b418807ce8abb455e7663bf0ad0edb5f0ec84942a32b630950abc956da85112f13fa52917436e9944468fde4d1fed67120c9038e7cc4b4281b6a450f09eb01571312b61bcf84393f061c18b253750d9ce1fbe701f881a463422e86f77dfd1f16c6a9cb9c343a0eed16ad4505406b3b81ef86a10e720a73f4ab450021a03dc347853bdffb4a5462a07ddc13e9659fc1b9c50ac9bf82f73fc1e28fe1765647e83df144c481ebf378d6b79f6725d3474070db7f44f3f3fa79b66c987c98799a15721d8c5ce79b00558a451b152dca3f552d9df9c3184731466dc83869babfe182bf85a839e52ea6d81efa1d22584a18bcd2c1872a7f9b93a1bc1290e129ad6174b9d435cfe6e98ce0af10a67078e1596d14494f38b7f5c9f11281c8dccf916e1b4f6d9002e923c44643cd0ddda6bac612bd2b1cf36017474523a661dc6ddbeae6ccc8e4580b2b21eb4586df36bcb248ec311936168606e8fdbb47be0412d0a961625333f953d716583e5e52b4dfa924148c15b1fd2bfb5f952a966cb35d03993d4e40cc5f450a2abc167fb89c0b060fec1f43d1e6232013eddab45094c6e2e41d388f4eb8a1c1aa0b182cf531ac0fba1e4f8bcea1037638ebd0f63e91d1485082e5291a746652e1e4a264e796027ed05cb796fc832713ffd746905618eb79b5c0ea938f689fe0f6cac2c51e7ec366167ac07dfbe53bc0f43069a6a7e2898d152942c16a54a5199cf5fe21782f171ac698fec7ceff0ba61d4d6d657334ca0f485380830eafb20057f81b0b32cb9688de75d5ed4acab258747c3d79219e5491bd2e37481e14c2bb9fe933218108e63c5ba5f8e1d1e287eaaacd0901387b163eda2da14a9ab3fe31ba3de42282afb121ac09702a9d769d7f3b1fa9ea28a88e64ba53288767427161e4f4da929350855cd90a5d18435bdc0abe52d880c4c7a5f70866ff31f9edb5a85a52f4f6cd02e73bef80ff34774fb023660e4d46b3edafaa2fd1e5f8566bd63e8426027e3c43d13d84d2726cca29e671c6d690e8650836404118e1f375f7ce7c76a05523a33f7e8b3a6f85f55d4fea961fb8ac51a795d40b4f536b04427dd12e38cbe7090dccb5d1cd8605c2065e489f935362979e10a9b13038b68a23b59a0cfba793887ba0fe096476f1794627f7e446c5c15375ed8b770b9efa7d2730f9593092765a9c7ae86c4d8fefbe729daf555d5cfbc303abb648b115792eb0b8cb13cb59ddb071b05c6fabee77f18251a8c823cdbfacff51401f3cfc76002d879961c57fecb7c7ce635477787f447ac859b8a6089a3b6f012c6f42a5d242714e87fdf604d8b7b7807aeee3398036477ff49ea51699b2fadfd3919c51d4322eca27c67ca56da0fa9296d3bebbe796f5826636d4aebc6f3299466a7ad3123ecc1034112ddc554885700e452c605bb3d99918e26a5055a5b7692162a973fed4adfe1195a237e4a28353a48f299ede3aa645f30a1a09c1259adf150553b3af20366cb0298435b84a2da08e7a0de7ceb20e4bc89ae44237e9a1671ab4c94f0a81e2e607eeae098adfd13854a1f2cc1cf56262f0ee899a391d3c2507fd9690505a1317b74c4b5c7d73f31ac67de0b0dc472dbc5ee86038bf50e43cbfa5c32c7286a03452ffc03ed8f27895da1f9412e9c1cbdfdf0edd03f80e551c5f2083aec09d583c84f8a2da2a1c44553e88153b87a424f83931caff061132cdbe541b84831ae946b1afdc89381c61ac017f9a0d7c72a9cb4a62e6258f954988f65126e7424ed867e44b2aae414fc0b7f51f75d8eb5699a81af264065d19102b6717ac2c9255a08f4272345e4722a79ea510e3a8a775235d2277a4f07d988f33fdd4610f9635a57d8378301d87fd686c1c9ad8c5207a491ddd77ff151e1d5263e0d092eedb44a9ddc83f3b3965db2920f254234f4467d0cd7d26a65b5b3274a644a3f45dd15e72339129b970a447eaf2f6d5849b5256b85bb74a9faef31b849ccbf6b5963a00fdc8c95a90f4c13bf1e345241bb4a5b9ad981999c482914de0030de6be8f8f11f1c43810a1535e94893d88adb0726c333b0892e1549d9e2dc7fa9eef9d8e69385cf00b048ba8b077c18f3d6a439375056c910ed47c9b36376ea2cc3d7b100da9f9432c10e1d3dd5763acdd6ecaa62bbc1732208b53c5e9b051ec2738c5471a5ca520a510f73cbd15998a194b502c62d9d4952de789ce1141017b2f4262b8dbd5404b249e1d1190782a2606bc8f48a58cb70bb45827ed8cb997afd6976dea04ec8a7d2e0b54545ea38d61a90d31eea2b4dec1bf328f90df1c454b839bc82123f265e1621f5d8bfddf8619356d41d39878a4663eab327b963f26fff84a8933bb89c369853c8058f820bc1317d9de8449494bc663ad9cc8dd63a20b970f732535889fb586c7a24f62638634a5ffb2da85f273e2b2c2abda719bb9903b1f3d01cd7f4bf354de3dd21191478e777f9f79d696f5bad96c3d4af894b381340196b619163abe91ce13548eafcc48c2614f65d2d989d9510a14dae13273c3cd601c8b4483f99b2bc2657de22e068f743d734deb3f55de527010fd4ef0e258df35cfd4464b1f85440971c1eb73ee03fac94fdf2a85a18bae0ac4aca6d90021782da3d2977ef49b57df06683c4c718ccf4c6f59419d94a5709212b26e6fcef5785539c34342442034f491d6b287baeb5b66446f97474f8859070fdb238d1284ed977cd8083ef527de6ec9ba79ffab439ad010a9ae04a6a1e185519e754b849ce3aac8b9c9f32613059ee601a407839560ba5fb88d06551cdb2c23fe82d709cad7995d8338f826050c6b334f215b8db066bfba8f5886db023df48c31ed962e13842d16da79d45fbe156a60ff86ea77f9a650b53c6fc7ae53575651a5a26eb3da2f80f0df76c49dc2e9f25e726e6a70fc707dd389be7f8b8b7d7f6004abaa28a57e11ccdc86473060e3dd18c075107f20c323c845dab3dd2d5ac0a5a7f95916ba4176da5d8923c8ce9b90dda1040a85de8f42d3cf8faeb01426aaa4f0198e3899c594938ab5e6be3ab667cfcfc708f9e840c9829b9c18d77208bdc3a218b402e92dbe1e2045d793742776189f534eb419407ddf2264c04aaa80055b557410ae82da07bb14963982d5ad35d9b04203ac2ea915986a6ea8b4e646952fc51dea52063129dc83aaf3e7b73c39b721de08f03f37186df6fbdc5e64b13fe7c98f485b85fbeff376191cef603fbe4c8551a9a945ed62b25f24c59ac26bb2333e6229f60f081976ebc40e7c341bfaa6b30828a258d9e15a75d2eaa7508495cdcf0d28fbab1bad7ea0090972e069bb527196f3389f241e8ba3737b020acd212811552992b4215ad9e15b14716ffc6d153357c5a1d81b91dcad3613fc19d8af6abfd378cd523eaccd1852884adbd78c28871e201dadd638e27fca0ac510aac7651ec0a961d91d0f9dc9e7bc9e1c7b797fae1606b7fdb37c9e48a5e762417eeb23bf79546f2c46e45077a0595ca189866e98a2e69d7dce4a60fcb22adff268bfe8481f11f82584e2d8dcadb2c9e9dbd76be14cd8d5ae6d769973caf97b40bf4b14dbaef08cded6b4f17634f1043dd37af960c93a8cf5560b99a27bbfbed1e5915cc1d0d6468defb51c7b524bd9a06152b3d845e6be57ca68d103f11a2b57613ef8288a12f279f23665936df9efb3bcb7e5ef2b9ad8616bd63dd726e40cb0d4f6ec4007c506bdcd3af90477d33918742e20aefccd223804d69648a80968c9c54d13b7a20a9fd0590b705271d4d6e60c3722d82a44743ed011358c97de14c85b3791d33246c59bbea31568c7fa6ba9eec387da2e40c924fce654777cc4eaf8dc212178072dc0f9738eda276c6eb5fed15c8d27c9fe32ff6e1ab3e026516d834b2e768826da80621262d416e37065955a388faf5019f939ee067e75f48525d1a69e7a84964fc2026c8c97de4b5e6ea2b7d7eb6729620acd5cb6d655367e9c84422ed06e7078bd67fd111f2fdbfd956b07bf419ec47c04f0a2881f8a2407311f359018d1c297edf080a6eb7bf6d9d26790195fd6317b5229925f2c616fcc5da1f2a38174388720d4515e4c56f316444b6e207b3deab10af31f7f991dca1296a4caa86d83d7f2dc2b517ac25b56243e84c36b011cdf456379b2b481433d18255a7bda072f0026ef90ec4fb23e960abf7d83aea927c66ae6e9ba494689e3ca0439ca16d5dd03c0f4ea7ed5c8b08cee33e766f155783da905dc8a503b113b68878eae3c1b61a0975171ab3c320669702d451073b594a84388579bf4e19e21a981105cbf565059b1f217498ccf653192a1a14b264d918a4e4c767f0bd53dc5ae9fec8eda9664bc998e51b1ac2d77af931f250ab1c772540df68bb15e0ed25abaf0fd2bef0760afbda288d37a64cd3deef00cf7a07265aa98465a66191ab575721991b2a5f40ec7bd5929de83d561537409301bec034aaec47d76dfea00c816b1e72adccbe24b14303efaa93cfbec69a3b2f7f77e80b2699649a693237db375827c9fc3bb948b2ed1be55b01747ef3c2dcbe11261c933cad9875a662a26d823a2ba93736feeb0eccd27b324b44ebd5d1ce27967ebc4d2aa25f8f8c1151d71b9f5b7f93579a9f783dd7a5fe8fba3ace5114f94c5d01445a514d62283e1c9cae57d38897ca146e7db6edf46fab15da8998d526fd4e49a849022d5effd9e044c2a1c8b7ec26c9e54be4b47c0045a3341ab7bac71481b026063ee99fd6b658d54c91d166b538139ee4dd57008ed8674f243bf504a36bb9e5779a9f6908e51ef595262c097ab722408b46c9bb3e7fef86614e314d0689d0d1e71d18bb6dfb5d90cdfeff84c5fec5a74c36b2c7b88ff19dcc5ac1deee91d69a7c71821e183c9c720f39ac3e7870f50434a5686c94d7e9f748d47e90db82292c50681fb51b5dd78b6bb9acebe8494d502baeaadd9b9b38019ef68ee28b4eeadd861f7c14733bdd218d0f3c1ad21d46e9cc486514a7384717496f8797a643695883ce7572d13693ee0c40a6ccb6ecc00156b94a4c27135205fd4a4fbbc3725c80d52c2579a90403a40729ec61d85a9c29e45850d54c4c54e903a5d03f17018e5dcfec428d110406b6eaa33095bad647ca2f8b460443a9e6bf6c5f66226de0916e232d52c0bfdcf25969bc4cfad0a8c0bf7086bc13f1d5eb721ecf3030bbdf803af5700e21abebc3bbd14b3d0a2abff02c9b700223c630d2d88a0ff1403fe275eaf82b9f7ddd996d27497b5a949ddf17d196469a0f45ce896050ee4a7ba88f974fadb90b1ede2673414e6a6d89cb2ad315a8360aadad58b3ecb2bc5caeaaa88df84c638608dc3ba7b97cbd792cbf39639c109a0f16a842eaa3bbc82eab92ca287d7320e2de46df138e7f712973c36f9c1c45afb3d07445a597a0e90ec7f2c38ffcaeff3ef0bec970e43028f376f2b26d6b4da7a757b4edffe975d55172e084a7c"}}, {0x1, 0x9, 0x1, 0x3f, @tick=0x5, {0x7, 0x80}, {0x40, 0xc8}, @note={0x0, 0x0, 0x9, 0x81, 0xffffff18}}], 0x8c) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x159, &(0x7f0000000100)=[@op={0x18}], 0x24}], 0x4924924924924b1, 0x0) 09:33:21 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x171) syz_emit_ethernet(0x4e, 0x0, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getpeername(r0, &(0x7f00000001c0)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000000)=0x80) umount2(&(0x7f0000000040)='./file0\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000080)=""/21, &(0x7f0000000140)=0x15) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) umount2(&(0x7f00000000c0)='./file0\x00', 0x4) 09:33:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x10000000, 0x100000, 0x5, 0x0, 0x7f6fc79d, 0x0, 0x0, 0x2}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000002e00)) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x9, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000600)) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRES32], 0x12d840) sendfile(r5, r9, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 09:33:22 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48f49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x6a, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3475}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{}, 0x1, 0x9, 0x0, {}, 0x7, 0x7f}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x925, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280), 0x49) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{&(0x7f0000000b00)=@hci={0x1f, 0x0, 0x1}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000b80)="c2de81ed1d3d57acc6395941ce32839cc3ae9772779c70304dedd4d1b74d5cbb6539d650a16b59a2b5a5008e380a941fd53ea77378b1a2cfb6fd9afbd6d4d8765ca63df298689234172e82cbb1a8bad699d76c0cbdf2cc2f7efa57d9a72df62753329c0952b9f2892749ea4d43ba9061d445316edaa1b88af2c0fd20d76b82b9164240b11031526f7b6cc21789d697039b97bb70e52583ed15388c99e456adbdd5b78429546b021499815cd9385b44959a26b2", 0xb3}, {&(0x7f0000000c40)}, {&(0x7f0000000400)}], 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x348}}, {{&(0x7f0000001140)=@isdn={0x22, 0x0, 0x7f, 0xff, 0x6}, 0x80, &(0x7f0000001480)=[{&(0x7f00000011c0)}, {0x0}, {&(0x7f00000013c0)="c48a17f4244fa19fe06589f11a7938d9e88f111b5df65a97897f0ae37d2c6ef07531a351b97717f4e079c1e0800200a069c851627be4233bffe070508e277d0dedaa173d75ac64ea9d6d07d625f3552abc2c14d0a18405deda25ff6210fd9f0a1b111c91bfa67bf2a2b28c997c4766eaafe97a5de8d89afb86be7559973aebc526b106c146d12aeb7b9a5a697409c5bc405ba2b188891ce23d3e291076132b3258a5c628568085ec6596db2d1722d9a2bd386c94730e610b1b1ecb6f28", 0xbd}], 0x3, &(0x7f00000014c0)=[{0xb8, 0xbd62a61278016f41, 0x8, "bd0c0ef5d57d2771ec109fa92ea60f9df35d499113509c5ef173a2948c43d38a01eb17dbaf447dae09cab54140090b956c36099f2b2e41bc6a9a62e832c7089450c6f071eaa32cb3a242cf86752e93fa86136d5526e42f7fefb5b39e9100707fa2a6a11cd8ba1ef703e829e9e1c32fad1b50be1f06eef2c725892ae2a9632f7c99fd8946d2e6149ece9080d0b8a61d432618406b402b3f40932299399562bffced"}, {0x70, 0xff, 0x80, "e37a88678962b71d35a1513b8f2e74a0dc21c8b1b0b779986ea362214fca27342342c9cd57813c2c62ca3c30915e4d5135454f85ed493551190c4807d0eb81905c40770331be02ace5cd682fa82389ab35c4a57fbc3586e46d73834559ff79c9"}, {0x18, 0x0, 0x10001, "34b1c01cec80242d"}], 0x140}}], 0x2, 0x2000000) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@private}, {}, {0x0, 0x0, 0x74e}}, {{@in=@broadcast}, 0x0, @in=@empty, 0x0, 0x0, 0x2}}, 0xe8) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000001c0)={0x6, 0x69, 0x7}) accept4(0xffffffffffffffff, &(0x7f00000016c0)=@in={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x80, 0x80000) 09:33:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x2bf, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f00000001c0)=0x5) umount2(&(0x7f00000000c0)='./file0\x00', 0x9) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080), 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000040)={0x3}) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x1f}], 0x17e}}], 0x3204257417b757c, 0x0) r2 = dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000580)=ANY=[@ANYBLOB="6f1ad8e56eb3b2368adebe0b0000459415289d81d7d9aa4c5492dc201f0c989c9b28b80f8cf34929d272e94bcb02cc02adcdbde12d6dc79858818f7cca1e38ddc5624fd5e4eec1329032399a32e40337655446261fa37f5492fab5b362f4d217b9ae03612de94f49db99d2e767b838f4e304db099cfba669a81721c2042b7cb84fab6fb485c800c92577b548366111d1af446506d2447164b5f1688ada2328bfda38e7d5cefb25881be29799aee3dd2006c2e9661a891727545db90655bf1d", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @private=0xa010101}}}, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={r3, @in={{0x2, 0x4e21, @multicast2}}, [0x6, 0x8, 0xffffffffffffff1f, 0x76f1, 0x2, 0xb3b, 0x9, 0x7f, 0xffffffffffffffff, 0x0, 0x80, 0x80000000, 0x800, 0x1ff, 0xfffffffffffffffe]}, &(0x7f0000000200)=0x100) [ 3075.014948] syz-executor.2 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3075.033395] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3075.043934] CPU: 1 PID: 8449 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 3075.051721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3075.061067] Call Trace: [ 3075.063635] dump_stack+0x1b2/0x283 [ 3075.067242] dump_header+0x178/0x7aa [ 3075.070932] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3075.075928] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3075.081007] ? ___ratelimit+0x2cd/0x522 [ 3075.084959] oom_kill_process.cold+0x10/0xc16 [ 3075.089436] ? lock_downgrade+0x6e0/0x6e0 [ 3075.093563] out_of_memory+0x2d5/0x10f0 [ 3075.097519] ? oom_killer_disable+0x1c0/0x1c0 [ 3075.102002] ? mutex_trylock+0x152/0x1a0 [ 3075.106043] __alloc_pages_nodemask+0x2556/0x2730 [ 3075.110873] ? HARDIRQ_verbose+0x10/0x10 [ 3075.114913] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3075.119749] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3075.124743] ? kmem_cache_alloc_node+0x387/0x400 [ 3075.129480] copy_process.part.0+0x26a/0x6fa0 [ 3075.133956] ? do_raw_spin_unlock+0x164/0x250 [ 3075.138428] ? _raw_spin_unlock+0x29/0x40 [ 3075.142554] ? do_anonymous_page+0x62d/0x17d0 [ 3075.147034] ? finish_fault+0x290/0x290 [ 3075.150992] ? check_preemption_disabled+0x35/0x240 [ 3075.155990] ? __cleanup_sighand+0x40/0x40 [ 3075.160203] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 3075.165110] ? vm_insert_mixed_mkwrite+0x30/0x30 [ 3075.169843] ? HARDIRQ_verbose+0x10/0x10 [ 3075.173882] _do_fork+0x180/0xc80 [ 3075.177315] ? fork_idle+0x270/0x270 [ 3075.181098] ? up_read+0x17/0x30 [ 3075.184440] ? __do_page_fault+0x19a/0xb50 [ 3075.188664] ? do_syscall_64+0x4c/0x640 [ 3075.192616] ? sys_vfork+0x20/0x20 [ 3075.196135] do_syscall_64+0x1d5/0x640 [ 3075.200016] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3075.205182] RIP: 0033:0x45f429 [ 3075.208349] RSP: 002b:00007ffc677c9b18 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3075.216034] RAX: ffffffffffffffda RBX: 00007f2cfc976700 RCX: 000000000045f429 [ 3075.223279] RDX: 00007f2cfc9769d0 RSI: 00007f2cfc975db0 RDI: 00000000003d0f00 [ 3075.230537] RBP: 00007ffc677c9d40 R08: 00007f2cfc976700 R09: 00007f2cfc976700 [ 3075.237800] R10: 00007f2cfc9769d0 R11: 0000000000000202 R12: 0000000000000000 [ 3075.245045] R13: 00007ffc677c9bcf R14: 00007f2cfc9769c0 R15: 000000000078c0ec [ 3075.285865] Mem-Info: [ 3075.288501] active_anon:1016168 inactive_anon:215622 isolated_anon:0 [ 3075.288501] active_file:176 inactive_file:259 isolated_file:9 [ 3075.288501] unevictable:10062 dirty:10 writeback:0 unstable:0 [ 3075.288501] slab_reclaimable:22495 slab_unreclaimable:170886 [ 3075.288501] mapped:58072 shmem:8366 pagetables:37708 bounce:0 [ 3075.288501] free:31391 free_pcp:30 free_cma:0 [ 3075.323604] Node 0 active_anon:1518476kB inactive_anon:58924kB active_file:700kB inactive_file:1064kB unevictable:16156kB isolated(anon):0kB isolated(file):36kB mapped:226684kB dirty:40kB writeback:0kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 790528kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3075.353160] Node 1 active_anon:2546296kB inactive_anon:803564kB active_file:4kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5604kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3075.381745] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3075.409852] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3075.415560] Node 0 DMA32 free:58320kB min:36296kB low:45368kB high:54440kB active_anon:1518408kB inactive_anon:58924kB active_file:760kB inactive_file:2024kB unevictable:16156kB writepending:40kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:17472kB pagetables:62176kB bounce:0kB free_pcp:232kB local_pcp:380kB free_cma:0kB [ 3075.487232] lowmem_reserve[]: 0 0 0 0 0 [ 3075.491345] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3075.525768] lowmem_reserve[]: 0 0 0 0 0 [ 3075.532156] Node 1 Normal free:55084kB min:53592kB low:66988kB high:80384kB active_anon:2546296kB inactive_anon:803564kB active_file:4kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39008kB pagetables:88656kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3075.582730] lowmem_reserve[]: 0 0 0 0 0 [ 3075.602514] Node 0 DMA: 6*4kB (UE) 1*8kB (M) 2*16kB (M) 2*32kB (UE) 3*64kB (ME) 3*128kB (UME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10432kB [ 3075.654530] Node 0 DMA32: 991*4kB (ME) 763*8kB (UME) 365*16kB (UME) 166*32kB (ME) 162*64kB (UME) 77*128kB (UME) 17*256kB (UM) 11*512kB (UM) 1*1024kB (E) 4*2048kB (UM) 0*4096kB = 60644kB [ 3075.681710] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3075.699350] Node 1 Normal: 66*4kB (UMEH) 1679*8kB (UMEH) 550*16kB (UMEH) 587*32kB (UMEH) 187*64kB (UMEH) 15*128kB (UME) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55936kB [ 3075.720407] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3075.729579] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3075.743697] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3075.752797] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3075.769522] 14876 total pagecache pages [ 3075.779612] 0 pages in swap cache [ 3075.783658] Swap cache stats: add 0, delete 0, find 0/0 [ 3075.791847] Free swap = 0kB [ 3075.801943] Total swap = 0kB 09:33:24 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="ffffffff00000000097aa7006866736300000000080002"], 0x38}}, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000600)='/dev/nvme-fabrics\x00', 0x2001, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x10, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x800}]}, 0x2c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3075.810579] 1965979 pages RAM [ 3075.814488] 0 pages HighMem/MovableOnly [ 3075.822765] 338456 pages reserved [ 3075.829492] 0 pages cma reserved [ 3075.833689] Out of memory: Kill process 17983 (syz-executor.4) score 1005 or sacrifice child [ 3075.843941] Killed process 17983 (syz-executor.4) total-vm:74976kB, anon-rss:4260kB, file-rss:35840kB, shmem-rss:0kB 09:33:24 executing program 4: prlimit64(0x0, 0xb, &(0x7f0000000080)={0x2, 0x8e}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) recvmmsg(r1, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x9}) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x3) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x33, 0xd6a9, 0x6, 0x100000000, 0x1, 0x77, 0x0, 0x3}, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000640)=ANY=[@ANYRES32], 0x8, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @local, @ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0xa5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 3075.898560] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3075.910893] oom_reaper: reaped process 17983 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3075.967121] audit: type=1804 audit(1592213604.650:2010): pid=8458 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir173850423/syzkaller.HI3f6n/3661/bus" dev="sda1" ino=16917 res=1 09:33:24 executing program 1: syz_emit_ethernet(0x95, &(0x7f00000000c0)={@local, @dev, @val={@void}, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@rr={0x7, 0x3, 0x7}]}}, {{0x0, 0xfffd, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}, {"4ba79a01ea066787734953372973bc2c95bac851dff669b1a57401568fb24212ff82b2713f76d47a4ab4f911fd4f7a416687507ba4b3d2382f99948588e3e2d7d521c26f9230c6dbab37243b1c0eacf0d2aa8fe3df2c95"}}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r1 = accept(r0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x1f}], 0x17e}}], 0x3204257417b757c, 0x0) r2 = dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000140)={r3, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}}, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={r3, 0x7}, &(0x7f0000000040)=0x8) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1ff) [ 3076.190009] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3076.222112] syz-executor.3 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3076.274207] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3076.359797] CPU: 1 PID: 8455 Comm: syz-executor.3 Not tainted 4.14.184-syzkaller #0 [ 3076.367711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3076.377065] Call Trace: [ 3076.379651] dump_stack+0x1b2/0x283 [ 3076.383281] dump_header+0x178/0x7aa [ 3076.386996] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3076.392011] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3076.397116] ? ___ratelimit+0x2cd/0x522 [ 3076.401086] oom_kill_process.cold+0x10/0xc16 [ 3076.405585] ? lock_downgrade+0x6e0/0x6e0 [ 3076.409736] out_of_memory+0x2d5/0x10f0 [ 3076.413714] ? oom_killer_disable+0x1c0/0x1c0 [ 3076.418207] ? mutex_trylock+0x152/0x1a0 [ 3076.422271] __alloc_pages_nodemask+0x2556/0x2730 [ 3076.427134] ? HARDIRQ_verbose+0x10/0x10 [ 3076.431192] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3076.436049] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3076.441061] ? kmem_cache_alloc_node+0x387/0x400 [ 3076.445821] copy_process.part.0+0x26a/0x6fa0 [ 3076.450320] ? do_raw_spin_unlock+0x164/0x250 [ 3076.454817] ? _raw_spin_unlock+0x29/0x40 [ 3076.458962] ? do_anonymous_page+0x62d/0x17d0 [ 3076.463462] ? finish_fault+0x290/0x290 [ 3076.467435] ? check_preemption_disabled+0x35/0x240 [ 3076.472452] ? __cleanup_sighand+0x40/0x40 [ 3076.476681] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 3076.481606] ? vm_insert_mixed_mkwrite+0x30/0x30 [ 3076.486356] ? HARDIRQ_verbose+0x10/0x10 [ 3076.490420] _do_fork+0x180/0xc80 [ 3076.493876] ? fork_idle+0x270/0x270 [ 3076.497702] ? up_read+0x17/0x30 [ 3076.501064] ? __do_page_fault+0x19a/0xb50 [ 3076.505298] ? do_syscall_64+0x4c/0x640 [ 3076.509270] ? sys_vfork+0x20/0x20 [ 3076.512810] do_syscall_64+0x1d5/0x640 [ 3076.516704] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3076.521887] RIP: 0033:0x45f429 [ 3076.525074] RSP: 002b:00007ffe12d76748 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3076.532780] RAX: ffffffffffffffda RBX: 00007efdd0c0b700 RCX: 000000000045f429 [ 3076.540043] RDX: 00007efdd0c0b9d0 RSI: 00007efdd0c0adb0 RDI: 00000000003d0f00 [ 3076.547309] RBP: 00007ffe12d76970 R08: 00007efdd0c0b700 R09: 00007efdd0c0b700 [ 3076.554572] R10: 00007efdd0c0b9d0 R11: 0000000000000202 R12: 0000000000000000 [ 3076.561834] R13: 00007ffe12d767ff R14: 00007efdd0c0b9c0 R15: 000000000078c0ec [ 3076.604980] Mem-Info: [ 3076.607496] active_anon:1017512 inactive_anon:215622 isolated_anon:0 [ 3076.607496] active_file:21 inactive_file:48 isolated_file:0 [ 3076.607496] unevictable:10062 dirty:40 writeback:25 unstable:0 [ 3076.607496] slab_reclaimable:22509 slab_unreclaimable:170735 [ 3076.607496] mapped:57688 shmem:8366 pagetables:37781 bounce:0 [ 3076.607496] free:30264 free_pcp:69 free_cma:0 [ 3076.651228] Node 0 active_anon:1523844kB inactive_anon:58924kB active_file:164kB inactive_file:84kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:225148kB dirty:160kB writeback:100kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 786432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3076.748934] Node 1 active_anon:2546204kB inactive_anon:803564kB active_file:4kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5604kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3076.786871] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3076.813915] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3076.823732] Node 0 DMA32 free:51752kB min:36296kB low:45368kB high:54440kB active_anon:1526976kB inactive_anon:58924kB active_file:92kB inactive_file:116kB unevictable:16156kB writepending:160kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:17440kB pagetables:62468kB bounce:0kB free_pcp:156kB local_pcp:0kB free_cma:0kB [ 3076.860284] lowmem_reserve[]: 0 0 0 0 0 [ 3076.864520] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3076.894932] lowmem_reserve[]: 0 0 0 0 0 [ 3076.899072] Node 1 Normal free:55560kB min:53592kB low:66988kB high:80384kB active_anon:2546204kB inactive_anon:803564kB active_file:4kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39392kB pagetables:88656kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3076.933974] lowmem_reserve[]: 0 0 0 0 0 [ 3076.942757] Node 0 DMA: 6*4kB (UE) 1*8kB (M) 2*16kB (M) 2*32kB (UE) 3*64kB (ME) 3*128kB (UME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10432kB [ 3076.963209] Node 0 DMA32: 240*4kB (UMEH) 78*8kB (UME) 125*16kB (UME) 167*32kB (UME) 157*64kB (UME) 73*128kB (UME) 17*256kB (UM) 11*512kB (UM) 1*1024kB (E) 6*2048kB (UM) 0*4096kB = 51616kB [ 3077.006916] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3077.047426] Node 1 Normal: 66*4kB (UMEH) 1687*8kB (UMEH) 550*16kB (UMEH) 575*32kB (UMEH) 187*64kB (UMEH) 15*128kB (UME) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55616kB [ 3077.063661] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3077.072595] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3077.081257] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3077.116015] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3077.143628] 13978 total pagecache pages [ 3077.151666] 0 pages in swap cache [ 3077.171320] Swap cache stats: add 0, delete 0, find 0/0 [ 3077.200037] Free swap = 0kB [ 3077.203738] Total swap = 0kB [ 3077.212159] 1965979 pages RAM [ 3077.234504] 0 pages HighMem/MovableOnly [ 3077.238571] 338456 pages reserved [ 3077.242059] 0 pages cma reserved [ 3077.245490] Out of memory: Kill process 18045 (syz-executor.4) score 1005 or sacrifice child [ 3077.257842] Killed process 18045 (syz-executor.4) total-vm:74976kB, anon-rss:4260kB, file-rss:35840kB, shmem-rss:0kB [ 3077.312508] oom_reaper: reaped process 18045 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3077.679462] oom_reaper: reaped process 8449 (syz-executor.2), now anon-rss:0kB, file-rss:48kB, shmem-rss:0kB [ 3077.741481] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3077.785837] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3077.803107] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 09:33:26 executing program 2: getsockname$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) 09:33:26 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = dup2(r2, r1) setsockopt$llc_int(r3, 0x10c, 0x6, &(0x7f0000000000), 0x4) [ 3078.105240] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:33:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000006c0)=""/21, 0x15}, 0x2007}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/180, 0xb4}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_RW_HINT(r1, 0x40c, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000900)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000240)="4ee688c99d2edd0a5b", 0x9}, 0x68) creat(&(0x7f0000000000)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000100)={0x2, 0x0, 0x56a9}) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @perf_config_ext={0x3, 0xd8}, 0x8000000200036150, 0x800007b, 0x0, 0x0, 0x0, 0x6a4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x8, &(0x7f000000a000)) 09:33:27 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') lseek(r0, 0x0, 0x4) 09:33:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x2}, @ptr={0x77622a85, 0x0, 0x0}, @fd}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}], 0x0, 0x2, 0x0}) 09:33:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004900)=[{{&(0x7f0000000340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001600)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/87, 0x57}, {&(0x7f0000001440)=""/127, 0x7f}, {&(0x7f00000014c0)=""/148, 0x94}, {&(0x7f0000000140)=""/12, 0xc}], 0x5}, 0x200}, {{&(0x7f0000001680)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000001700)=""/120, 0x78}, {&(0x7f0000001780)=""/132, 0x84}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/129, 0x81}, {&(0x7f0000002900)=""/229, 0xe5}], 0x5, &(0x7f0000002a80)=""/241, 0xf1}, 0xfffffffc}, {{&(0x7f0000002b80)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000003280)=[{&(0x7f0000002c00)=""/184, 0xb8}, {&(0x7f0000002cc0)=""/85, 0x55}, {&(0x7f0000002d40)=""/231, 0xe7}, {&(0x7f0000002e40)=""/84, 0x54}, {&(0x7f0000002ec0)=""/229, 0xe5}, {&(0x7f0000002fc0)=""/212, 0xd4}, {&(0x7f0000000200)=""/17, 0x11}, {&(0x7f00000030c0)=""/246, 0xf6}, {0x0}, {&(0x7f0000003200)=""/97, 0x61}], 0xa, &(0x7f0000003340)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000004340)=@hci, 0x80, &(0x7f0000004880)=[{&(0x7f00000043c0)=""/212, 0xd4}, {&(0x7f00000044c0)=""/114, 0x72}, {&(0x7f0000004540)=""/119, 0x77}, {&(0x7f00000045c0)=""/201, 0xc9}, {&(0x7f00000046c0)=""/243, 0xf3}, {&(0x7f00000047c0)=""/190, 0xbe}], 0x6}, 0x1d280}], 0x4, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x0) 09:33:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="780e000030003dfa000000000000000000000000640e0100600e01000a0001007065646974000000340e0280050005"], 0xe78}}, 0x0) 09:33:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000006c0)=""/21, 0x15}, 0x2007}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/180, 0xb4}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_RW_HINT(r1, 0x40c, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000900)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000240)="4ee688c99d2edd0a5b", 0x9}, 0x68) creat(&(0x7f0000000000)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000100)={0x2, 0x0, 0x56a9}) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @perf_config_ext={0x3, 0xd8}, 0x8000000200036150, 0x800007b, 0x0, 0x0, 0x0, 0x6a4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x8, &(0x7f000000a000)) 09:33:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000006c0)=""/21, 0x15}, 0x2007}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/180, 0xb4}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_RW_HINT(r1, 0x40c, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000900)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000240)="4ee688c99d2edd0a5b", 0x9}, 0x68) creat(&(0x7f0000000000)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000100)={0x2, 0x0, 0x56a9}) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @perf_config_ext={0x3, 0xd8}, 0x8000000200036150, 0x800007b, 0x0, 0x0, 0x0, 0x6a4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x8, &(0x7f000000a000)) 09:33:27 executing program 2: getsockname$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) 09:33:27 executing program 2: getsockname$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) 09:33:27 executing program 3: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) [ 3079.102551] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 09:33:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000006c0)=""/21, 0x15}, 0x2007}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/180, 0xb4}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_RW_HINT(r1, 0x40c, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000900)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000240)="4ee688c99d2edd0a5b", 0x9}, 0x68) creat(&(0x7f0000000000)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000100)={0x2, 0x0, 0x56a9}) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @perf_config_ext={0x3, 0xd8}, 0x8000000200036150, 0x800007b, 0x0, 0x0, 0x0, 0x6a4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x8, &(0x7f000000a000)) 09:33:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000006c0)=""/21, 0x15}, 0x2007}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/180, 0xb4}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_RW_HINT(r1, 0x40c, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000900)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000240)="4ee688c99d2edd0a5b", 0x9}, 0x68) creat(&(0x7f0000000000)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000100)={0x2, 0x0, 0x56a9}) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @perf_config_ext={0x3, 0xd8}, 0x8000000200036150, 0x800007b, 0x0, 0x0, 0x0, 0x6a4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x8, &(0x7f000000a000)) [ 3079.448102] syz-executor.2 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3079.472965] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3079.480248] CPU: 1 PID: 6353 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 3079.488045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 09:33:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="780e000030003dfa000000000000000000000000640e0100600e01000a0001007065646974000000340e0280050005"], 0xe78}}, 0x0) 09:33:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050741a77c7ba006671700000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8}]}}]}, 0x3c}}, 0x0) [ 3079.497393] Call Trace: [ 3079.499980] dump_stack+0x1b2/0x283 [ 3079.503693] dump_header+0x178/0x7aa [ 3079.507403] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3079.512419] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3079.517516] ? ___ratelimit+0x2cd/0x522 [ 3079.521479] oom_kill_process.cold+0x10/0xc16 [ 3079.526071] ? lock_downgrade+0x6e0/0x6e0 [ 3079.530224] out_of_memory+0x2d5/0x10f0 [ 3079.534202] ? oom_killer_disable+0x1c0/0x1c0 [ 3079.538693] ? mutex_trylock+0x152/0x1a0 [ 3079.542751] __alloc_pages_nodemask+0x2556/0x2730 [ 3079.547597] ? kmem_cache_free+0x7c/0x2b0 [ 3079.551751] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3079.556589] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3079.561439] ? HARDIRQ_verbose+0x10/0x10 [ 3079.565501] ? cache_grow_begin+0x3f/0x410 [ 3079.569731] cache_grow_begin+0x91/0x410 [ 3079.573788] fallback_alloc+0x205/0x2b0 [ 3079.577759] kmem_cache_alloc+0x1e5/0x3c0 [ 3079.581904] getname_flags+0xc8/0x550 [ 3079.585700] SyS_mkdirat+0x83/0x220 [ 3079.589326] ? SyS_mknod+0x30/0x30 [ 3079.592864] ? do_syscall_64+0x4c/0x640 [ 3079.596834] ? SyS_mkdirat+0x220/0x220 [ 3079.600720] do_syscall_64+0x1d5/0x640 [ 3079.604607] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3079.609783] RIP: 0033:0x45bed7 [ 3079.612970] RSP: 002b:00007ffc677c9e08 EFLAGS: 00000202 ORIG_RAX: 0000000000000053 [ 3079.620676] RAX: ffffffffffffffda RBX: 00000000002efc2e RCX: 000000000045bed7 [ 3079.627942] RDX: 00007ffc677c9e56 RSI: 00000000000001ff RDI: 00007ffc677c9e50 [ 3079.635212] RBP: 0000000000002f67 R08: 0000000000000000 R09: 0000000000000006 [ 3079.642477] R10: 0000000000000064 R11: 0000000000000202 R12: 0000000000000008 [ 3079.649768] R13: 00007ffc677c9e40 R14: 00000000002efbdd R15: 00007ffc677c9e50 [ 3079.704368] Mem-Info: [ 3079.708150] active_anon:1016317 inactive_anon:215622 isolated_anon:0 [ 3079.708150] active_file:1115 inactive_file:1060 isolated_file:0 [ 3079.708150] unevictable:10062 dirty:34 writeback:0 unstable:0 [ 3079.708150] slab_reclaimable:22534 slab_unreclaimable:170185 [ 3079.708150] mapped:59287 shmem:8366 pagetables:37752 bounce:0 [ 3079.708150] free:30123 free_pcp:163 free_cma:0 09:33:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000006c0)=""/21, 0x15}, 0x2007}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/180, 0xb4}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_RW_HINT(r1, 0x40c, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000900)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000240)="4ee688c99d2edd0a5b", 0x9}, 0x68) creat(&(0x7f0000000000)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000100)={0x2, 0x0, 0x56a9}) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @perf_config_ext={0x3, 0xd8}, 0x8000000200036150, 0x800007b, 0x0, 0x0, 0x0, 0x6a4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x8, &(0x7f000000a000)) [ 3079.750458] Node 0 active_anon:1521128kB inactive_anon:58924kB active_file:3824kB inactive_file:3892kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:230920kB dirty:136kB writeback:0kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 774144kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 09:33:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000006c0)=""/21, 0x15}, 0x2007}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/180, 0xb4}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_RW_HINT(r1, 0x40c, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000900)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000240)="4ee688c99d2edd0a5b", 0x9}, 0x68) creat(&(0x7f0000000000)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000100)={0x2, 0x0, 0x56a9}) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @perf_config_ext={0x3, 0xd8}, 0x8000000200036150, 0x800007b, 0x0, 0x0, 0x0, 0x6a4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x8, &(0x7f000000a000)) [ 3079.780634] Node 1 active_anon:2546204kB inactive_anon:803564kB active_file:4kB inactive_file:108kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5728kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3079.814318] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3079.839294] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 09:33:28 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}}, 0x0) [ 3079.867506] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3079.875265] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3079.884675] Node 0 DMA32 free:67164kB min:36296kB low:45368kB high:54440kB active_anon:1506476kB inactive_anon:58924kB active_file:3332kB inactive_file:3984kB unevictable:16156kB writepending:412kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:17504kB pagetables:62204kB bounce:0kB free_pcp:672kB local_pcp:368kB free_cma:0kB [ 3079.917587] lowmem_reserve[]: 0 0 0 0 0 [ 3079.921591] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3079.942703] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3079.951967] lowmem_reserve[]: 0 0 0 0 0 [ 3079.960668] Node 1 Normal free:57640kB min:53592kB low:66988kB high:80384kB active_anon:2546204kB inactive_anon:803564kB active_file:8kB inactive_file:132kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39008kB pagetables:88656kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 09:33:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="780e000030003dfa000000000000000000000000640e0100600e01000a0001007065646974000000340e0280050005"], 0xe78}}, 0x0) 09:33:28 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103442, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x403000) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r4, 0x2008001) r5 = socket$inet6(0xa, 0x3, 0x5) close(r5) r6 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) sendfile(r5, r6, 0x0, 0x8000fffffffa) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000a, 0x9) 09:33:29 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x4, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000580)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000000300)=""/4, 0x4}, {&(0x7f0000000440)=""/45, 0x2d}, {&(0x7f0000000480)=""/198, 0xc6}], 0x4, &(0x7f00000005c0)=""/150, 0x96}, 0x7f}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)=""/122, 0x7a}], 0x1}, 0x3}, {{&(0x7f00000007c0)=@nfc_llcp, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000840)=""/36, 0x24}, {&(0x7f0000000880)}, {&(0x7f00000008c0)=""/1, 0x1}, {&(0x7f0000002900)=""/206, 0x12a}, {&(0x7f0000002a00)=""/80, 0x50}], 0x5, &(0x7f0000002b00)=""/130, 0x82}, 0x2}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, &(0x7f0000000340), 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000900)=""/4096) ptrace(0x11, r0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x42, 0x8, 0x0, 0x80, 0x0, 0x0, 0x37f06f1240f76124, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x6, 0x1c24000}, 0x0, 0x53, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x9b) io_submit(0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x803, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x10000, 0xfffffffffffffffe}, 0x1, 0x0, 0x80000000000001}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x900000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0xe8) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) [ 3080.286305] lowmem_reserve[]: 0 0 0 0 0 [ 3080.301363] Node 0 DMA: 6*4kB (UE) 1*8kB (M) 2*16kB (M) 2*32kB (UE) 3*64kB (ME) 3*128kB (UME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10432kB [ 3080.332830] Node 0 DMA32: 157*4kB (UME) 618*8kB (UMEH) 293*16kB (UME) 150*32kB (UMEH) 160*64kB (UMEH) 25*128kB (UME) 23*256kB (UM) 14*512kB (UMH) 3*1024kB (UEH) 9*2048kB (M) 0*4096kB = 63060kB [ 3080.353728] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3080.365407] Node 1 Normal: 34*4kB (UMEH) 1701*8kB (UMEH) 648*16kB (UMEH) 582*32kB (UMEH) 189*64kB (UMEH) 22*128kB (UME) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 58416kB [ 3080.392302] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3080.403160] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3080.405362] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3080.416124] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3080.431435] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3080.448705] 18103 total pagecache pages [ 3080.462331] 0 pages in swap cache [ 3080.479982] Swap cache stats: add 0, delete 0, find 0/0 [ 3080.525553] Free swap = 0kB [ 3080.543897] Total swap = 0kB [ 3080.561401] 1965979 pages RAM [ 3080.579883] 0 pages HighMem/MovableOnly [ 3080.608994] 338456 pages reserved [ 3080.672105] 0 pages cma reserved [ 3080.719076] Out of memory: Kill process 18065 (syz-executor.4) score 1005 or sacrifice child [ 3080.751241] Killed process 18065 (syz-executor.4) total-vm:74976kB, anon-rss:4260kB, file-rss:35840kB, shmem-rss:0kB [ 3080.804234] oom_reaper: reaped process 18065 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3080.917247] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3080.951461] systemd-journal cpuset=/ mems_allowed=0-1 [ 3080.972245] CPU: 1 PID: 3635 Comm: systemd-journal Not tainted 4.14.184-syzkaller #0 [ 3080.980132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3080.989460] Call Trace: [ 3080.992027] dump_stack+0x1b2/0x283 [ 3080.995634] dump_header+0x178/0x7aa [ 3080.999323] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3081.004316] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3081.009392] ? ___ratelimit+0x2cd/0x522 [ 3081.013340] oom_kill_process.cold+0x10/0xc16 [ 3081.017830] ? lock_downgrade+0x6e0/0x6e0 [ 3081.021956] out_of_memory+0x2d5/0x10f0 [ 3081.025920] ? oom_killer_disable+0x1c0/0x1c0 [ 3081.030391] ? mutex_trylock+0x152/0x1a0 [ 3081.034430] __alloc_pages_nodemask+0x2556/0x2730 [ 3081.039256] ? kmemdup+0x23/0x50 [ 3081.042604] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3081.047418] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3081.052244] ? HARDIRQ_verbose+0x10/0x10 [ 3081.056285] ? cache_grow_begin+0x3f/0x410 [ 3081.060499] cache_grow_begin+0x91/0x410 [ 3081.064537] fallback_alloc+0x205/0x2b0 [ 3081.068493] kmem_cache_alloc+0x1e5/0x3c0 [ 3081.072620] getname_flags+0xc8/0x550 [ 3081.076399] user_path_at_empty+0x2a/0x50 [ 3081.080522] SyS_faccessat+0x21b/0x680 [ 3081.084390] ? SyS_fallocate+0x80/0x80 [ 3081.088255] ? do_syscall_64+0x4c/0x640 [ 3081.092204] ? SyS_faccessat+0x680/0x680 [ 3081.096242] do_syscall_64+0x1d5/0x640 [ 3081.100118] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3081.105284] RIP: 0033:0x7f86d07dc9c7 [ 3081.108969] RSP: 002b:00007ffe17a63f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 3081.116654] RAX: ffffffffffffffda RBX: 00007ffe17a66e30 RCX: 00007f86d07dc9c7 [ 3081.123899] RDX: 00007f86d124da00 RSI: 0000000000000000 RDI: 000055b94d14b9a3 [ 3081.131145] RBP: 00007ffe17a63f50 R08: 0000000000000000 R09: 0000000000000000 [ 3081.138401] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 3081.145667] R13: 0000000000000000 R14: 00007ffe17a66e30 R15: 00007ffe17a64440 [ 3081.170464] Mem-Info: [ 3081.172886] active_anon:1016258 inactive_anon:218492 isolated_anon:0 [ 3081.172886] active_file:349 inactive_file:382 isolated_file:30 [ 3081.172886] unevictable:10062 dirty:280 writeback:25 unstable:0 [ 3081.172886] slab_reclaimable:22557 slab_unreclaimable:169883 [ 3081.172886] mapped:60996 shmem:11236 pagetables:37691 bounce:0 [ 3081.172886] free:29391 free_pcp:0 free_cma:0 [ 3081.222144] Node 0 active_anon:1518812kB inactive_anon:67712kB active_file:1180kB inactive_file:1192kB unevictable:16156kB isolated(anon):0kB isolated(file):120kB mapped:235064kB dirty:1120kB writeback:100kB shmem:25780kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 792576kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3081.292156] Node 1 active_anon:2546220kB inactive_anon:806256kB active_file:8kB inactive_file:132kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:8420kB dirty:0kB writeback:0kB shmem:19164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3081.321255] Node 0 DMA free:10400kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3081.349007] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3081.364961] Node 0 DMA32 free:52116kB min:36296kB low:45368kB high:54440kB active_anon:1518644kB inactive_anon:67712kB active_file:792kB inactive_file:1480kB unevictable:16156kB writepending:1072kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:17280kB pagetables:62104kB bounce:0kB free_pcp:468kB local_pcp:268kB free_cma:0kB [ 3081.402765] lowmem_reserve[]: 0 0 0 0 0 [ 3081.435296] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3081.485586] lowmem_reserve[]: 0 0 0 0 0 [ 3081.489702] Node 1 Normal free:55128kB min:53592kB low:66988kB high:80384kB active_anon:2546220kB inactive_anon:806256kB active_file:0kB inactive_file:32kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39136kB pagetables:88660kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3081.520418] lowmem_reserve[]: 0 0 0 0 0 [ 3081.527012] Node 0 DMA: 6*4kB (UE) 1*8kB (M) 2*16kB (M) 1*32kB (E) 3*64kB (ME) 3*128kB (UME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10400kB [ 3081.542802] Node 0 DMA32: 2049*4kB (UME) 461*8kB (UME) 109*16kB (UME) 60*32kB (UME) 163*64kB (UME) 25*128kB (UME) 23*256kB (UM) 14*512kB (UM) 3*1024kB (UE) 4*2048kB (M) 0*4096kB = 53500kB [ 3081.576132] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3081.595830] Node 1 Normal: 46*4kB (UMEH) 1606*8kB (UMEH) 520*16kB (UMEH) 576*32kB (UMEH) 191*64kB (UMEH) 22*128kB (UME) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55592kB [ 3081.614783] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3081.624010] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3081.632821] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3081.642628] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3081.651565] 16890 total pagecache pages [ 3081.655629] 0 pages in swap cache [ 3081.659143] Swap cache stats: add 0, delete 0, find 0/0 [ 3081.664618] Free swap = 0kB [ 3081.667870] Total swap = 0kB [ 3081.671005] 1965979 pages RAM [ 3081.674215] 0 pages HighMem/MovableOnly [ 3081.683002] 338456 pages reserved [ 3081.686746] 0 pages cma reserved [ 3081.690113] Out of memory: Kill process 13425 (syz-executor.5) score 1005 or sacrifice child [ 3081.698948] Killed process 13425 (syz-executor.5) total-vm:74976kB, anon-rss:4256kB, file-rss:35840kB, shmem-rss:0kB [ 3081.833373] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3081.879969] systemd-journal cpuset=/ mems_allowed=0-1 [ 3081.890389] CPU: 0 PID: 3635 Comm: systemd-journal Not tainted 4.14.184-syzkaller #0 [ 3081.898277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3081.907622] Call Trace: [ 3081.910200] dump_stack+0x1b2/0x283 [ 3081.913805] dump_header+0x178/0x7aa [ 3081.917545] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3081.922538] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3081.927621] ? ___ratelimit+0x2cd/0x522 [ 3081.931670] oom_kill_process.cold+0x10/0xc16 [ 3081.936145] ? lock_downgrade+0x6e0/0x6e0 [ 3081.940272] out_of_memory+0x2d5/0x10f0 [ 3081.944280] ? oom_killer_disable+0x1c0/0x1c0 [ 3081.948761] ? mutex_trylock+0x152/0x1a0 [ 3081.952808] __alloc_pages_nodemask+0x2556/0x2730 [ 3081.957632] ? kmemdup+0x23/0x50 [ 3081.960980] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3081.965823] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3081.970653] ? HARDIRQ_verbose+0x10/0x10 [ 3081.974693] ? cache_grow_begin+0x3f/0x410 [ 3081.978922] cache_grow_begin+0x91/0x410 [ 3081.982993] fallback_alloc+0x205/0x2b0 [ 3081.986969] kmem_cache_alloc+0x1e5/0x3c0 [ 3081.991112] getname_flags+0xc8/0x550 [ 3081.994913] user_path_at_empty+0x2a/0x50 [ 3081.999059] SyS_faccessat+0x21b/0x680 [ 3082.002939] ? SyS_fallocate+0x80/0x80 [ 3082.006813] ? do_syscall_64+0x4c/0x640 [ 3082.010783] ? SyS_faccessat+0x680/0x680 [ 3082.014838] do_syscall_64+0x1d5/0x640 [ 3082.018728] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3082.023909] RIP: 0033:0x7f86d07dc9c7 [ 3082.027614] RSP: 002b:00007ffe17a63f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 3082.035309] RAX: ffffffffffffffda RBX: 00007ffe17a66e30 RCX: 00007f86d07dc9c7 [ 3082.042562] RDX: 00007f86d124da00 RSI: 0000000000000000 RDI: 000055b94d14b9a3 [ 3082.049823] RBP: 00007ffe17a63f50 R08: 0000000000000000 R09: 0000000000000000 [ 3082.057080] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 3082.064325] R13: 0000000000000000 R14: 00007ffe17a66e30 R15: 00007ffe17a64440 [ 3082.110014] Mem-Info: [ 3082.124754] active_anon:1015178 inactive_anon:218492 isolated_anon:0 [ 3082.124754] active_file:168 inactive_file:281 isolated_file:32 [ 3082.124754] unevictable:10062 dirty:1 writeback:26 unstable:0 [ 3082.124754] slab_reclaimable:22559 slab_unreclaimable:169728 [ 3082.124754] mapped:60792 shmem:11236 pagetables:37638 bounce:0 [ 3082.124754] free:30832 free_pcp:86 free_cma:0 [ 3082.160445] Node 0 active_anon:1514492kB inactive_anon:67712kB active_file:48kB inactive_file:344kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:233916kB dirty:4kB writeback:4kB shmem:25780kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 788480kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3082.189535] Node 1 active_anon:2546220kB inactive_anon:806256kB active_file:4kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:8296kB dirty:0kB writeback:0kB shmem:19164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3082.219053] Node 0 DMA free:10400kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3082.252338] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3082.274243] Node 0 DMA32 free:55992kB min:36296kB low:45368kB high:54440kB active_anon:1514324kB inactive_anon:67712kB active_file:776kB inactive_file:1992kB unevictable:16156kB writepending:16kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:17248kB pagetables:61892kB bounce:0kB free_pcp:600kB local_pcp:248kB free_cma:0kB [ 3082.305229] lowmem_reserve[]: 0 0 0 0 0 [ 3082.309500] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3082.335405] lowmem_reserve[]: 0 0 0 0 0 [ 3082.345662] Node 1 Normal free:55544kB min:53592kB low:66988kB high:80384kB active_anon:2546220kB inactive_anon:806256kB active_file:4kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39072kB pagetables:88660kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3082.375699] lowmem_reserve[]: 0 0 0 0 0 [ 3082.379777] Node 0 DMA: 6*4kB (UE) 1*8kB (M) 2*16kB (M) 1*32kB (E) 3*64kB (ME) 3*128kB (UME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10400kB [ 3082.395095] Node 0 DMA32: 2037*4kB (UME) 486*8kB (UME) 116*16kB (UME) 64*32kB (UME) 163*64kB (UME) 25*128kB (UME) 24*256kB (UM) 14*512kB (UM) 3*1024kB (UE) 6*2048kB (M) 0*4096kB = 58244kB [ 3082.412214] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3082.423128] Node 1 Normal: 46*4kB (UMEH) 1644*8kB (UMEH) 482*16kB (UMEH) 576*32kB (UMEH) 191*64kB (UMEH) 24*128kB (UME) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55544kB [ 3082.439319] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3082.448249] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3082.456987] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3082.465929] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3082.474551] 16870 total pagecache pages [ 3082.478640] 0 pages in swap cache [ 3082.482146] Swap cache stats: add 0, delete 0, find 0/0 [ 3082.487701] Free swap = 0kB [ 3082.490708] Total swap = 0kB [ 3082.493722] 1965979 pages RAM [ 3082.497007] 0 pages HighMem/MovableOnly [ 3082.500970] 338456 pages reserved [ 3082.504414] 0 pages cma reserved [ 3082.508082] Out of memory: Kill process 13434 (syz-executor.1) score 1005 or sacrifice child [ 3082.516933] Killed process 13434 (syz-executor.1) total-vm:75108kB, anon-rss:4256kB, file-rss:35840kB, shmem-rss:0kB [ 3082.570875] oom_reaper: reaped process 13434 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 09:33:31 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x102aa100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)) r0 = socket(0x0, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), 0x0) flock(0xffffffffffffffff, 0x0) 09:33:31 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x4, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000580)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000000300)=""/4, 0x4}, {&(0x7f0000000440)=""/45, 0x2d}, {&(0x7f0000000480)=""/198, 0xc6}], 0x4, &(0x7f00000005c0)=""/150, 0x96}, 0x7f}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)=""/122, 0x7a}], 0x1}, 0x3}, {{&(0x7f00000007c0)=@nfc_llcp, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000840)=""/36, 0x24}, {&(0x7f0000000880)}, {&(0x7f00000008c0)=""/1, 0x1}, {&(0x7f0000002900)=""/206, 0x12a}, {&(0x7f0000002a00)=""/80, 0x50}], 0x5, &(0x7f0000002b00)=""/130, 0x82}, 0x2}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, &(0x7f0000000340), 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000900)=""/4096) ptrace(0x11, r0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x42, 0x8, 0x0, 0x80, 0x0, 0x0, 0x37f06f1240f76124, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x6, 0x1c24000}, 0x0, 0x53, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x9b) io_submit(0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x803, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x10000, 0xfffffffffffffffe}, 0x1, 0x0, 0x80000000000001}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x900000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0xe8) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 09:33:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000100)=0xe24) 09:33:31 executing program 2: getsockname$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) 09:33:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="780e000030003dfa000000000000000000000000640e0100600e01000a0001007065646974000000340e0280050005"], 0xe78}}, 0x0) 09:33:31 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x4, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000580)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000000300)=""/4, 0x4}, {&(0x7f0000000440)=""/45, 0x2d}, {&(0x7f0000000480)=""/198, 0xc6}], 0x4, &(0x7f00000005c0)=""/150, 0x96}, 0x7f}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)=""/122, 0x7a}], 0x1}, 0x3}, {{&(0x7f00000007c0)=@nfc_llcp, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000840)=""/36, 0x24}, {&(0x7f0000000880)}, {&(0x7f00000008c0)=""/1, 0x1}, {&(0x7f0000002900)=""/206, 0x12a}, {&(0x7f0000002a00)=""/80, 0x50}], 0x5, &(0x7f0000002b00)=""/130, 0x82}, 0x2}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, &(0x7f0000000340), 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000900)=""/4096) ptrace(0x11, r0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x42, 0x8, 0x0, 0x80, 0x0, 0x0, 0x37f06f1240f76124, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x6, 0x1c24000}, 0x0, 0x53, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x9b) io_submit(0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x803, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x10000, 0xfffffffffffffffe}, 0x1, 0x0, 0x80000000000001}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x900000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0xe8) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 09:33:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x98a, 0x4) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) fcntl$setstatus(r0, 0x4, 0x0) [ 3083.273738] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 09:33:32 executing program 2: sysfs$2(0x2, 0x0, &(0x7f0000000000)=""/21) [ 3083.703188] kworker/u4:9 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3083.794058] kworker/u4:9 cpuset=/ mems_allowed=0-1 [ 3083.834206] CPU: 1 PID: 8630 Comm: kworker/u4:9 Not tainted 4.14.184-syzkaller #0 [ 3083.841853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3083.851202] Call Trace: [ 3083.853804] dump_stack+0x1b2/0x283 [ 3083.857433] dump_header+0x178/0x7aa [ 3083.861146] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3083.866158] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3083.871261] ? ___ratelimit+0x2cd/0x522 [ 3083.875241] oom_kill_process.cold+0x10/0xc16 [ 3083.879745] ? lock_downgrade+0x6e0/0x6e0 [ 3083.883896] out_of_memory+0x2d5/0x10f0 [ 3083.887871] ? oom_killer_disable+0x1c0/0x1c0 [ 3083.892358] ? mutex_trylock+0x152/0x1a0 [ 3083.896422] __alloc_pages_nodemask+0x2556/0x2730 [ 3083.901280] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3083.906117] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3083.910959] ? HARDIRQ_verbose+0x10/0x10 [ 3083.915023] ? cache_grow_begin+0x3f/0x410 [ 3083.919257] cache_grow_begin+0x91/0x410 [ 3083.923319] fallback_alloc+0x205/0x2b0 [ 3083.927298] kmem_cache_alloc+0x1e5/0x3c0 [ 3083.931446] getname_kernel+0x4e/0x340 [ 3083.935334] call_usermodehelper_exec_async+0x27b/0x4c0 [ 3083.940690] ? umh_complete+0x80/0x80 [ 3083.944488] ret_from_fork+0x24/0x30 09:33:32 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x4, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000580)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000000300)=""/4, 0x4}, {&(0x7f0000000440)=""/45, 0x2d}, {&(0x7f0000000480)=""/198, 0xc6}], 0x4, &(0x7f00000005c0)=""/150, 0x96}, 0x7f}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)=""/122, 0x7a}], 0x1}, 0x3}, {{&(0x7f00000007c0)=@nfc_llcp, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000840)=""/36, 0x24}, {&(0x7f0000000880)}, {&(0x7f00000008c0)=""/1, 0x1}, {&(0x7f0000002900)=""/206, 0x12a}, {&(0x7f0000002a00)=""/80, 0x50}], 0x5, &(0x7f0000002b00)=""/130, 0x82}, 0x2}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, &(0x7f0000000340), 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000900)=""/4096) ptrace(0x11, r0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x42, 0x8, 0x0, 0x80, 0x0, 0x0, 0x37f06f1240f76124, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x6, 0x1c24000}, 0x0, 0x53, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x9b) io_submit(0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x803, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x10000, 0xfffffffffffffffe}, 0x1, 0x0, 0x80000000000001}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x900000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0xe8) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 09:33:32 executing program 2: socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x545, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) syz_open_procfs(r0, &(0x7f0000000080)='net/psched\x00') ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000580)={{0x6, 0x3, 0x923, 0x5c, '\x00', 0x8}, 0x1, 0x423, 0x1000, 0xffffffffffffffff, 0x2, 0x2, 'syz0\x00', &(0x7f00000000c0)=['\x00', 'aead\x00'], 0x6, [], [0x4, 0x4, 0x3, 0xff]}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000200)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540), 0x0) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)) r3 = accept(r1, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) r4 = open(0x0, 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) 09:33:33 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000040c0), 0x14ec) read$FUSE(r0, &(0x7f0000002000), 0x1000) getxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='security.apparmor\x00', &(0x7f0000000400)=""/188, 0xbc) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r0, &(0x7f0000000380)={0x78, 0x0, 0x2}, 0x78) [ 3084.886395] Mem-Info: [ 3084.889971] active_anon:1026573 inactive_anon:215622 isolated_anon:0 [ 3084.889971] active_file:46 inactive_file:48 isolated_file:0 [ 3084.889971] unevictable:10062 dirty:36 writeback:32 unstable:0 [ 3084.889971] slab_reclaimable:22342 slab_unreclaimable:169880 [ 3084.889971] mapped:57703 shmem:8366 pagetables:37657 bounce:0 [ 3084.889971] free:22700 free_pcp:1 free_cma:0 [ 3085.038150] Node 0 active_anon:1551136kB inactive_anon:58924kB active_file:196kB inactive_file:76kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:225080kB dirty:176kB writeback:0kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 800768kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3085.074724] Node 1 active_anon:2555272kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5604kB dirty:4kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3085.226982] Node 0 DMA free:10352kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3085.253951] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3085.259490] Node 0 DMA32 free:36796kB min:36296kB low:45368kB high:54440kB active_anon:1542968kB inactive_anon:58924kB active_file:388kB inactive_file:368kB unevictable:16156kB writepending:28kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:17280kB pagetables:61940kB bounce:0kB free_pcp:1380kB local_pcp:648kB free_cma:0kB [ 3085.290886] lowmem_reserve[]: 0 0 0 0 0 [ 3085.295427] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3085.321422] lowmem_reserve[]: 0 0 0 0 0 [ 3085.341771] Node 1 Normal free:57496kB min:53592kB low:66988kB high:80384kB active_anon:2547332kB inactive_anon:803564kB active_file:0kB inactive_file:360kB unevictable:24092kB writepending:4kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39264kB pagetables:89016kB bounce:0kB free_pcp:1448kB local_pcp:720kB free_cma:0kB [ 3085.377710] lowmem_reserve[]: 0 0 0 0 0 [ 3085.419973] Node 0 DMA: 6*4kB (UE) 1*8kB (M) 3*16kB (UM) 1*32kB (E) 4*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10352kB [ 3085.493056] Node 0 DMA32: 626*4kB (UME) 318*8kB (UME) 255*16kB (UME) 129*32kB (UME) 72*64kB (UME) 24*128kB (UME) 20*256kB (UM) 14*512kB (UM) 3*1024kB (UE) 0*2048kB 0*4096kB = 36296kB [ 3085.515549] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3085.527505] Node 1 Normal: 112*4kB (MEH) 1756*8kB (UMEH) 522*16kB (UMEH) 515*32kB (UMEH) 183*64kB (UMH) 29*128kB (UM) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55264kB [ 3085.555124] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3085.604070] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3085.631167] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3085.681761] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3085.722318] 14741 total pagecache pages [ 3085.733553] 0 pages in swap cache 09:33:34 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103442, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x403000) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r4, 0x2008001) r5 = socket$inet6(0xa, 0x3, 0x5) close(r5) r6 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) sendfile(r5, r6, 0x0, 0x8000fffffffa) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000a, 0x9) 09:33:34 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x4, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000580)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000000300)=""/4, 0x4}, {&(0x7f0000000440)=""/45, 0x2d}, {&(0x7f0000000480)=""/198, 0xc6}], 0x4, &(0x7f00000005c0)=""/150, 0x96}, 0x7f}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)=""/122, 0x7a}], 0x1}, 0x3}, {{&(0x7f00000007c0)=@nfc_llcp, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000840)=""/36, 0x24}, {&(0x7f0000000880)}, {&(0x7f00000008c0)=""/1, 0x1}, {&(0x7f0000002900)=""/206, 0x12a}, {&(0x7f0000002a00)=""/80, 0x50}], 0x5, &(0x7f0000002b00)=""/130, 0x82}, 0x2}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, &(0x7f0000000340), 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000900)=""/4096) ptrace(0x11, r0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x42, 0x8, 0x0, 0x80, 0x0, 0x0, 0x37f06f1240f76124, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x6, 0x1c24000}, 0x0, 0x53, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x9b) io_submit(0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x803, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x10000, 0xfffffffffffffffe}, 0x1, 0x0, 0x80000000000001}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x900000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0xe8) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) [ 3085.769091] Swap cache stats: add 0, delete 0, find 0/0 [ 3085.784171] Free swap = 0kB [ 3085.788678] Total swap = 0kB [ 3085.791836] 1965979 pages RAM [ 3085.795060] 0 pages HighMem/MovableOnly [ 3085.804369] 338456 pages reserved [ 3085.824841] 0 pages cma reserved [ 3085.849768] Out of memory: Kill process 13447 (syz-executor.5) score 1005 or sacrifice child [ 3085.892239] Killed process 13447 (syz-executor.5) total-vm:74844kB, anon-rss:4248kB, file-rss:35840kB, shmem-rss:0kB [ 3087.676262] syz-executor.0 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3087.731173] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3087.782222] CPU: 0 PID: 6350 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 3087.790030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3087.799378] Call Trace: [ 3087.801974] dump_stack+0x1b2/0x283 [ 3087.805612] dump_header+0x178/0x7aa [ 3087.809324] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3087.814335] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3087.819436] ? ___ratelimit+0x2cd/0x522 [ 3087.823407] oom_kill_process.cold+0x10/0xc16 [ 3087.827904] ? lock_downgrade+0x6e0/0x6e0 [ 3087.832054] out_of_memory+0x2d5/0x10f0 [ 3087.836034] ? oom_killer_disable+0x1c0/0x1c0 [ 3087.840525] ? mutex_trylock+0x152/0x1a0 [ 3087.844603] __alloc_pages_nodemask+0x2556/0x2730 [ 3087.849461] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3087.854297] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3087.859139] ? HARDIRQ_verbose+0x10/0x10 [ 3087.863232] ? cache_grow_begin+0x3f/0x410 [ 3087.867468] cache_grow_begin+0x91/0x410 [ 3087.871553] fallback_alloc+0x205/0x2b0 [ 3087.875532] kmem_cache_alloc+0x1e5/0x3c0 [ 3087.879679] getname_flags+0xc8/0x550 [ 3087.883480] do_sys_open+0x202/0x3e0 [ 3087.887188] ? filp_open+0x60/0x60 [ 3087.890723] ? do_syscall_64+0x4c/0x640 [ 3087.894690] ? do_sys_open+0x3e0/0x3e0 [ 3087.898574] do_syscall_64+0x1d5/0x640 [ 3087.902460] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3087.907642] RIP: 0033:0x416830 [ 3087.910822] RSP: 002b:00007ffdcf73e658 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 3087.918525] RAX: ffffffffffffffda RBX: 00000000002f1ba3 RCX: 0000000000416830 [ 3087.925786] RDX: 00007ffdcf73e6ea RSI: 0000000000000002 RDI: 00007ffdcf73e6e0 [ 3087.933066] RBP: 0000000000002f4b R08: 0000000000000000 R09: 000000000000000a [ 3087.940329] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 3087.947590] R13: 00007ffdcf73e690 R14: 00000000002f1772 R15: 00007ffdcf73e6a0 [ 3087.956645] Mem-Info: [ 3087.960503] active_anon:1021399 inactive_anon:218492 isolated_anon:0 [ 3087.960503] active_file:139 inactive_file:215 isolated_file:0 [ 3087.960503] unevictable:10062 dirty:3 writeback:1 unstable:0 [ 3087.960503] slab_reclaimable:22132 slab_unreclaimable:168980 [ 3087.960503] mapped:60769 shmem:11236 pagetables:37653 bounce:0 [ 3087.960503] free:25956 free_pcp:87 free_cma:0 [ 3088.029106] Node 0 active_anon:1538880kB inactive_anon:61500kB active_file:544kB inactive_file:928kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:228668kB dirty:12kB writeback:4kB shmem:19568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 796672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3088.064899] Node 1 active_anon:2546716kB inactive_anon:812468kB active_file:12kB inactive_file:12kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:14508kB dirty:0kB writeback:0kB shmem:25376kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3088.200074] Node 0 DMA free:10352kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3088.239361] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3088.244789] Node 0 DMA32 free:40132kB min:36296kB low:45368kB high:54440kB active_anon:1538712kB inactive_anon:61500kB active_file:136kB inactive_file:648kB unevictable:16156kB writepending:16kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:17248kB pagetables:61920kB bounce:0kB free_pcp:224kB local_pcp:72kB free_cma:0kB [ 3088.280331] lowmem_reserve[]: 0 0 0 0 0 [ 3088.284338] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3088.333437] lowmem_reserve[]: 0 0 0 0 0 [ 3088.339756] Node 1 Normal free:53720kB min:53592kB low:66988kB high:80384kB active_anon:2546716kB inactive_anon:812468kB active_file:4kB inactive_file:0kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39072kB pagetables:88692kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3088.369918] lowmem_reserve[]: 0 0 0 0 0 [ 3088.373946] Node 0 DMA: 6*4kB (UE) 1*8kB (M) 3*16kB (UM) 1*32kB (E) 4*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10352kB [ 3088.389091] Node 0 DMA32: 810*4kB (UME) 300*8kB (UME) 198*16kB (UME) 136*32kB (UME) 74*64kB (UME) 26*128kB (UME) 19*256kB (UM) 13*512kB (UM) 2*1024kB (UE) 3*2048kB (M) 0*4096kB = 40936kB [ 3088.406072] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3088.416857] Node 1 Normal: 68*4kB (UMEH) 1501*8kB (UMEH) 674*16kB (UMEH) 517*32kB (UMEH) 162*64kB (UMEH) 29*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53688kB [ 3088.432406] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3088.441237] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3088.450629] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3088.459600] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3088.468210] 16703 total pagecache pages [ 3088.472188] 0 pages in swap cache [ 3088.475691] Swap cache stats: add 0, delete 0, find 0/0 [ 3088.481043] Free swap = 0kB [ 3088.484043] Total swap = 0kB [ 3088.487154] 1965979 pages RAM [ 3088.490240] 0 pages HighMem/MovableOnly [ 3088.494188] 338456 pages reserved [ 3088.497637] 0 pages cma reserved [ 3088.500983] Out of memory: Kill process 13462 (syz-executor.5) score 1005 or sacrifice child [ 3088.509621] Killed process 13462 (syz-executor.5) total-vm:74844kB, anon-rss:4248kB, file-rss:35840kB, shmem-rss:0kB [ 3088.564352] oom_reaper: reaped process 13462 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3088.746882] syz-executor.3 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3088.775430] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3088.786369] CPU: 1 PID: 8681 Comm: syz-executor.3 Not tainted 4.14.184-syzkaller #0 [ 3088.794166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3088.803510] Call Trace: [ 3088.806102] dump_stack+0x1b2/0x283 [ 3088.809735] dump_header+0x178/0x7aa [ 3088.813473] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3088.818484] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3088.823576] ? ___ratelimit+0x2cd/0x522 [ 3088.827548] oom_kill_process.cold+0x10/0xc16 [ 3088.832039] ? lock_downgrade+0x6e0/0x6e0 [ 3088.836196] out_of_memory+0x2d5/0x10f0 [ 3088.840171] ? oom_killer_disable+0x1c0/0x1c0 [ 3088.844656] ? mutex_trylock+0x152/0x1a0 [ 3088.848714] __alloc_pages_nodemask+0x2556/0x2730 [ 3088.853565] ? HARDIRQ_verbose+0x10/0x10 [ 3088.857616] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3088.862466] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3088.867471] ? kmem_cache_alloc_node+0x387/0x400 [ 3088.872215] copy_process.part.0+0x26a/0x6fa0 [ 3088.876688] ? do_raw_spin_unlock+0x164/0x250 [ 3088.881156] ? _raw_spin_unlock+0x29/0x40 [ 3088.885330] ? do_anonymous_page+0x62d/0x17d0 [ 3088.889802] ? finish_fault+0x290/0x290 [ 3088.893749] ? check_preemption_disabled+0x35/0x240 [ 3088.898741] ? __cleanup_sighand+0x40/0x40 [ 3088.902947] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 3088.907847] ? vm_insert_mixed_mkwrite+0x30/0x30 [ 3088.912572] ? HARDIRQ_verbose+0x10/0x10 [ 3088.916607] _do_fork+0x180/0xc80 [ 3088.920036] ? fork_idle+0x270/0x270 [ 3088.923732] ? up_read+0x17/0x30 [ 3088.927070] ? __do_page_fault+0x19a/0xb50 [ 3088.931281] ? do_syscall_64+0x4c/0x640 [ 3088.935227] ? sys_vfork+0x20/0x20 [ 3088.938743] do_syscall_64+0x1d5/0x640 [ 3088.942608] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3088.947772] RIP: 0033:0x45f429 [ 3088.950938] RSP: 002b:00007ffe12d76748 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3088.958618] RAX: ffffffffffffffda RBX: 00007efdd0c4d700 RCX: 000000000045f429 [ 3088.965873] RDX: 00007efdd0c4d9d0 RSI: 00007efdd0c4cdb0 RDI: 00000000003d0f00 [ 3088.973114] RBP: 00007ffe12d76970 R08: 00007efdd0c4d700 R09: 00007efdd0c4d700 [ 3088.980371] R10: 00007efdd0c4d9d0 R11: 0000000000000202 R12: 0000000000000000 [ 3088.987614] R13: 00007ffe12d767ff R14: 00007efdd0c4d9c0 R15: 000000000078bfac [ 3088.996221] Mem-Info: [ 3088.998640] active_anon:1020347 inactive_anon:218492 isolated_anon:0 [ 3088.998640] active_file:114 inactive_file:162 isolated_file:0 [ 3088.998640] unevictable:10062 dirty:14 writeback:0 unstable:0 [ 3088.998640] slab_reclaimable:22019 slab_unreclaimable:168999 [ 3088.998640] mapped:60735 shmem:11236 pagetables:37626 bounce:0 [ 3088.998640] free:27004 free_pcp:183 free_cma:0 [ 3089.033152] Node 0 active_anon:1534672kB inactive_anon:61500kB active_file:104kB inactive_file:972kB unevictable:16156kB isolated(anon):0kB isolated(file):88kB mapped:228156kB dirty:56kB writeback:0kB shmem:19568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 792576kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3089.061821] Node 1 active_anon:2546716kB inactive_anon:812468kB active_file:8kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:14508kB dirty:0kB writeback:0kB shmem:25376kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3089.089542] Node 0 DMA free:10352kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3089.116045] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3089.121086] Node 0 DMA32 free:45520kB min:36296kB low:45368kB high:54440kB active_anon:1534504kB inactive_anon:61500kB active_file:84kB inactive_file:72kB unevictable:16156kB writepending:52kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:17216kB pagetables:61812kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 3089.151798] lowmem_reserve[]: 0 0 0 0 0 [ 3089.160477] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3089.186038] lowmem_reserve[]: 0 0 0 0 0 09:33:34 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x4, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000580)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000000300)=""/4, 0x4}, {&(0x7f0000000440)=""/45, 0x2d}, {&(0x7f0000000480)=""/198, 0xc6}], 0x4, &(0x7f00000005c0)=""/150, 0x96}, 0x7f}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)=""/122, 0x7a}], 0x1}, 0x3}, {{&(0x7f00000007c0)=@nfc_llcp, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000840)=""/36, 0x24}, {&(0x7f0000000880)}, {&(0x7f00000008c0)=""/1, 0x1}, {&(0x7f0000002900)=""/206, 0x12a}, {&(0x7f0000002a00)=""/80, 0x50}], 0x5, &(0x7f0000002b00)=""/130, 0x82}, 0x2}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, &(0x7f0000000340), 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000900)=""/4096) ptrace(0x11, r0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x42, 0x8, 0x0, 0x80, 0x0, 0x0, 0x37f06f1240f76124, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x6, 0x1c24000}, 0x0, 0x53, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x9b) io_submit(0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x803, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x10000, 0xfffffffffffffffe}, 0x1, 0x0, 0x80000000000001}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x900000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0xe8) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) [ 3089.190017] Node 1 Normal free:53904kB min:53592kB low:66988kB high:80384kB active_anon:2546716kB inactive_anon:812468kB active_file:8kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39072kB pagetables:88692kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3089.219815] lowmem_reserve[]: 0 0 0 0 0 [ 3089.223811] Node 0 DMA: 6*4kB (UE) 1*8kB (M) 3*16kB (UM) 2*32kB (UE) 4*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10384kB [ 3089.239157] Node 0 DMA32: 429*4kB (UME) 318*8kB (UME) 204*16kB (UME) 142*32kB (UME) 73*64kB (UME) 27*128kB (UME) 19*256kB (UM) 13*512kB (UM) 2*1024kB (UE) 3*2048kB (M) 1*4096kB (M) = 44004kB [ 3089.256589] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3089.278419] Node 1 Normal: 68*4kB (UMEH) 1514*8kB (UMEH) 677*16kB (UMEH) 517*32kB (UMEH) 163*64kB (UMEH) 29*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53904kB [ 3089.294095] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3089.303027] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3089.311632] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3089.320530] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3089.329207] 17400 total pagecache pages [ 3089.333185] 0 pages in swap cache [ 3089.336792] Swap cache stats: add 0, delete 0, find 0/0 [ 3089.342147] Free swap = 0kB [ 3089.345146] Total swap = 0kB 09:33:38 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x4, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000580)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000000300)=""/4, 0x4}, {&(0x7f0000000440)=""/45, 0x2d}, {&(0x7f0000000480)=""/198, 0xc6}], 0x4, &(0x7f00000005c0)=""/150, 0x96}, 0x7f}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)=""/122, 0x7a}], 0x1}, 0x3}, {{&(0x7f00000007c0)=@nfc_llcp, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000840)=""/36, 0x24}, {&(0x7f0000000880)}, {&(0x7f00000008c0)=""/1, 0x1}, {&(0x7f0000002900)=""/206, 0x12a}, {&(0x7f0000002a00)=""/80, 0x50}], 0x5, &(0x7f0000002b00)=""/130, 0x82}, 0x2}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, &(0x7f0000000340), 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000900)=""/4096) ptrace(0x11, r0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x42, 0x8, 0x0, 0x80, 0x0, 0x0, 0x37f06f1240f76124, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x6, 0x1c24000}, 0x0, 0x53, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x9b) io_submit(0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x803, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x10000, 0xfffffffffffffffe}, 0x1, 0x0, 0x80000000000001}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x900000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0xe8) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) [ 3089.348238] 1965979 pages RAM [ 3089.351327] 0 pages HighMem/MovableOnly [ 3089.355272] 338456 pages reserved [ 3089.358778] 0 pages cma reserved [ 3089.362123] Out of memory: Kill process 13490 (syz-executor.5) score 1005 or sacrifice child [ 3089.370790] Killed process 13490 (syz-executor.5) total-vm:74844kB, anon-rss:4248kB, file-rss:35840kB, shmem-rss:0kB [ 3089.422921] oom_reaper: reaped process 13490 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3089.542598] syz-executor.0 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3089.570163] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3089.614473] CPU: 0 PID: 6350 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 3089.622277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3089.631622] Call Trace: [ 3089.634206] dump_stack+0x1b2/0x283 [ 3089.637834] dump_header+0x178/0x7aa [ 3089.641534] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3089.646533] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3089.651608] ? ___ratelimit+0x2cd/0x522 [ 3089.655568] oom_kill_process.cold+0x10/0xc16 [ 3089.660056] ? lock_downgrade+0x6e0/0x6e0 [ 3089.664196] out_of_memory+0x2d5/0x10f0 [ 3089.668170] ? oom_killer_disable+0x1c0/0x1c0 [ 3089.672649] ? mutex_trylock+0x152/0x1a0 [ 3089.676688] __alloc_pages_nodemask+0x2556/0x2730 [ 3089.681512] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3089.686332] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3089.691174] ? HARDIRQ_verbose+0x10/0x10 [ 3089.695238] ? cache_grow_begin+0x3f/0x410 [ 3089.699467] cache_grow_begin+0x91/0x410 [ 3089.703516] fallback_alloc+0x205/0x2b0 [ 3089.707468] kmem_cache_alloc+0x1e5/0x3c0 [ 3089.711591] getname_flags+0xc8/0x550 [ 3089.715379] do_sys_open+0x202/0x3e0 [ 3089.719101] ? filp_open+0x60/0x60 [ 3089.722632] ? do_syscall_64+0x4c/0x640 [ 3089.726602] ? do_sys_open+0x3e0/0x3e0 [ 3089.730480] do_syscall_64+0x1d5/0x640 [ 3089.734345] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3089.739523] RIP: 0033:0x416830 [ 3089.742687] RSP: 002b:00007ffdcf73e658 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 3089.750375] RAX: ffffffffffffffda RBX: 00000000002f1ba3 RCX: 0000000000416830 [ 3089.757636] RDX: 00007ffdcf73e6ea RSI: 0000000000000002 RDI: 00007ffdcf73e6e0 [ 3089.764889] RBP: 0000000000002f4b R08: 0000000000000000 R09: 000000000000000a [ 3089.772133] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 3089.779383] R13: 00007ffdcf73e690 R14: 00000000002f1772 R15: 00007ffdcf73e6a0 [ 3089.831455] Mem-Info: [ 3089.833898] active_anon:1019293 inactive_anon:218492 isolated_anon:0 [ 3089.833898] active_file:24 inactive_file:99 isolated_file:0 [ 3089.833898] unevictable:10062 dirty:0 writeback:11 unstable:0 [ 3089.833898] slab_reclaimable:21990 slab_unreclaimable:169009 [ 3089.833898] mapped:60587 shmem:11236 pagetables:37599 bounce:0 [ 3089.833898] free:28402 free_pcp:115 free_cma:0 [ 3089.889734] Node 0 active_anon:1530456kB inactive_anon:61500kB active_file:192kB inactive_file:300kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:228044kB dirty:0kB writeback:44kB shmem:19568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 788480kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3089.923746] Node 1 active_anon:2546716kB inactive_anon:812468kB active_file:8kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:14508kB dirty:0kB writeback:0kB shmem:25376kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3089.951604] Node 0 DMA free:10352kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3089.978206] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3089.983308] Node 0 DMA32 free:50440kB min:36296kB low:45368kB high:54440kB active_anon:1530288kB inactive_anon:61500kB active_file:68kB inactive_file:244kB unevictable:16156kB writepending:0kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:17184kB pagetables:61704kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 3090.013395] lowmem_reserve[]: 0 0 0 0 0 [ 3090.017564] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3090.048448] lowmem_reserve[]: 0 0 0 0 0 [ 3090.052992] Node 1 Normal free:54008kB min:53592kB low:66988kB high:80384kB active_anon:2546716kB inactive_anon:812468kB active_file:8kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39072kB pagetables:88692kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3090.115350] lowmem_reserve[]: 0 0 0 0 0 [ 3090.119442] Node 0 DMA: 6*4kB (UE) 1*8kB (M) 3*16kB (UM) 1*32kB (E) 4*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10352kB [ 3090.136511] Node 0 DMA32: 774*4kB (UME) 336*8kB (UME) 204*16kB (UME) 142*32kB (UME) 73*64kB (UME) 27*128kB (UME) 21*256kB (UM) 13*512kB (UM) 2*1024kB (UE) 5*2048kB (M) 1*4096kB (M) = 50136kB [ 3090.153894] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3090.164655] Node 1 Normal: 68*4kB (UMEH) 1529*8kB (UMEH) 677*16kB (UMEH) 517*32kB (UMEH) 163*64kB (UMEH) 29*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54024kB [ 3090.180244] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3090.189147] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3090.197890] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3090.206741] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3090.215544] 16771 total pagecache pages [ 3090.219504] 0 pages in swap cache [ 3090.222935] Swap cache stats: add 0, delete 0, find 0/0 [ 3090.228320] Free swap = 0kB [ 3090.231311] Total swap = 0kB [ 3090.234301] 1965979 pages RAM [ 3090.237479] 0 pages HighMem/MovableOnly [ 3090.241434] 338456 pages reserved [ 3090.244856] 0 pages cma reserved [ 3090.252522] Out of memory: Kill process 13491 (syz-executor.1) score 1005 or sacrifice child [ 3090.270667] Killed process 13491 (syz-executor.1) total-vm:74976kB, anon-rss:4248kB, file-rss:35840kB, shmem-rss:0kB [ 3090.446995] syz-executor.1 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3090.463519] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 3090.468858] CPU: 1 PID: 6351 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 3090.476641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3090.486099] Call Trace: [ 3090.488669] dump_stack+0x1b2/0x283 [ 3090.492273] dump_header+0x178/0x7aa [ 3090.495962] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3090.500975] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3090.506079] ? ___ratelimit+0x2cd/0x522 [ 3090.510037] oom_kill_process.cold+0x10/0xc16 [ 3090.514521] ? lock_downgrade+0x6e0/0x6e0 [ 3090.518673] out_of_memory+0x2d5/0x10f0 [ 3090.522640] ? oom_killer_disable+0x1c0/0x1c0 [ 3090.527116] ? mutex_trylock+0x152/0x1a0 [ 3090.531207] __alloc_pages_nodemask+0x2556/0x2730 [ 3090.536067] ? HARDIRQ_verbose+0x10/0x10 [ 3090.540102] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3090.545014] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3090.550003] ? kmem_cache_alloc_node+0x387/0x400 [ 3090.554732] copy_process.part.0+0x26a/0x6fa0 [ 3090.559203] ? check_preemption_disabled+0x35/0x240 [ 3090.564196] ? perf_trace_lock+0x109/0x4b0 [ 3090.568419] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 3090.573342] ? HARDIRQ_verbose+0x10/0x10 [ 3090.577387] ? __cleanup_sighand+0x40/0x40 [ 3090.581609] ? lock_downgrade+0x6e0/0x6e0 [ 3090.585736] _do_fork+0x180/0xc80 [ 3090.589166] ? put_timespec64+0xaa/0xf0 [ 3090.593116] ? fork_idle+0x270/0x270 [ 3090.596809] ? SyS_clock_gettime+0xf5/0x180 [ 3090.601107] ? SyS_clock_settime+0x1a0/0x1a0 [ 3090.605491] ? do_syscall_64+0x4c/0x640 [ 3090.609438] ? sys_vfork+0x20/0x20 [ 3090.612964] do_syscall_64+0x1d5/0x640 [ 3090.616839] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3090.622001] RIP: 0033:0x45b08a [ 3090.625173] RSP: 002b:00007ffc53b22910 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3090.632862] RAX: ffffffffffffffda RBX: 00007ffc53b22910 RCX: 000000000045b08a [ 3090.640106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3090.647475] RBP: 00007ffc53b22950 R08: 0000000000000001 R09: 00000000019ab940 [ 3090.654715] R10: 00000000019abc10 R11: 0000000000000246 R12: 0000000000000001 [ 3090.661959] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc53b229a0 [ 3090.679841] Mem-Info: [ 3090.682264] active_anon:1018236 inactive_anon:218492 isolated_anon:0 [ 3090.682264] active_file:124 inactive_file:187 isolated_file:31 [ 3090.682264] unevictable:10062 dirty:8 writeback:0 unstable:0 [ 3090.682264] slab_reclaimable:22003 slab_unreclaimable:168860 [ 3090.682264] mapped:60714 shmem:11236 pagetables:37572 bounce:0 [ 3090.682264] free:29581 free_pcp:8 free_cma:0 [ 3090.723346] Node 0 active_anon:1526228kB inactive_anon:61500kB active_file:432kB inactive_file:808kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:228448kB dirty:32kB writeback:0kB shmem:19568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 784384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3090.752190] Node 1 active_anon:2546716kB inactive_anon:812468kB active_file:8kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:14508kB dirty:0kB writeback:0kB shmem:25376kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3090.780637] Node 0 DMA free:10352kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3090.809137] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3090.814507] Node 0 DMA32 free:51124kB min:36296kB low:45368kB high:54440kB active_anon:1526060kB inactive_anon:61500kB active_file:936kB inactive_file:2412kB unevictable:16156kB writepending:32kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:17152kB pagetables:61596kB bounce:0kB free_pcp:564kB local_pcp:52kB free_cma:0kB [ 3090.845518] lowmem_reserve[]: 0 0 0 0 0 [ 3090.849953] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3090.875533] lowmem_reserve[]: 0 0 0 0 0 [ 3090.879535] Node 1 Normal free:54088kB min:53592kB low:66988kB high:80384kB active_anon:2546716kB inactive_anon:812468kB active_file:8kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39040kB pagetables:88692kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3090.909239] lowmem_reserve[]: 0 0 0 0 0 [ 3090.913251] Node 0 DMA: 6*4kB (UE) 1*8kB (M) 3*16kB (UM) 1*32kB (E) 4*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10352kB [ 3090.928476] Node 0 DMA32: 776*4kB (UME) 341*8kB (UME) 204*16kB (UME) 144*32kB (UME) 73*64kB (UME) 27*128kB (UME) 21*256kB (UM) 13*512kB (UM) 2*1024kB (UE) 7*2048kB (M) 1*4096kB (M) = 54344kB [ 3090.946267] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3090.957037] Node 1 Normal: 68*4kB (UMEH) 1529*8kB (UMEH) 677*16kB (UMEH) 520*32kB (UMEH) 163*64kB (UMEH) 29*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54120kB [ 3090.972654] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3090.981517] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3090.990203] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3090.999033] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3091.007707] 17673 total pagecache pages [ 3091.011679] 0 pages in swap cache [ 3091.015117] Swap cache stats: add 0, delete 0, find 0/0 [ 3091.020511] Free swap = 0kB [ 3091.023505] Total swap = 0kB [ 3091.026586] 1965979 pages RAM [ 3091.029681] 0 pages HighMem/MovableOnly [ 3091.033675] 338456 pages reserved [ 3091.037197] 0 pages cma reserved [ 3091.040597] Out of memory: Kill process 13518 (syz-executor.1) score 1005 or sacrifice child [ 3091.049299] Killed process 13518 (syz-executor.1) total-vm:74976kB, anon-rss:4248kB, file-rss:35840kB, shmem-rss:0kB [ 3091.090186] oom_reaper: reaped process 13518 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3091.113911] syz-executor.0 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3091.126387] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3091.131561] CPU: 0 PID: 6350 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 3091.139374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3091.148714] Call Trace: [ 3091.151342] dump_stack+0x1b2/0x283 [ 3091.154945] dump_header+0x178/0x7aa [ 3091.158668] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3091.163669] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3091.168754] ? ___ratelimit+0x2cd/0x522 [ 3091.172719] oom_kill_process.cold+0x10/0xc16 [ 3091.177200] ? lock_downgrade+0x6e0/0x6e0 [ 3091.181356] out_of_memory+0x2d5/0x10f0 [ 3091.185328] ? oom_killer_disable+0x1c0/0x1c0 [ 3091.189815] ? mutex_trylock+0x152/0x1a0 [ 3091.193872] __alloc_pages_nodemask+0x2556/0x2730 [ 3091.198739] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3091.203577] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3091.208419] ? HARDIRQ_verbose+0x10/0x10 [ 3091.212478] ? cache_grow_begin+0x3f/0x410 [ 3091.216713] cache_grow_begin+0x91/0x410 [ 3091.220759] fallback_alloc+0x205/0x2b0 [ 3091.224712] kmem_cache_alloc+0x1e5/0x3c0 [ 3091.228837] getname_flags+0xc8/0x550 [ 3091.232615] do_sys_open+0x202/0x3e0 [ 3091.236311] ? filp_open+0x60/0x60 [ 3091.239836] ? do_syscall_64+0x4c/0x640 [ 3091.243782] ? do_sys_open+0x3e0/0x3e0 [ 3091.247647] do_syscall_64+0x1d5/0x640 [ 3091.251512] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3091.256681] RIP: 0033:0x416830 [ 3091.259857] RSP: 002b:00007ffdcf73e658 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 3091.267538] RAX: ffffffffffffffda RBX: 00000000002f1ba3 RCX: 0000000000416830 [ 3091.274780] RDX: 00007ffdcf73e6ea RSI: 0000000000000002 RDI: 00007ffdcf73e6e0 [ 3091.282078] RBP: 0000000000002f4b R08: 0000000000000000 R09: 000000000000000a [ 3091.289323] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 3091.296571] R13: 00007ffdcf73e690 R14: 00000000002f1772 R15: 00007ffdcf73e6a0 [ 3091.316544] Mem-Info: [ 3091.318968] active_anon:1017184 inactive_anon:218492 isolated_anon:0 [ 3091.318968] active_file:19 inactive_file:10 isolated_file:0 [ 3091.318968] unevictable:10062 dirty:5 writeback:8 unstable:0 [ 3091.318968] slab_reclaimable:22014 slab_unreclaimable:168883 [ 3091.318968] mapped:60544 shmem:11236 pagetables:37535 bounce:0 [ 3091.318968] free:30847 free_pcp:61 free_cma:0 [ 3091.364977] Node 0 active_anon:1522020kB inactive_anon:61500kB active_file:100kB inactive_file:4kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:227632kB dirty:20kB writeback:32kB shmem:19568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 784384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3091.393636] Node 1 active_anon:2546716kB inactive_anon:812468kB active_file:8kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:14508kB dirty:0kB writeback:0kB shmem:25376kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3091.421531] Node 0 DMA free:10384kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3091.456169] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3091.478710] Node 0 DMA32 free:58848kB min:36296kB low:45368kB high:54440kB active_anon:1521852kB inactive_anon:61500kB active_file:56kB inactive_file:40kB unevictable:16156kB writepending:52kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:17120kB pagetables:61448kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3091.521071] lowmem_reserve[]: 0 0 0 0 0 [ 3091.525088] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3091.550912] lowmem_reserve[]: 0 0 0 0 0 [ 3091.554914] Node 1 Normal free:54120kB min:53592kB low:66988kB high:80384kB active_anon:2546716kB inactive_anon:812468kB active_file:8kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39040kB pagetables:88692kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3091.604735] lowmem_reserve[]: 0 0 0 0 0 [ 3091.609404] Node 0 DMA: 6*4kB (UE) 1*8kB (M) 3*16kB (UM) 2*32kB (UE) 4*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10384kB [ 3091.630712] Node 0 DMA32: 896*4kB (UME) 352*8kB (UME) 204*16kB (UME) 146*32kB (UME) 73*64kB (UME) 27*128kB (UME) 21*256kB (UM) 13*512kB (UM) 2*1024kB (UE) 9*2048kB (M) 1*4096kB (M) = 59072kB [ 3091.682414] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3091.693955] Node 1 Normal: 68*4kB (UMEH) 1529*8kB (UMEH) 677*16kB (UMEH) 520*32kB (UMEH) 163*64kB (UMEH) 29*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54120kB [ 3091.710568] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3091.720091] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3091.729307] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3091.749163] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3091.758008] 16770 total pagecache pages [ 3091.761978] 0 pages in swap cache [ 3091.765548] Swap cache stats: add 0, delete 0, find 0/0 [ 3091.770896] Free swap = 0kB [ 3091.773903] Total swap = 0kB [ 3091.776961] 1965979 pages RAM [ 3091.780055] 0 pages HighMem/MovableOnly [ 3091.784132] 338456 pages reserved [ 3091.787830] 0 pages cma reserved [ 3091.791187] Out of memory: Kill process 23612 (syz-executor.5) score 1005 or sacrifice child [ 3091.800365] Killed process 23612 (syz-executor.5) total-vm:75372kB, anon-rss:4972kB, file-rss:34816kB, shmem-rss:0kB 09:33:40 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000040c0), 0x14ec) read$FUSE(r0, &(0x7f0000002000), 0x1000) getxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='security.apparmor\x00', &(0x7f0000000400)=""/188, 0xbc) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r0, &(0x7f0000000380)={0x78, 0x0, 0x2}, 0x78) 09:33:51 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103442, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x403000) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r4, 0x2008001) r5 = socket$inet6(0xa, 0x3, 0x5) close(r5) r6 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) sendfile(r5, r6, 0x0, 0x8000fffffffa) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000a, 0x9) 09:33:55 executing program 2: socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x545, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) syz_open_procfs(r0, &(0x7f0000000080)='net/psched\x00') ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000580)={{0x6, 0x3, 0x923, 0x5c, '\x00', 0x8}, 0x1, 0x423, 0x1000, 0xffffffffffffffff, 0x2, 0x2, 'syz0\x00', &(0x7f00000000c0)=['\x00', 'aead\x00'], 0x6, [], [0x4, 0x4, 0x3, 0xff]}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000200)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540), 0x0) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)) r3 = accept(r1, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) r4 = open(0x0, 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) 09:33:58 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000040c0), 0x14ec) read$FUSE(r0, &(0x7f0000002000), 0x1000) getxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='security.apparmor\x00', &(0x7f0000000400)=""/188, 0xbc) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r0, &(0x7f0000000380)={0x78, 0x0, 0x2}, 0x78) [ 3110.543631] syz-executor.2 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3110.556671] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3110.561784] CPU: 1 PID: 8705 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 3110.569555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3110.578928] Call Trace: [ 3110.581498] dump_stack+0x1b2/0x283 [ 3110.585117] dump_header+0x178/0x7aa [ 3110.588821] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3110.593830] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3110.598916] ? ___ratelimit+0x2cd/0x522 [ 3110.602869] oom_kill_process.cold+0x10/0xc16 [ 3110.607354] ? lock_acquire+0x170/0x3f0 [ 3110.611333] ? lock_downgrade+0x6e0/0x6e0 [ 3110.615488] out_of_memory+0x2d5/0x10f0 [ 3110.619512] ? oom_killer_disable+0x1c0/0x1c0 [ 3110.623987] ? mutex_trylock+0x152/0x1a0 [ 3110.628037] __alloc_pages_nodemask+0x2556/0x2730 [ 3110.632877] ? HARDIRQ_verbose+0x10/0x10 [ 3110.636918] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3110.641750] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3110.646752] ? kmem_cache_alloc_node+0x387/0x400 [ 3110.651496] copy_process.part.0+0x26a/0x6fa0 [ 3110.655978] ? do_raw_spin_unlock+0x164/0x250 [ 3110.660467] ? _raw_spin_unlock+0x29/0x40 [ 3110.664603] ? do_anonymous_page+0x62d/0x17d0 [ 3110.669093] ? finish_fault+0x290/0x290 [ 3110.673058] ? check_preemption_disabled+0x35/0x240 [ 3110.678073] ? __cleanup_sighand+0x40/0x40 [ 3110.682294] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 3110.687215] ? vm_insert_mixed_mkwrite+0x30/0x30 [ 3110.692078] ? HARDIRQ_verbose+0x10/0x10 [ 3110.696122] _do_fork+0x180/0xc80 [ 3110.699572] ? fork_idle+0x270/0x270 [ 3110.703272] ? up_read+0x17/0x30 [ 3110.706625] ? __do_page_fault+0x19a/0xb50 [ 3110.710850] ? do_syscall_64+0x4c/0x640 [ 3110.714801] ? sys_vfork+0x20/0x20 [ 3110.718318] do_syscall_64+0x1d5/0x640 [ 3110.722191] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3110.727367] RIP: 0033:0x45f429 [ 3110.730542] RSP: 002b:00007ffc677c9b18 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3110.738230] RAX: ffffffffffffffda RBX: 00007f2cfc9d9700 RCX: 000000000045f429 [ 3110.745485] RDX: 00007f2cfc9d99d0 RSI: 00007f2cfc9d8db0 RDI: 00000000003d0f00 [ 3110.752741] RBP: 00007ffc677c9d40 R08: 00007f2cfc9d9700 R09: 00007f2cfc9d9700 [ 3110.759989] R10: 00007f2cfc9d99d0 R11: 0000000000000202 R12: 0000000000000000 [ 3110.767242] R13: 00007ffc677c9bcf R14: 00007f2cfc9d99c0 R15: 000000000078bf0c [ 3110.779000] Mem-Info: [ 3110.781426] active_anon:1024248 inactive_anon:216904 isolated_anon:0 [ 3110.781426] active_file:44 inactive_file:135 isolated_file:17 [ 3110.781426] unevictable:10062 dirty:0 writeback:0 unstable:0 [ 3110.781426] slab_reclaimable:21773 slab_unreclaimable:168957 [ 3110.781426] mapped:59095 shmem:9648 pagetables:37604 bounce:0 [ 3110.781426] free:25217 free_pcp:107 free_cma:0 [ 3110.815685] Node 0 active_anon:1550072kB inactive_anon:59904kB active_file:152kB inactive_file:408kB unevictable:16156kB isolated(anon):0kB isolated(file):68kB mapped:226592kB dirty:4kB writeback:0kB shmem:17972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 802816kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3110.844248] Node 1 active_anon:2546920kB inactive_anon:807712kB active_file:24kB inactive_file:132kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:9788kB dirty:0kB writeback:0kB shmem:20620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3110.872238] Node 0 DMA free:10452kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3110.902171] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3110.914306] Node 0 DMA32 free:36260kB min:36296kB low:45368kB high:54440kB active_anon:1549904kB inactive_anon:59904kB active_file:388kB inactive_file:344kB unevictable:16156kB writepending:4kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:17152kB pagetables:61548kB bounce:0kB free_pcp:420kB local_pcp:120kB free_cma:0kB [ 3110.945308] lowmem_reserve[]: 0 0 0 0 0 [ 3110.949832] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3110.975815] lowmem_reserve[]: 0 0 0 0 0 [ 3110.980281] Node 1 Normal free:53644kB min:53592kB low:66988kB high:80384kB active_anon:2546920kB inactive_anon:807756kB active_file:36kB inactive_file:48kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39104kB pagetables:88868kB bounce:0kB free_pcp:648kB local_pcp:4kB free_cma:0kB [ 3111.010979] lowmem_reserve[]: 0 0 0 0 0 [ 3111.031800] Node 0 DMA: 11*4kB (UME) 11*8kB (U) 5*16kB (M) 6*32kB (UME) 3*64kB (UE) 3*128kB (ME) 3*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10452kB [ 3111.052397] Node 0 DMA32: 446*4kB (UME) 358*8kB (UME) 161*16kB (UME) 177*32kB (UME) 88*64kB (UME) 29*128kB (UME) 19*256kB (UM) 12*512kB (UM) 3*1024kB (UE) 0*2048kB 0*4096kB = 36312kB [ 3111.069153] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3111.080078] Node 1 Normal: 63*4kB (UMEH) 862*8kB (UMEH) 752*16kB (UMEH) 525*32kB (UMEH) 190*64kB (UMEH) 41*128kB (UME) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54156kB [ 3111.096317] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3111.105628] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3111.114359] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3111.123441] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3111.132242] 15477 total pagecache pages [ 3111.136471] 0 pages in swap cache [ 3111.140059] Swap cache stats: add 0, delete 0, find 0/0 [ 3111.145590] Free swap = 0kB [ 3111.148733] Total swap = 0kB [ 3111.151881] 1965979 pages RAM [ 3111.155199] 0 pages HighMem/MovableOnly [ 3111.159309] 338456 pages reserved [ 3111.162854] 0 pages cma reserved [ 3111.169080] Out of memory: Kill process 16084 (syz-executor.0) score 1005 or sacrifice child [ 3111.179368] Killed process 16084 (syz-executor.0) total-vm:74976kB, anon-rss:2204kB, file-rss:35840kB, shmem-rss:0kB [ 3111.230536] oom_reaper: reaped process 16084 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3111.405515] syz-executor.2 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3111.461828] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3111.496210] CPU: 1 PID: 8705 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 3111.504025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3111.513379] Call Trace: [ 3111.515997] dump_stack+0x1b2/0x283 [ 3111.519627] dump_header+0x178/0x7aa [ 3111.523340] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3111.528359] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3111.533458] ? ___ratelimit+0x2cd/0x522 [ 3111.537432] oom_kill_process.cold+0x10/0xc16 [ 3111.541927] ? lock_downgrade+0x6e0/0x6e0 [ 3111.546075] out_of_memory+0x2d5/0x10f0 [ 3111.550067] ? oom_killer_disable+0x1c0/0x1c0 [ 3111.554563] ? mutex_trylock+0x152/0x1a0 [ 3111.558624] __alloc_pages_nodemask+0x2556/0x2730 [ 3111.563480] ? HARDIRQ_verbose+0x10/0x10 [ 3111.567538] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3111.572388] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3111.577396] ? kmem_cache_alloc_node+0x387/0x400 [ 3111.582152] copy_process.part.0+0x26a/0x6fa0 [ 3111.586650] ? do_raw_spin_unlock+0x164/0x250 [ 3111.591143] ? _raw_spin_unlock+0x29/0x40 [ 3111.595286] ? do_anonymous_page+0x62d/0x17d0 [ 3111.599782] ? finish_fault+0x290/0x290 [ 3111.603751] ? check_preemption_disabled+0x35/0x240 [ 3111.608775] ? __cleanup_sighand+0x40/0x40 [ 3111.613003] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 3111.617927] ? vm_insert_mixed_mkwrite+0x30/0x30 [ 3111.622764] ? HARDIRQ_verbose+0x10/0x10 [ 3111.626824] _do_fork+0x180/0xc80 [ 3111.630277] ? fork_idle+0x270/0x270 [ 3111.633990] ? up_read+0x17/0x30 [ 3111.637353] ? __do_page_fault+0x19a/0xb50 [ 3111.641587] ? do_syscall_64+0x4c/0x640 [ 3111.645558] ? sys_vfork+0x20/0x20 [ 3111.649098] do_syscall_64+0x1d5/0x640 [ 3111.652990] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3111.658175] RIP: 0033:0x45f429 [ 3111.661356] RSP: 002b:00007ffc677c9b18 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3111.669060] RAX: ffffffffffffffda RBX: 00007f2cfc9d9700 RCX: 000000000045f429 [ 3111.676336] RDX: 00007f2cfc9d99d0 RSI: 00007f2cfc9d8db0 RDI: 00000000003d0f00 [ 3111.683605] RBP: 00007ffc677c9d40 R08: 00007f2cfc9d9700 R09: 00007f2cfc9d9700 [ 3111.690872] R10: 00007f2cfc9d99d0 R11: 0000000000000202 R12: 0000000000000000 [ 3111.698223] R13: 00007ffc677c9bcf R14: 00007f2cfc9d99c0 R15: 000000000078bf0c [ 3111.942993] Mem-Info: [ 3111.952061] active_anon:1023701 inactive_anon:218135 isolated_anon:0 [ 3111.952061] active_file:20 inactive_file:0 isolated_file:0 [ 3111.952061] unevictable:10062 dirty:0 writeback:0 unstable:0 [ 3111.952061] slab_reclaimable:21773 slab_unreclaimable:168884 [ 3111.952061] mapped:60208 shmem:10879 pagetables:37580 bounce:0 [ 3111.952061] free:25034 free_pcp:0 free_cma:0 [ 3111.997850] Node 0 active_anon:1547884kB inactive_anon:64132kB active_file:28kB inactive_file:0kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:230300kB dirty:0kB writeback:0kB shmem:22200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 800768kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3112.052125] Node 1 active_anon:2546920kB inactive_anon:808408kB active_file:52kB inactive_file:0kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:10532kB dirty:0kB writeback:0kB shmem:21316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3112.124317] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:244kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3112.239686] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3112.244761] Node 0 DMA32 free:36132kB min:36296kB low:45368kB high:54440kB active_anon:1547716kB inactive_anon:63888kB active_file:32kB inactive_file:36kB unevictable:16156kB writepending:0kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:17120kB pagetables:61448kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 3112.308646] lowmem_reserve[]: 0 0 0 0 0 [ 3112.312675] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3112.345150] lowmem_reserve[]: 0 0 0 0 0 [ 3112.349184] Node 1 Normal free:53468kB min:53592kB low:66988kB high:80384kB active_anon:2546920kB inactive_anon:808008kB active_file:36kB inactive_file:12kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39104kB pagetables:88872kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3112.412156] lowmem_reserve[]: 0 0 0 0 0 [ 3112.416300] Node 0 DMA: 7*4kB (UME) 15*8kB (U) 6*16kB (U) 4*32kB (UME) 3*64kB (UE) 3*128kB (ME) 3*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10420kB [ 3112.474126] Node 0 DMA32: 436*4kB (UME) 376*8kB (UME) 127*16kB (UE) 122*32kB (UME) 88*64kB (UME) 29*128kB (UME) 19*256kB (UM) 12*512kB (UM) 3*1024kB (UE) 1*2048kB (M) 0*4096kB = 36160kB [ 3112.512413] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3112.523266] Node 1 Normal: 15*4kB (UMEH) 827*8kB (UEH) 752*16kB (UMEH) 528*32kB (UMEH) 187*64kB (UMEH) 41*128kB (UME) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53588kB [ 3112.566293] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3112.584018] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3112.619047] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3112.648374] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3112.669312] 16359 total pagecache pages [ 3112.673386] 0 pages in swap cache [ 3112.691024] Swap cache stats: add 0, delete 0, find 0/0 [ 3112.724583] Free swap = 0kB [ 3112.730390] Total swap = 0kB [ 3112.733492] 1965979 pages RAM [ 3112.762609] 0 pages HighMem/MovableOnly [ 3112.780162] 338456 pages reserved [ 3112.783865] 0 pages cma reserved [ 3112.812504] Out of memory: Kill process 23610 (syz-executor.4) score 1005 or sacrifice child [ 3112.838777] Killed process 23610 (syz-executor.4) total-vm:75372kB, anon-rss:4296kB, file-rss:34816kB, shmem-rss:0kB 09:34:01 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103442, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x403000) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r4, 0x2008001) r5 = socket$inet6(0xa, 0x3, 0x5) close(r5) r6 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) sendfile(r5, r6, 0x0, 0x8000fffffffa) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000a, 0x9) 09:34:01 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000040c0), 0x14ec) read$FUSE(r0, &(0x7f0000002000), 0x1000) getxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='security.apparmor\x00', &(0x7f0000000400)=""/188, 0xbc) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r0, &(0x7f0000000380)={0x78, 0x0, 0x2}, 0x78) 09:34:02 executing program 2: socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x545, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) syz_open_procfs(r0, &(0x7f0000000080)='net/psched\x00') ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000580)={{0x6, 0x3, 0x923, 0x5c, '\x00', 0x8}, 0x1, 0x423, 0x1000, 0xffffffffffffffff, 0x2, 0x2, 'syz0\x00', &(0x7f00000000c0)=['\x00', 'aead\x00'], 0x6, [], [0x4, 0x4, 0x3, 0xff]}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000200)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540), 0x0) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)) r3 = accept(r1, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) r4 = open(0x0, 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) 09:34:02 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000040c0), 0x14ec) read$FUSE(r0, &(0x7f0000002000), 0x1000) getxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='security.apparmor\x00', &(0x7f0000000400)=""/188, 0xbc) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r0, &(0x7f0000000380)={0x78, 0x0, 0x2}, 0x78) [ 3114.985631] syz-executor.3 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3115.063812] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3115.083636] CPU: 0 PID: 8714 Comm: syz-executor.3 Not tainted 4.14.184-syzkaller #0 [ 3115.091533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3115.100890] Call Trace: [ 3115.103479] dump_stack+0x1b2/0x283 [ 3115.107104] dump_header+0x178/0x7aa [ 3115.110813] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3115.115822] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3115.120919] ? ___ratelimit+0x2cd/0x522 [ 3115.124893] oom_kill_process.cold+0x10/0xc16 [ 3115.129384] ? lock_downgrade+0x6e0/0x6e0 [ 3115.133529] out_of_memory+0x2d5/0x10f0 [ 3115.137503] ? oom_killer_disable+0x1c0/0x1c0 [ 3115.141988] ? mutex_trylock+0x152/0x1a0 [ 3115.146048] __alloc_pages_nodemask+0x2556/0x2730 [ 3115.150898] ? HARDIRQ_verbose+0x10/0x10 [ 3115.154950] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3115.159801] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3115.164806] ? kmem_cache_alloc_node+0x387/0x400 [ 3115.169560] copy_process.part.0+0x26a/0x6fa0 [ 3115.174051] ? do_raw_spin_unlock+0x164/0x250 [ 3115.178542] ? _raw_spin_unlock+0x29/0x40 [ 3115.182684] ? do_anonymous_page+0x62d/0x17d0 [ 3115.187179] ? finish_fault+0x290/0x290 [ 3115.191148] ? check_preemption_disabled+0x35/0x240 [ 3115.196168] ? __cleanup_sighand+0x40/0x40 [ 3115.200395] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 3115.205323] ? vm_insert_mixed_mkwrite+0x30/0x30 [ 3115.210070] ? HARDIRQ_verbose+0x10/0x10 [ 3115.214129] _do_fork+0x180/0xc80 [ 3115.217581] ? fork_idle+0x270/0x270 [ 3115.221298] ? up_read+0x17/0x30 [ 3115.224664] ? __do_page_fault+0x19a/0xb50 [ 3115.228894] ? do_syscall_64+0x4c/0x640 [ 3115.232861] ? sys_vfork+0x20/0x20 [ 3115.236422] do_syscall_64+0x1d5/0x640 [ 3115.240318] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3115.245498] RIP: 0033:0x45f429 [ 3115.248676] RSP: 002b:00007ffe12d76748 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3115.256378] RAX: ffffffffffffffda RBX: 00007efdd0c4d700 RCX: 000000000045f429 [ 3115.263638] RDX: 00007efdd0c4d9d0 RSI: 00007efdd0c4cdb0 RDI: 00000000003d0f00 [ 3115.270901] RBP: 00007ffe12d76970 R08: 00007efdd0c4d700 R09: 00007efdd0c4d700 [ 3115.278160] R10: 00007efdd0c4d9d0 R11: 0000000000000202 R12: 0000000000000000 [ 3115.285421] R13: 00007ffe12d767ff R14: 00007efdd0c4d9c0 R15: 000000000078bfac [ 3115.295652] Mem-Info: [ 3115.298836] active_anon:1022655 inactive_anon:218492 isolated_anon:0 [ 3115.298836] active_file:91 inactive_file:189 isolated_file:0 [ 3115.298836] unevictable:10062 dirty:18 writeback:0 unstable:0 [ 3115.298836] slab_reclaimable:21765 slab_unreclaimable:168985 [ 3115.298836] mapped:60629 shmem:11236 pagetables:37556 bounce:0 [ 3115.298836] free:25192 free_pcp:173 free_cma:0 [ 3115.370274] Node 0 active_anon:1543648kB inactive_anon:67160kB active_file:696kB inactive_file:1064kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:234412kB dirty:72kB writeback:0kB shmem:25228kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 800768kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3115.399806] Node 1 active_anon:2546972kB inactive_anon:806808kB active_file:60kB inactive_file:44kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:8884kB dirty:0kB writeback:0kB shmem:19716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3115.428358] Node 0 DMA free:10460kB min:220kB low:272kB high:324kB active_anon:172kB inactive_anon:148kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3115.455929] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3115.461262] Node 0 DMA32 free:36344kB min:36296kB low:45368kB high:54440kB active_anon:1543484kB inactive_anon:67012kB active_file:720kB inactive_file:820kB unevictable:16156kB writepending:80kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:17088kB pagetables:61356kB bounce:0kB free_pcp:292kB local_pcp:120kB free_cma:0kB [ 3115.498409] lowmem_reserve[]: 0 0 0 0 0 [ 3115.520004] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3115.551059] lowmem_reserve[]: 0 0 0 0 0 [ 3115.555117] Node 1 Normal free:53552kB min:53592kB low:66988kB high:80384kB active_anon:2546972kB inactive_anon:806808kB active_file:60kB inactive_file:428kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39104kB pagetables:88864kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3115.590467] lowmem_reserve[]: 0 0 0 0 0 [ 3115.595234] Node 0 DMA: 4*4kB (UE) 2*8kB (U) 2*16kB (UM) 6*32kB (UME) 6*64kB (UE) 1*128kB (E) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10496kB [ 3115.623485] Node 0 DMA32: 472*4kB (UME) 494*8kB (UME) 162*16kB (UME) 75*32kB (UME) 87*64kB (UME) 30*128kB (UME) 19*256kB (UM) 12*512kB (UM) 3*1024kB (UE) 1*2048kB (M) 0*4096kB = 36368kB [ 3115.645373] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3115.677726] Node 1 Normal: 88*4kB (UMEH) 829*8kB (UMEH) 686*16kB (UMEH) 546*32kB (UMEH) 197*64kB (UMEH) 41*128kB (UME) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54056kB [ 3115.719791] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3115.749620] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3115.793690] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3115.803138] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3115.819723] 16956 total pagecache pages [ 3115.823983] 0 pages in swap cache [ 3115.828140] Swap cache stats: add 0, delete 0, find 0/0 [ 3115.833573] Free swap = 0kB [ 3115.836898] Total swap = 0kB [ 3115.840053] 1965979 pages RAM [ 3115.843752] 0 pages HighMem/MovableOnly [ 3115.848729] 338456 pages reserved [ 3115.852805] 0 pages cma reserved [ 3115.856906] Out of memory: Kill process 23481 (syz-executor.2) score 1005 or sacrifice child [ 3115.866282] Killed process 23481 (syz-executor.2) total-vm:75240kB, anon-rss:4280kB, file-rss:34816kB, shmem-rss:0kB [ 3116.081295] syz-executor.3 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3116.148875] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3116.169220] CPU: 1 PID: 8714 Comm: syz-executor.3 Not tainted 4.14.184-syzkaller #0 [ 3116.177030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3116.186376] Call Trace: [ 3116.188970] dump_stack+0x1b2/0x283 [ 3116.192594] dump_header+0x178/0x7aa [ 3116.197166] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3116.202173] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3116.207271] ? ___ratelimit+0x2cd/0x522 [ 3116.211286] oom_kill_process.cold+0x10/0xc16 [ 3116.215760] ? lock_downgrade+0x6e0/0x6e0 [ 3116.219884] out_of_memory+0x2d5/0x10f0 [ 3116.223837] ? oom_killer_disable+0x1c0/0x1c0 [ 3116.228306] ? mutex_trylock+0x152/0x1a0 [ 3116.232343] __alloc_pages_nodemask+0x2556/0x2730 [ 3116.237171] ? HARDIRQ_verbose+0x10/0x10 [ 3116.241207] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3116.246033] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3116.251024] ? kmem_cache_alloc_node+0x387/0x400 [ 3116.255759] copy_process.part.0+0x26a/0x6fa0 [ 3116.260234] ? do_raw_spin_unlock+0x164/0x250 [ 3116.264702] ? _raw_spin_unlock+0x29/0x40 [ 3116.268825] ? do_anonymous_page+0x62d/0x17d0 [ 3116.273296] ? finish_fault+0x290/0x290 [ 3116.277244] ? check_preemption_disabled+0x35/0x240 [ 3116.282276] ? __cleanup_sighand+0x40/0x40 [ 3116.286487] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 3116.291389] ? vm_insert_mixed_mkwrite+0x30/0x30 [ 3116.296118] ? HARDIRQ_verbose+0x10/0x10 [ 3116.300189] _do_fork+0x180/0xc80 [ 3116.303634] ? fork_idle+0x270/0x270 [ 3116.307365] ? up_read+0x17/0x30 [ 3116.310713] ? __do_page_fault+0x19a/0xb50 [ 3116.314923] ? do_syscall_64+0x4c/0x640 [ 3116.318891] ? sys_vfork+0x20/0x20 [ 3116.322406] do_syscall_64+0x1d5/0x640 [ 3116.326273] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3116.331449] RIP: 0033:0x45f429 [ 3116.334644] RSP: 002b:00007ffe12d76748 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3116.342328] RAX: ffffffffffffffda RBX: 00007efdd0c4d700 RCX: 000000000045f429 [ 3116.349588] RDX: 00007efdd0c4d9d0 RSI: 00007efdd0c4cdb0 RDI: 00000000003d0f00 [ 3116.356846] RBP: 00007ffe12d76970 R08: 00007efdd0c4d700 R09: 00007efdd0c4d700 [ 3116.364097] R10: 00007efdd0c4d9d0 R11: 0000000000000202 R12: 0000000000000000 [ 3116.371343] R13: 00007ffe12d767ff R14: 00007efdd0c4d9c0 R15: 000000000078bfac [ 3116.384249] Mem-Info: [ 3116.386903] active_anon:1021600 inactive_anon:218492 isolated_anon:0 [ 3116.386903] active_file:26 inactive_file:30 isolated_file:0 [ 3116.386903] unevictable:10062 dirty:15 writeback:0 unstable:0 [ 3116.386903] slab_reclaimable:21765 slab_unreclaimable:168835 [ 3116.386903] mapped:60537 shmem:11236 pagetables:37530 bounce:0 [ 3116.386903] free:26723 free_pcp:30 free_cma:0 [ 3116.421042] Node 0 active_anon:1539428kB inactive_anon:67160kB active_file:92kB inactive_file:100kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:233300kB dirty:56kB writeback:0kB shmem:25228kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 796672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3116.449644] Node 1 active_anon:2546972kB inactive_anon:806808kB active_file:12kB inactive_file:20kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:8848kB dirty:4kB writeback:0kB shmem:19716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3116.477761] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:172kB inactive_anon:148kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3116.514835] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3116.520930] Node 0 DMA32 free:41448kB min:36296kB low:45368kB high:54440kB active_anon:1539256kB inactive_anon:67012kB active_file:160kB inactive_file:416kB unevictable:16156kB writepending:16kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:17056kB pagetables:61252kB bounce:0kB free_pcp:572kB local_pcp:572kB free_cma:0kB [ 3116.580540] lowmem_reserve[]: 0 0 0 0 0 [ 3116.584576] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3116.610222] lowmem_reserve[]: 0 0 0 0 0 [ 3116.614223] Node 1 Normal free:54148kB min:53592kB low:66988kB high:80384kB active_anon:2546972kB inactive_anon:806808kB active_file:12kB inactive_file:160kB unevictable:24092kB writepending:4kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39104kB pagetables:88864kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 3116.644338] lowmem_reserve[]: 0 0 0 0 0 [ 3116.648440] Node 0 DMA: 11*4kB (UME) 0*8kB 4*16kB (UM) 4*32kB (UME) 5*64kB (UE) 1*128kB (E) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10412kB [ 3116.663388] Node 0 DMA32: 653*4kB (UME) 543*8kB (UME) 168*16kB (UME) 95*32kB (UME) 87*64kB (UME) 30*128kB (UME) 19*256kB (UM) 12*512kB (UM) 3*1024kB (UE) 3*2048kB (M) 0*4096kB = 42316kB [ 3116.680149] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3116.690912] Node 1 Normal: 118*4kB (UMEH) 829*8kB (UMEH) 689*16kB (UMEH) 546*32kB (UMEH) 197*64kB (UMEH) 41*128kB (UME) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54224kB [ 3116.708747] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3116.718228] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3116.728314] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3116.738570] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3116.763957] 17086 total pagecache pages [ 3116.775744] 0 pages in swap cache [ 3116.780560] Swap cache stats: add 0, delete 0, find 0/0 [ 3116.787515] Free swap = 0kB [ 3116.790858] Total swap = 0kB [ 3116.794078] 1965979 pages RAM [ 3116.805302] 0 pages HighMem/MovableOnly [ 3116.824891] 338456 pages reserved [ 3116.828420] 0 pages cma reserved [ 3116.831894] Out of memory: Kill process 23483 (syz-executor.0) score 1005 or sacrifice child [ 3116.840605] Killed process 23483 (syz-executor.0) total-vm:75240kB, anon-rss:4276kB, file-rss:34816kB, shmem-rss:0kB [ 3116.882904] oom_reaper: reaped process 23483 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3116.913913] syz-executor.3 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3116.932027] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3116.952354] CPU: 1 PID: 8714 Comm: syz-executor.3 Not tainted 4.14.184-syzkaller #0 [ 3116.960279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3116.969636] Call Trace: [ 3116.972233] dump_stack+0x1b2/0x283 [ 3116.975864] dump_header+0x178/0x7aa [ 3116.979568] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3116.984579] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3116.989684] ? ___ratelimit+0x2cd/0x522 [ 3116.993657] oom_kill_process.cold+0x10/0xc16 [ 3116.998194] ? lock_downgrade+0x6e0/0x6e0 [ 3117.002342] out_of_memory+0x2d5/0x10f0 [ 3117.006317] ? oom_killer_disable+0x1c0/0x1c0 [ 3117.010826] ? mutex_trylock+0x152/0x1a0 [ 3117.014877] __alloc_pages_nodemask+0x2556/0x2730 [ 3117.019708] ? HARDIRQ_verbose+0x10/0x10 [ 3117.023747] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3117.028574] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3117.033605] ? kmem_cache_alloc_node+0x387/0x400 [ 3117.038358] copy_process.part.0+0x26a/0x6fa0 [ 3117.042830] ? do_raw_spin_unlock+0x164/0x250 [ 3117.047303] ? _raw_spin_unlock+0x29/0x40 [ 3117.051427] ? do_anonymous_page+0x62d/0x17d0 [ 3117.055915] ? finish_fault+0x290/0x290 [ 3117.059864] ? check_preemption_disabled+0x35/0x240 [ 3117.064859] ? __cleanup_sighand+0x40/0x40 [ 3117.069088] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 3117.073992] ? vm_insert_mixed_mkwrite+0x30/0x30 [ 3117.078719] ? HARDIRQ_verbose+0x10/0x10 [ 3117.082758] _do_fork+0x180/0xc80 [ 3117.086189] ? fork_idle+0x270/0x270 [ 3117.089893] ? up_read+0x17/0x30 [ 3117.093235] ? __do_page_fault+0x19a/0xb50 [ 3117.097468] ? do_syscall_64+0x4c/0x640 [ 3117.101416] ? sys_vfork+0x20/0x20 [ 3117.104932] do_syscall_64+0x1d5/0x640 [ 3117.108811] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3117.113974] RIP: 0033:0x45f429 [ 3117.117141] RSP: 002b:00007ffe12d76748 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3117.124824] RAX: ffffffffffffffda RBX: 00007efdd0c4d700 RCX: 000000000045f429 [ 3117.132069] RDX: 00007efdd0c4d9d0 RSI: 00007efdd0c4cdb0 RDI: 00000000003d0f00 [ 3117.139319] RBP: 00007ffe12d76970 R08: 00007efdd0c4d700 R09: 00007efdd0c4d700 [ 3117.146578] R10: 00007efdd0c4d9d0 R11: 0000000000000202 R12: 0000000000000000 [ 3117.153824] R13: 00007ffe12d767ff R14: 00007efdd0c4d9c0 R15: 000000000078bfac [ 3117.165686] Mem-Info: [ 3117.168112] active_anon:1020542 inactive_anon:218492 isolated_anon:0 [ 3117.168112] active_file:50 inactive_file:90 isolated_file:12 [ 3117.168112] unevictable:10062 dirty:8 writeback:0 unstable:0 [ 3117.168112] slab_reclaimable:21765 slab_unreclaimable:168855 [ 3117.168112] mapped:60587 shmem:11236 pagetables:37503 bounce:0 [ 3117.168112] free:27841 free_pcp:0 free_cma:0 [ 3117.202292] Node 0 active_anon:1535196kB inactive_anon:67160kB active_file:292kB inactive_file:1052kB unevictable:16156kB isolated(anon):0kB isolated(file):48kB mapped:234100kB dirty:32kB writeback:0kB shmem:25228kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 792576kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3117.231026] Node 1 active_anon:2546972kB inactive_anon:806808kB active_file:8kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:8848kB dirty:0kB writeback:0kB shmem:19716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3117.259009] Node 0 DMA free:10468kB min:220kB low:272kB high:324kB active_anon:172kB inactive_anon:148kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3117.289060] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3117.294118] Node 0 DMA32 free:45692kB min:36296kB low:45368kB high:54440kB active_anon:1535024kB inactive_anon:67012kB active_file:488kB inactive_file:648kB unevictable:16156kB writepending:32kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:17024kB pagetables:61144kB bounce:0kB free_pcp:360kB local_pcp:216kB free_cma:0kB [ 3117.325365] lowmem_reserve[]: 0 0 0 0 0 [ 3117.329374] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3117.354923] lowmem_reserve[]: 0 0 0 0 0 [ 3117.358927] Node 1 Normal free:54312kB min:53592kB low:66988kB high:80384kB active_anon:2546972kB inactive_anon:806808kB active_file:8kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39072kB pagetables:88864kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3117.388614] lowmem_reserve[]: 0 0 0 0 0 [ 3117.392586] Node 0 DMA: 9*4kB (ME) 2*8kB (UM) 4*16kB (UM) 5*32kB (UME) 5*64kB (UE) 1*128kB (E) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10452kB [ 3117.409714] Node 0 DMA32: 562*4kB (UME) 551*8kB (UME) 173*16kB (UME) 94*32kB (UME) 87*64kB (UME) 30*128kB (UME) 19*256kB (UM) 12*512kB (UM) 3*1024kB (UE) 3*2048kB (M) 1*4096kB (M) = 46160kB [ 3117.427101] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3117.437865] Node 1 Normal: 118*4kB (UMEH) 836*8kB (UMEH) 689*16kB (UMEH) 547*32kB (UMEH) 197*64kB (UMEH) 41*128kB (UME) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54312kB [ 3117.453896] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3117.463612] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3117.472343] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3117.481209] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3117.489855] 16795 total pagecache pages [ 3117.493808] 0 pages in swap cache [ 3117.497265] Swap cache stats: add 0, delete 0, find 0/0 [ 3117.502698] Free swap = 0kB [ 3117.505774] Total swap = 0kB [ 3117.508792] 1965979 pages RAM [ 3117.511926] 0 pages HighMem/MovableOnly [ 3117.515954] 338456 pages reserved [ 3117.519397] 0 pages cma reserved [ 3117.522738] Out of memory: Kill process 23510 (syz-executor.4) score 1005 or sacrifice child [ 3117.531475] Killed process 23510 (syz-executor.4) total-vm:75240kB, anon-rss:4276kB, file-rss:34816kB, shmem-rss:0kB [ 3117.553745] oom_reaper: reaped process 23510 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3117.732855] oom_reaper: reaped process 8717 (syz-executor.2), now anon-rss:0kB, file-rss:44kB, shmem-rss:0kB [ 3117.771035] syz-executor.2 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3117.783896] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3117.789242] CPU: 1 PID: 8712 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 3117.797025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3117.806368] Call Trace: [ 3117.808944] dump_stack+0x1b2/0x283 [ 3117.812550] dump_header+0x178/0x7aa [ 3117.816255] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3117.821274] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3117.826361] ? ___ratelimit+0x2cd/0x522 [ 3117.830320] oom_kill_process.cold+0x10/0xc16 [ 3117.834802] ? lock_downgrade+0x6e0/0x6e0 [ 3117.838928] out_of_memory+0x2d5/0x10f0 [ 3117.842880] ? oom_killer_disable+0x1c0/0x1c0 [ 3117.847366] ? mutex_trylock+0x152/0x1a0 [ 3117.851409] __alloc_pages_nodemask+0x2556/0x2730 [ 3117.856239] ? HARDIRQ_verbose+0x10/0x10 [ 3117.860274] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3117.865121] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3117.870131] ? kmem_cache_alloc_node+0x387/0x400 [ 3117.874866] copy_process.part.0+0x26a/0x6fa0 [ 3117.879469] ? do_raw_spin_unlock+0x164/0x250 [ 3117.883944] ? _raw_spin_unlock+0x29/0x40 [ 3117.888068] ? do_anonymous_page+0x62d/0x17d0 [ 3117.892550] ? finish_fault+0x290/0x290 [ 3117.896518] ? check_preemption_disabled+0x35/0x240 [ 3117.901514] ? __cleanup_sighand+0x40/0x40 [ 3117.905735] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 3117.910660] ? vm_insert_mixed_mkwrite+0x30/0x30 [ 3117.915410] ? HARDIRQ_verbose+0x10/0x10 [ 3117.919475] _do_fork+0x180/0xc80 [ 3117.922929] ? fork_idle+0x270/0x270 [ 3117.926643] ? up_read+0x17/0x30 [ 3117.930003] ? __do_page_fault+0x19a/0xb50 [ 3117.934232] ? do_syscall_64+0x4c/0x640 [ 3117.938205] ? sys_vfork+0x20/0x20 [ 3117.941747] do_syscall_64+0x1d5/0x640 [ 3117.945644] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3117.950827] RIP: 0033:0x45f429 [ 3117.954006] RSP: 002b:00007ffc677c9b18 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3117.961799] RAX: ffffffffffffffda RBX: 00007f2cfc9b8700 RCX: 000000000045f429 [ 3117.969067] RDX: 00007f2cfc9b89d0 RSI: 00007f2cfc9b7db0 RDI: 00000000003d0f00 [ 3117.976334] RBP: 00007ffc677c9d40 R08: 00007f2cfc9b8700 R09: 00007f2cfc9b8700 [ 3117.983599] R10: 00007f2cfc9b89d0 R11: 0000000000000202 R12: 0000000000000000 [ 3117.990977] R13: 00007ffc677c9bcf R14: 00007f2cfc9b89c0 R15: 000000000078bfac [ 3118.150119] Mem-Info: [ 3118.152605] active_anon:1019451 inactive_anon:218492 isolated_anon:0 [ 3118.152605] active_file:47 inactive_file:6 isolated_file:5 [ 3118.152605] unevictable:10062 dirty:9 writeback:0 unstable:0 [ 3118.152605] slab_reclaimable:21765 slab_unreclaimable:168886 [ 3118.152605] mapped:60590 shmem:11236 pagetables:37476 bounce:0 [ 3118.152605] free:28953 free_pcp:79 free_cma:0 [ 3118.186977] Node 0 active_anon:1530916kB inactive_anon:67160kB active_file:92kB inactive_file:112kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:233432kB dirty:36kB writeback:40kB shmem:25228kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 788480kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3118.215933] Node 1 active_anon:2546888kB inactive_anon:806808kB active_file:8kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:8848kB dirty:0kB writeback:0kB shmem:19716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3118.243774] Node 0 DMA free:10464kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:148kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3118.275566] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3118.280628] Node 0 DMA32 free:50608kB min:36296kB low:45368kB high:54440kB active_anon:1530748kB inactive_anon:67012kB active_file:0kB inactive_file:56kB unevictable:16156kB writepending:0kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:16992kB pagetables:61036kB bounce:0kB free_pcp:632kB local_pcp:0kB free_cma:0kB [ 3118.310448] lowmem_reserve[]: 0 0 0 0 0 [ 3118.314452] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3118.339944] lowmem_reserve[]: 0 0 0 0 0 [ 3118.343949] Node 1 Normal free:54396kB min:53592kB low:66988kB high:80384kB active_anon:2546888kB inactive_anon:806808kB active_file:8kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39072kB pagetables:88864kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3118.397158] lowmem_reserve[]: 0 0 0 0 0 [ 3118.419611] Node 0 DMA: 10*4kB (ME) 2*8kB (UM) 3*16kB (M) 5*32kB (UME) 5*64kB (UE) 1*128kB (E) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10440kB [ 3118.436151] Node 0 DMA32: 785*4kB (UME) 581*8kB (UME) 180*16kB (UME) 85*32kB (UME) 85*64kB (UME) 30*128kB (UME) 19*256kB (UM) 12*512kB (UM) 3*1024kB (UE) 5*2048kB (M) 1*4096kB (M) = 51084kB [ 3118.454085] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3118.465615] Node 1 Normal: 119*4kB (UMEH) 840*8kB (UMEH) 692*16kB (UMEH) 547*32kB (UMEH) 197*64kB (UMEH) 41*128kB (UME) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54396kB [ 3118.482118] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3118.510583] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3118.532824] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3118.565633] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3118.574231] 17012 total pagecache pages [ 3118.601841] 0 pages in swap cache [ 3118.605600] Swap cache stats: add 0, delete 0, find 0/0 [ 3118.616671] Free swap = 0kB [ 3118.626263] Total swap = 0kB [ 3118.629446] 1965979 pages RAM [ 3118.632620] 0 pages HighMem/MovableOnly [ 3118.637480] 338456 pages reserved [ 3118.641443] 0 pages cma reserved [ 3118.644887] Out of memory: Kill process 15822 (syz-executor.1) score 1005 or sacrifice child [ 3118.653481] Killed process 15822 (syz-executor.1) total-vm:74976kB, anon-rss:2200kB, file-rss:35712kB, shmem-rss:0kB [ 3118.684409] oom_reaper: reaped process 15822 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3118.708404] oom_reaper: reaped process 8714 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:11480kB 09:34:03 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0xd, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x5}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r1) dup3(r5, r0, 0x0) 09:34:07 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000000)=0x27) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r0, r1, 0x0) 09:34:06 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000040c0), 0x14ec) read$FUSE(r0, &(0x7f0000002000), 0x1000) getxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='security.apparmor\x00', &(0x7f0000000400)=""/188, 0xbc) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r0, &(0x7f0000000380)={0x78, 0x0, 0x2}, 0x78) 09:34:07 executing program 2: socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x545, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) syz_open_procfs(r0, &(0x7f0000000080)='net/psched\x00') ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000580)={{0x6, 0x3, 0x923, 0x5c, '\x00', 0x8}, 0x1, 0x423, 0x1000, 0xffffffffffffffff, 0x2, 0x2, 'syz0\x00', &(0x7f00000000c0)=['\x00', 'aead\x00'], 0x6, [], [0x4, 0x4, 0x3, 0xff]}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000200)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540), 0x0) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)) r3 = accept(r1, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) r4 = open(0x0, 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) 09:34:07 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x4}, r0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f00000002c0)={0x1f, 0x0, 0x4e}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) semget(0x3, 0x0, 0x620) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x844) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x0) 09:34:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x894a, &(0x7f0000000080)={'ip_vti0\x00', @ifru_settings={0x0, 0x0, @fr_pvc_info=0x0}}) 09:34:07 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x3e9, 0x0, 0x0, 0x0, {0x68, 0x0, 0x1}}, 0x43}}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 09:34:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xffffffe0}]}}}]}, 0x3c}}, 0x0) 09:34:07 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1, 0x11, r0, 0x0) 09:34:07 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x4}, r0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f00000002c0)={0x1f, 0x0, 0x4e}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) semget(0x3, 0x0, 0x620) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x844) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x0) 09:34:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x0, 0x0, 0x98, 0xb8, 0x0, 0x170, 0x198, 0x198, 0x170, 0x198, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x80}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) 09:34:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xffffffe0}]}}}]}, 0x3c}}, 0x0) 09:34:08 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%n'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000100)='syz1\x00', 0x1ff) 09:34:08 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x4}, r0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f00000002c0)={0x1f, 0x0, 0x4e}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) semget(0x3, 0x0, 0x620) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x844) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x0) 09:34:08 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000040c0), 0x14ec) read$FUSE(r0, &(0x7f0000002000), 0x1000) getxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='security.apparmor\x00', &(0x7f0000000400)=""/188, 0xbc) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r0, &(0x7f0000000380)={0x78, 0x0, 0x2}, 0x78) 09:34:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xffffffe0}]}}}]}, 0x3c}}, 0x0) 09:34:08 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x9) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) gettid() 09:34:11 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) symlink(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='./bus\x00') mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) chdir(&(0x7f0000000080)='./file0\x00') setxattr$security_evm(&(0x7f0000000300)='./bus\x00', 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000080)='./bus\x00') 09:34:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xffffffe0}]}}}]}, 0x3c}}, 0x0) 09:34:11 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000400)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r2, 0x0) getsockopt$inet6_int(r2, 0x29, 0xce, 0x0, &(0x7f0000013000)) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 09:34:11 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x4}, r0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f00000002c0)={0x1f, 0x0, 0x4e}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) semget(0x3, 0x0, 0x620) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x844) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x0) 09:34:12 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0x2, @dev}, '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) 09:34:12 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0xc5f22fe5815d16a8, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @broadcast}, 0xc) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xe00) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) 09:34:12 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='./file1\x00', 0x0) 09:34:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000380)=[@free_buffer], 0x0, 0x0, 0x0}) [ 3125.165848] syz-executor.4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3125.233157] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3125.291816] CPU: 0 PID: 8808 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 3125.299622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3125.308972] Call Trace: [ 3125.311566] dump_stack+0x1b2/0x283 [ 3125.315201] dump_header+0x178/0x7aa [ 3125.318910] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3125.323922] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3125.329019] ? ___ratelimit+0x2cd/0x522 [ 3125.333003] oom_kill_process.cold+0x10/0xc16 [ 3125.337496] ? lock_downgrade+0x6e0/0x6e0 [ 3125.341643] out_of_memory+0x2d5/0x10f0 [ 3125.345627] ? oom_killer_disable+0x1c0/0x1c0 [ 3125.350117] ? mutex_trylock+0x152/0x1a0 [ 3125.354179] __alloc_pages_nodemask+0x2556/0x2730 [ 3125.359026] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 3125.363525] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3125.368360] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3125.373201] ? HARDIRQ_verbose+0x10/0x10 [ 3125.377274] ? cache_grow_begin+0x3f/0x410 [ 3125.381504] cache_grow_begin+0x91/0x410 [ 3125.385573] fallback_alloc+0x205/0x2b0 [ 3125.389547] kmem_cache_alloc+0x1e5/0x3c0 [ 3125.393693] getname_flags+0xc8/0x550 [ 3125.397496] SyS_symlinkat+0xa2/0x1f0 [ 3125.401294] ? SyS_unlink+0x20/0x20 [ 3125.404913] ? __do_page_fault+0x19a/0xb50 [ 3125.409146] ? do_syscall_64+0x4c/0x640 [ 3125.413116] ? SyS_symlinkat+0x1f0/0x1f0 [ 3125.417176] do_syscall_64+0x1d5/0x640 [ 3125.421070] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3125.426253] RIP: 0033:0x45c7e7 [ 3125.429435] RSP: 002b:00007ffe62ee3af8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 3125.437139] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045c7e7 [ 3125.444394] RDX: 00007ffe62ee3b93 RSI: 00000000004c25a5 RDI: 00007ffe62ee3b80 [ 3125.451644] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000013 [ 3125.458890] R10: 0000000000000075 R11: 0000000000000202 R12: 0000000000000001 [ 3125.466182] R13: 00007ffe62ee3b30 R14: 0000000000000000 R15: 00007ffe62ee3b40 [ 3125.475817] Mem-Info: [ 3125.478848] active_anon:1018931 inactive_anon:215622 isolated_anon:0 [ 3125.478848] active_file:41 inactive_file:119 isolated_file:0 [ 3125.478848] unevictable:10062 dirty:27 writeback:0 unstable:0 [ 3125.478848] slab_reclaimable:21762 slab_unreclaimable:168313 [ 3125.478848] mapped:57672 shmem:8366 pagetables:37484 bounce:0 [ 3125.478848] free:32084 free_pcp:220 free_cma:0 [ 3125.513966] Node 0 active_anon:1528952kB inactive_anon:58924kB active_file:256kB inactive_file:232kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:225284kB dirty:108kB writeback:0kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 786432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3125.554441] Node 1 active_anon:2546772kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5604kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3125.582741] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:192kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3125.610227] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3125.615409] Node 0 DMA32 free:62904kB min:36296kB low:45368kB high:54440kB active_anon:1528784kB inactive_anon:58924kB active_file:156kB inactive_file:180kB unevictable:16156kB writepending:68kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:16960kB pagetables:61268kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 3125.646524] lowmem_reserve[]: 0 0 0 0 0 [ 3125.650625] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3125.678347] lowmem_reserve[]: 0 0 0 0 0 [ 3125.682818] Node 1 Normal free:55624kB min:53592kB low:66988kB high:80384kB active_anon:2546772kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39008kB pagetables:88668kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3125.712491] lowmem_reserve[]: 0 0 0 0 0 [ 3125.716576] Node 0 DMA: 5*4kB (UE) 1*8kB (M) 9*16kB (UM) 1*32kB (E) 4*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10444kB [ 3125.732193] Node 0 DMA32: 1086*4kB (UME) 895*8kB (UME) 418*16kB (UME) 160*32kB (UME) 85*64kB (UME) 25*128kB (UME) 20*256kB (UM) 12*512kB (UM) 3*1024kB (UE) 6*2048kB (M) 1*4096kB (M) = 62672kB [ 3125.750784] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3125.762051] Node 1 Normal: 122*4kB (UMEH) 628*8kB (UMEH) 794*16kB (UMEH) 583*32kB (UMEH) 199*64kB (UMEH) 41*128kB (UME) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55624kB [ 3125.779453] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3125.809717] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3125.818604] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3125.827559] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3125.836257] 13952 total pagecache pages [ 3125.840286] 0 pages in swap cache [ 3125.843968] Swap cache stats: add 0, delete 0, find 0/0 [ 3125.849390] Free swap = 0kB [ 3125.852892] Total swap = 0kB [ 3125.856377] 1965979 pages RAM [ 3125.859710] 0 pages HighMem/MovableOnly [ 3125.864172] 338456 pages reserved [ 3125.868126] 0 pages cma reserved [ 3125.881903] Out of memory: Kill process 23228 (syz-executor.2) score 1005 or sacrifice child [ 3125.890657] Killed process 23228 (syz-executor.2) total-vm:75100kB, anon-rss:4272kB, file-rss:34816kB, shmem-rss:0kB 09:34:14 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000500)=0x40003) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1) [ 3125.967903] oom_reaper: reaped process 23228 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 09:34:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab36488", 0x65}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0x3c) 09:34:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x27, 0x0, &(0x7f0000000040)) 09:34:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x84}, 0x50800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{&(0x7f0000000480)=@ipx, 0x80, 0x0}, 0x3}, {{&(0x7f0000000500)=@ipx, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000007c0)=""/153, 0x99}, 0x10008}, {{&(0x7f0000000600)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000700)=""/102, 0x66}, {&(0x7f0000000940)=""/233, 0xe9}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f0000000a40)=""/227, 0xe3}, {&(0x7f00000003c0)=""/129, 0x81}, {&(0x7f0000002040)=""/4090, 0xffa}, {&(0x7f0000000c00)=""/156, 0x9c}, {&(0x7f0000000cc0)=""/100, 0x64}], 0x9, &(0x7f0000000e00)=""/84, 0x54}, 0x6}], 0x3, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003040)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a9ec8a3a63673a36d66b103e1fdbb4678731c44d5772a8b52f88132613f2ab9faa48e75b0508e2367018dc4479c6757b0a5622107e780a52d43a222d4aa8fa0c3e961e2401d5dbb22107ce4584d22a35c2ff5c7069779f3a8e888a8ac94312cdb43f7907ebfcf3dc4ad1f5e7577c5c2c9146439e6910c437a8213e177dfca08fb12f6c6a8343821e53d1f0ef24575797141dd16b8065042500017c0bab7265ba185fa61404145c500be7e57f2af455775c710da30fb915abbfcb8fe5e5a54f998aeb8ecb869537d7ddb529a8d66a4905586c9dd0d81d4841e2c90bd8fa2bf3802bf963edaae01ebd125510bbe75beac077af773d5d2a34b256e8369f68b0fcab87c7ee033997f53b635b59ac5aa1456d0b35e1dd734149dbcf541d744962b2bd0ece4c267760c3a6d4bce9b03000000cfa703a1a48b59700f8c902e46ae26e6e31185a19c07959edcb6bfc88c9e6bc124147521f6eb327231e35785951377c40b713a4f6854b02c428bef068f9494aa8fc9f99ddff40ef4fdc9360eb1bc2a25ac491f2bc9c7a23fe5662170feb55b3999b45b8b80a8438df19e183d854691a1f2b34352fed522c4265e4ece52f35d351a1676982ce0f2eb2c454b9df04b976179611f1be4deac0dd4c79a122f3d33e52bcce38808809820094c31af5cca2d79bf783bb87588d8c21bad663bbde2644cab2b605d0ca91b5c2417ab7c7bba5173b0bfddfd1d87ce6d257c0526fc051adaf783cb44e5f09899886b26ca746f8d2b392e0871bca6f1cb40c5ac1bf5ca80b934424deddfb547d8f9a38a25aa39752cac866986bb0faaf07ffeecd27bd736fa1a058ee5b17adbde605eb5f3648b4ee013640d018b42ef6b0000"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000010000104000000000097002000000000", @ANYRES32=0x0, @ANYBLOB="00000000ffff0001000000008dbfa4e893f2a2db228a040b02ba2ff7f0ebb26eb013d9143b6aaf6dfbfc619ce8e6b7b32416b9ea3dd8ff"], 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'}) fcntl$getown(r0, 0x9) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x200400, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') r2 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0) pwrite64(r2, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) chdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f00000005c0)='./file0/../file0\x00', 0x0) 09:34:15 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1007}, 0x4) close(r0) 09:34:15 executing program 0: timerfd_create(0x9, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='cpuset@\x00', 0xfffffffffffffffa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open$dir(0x0, 0x12c03, 0x12d5459dac72396b) mkdirat(r0, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x2) io_setup(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) creat(0x0, 0x85) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) open$dir(0x0, 0x0, 0x0) open(0x0, 0x482403, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @rand_addr, 0x3}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) fdatasync(0xffffffffffffffff) ftruncate(r3, 0x7fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) 09:34:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @dev}}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0xfe000000}}) 09:34:15 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, 0x0, 0x3, [{{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @multicast1}}]}, 0x210) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) 09:34:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x2bf, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f00000001c0)=0x5) umount2(&(0x7f00000000c0)='./file0\x00', 0x9) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080), 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000040)={0x3}) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x1f}], 0x17e}}], 0x3204257417b757c, 0x0) r2 = dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000580)=ANY=[@ANYBLOB="6f1ad8e56eb3b2368adebe0b0000459415289d81d7d9aa4c5492dc201f0c989c9b28b80f8cf34929d272e94bcb02cc02adcdbde12d6dc79858818f7cca1e38ddc5624fd5e4eec1329032399a32e40337655446261fa37f5492fab5b362f4d217b9ae03612de94f49db99d2e767b838f4e304db099cfba669a81721c2042b7cb84fab6fb485c800c92577b548366111d1af446506d2447164b5f1688ada2328bfda38e7d5cefb25881be29799aee3dd2006c2e9661a891727545db90655bf1d", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @private=0xa010101}}}, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={r3, @in={{0x2, 0x4e21, @multicast2}}, [0x6, 0x8, 0xffffffffffffff1f, 0x76f1, 0x2, 0xb3b, 0x9, 0x7f, 0xffffffffffffffff, 0x0, 0x80, 0x80000000, 0x800, 0x1ff, 0xfffffffffffffffe]}, &(0x7f0000000200)=0x100) 09:34:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x2bf, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f00000001c0)=0x5) umount2(&(0x7f00000000c0)='./file0\x00', 0x9) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080), 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000040)={0x3}) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x1f}], 0x17e}}], 0x3204257417b757c, 0x0) r2 = dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000580)=ANY=[@ANYBLOB="6f1ad8e56eb3b2368adebe0b0000459415289d81d7d9aa4c5492dc201f0c989c9b28b80f8cf34929d272e94bcb02cc02adcdbde12d6dc79858818f7cca1e38ddc5624fd5e4eec1329032399a32e40337655446261fa37f5492fab5b362f4d217b9ae03612de94f49db99d2e767b838f4e304db099cfba669a81721c2042b7cb84fab6fb485c800c92577b548366111d1af446506d2447164b5f1688ada2328bfda38e7d5cefb25881be29799aee3dd2006c2e9661a891727545db90655bf1d", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @private=0xa010101}}}, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={r3, @in={{0x2, 0x4e21, @multicast2}}, [0x6, 0x8, 0xffffffffffffff1f, 0x76f1, 0x2, 0xb3b, 0x9, 0x7f, 0xffffffffffffffff, 0x0, 0x80, 0x80000000, 0x800, 0x1ff, 0xfffffffffffffffe]}, &(0x7f0000000200)=0x100) 09:34:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x2bf, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f00000001c0)=0x5) umount2(&(0x7f00000000c0)='./file0\x00', 0x9) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080), 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000040)={0x3}) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x1f}], 0x17e}}], 0x3204257417b757c, 0x0) r2 = dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000580)=ANY=[@ANYBLOB="6f1ad8e56eb3b2368adebe0b0000459415289d81d7d9aa4c5492dc201f0c989c9b28b80f8cf34929d272e94bcb02cc02adcdbde12d6dc79858818f7cca1e38ddc5624fd5e4eec1329032399a32e40337655446261fa37f5492fab5b362f4d217b9ae03612de94f49db99d2e767b838f4e304db099cfba669a81721c2042b7cb84fab6fb485c800c92577b548366111d1af446506d2447164b5f1688ada2328bfda38e7d5cefb25881be29799aee3dd2006c2e9661a891727545db90655bf1d", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @private=0xa010101}}}, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={r3, @in={{0x2, 0x4e21, @multicast2}}, [0x6, 0x8, 0xffffffffffffff1f, 0x76f1, 0x2, 0xb3b, 0x9, 0x7f, 0xffffffffffffffff, 0x0, 0x80, 0x80000000, 0x800, 0x1ff, 0xfffffffffffffffe]}, &(0x7f0000000200)=0x100) 09:34:18 executing program 0: timerfd_create(0x9, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='cpuset@\x00', 0xfffffffffffffffa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open$dir(0x0, 0x12c03, 0x12d5459dac72396b) mkdirat(r0, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x2) io_setup(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) creat(0x0, 0x85) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) open$dir(0x0, 0x0, 0x0) open(0x0, 0x482403, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @rand_addr, 0x3}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) fdatasync(0xffffffffffffffff) ftruncate(r3, 0x7fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) 09:34:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x10000000, 0x100000, 0x5, 0x0, 0x7f6fc79d, 0x0, 0x0, 0x2}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000002e00)) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x9, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000600)) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRES32], 0x12d840) sendfile(r5, r9, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 09:34:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x2bf, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f00000001c0)=0x5) umount2(&(0x7f00000000c0)='./file0\x00', 0x9) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080), 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000040)={0x3}) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x1f}], 0x17e}}], 0x3204257417b757c, 0x0) r2 = dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000580)=ANY=[@ANYBLOB="6f1ad8e56eb3b2368adebe0b0000459415289d81d7d9aa4c5492dc201f0c989c9b28b80f8cf34929d272e94bcb02cc02adcdbde12d6dc79858818f7cca1e38ddc5624fd5e4eec1329032399a32e40337655446261fa37f5492fab5b362f4d217b9ae03612de94f49db99d2e767b838f4e304db099cfba669a81721c2042b7cb84fab6fb485c800c92577b548366111d1af446506d2447164b5f1688ada2328bfda38e7d5cefb25881be29799aee3dd2006c2e9661a891727545db90655bf1d", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @private=0xa010101}}}, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={r3, @in={{0x2, 0x4e21, @multicast2}}, [0x6, 0x8, 0xffffffffffffff1f, 0x76f1, 0x2, 0xb3b, 0x9, 0x7f, 0xffffffffffffffff, 0x0, 0x80, 0x80000000, 0x800, 0x1ff, 0xfffffffffffffffe]}, &(0x7f0000000200)=0x100) [ 3130.590200] syz-executor.1 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3130.634801] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 3130.642654] CPU: 0 PID: 8866 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 3130.650558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3130.659911] Call Trace: [ 3130.662498] dump_stack+0x1b2/0x283 [ 3130.666156] dump_header+0x178/0x7aa [ 3130.669867] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3130.674882] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3130.679987] ? ___ratelimit+0x2cd/0x522 [ 3130.683995] oom_kill_process.cold+0x10/0xc16 [ 3130.688608] ? lock_downgrade+0x6e0/0x6e0 [ 3130.692763] out_of_memory+0x2d5/0x10f0 [ 3130.696740] ? oom_killer_disable+0x1c0/0x1c0 [ 3130.701232] ? mutex_trylock+0x152/0x1a0 [ 3130.705295] __alloc_pages_nodemask+0x2556/0x2730 [ 3130.710265] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3130.715106] ? _raw_spin_unlock+0x29/0x40 [ 3130.719278] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3130.724297] ? kmem_cache_alloc_node+0x387/0x400 [ 3130.729091] copy_process.part.0+0x26a/0x6fa0 [ 3130.733593] ? do_raw_spin_unlock+0x164/0x250 [ 3130.738092] ? _raw_spin_unlock+0x29/0x40 [ 3130.742237] ? do_anonymous_page+0x62d/0x17d0 [ 3130.746733] ? finish_fault+0x290/0x290 [ 3130.750701] ? check_preemption_disabled+0x35/0x240 [ 3130.755722] ? __cleanup_sighand+0x40/0x40 [ 3130.759950] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 3130.764875] ? vm_insert_mixed_mkwrite+0x30/0x30 [ 3130.769621] ? HARDIRQ_verbose+0x10/0x10 [ 3130.773687] _do_fork+0x180/0xc80 [ 3130.777141] ? fork_idle+0x270/0x270 [ 3130.780855] ? up_read+0x17/0x30 [ 3130.784215] ? __do_page_fault+0x19a/0xb50 [ 3130.788447] ? do_syscall_64+0x4c/0x640 [ 3130.792413] ? sys_vfork+0x20/0x20 [ 3130.795949] do_syscall_64+0x1d5/0x640 [ 3130.799836] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3130.805019] RIP: 0033:0x45f429 [ 3130.808202] RSP: 002b:00007ffc53b22668 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3130.815905] RAX: ffffffffffffffda RBX: 00007ff501168700 RCX: 000000000045f429 [ 3130.823170] RDX: 00007ff5011689d0 RSI: 00007ff501167db0 RDI: 00000000003d0f00 [ 3130.830436] RBP: 00007ffc53b22890 R08: 00007ff501168700 R09: 00007ff501168700 [ 3130.837700] R10: 00007ff5011689d0 R11: 0000000000000202 R12: 0000000000000000 [ 3130.844963] R13: 00007ffc53b2271f R14: 00007ff5011689c0 R15: 000000000078c18c [ 3130.912116] Mem-Info: [ 3130.914733] active_anon:1021585 inactive_anon:215622 isolated_anon:0 [ 3130.914733] active_file:258 inactive_file:694 isolated_file:0 [ 3130.914733] unevictable:10062 dirty:79 writeback:25 unstable:0 [ 3130.914733] slab_reclaimable:21841 slab_unreclaimable:168384 [ 3130.914733] mapped:58075 shmem:8366 pagetables:37506 bounce:0 [ 3130.914733] free:28432 free_pcp:198 free_cma:0 [ 3130.966613] Node 0 active_anon:1541472kB inactive_anon:58924kB active_file:1040kB inactive_file:3164kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:227124kB dirty:340kB writeback:0kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 784384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3130.996621] audit: type=1804 audit(1592213659.675:2011): pid=8895 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir371512645/syzkaller.Sw3dcq/3785/bus" dev="sda1" ino=15969 res=1 [ 3131.008583] Node 1 active_anon:2546744kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5604kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3131.068796] Node 0 DMA free:10412kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3131.116924] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3131.122709] Node 0 DMA32 free:44580kB min:36296kB low:45368kB high:54440kB active_anon:1541460kB inactive_anon:58924kB active_file:1592kB inactive_file:3792kB unevictable:16156kB writepending:392kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:17408kB pagetables:61284kB bounce:0kB free_pcp:256kB local_pcp:0kB free_cma:0kB [ 3131.157416] lowmem_reserve[]: 0 0 0 0 0 [ 3131.161893] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3131.270335] lowmem_reserve[]: 0 0 0 0 0 [ 3131.287301] Node 1 Normal free:55564kB min:53592kB low:66988kB high:80384kB active_anon:2546744kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39104kB pagetables:88668kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3131.372767] lowmem_reserve[]: 0 0 0 0 0 [ 3131.377099] Node 0 DMA: 5*4kB (UE) 1*8kB (M) 3*16kB (UM) 1*32kB (E) 5*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10412kB [ 3131.407311] Node 0 DMA32: 256*4kB (UME) 558*8kB (UME) 294*16kB (UME) 85*32kB (UME) 36*64kB (UME) 4*128kB (UME) 14*256kB (UM) 12*512kB (UM) 3*1024kB (UE) 8*2048kB (M) 1*4096kB (M) = 49008kB [ 3131.448101] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3131.466325] Node 1 Normal: 193*4kB (UMEH) 451*8kB (UMEH) 869*16kB (UMEH) 582*32kB (UMEH) 198*64kB (UMEH) 42*128kB (UME) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55724kB [ 3131.488472] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3131.498579] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3131.512991] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3131.522038] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3131.531236] 14348 total pagecache pages [ 3131.535212] 0 pages in swap cache [ 3131.538651] Swap cache stats: add 0, delete 0, find 0/0 [ 3131.544100] Free swap = 0kB [ 3131.547108] Total swap = 0kB [ 3131.550870] 1965979 pages RAM [ 3131.555030] 0 pages HighMem/MovableOnly [ 3131.559035] 338456 pages reserved [ 3131.563626] 0 pages cma reserved [ 3131.566999] Out of memory: Kill process 18388 (syz-executor.2) score 1005 or sacrifice child [ 3131.576312] Killed process 18388 (syz-executor.2) total-vm:75108kB, anon-rss:4272kB, file-rss:34816kB, shmem-rss:0kB [ 3131.612953] oom_reaper: reaped process 18388 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 09:34:21 executing program 2: timerfd_create(0x9, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='cpuset@\x00', 0xfffffffffffffffa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open$dir(0x0, 0x12c03, 0x12d5459dac72396b) mkdirat(r0, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x2) io_setup(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) creat(0x0, 0x85) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) open$dir(0x0, 0x0, 0x0) open(0x0, 0x482403, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @rand_addr, 0x3}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) fdatasync(0xffffffffffffffff) ftruncate(r3, 0x7fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) 09:34:21 executing program 0: timerfd_create(0x9, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='cpuset@\x00', 0xfffffffffffffffa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open$dir(0x0, 0x12c03, 0x12d5459dac72396b) mkdirat(r0, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x2) io_setup(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) creat(0x0, 0x85) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) open$dir(0x0, 0x0, 0x0) open(0x0, 0x482403, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @rand_addr, 0x3}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) fdatasync(0xffffffffffffffff) ftruncate(r3, 0x7fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) 09:34:21 executing program 4: timerfd_create(0x9, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='cpuset@\x00', 0xfffffffffffffffa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open$dir(0x0, 0x12c03, 0x12d5459dac72396b) mkdirat(r0, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x2) io_setup(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) creat(0x0, 0x85) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) open$dir(0x0, 0x0, 0x0) open(0x0, 0x482403, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @rand_addr, 0x3}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) fdatasync(0xffffffffffffffff) ftruncate(r3, 0x7fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) 09:34:21 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000100)=[0xfffffffe]) 09:34:21 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000180)="f5", 0x1) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 09:34:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x2bf, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f00000001c0)=0x5) umount2(&(0x7f00000000c0)='./file0\x00', 0x9) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080), 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000040)={0x3}) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x1f}], 0x17e}}], 0x3204257417b757c, 0x0) r2 = dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000580)=ANY=[@ANYBLOB="6f1ad8e56eb3b2368adebe0b0000459415289d81d7d9aa4c5492dc201f0c989c9b28b80f8cf34929d272e94bcb02cc02adcdbde12d6dc79858818f7cca1e38ddc5624fd5e4eec1329032399a32e40337655446261fa37f5492fab5b362f4d217b9ae03612de94f49db99d2e767b838f4e304db099cfba669a81721c2042b7cb84fab6fb485c800c92577b548366111d1af446506d2447164b5f1688ada2328bfda38e7d5cefb25881be29799aee3dd2006c2e9661a891727545db90655bf1d", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @private=0xa010101}}}, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={r3, @in={{0x2, 0x4e21, @multicast2}}, [0x6, 0x8, 0xffffffffffffff1f, 0x76f1, 0x2, 0xb3b, 0x9, 0x7f, 0xffffffffffffffff, 0x0, 0x80, 0x80000000, 0x800, 0x1ff, 0xfffffffffffffffe]}, &(0x7f0000000200)=0x100) 09:34:22 executing program 1: r0 = gettid() waitid(0x2, r0, 0x0, 0x2, 0x0) 09:34:23 executing program 2: timerfd_create(0x9, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='cpuset@\x00', 0xfffffffffffffffa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open$dir(0x0, 0x12c03, 0x12d5459dac72396b) mkdirat(r0, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x2) io_setup(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) creat(0x0, 0x85) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) open$dir(0x0, 0x0, 0x0) open(0x0, 0x482403, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @rand_addr, 0x3}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) fdatasync(0xffffffffffffffff) ftruncate(r3, 0x7fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) 09:34:23 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x10, 0x4000000000000800, 0x1}, 0x1d) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000380), &(0x7f00000004c0), 0x2}, 0x20) 09:34:23 executing program 4: timerfd_create(0x9, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='cpuset@\x00', 0xfffffffffffffffa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open$dir(0x0, 0x12c03, 0x12d5459dac72396b) mkdirat(r0, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x2) io_setup(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) creat(0x0, 0x85) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) open$dir(0x0, 0x0, 0x0) open(0x0, 0x482403, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @rand_addr, 0x3}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) fdatasync(0xffffffffffffffff) ftruncate(r3, 0x7fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) 09:34:23 executing program 0: timerfd_create(0x9, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='cpuset@\x00', 0xfffffffffffffffa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open$dir(0x0, 0x12c03, 0x12d5459dac72396b) mkdirat(r0, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x2) io_setup(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) creat(0x0, 0x85) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) open$dir(0x0, 0x0, 0x0) open(0x0, 0x482403, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @rand_addr, 0x3}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) fdatasync(0xffffffffffffffff) ftruncate(r3, 0x7fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) 09:34:23 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x13, &(0x7f0000000280)="c4fe910c67e88786cec96ddb4922addee07bee"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 09:34:24 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$usbmon(0x0, 0x45, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x40, 0x9}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000740)='./file1\x00', 0x0) r2 = shmget$private(0x0, 0xc000, 0x54000000, &(0x7f0000ff4000/0xc000)=nil) shmctl$SHM_STAT(r2, 0xd, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x100, &(0x7f0000000580)="4f3f9e966550f7a4c0e1841ac95629d74c505e8d11dca50d5e0bcfe47bf070") r4 = accept(r1, &(0x7f00000002c0)=@x25, &(0x7f0000000540)=0x80) r5 = open(&(0x7f0000000500)='./file1\x00', 0x0, 0x108) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') r6 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r7 = geteuid() fsetxattr$system_posix_acl(r6, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000001800)=ANY=[@ANYBLOB='\b\x00'/12, @ANYRES32=0x0, @ANYBLOB="00002200795086574bf2fbc3", @ANYRES32=r7, @ANYBLOB="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"/436, @ANYRES32=0x0, @ANYBLOB="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"], 0x7, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000ac0)=ANY=[@ANYRESOCT, @ANYRES32=r4, @ANYBLOB="010029bd7030fddbdf254b00000024047d80620012003f5e2709de1a3d979d525d09000000b6ef753ffe629711230e80b9428ebe3b49d80e67c0bcb4b351f192e968bad85504d0f89435a8a8220de4b9bcf78bb02e297efb97e710976dfe99b0dc84d46745ba2043688ee81bce0e7b10f3d9827cf71eabfc8eb4b0c8dad2c7ba1400814b000000010200fd41b8c065e8a4eb36ad603ac05fd0cfab01d5403380a1599af57947962c81f3b2356ea4dd3cca53f2778ce903000000000000000b8d0e77cdf62e99cff7d7b6d67f393ecb2f58afac7e9b46db77d39e03b8da4f0fc50490c31805dcc539a77a4a97b70e3ac28fc983cd71c55d28ceb747641d1e90c26f9bbbe8a98e83eb943b76c3cfd41002fcd2ea58424875b3854d8d3240fb725a9cc858b743d77b72663bbcc6112f6a802479ca45fdd6895440549f5ac15947da18964d14146abc56f069dc3f465869f88333c3b10e148cb9b96b1914755e5ffa4b21c8846d6114e9c9527ccba4af57053e7ed74006043f352e79be33fc26a4000100e85eb74d1049cd151d73dc2ddd6cbb5ff9b9a91e0808a9ddcb871b5fa991ac241267745c66ccaf87483bd79f159bf50c32f5574fcc83e20590d8f6d412458c0b1a5695b86aa8e57e334024d8a31122887c1650df5c852965ddf4aafa2be33eb5b6a5560bde1bc9b0e494b5e3bfd975085237d3e2bb8b1778cf58a0d02b0e2cfc2af4f09043fb4e2f082feed11cd4c14a8026a8ef47a6844ca31935446377ae5cd6153f18ae970422aade0000009af66e045530d1690b56d8dc47ed988368143ac895324de188a30129f6376ded5f1d594e64ca9a580b8babe5ffbe0eb9a492453a61733bc1718f1cb90d75c465063f60d92b261ae576f473baf429a1cc00902ae30d7f0f1caed082c24a32936b529914d7a4372081bd921006e29c78736addf1c4f7de718f9f08195ff58143ee9914de6ddd7265151c5d88640000f44e42fd9ee97e76dd47f547d5887b9a705d52ec159bb85a6cfdd49f5406c8ebc70802390191471f58ad580507df4da3926dbfb4f19a3b59836a1d9d59929f174aec15f166b5dcadc7ca8624c8358518736b829aceff64ae3d4ce7000004000200f100000095c189b9a13a7bdf94a1b87919f67fc6fe7c0486e1e4659c13242cf71cf1b6ec4c9abdfdf9b14e6ff988f3a0d3343dfcab1ba061a45e776317ac1a2022758a25fbd0aff9695f52c5efb4527d3bea10d465b512262a82135640b4192fd193fa857c7466553d5d462519b4d8916c93c35297473bd334c5ee729cbacbee2d5b655e9212bf946432f8d96197eb60f897f2f1b08d5931c5fd0cd242ea4d797acfdb6cde4f61c9ee0576b14b22f2fa962cd12e30d2b09ae0bb151761b4565bbe51ce163b0102441bd93732ac04d8de893541aafa0428b0a96004fff895b6bc55efd14bcfe1d19a0d24365c48c1eb17e211d52fc35a863e64990692d48868e507149b00fdc4fa498414932e6aeb3a927a1e753d78fa5567bdb03b981ffb251cf0cd08b52307d17aa3b5cfa60f72ee9db5a83b52c5fa5ac5f67f85f3face70e0a9e8d142e29d6746258761ba7cfd7a98c5ac8f6bc6b43e2f8dc064d7f727c1579684b782e1663501fab68a2ba2e8a74b5c39f8e37ab900595bc6c0100c6863e0ad9955401f9a7be522e5fa5e3edd73b65964703aa841201b9f0d6a7b083e4e4bc1540eb2527c3c4c05472474831f83448a7adfe6a80478231993e155e67497d7361cb86c0a43ea5c7b5f64050f645cb7c987efab524f1c66612282bd9c428d02be842e8b1ad66f17e2340cc84bd40f9b66787658a9e42ab61c906105d5d25a557a9adb673ebad24a665be115a9c2b63b03458681feabff5dbfdf6a6511a48ea92c9f5639a42632165c941bd0177e7d6a014b9a8d3722a55a90e5f3190dbe1986659d2842cc7296c793e8466076c0ad40bacce26b33b5866affa92ae988f8f73470ddc62dba3b6141db56cc6c47d694640bacaa617b099184ebfe84adcd9a6bcfb84b8f46bd364051f816d996c5a691373b5ea03abe2ed8084d7edb376f89ac08deaee372cf95d07b9b370576d90990186b6d69b5996ce4720df5a24f1518cb4ce98494f2fbb43788b49cf360ba0b205d6e022687831bea62f2e54f8a1bd7fc0f8bfb0f1e2da7f2095a26e92e8de93d18ff5577063284e92463a15b1a13a2bf3bf8a40f2441f33a42b62cf8fda87ae87021ae", @ANYRES16, @ANYRESOCT, @ANYRES32=r0], 0x6}, 0x1, 0x0, 0x0, 0x40008c1}, 0x24000831) sendmsg$nl_xfrm(r5, &(0x7f0000000440)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[]}, 0x1, 0x0, 0x0, 0x44000854}, 0x44035) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001140)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) lstat(&(0x7f0000000380)='./file1\x00', &(0x7f0000000780)) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000180)={0x6000, &(0x7f0000000040), 0x8, r5, 0xb}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x4000000, 0x183e22) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x48], 0x0, 0x400, 0x5b3, 0x5, 0x100000005}) 09:34:24 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) dup2(r3, r0) 09:34:24 executing program 4: timerfd_create(0x9, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='cpuset@\x00', 0xfffffffffffffffa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open$dir(0x0, 0x12c03, 0x12d5459dac72396b) mkdirat(r0, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x2) io_setup(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) creat(0x0, 0x85) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) open$dir(0x0, 0x0, 0x0) open(0x0, 0x482403, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @rand_addr, 0x3}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) fdatasync(0xffffffffffffffff) ftruncate(r3, 0x7fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) 09:34:24 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000017c0)={0x0, 0x0, 0x30}, 0xc) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x19) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x34000) 09:34:24 executing program 1: getrandom(&(0x7f00000014c0)=""/177, 0xb1, 0x3) 09:34:24 executing program 2: timerfd_create(0x9, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='cpuset@\x00', 0xfffffffffffffffa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open$dir(0x0, 0x12c03, 0x12d5459dac72396b) mkdirat(r0, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) creat(0x0, 0x2) io_setup(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) creat(0x0, 0x85) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) open$dir(0x0, 0x0, 0x0) open(0x0, 0x482403, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @rand_addr, 0x3}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) fdatasync(0xffffffffffffffff) ftruncate(r3, 0x7fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) 09:34:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="b700000001ed01edbfa30000000000000703000028feffff720af0fff8fffffe71a4f0ff0000000077000000010000005d400300000000005504000001ed000027000000000002001d44030000000000630a00fe000000002f00000000000000b7000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1b6a69b002e7f3be361917adee9ee1c8a2b4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779923e6440c2fbdb00a3e35208b0bb0d2cd8dff0c710e4cdbf4fc41fbba4f94329e646b8ee6de2109fbe4ef154400e807d63cafa2438ec649dc74a1a610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123ded79f903a8a3658d42ecbf28bf6c76c15b463bebc72f526d8e8afcb913466aaa7f1af9dbae2460d0b11008e59a59fab9100eb53987ad1776e72ba7a54f0cdc3a6138d5fcfba53f8d0c67ff616236fd9aa58f2477184b6a89adaf07b0a6041bdef928d236619074d6ebdf098bc908f523d228a40f9411fe7226a4040996e37c4f46756dfc1538ff7f0000279132d5ef0600116cbefaca1f000000000000009d8f5a5557785d985a163458731f298d5140c9fe90dc66b257b0c0295afab36f353e1bc1574a6305790a25cdf085aa4192696ebbf416c0820e106e29d9654fce8ff4de960b344788b0ae6e1d41728a7b2014beddf3fbfa6082fbb36c8e235b4a2ea6c63adc3bf02d67b11f8fb0f64009fc03e060847a6c76f8601899040a539e6bd1035869070a4779af73a30046ae94937c0d6dc233866d49200e2b6aed2c09a000454573d185cbe6f6458f8861b92dc7caffa7c1b7520f5a60d7e7478b06825a91d7055e8032d060c61454e899b6e29b9f726de7653d5307c2102a38d48ebdc8c853400900b346e43e3637fde6e137d35267c37200001fe41c645f3b6fa9baebb3e42f648af9abba14b578f43b1aad90fe931cc77bc169a74da221ce280c149c1bc49fc422830747f99be5fd4e51f0c340d6fc8e6c73680300000041c565969111210f75c4776d319be8a5d3378d493868614b79b2f24d3dd34dda6a931135244250610b3798cd644285d96af894acefc0eb9f3cf7b915e5f44391fea1bbf70b0500000000000000669c381c695907199a46a5997f7ceaaada5c2d80de14beed0000000000000000000000000000000000000000000000000000004befd57363532929fd9609d5ad41cb5081b7fe54ce8b00636fd98ba9ece55af728cb40041497290d440e4a14cba92a97b5423da3ada4cc7ea06a586778e53337d65f595de289d8b3125ffaf177a6cfad82f3b5c70f1a62aee6173fd4e9068815e8fbb8479a154d7805f2df2fae02835c73b8615888cc3f6ed2b08211f594816fb17c637b664bfc4a7050e7e6ba"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r0 = getpid() tkill(r0, 0x9) 09:34:24 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x1) r1 = dup(r0) r2 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r2, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) sendmmsg$inet_sctp(r2, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0xa00) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 09:34:25 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$usbmon(0x0, 0x45, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x40, 0x9}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000740)='./file1\x00', 0x0) r2 = shmget$private(0x0, 0xc000, 0x54000000, &(0x7f0000ff4000/0xc000)=nil) shmctl$SHM_STAT(r2, 0xd, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x100, &(0x7f0000000580)="4f3f9e966550f7a4c0e1841ac95629d74c505e8d11dca50d5e0bcfe47bf070") r4 = accept(r1, &(0x7f00000002c0)=@x25, &(0x7f0000000540)=0x80) r5 = open(&(0x7f0000000500)='./file1\x00', 0x0, 0x108) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') r6 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r7 = geteuid() fsetxattr$system_posix_acl(r6, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000001800)=ANY=[@ANYBLOB='\b\x00'/12, @ANYRES32=0x0, @ANYBLOB="00002200795086574bf2fbc3", @ANYRES32=r7, @ANYBLOB="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"/436, @ANYRES32=0x0, @ANYBLOB="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"], 0x7, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000ac0)=ANY=[@ANYRESOCT, @ANYRES32=r4, @ANYBLOB="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", @ANYRES16, @ANYRESOCT, @ANYRES32=r0], 0x6}, 0x1, 0x0, 0x0, 0x40008c1}, 0x24000831) sendmsg$nl_xfrm(r5, &(0x7f0000000440)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[]}, 0x1, 0x0, 0x0, 0x44000854}, 0x44035) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001140)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) lstat(&(0x7f0000000380)='./file1\x00', &(0x7f0000000780)) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000180)={0x6000, &(0x7f0000000040), 0x8, r5, 0xb}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x4000000, 0x183e22) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x48], 0x0, 0x400, 0x5b3, 0x5, 0x100000005}) 09:34:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c202", 0x18) 09:34:25 executing program 2: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x2284, &(0x7f0000000080)=ANY=[@ANYBLOB]) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x296442, 0x78) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) inotify_init1(0x80000) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x1c0, 0x0, 0x2, 0x101, 0x0, 0x0, {0x1}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, [], 0x1c}}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x14}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASK={0x50, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x3e}}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xbcb}, @CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x40014}, 0x4001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000480)={0x29, 0x4, 0x0, {0x2, 0x10000, 0x1, 0x0, [0x0]}}, 0x29) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) write$nbd(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x10) 09:34:25 executing program 2: r0 = socket(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000140)={0x11, @loopback, 0x0, 0x0, 'rr\x00'}, 0x2c) 09:34:25 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$usbmon(0x0, 0x45, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x40, 0x9}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000740)='./file1\x00', 0x0) r2 = shmget$private(0x0, 0xc000, 0x54000000, &(0x7f0000ff4000/0xc000)=nil) shmctl$SHM_STAT(r2, 0xd, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x100, &(0x7f0000000580)="4f3f9e966550f7a4c0e1841ac95629d74c505e8d11dca50d5e0bcfe47bf070") r4 = accept(r1, &(0x7f00000002c0)=@x25, &(0x7f0000000540)=0x80) r5 = open(&(0x7f0000000500)='./file1\x00', 0x0, 0x108) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') r6 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r7 = geteuid() fsetxattr$system_posix_acl(r6, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000001800)=ANY=[@ANYBLOB='\b\x00'/12, @ANYRES32=0x0, @ANYBLOB="00002200795086574bf2fbc3", @ANYRES32=r7, @ANYBLOB="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"/436, @ANYRES32=0x0, @ANYBLOB="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"], 0x7, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000ac0)=ANY=[@ANYRESOCT, @ANYRES32=r4, @ANYBLOB="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", @ANYRES16, @ANYRESOCT, @ANYRES32=r0], 0x6}, 0x1, 0x0, 0x0, 0x40008c1}, 0x24000831) sendmsg$nl_xfrm(r5, &(0x7f0000000440)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[]}, 0x1, 0x0, 0x0, 0x44000854}, 0x44035) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001140)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) lstat(&(0x7f0000000380)='./file1\x00', &(0x7f0000000780)) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000180)={0x6000, &(0x7f0000000040), 0x8, r5, 0xb}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x4000000, 0x183e22) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x48], 0x0, 0x400, 0x5b3, 0x5, 0x100000005}) 09:34:26 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) 09:34:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r0 = getpid() tkill(r0, 0x9) 09:34:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r0 = getpid() tkill(r0, 0x9) 09:34:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./file0\x00', 0x8a040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fchmod(r2, 0x0) 09:34:26 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8d, &(0x7f0000000280)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0cdaac6c0c68cf4361ed0b005fa0804e04170e4ba5c37d3b52246786e2b6abaa08ac26b2ee1b879ecc76b7bff38df6ec30088ebff3dc0d3eb0a9b64285ee8b3a28548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106a"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 09:34:26 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$usbmon(0x0, 0x45, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x40, 0x9}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000740)='./file1\x00', 0x0) r2 = shmget$private(0x0, 0xc000, 0x54000000, &(0x7f0000ff4000/0xc000)=nil) shmctl$SHM_STAT(r2, 0xd, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x100, &(0x7f0000000580)="4f3f9e966550f7a4c0e1841ac95629d74c505e8d11dca50d5e0bcfe47bf070") r4 = accept(r1, &(0x7f00000002c0)=@x25, &(0x7f0000000540)=0x80) r5 = open(&(0x7f0000000500)='./file1\x00', 0x0, 0x108) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') r6 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r7 = geteuid() fsetxattr$system_posix_acl(r6, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000001800)=ANY=[@ANYBLOB='\b\x00'/12, @ANYRES32=0x0, @ANYBLOB="00002200795086574bf2fbc3", @ANYRES32=r7, @ANYBLOB="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"/436, @ANYRES32=0x0, @ANYBLOB="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"], 0x7, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000ac0)=ANY=[@ANYRESOCT, @ANYRES32=r4, @ANYBLOB="010029bd7030fddbdf254b00000024047d80620012003f5e2709de1a3d979d525d09000000b6ef753ffe629711230e80b9428ebe3b49d80e67c0bcb4b351f192e968bad85504d0f89435a8a8220de4b9bcf78bb02e297efb97e710976dfe99b0dc84d46745ba2043688ee81bce0e7b10f3d9827cf71eabfc8eb4b0c8dad2c7ba1400814b000000010200fd41b8c065e8a4eb36ad603ac05fd0cfab01d5403380a1599af57947962c81f3b2356ea4dd3cca53f2778ce903000000000000000b8d0e77cdf62e99cff7d7b6d67f393ecb2f58afac7e9b46db77d39e03b8da4f0fc50490c31805dcc539a77a4a97b70e3ac28fc983cd71c55d28ceb747641d1e90c26f9bbbe8a98e83eb943b76c3cfd41002fcd2ea58424875b3854d8d3240fb725a9cc858b743d77b72663bbcc6112f6a802479ca45fdd6895440549f5ac15947da18964d14146abc56f069dc3f465869f88333c3b10e148cb9b96b1914755e5ffa4b21c8846d6114e9c9527ccba4af57053e7ed74006043f352e79be33fc26a4000100e85eb74d1049cd151d73dc2ddd6cbb5ff9b9a91e0808a9ddcb871b5fa991ac241267745c66ccaf87483bd79f159bf50c32f5574fcc83e20590d8f6d412458c0b1a5695b86aa8e57e334024d8a31122887c1650df5c852965ddf4aafa2be33eb5b6a5560bde1bc9b0e494b5e3bfd975085237d3e2bb8b1778cf58a0d02b0e2cfc2af4f09043fb4e2f082feed11cd4c14a8026a8ef47a6844ca31935446377ae5cd6153f18ae970422aade0000009af66e045530d1690b56d8dc47ed988368143ac895324de188a30129f6376ded5f1d594e64ca9a580b8babe5ffbe0eb9a492453a61733bc1718f1cb90d75c465063f60d92b261ae576f473baf429a1cc00902ae30d7f0f1caed082c24a32936b529914d7a4372081bd921006e29c78736addf1c4f7de718f9f08195ff58143ee9914de6ddd7265151c5d88640000f44e42fd9ee97e76dd47f547d5887b9a705d52ec159bb85a6cfdd49f5406c8ebc70802390191471f58ad580507df4da3926dbfb4f19a3b59836a1d9d59929f174aec15f166b5dcadc7ca8624c8358518736b829aceff64ae3d4ce7000004000200f100000095c189b9a13a7bdf94a1b87919f67fc6fe7c0486e1e4659c13242cf71cf1b6ec4c9abdfdf9b14e6ff988f3a0d3343dfcab1ba061a45e776317ac1a2022758a25fbd0aff9695f52c5efb4527d3bea10d465b512262a82135640b4192fd193fa857c7466553d5d462519b4d8916c93c35297473bd334c5ee729cbacbee2d5b655e9212bf946432f8d96197eb60f897f2f1b08d5931c5fd0cd242ea4d797acfdb6cde4f61c9ee0576b14b22f2fa962cd12e30d2b09ae0bb151761b4565bbe51ce163b0102441bd93732ac04d8de893541aafa0428b0a96004fff895b6bc55efd14bcfe1d19a0d24365c48c1eb17e211d52fc35a863e64990692d48868e507149b00fdc4fa498414932e6aeb3a927a1e753d78fa5567bdb03b981ffb251cf0cd08b52307d17aa3b5cfa60f72ee9db5a83b52c5fa5ac5f67f85f3face70e0a9e8d142e29d6746258761ba7cfd7a98c5ac8f6bc6b43e2f8dc064d7f727c1579684b782e1663501fab68a2ba2e8a74b5c39f8e37ab900595bc6c0100c6863e0ad9955401f9a7be522e5fa5e3edd73b65964703aa841201b9f0d6a7b083e4e4bc1540eb2527c3c4c05472474831f83448a7adfe6a80478231993e155e67497d7361cb86c0a43ea5c7b5f64050f645cb7c987efab524f1c66612282bd9c428d02be842e8b1ad66f17e2340cc84bd40f9b66787658a9e42ab61c906105d5d25a557a9adb673ebad24a665be115a9c2b63b03458681feabff5dbfdf6a6511a48ea92c9f5639a42632165c941bd0177e7d6a014b9a8d3722a55a90e5f3190dbe1986659d2842cc7296c793e8466076c0ad40bacce26b33b5866affa92ae988f8f73470ddc62dba3b6141db56cc6c47d694640bacaa617b099184ebfe84adcd9a6bcfb84b8f46bd364051f816d996c5a691373b5ea03abe2ed8084d7edb376f89ac08deaee372cf95d07b9b370576d90990186b6d69b5996ce4720df5a24f1518cb4ce98494f2fbb43788b49cf360ba0b205d6e022687831bea62f2e54f8a1bd7fc0f8bfb0f1e2da7f2095a26e92e8de93d18ff5577063284e92463a15b1a13a2bf3bf8a40f2441f33a42b62cf8fda87ae87021ae", @ANYRES16, @ANYRESOCT, @ANYRES32=r0], 0x6}, 0x1, 0x0, 0x0, 0x40008c1}, 0x24000831) sendmsg$nl_xfrm(r5, &(0x7f0000000440)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[]}, 0x1, 0x0, 0x0, 0x44000854}, 0x44035) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001140)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) lstat(&(0x7f0000000380)='./file1\x00', &(0x7f0000000780)) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000180)={0x6000, &(0x7f0000000040), 0x8, r5, 0xb}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x4000000, 0x183e22) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x48], 0x0, 0x400, 0x5b3, 0x5, 0x100000005}) 09:34:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./file0\x00', 0x8a040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fchmod(r2, 0x0) 09:34:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r0 = getpid() tkill(r0, 0x9) 09:34:26 executing program 0: socket$inet6(0xa, 0x5, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getpid() capget(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x7fffef80) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000d00200009800000000000000680100009800000000000000380200003802000038020000380200003802000004000000000000000000000010000000e00000020000000000000000626f6e645f736c6176655f31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000380074696d65000000000000000000000000000000000000000000000000000000000000ffffffff4f970000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000380071756f7461000000000000000000000000000000000000000000000000000100000000000000470d0000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x8c\x00\xe2\xff\xff\xff\x10\x1d\xa4\xf0\xbb\xbf\xe3}\xee\xe2\xf6\xe9', 0x3) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, 0x0, 0x102000004) 09:34:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r0 = getpid() tkill(r0, 0x9) 09:34:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./file0\x00', 0x8a040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fchmod(r2, 0x0) 09:34:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r0 = getpid() tkill(r0, 0x9) [ 3138.230986] ip_tables: iptables: counters copy to user failed while replacing table [ 3138.404709] ip_tables: iptables: counters copy to user failed while replacing table 09:34:27 executing program 5: setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000)="c3cc9dec9a1c1982d2d527aada5fa3ed594390852fe6", 0x16) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b04, &(0x7f0000000000)='wlan0\x00') 09:34:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./file0\x00', 0x8a040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fchmod(r2, 0x0) 09:34:27 executing program 0: socket$inet6(0xa, 0x5, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getpid() capget(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x7fffef80) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x8c\x00\xe2\xff\xff\xff\x10\x1d\xa4\xf0\xbb\xbf\xe3}\xee\xe2\xf6\xe9', 0x3) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, 0x0, 0x102000004) 09:34:27 executing program 3: socket$inet6(0xa, 0x5, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getpid() capget(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x7fffef80) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x8c\x00\xe2\xff\xff\xff\x10\x1d\xa4\xf0\xbb\xbf\xe3}\xee\xe2\xf6\xe9', 0x3) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, 0x0, 0x102000004) 09:34:27 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0x0], @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x40, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2f}], "000022ebffff0400"}}}}}}}, 0x0) 09:34:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r0 = getpid() tkill(r0, 0x9) 09:34:27 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 3138.864403] ip_tables: iptables: counters copy to user failed while replacing table 09:34:27 executing program 0: socket$inet6(0xa, 0x5, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getpid() capget(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x7fffef80) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x8c\x00\xe2\xff\xff\xff\x10\x1d\xa4\xf0\xbb\xbf\xe3}\xee\xe2\xf6\xe9', 0x3) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, 0x0, 0x102000004) [ 3138.974109] ip_tables: iptables: counters copy to user failed while replacing table 09:34:27 executing program 3: socket$inet6(0xa, 0x5, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getpid() capget(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x7fffef80) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x8c\x00\xe2\xff\xff\xff\x10\x1d\xa4\xf0\xbb\xbf\xe3}\xee\xe2\xf6\xe9', 0x3) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, 0x0, 0x102000004) [ 3139.280216] ip_tables: iptables: counters copy to user failed while replacing table 09:34:28 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = dup(r0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpu_exclusive\x00', 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r2, r2, 0x0, 0x7fff) 09:34:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f000000c280)={&(0x7f000000c2c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x7008c743d3bba54}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f126408}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 09:34:28 executing program 0: socket$inet6(0xa, 0x5, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getpid() capget(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x7fffef80) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x8c\x00\xe2\xff\xff\xff\x10\x1d\xa4\xf0\xbb\xbf\xe3}\xee\xe2\xf6\xe9', 0x3) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, 0x0, 0x102000004) 09:34:28 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r3, @ANYBLOB="e1744701191a4c7fd5fdaf90a409ef9ea50d33"], 0x20}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'vlan0\x00', {0x2}, 0x227e}) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)="fa0c000026008152915a655267d7d137ab2ff96e27bf28b285fe3903a44a6017edcaa3a2b4dade3baee72569b51366463fedf5e787c05b0cb5927a3a7edfb4d078e9ae1504d489e058be9fafaa633705b6d4bf1301f2cd9ebf19254a1b0b9760612582bccd3983ce4474844c065e914dab8bbd52a45f431678bfe28633bf7c8dc83df809238ed87f1e393883ef750ce79c6f84e5e5de176e2f26024e4e3a3d8fbdaf3254022f265d8ccc5fd7205d9d9c2c4076c58162523082d81a39c43f782332ba8e82b4107a049cb82bba8b5edd80473844291437b8d22edca68047582e6be601e9df5e60a32c7cd202c5a30b8b606e43362739551cbb013b65e238f41cc00d7900140cf06b7bc9030f2563bcf9d4f4b7f48c79ec1a323d06276a0a3f8846b7c62b66f9709cabcaad234c53f3bc9b11165a6321f1db1057f076cfaebf8fbfa033fdc1dc2c3e314b36b3b3dd50425447da8bc5938ff7a17361100ab0b1ffeab7ac487411824224781eb9cdd4edef57ae91cd61f56a56c0599cfc3a491447207610f242da6cd6b030ae5f35e3181c44ae68665a023759b9ef4358db46107edc49194aed72b62600ec0ae4fc9065be059fc010cd6e6c9ea77c666b5e25693fbcf595e3e57113ff3a0e0c63d0604a16ea5adb8b7b54d47d4d8804612fde571863064528a49bf684d8a880a11afd819f186c177c49cac3ba1e9d1aa7ad0ff36b9e36d73c05b8abcaf96df0aacd2c9653f30ec29e1284af8749a9b2803c2727e992a6e65df192e1875c3e6d3553ffb7cb34ffee8f8ac0123c390454b42a0316952cbc9949376d9320ec207f77c2d5eb9e86d720cf8e9008a9a51932b45cd4cab21414c92d1c20f9e15e3fc16c7ce181e9ab19b01b70343934c823b1215e173405dd225233823cd4a604a77f06b14eb05b860e6cf8790335788c43abe9de1598e9952e5c7e6b2f8b17b1788ff3033e7d1635b008834bdf4054e6195e55000827c6202b227dde06f23ae21c00b371bdb6b7ea47b2e78844b52a77f9f0929790dcd7df2752e4af092d539c87c18751a5eb3eb4d38a2a0e070064b4ffaacff0543b115cc89f6c7e78f12147ebfcf1c80bac8f98deb59cbe670adb4cd1882a7e0ca4ba85ae9d445223ffb32301d46c0c9b05a830cbea0f72294ab3b539e4ed7cac2e22b235e8ceedeb643fb90b061a58368e76036ff3c1828d8a4e21288662afb6f2acab00d734db7ffc8373a928571819ce9ea6cb0956a6093b2b1f65662b76bc6ac8a19008cf08a6342d64674271451714e1d0e4ff7647fe7551d3cf16f37cb5547317e4fef51e4fb471de6ffbb90c2dd4a64266c4c2f75fc62e58ec306fb92212fb262d8b138899a3b53e67cde2f97d94cd2265cc04d32b29edf77e75b1f88372495cb2937f183bfc8604d72efb3af5c1f41b665b25592676b0ad2185478eade7e663e743e0e09cce6224c787ce1d789dc4a9b350bfe3a75f551341b11dd96cdaea17989dad565b16324a69842dc29a0ed16744ea5935598ac8238e146139189927a14d3b2863044b63b468ae75f48fab68ad235c36daffebfe4b468fc9b13198b1a683dcd3b3b4294ba22caddbacf8792d5783bc12e2538e4609e6bb6e9eeab98a06452c252a657f400260458c29fae8879097698c9aba2b2d889fc78f00d0d8271e09e8542b71018be6ff8cb03cb423e79303047d6ce124a00f64461b899bbddc4fe87ff677533391e16c01fa9cd6420bdc856c4c7f057b249ee9817efd6ab2cd02eb887d2631435ef2d5a1c7e57ac046ef615a1285ca89ade18ae69af3b3f8f76ca8aa060e373c0f99424fe1c5fadc72fe145fd2d4e4da4b78597890516857de188fcdaf15e3b0871b346cd39ab772cc25fab49e60c818cde934b137144adfc4fbde3ddbeccce9679f02b66746e822c67b3ed5fdafb4a936a2683b39a002115ecd62220605ca542610a80f2e3530aa89d3ed6ed9c57bbfd5db3a0b62786a608309a355443c616032008f9458b2f10db93e29470192370084e9322c309c9b23333b46d04e79176659503ad4b05deebb3c67d715ee6e84a89002ea6f7f71bf41ad36b42c8ae01c97174dbb641e50641aba60c291a84e906c013087370a5043e07d36fcead378f6c1e6ed3f5ac695124b82b20261cf7c9b82172e09c81d7d39eed72aee5678613a3c671ddd44f2c7c75a3b5d316aa165d56594fccab20903d7f503a08928e76c779918b2463b720ee6367a43e494a1db3ed1a80690e665570c01ce7eb979cdd95d4e1ca51730eb2cd63ffb2a56049601627c9788254945142dce85adbe1eb5997d16cdfe2a3758b13dc6bb121e2206ae64206868c1c5e89a101bc121719ac435dcad093f5f67cefd863cc7c8f3fc8a9dc62a83c115f1ce714b18af067951aa06dd9bb4ed98a820bf4704d156977caa4e6415b2a0df0386e2f6a061bf44abc8a397cf4abdafc51b78ebec9831f3c60fde6e62a1fd082903080aef20ff8de8bc0dced06f627514600539ca7114a088848da4244a85b4cf5b976d3a698c9a568d417e276917baba05d1a02181db2e6cc35986da4ccc63f8cd8e85a4a923dd27e2f499664601fdc44fdf46e2d2880cd5a7ece89c370234c438dcc0b43865cc62bad21e9dc37da758cbe01752f02fd9cbfe98630a30a78bb1239e25cdaba3d45d13cd3e7216d9d8070f3ff1a0cd9a0c91f29974c98f2677ba88c1091bde4be0cd37ea5eeb3b9cbb0360a00ddd40bbd60ffb8d4daa973ef0977c18dd4b38a605cee957872dca85787c37b6931293eddb77015faf143d1d28d24822d1a5d134799e8175a38b255aaf0e39b68c7f734e2e1e7044626daa84c9113e86d86ef63c863703703ea163319261dcf516c32d49478f7af30d52baa18ea6b0fc286c06b7e4ee019bf3fe74845a652d4a52aaa241a189c411e90e2953863a2bc4124e573607b94cdff19e280731824931a83f056cb5857672619b97ce38081592c0c319ce72e04e9eadce89775cfb5a4b2842663bc79bde565435cbcd46c4d505ceef7dde86512d39d4cb270deb7e79ebf8602bdc0d76c3e833d36ee08be10be634f44056c2f3fd6a328c7cd562e9c96ff7845fc3df81a876bb07f1cc833bed6ca1dc5cf935a4e959db6a4fae6edbc45357d8758faa9cd04cd41eb6efcfbd91658519bf520b90107f767d126854818485e98cb7ef56804de6950bf4e72098a949d14ea0e4e9f2534cf16cac0aeb970fc5c39f37e93910d5c99ac163792260d2280ec5c9a79bf295588ec23f524aae65f800f9c39e338f3d66b1a69e5488e04823eab36ae6ec6a2c5ce133ccd819a2b217b1ab7f4afd1697bb42929b3131358b5421c83f925571934442d0fd0ce3990d4e5d31d8b956f76df3c2f8533e46b892c88692ce009155dd5c7dbe4c86874b95762650f63e4b4aabb41320978b05b80cfe8fa2830904ef6b5c4f7ad46ca5dac151c9077c4d2c6adfe5066a8eb09a9bc6892330ea2b259a53c7137f8498254e1b04bf920c35c5333c4d640b11da60917ae921037b4aedbd6a0fbeeaf88ef6defc830552b4cbe3fe2a844806a48923dd428ea1c8d797bd8e6aabd1d1a8c97c8038b627120a77f4e47fa1f788aa9da268b0ec10fc453cb722685df76547dbf55a16663aa2b2a51e9c52456cccdf682592d1369dd12e3d3cb504e0f2d7004e60c297d5a25d0298045dae8fca8cb795ea57288b85a7e705820087d55ca6c42e920e2aa1174e128622cf64a197fd728cb2949536ba63e8bda8589261f1377caea37302e47228d3708a5666c66ba711d3c0b310a8c47e86d26597299d523c28c90e4feab43e950f398f7b61ccf7e6490d75ba6d8214e2d5ef2d7a088db490e1ebacf4e6eecc896cb1c704f0a8fcdf4ccb5dfa53eaf43d709287f36c10188c19fd59da7d73494de089c1b0a69ee22dcb847001c5317846a876bee1685d11c4db0673ec4c3a12008bb719650525b3c39e2b0469edda93830b3f1bde3e5b0b4637197866bb08c5858cf0d9876e3c7cad54169887bf9c80f9f4be362e1bc8c27f3434e9a918bac355c184bd899b9aebe6be20e70c0c69234342eb8b57aa9ffb7797a32df91cec2bbc90201658ca227abf1fe68e65363867e1f6ad79b827f363d64fbd3b188d95307d011c4ce5bf4407908c058eeb97ec98dd0ebfdab6b348fa387f2a7573cac25344c983e8fd526c30ee6d59fe99a30c7d7e2864aa22bfa49df5f32da68309cab3ed9c2ce69b6ecb8508ce28a43ebd6c809b8afd07a4606e664965d316f3707a3abee9bcdc32a78031b0171fb565d90c16cd56e5792c0cf618b799715f32538e38f493d4e19ec76fc8a07576a13975706bfc2bb1516c2d18a4385cc37a206eac6c9fb8d073572ba2671d2198abf24fdd0c40d079ae44962c26743b4bf5950ac5ee34c5d7bd60b364ce670958112c37b9829bed7e1327356d6b94af3ba020c2337b2dba37d00af8a128a614390cdde62ce871f948427fb5c187df9a1540a5cc71da1a86144acbfd94bf433f744f0c4f2a675eba3ed251c5b11b08dfefc726c0394a9b75121d88467ed4b2cd69819dfe50693a4a4c8370d3af12f41c0067283bbb5a90044a340fc357a11081a6c13bb9c32d9caa448479fd5f0302b6729ca7233094540b14546d6bcc15771c2686279b34f9c0914f5306d0fabd5979266ea01a17a22507e560dbf904dd62c40e2bcc", 0xcfa}], 0x1}, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4) sendmmsg(r4, &(0x7f0000009a00)=[{{&(0x7f0000000140)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "2c137a7c0d5523ae", "44d3992cc1f0bb7afae29faa0506cabf7b72c622638c09a22baec22a6679f693", "30a04da8", "841df16cf2411e80"}, 0x38) [ 3139.551913] ip_tables: iptables: counters copy to user failed while replacing table [ 3139.931532] ip_tables: iptables: counters copy to user failed while replacing table [ 3139.944205] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3140.038313] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.2'. 09:34:28 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x18, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff71ac1b7bdd08000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000006299eb6284070000000000fd85d16e7930af0ac3794899000000000005000000000000000000d94bfeadbfce0d4ed61c013b3c42000000ea0000000000000000000000000000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) 09:34:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000300)=ANY=[@ANYBLOB="282e7eae769ce2c0bc"], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:34:28 executing program 4: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xc83, 0x0, 0x2, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000340)={@local}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x43}, @dev={0xfe, 0x80, [], 0x22}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}) sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x3, 0x28, 0x1, 0x5, 0x0, 0x0, 0x5, 0x40000000}, 0x0) socket$inet(0x10, 0x80002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000180007041dfffd946f6105000a0003e8fe02080100350800080004000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x9882) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24004850, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_1\x00', 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRESOCT, @ANYBLOB="9f8200ab00000000000012000000"], 0x14}}, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000100)) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x40045564) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x1) 09:34:28 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r3, @ANYBLOB="e1744701191a4c7fd5fdaf90a409ef9ea50d33"], 0x20}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'vlan0\x00', {0x2}, 0x227e}) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)="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", 0xcfa}], 0x1}, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4) sendmmsg(r4, &(0x7f0000009a00)=[{{&(0x7f0000000140)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "2c137a7c0d5523ae", "44d3992cc1f0bb7afae29faa0506cabf7b72c622638c09a22baec22a6679f693", "30a04da8", "841df16cf2411e80"}, 0x38) 09:34:29 executing program 3: socket$inet6(0xa, 0x5, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getpid() capget(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x7fffef80) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x8c\x00\xe2\xff\xff\xff\x10\x1d\xa4\xf0\xbb\xbf\xe3}\xee\xe2\xf6\xe9', 0x3) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, 0x0, 0x102000004) [ 3140.540292] ip_tables: iptables: counters copy to user failed while replacing table [ 3140.558517] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.2'. 09:34:29 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r3, @ANYBLOB="e1744701191a4c7fd5fdaf90a409ef9ea50d33"], 0x20}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'vlan0\x00', {0x2}, 0x227e}) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)="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", 0xcfa}], 0x1}, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4) sendmmsg(r4, &(0x7f0000009a00)=[{{&(0x7f0000000140)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "2c137a7c0d5523ae", "44d3992cc1f0bb7afae29faa0506cabf7b72c622638c09a22baec22a6679f693", "30a04da8", "841df16cf2411e80"}, 0x38) 09:34:29 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r0, &(0x7f0000000300)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff4b67}}}, 0x78) 09:34:29 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r3, @ANYBLOB="e1744701191a4c7fd5fdaf90a409ef9ea50d33"], 0x20}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'vlan0\x00', {0x2}, 0x227e}) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)="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", 0xcfa}], 0x1}, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4) sendmmsg(r4, &(0x7f0000009a00)=[{{&(0x7f0000000140)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "2c137a7c0d5523ae", "44d3992cc1f0bb7afae29faa0506cabf7b72c622638c09a22baec22a6679f693", "30a04da8", "841df16cf2411e80"}, 0x38) [ 3140.895469] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.5'. 09:34:29 executing program 4: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xc83, 0x0, 0x2, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000340)={@local}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x43}, @dev={0xfe, 0x80, [], 0x22}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}) sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x3, 0x28, 0x1, 0x5, 0x0, 0x0, 0x5, 0x40000000}, 0x0) socket$inet(0x10, 0x80002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000180007041dfffd946f6105000a0003e8fe02080100350800080004000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x9882) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24004850, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_1\x00', 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRESOCT, @ANYBLOB="9f8200ab00000000000012000000"], 0x14}}, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000100)) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x40045564) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x1) 09:34:29 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x2, 0x18, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@private, @in=@local}, @sadb_x_filter={0x5, 0x1a, @in=@multicast1, @in=@remote}]}, 0x60}}, 0x0) 09:34:29 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r3, @ANYBLOB="e1744701191a4c7fd5fdaf90a409ef9ea50d33"], 0x20}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'vlan0\x00', {0x2}, 0x227e}) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)="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", 0xcfa}], 0x1}, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4) sendmmsg(r4, &(0x7f0000009a00)=[{{&(0x7f0000000140)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "2c137a7c0d5523ae", "44d3992cc1f0bb7afae29faa0506cabf7b72c622638c09a22baec22a6679f693", "30a04da8", "841df16cf2411e80"}, 0x38) [ 3141.166743] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.2'. 09:34:29 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x5ab) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xef, &(0x7f0000000140), &(0x7f00000000c0)=0x4) 09:34:30 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 09:34:30 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 09:34:30 executing program 4: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xc83, 0x0, 0x2, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000340)={@local}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x43}, @dev={0xfe, 0x80, [], 0x22}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}) sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x3, 0x28, 0x1, 0x5, 0x0, 0x0, 0x5, 0x40000000}, 0x0) socket$inet(0x10, 0x80002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000180007041dfffd946f6105000a0003e8fe02080100350800080004000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x9882) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24004850, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_1\x00', 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRESOCT, @ANYBLOB="9f8200ab00000000000012000000"], 0x14}}, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000100)) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x40045564) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x1) 09:34:30 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000340)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0285629, &(0x7f0000000280)={0x3}) 09:34:30 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r3, @ANYBLOB="e1744701191a4c7fd5fdaf90a409ef9ea50d33"], 0x20}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'vlan0\x00', {0x2}, 0x227e}) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)="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", 0xcfa}], 0x1}, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4) sendmmsg(r4, &(0x7f0000009a00)=[{{&(0x7f0000000140)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "2c137a7c0d5523ae", "44d3992cc1f0bb7afae29faa0506cabf7b72c622638c09a22baec22a6679f693", "30a04da8", "841df16cf2411e80"}, 0x38) 09:34:30 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 09:34:30 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000400)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000580), 0x0}, 0x20) 09:34:30 executing program 1: pipe(&(0x7f0000000340)={0xffffffffffffffff}) fsync(0xffffffffffffffff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = accept4$netrom(r1, &(0x7f00000001c0)={{}, [@netrom, @bcast, @default, @netrom, @remote, @rose, @rose]}, &(0x7f0000000300)=0x48, 0x80000) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000002c0)={0xa30000, 0x1, 0x10001, r2, 0x0, &(0x7f0000000280)={0x98090e, 0x80000001, [], @value64=0x2}}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) splice(r3, 0x0, r6, 0x0, 0x30007, 0x0) 09:34:30 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) [ 3142.133797] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3142.272502] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.5'. 09:34:31 executing program 4: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xc83, 0x0, 0x2, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000340)={@local}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x43}, @dev={0xfe, 0x80, [], 0x22}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}) sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x3, 0x28, 0x1, 0x5, 0x0, 0x0, 0x5, 0x40000000}, 0x0) socket$inet(0x10, 0x80002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000180007041dfffd946f6105000a0003e8fe02080100350800080004000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x9882) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24004850, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_1\x00', 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRESOCT, @ANYBLOB="9f8200ab00000000000012000000"], 0x14}}, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000100)) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x40045564) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x1) 09:34:31 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r3, @ANYBLOB="e1744701191a4c7fd5fdaf90a409ef9ea50d33"], 0x20}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'vlan0\x00', {0x2}, 0x227e}) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)="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", 0xcfa}], 0x1}, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4) sendmmsg(r4, &(0x7f0000009a00)=[{{&(0x7f0000000140)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "2c137a7c0d5523ae", "44d3992cc1f0bb7afae29faa0506cabf7b72c622638c09a22baec22a6679f693", "30a04da8", "841df16cf2411e80"}, 0x38) 09:34:32 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000400)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000580), 0x0}, 0x20) 09:34:32 executing program 1: pipe(&(0x7f0000000340)={0xffffffffffffffff}) fsync(0xffffffffffffffff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = accept4$netrom(r1, &(0x7f00000001c0)={{}, [@netrom, @bcast, @default, @netrom, @remote, @rose, @rose]}, &(0x7f0000000300)=0x48, 0x80000) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000002c0)={0xa30000, 0x1, 0x10001, r2, 0x0, &(0x7f0000000280)={0x98090e, 0x80000001, [], @value64=0x2}}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) splice(r3, 0x0, r6, 0x0, 0x30007, 0x0) 09:34:32 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000400)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000580), 0x0}, 0x20) [ 3143.575487] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.5'. 09:34:32 executing program 2: r0 = socket(0x15, 0x80005, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt(r0, 0x200000000114, 0x2718, 0x0, &(0x7f0000000040)) 09:34:33 executing program 2: r0 = socket(0x15, 0x80005, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt(r0, 0x200000000114, 0x2718, 0x0, &(0x7f0000000040)) 09:34:33 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000400)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000580), 0x0}, 0x20) 09:34:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0000000000000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb20200000000152c000000000000000001020014bb000000000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) 09:34:33 executing program 2: r0 = socket(0x15, 0x80005, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt(r0, 0x200000000114, 0x2718, 0x0, &(0x7f0000000040)) 09:34:33 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000400)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000580), 0x0}, 0x20) 09:34:33 executing program 1: pipe(&(0x7f0000000340)={0xffffffffffffffff}) fsync(0xffffffffffffffff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = accept4$netrom(r1, &(0x7f00000001c0)={{}, [@netrom, @bcast, @default, @netrom, @remote, @rose, @rose]}, &(0x7f0000000300)=0x48, 0x80000) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000002c0)={0xa30000, 0x1, 0x10001, r2, 0x0, &(0x7f0000000280)={0x98090e, 0x80000001, [], @value64=0x2}}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) splice(r3, 0x0, r6, 0x0, 0x30007, 0x0) 09:34:33 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:34:33 executing program 2: r0 = socket(0x15, 0x80005, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt(r0, 0x200000000114, 0x2718, 0x0, &(0x7f0000000040)) 09:34:33 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000400)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000580), 0x0}, 0x20) 09:34:33 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000400)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000580), 0x0}, 0x20) 09:34:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0000000000000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb20200000000152c000000000000000001020014bb000000000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) 09:34:34 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "ec"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5}]}, 0x60}}, 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) 09:34:34 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip_mr_vif\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 09:34:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/138, 0xff8c) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) read(0xffffffffffffffff, &(0x7f0000000300)=""/138, 0xff8c) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f00000004c0)=ANY=[]) socket$kcm(0x29, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0100000000ddffff1f000c00000008000400c0ffffff"], 0x1c}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x80) 09:34:34 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@getae={0x4c, 0x1f, 0x1, 0x0, 0x0, {{@in6=@private2}, @in=@multicast2}, [@mark={0xc}]}, 0x4c}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0xf1, 0x0) 09:34:34 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "ec"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5}]}, 0x60}}, 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) 09:34:34 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "ec"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5}]}, 0x60}}, 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) 09:34:34 executing program 1: pipe(&(0x7f0000000340)={0xffffffffffffffff}) fsync(0xffffffffffffffff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = accept4$netrom(r1, &(0x7f00000001c0)={{}, [@netrom, @bcast, @default, @netrom, @remote, @rose, @rose]}, &(0x7f0000000300)=0x48, 0x80000) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000002c0)={0xa30000, 0x1, 0x10001, r2, 0x0, &(0x7f0000000280)={0x98090e, 0x80000001, [], @value64=0x2}}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) splice(r3, 0x0, r6, 0x0, 0x30007, 0x0) 09:34:34 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "ec"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5}]}, 0x60}}, 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) 09:34:35 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) tkill(r0, 0x23) ptrace$cont(0x1f, r0, 0x0, 0x7) 09:34:35 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "ec"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5}]}, 0x60}}, 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) 09:34:35 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "ec"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5}]}, 0x60}}, 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) 09:34:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0000000000000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb20200000000152c000000000000000001020014bb000000000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) 09:34:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000140)=""/128) r2 = socket(0x11, 0x800000003, 0x8) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x58000, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="059cb308021e3a0635c9147526e2183cf962ee97e718875bfd75bfb8c62edd0d0070d8fb24d77442a11ea629926370de7e74fa5bb22e83156e79c83c6fa12ebbc0345fc7d7a48216e01edcac0c2147a5f70b", @ANYRES16], 0x18}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x5, 0x9, 0x9, 0x9, 0x11, 0xe3}, &(0x7f0000000080)=0x9c) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x7, 0x7fffffff}, &(0x7f00000001c0)=0xc) ioctl$KDDELIO(r3, 0x4b35, 0x5c915de9) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 09:34:35 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ustat(0x0, 0x0) 09:34:35 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "ec"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5}]}, 0x60}}, 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) 09:34:35 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x7132}) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) dup2(r0, r1) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, &(0x7f0000000000), 0xff8e}]) 09:34:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0000000000000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb20200000000152c000000000000000001020014bb000000000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) 09:34:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/138, 0xff8c) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) read(0xffffffffffffffff, &(0x7f0000000300)=""/138, 0xff8c) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f00000004c0)=ANY=[]) socket$kcm(0x29, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0100000000ddffff1f000c00000008000400c0ffffff"], 0x1c}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x80) 09:34:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/138, 0xff8c) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) read(0xffffffffffffffff, &(0x7f0000000300)=""/138, 0xff8c) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f00000004c0)=ANY=[]) socket$kcm(0x29, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0100000000ddffff1f000c00000008000400c0ffffff"], 0x1c}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x80) 09:34:36 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/138, 0xff8c) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) read(0xffffffffffffffff, &(0x7f0000000300)=""/138, 0xff8c) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f00000004c0)=ANY=[]) socket$kcm(0x29, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0100000000ddffff1f000c00000008000400c0ffffff"], 0x1c}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x80) 09:34:36 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x0, 0x0, 0x0) 09:34:36 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3200, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002000000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(0xffffffffffffffff) 09:34:36 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000180)=""/236) 09:34:36 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x0) setsockopt(r0, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) 09:34:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000140)=""/128) r2 = socket(0x11, 0x800000003, 0x8) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x58000, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="059cb308021e3a0635c9147526e2183cf962ee97e718875bfd75bfb8c62edd0d0070d8fb24d77442a11ea629926370de7e74fa5bb22e83156e79c83c6fa12ebbc0345fc7d7a48216e01edcac0c2147a5f70b", @ANYRES16], 0x18}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x5, 0x9, 0x9, 0x9, 0x11, 0xe3}, &(0x7f0000000080)=0x9c) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x7, 0x7fffffff}, &(0x7f00000001c0)=0xc) ioctl$KDDELIO(r3, 0x4b35, 0x5c915de9) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 09:34:36 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="4664b2f75d986176a6d4adc532befe27faa1d423db4527d1cc955641adf9ef60abdac56b649f09eea9545d2824a48c1e71bf2f68553791f5f2ecff80654f4423a0c7b89456316fe8ada6cf5f9bb0d8a7ff46", 0x52}], 0x1, 0x0, 0x1358}, 0x4000880) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) r1 = socket$can_raw(0x1d, 0x3, 0x1) dup3(r1, r0, 0x0) 09:34:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/138, 0xff8c) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) read(0xffffffffffffffff, &(0x7f0000000300)=""/138, 0xff8c) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f00000004c0)=ANY=[]) socket$kcm(0x29, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0100000000ddffff1f000c00000008000400c0ffffff"], 0x1c}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x80) 09:34:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/138, 0xff8c) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) read(0xffffffffffffffff, &(0x7f0000000300)=""/138, 0xff8c) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f00000004c0)=ANY=[]) socket$kcm(0x29, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0100000000ddffff1f000c00000008000400c0ffffff"], 0x1c}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x80) 09:34:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/138, 0xff8c) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) read(0xffffffffffffffff, &(0x7f0000000300)=""/138, 0xff8c) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f00000004c0)=ANY=[]) socket$kcm(0x29, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0100000000ddffff1f000c00000008000400c0ffffff"], 0x1c}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x80) 09:34:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x80341, 0x0) write$9p(r0, &(0x7f0000000080)="0600000000000000c9b90003040500002a1ff7adf576f3790f61bc2c197cbf8d63735e09ab8383afd2de1a5587fe067fde18fa64249e1dbae8886cc4318c81733d8af5a72e2a678a537d233abc5afa4d18f8d88392cafbbf33b3aacfcf04f7b0bdd78687423a6bff", 0x68) 09:34:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000140)=""/128) r2 = socket(0x11, 0x800000003, 0x8) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x58000, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="059cb308021e3a0635c9147526e2183cf962ee97e718875bfd75bfb8c62edd0d0070d8fb24d77442a11ea629926370de7e74fa5bb22e83156e79c83c6fa12ebbc0345fc7d7a48216e01edcac0c2147a5f70b", @ANYRES16], 0x18}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x5, 0x9, 0x9, 0x9, 0x11, 0xe3}, &(0x7f0000000080)=0x9c) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x7, 0x7fffffff}, &(0x7f00000001c0)=0xc) ioctl$KDDELIO(r3, 0x4b35, 0x5c915de9) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 09:34:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x80341, 0x0) write$9p(r0, &(0x7f0000000080)="0600000000000000c9b90003040500002a1ff7adf576f3790f61bc2c197cbf8d63735e09ab8383afd2de1a5587fe067fde18fa64249e1dbae8886cc4318c81733d8af5a72e2a678a537d233abc5afa4d18f8d88392cafbbf33b3aacfcf04f7b0bdd78687423a6bff", 0x68) 09:34:37 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x100000530) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socket(0x10, 0x3, 0x0) 09:34:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x80341, 0x0) write$9p(r0, &(0x7f0000000080)="0600000000000000c9b90003040500002a1ff7adf576f3790f61bc2c197cbf8d63735e09ab8383afd2de1a5587fe067fde18fa64249e1dbae8886cc4318c81733d8af5a72e2a678a537d233abc5afa4d18f8d88392cafbbf33b3aacfcf04f7b0bdd78687423a6bff", 0x68) 09:34:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/138, 0xff8c) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) read(0xffffffffffffffff, &(0x7f0000000300)=""/138, 0xff8c) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f00000004c0)=ANY=[]) socket$kcm(0x29, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0100000000ddffff1f000c00000008000400c0ffffff"], 0x1c}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x80) 09:34:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/138, 0xff8c) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) read(0xffffffffffffffff, &(0x7f0000000300)=""/138, 0xff8c) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f00000004c0)=ANY=[]) socket$kcm(0x29, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0100000000ddffff1f000c00000008000400c0ffffff"], 0x1c}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x80) 09:34:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x80341, 0x0) write$9p(r0, &(0x7f0000000080)="0600000000000000c9b90003040500002a1ff7adf576f3790f61bc2c197cbf8d63735e09ab8383afd2de1a5587fe067fde18fa64249e1dbae8886cc4318c81733d8af5a72e2a678a537d233abc5afa4d18f8d88392cafbbf33b3aacfcf04f7b0bdd78687423a6bff", 0x68) 09:34:38 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/138, 0xff8c) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) read(0xffffffffffffffff, &(0x7f0000000300)=""/138, 0xff8c) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f00000004c0)=ANY=[]) socket$kcm(0x29, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0100000000ddffff1f000c00000008000400c0ffffff"], 0x1c}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x80) 09:34:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000140)=""/128) r2 = socket(0x11, 0x800000003, 0x8) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x58000, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="059cb308021e3a0635c9147526e2183cf962ee97e718875bfd75bfb8c62edd0d0070d8fb24d77442a11ea629926370de7e74fa5bb22e83156e79c83c6fa12ebbc0345fc7d7a48216e01edcac0c2147a5f70b", @ANYRES16], 0x18}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x5, 0x9, 0x9, 0x9, 0x11, 0xe3}, &(0x7f0000000080)=0x9c) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x7, 0x7fffffff}, &(0x7f00000001c0)=0xc) ioctl$KDDELIO(r3, 0x4b35, 0x5c915de9) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 09:34:39 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x100000530) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socket(0x10, 0x3, 0x0) 09:34:40 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0x12, r0, 0x0) 09:34:40 executing program 0: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$dmmidi(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvfrom$netrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 09:34:40 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0x0], @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x40, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2f}], "000022ebffff0400"}}}}}}}, 0x0) 09:34:40 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x3, 0x400}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x1}]}}}]}, 0x44}}, 0x0) 09:34:40 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x203, 0x4) bind$inet(r0, &(0x7f0000000300)={0x2, 0x200000000004e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='lp\x00', 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000300)={0x1, [0x0]}, &(0x7f00000002c0)=0x24f) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0x100000530) [ 3151.931333] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring 09:34:40 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000) 09:34:40 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x110, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\xc8\xdb\xb5\xd5\xe0q\xf6\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQ\xef\xef\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) 09:34:40 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0xa4, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x6c, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x7ff}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x3ff}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x7}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8}], @vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x4}, @IFLA_VTI_IKEY={0x8, 0x2, 0xef6}, @IFLA_VTI_IKEY={0x8, 0x2, 0x4b}, @IFLA_VTI_OKEY={0x8, 0x3, 0x5}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x9}, @IFLA_VTI_IKEY={0x8, 0x2, 0x40}]]}}}, @IFLA_IFALIASn={0x4}, @IFLA_MASTER={0x8}]}, 0xa4}}, 0x0) 09:34:40 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0xc01, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) 09:34:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4082, 0xff2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:34:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x8}, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0xfd, 0x4, 0x0, 0x0, 0x0, 0xffe000, 0x8a26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0xab80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001ac0)={0xe23, {{0xa, 0x4e22, 0x4a, @loopback, 0x6}}}, 0x90) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 09:34:41 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0xa4, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x6c, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x7ff}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x3ff}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x7}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8}], @vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x4}, @IFLA_VTI_IKEY={0x8, 0x2, 0xef6}, @IFLA_VTI_IKEY={0x8, 0x2, 0x4b}, @IFLA_VTI_OKEY={0x8, 0x3, 0x5}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x9}, @IFLA_VTI_IKEY={0x8, 0x2, 0x40}]]}}}, @IFLA_IFALIASn={0x4}, @IFLA_MASTER={0x8}]}, 0xa4}}, 0x0) 09:34:41 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x10, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 09:34:41 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x100000530) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socket(0x10, 0x3, 0x0) [ 3153.479668] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3153.559967] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3154.846435] syz-executor.2 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3154.870869] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3154.875998] CPU: 1 PID: 6353 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 3154.883780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3154.893123] Call Trace: [ 3154.895709] dump_stack+0x1b2/0x283 [ 3154.899424] dump_header+0x178/0x7aa [ 3154.903134] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3154.908156] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3154.913255] ? ___ratelimit+0x2cd/0x522 [ 3154.917225] oom_kill_process.cold+0x10/0xc16 [ 3154.921717] ? lock_downgrade+0x6e0/0x6e0 [ 3154.925870] out_of_memory+0x2d5/0x10f0 [ 3154.929851] ? oom_killer_disable+0x1c0/0x1c0 [ 3154.934339] ? mutex_trylock+0x152/0x1a0 [ 3154.938401] __alloc_pages_nodemask+0x2556/0x2730 [ 3154.943256] ? HARDIRQ_verbose+0x10/0x10 [ 3154.947315] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3154.952175] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3154.957189] ? kmem_cache_alloc_node+0x387/0x400 [ 3154.961949] copy_process.part.0+0x26a/0x6fa0 [ 3154.966441] ? check_preemption_disabled+0x35/0x240 [ 3154.971456] ? perf_trace_lock+0x109/0x4b0 [ 3154.975685] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 3154.980607] ? HARDIRQ_verbose+0x10/0x10 [ 3154.984675] ? __cleanup_sighand+0x40/0x40 [ 3154.988903] ? lock_downgrade+0x6e0/0x6e0 [ 3154.993057] _do_fork+0x180/0xc80 [ 3154.996506] ? put_timespec64+0xaa/0xf0 [ 3155.000470] ? fork_idle+0x270/0x270 [ 3155.004182] ? SyS_clock_gettime+0xf5/0x180 [ 3155.008492] ? SyS_clock_settime+0x1a0/0x1a0 [ 3155.012895] ? do_syscall_64+0x4c/0x640 [ 3155.016866] ? sys_vfork+0x20/0x20 [ 3155.020402] do_syscall_64+0x1d5/0x640 [ 3155.024291] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3155.029474] RIP: 0033:0x45b08a [ 3155.032655] RSP: 002b:00007ffc677c9dc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3155.040361] RAX: ffffffffffffffda RBX: 00007ffc677c9dc0 RCX: 000000000045b08a [ 3155.047625] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3155.054891] RBP: 00007ffc677c9e00 R08: 0000000000000001 R09: 000000000206e940 [ 3155.062155] R10: 000000000206ec10 R11: 0000000000000246 R12: 0000000000000001 [ 3155.069421] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc677c9e50 [ 3155.079235] Mem-Info: [ 3155.081732] active_anon:1020999 inactive_anon:215622 isolated_anon:0 [ 3155.081732] active_file:247 inactive_file:602 isolated_file:16 [ 3155.081732] unevictable:10062 dirty:37 writeback:4 unstable:0 [ 3155.081732] slab_reclaimable:21708 slab_unreclaimable:169771 [ 3155.081732] mapped:58246 shmem:8366 pagetables:37425 bounce:0 [ 3155.081732] free:28663 free_pcp:29 free_cma:0 [ 3155.116082] Node 0 active_anon:1537276kB inactive_anon:58924kB active_file:212kB inactive_file:1068kB unevictable:16156kB isolated(anon):0kB isolated(file):120kB mapped:226000kB dirty:132kB writeback:8kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 794624kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3155.145016] Node 1 active_anon:2546720kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5604kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3155.172779] Node 0 DMA free:10420kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3155.199261] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3155.205281] Node 0 DMA32 free:51712kB min:36296kB low:45368kB high:54440kB active_anon:1537108kB inactive_anon:58924kB active_file:236kB inactive_file:116kB unevictable:16156kB writepending:0kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:16960kB pagetables:61032kB bounce:0kB free_pcp:448kB local_pcp:0kB free_cma:0kB [ 3155.235338] lowmem_reserve[]: 0 0 0 0 0 09:34:43 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0xa4, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x6c, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x7ff}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x3ff}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x7}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8}], @vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x4}, @IFLA_VTI_IKEY={0x8, 0x2, 0xef6}, @IFLA_VTI_IKEY={0x8, 0x2, 0x4b}, @IFLA_VTI_OKEY={0x8, 0x3, 0x5}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x9}, @IFLA_VTI_IKEY={0x8, 0x2, 0x40}]]}}}, @IFLA_IFALIASn={0x4}, @IFLA_MASTER={0x8}]}, 0xa4}}, 0x0) 09:34:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x8}, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0xfd, 0x4, 0x0, 0x0, 0x0, 0xffe000, 0x8a26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0xab80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001ac0)={0xe23, {{0xa, 0x4e22, 0x4a, @loopback, 0x6}}}, 0x90) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 09:34:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4082, 0xff2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:34:43 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff800, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2, 0x0, @rand_addr, 0x8000}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) syz_open_dev$loop(0x0, 0x5, 0x400680) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) 09:34:43 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x100000530) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socket(0x10, 0x3, 0x0) [ 3155.239301] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3155.267548] lowmem_reserve[]: 0 0 0 0 0 [ 3155.276778] Node 1 Normal free:55644kB min:53592kB low:66988kB high:80384kB active_anon:2546720kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39104kB pagetables:88668kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3155.312321] lowmem_reserve[]: 0 0 0 0 0 [ 3155.316323] Node 0 DMA: 5*4kB (UE) 2*8kB (UM) 3*16kB (UM) 1*32kB (E) 5*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10420kB [ 3155.340959] Node 0 DMA32: 847*4kB (UME) 366*8kB (UME) 245*16kB (UME) 357*32kB (UME) 119*64kB (UME) 31*128kB (UME) 5*256kB (UM) 6*512kB (UM) 1*1024kB (E) 3*2048kB (M) 1*4096kB (M) = 48860kB [ 3155.415001] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3155.439008] Node 1 Normal: 201*4kB (UMEH) 315*8kB (UMEH) 856*16kB (UMEH) 599*32kB (UMEH) 212*64kB (UMEH) 44*128kB (UME) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55644kB [ 3155.459723] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3155.468640] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3155.478019] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3155.487021] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3155.495711] 14107 total pagecache pages [ 3155.499729] 0 pages in swap cache [ 3155.503295] Swap cache stats: add 0, delete 0, find 0/0 [ 3155.508687] Free swap = 0kB [ 3155.511918] Total swap = 0kB [ 3155.514992] 1965979 pages RAM [ 3155.518122] 0 pages HighMem/MovableOnly [ 3155.522742] 338456 pages reserved [ 3155.526287] 0 pages cma reserved [ 3155.529646] Out of memory: Kill process 15832 (syz-executor.1) score 1005 or sacrifice child [ 3155.559907] Killed process 15832 (syz-executor.1) total-vm:74844kB, anon-rss:2192kB, file-rss:35712kB, shmem-rss:0kB [ 3155.785514] syz-executor.2 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3155.798405] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3155.804209] CPU: 1 PID: 6353 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 3155.811999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3155.821343] Call Trace: [ 3155.823925] dump_stack+0x1b2/0x283 [ 3155.827546] dump_header+0x178/0x7aa [ 3155.831258] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3155.836271] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3155.841370] ? ___ratelimit+0x2cd/0x522 [ 3155.845342] oom_kill_process.cold+0x10/0xc16 [ 3155.849833] ? lock_acquire+0x170/0x3f0 [ 3155.853804] ? lock_downgrade+0x6e0/0x6e0 [ 3155.857950] out_of_memory+0x2d5/0x10f0 [ 3155.861924] ? oom_killer_disable+0x1c0/0x1c0 [ 3155.866438] ? mutex_trylock+0x152/0x1a0 [ 3155.870494] __alloc_pages_nodemask+0x2556/0x2730 [ 3155.875346] ? HARDIRQ_verbose+0x10/0x10 [ 3155.879396] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3155.884246] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3155.889261] ? kmem_cache_alloc_node+0x387/0x400 [ 3155.894019] copy_process.part.0+0x26a/0x6fa0 [ 3155.898507] ? check_preemption_disabled+0x35/0x240 [ 3155.903519] ? perf_trace_lock+0x109/0x4b0 [ 3155.907751] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 3155.912671] ? HARDIRQ_verbose+0x10/0x10 [ 3155.916736] ? __cleanup_sighand+0x40/0x40 [ 3155.920961] ? lock_downgrade+0x6e0/0x6e0 [ 3155.925108] _do_fork+0x180/0xc80 [ 3155.928556] ? put_timespec64+0xaa/0xf0 [ 3155.932523] ? fork_idle+0x270/0x270 [ 3155.936242] ? SyS_clock_gettime+0xf5/0x180 [ 3155.940557] ? SyS_clock_settime+0x1a0/0x1a0 [ 3155.944956] ? do_syscall_64+0x4c/0x640 [ 3155.948994] ? sys_vfork+0x20/0x20 [ 3155.952519] do_syscall_64+0x1d5/0x640 [ 3155.956404] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3155.961576] RIP: 0033:0x45b08a [ 3155.964748] RSP: 002b:00007ffc677c9dc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3155.972444] RAX: ffffffffffffffda RBX: 00007ffc677c9dc0 RCX: 000000000045b08a [ 3155.980273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3155.987522] RBP: 00007ffc677c9e00 R08: 0000000000000001 R09: 000000000206e940 [ 3155.994788] R10: 000000000206ec10 R11: 0000000000000246 R12: 0000000000000001 [ 3156.002042] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc677c9e50 [ 3156.011280] Mem-Info: [ 3156.013709] active_anon:1020459 inactive_anon:215622 isolated_anon:0 [ 3156.013709] active_file:97 inactive_file:153 isolated_file:0 [ 3156.013709] unevictable:10062 dirty:8 writeback:0 unstable:0 [ 3156.013709] slab_reclaimable:21700 slab_unreclaimable:169651 [ 3156.013709] mapped:57839 shmem:8366 pagetables:37399 bounce:0 [ 3156.013709] free:29917 free_pcp:162 free_cma:0 [ 3156.048512] Node 0 active_anon:1535116kB inactive_anon:58924kB active_file:480kB inactive_file:3688kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:227652kB dirty:32kB writeback:0kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 792576kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3156.077959] Node 1 active_anon:2546720kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5604kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3156.106114] Node 0 DMA free:10420kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3156.167026] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3156.172266] Node 0 DMA32 free:52216kB min:36296kB low:45368kB high:54440kB active_anon:1534948kB inactive_anon:58924kB active_file:788kB inactive_file:748kB unevictable:16156kB writepending:32kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:16928kB pagetables:60928kB bounce:0kB free_pcp:1176kB local_pcp:484kB free_cma:0kB [ 3156.223328] lowmem_reserve[]: 0 0 0 0 0 [ 3156.227334] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3156.256513] lowmem_reserve[]: 0 0 0 0 0 [ 3156.260589] Node 1 Normal free:55596kB min:53592kB low:66988kB high:80384kB active_anon:2546720kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39136kB pagetables:88668kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3156.292831] lowmem_reserve[]: 0 0 0 0 0 [ 3156.297375] Node 0 DMA: 5*4kB (UE) 2*8kB (UM) 3*16kB (UM) 1*32kB (E) 5*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10420kB [ 3156.320851] Node 0 DMA32: 1034*4kB (UME) 491*8kB (UME) 257*16kB (UME) 360*32kB (UME) 122*64kB (UME) 31*128kB (UME) 5*256kB (UM) 6*512kB (UM) 1*1024kB (E) 4*2048kB (M) 1*4096kB (M) = 53136kB [ 3156.350052] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3156.361562] Node 1 Normal: 201*4kB (UMEH) 315*8kB (UMEH) 853*16kB (UMEH) 597*32kB (UMEH) 213*64kB (UMEH) 44*128kB (UME) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55596kB [ 3156.399340] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3156.438122] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3156.468025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3156.494231] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3156.521500] 13934 total pagecache pages [ 3156.533336] 0 pages in swap cache [ 3156.537459] Swap cache stats: add 0, delete 0, find 0/0 [ 3156.543879] Free swap = 0kB [ 3156.547404] Total swap = 0kB [ 3156.550911] 1965979 pages RAM [ 3156.554194] 0 pages HighMem/MovableOnly [ 3156.558287] 338456 pages reserved [ 3156.561913] 0 pages cma reserved [ 3156.565271] Out of memory: Kill process 15844 (syz-executor.1) score 1005 or sacrifice child [ 3156.586994] Killed process 15844 (syz-executor.1) total-vm:74844kB, anon-rss:2192kB, file-rss:35712kB, shmem-rss:0kB [ 3156.716837] syz-executor.4 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3156.773735] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3156.778876] CPU: 0 PID: 13828 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 3156.786750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3156.796092] Call Trace: [ 3156.798659] dump_stack+0x1b2/0x283 [ 3156.802263] dump_header+0x178/0x7aa [ 3156.805951] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3156.810943] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3156.816022] ? ___ratelimit+0x2cd/0x522 [ 3156.819969] oom_kill_process.cold+0x10/0xc16 [ 3156.824439] ? lock_downgrade+0x6e0/0x6e0 [ 3156.828564] out_of_memory+0x2d5/0x10f0 [ 3156.832563] ? oom_killer_disable+0x1c0/0x1c0 [ 3156.837031] ? mutex_trylock+0x152/0x1a0 [ 3156.841068] __alloc_pages_nodemask+0x2556/0x2730 [ 3156.845889] ? HARDIRQ_verbose+0x10/0x10 [ 3156.849933] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3156.854759] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3156.859757] ? kmem_cache_alloc_node+0x387/0x400 [ 3156.864491] copy_process.part.0+0x26a/0x6fa0 [ 3156.868960] ? check_preemption_disabled+0x35/0x240 [ 3156.873991] ? perf_trace_lock+0x109/0x4b0 [ 3156.878250] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 3156.883168] ? HARDIRQ_verbose+0x10/0x10 [ 3156.887208] ? __cleanup_sighand+0x40/0x40 [ 3156.891416] ? lock_downgrade+0x6e0/0x6e0 [ 3156.895546] _do_fork+0x180/0xc80 [ 3156.899007] ? put_timespec64+0xaa/0xf0 [ 3156.902955] ? fork_idle+0x270/0x270 [ 3156.906647] ? SyS_clock_gettime+0xf5/0x180 [ 3156.910946] ? SyS_clock_settime+0x1a0/0x1a0 [ 3156.915327] ? do_syscall_64+0x4c/0x640 [ 3156.919273] ? sys_vfork+0x20/0x20 [ 3156.922830] do_syscall_64+0x1d5/0x640 [ 3156.926702] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3156.932000] RIP: 0033:0x45b08a [ 3156.935166] RSP: 002b:00007ffe62ee3ab0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3156.942978] RAX: ffffffffffffffda RBX: 00007ffe62ee3ab0 RCX: 000000000045b08a [ 3156.950241] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3156.957487] RBP: 00007ffe62ee3af0 R08: 0000000000000001 R09: 0000000001167940 [ 3156.964735] R10: 0000000001167c10 R11: 0000000000000246 R12: 0000000000000001 [ 3156.971985] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe62ee3b40 [ 3156.986640] Mem-Info: [ 3156.989687] active_anon:1019934 inactive_anon:215622 isolated_anon:0 [ 3156.989687] active_file:16 inactive_file:39 isolated_file:0 [ 3156.989687] unevictable:10062 dirty:3 writeback:1 unstable:0 [ 3156.989687] slab_reclaimable:21700 slab_unreclaimable:169678 [ 3156.989687] mapped:57671 shmem:8366 pagetables:37398 bounce:0 [ 3156.989687] free:30613 free_pcp:33 free_cma:0 [ 3157.066507] Node 0 active_anon:1533016kB inactive_anon:58924kB active_file:176kB inactive_file:360kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:225432kB dirty:12kB writeback:4kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 790528kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3157.095309] Node 1 active_anon:2546720kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5604kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3157.129984] Node 0 DMA free:10420kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3157.184656] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3157.200376] Node 0 DMA32 free:55528kB min:36296kB low:45368kB high:54440kB active_anon:1532848kB inactive_anon:58924kB active_file:272kB inactive_file:360kB unevictable:16156kB writepending:16kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:16896kB pagetables:60924kB bounce:0kB free_pcp:900kB local_pcp:232kB free_cma:0kB [ 3157.231398] lowmem_reserve[]: 0 0 0 0 0 [ 3157.235479] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3157.261306] lowmem_reserve[]: 0 0 0 0 0 [ 3157.265879] Node 1 Normal free:55596kB min:53592kB low:66988kB high:80384kB active_anon:2546720kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39136kB pagetables:88668kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3157.296022] lowmem_reserve[]: 0 0 0 0 0 [ 3157.300617] Node 0 DMA: 5*4kB (UE) 2*8kB (UM) 3*16kB (UM) 1*32kB (E) 5*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10420kB [ 3157.316951] Node 0 DMA32: 1186*4kB (UME) 499*8kB (UME) 257*16kB (UME) 362*32kB (UME) 122*64kB (UME) 31*128kB (UME) 5*256kB (UM) 6*512kB (UM) 1*1024kB (E) 5*2048kB (M) 1*4096kB (M) = 55920kB [ 3157.336243] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3157.381764] Node 1 Normal: 203*4kB (UMEH) 315*8kB (UMEH) 853*16kB (UMEH) 597*32kB (UMEH) 213*64kB (UMEH) 44*128kB (UME) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55604kB [ 3157.406938] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3157.415998] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3157.424922] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3157.460571] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3157.469422] 14071 total pagecache pages [ 3157.473426] 0 pages in swap cache [ 3157.476862] Swap cache stats: add 0, delete 0, find 0/0 [ 3157.482263] Free swap = 0kB [ 3157.485263] Total swap = 0kB [ 3157.488257] 1965979 pages RAM [ 3157.492094] 0 pages HighMem/MovableOnly [ 3157.496061] 338456 pages reserved [ 3157.499499] 0 pages cma reserved [ 3157.502942] Out of memory: Kill process 15856 (syz-executor.1) score 1005 or sacrifice child [ 3157.511567] Killed process 15856 (syz-executor.1) total-vm:74844kB, anon-rss:2192kB, file-rss:35712kB, shmem-rss:0kB [ 3157.550555] oom_reaper: reaped process 15856 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3157.572326] syz-executor.4 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3157.599473] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3157.604996] CPU: 1 PID: 13828 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 3157.612870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3157.622210] Call Trace: [ 3157.624783] dump_stack+0x1b2/0x283 [ 3157.628414] dump_header+0x178/0x7aa [ 3157.632125] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3157.637127] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3157.642213] ? ___ratelimit+0x2cd/0x522 [ 3157.646166] oom_kill_process.cold+0x10/0xc16 [ 3157.650644] ? lock_downgrade+0x6e0/0x6e0 [ 3157.654779] out_of_memory+0x2d5/0x10f0 [ 3157.658730] ? oom_killer_disable+0x1c0/0x1c0 [ 3157.663239] ? mutex_trylock+0x152/0x1a0 [ 3157.667281] __alloc_pages_nodemask+0x2556/0x2730 [ 3157.672126] ? HARDIRQ_verbose+0x10/0x10 [ 3157.676180] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3157.681015] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3157.686102] ? kmem_cache_alloc_node+0x387/0x400 [ 3157.690849] copy_process.part.0+0x26a/0x6fa0 [ 3157.695329] ? check_preemption_disabled+0x35/0x240 [ 3157.700332] ? perf_trace_lock+0x109/0x4b0 [ 3157.704565] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 3157.709468] ? HARDIRQ_verbose+0x10/0x10 [ 3157.713582] ? __cleanup_sighand+0x40/0x40 [ 3157.717800] ? lock_downgrade+0x6e0/0x6e0 [ 3157.721935] _do_fork+0x180/0xc80 [ 3157.725381] ? put_timespec64+0xaa/0xf0 [ 3157.729328] ? fork_idle+0x270/0x270 [ 3157.733035] ? SyS_clock_gettime+0xf5/0x180 [ 3157.737382] ? SyS_clock_settime+0x1a0/0x1a0 [ 3157.741787] ? do_syscall_64+0x4c/0x640 [ 3157.745755] ? sys_vfork+0x20/0x20 [ 3157.749293] do_syscall_64+0x1d5/0x640 [ 3157.753185] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3157.758367] RIP: 0033:0x45b08a [ 3157.761548] RSP: 002b:00007ffe62ee3ab0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 09:34:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x8}, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0xfd, 0x4, 0x0, 0x0, 0x0, 0xffe000, 0x8a26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0xab80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001ac0)={0xe23, {{0xa, 0x4e22, 0x4a, @loopback, 0x6}}}, 0x90) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 3157.769255] RAX: ffffffffffffffda RBX: 00007ffe62ee3ab0 RCX: 000000000045b08a [ 3157.776520] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3157.783786] RBP: 00007ffe62ee3af0 R08: 0000000000000001 R09: 0000000001167940 [ 3157.791049] R10: 0000000001167c10 R11: 0000000000000246 R12: 0000000000000001 [ 3157.798305] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe62ee3b40 [ 3157.847550] Mem-Info: [ 3157.871667] active_anon:1019396 inactive_anon:215622 isolated_anon:0 [ 3157.871667] active_file:21 inactive_file:196 isolated_file:28 [ 3157.871667] unevictable:10062 dirty:3 writeback:0 unstable:0 [ 3157.871667] slab_reclaimable:21700 slab_unreclaimable:169652 [ 3157.871667] mapped:57801 shmem:8366 pagetables:37361 bounce:0 [ 3157.871667] free:31125 free_pcp:24 free_cma:0 [ 3157.906652] Node 0 active_anon:1530856kB inactive_anon:58924kB active_file:220kB inactive_file:356kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:225304kB dirty:16kB writeback:0kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 788480kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3157.935720] Node 1 active_anon:2546708kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5604kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3157.966731] Node 0 DMA free:10420kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3158.015835] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3158.027998] Node 0 DMA32 free:55764kB min:36296kB low:45368kB high:54440kB active_anon:1530688kB inactive_anon:58924kB active_file:1084kB inactive_file:2472kB unevictable:16156kB writepending:16kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:16864kB pagetables:60820kB bounce:0kB free_pcp:296kB local_pcp:0kB free_cma:0kB [ 3158.122229] lowmem_reserve[]: 0 0 0 0 0 [ 3158.126306] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3158.158628] lowmem_reserve[]: 0 0 0 0 0 [ 3158.162845] Node 1 Normal free:55620kB min:53592kB low:66988kB high:80384kB active_anon:2546696kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39136kB pagetables:88668kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3158.219719] lowmem_reserve[]: 0 0 0 0 0 [ 3158.223726] Node 0 DMA: 5*4kB (UE) 2*8kB (UM) 3*16kB (UM) 1*32kB (E) 5*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10420kB [ 3158.241942] Node 0 DMA32: 1123*4kB (UME) 515*8kB (UME) 263*16kB (UME) 366*32kB (UME) 122*64kB (UME) 31*128kB (UME) 5*256kB (UM) 6*512kB (UM) 1*1024kB (E) 6*2048kB (M) 1*4096kB (M) = 58068kB [ 3158.259204] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3158.270043] Node 1 Normal: 207*4kB (UMEH) 315*8kB (UMEH) 853*16kB (UMEH) 597*32kB (UMEH) 213*64kB (UMEH) 44*128kB (UME) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55620kB [ 3158.286101] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3158.294961] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3158.303666] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3158.312506] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3158.321133] 13895 total pagecache pages [ 3158.325091] 0 pages in swap cache [ 3158.328523] Swap cache stats: add 0, delete 0, find 0/0 [ 3158.333927] Free swap = 0kB [ 3158.336959] Total swap = 0kB [ 3158.339987] 1965979 pages RAM [ 3158.343073] 0 pages HighMem/MovableOnly [ 3158.347020] 338456 pages reserved [ 3158.350486] 0 pages cma reserved [ 3158.353836] Out of memory: Kill process 23160 (syz-executor.4) score 1005 or sacrifice child [ 3158.363732] Killed process 23160 (syz-executor.4) total-vm:74968kB, anon-rss:4260kB, file-rss:34816kB, shmem-rss:0kB [ 3158.415955] oom_reaper: reaped process 23160 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3158.458053] syz-executor.3 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3158.471058] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3158.476266] CPU: 0 PID: 6355 Comm: syz-executor.3 Not tainted 4.14.184-syzkaller #0 [ 3158.484045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3158.493374] Call Trace: [ 3158.495945] dump_stack+0x1b2/0x283 [ 3158.499550] dump_header+0x178/0x7aa [ 3158.503243] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3158.508249] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3158.513343] ? ___ratelimit+0x2cd/0x522 [ 3158.517312] oom_kill_process.cold+0x10/0xc16 [ 3158.521800] ? lock_downgrade+0x6e0/0x6e0 [ 3158.525933] out_of_memory+0x2d5/0x10f0 [ 3158.529888] ? oom_killer_disable+0x1c0/0x1c0 [ 3158.534358] ? mutex_trylock+0x152/0x1a0 [ 3158.538404] __alloc_pages_nodemask+0x2556/0x2730 [ 3158.543239] ? HARDIRQ_verbose+0x10/0x10 [ 3158.547277] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3158.552105] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3158.557097] ? kmem_cache_alloc_node+0x387/0x400 [ 3158.561832] copy_process.part.0+0x26a/0x6fa0 [ 3158.566302] ? check_preemption_disabled+0x35/0x240 [ 3158.571295] ? perf_trace_lock+0x109/0x4b0 [ 3158.575520] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 3158.580446] ? HARDIRQ_verbose+0x10/0x10 [ 3158.584493] ? __cleanup_sighand+0x40/0x40 [ 3158.588706] ? lock_downgrade+0x6e0/0x6e0 [ 3158.592850] _do_fork+0x180/0xc80 [ 3158.596291] ? put_timespec64+0xaa/0xf0 [ 3158.600246] ? fork_idle+0x270/0x270 [ 3158.603941] ? SyS_clock_gettime+0xf5/0x180 [ 3158.608253] ? SyS_clock_settime+0x1a0/0x1a0 [ 3158.612639] ? do_syscall_64+0x4c/0x640 [ 3158.616589] ? sys_vfork+0x20/0x20 [ 3158.620105] do_syscall_64+0x1d5/0x640 [ 3158.623975] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3158.629145] RIP: 0033:0x45b08a [ 3158.632321] RSP: 002b:00007ffe12d769f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3158.640006] RAX: ffffffffffffffda RBX: 00007ffe12d769f0 RCX: 000000000045b08a [ 3158.647262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3158.654546] RBP: 00007ffe12d76a30 R08: 0000000000000001 R09: 0000000001e7e940 [ 3158.661798] R10: 0000000001e7ec10 R11: 0000000000000246 R12: 0000000000000001 [ 3158.669046] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe12d76a80 [ 3158.681460] Mem-Info: [ 3158.683894] active_anon:1018338 inactive_anon:215622 isolated_anon:0 [ 3158.683894] active_file:18 inactive_file:63 isolated_file:32 [ 3158.683894] unevictable:10062 dirty:7 writeback:0 unstable:0 [ 3158.683894] slab_reclaimable:21702 slab_unreclaimable:169664 [ 3158.683894] mapped:57705 shmem:8366 pagetables:37346 bounce:0 [ 3158.683894] free:32351 free_pcp:0 free_cma:0 [ 3158.718255] Node 0 active_anon:1526656kB inactive_anon:58924kB active_file:164kB inactive_file:176kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:225216kB dirty:28kB writeback:0kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 788480kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3158.747511] Node 1 active_anon:2546696kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5604kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3158.775741] Node 0 DMA free:10420kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3158.803162] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3158.809072] Node 0 DMA32 free:63276kB min:36296kB low:45368kB high:54440kB active_anon:1526488kB inactive_anon:58924kB active_file:136kB inactive_file:340kB unevictable:16156kB writepending:0kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:16832kB pagetables:60716kB bounce:0kB free_pcp:512kB local_pcp:108kB free_cma:0kB [ 3158.874411] lowmem_reserve[]: 0 0 0 0 0 [ 3158.878419] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3158.914159] lowmem_reserve[]: 0 0 0 0 0 [ 3158.918186] Node 1 Normal free:55620kB min:53592kB low:66988kB high:80384kB active_anon:2546696kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39136kB pagetables:88668kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3158.948580] lowmem_reserve[]: 0 0 0 0 0 [ 3158.952827] Node 0 DMA: 5*4kB (UE) 2*8kB (UM) 3*16kB (UM) 1*32kB (E) 5*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10420kB [ 3158.968924] Node 0 DMA32: 1234*4kB (UME) 523*8kB (UME) 264*16kB (UME) 367*32kB (UME) 122*64kB (UME) 31*128kB (UME) 5*256kB (UM) 6*512kB (UM) 1*1024kB (E) 8*2048kB (M) 1*4096kB (M) = 62720kB [ 3158.990127] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3159.000896] Node 1 Normal: 208*4kB (UMEH) 315*8kB (UMEH) 853*16kB (UMEH) 597*32kB (UMEH) 213*64kB (UMEH) 44*128kB (UME) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55624kB [ 3159.016845] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3159.025721] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3159.034365] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3159.043239] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3159.051899] 13861 total pagecache pages [ 3159.055859] 0 pages in swap cache [ 3159.059286] Swap cache stats: add 0, delete 0, find 0/0 [ 3159.067359] Free swap = 0kB [ 3159.081380] Total swap = 0kB [ 3159.086736] 1965979 pages RAM [ 3159.092313] 0 pages HighMem/MovableOnly [ 3159.096367] 338456 pages reserved [ 3159.103190] 0 pages cma reserved [ 3159.106635] Out of memory: Kill process 23264 (syz-executor.4) score 1005 or sacrifice child [ 3159.126347] Killed process 23264 (syz-executor.4) total-vm:74968kB, anon-rss:4260kB, file-rss:34816kB, shmem-rss:0kB [ 3159.200922] oom_reaper: reaped process 23264 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 09:34:47 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0xa4, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x6c, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x7ff}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x3ff}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x7}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8}], @vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x4}, @IFLA_VTI_IKEY={0x8, 0x2, 0xef6}, @IFLA_VTI_IKEY={0x8, 0x2, 0x4b}, @IFLA_VTI_OKEY={0x8, 0x3, 0x5}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x9}, @IFLA_VTI_IKEY={0x8, 0x2, 0x40}]]}}}, @IFLA_IFALIASn={0x4}, @IFLA_MASTER={0x8}]}, 0xa4}}, 0x0) 09:34:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x8}, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0xfd, 0x4, 0x0, 0x0, 0x0, 0xffe000, 0x8a26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0xab80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001ac0)={0xe23, {{0xa, 0x4e22, 0x4a, @loopback, 0x6}}}, 0x90) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 09:34:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4082, 0xff2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:34:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x8}, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0xfd, 0x4, 0x0, 0x0, 0x0, 0xffe000, 0x8a26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0xab80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001ac0)={0xe23, {{0xa, 0x4e22, 0x4a, @loopback, 0x6}}}, 0x90) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 09:34:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x8}, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0xfd, 0x4, 0x0, 0x0, 0x0, 0xffe000, 0x8a26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0xab80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001ac0)={0xe23, {{0xa, 0x4e22, 0x4a, @loopback, 0x6}}}, 0x90) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 3163.045653] syz-executor.3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3163.089181] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3163.094329] CPU: 1 PID: 6355 Comm: syz-executor.3 Not tainted 4.14.184-syzkaller #0 [ 3163.102110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3163.111465] Call Trace: [ 3163.114045] dump_stack+0x1b2/0x283 [ 3163.117673] dump_header+0x178/0x7aa [ 3163.121467] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3163.126480] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3163.131580] ? ___ratelimit+0x2cd/0x522 [ 3163.135557] oom_kill_process.cold+0x10/0xc16 [ 3163.140050] ? lock_downgrade+0x6e0/0x6e0 [ 3163.144205] out_of_memory+0x2d5/0x10f0 [ 3163.148186] ? oom_killer_disable+0x1c0/0x1c0 [ 3163.152683] ? mutex_trylock+0x152/0x1a0 [ 3163.156749] __alloc_pages_nodemask+0x2556/0x2730 [ 3163.161616] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3163.166453] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3163.171297] ? HARDIRQ_verbose+0x10/0x10 [ 3163.175361] ? cache_grow_begin+0x3f/0x410 [ 3163.179596] cache_grow_begin+0x91/0x410 [ 3163.183664] fallback_alloc+0x205/0x2b0 [ 3163.187642] kmem_cache_alloc+0x1e5/0x3c0 [ 3163.191791] getname_flags+0xc8/0x550 [ 3163.195591] user_path_mountpoint_at+0x23/0x40 [ 3163.200200] SyS_umount+0x11b/0xc00 [ 3163.203818] ? do_rmdir+0x340/0x340 [ 3163.207442] ? __detach_mounts+0x2e0/0x2e0 [ 3163.211692] ? __do_page_fault+0x19a/0xb50 [ 3163.216032] ? do_syscall_64+0x4c/0x640 [ 3163.219999] ? __detach_mounts+0x2e0/0x2e0 [ 3163.224235] do_syscall_64+0x1d5/0x640 [ 3163.228126] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3163.233309] RIP: 0033:0x45f487 [ 3163.236491] RSP: 002b:00007ffe12d75948 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 3163.244196] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045f487 [ 3163.251457] RDX: 00000000004031c8 RSI: 0000000000000002 RDI: 00007ffe12d759f0 [ 3163.258713] RBP: 000000000000316e R08: 0000000000000000 R09: 000000000000000d [ 3163.266007] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffe12d76a80 [ 3163.273260] R13: 0000000001e7f940 R14: 0000000000000000 R15: 00007ffe12d76a80 09:34:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4082, 0xff2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:34:51 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff800, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2, 0x0, @rand_addr, 0x8000}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) syz_open_dev$loop(0x0, 0x5, 0x400680) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) 09:34:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x8}, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0xfd, 0x4, 0x0, 0x0, 0x0, 0xffe000, 0x8a26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0xab80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001ac0)={0xe23, {{0xa, 0x4e22, 0x4a, @loopback, 0x6}}}, 0x90) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 3163.299077] Mem-Info: [ 3163.308176] active_anon:1023491 inactive_anon:215622 isolated_anon:0 [ 3163.308176] active_file:40 inactive_file:212 isolated_file:0 [ 3163.308176] unevictable:10062 dirty:24 writeback:0 unstable:0 [ 3163.308176] slab_reclaimable:21819 slab_unreclaimable:169654 [ 3163.308176] mapped:57761 shmem:8366 pagetables:37404 bounce:0 [ 3163.308176] free:26828 free_pcp:39 free_cma:0 [ 3163.384955] Node 0 active_anon:1547176kB inactive_anon:58924kB active_file:444kB inactive_file:1096kB unevictable:16156kB isolated(anon):0kB isolated(file):148kB mapped:226428kB dirty:96kB writeback:0kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 798720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3163.415118] Node 1 active_anon:2546788kB inactive_anon:803564kB active_file:4kB inactive_file:96kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5516kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3163.443549] Node 0 DMA free:10356kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3163.475879] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3163.481089] Node 0 DMA32 free:40988kB min:36296kB low:45368kB high:54440kB active_anon:1547008kB inactive_anon:58924kB active_file:0kB inactive_file:1404kB unevictable:16156kB writepending:16kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:16864kB pagetables:60948kB bounce:0kB free_pcp:364kB local_pcp:120kB free_cma:0kB [ 3163.513483] lowmem_reserve[]: 0 0 0 0 0 [ 3163.526401] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3163.557577] lowmem_reserve[]: 0 0 0 0 0 [ 3163.589175] Node 1 Normal free:55564kB min:53592kB low:66988kB high:80384kB active_anon:2546788kB inactive_anon:803564kB active_file:0kB inactive_file:0kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39168kB pagetables:88668kB bounce:0kB free_pcp:44kB local_pcp:44kB free_cma:0kB [ 3163.619356] lowmem_reserve[]: 0 0 0 0 0 [ 3163.623878] Node 0 DMA: 5*4kB (UE) 2*8kB (UM) 3*16kB (UM) 1*32kB (E) 4*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10356kB [ 3163.640172] Node 0 DMA32: 933*4kB (UME) 456*8kB (UME) 197*16kB (UME) 334*32kB (UME) 50*64kB (UME) 17*128kB (UME) 5*256kB (UM) 6*512kB (UM) 1*1024kB (E) 3*2048kB (M) 1*4096kB (M) = 42212kB [ 3163.657435] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3163.669154] Node 1 Normal: 224*4kB (UMEH) 363*8kB (UMEH) 847*16kB (UMEH) 597*32kB (UMEH) 214*64kB (UMEH) 44*128kB (UME) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 56040kB [ 3163.685433] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3163.708082] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3163.725475] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3163.735511] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3163.745802] 14282 total pagecache pages [ 3163.791217] 0 pages in swap cache [ 3163.797321] Swap cache stats: add 0, delete 0, find 0/0 [ 3163.804306] Free swap = 0kB [ 3163.808323] Total swap = 0kB [ 3163.811470] 1965979 pages RAM [ 3163.814694] 0 pages HighMem/MovableOnly [ 3163.818842] 338456 pages reserved [ 3163.822286] 0 pages cma reserved [ 3163.826621] Out of memory: Kill process 23097 (syz-executor.2) score 1005 or sacrifice child [ 3163.835371] Killed process 23097 (syz-executor.2) total-vm:74836kB, anon-rss:4256kB, file-rss:34816kB, shmem-rss:0kB 09:34:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x8}, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0xfd, 0x4, 0x0, 0x0, 0x0, 0xffe000, 0x8a26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0xab80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001ac0)={0xe23, {{0xa, 0x4e22, 0x4a, @loopback, 0x6}}}, 0x90) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 3164.633277] syz-executor.1 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3164.676666] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 3164.681999] CPU: 0 PID: 6351 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 3164.689789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3164.699142] Call Trace: [ 3164.701731] dump_stack+0x1b2/0x283 [ 3164.705371] dump_header+0x178/0x7aa [ 3164.709078] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3164.714090] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3164.719192] ? ___ratelimit+0x2cd/0x522 [ 3164.723165] oom_kill_process.cold+0x10/0xc16 [ 3164.727661] ? lock_downgrade+0x6e0/0x6e0 [ 3164.731807] out_of_memory+0x2d5/0x10f0 [ 3164.735778] ? oom_killer_disable+0x1c0/0x1c0 [ 3164.740264] ? mutex_trylock+0x152/0x1a0 [ 3164.744327] __alloc_pages_nodemask+0x2556/0x2730 [ 3164.749180] ? HARDIRQ_verbose+0x10/0x10 [ 3164.753235] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3164.758087] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3164.763093] ? kmem_cache_alloc_node+0x387/0x400 [ 3164.767849] copy_process.part.0+0x26a/0x6fa0 [ 3164.772345] ? check_preemption_disabled+0x35/0x240 [ 3164.777361] ? perf_trace_lock+0x109/0x4b0 [ 3164.781594] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 3164.786552] ? HARDIRQ_verbose+0x10/0x10 [ 3164.790647] ? __cleanup_sighand+0x40/0x40 [ 3164.794889] ? lock_downgrade+0x6e0/0x6e0 [ 3164.799032] _do_fork+0x180/0xc80 [ 3164.802470] ? put_timespec64+0xaa/0xf0 [ 3164.806418] ? fork_idle+0x270/0x270 [ 3164.810111] ? SyS_clock_gettime+0xf5/0x180 [ 3164.814406] ? SyS_clock_settime+0x1a0/0x1a0 [ 3164.818796] ? do_syscall_64+0x4c/0x640 [ 3164.822750] ? sys_vfork+0x20/0x20 [ 3164.826263] do_syscall_64+0x1d5/0x640 [ 3164.830172] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3164.835340] RIP: 0033:0x45b08a [ 3164.838510] RSP: 002b:00007ffc53b22910 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3164.846204] RAX: ffffffffffffffda RBX: 00007ffc53b22910 RCX: 000000000045b08a [ 3164.853450] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3164.860697] RBP: 00007ffc53b22950 R08: 0000000000000001 R09: 00000000019ab940 [ 3164.867949] R10: 00000000019abc10 R11: 0000000000000246 R12: 0000000000000001 [ 3164.875199] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc53b229a0 [ 3164.887272] Mem-Info: [ 3164.892655] active_anon:1022936 inactive_anon:215622 isolated_anon:0 [ 3164.892655] active_file:149 inactive_file:818 isolated_file:12 [ 3164.892655] unevictable:10062 dirty:29 writeback:6 unstable:0 [ 3164.892655] slab_reclaimable:21859 slab_unreclaimable:169258 [ 3164.892655] mapped:58234 shmem:8366 pagetables:37329 bounce:0 [ 3164.892655] free:27121 free_pcp:115 free_cma:0 [ 3164.927712] Node 0 active_anon:1544956kB inactive_anon:58924kB active_file:668kB inactive_file:6700kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:229704kB dirty:116kB writeback:12kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 796672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3164.956546] Node 1 active_anon:2546784kB inactive_anon:803564kB active_file:8kB inactive_file:136kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5644kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3164.985085] Node 0 DMA free:10364kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3165.011681] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3165.016719] Node 0 DMA32 free:37172kB min:36296kB low:45368kB high:54440kB active_anon:1544288kB inactive_anon:58924kB active_file:844kB inactive_file:8140kB unevictable:16156kB writepending:188kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:16800kB pagetables:60548kB bounce:0kB free_pcp:432kB local_pcp:188kB free_cma:0kB [ 3165.047251] lowmem_reserve[]: 0 0 0 0 0 [ 3165.051322] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3165.076632] lowmem_reserve[]: 0 0 0 0 0 [ 3165.080768] Node 1 Normal free:55860kB min:53592kB low:66988kB high:80384kB active_anon:2546764kB inactive_anon:803564kB active_file:8kB inactive_file:136kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39136kB pagetables:88656kB bounce:0kB free_pcp:40kB local_pcp:0kB free_cma:0kB [ 3165.098592] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=6/ABRT [ 3165.111461] lowmem_reserve[]: 0 0 0 0 0 [ 3165.124079] Node 0 DMA: 5*4kB (UE) 3*8kB (UM) 3*16kB (UM) 1*32kB (E) 4*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10364kB [ 3165.139413] Node 0 DMA32: 185*4kB (UE) 286*8kB (UME) 72*16kB (UME) 279*32kB (UME) 51*64kB (UME) 17*128kB (UME) 5*256kB (UM) 6*512kB (UM) 1*1024kB (E) 4*2048kB (M) 1*4096kB (M) = 36212kB [ 3165.156362] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 09:34:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x8}, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0xfd, 0x4, 0x0, 0x0, 0x0, 0xffe000, 0x8a26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0xab80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001ac0)={0xe23, {{0xa, 0x4e22, 0x4a, @loopback, 0x6}}}, 0x90) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 3165.167184] Node 1 Normal: 73*4kB (UEH) 286*8kB (UMEH) 832*16kB (UMEH) 597*32kB (UMEH) 215*64kB (UMEH) 44*128kB (UME) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54644kB [ 3165.204128] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3165.223013] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 09:34:53 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff800, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2, 0x0, @rand_addr, 0x8000}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) syz_open_dev$loop(0x0, 0x5, 0x400680) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) [ 3165.261608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3165.280737] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3165.304860] 15701 total pagecache pages [ 3165.327423] 0 pages in swap cache [ 3165.330947] Swap cache stats: add 0, delete 0, find 0/0 [ 3165.336297] Free swap = 0kB [ 3165.357372] Total swap = 0kB [ 3165.360391] 1965979 pages RAM [ 3165.363483] 0 pages HighMem/MovableOnly [ 3165.387375] 338456 pages reserved [ 3165.390828] 0 pages cma reserved [ 3165.394204] Out of memory: Kill process 23103 (syz-executor.2) score 1005 or sacrifice child [ 3165.471525] Killed process 23103 (syz-executor.2) total-vm:74956kB, anon-rss:4256kB, file-rss:34816kB, shmem-rss:0kB [ 3166.376594] syz-executor.4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3166.396905] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3166.403317] CPU: 0 PID: 9492 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 3166.411106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3166.420461] Call Trace: [ 3166.423044] dump_stack+0x1b2/0x283 [ 3166.426669] dump_header+0x178/0x7aa [ 3166.430376] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3166.435393] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3166.440492] ? ___ratelimit+0x2cd/0x522 [ 3166.444461] oom_kill_process.cold+0x10/0xc16 [ 3166.448954] ? lock_acquire+0x170/0x3f0 [ 3166.452926] ? lock_downgrade+0x6e0/0x6e0 [ 3166.457072] out_of_memory+0x2d5/0x10f0 [ 3166.461241] ? oom_killer_disable+0x1c0/0x1c0 [ 3166.465819] ? mutex_trylock+0x152/0x1a0 [ 3166.469898] __alloc_pages_nodemask+0x2556/0x2730 [ 3166.474756] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3166.479597] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3166.484444] ? HARDIRQ_verbose+0x10/0x10 [ 3166.488512] ? cache_grow_begin+0x3f/0x410 [ 3166.492746] cache_grow_begin+0x91/0x410 [ 3166.496803] fallback_alloc+0x205/0x2b0 [ 3166.500776] kmem_cache_alloc+0x1e5/0x3c0 [ 3166.504922] getname_flags+0xc8/0x550 [ 3166.508720] SyS_symlinkat+0x6d/0x1f0 [ 3166.512513] ? SyS_unlink+0x20/0x20 [ 3166.516129] ? __do_page_fault+0x19a/0xb50 [ 3166.520362] ? do_syscall_64+0x4c/0x640 [ 3166.524330] ? SyS_symlinkat+0x1f0/0x1f0 [ 3166.528392] do_syscall_64+0x1d5/0x640 [ 3166.532299] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3166.537481] RIP: 0033:0x45c7e7 [ 3166.540664] RSP: 002b:00007ffe62ee3af8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 3166.548490] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045c7e7 [ 3166.555752] RDX: 00007ffe62ee3b93 RSI: 00000000004c2598 RDI: 00007ffe62ee3b80 [ 3166.563012] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000013 [ 3166.570279] R10: 0000000000000075 R11: 0000000000000202 R12: 0000000000000000 [ 3166.577540] R13: 00007ffe62ee3b30 R14: 0000000000000000 R15: 00007ffe62ee3b40 [ 3166.642950] Mem-Info: [ 3166.673447] active_anon:1025399 inactive_anon:215618 isolated_anon:0 [ 3166.673447] active_file:67 inactive_file:37 isolated_file:0 [ 3166.673447] unevictable:10062 dirty:0 writeback:5 unstable:0 [ 3166.673447] slab_reclaimable:21899 slab_unreclaimable:169135 [ 3166.673447] mapped:57716 shmem:8366 pagetables:37370 bounce:0 [ 3166.673447] free:25501 free_pcp:7 free_cma:0 [ 3166.865427] Node 0 active_anon:1554788kB inactive_anon:58908kB active_file:40kB inactive_file:92kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:225128kB dirty:0kB writeback:8kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 802816kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3166.903189] Node 1 active_anon:2546808kB inactive_anon:803564kB active_file:340kB inactive_file:876kB unevictable:24092kB isolated(anon):0kB isolated(file):128kB mapped:6628kB dirty:12kB writeback:12kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3166.932789] Node 0 DMA free:10364kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3166.960005] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3166.965746] Node 0 DMA32 free:36132kB min:36296kB low:45368kB high:54440kB active_anon:1554620kB inactive_anon:58908kB active_file:56kB inactive_file:8kB unevictable:16156kB writepending:8kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:16800kB pagetables:60860kB bounce:0kB free_pcp:836kB local_pcp:576kB free_cma:0kB [ 3167.111521] lowmem_reserve[]: 0 0 0 0 0 [ 3167.115546] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3167.271002] lowmem_reserve[]: 0 0 0 0 0 [ 3167.275616] Node 1 Normal free:55228kB min:53592kB low:66988kB high:80384kB active_anon:2546812kB inactive_anon:803564kB active_file:48kB inactive_file:856kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39232kB pagetables:88664kB bounce:0kB free_pcp:188kB local_pcp:120kB free_cma:0kB [ 3167.306765] lowmem_reserve[]: 0 0 0 0 0 [ 3167.311541] Node 0 DMA: 5*4kB (UE) 3*8kB (UM) 3*16kB (UM) 1*32kB (E) 4*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10364kB [ 3167.327490] Node 0 DMA32: 406*4kB (UME) 540*8kB (UME) 231*16kB (UME) 352*32kB (UME) 52*64kB (UME) 18*128kB (UME) 5*256kB (UM) 6*512kB (UM) 1*1024kB (E) 0*2048kB 1*4096kB (M) = 36008kB [ 3167.345291] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3167.356765] Node 1 Normal: 102*4kB (UMEH) 349*8kB (UMEH) 841*16kB (UMEH) 594*32kB (UMEH) 215*64kB (UMEH) 44*128kB (UME) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55312kB [ 3167.373858] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3167.383246] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3167.425541] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3167.441900] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3167.456238] 13978 total pagecache pages [ 3167.461333] 0 pages in swap cache [ 3167.466854] Swap cache stats: add 0, delete 0, find 0/0 [ 3167.473435] Free swap = 0kB [ 3167.477615] Total swap = 0kB [ 3167.481530] 1965979 pages RAM [ 3167.494030] 0 pages HighMem/MovableOnly [ 3167.498174] 338456 pages reserved [ 3167.501703] 0 pages cma reserved [ 3167.505180] Out of memory: Kill process 23137 (syz-executor.2) score 1005 or sacrifice child [ 3167.513974] Killed process 23137 (syz-executor.2) total-vm:74836kB, anon-rss:4256kB, file-rss:34816kB, shmem-rss:0kB [ 3167.560688] oom_reaper: reaped process 23137 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3167.675598] systemd-cgroups invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3167.701156] systemd-cgroups cpuset=/ mems_allowed=0-1 [ 3167.707579] CPU: 0 PID: 9485 Comm: systemd-cgroups Not tainted 4.14.184-syzkaller #0 [ 3167.715570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3167.724914] Call Trace: [ 3167.727502] dump_stack+0x1b2/0x283 [ 3167.731125] dump_header+0x178/0x7aa [ 3167.734829] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3167.739843] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3167.744940] ? ___ratelimit+0x2cd/0x522 [ 3167.748913] oom_kill_process.cold+0x10/0xc16 [ 3167.753406] ? lock_acquire+0x170/0x3f0 [ 3167.757373] ? lock_downgrade+0x6e0/0x6e0 [ 3167.761517] out_of_memory+0x2d5/0x10f0 [ 3167.765517] ? oom_killer_disable+0x1c0/0x1c0 [ 3167.770008] ? mutex_trylock+0x152/0x1a0 [ 3167.774071] __alloc_pages_nodemask+0x2556/0x2730 [ 3167.778929] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3167.783764] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3167.788609] ? HARDIRQ_verbose+0x10/0x10 [ 3167.792670] ? mark_held_locks+0xa6/0xf0 [ 3167.796724] ? cache_grow_begin+0x3f/0x410 [ 3167.800955] cache_grow_begin+0x91/0x410 [ 3167.805015] fallback_alloc+0x205/0x2b0 [ 3167.808994] kmem_cache_alloc+0x1e5/0x3c0 [ 3167.813161] ima_d_path+0x4d/0x1d3 [ 3167.816699] process_measurement+0x905/0xb20 [ 3167.821109] ? ima_rdwr_violation_check+0x3a0/0x3a0 [ 3167.826117] ? generic_file_open+0x68/0x90 [ 3167.830363] ? ext4_release_file+0x2d0/0x2d0 [ 3167.834770] ? selinux_quota_on+0x110/0x110 [ 3167.839086] ? lock_downgrade+0x6e0/0x6e0 [ 3167.843234] ? file_ra_state_init+0xc4/0x1e0 [ 3167.847641] ? do_dentry_open+0x698/0xec0 [ 3167.851783] ? ext4_release_file+0x2d0/0x2d0 [ 3167.856189] ? __inode_permission+0xcd/0x2f0 [ 3167.860595] ? vfs_open+0x10d/0x220 [ 3167.864221] path_openat+0x10aa/0x2aa0 [ 3167.868115] ? path_mountpoint+0x960/0x960 [ 3167.872350] ? perf_trace_lock+0x109/0x4b0 [ 3167.876581] do_filp_open+0x18e/0x250 [ 3167.880378] ? may_open_dev+0xe0/0xe0 [ 3167.884180] ? lock_acquire+0x170/0x3f0 [ 3167.888155] ? lock_downgrade+0x6e0/0x6e0 [ 3167.892301] ? do_raw_spin_unlock+0x164/0x250 [ 3167.896794] ? __alloc_fd+0x1bf/0x490 [ 3167.900598] do_sys_open+0x292/0x3e0 [ 3167.904307] ? filp_open+0x60/0x60 [ 3167.907848] ? __do_page_fault+0x19a/0xb50 [ 3167.912079] ? do_syscall_64+0x4c/0x640 [ 3167.916064] ? do_sys_open+0x3e0/0x3e0 [ 3167.919950] do_syscall_64+0x1d5/0x640 [ 3167.923840] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3167.929021] RIP: 0033:0x7faeecd9b1b7 [ 3167.932721] RSP: 002b:00007ffdb580ed08 EFLAGS: 00000202 ORIG_RAX: 0000000000000002 [ 3167.940425] RAX: ffffffffffffffda RBX: 000055681540551e RCX: 00007faeecd9b1b7 [ 3167.947685] RDX: 0000000000000001 RSI: 0000000000080000 RDI: 00007faeecd9f988 [ 3167.954943] RBP: ffffffffffffffff R08: 00007faeecd89205 R09: 00007ffdb580ee9f [ 3167.962203] R10: 00007faeecfa7518 R11: 0000000000000202 R12: 00007faeecfa70a0 [ 3167.969462] R13: 0000000000000001 R14: 00007faeecfa6040 R15: 0000000000000000 [ 3168.069300] Mem-Info: [ 3168.090311] active_anon:1024355 inactive_anon:215618 isolated_anon:0 [ 3168.090311] active_file:290 inactive_file:243 isolated_file:30 [ 3168.090311] unevictable:10062 dirty:9 writeback:0 unstable:0 [ 3168.090311] slab_reclaimable:21935 slab_unreclaimable:169205 [ 3168.090311] mapped:58129 shmem:8366 pagetables:37355 bounce:0 [ 3168.090311] free:25933 free_pcp:322 free_cma:0 [ 3168.129776] Node 0 active_anon:1550588kB inactive_anon:58908kB active_file:508kB inactive_file:540kB unevictable:16156kB isolated(anon):0kB isolated(file):88kB mapped:226012kB dirty:36kB writeback:0kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 804864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3168.158996] Node 1 active_anon:2546832kB inactive_anon:803564kB active_file:32kB inactive_file:84kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5604kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3168.187897] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3168.217329] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3168.222690] Node 0 DMA32 free:39648kB min:36296kB low:45368kB high:54440kB active_anon:1550420kB inactive_anon:58908kB active_file:508kB inactive_file:640kB unevictable:16156kB writepending:36kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:16768kB pagetables:60752kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3168.253004] lowmem_reserve[]: 0 0 0 0 0 [ 3168.257343] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3168.282783] lowmem_reserve[]: 0 0 0 0 0 [ 3168.287444] Node 1 Normal free:55696kB min:53592kB low:66988kB high:80384kB active_anon:2546828kB inactive_anon:803564kB active_file:0kB inactive_file:0kB unevictable:24092kB writepending:4kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39232kB pagetables:88668kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3168.335610] lowmem_reserve[]: 0 0 0 0 0 [ 3168.355675] Node 0 DMA: 5*4kB (UE) 4*8kB (UM) 3*16kB (UM) 2*32kB (UE) 4*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10404kB [ 3168.395570] systemd[1]: systemd-journald.service: Unit entered failed state. [ 3168.422909] Node 0 DMA32: 247*4kB (UME) 352*8kB (UME) 224*16kB (UME) 353*32kB (UME) 52*64kB (UME) 18*128kB (UME) 5*256kB (UM) 6*512kB (UM) 1*1024kB (E) 2*2048kB (M) 1*4096kB (M) = 37884kB [ 3168.450528] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3168.462454] Node 1 Normal: 179*4kB (UMEH) 358*8kB (UMEH) 828*16kB (UMEH) 593*32kB (UMEH) 215*64kB (UMEH) 44*128kB (UME) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55452kB [ 3168.487804] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3168.521236] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3168.548178] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3168.698098] systemd[1]: systemd-journald.service: Failed with result 'watchdog'. [ 3168.726397] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3168.747457] 14490 total pagecache pages [ 3168.760295] 0 pages in swap cache [ 3168.763759] Swap cache stats: add 0, delete 0, find 0/0 [ 3168.806297] Free swap = 0kB [ 3168.809326] Total swap = 0kB [ 3168.829980] 1965979 pages RAM [ 3168.833145] 0 pages HighMem/MovableOnly [ 3168.847501] 338456 pages reserved [ 3168.852159] 0 pages cma reserved [ 3168.873562] Out of memory: Kill process 23183 (syz-executor.2) score 1005 or sacrifice child [ 3168.902732] Killed process 23183 (syz-executor.2) total-vm:74836kB, anon-rss:4256kB, file-rss:35008kB, shmem-rss:0kB [ 3169.007804] oom_reaper: reaped process 23183 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3169.114872] oom_reaper: reaped process 9493 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3169.222726] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. 09:34:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x8}, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0xfd, 0x4, 0x0, 0x0, 0x0, 0xffe000, 0x8a26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0xab80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001ac0)={0xe23, {{0xa, 0x4e22, 0x4a, @loopback, 0x6}}}, 0x90) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 09:34:58 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x8}, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0xfd, 0x4, 0x0, 0x0, 0x0, 0xffe000, 0x8a26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0xab80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001ac0)={0xe23, {{0xa, 0x4e22, 0x4a, @loopback, 0x6}}}, 0x90) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 09:34:58 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff800, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2, 0x0, @rand_addr, 0x8000}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) syz_open_dev$loop(0x0, 0x5, 0x400680) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) [ 3169.774012] syz-executor.2 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3169.789927] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3169.795173] CPU: 1 PID: 9503 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 3169.802962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3169.812319] Call Trace: [ 3169.814919] dump_stack+0x1b2/0x283 [ 3169.818551] dump_header+0x178/0x7aa [ 3169.822260] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3169.827273] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3169.832383] ? ___ratelimit+0x2cd/0x522 [ 3169.836356] oom_kill_process.cold+0x10/0xc16 [ 3169.840849] ? lock_acquire+0x170/0x3f0 [ 3169.844819] ? lock_downgrade+0x6e0/0x6e0 [ 3169.848967] out_of_memory+0x2d5/0x10f0 [ 3169.852938] ? oom_killer_disable+0x1c0/0x1c0 [ 3169.857426] ? mutex_trylock+0x152/0x1a0 [ 3169.861484] __alloc_pages_nodemask+0x2556/0x2730 [ 3169.866333] ? HARDIRQ_verbose+0x10/0x10 [ 3169.870385] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3169.875240] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3169.880248] ? kmem_cache_alloc_node+0x387/0x400 [ 3169.885003] copy_process.part.0+0x26a/0x6fa0 [ 3169.889495] ? do_raw_spin_unlock+0x164/0x250 [ 3169.893985] ? _raw_spin_unlock+0x29/0x40 [ 3169.898121] ? do_anonymous_page+0x62d/0x17d0 [ 3169.902608] ? finish_fault+0x290/0x290 [ 3169.906557] ? check_preemption_disabled+0x35/0x240 [ 3169.911552] ? __cleanup_sighand+0x40/0x40 [ 3169.915776] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 3169.920683] ? vm_insert_mixed_mkwrite+0x30/0x30 [ 3169.925413] ? HARDIRQ_verbose+0x10/0x10 [ 3169.929457] _do_fork+0x180/0xc80 [ 3169.932892] ? fork_idle+0x270/0x270 [ 3169.936584] ? up_read+0x17/0x30 [ 3169.939930] ? __do_page_fault+0x19a/0xb50 [ 3169.944142] ? do_syscall_64+0x4c/0x640 [ 3169.948094] ? sys_vfork+0x20/0x20 [ 3169.951609] do_syscall_64+0x1d5/0x640 [ 3169.955495] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3169.960779] RIP: 0033:0x45f429 [ 3169.963945] RSP: 002b:00007ffc677c9b18 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3169.971628] RAX: ffffffffffffffda RBX: 00007f2cfc9d9700 RCX: 000000000045f429 [ 3169.978884] RDX: 00007f2cfc9d99d0 RSI: 00007f2cfc9d8db0 RDI: 00000000003d0f00 [ 3169.986130] RBP: 00007ffc677c9d40 R08: 00007f2cfc9d9700 R09: 00007f2cfc9d9700 [ 3169.993374] R10: 00007f2cfc9d99d0 R11: 0000000000000202 R12: 0000000000000000 [ 3170.000632] R13: 00007ffc677c9bcf R14: 00007f2cfc9d99c0 R15: 000000000078bf0c [ 3170.035178] Mem-Info: [ 3170.042587] active_anon:1023300 inactive_anon:215618 isolated_anon:0 [ 3170.042587] active_file:136 inactive_file:297 isolated_file:0 [ 3170.042587] unevictable:10062 dirty:2 writeback:11 unstable:0 [ 3170.042587] slab_reclaimable:22040 slab_unreclaimable:168740 [ 3170.042587] mapped:57928 shmem:8366 pagetables:37284 bounce:0 [ 3170.042587] free:27878 free_pcp:18 free_cma:0 [ 3170.082858] Node 0 active_anon:1546536kB inactive_anon:58908kB active_file:288kB inactive_file:708kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:225404kB dirty:8kB writeback:44kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 802816kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3170.122251] Node 1 active_anon:2546664kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5608kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3170.176719] Node 0 DMA free:10372kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3170.242720] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3170.255598] Node 0 DMA32 free:44972kB min:36296kB low:45368kB high:54440kB active_anon:1546368kB inactive_anon:58908kB active_file:264kB inactive_file:836kB unevictable:16156kB writepending:0kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:16736kB pagetables:60480kB bounce:0kB free_pcp:1136kB local_pcp:676kB free_cma:0kB [ 3170.287526] lowmem_reserve[]: 0 0 0 0 0 [ 3170.291619] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3170.317156] lowmem_reserve[]: 0 0 0 0 0 [ 3170.321243] Node 1 Normal free:55604kB min:53592kB low:66988kB high:80384kB active_anon:2546664kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39232kB pagetables:88656kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3170.351669] lowmem_reserve[]: 0 0 0 0 0 [ 3170.382567] Node 0 DMA: 5*4kB (UE) 4*8kB (UM) 3*16kB (UM) 1*32kB (E) 4*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10372kB [ 3170.410834] Node 0 DMA32: 14*4kB (UME) 514*8kB (UME) 270*16kB (UME) 374*32kB (UME) 60*64kB (UME) 19*128kB (UME) 6*256kB (UM) 6*512kB (UM) 1*1024kB (E) 4*2048kB (M) 1*4096kB (M) = 44648kB [ 3170.427954] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3170.439279] Node 1 Normal: 197*4kB (UMEH) 336*8kB (UMEH) 834*16kB (UMEH) 596*32kB (UMEH) 215*64kB (UMEH) 44*128kB (UME) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55540kB [ 3170.455639] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3170.464574] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3170.473194] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3170.482082] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3170.490853] 13897 total pagecache pages [ 3170.494887] 0 pages in swap cache [ 3170.500597] Swap cache stats: add 0, delete 0, find 0/0 [ 3170.513106] Free swap = 0kB [ 3170.516417] Total swap = 0kB [ 3170.519498] 1965979 pages RAM [ 3170.522716] 0 pages HighMem/MovableOnly [ 3170.527259] 338456 pages reserved [ 3170.530866] 0 pages cma reserved [ 3170.534333] Out of memory: Kill process 23207 (syz-executor.4) score 1005 or sacrifice child [ 3170.543085] Killed process 23207 (syz-executor.4) total-vm:74836kB, anon-rss:4252kB, file-rss:34816kB, shmem-rss:0kB [ 3170.595531] oom_reaper: reaped process 23207 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3170.738989] systemd-cgroups invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3170.759190] systemd-cgroups cpuset=/ mems_allowed=0-1 [ 3170.775489] CPU: 0 PID: 9485 Comm: systemd-cgroups Not tainted 4.14.184-syzkaller #0 [ 3170.783369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3170.792712] Call Trace: [ 3170.795298] dump_stack+0x1b2/0x283 [ 3170.798926] dump_header+0x178/0x7aa [ 3170.802636] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3170.807649] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3170.812741] ? ___ratelimit+0x2cd/0x522 [ 3170.816707] oom_kill_process.cold+0x10/0xc16 [ 3170.821199] ? lock_downgrade+0x6e0/0x6e0 [ 3170.825342] out_of_memory+0x2d5/0x10f0 [ 3170.829316] ? oom_killer_disable+0x1c0/0x1c0 [ 3170.833803] ? mutex_trylock+0x152/0x1a0 [ 3170.837858] __alloc_pages_nodemask+0x2556/0x2730 [ 3170.842703] ? kmemdup+0x23/0x50 [ 3170.846071] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3170.850908] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3170.855750] ? HARDIRQ_verbose+0x10/0x10 [ 3170.859814] ? cache_grow_begin+0x3f/0x410 [ 3170.864046] cache_grow_begin+0x91/0x410 [ 3170.868105] fallback_alloc+0x205/0x2b0 [ 3170.872080] kmem_cache_alloc+0x1e5/0x3c0 [ 3170.876231] getname_flags+0xc8/0x550 [ 3170.880029] user_path_at_empty+0x2a/0x50 [ 3170.884194] SyS_faccessat+0x21b/0x680 [ 3170.888099] ? SyS_fallocate+0x80/0x80 [ 3170.891988] ? __do_page_fault+0x19a/0xb50 [ 3170.896221] ? do_syscall_64+0x4c/0x640 [ 3170.900184] ? SyS_faccessat+0x680/0x680 [ 3170.904246] do_syscall_64+0x1d5/0x640 [ 3170.908134] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3170.913308] RIP: 0033:0x7faeecd9b217 [ 3170.917008] RSP: 002b:00007ffdb580ebe8 EFLAGS: 00000212 ORIG_RAX: 0000000000000015 [ 3170.924753] RAX: ffffffffffffffda RBX: 00007faeecb82621 RCX: 00007faeecd9b217 [ 3170.932006] RDX: 000000000000001d RSI: 0000000000000000 RDI: 00007faeecd9f4e7 [ 3170.939267] RBP: 00007ffdb580ec50 R08: 00007faeecfa33a8 R09: 0000000000000007 [ 3170.946530] R10: 00007faeecfa33a8 R11: 0000000000000212 R12: 00007faeecf9f808 [ 3170.953791] R13: 00000000000033fe R14: 0000000000003c06 R15: 0000000000000000 [ 3170.965787] Mem-Info: [ 3170.968344] active_anon:1022263 inactive_anon:215618 isolated_anon:0 [ 3170.968344] active_file:26 inactive_file:87 isolated_file:0 [ 3170.968344] unevictable:10062 dirty:0 writeback:0 unstable:0 [ 3170.968344] slab_reclaimable:22061 slab_unreclaimable:168796 [ 3170.968344] mapped:57671 shmem:8366 pagetables:37303 bounce:0 [ 3170.968344] free:29056 free_pcp:55 free_cma:0 [ 3171.003675] Node 0 active_anon:1542388kB inactive_anon:58908kB active_file:196kB inactive_file:408kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:225176kB dirty:0kB writeback:0kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 800768kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3171.082756] Node 1 active_anon:2546664kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5608kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3171.125451] Node 0 DMA free:10372kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3171.166116] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3171.176329] Node 0 DMA32 free:49308kB min:36296kB low:45368kB high:54440kB active_anon:1542220kB inactive_anon:58908kB active_file:304kB inactive_file:624kB unevictable:16156kB writepending:0kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:16704kB pagetables:60556kB bounce:0kB free_pcp:372kB local_pcp:188kB free_cma:0kB [ 3171.206737] lowmem_reserve[]: 0 0 0 0 0 [ 3171.210813] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3171.252701] lowmem_reserve[]: 0 0 0 0 0 [ 3171.256759] Node 1 Normal free:55540kB min:53592kB low:66988kB high:80384kB active_anon:2546664kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39232kB pagetables:88656kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3171.356363] lowmem_reserve[]: 0 0 0 0 0 [ 3171.373731] Node 0 DMA: 5*4kB (UE) 4*8kB (UM) 3*16kB (UM) 2*32kB (UE) 4*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10404kB [ 3171.399051] Node 0 DMA32: 339*4kB (UME) 543*8kB (UME) 272*16kB (UME) 377*32kB (UME) 60*64kB (UME) 19*128kB (UME) 6*256kB (UM) 6*512kB (UM) 1*1024kB (E) 6*2048kB (M) 1*4096kB (M) = 50404kB [ 3171.416994] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3171.439703] Node 1 Normal: 197*4kB (UMEH) 336*8kB (UMEH) 834*16kB (UMEH) 596*32kB (UMEH) 215*64kB (UMEH) 44*128kB (UME) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55540kB [ 3171.461784] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3171.471208] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3171.484642] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3171.493798] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3171.509756] 14196 total pagecache pages [ 3171.516919] 0 pages in swap cache [ 3171.520389] Swap cache stats: add 0, delete 0, find 0/0 [ 3171.532661] Free swap = 0kB [ 3171.537495] Total swap = 0kB [ 3171.540518] 1965979 pages RAM [ 3171.543614] 0 pages HighMem/MovableOnly [ 3171.560826] 338456 pages reserved [ 3171.564272] 0 pages cma reserved [ 3171.570547] Out of memory: Kill process 23155 (syz-executor.1) score 1005 or sacrifice child [ 3171.590672] Killed process 23155 (syz-executor.1) total-vm:74836kB, anon-rss:4248kB, file-rss:34816kB, shmem-rss:0kB [ 3171.728206] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 3171.751960] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 3171.760415] systemd[1]: Stopped Journal Service. 09:35:00 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x100000000007fd, 0x4) 09:35:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:35:00 executing program 4: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/196, 0xc4}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000) [ 3172.060806] syz-executor.1 invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 3172.108928] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 3172.114942] CPU: 0 PID: 9519 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 3172.122730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3172.132076] Call Trace: [ 3172.134664] dump_stack+0x1b2/0x283 [ 3172.138293] dump_header+0x178/0x7aa [ 3172.142002] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3172.147013] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3172.152112] ? ___ratelimit+0x2cd/0x522 [ 3172.156097] oom_kill_process.cold+0x10/0xc16 [ 3172.160594] ? lock_downgrade+0x6e0/0x6e0 [ 3172.164738] out_of_memory+0x2d5/0x10f0 [ 3172.168709] ? oom_killer_disable+0x1c0/0x1c0 [ 3172.173212] ? mutex_trylock+0x152/0x1a0 [ 3172.177275] __alloc_pages_nodemask+0x2556/0x2730 [ 3172.182134] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3172.186970] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 3172.191902] ? __radix_tree_lookup+0x19f/0x2d0 [ 3172.196488] ? find_get_entry+0x31b/0x660 [ 3172.200666] ? lock_downgrade+0x6e0/0x6e0 [ 3172.204797] alloc_pages_current+0xe7/0x1e0 [ 3172.209103] __page_cache_alloc+0x243/0x3c0 [ 3172.213414] pagecache_get_page+0x241/0xa10 [ 3172.217717] grab_cache_page_write_begin+0x63/0x90 [ 3172.222631] ext4_da_write_begin+0x244/0xe50 [ 3172.227025] ? perf_trace_writeback_inode_template+0x3a8/0x650 [ 3172.232982] ? ext4_write_begin+0x1240/0x1240 [ 3172.237456] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3172.242895] generic_perform_write+0x1c9/0x420 [ 3172.247470] ? __mnt_drop_write+0x40/0x70 [ 3172.251597] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 3172.256246] ? current_time+0xb0/0xb0 [ 3172.260023] ? ext4_file_write_iter+0x1cd/0xd90 [ 3172.264671] __generic_file_write_iter+0x227/0x590 [ 3172.269582] ext4_file_write_iter+0x279/0xd90 [ 3172.274057] ? __lock_acquire+0x655/0x42a0 [ 3172.278278] ? ext4_llseek+0x7c0/0x7c0 [ 3172.282169] ? iov_iter_init+0xa6/0x1c0 [ 3172.286168] __vfs_write+0x44e/0x630 [ 3172.289881] ? kernel_read+0x110/0x110 [ 3172.293789] ? HARDIRQ_verbose+0x10/0x10 [ 3172.297840] ? __task_pid_nr_ns+0x1c3/0x440 [ 3172.302215] ? do_acct_process+0xc41/0xf60 [ 3172.306452] __kernel_write+0xf5/0x330 [ 3172.310338] do_acct_process+0xb49/0xf60 [ 3172.314397] ? acct_put+0x40/0x40 [ 3172.317843] ? acct_process+0x179/0x422 [ 3172.321824] acct_process+0x38a/0x422 [ 3172.325614] do_exit+0x1728/0x2ae0 [ 3172.329136] ? mm_update_next_owner+0x5b0/0x5b0 [ 3172.333783] ? force_sig_info+0x274/0x340 [ 3172.337925] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3172.343380] ? lock_downgrade+0x6e0/0x6e0 [ 3172.347524] do_group_exit+0x100/0x2e0 [ 3172.351407] SyS_exit_group+0x19/0x20 [ 3172.355197] ? do_group_exit+0x2e0/0x2e0 [ 3172.359264] do_syscall_64+0x1d5/0x640 [ 3172.363143] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3172.368319] RIP: 0033:0x45ca59 [ 3172.371518] RSP: 002b:00007ff501188688 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 3172.379214] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000045ca59 [ 3172.386468] RDX: 000000000045ca59 RSI: 00007ff5011886c0 RDI: 000000000000000b [ 3172.393731] RBP: 000000000078c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 3172.401004] R10: ffffffffffffffff R11: 0000000000000246 R12: 00000000ffffffff [ 3172.408257] R13: 000000000000007b R14: 00000000004c33b4 R15: 00007ff5011896d4 [ 3172.417366] Mem-Info: [ 3172.420100] active_anon:1025369 inactive_anon:215618 isolated_anon:0 [ 3172.420100] active_file:19 inactive_file:110 isolated_file:0 [ 3172.420100] unevictable:10062 dirty:16 writeback:19 unstable:0 [ 3172.420100] slab_reclaimable:22096 slab_unreclaimable:168413 [ 3172.420100] mapped:57718 shmem:8366 pagetables:37267 bounce:0 [ 3172.420100] free:26268 free_pcp:92 free_cma:0 [ 3172.455468] Node 0 active_anon:1549152kB inactive_anon:58908kB active_file:192kB inactive_file:820kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:225268kB dirty:72kB writeback:64kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 813056kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3172.485567] Node 1 active_anon:2552324kB inactive_anon:803564kB active_file:0kB inactive_file:20kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5604kB dirty:0kB writeback:12kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3172.520307] Node 0 DMA free:10372kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3172.547906] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3172.568064] Node 0 DMA32 free:42576kB min:36296kB low:45368kB high:54440kB active_anon:1548984kB inactive_anon:58908kB active_file:576kB inactive_file:1120kB unevictable:16156kB writepending:136kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:16832kB pagetables:60404kB bounce:0kB free_pcp:1052kB local_pcp:320kB free_cma:0kB [ 3172.660186] lowmem_reserve[]: 0 0 0 0 0 [ 3172.691460] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3172.722273] lowmem_reserve[]: 0 0 0 0 0 [ 3172.764938] Node 1 Normal free:55412kB min:53592kB low:66988kB high:80384kB active_anon:2546780kB inactive_anon:803564kB active_file:0kB inactive_file:24kB unevictable:24092kB writepending:8kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39264kB pagetables:88664kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3172.851958] lowmem_reserve[]: 0 0 0 0 0 [ 3172.856158] Node 0 DMA: 5*4kB (UE) 4*8kB (UM) 3*16kB (UM) 1*32kB (E) 4*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10372kB [ 3172.871893] Node 0 DMA32: 475*4kB (UME) 602*8kB (UME) 305*16kB (UME) 393*32kB (UME) 66*64kB (UME) 18*128kB (UME) 7*256kB (UM) 6*512kB (UM) 2*1024kB (ME) 7*2048kB (M) 1*4096kB (M) = 56044kB [ 3172.889289] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3172.900048] Node 1 Normal: 199*4kB (UMEH) 368*8kB (UMEH) 826*16kB (UMEH) 599*32kB (UMH) 216*64kB (UMH) 43*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55708kB [ 3172.916043] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3172.924878] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3172.933680] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3172.942978] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3172.962740] 13896 total pagecache pages [ 3172.982401] 0 pages in swap cache [ 3173.025639] Swap cache stats: add 0, delete 0, find 0/0 [ 3173.047149] Free swap = 0kB [ 3173.065634] Total swap = 0kB [ 3173.068741] 1965979 pages RAM [ 3173.071840] 0 pages HighMem/MovableOnly [ 3173.090902] 338456 pages reserved [ 3173.094356] 0 pages cma reserved [ 3173.104925] Out of memory: Kill process 23192 (syz-executor.1) score 1005 or sacrifice child [ 3173.114379] Killed process 23192 (syz-executor.1) total-vm:74836kB, anon-rss:4248kB, file-rss:35008kB, shmem-rss:0kB [ 3173.181364] oom_reaper: reaped process 23192 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3173.564381] syz-executor.3 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3173.577842] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3173.583447] CPU: 0 PID: 6355 Comm: syz-executor.3 Not tainted 4.14.184-syzkaller #0 [ 3173.591349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3173.600692] Call Trace: [ 3173.603259] dump_stack+0x1b2/0x283 [ 3173.606869] dump_header+0x178/0x7aa [ 3173.610559] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3173.615559] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3173.620645] ? ___ratelimit+0x2cd/0x522 [ 3173.624595] oom_kill_process.cold+0x10/0xc16 [ 3173.629078] ? lock_downgrade+0x6e0/0x6e0 [ 3173.633224] out_of_memory+0x2d5/0x10f0 [ 3173.637201] ? oom_killer_disable+0x1c0/0x1c0 [ 3173.641695] ? mutex_trylock+0x152/0x1a0 [ 3173.645752] __alloc_pages_nodemask+0x2556/0x2730 [ 3173.650603] ? HARDIRQ_verbose+0x10/0x10 [ 3173.654654] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3173.659532] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3173.664550] ? kmem_cache_alloc_node+0x387/0x400 [ 3173.669306] copy_process.part.0+0x26a/0x6fa0 [ 3173.673797] ? check_preemption_disabled+0x35/0x240 [ 3173.678809] ? perf_trace_lock+0x109/0x4b0 [ 3173.683054] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 3173.687978] ? HARDIRQ_verbose+0x10/0x10 [ 3173.692052] ? __cleanup_sighand+0x40/0x40 [ 3173.696282] ? lock_downgrade+0x6e0/0x6e0 [ 3173.700435] _do_fork+0x180/0xc80 [ 3173.703884] ? put_timespec64+0xaa/0xf0 [ 3173.707852] ? fork_idle+0x270/0x270 [ 3173.711564] ? SyS_clock_gettime+0xf5/0x180 [ 3173.715881] ? SyS_clock_settime+0x1a0/0x1a0 [ 3173.720282] ? do_syscall_64+0x4c/0x640 [ 3173.724268] ? sys_vfork+0x20/0x20 [ 3173.727819] do_syscall_64+0x1d5/0x640 [ 3173.731717] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3173.736898] RIP: 0033:0x45b08a [ 3173.740077] RSP: 002b:00007ffe12d769f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3173.747798] RAX: ffffffffffffffda RBX: 00007ffe12d769f0 RCX: 000000000045b08a [ 3173.755059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3173.762331] RBP: 00007ffe12d76a30 R08: 0000000000000001 R09: 0000000001e7e940 [ 3173.769592] R10: 0000000001e7ec10 R11: 0000000000000246 R12: 0000000000000001 [ 3173.776852] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe12d76a80 [ 3173.800867] Mem-Info: [ 3173.811010] active_anon:1020136 inactive_anon:215618 isolated_anon:0 [ 3173.811010] active_file:69 inactive_file:82 isolated_file:0 [ 3173.811010] unevictable:10062 dirty:0 writeback:0 unstable:0 [ 3173.811010] slab_reclaimable:22132 slab_unreclaimable:168440 [ 3173.811010] mapped:57761 shmem:8366 pagetables:37181 bounce:0 [ 3173.811010] free:31550 free_pcp:98 free_cma:0 [ 3173.845661] Node 0 active_anon:1533920kB inactive_anon:58908kB active_file:72kB inactive_file:236kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:225144kB dirty:0kB writeback:0kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 796672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3173.885487] Node 1 active_anon:2546624kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5604kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3173.913668] Node 0 DMA free:10372kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3173.987447] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3173.992496] Node 0 DMA32 free:60336kB min:36296kB low:45368kB high:54440kB active_anon:1533752kB inactive_anon:58908kB active_file:308kB inactive_file:432kB unevictable:16156kB writepending:12kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:16640kB pagetables:60068kB bounce:0kB free_pcp:172kB local_pcp:20kB free_cma:0kB [ 3174.031749] lowmem_reserve[]: 0 0 0 0 0 [ 3174.035909] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3174.066820] lowmem_reserve[]: 0 0 0 0 0 [ 3174.070832] Node 1 Normal free:55632kB min:53592kB low:66988kB high:80384kB active_anon:2546624kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39136kB pagetables:88656kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3174.100703] lowmem_reserve[]: 0 0 0 0 0 [ 3174.105624] Node 0 DMA: 5*4kB (UE) 4*8kB (UM) 3*16kB (UM) 1*32kB (E) 4*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10372kB [ 3174.120937] Node 0 DMA32: 583*4kB (UM) 595*8kB (UME) 301*16kB (UME) 392*32kB (UME) 61*64kB (UME) 19*128kB (UME) 6*256kB (UM) 6*512kB (UM) 1*1024kB (E) 10*2048kB (M) 1*4096kB (M) = 60996kB [ 3174.138028] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3174.148823] Node 1 Normal: 208*4kB (UMEH) 354*8kB (UMEH) 822*16kB (UMEH) 601*32kB (UMH) 216*64kB (UMH) 43*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55632kB [ 3174.164676] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3174.173506] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3174.182182] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3174.217395] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3174.235741] 13855 total pagecache pages [ 3174.244431] 0 pages in swap cache [ 3174.263980] Swap cache stats: add 0, delete 0, find 0/0 [ 3174.290689] Free swap = 0kB [ 3174.293794] Total swap = 0kB [ 3174.334962] 1965979 pages RAM [ 3174.338068] 0 pages HighMem/MovableOnly [ 3174.342026] 338456 pages reserved [ 3174.394519] 0 pages cma reserved [ 3174.397996] Out of memory: Kill process 23239 (syz-executor.1) score 1005 or sacrifice child [ 3174.412646] Killed process 23239 (syz-executor.1) total-vm:74836kB, anon-rss:4248kB, file-rss:34816kB, shmem-rss:0kB [ 3174.969129] systemd[1]: systemd-journald.service: Failed to create cgroup /system.slice/systemd-journald.service: No such file or directory [ 3175.526081] systemd invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3175.541451] systemd cpuset=/ mems_allowed=0-1 [ 3175.558272] CPU: 1 PID: 1 Comm: systemd Not tainted 4.14.184-syzkaller #0 [ 3175.565201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3175.574547] Call Trace: [ 3175.577133] dump_stack+0x1b2/0x283 [ 3175.580764] dump_header+0x178/0x7aa [ 3175.584472] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3175.589485] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3175.594586] ? ___ratelimit+0x2cd/0x522 [ 3175.598575] oom_kill_process.cold+0x10/0xc16 [ 3175.603072] ? lock_downgrade+0x6e0/0x6e0 [ 3175.607220] out_of_memory+0x2d5/0x10f0 [ 3175.611199] ? oom_killer_disable+0x1c0/0x1c0 [ 3175.615692] ? mutex_trylock+0x152/0x1a0 [ 3175.619759] __alloc_pages_nodemask+0x2556/0x2730 [ 3175.624610] ? HARDIRQ_verbose+0x10/0x10 [ 3175.628675] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3175.633531] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3175.638543] ? kmem_cache_alloc_node+0x387/0x400 [ 3175.643303] copy_process.part.0+0x26a/0x6fa0 [ 3175.647798] ? migrate_huge_page_move_mapping+0x5f0/0x5f0 [ 3175.653338] ? numamigrate_isolate_page+0x3d5/0x6f0 [ 3175.658408] ? task_numa_free+0x530/0x530 [ 3175.662550] ? migrate_misplaced_page+0x53b/0x790 [ 3175.667406] ? pmd_trans_migrating+0x1c0/0x1c0 [ 3175.671979] ? mpol_misplaced+0x249/0x4b0 [ 3175.676130] ? check_preemption_disabled+0x35/0x240 [ 3175.681153] ? __cleanup_sighand+0x40/0x40 [ 3175.685392] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 3175.690317] ? vm_insert_mixed_mkwrite+0x30/0x30 [ 3175.695066] ? HARDIRQ_verbose+0x10/0x10 [ 3175.699130] _do_fork+0x180/0xc80 [ 3175.702584] ? fork_idle+0x270/0x270 [ 3175.706293] ? up_read+0x17/0x30 [ 3175.709649] ? __do_page_fault+0x19a/0xb50 [ 3175.713878] ? do_syscall_64+0x4c/0x640 [ 3175.717855] ? sys_vfork+0x20/0x20 [ 3175.721390] do_syscall_64+0x1d5/0x640 [ 3175.725279] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3175.730461] RIP: 0033:0x7f28eb6bf38b [ 3175.734166] RSP: 002b:00007ffe166e7880 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3175.741866] RAX: ffffffffffffffda RBX: 00007ffe166e7880 RCX: 00007f28eb6bf38b [ 3175.749122] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3175.756380] RBP: 00007ffe166e78d0 R08: 00007f28ed118500 R09: 0000000000000000 [ 3175.763644] R10: 00007f28ed1187d0 R11: 0000000000000246 R12: 0000000000000000 [ 3175.771598] R13: 0000000000000020 R14: 0000000000000001 R15: 0000000000000000 [ 3175.888080] Mem-Info: [ 3175.893060] active_anon:1019090 inactive_anon:215618 isolated_anon:0 [ 3175.893060] active_file:20 inactive_file:381 isolated_file:0 [ 3175.893060] unevictable:10062 dirty:11 writeback:0 unstable:0 [ 3175.893060] slab_reclaimable:22189 slab_unreclaimable:168312 [ 3175.893060] mapped:57901 shmem:8366 pagetables:37177 bounce:0 [ 3175.893060] free:32290 free_pcp:229 free_cma:0 [ 3175.959301] Node 0 active_anon:1529772kB inactive_anon:58908kB active_file:480kB inactive_file:2052kB unevictable:16156kB isolated(anon):0kB isolated(file):128kB mapped:226788kB dirty:64kB writeback:0kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 794624kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3176.008193] Node 1 active_anon:2546608kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5604kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3176.049622] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3176.084112] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3176.089563] Node 0 DMA32 free:64136kB min:36296kB low:45368kB high:54440kB active_anon:1529604kB inactive_anon:58908kB active_file:220kB inactive_file:488kB unevictable:16156kB writepending:64kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:16640kB pagetables:60056kB bounce:0kB free_pcp:332kB local_pcp:0kB free_cma:0kB [ 3176.138293] lowmem_reserve[]: 0 0 0 0 0 [ 3176.142302] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3176.212938] lowmem_reserve[]: 0 0 0 0 0 [ 3176.222312] Node 1 Normal free:55608kB min:53592kB low:66988kB high:80384kB active_anon:2546592kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39136kB pagetables:88656kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3176.263487] lowmem_reserve[]: 0 0 0 0 0 [ 3176.279200] Node 0 DMA: 5*4kB (UE) 4*8kB (UM) 3*16kB (UM) 1*32kB (E) 5*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10436kB [ 3176.314877] Node 0 DMA32: 474*4kB (UM) 582*8kB (UME) 320*16kB (UME) 396*32kB (UME) 61*64kB (UME) 19*128kB (UME) 6*256kB (UM) 6*512kB (UM) 1*1024kB (E) 12*2048kB (M) 1*4096kB (M) = 64984kB [ 3176.335753] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3176.346775] Node 1 Normal: 212*4kB (UMEH) 358*8kB (UMEH) 815*16kB (UMEH) 601*32kB (UMH) 216*64kB (UMH) 43*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55568kB [ 3176.362766] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3176.371659] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3176.389518] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3176.432127] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3176.447151] 14206 total pagecache pages [ 3176.451131] 0 pages in swap cache [ 3176.454689] Swap cache stats: add 0, delete 0, find 0/0 [ 3176.460155] Free swap = 0kB [ 3176.463199] Total swap = 0kB [ 3176.466292] 1965979 pages RAM [ 3176.469390] 0 pages HighMem/MovableOnly [ 3176.473346] 338456 pages reserved [ 3176.476890] 0 pages cma reserved [ 3176.480243] Out of memory: Kill process 23582 (syz-executor.2) score 1005 or sacrifice child [ 3176.488919] Killed process 23582 (syz-executor.2) total-vm:75372kB, anon-rss:3964kB, file-rss:34816kB, shmem-rss:0kB [ 3176.587652] systemd[1]: Starting Journal Service... 09:35:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x8}, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0xfd, 0x4, 0x0, 0x0, 0x0, 0xffe000, 0x8a26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0xab80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001ac0)={0xe23, {{0xa, 0x4e22, 0x4a, @loopback, 0x6}}}, 0x90) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 09:35:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x8}, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0xfd, 0x4, 0x0, 0x0, 0x0, 0xffe000, 0x8a26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0xab80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001ac0)={0xe23, {{0xa, 0x4e22, 0x4a, @loopback, 0x6}}}, 0x90) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 09:35:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r2, 0x0, 0x2, r3}) [ 3178.247305] oom_reaper: reaped process 9548 (syz-executor.4), now anon-rss:0kB, file-rss:12kB, shmem-rss:0kB [ 3178.502192] ceph: device name is missing path (no : separator in /) 09:35:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETCAPS(r2, 0x8004500b, 0x0) 09:35:06 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB='/'], &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='ceph\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) 09:35:06 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) [ 3178.962224] ceph: device name is missing path (no : separator in /) 09:35:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:35:07 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB='/'], &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='ceph\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) [ 3180.244520] systemd[1]: systemd-journald.service: Main process exited, code=exited, status=219/CGROUP [ 3180.267215] systemd[1]: Failed to start Journal Service. [ 3180.300938] systemd[1]: Dependency failed for Flush Journal to Persistent Storage. [ 3180.311072] systemd[1]: systemd-journal-flush.service: Job systemd-journal-flush.service/start failed with result 'dependency'. 09:35:09 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000600"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="e861185d77d71def825bf43935bce46916a6c3afd26b659a878f50471a09f6ef8ba084236390df8cdac475d2f97fe8123d22f4696f158a903175adde91380b027e21639e27878cf71b77cda815fbd5439d7be692f19ac77b925eb247b66e7ff6379e16393e9be4b31b5496777bf454f563980e67f0b4ee5aebd007309cdcd46535b4c2ba57a42d175a89a5a63f221acb2cde1ec5c7bff4f903e0c93dd1d87280791daa8ba43ad9c5e12f3a470cbbd744334f53bf621d33dcc3c81d332981bcb15233", @ANYBLOB="7bcb9edbcc9d1dd33846e70f2444fc768f92a8f07763fb63fc6fa9b081ddd072bc035b568311aa58e58b081556c31beeeff913acf3793d936e4610838efb2f636d66a8e9d692f04f65c4d6e455dcdd91"], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000040)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) socket(0x0, 0x2, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x3f, 0x2, @thr={&(0x7f00000002c0)="4c74145667c72c981e0c20426a29454df3ee760f4108b436329d7ab2471fb0bb498d5a1950bfebcd77518d2221ec186b7ced3a1792149817bef87efb68521bd70484e790ec45a8f67bc4eb0bdc19", 0x0}}) lseek(0xffffffffffffffff, 0x0, 0x3) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000180)) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x86180, 0x0) write$binfmt_script(r3, &(0x7f0000000640)={'#! ', './file0', [{0x20, ':8*'}, {0x20, '@)'}, {0x20, ',:\\\\(&'}, {0x20, ',!/\\.#)+'}, {0x20, '[:'}, {0x20, '/dev/ptmx\x00'}, {}, {0x20, '/dev/ptmx\x00'}, {0x20, '/dev/ptmx\x00'}], 0xa, "0df3750e342c0e64544d484e57b08e9ac44477e0bb1d375f5c640253efa4cd005728726cc9f8fa78173afe662ef7892a34b8ff67892c4a635b430b041113c33d1e5408fd76a419c7e41da08c77ab0445a4574bfb159e6879576a1e8d10a1be62333ce68e28076c9c45fd0e238727936cec9ba3d038e813d1ac1104e069844726699931d14e3741"}, 0xce) 09:35:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3180.367450] systemd[1]: systemd-journald.service: Unit entered failed state. 09:35:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_virt_wifi\x00', &(0x7f0000000000)=@ethtool_sset_info={0x50}}) 09:35:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb69d952f41bdd2ac8bb8c43", 0x2e}, {&(0x7f00000000c0)="8f1d484e24c30000a84d4583670e12d9fc5eb0953fbd80630600067704a71e023a27b2da", 0x24}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r2 = accept(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x1f}], 0x17e}}], 0x3204257417b757c, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') r4 = socket(0x11, 0x800000003, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r6, 0x3, 0x3, @broadcast}, 0x10) r7 = socket(0x11, 0x800000003, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x3, 0x3, @broadcast}, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r3, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_LINK={0x8, 0x1, r9}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x10) 09:35:09 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB='/'], &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='ceph\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) [ 3180.413460] systemd[1]: systemd-journald.service: Failed with result 'exit-code'. [ 3180.445940] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. 09:35:09 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x48, 0x2, 0x6, 0x101, 0x0, 0x3, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) [ 3180.498209] systemd[1]: Stopped Journal Service. [ 3180.991033] systemd[1]: systemd-journald.service: Failed to create cgroup /system.slice/systemd-journald.service: No such file or directory 09:35:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="01003a1e2410"}) ioctl$TCSBRKP(0xffffffffffffffff, 0x7040, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 3181.740623] systemd[1]: Starting Journal Service... [ 3181.805322] ceph: device name is missing path (no : separator in /) 09:35:11 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x0, @multicast1=0xe0000002}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, {0x2, 0x0, @dev}, 0xef, 0x0, 0x0, 0x0, 0x702}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r0, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x34) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) rename(&(0x7f0000000200)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, &(0x7f0000000440)) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x0, 0x800, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0x28}}, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0}, 0x0) 09:35:11 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x40}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="0300023a0967f207d598a5b45874729900e9015d72d208dec34d4f04c28552da92b996429baf080000000000006d9f15c4c6e1a7f5d5cb1318b850bcf18c3b87d91face8dacc7c865f4e4d3e77f3ecfbb5080c5a52260c5a715c25beaef60800042b708f9c2007cd3887a135e0ffaba4f83a6166b50b7489720c3d9460aa08d441f2ffff1c9d32d352ea9b286a4a1f98b5966a3e41baea951b180bff3c37de694eaa8a8d2689c3d4d29e8c1a43c52f53235c8acbfc8c89ede226af2a79f1c0e97f3daef296cd1d61"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x10040, 0x0, 0x0, 0x0, 0x34}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) fanotify_mark(0xffffffffffffffff, 0x18, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='rdma.current\x00', 0x275a, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x0) 09:35:11 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB='/'], &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='ceph\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) 09:35:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="01003a1e2410"}) ioctl$TCSBRKP(0xffffffffffffffff, 0x7040, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 09:35:11 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000580)=ANY=[], 0x39, 0x0) r2 = gettid() creat(&(0x7f0000000400)='./file0\x00', 0x0) unlink(&(0x7f0000000180)='./file0\x00') tkill(r2, 0x1000000000016) [ 3183.169619] ceph: device name is missing path (no : separator in /) [ 3183.227286] overlayfs: failed to resolve './file1': -2 09:35:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000008}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:35:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="01003a1e2410"}) ioctl$TCSBRKP(0xffffffffffffffff, 0x7040, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 09:35:12 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000580)=ANY=[], 0x39, 0x0) r2 = gettid() creat(&(0x7f0000000400)='./file0\x00', 0x0) unlink(&(0x7f0000000180)='./file0\x00') tkill(r2, 0x1000000000016) 09:35:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3184.148955] syz-executor.1 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3184.197632] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 3184.215670] CPU: 1 PID: 9612 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 3184.223487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3184.232844] Call Trace: [ 3184.235434] dump_stack+0x1b2/0x283 [ 3184.239064] dump_header+0x178/0x7aa [ 3184.242775] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3184.247790] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3184.252891] ? ___ratelimit+0x2cd/0x522 [ 3184.256874] oom_kill_process.cold+0x10/0xc16 [ 3184.261374] ? lock_downgrade+0x6e0/0x6e0 [ 3184.265644] out_of_memory+0x2d5/0x10f0 [ 3184.269628] ? oom_killer_disable+0x1c0/0x1c0 [ 3184.274121] ? mutex_trylock+0x152/0x1a0 [ 3184.278187] __alloc_pages_nodemask+0x2556/0x2730 [ 3184.283046] ? HARDIRQ_verbose+0x10/0x10 [ 3184.287109] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3184.291964] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3184.296979] ? kmem_cache_alloc_node+0x387/0x400 [ 3184.301740] copy_process.part.0+0x26a/0x6fa0 [ 3184.306240] ? do_raw_spin_unlock+0x164/0x250 [ 3184.310735] ? _raw_spin_unlock+0x29/0x40 [ 3184.314887] ? do_anonymous_page+0x62d/0x17d0 [ 3184.319391] ? finish_fault+0x290/0x290 [ 3184.323365] ? check_preemption_disabled+0x35/0x240 [ 3184.328394] ? __cleanup_sighand+0x40/0x40 [ 3184.332630] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 3184.337558] ? vm_insert_mixed_mkwrite+0x30/0x30 [ 3184.342319] ? HARDIRQ_verbose+0x10/0x10 [ 3184.346385] _do_fork+0x180/0xc80 [ 3184.349855] ? fork_idle+0x270/0x270 [ 3184.353581] ? up_read+0x17/0x30 [ 3184.356960] ? __do_page_fault+0x19a/0xb50 [ 3184.361196] ? do_syscall_64+0x4c/0x640 [ 3184.365168] ? sys_vfork+0x20/0x20 [ 3184.368716] do_syscall_64+0x1d5/0x640 [ 3184.372615] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3184.377804] RIP: 0033:0x45f429 [ 3184.381004] RSP: 002b:00007ffc53b22668 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3184.388723] RAX: ffffffffffffffda RBX: 00007ff5011ec700 RCX: 000000000045f429 09:35:13 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x0, @multicast1=0xe0000002}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, {0x2, 0x0, @dev}, 0xef, 0x0, 0x0, 0x0, 0x702}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r0, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x34) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) rename(&(0x7f0000000200)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, &(0x7f0000000440)) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x0, 0x800, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0x28}}, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0}, 0x0) [ 3184.395991] RDX: 00007ff5011ec9d0 RSI: 00007ff5011ebdb0 RDI: 00000000003d0f00 [ 3184.403260] RBP: 00007ffc53b22890 R08: 00007ff5011ec700 R09: 00007ff5011ec700 [ 3184.410524] R10: 00007ff5011ec9d0 R11: 0000000000000202 R12: 0000000000000000 [ 3184.417851] R13: 00007ffc53b2271f R14: 00007ff5011ec9c0 R15: 000000000078bf0c [ 3184.571126] Mem-Info: [ 3184.576529] active_anon:1022540 inactive_anon:215618 isolated_anon:0 [ 3184.576529] active_file:60 inactive_file:52 isolated_file:0 [ 3184.576529] unevictable:10062 dirty:5 writeback:1 unstable:0 [ 3184.576529] slab_reclaimable:22215 slab_unreclaimable:167793 [ 3184.576529] mapped:57694 shmem:8366 pagetables:37316 bounce:0 [ 3184.576529] free:29053 free_pcp:0 free_cma:0 [ 3184.661135] Node 0 active_anon:1543668kB inactive_anon:58908kB active_file:152kB inactive_file:100kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:225168kB dirty:20kB writeback:4kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 808960kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3184.708835] Node 1 active_anon:2546492kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5608kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3184.757302] Node 0 DMA free:10420kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3184.818633] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3184.828846] Node 0 DMA32 free:47488kB min:36296kB low:45368kB high:54440kB active_anon:1543500kB inactive_anon:58908kB active_file:496kB inactive_file:812kB unevictable:16156kB writepending:24kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:16640kB pagetables:60608kB bounce:0kB free_pcp:1192kB local_pcp:696kB free_cma:0kB [ 3184.871649] lowmem_reserve[]: 0 0 0 0 0 [ 3184.875815] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3184.922082] lowmem_reserve[]: 0 0 0 0 0 [ 3184.926213] Node 1 Normal free:55576kB min:53592kB low:66988kB high:80384kB active_anon:2546492kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39328kB pagetables:88656kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3184.968291] lowmem_reserve[]: 0 0 0 0 0 [ 3184.972859] Node 0 DMA: 5*4kB (UE) 4*8kB (UM) 4*16kB (UM) 2*32kB (UE) 4*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10420kB [ 3185.003806] Node 0 DMA32: 831*4kB (UME) 453*8kB (UME) 247*16kB (UME) 363*32kB (UME) 78*64kB (UME) 23*128kB (UME) 7*256kB (UM) 3*512kB (UM) 1*1024kB (E) 5*2048kB (M) 1*4096kB (M) = 49140kB [ 3185.029590] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3185.040501] Node 1 Normal: 236*4kB (UMEH) 245*8kB (UMEH) 852*16kB (UMEH) 599*32kB (UMH) 217*64kB (UMH) 45*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55608kB [ 3185.115461] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3185.127364] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3185.136251] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3185.145367] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3185.154310] 13842 total pagecache pages [ 3185.158277] 0 pages in swap cache [ 3185.162119] Swap cache stats: add 0, delete 0, find 0/0 [ 3185.167479] Free swap = 0kB [ 3185.170487] Total swap = 0kB [ 3185.173609] 1965979 pages RAM [ 3185.176724] 0 pages HighMem/MovableOnly [ 3185.180682] 338456 pages reserved [ 3185.184216] 0 pages cma reserved [ 3185.187607] Out of memory: Kill process 23586 (syz-executor.1) score 1005 or sacrifice child [ 3185.196555] Killed process 23586 (syz-executor.1) total-vm:75372kB, anon-rss:3292kB, file-rss:34816kB, shmem-rss:0kB [ 3185.348607] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3185.360840] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3185.366209] CPU: 1 PID: 6354 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 3185.374003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3185.383377] Call Trace: [ 3185.385981] dump_stack+0x1b2/0x283 [ 3185.389615] dump_header+0x178/0x7aa [ 3185.393343] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3185.398346] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3185.403450] ? ___ratelimit+0x2cd/0x522 [ 3185.407411] oom_kill_process.cold+0x10/0xc16 [ 3185.411910] ? lock_downgrade+0x6e0/0x6e0 [ 3185.416045] out_of_memory+0x2d5/0x10f0 [ 3185.420015] ? oom_killer_disable+0x1c0/0x1c0 [ 3185.424505] ? mutex_trylock+0x152/0x1a0 [ 3185.428566] __alloc_pages_nodemask+0x2556/0x2730 [ 3185.433425] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3185.438248] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3185.443075] ? HARDIRQ_verbose+0x10/0x10 [ 3185.447133] ? cache_grow_begin+0x3f/0x410 [ 3185.451368] cache_grow_begin+0x91/0x410 [ 3185.455434] fallback_alloc+0x205/0x2b0 [ 3185.459414] kmem_cache_alloc+0x1e5/0x3c0 [ 3185.463600] getname_flags+0xc8/0x550 [ 3185.467387] user_path_mountpoint_at+0x23/0x40 [ 3185.471953] SyS_umount+0x11b/0xc00 [ 3185.475571] ? kern_path_create+0x40/0x40 [ 3185.479728] ? __detach_mounts+0x2e0/0x2e0 [ 3185.483971] ? do_syscall_64+0x4c/0x640 [ 3185.487934] ? __detach_mounts+0x2e0/0x2e0 [ 3185.492151] do_syscall_64+0x1d5/0x640 [ 3185.496041] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3185.501228] RIP: 0033:0x45f487 [ 3185.504398] RSP: 002b:00007ffc222f7168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 3185.512142] RAX: ffffffffffffffda RBX: 000000000030956c RCX: 000000000045f487 [ 3185.519398] RDX: 00000000004031c8 RSI: 0000000000000002 RDI: 00007ffc222f7210 [ 3185.526662] RBP: 00000000000029ec R08: 0000000000000000 R09: 0000000000000011 [ 3185.533986] R10: 000000000000000a R11: 0000000000000246 R12: 00007ffc222f82a0 [ 3185.541285] R13: 0000000001876940 R14: 0000000000000000 R15: 00007ffc222f82a0 [ 3185.563477] Mem-Info: [ 3185.565928] active_anon:1021755 inactive_anon:215618 isolated_anon:0 [ 3185.565928] active_file:292 inactive_file:257 isolated_file:32 [ 3185.565928] unevictable:10062 dirty:8 writeback:0 unstable:0 [ 3185.565928] slab_reclaimable:22215 slab_unreclaimable:167854 [ 3185.565928] mapped:58141 shmem:8366 pagetables:37285 bounce:0 [ 3185.565928] free:29275 free_pcp:113 free_cma:0 [ 3185.619788] Node 0 active_anon:1540528kB inactive_anon:58908kB active_file:112kB inactive_file:188kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:225256kB dirty:32kB writeback:0kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 808960kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3185.654730] Node 1 active_anon:2546492kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5608kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3185.696842] Node 0 DMA free:10420kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3185.723857] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3185.728911] Node 0 DMA32 free:51992kB min:36296kB low:45368kB high:54440kB active_anon:1540360kB inactive_anon:58908kB active_file:68kB inactive_file:724kB unevictable:16156kB writepending:16kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:16608kB pagetables:60484kB bounce:0kB free_pcp:216kB local_pcp:0kB free_cma:0kB [ 3185.759045] lowmem_reserve[]: 0 0 0 0 0 [ 3185.763127] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3185.788561] lowmem_reserve[]: 0 0 0 0 0 [ 3185.792736] Node 1 Normal free:55640kB min:53592kB low:66988kB high:80384kB active_anon:2546492kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39328kB pagetables:88656kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3185.825522] lowmem_reserve[]: 0 0 0 0 0 [ 3185.829537] Node 0 DMA: 5*4kB (UE) 4*8kB (UM) 4*16kB (UM) 2*32kB (UE) 4*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10420kB [ 3185.850306] Node 0 DMA32: 1090*4kB (UME) 589*8kB (UME) 300*16kB (UME) 383*32kB (UME) 79*64kB (UME) 25*128kB (UME) 7*256kB (UM) 3*512kB (UM) 1*1024kB (E) 5*2048kB (M) 1*4096kB (M) = 53072kB [ 3185.889150] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3185.903394] Node 1 Normal: 236*4kB (UMEH) 253*8kB (UMEH) 852*16kB (UMEH) 600*32kB (UMH) 217*64kB (UMH) 45*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55704kB [ 3185.956502] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3185.970303] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3185.979613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3185.988886] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3185.998006] 13990 total pagecache pages [ 3186.019143] 0 pages in swap cache [ 3186.025253] Swap cache stats: add 0, delete 0, find 0/0 [ 3186.035474] Free swap = 0kB [ 3186.039080] Total swap = 0kB [ 3186.054771] 1965979 pages RAM [ 3186.058403] 0 pages HighMem/MovableOnly [ 3186.068484] 338456 pages reserved [ 3186.075860] 0 pages cma reserved [ 3186.102299] Out of memory: Kill process 19514 (syz-executor.2) score 1005 or sacrifice child [ 3186.131254] Killed process 19514 (syz-executor.2) total-vm:74976kB, anon-rss:2216kB, file-rss:35860kB, shmem-rss:0kB [ 3186.249132] (journald) invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3186.265845] (journald) cpuset=/ mems_allowed=0-1 [ 3186.270635] CPU: 1 PID: 9576 Comm: (journald) Not tainted 4.14.184-syzkaller #0 [ 3186.278163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3186.287515] Call Trace: [ 3186.290106] dump_stack+0x1b2/0x283 [ 3186.293737] dump_header+0x178/0x7aa [ 3186.297447] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3186.302465] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3186.307579] ? ___ratelimit+0x2cd/0x522 [ 3186.311557] oom_kill_process.cold+0x10/0xc16 [ 3186.316056] ? lock_downgrade+0x6e0/0x6e0 [ 3186.320210] out_of_memory+0x2d5/0x10f0 [ 3186.324194] ? oom_killer_disable+0x1c0/0x1c0 [ 3186.328691] ? mutex_trylock+0x152/0x1a0 [ 3186.332753] __alloc_pages_nodemask+0x2556/0x2730 [ 3186.337599] ? check_preemption_disabled+0x35/0x240 [ 3186.342621] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3186.347548] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3186.352394] ? HARDIRQ_verbose+0x10/0x10 [ 3186.356454] ? cache_grow_begin+0x3f/0x410 [ 3186.360687] cache_grow_begin+0x91/0x410 [ 3186.364741] fallback_alloc+0x205/0x2b0 [ 3186.368711] kmem_cache_alloc+0x1e5/0x3c0 [ 3186.372904] getname_flags+0xc8/0x550 [ 3186.376700] do_sys_open+0x202/0x3e0 [ 3186.380405] ? filp_open+0x60/0x60 [ 3186.383967] ? __do_page_fault+0x19a/0xb50 [ 3186.388186] ? do_syscall_64+0x4c/0x640 [ 3186.392143] ? do_sys_open+0x3e0/0x3e0 [ 3186.396011] do_syscall_64+0x1d5/0x640 [ 3186.399881] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3186.405048] RIP: 0033:0x7f28eb6e270d [ 3186.408742] RSP: 002b:00007ffe166e7700 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 3186.416437] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f28eb6e270d [ 3186.423685] RDX: 0000561d9b9b60ea RSI: 0000000000000100 RDI: 0000561d9ba424f8 [ 3186.430933] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3186.438180] R10: 0000000000000008 R11: 0000000000000293 R12: 0000561d9ce1ed78 [ 3186.445435] R13: 0000000000000000 R14: 0000561d9ce1e950 R15: 00007ffe166e7970 [ 3186.458922] Mem-Info: [ 3186.461414] active_anon:1021203 inactive_anon:215618 isolated_anon:0 [ 3186.461414] active_file:36 inactive_file:406 isolated_file:0 [ 3186.461414] unevictable:10062 dirty:34 writeback:0 unstable:0 [ 3186.461414] slab_reclaimable:22214 slab_unreclaimable:167661 [ 3186.461414] mapped:57921 shmem:8366 pagetables:37223 bounce:0 [ 3186.461414] free:30260 free_pcp:45 free_cma:0 09:35:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="01003a1e2410"}) ioctl$TCSBRKP(0xffffffffffffffff, 0x7040, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 3186.500495] Node 0 active_anon:1538324kB inactive_anon:58908kB active_file:272kB inactive_file:316kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:225376kB dirty:136kB writeback:0kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 808960kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3186.529410] Node 1 active_anon:2546488kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5608kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3186.557219] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3186.586037] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3186.591216] Node 0 DMA32 free:56412kB min:36296kB low:45368kB high:54440kB active_anon:1538156kB inactive_anon:58908kB active_file:692kB inactive_file:612kB unevictable:16156kB writepending:52kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:16576kB pagetables:60236kB bounce:0kB free_pcp:128kB local_pcp:0kB free_cma:0kB [ 3186.621373] lowmem_reserve[]: 0 0 0 0 0 [ 3186.625388] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3186.650788] lowmem_reserve[]: 0 0 0 0 0 [ 3186.655058] Node 1 Normal free:55612kB min:53592kB low:66988kB high:80384kB active_anon:2546488kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39296kB pagetables:88656kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3186.690269] lowmem_reserve[]: 0 0 0 0 0 [ 3186.694509] Node 0 DMA: 5*4kB (UE) 4*8kB (UM) 5*16kB (UM) 2*32kB (UE) 4*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10436kB [ 3186.710155] Node 0 DMA32: 861*4kB (UME) 648*8kB (UME) 326*16kB (UME) 399*32kB (UME) 83*64kB (UME) 26*128kB (UME) 7*256kB (UM) 3*512kB (UM) 1*1024kB (E) 6*2048kB (M) 1*4096kB (M) = 55988kB [ 3186.736334] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3186.766749] Node 1 Normal: 237*4kB (UMEH) 238*8kB (UMEH) 851*16kB (UMEH) 601*32kB (UMH) 217*64kB (UMH) 45*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55604kB [ 3186.783104] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3186.792002] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3186.800571] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3186.819628] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3186.828418] 14372 total pagecache pages [ 3186.832594] 0 pages in swap cache [ 3186.836034] Swap cache stats: add 0, delete 0, find 0/0 [ 3186.841504] Free swap = 0kB [ 3186.844511] Total swap = 0kB [ 3186.847518] 1965979 pages RAM [ 3186.850607] 0 pages HighMem/MovableOnly [ 3186.855454] 338456 pages reserved [ 3186.858899] 0 pages cma reserved [ 3186.862295] Out of memory: Kill process 19566 (syz-executor.2) score 1005 or sacrifice child [ 3186.872065] Killed process 19566 (syz-executor.2) total-vm:74976kB, anon-rss:2216kB, file-rss:35860kB, shmem-rss:0kB [ 3187.003415] oom_reaper: reaped process 19566 (syz-executor.2), now anon-rss:0kB, file-rss:20kB, shmem-rss:0kB [ 3187.100669] syz-executor.2 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3187.113954] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3187.119259] CPU: 1 PID: 6353 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 3187.127052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3187.136396] Call Trace: [ 3187.138980] dump_stack+0x1b2/0x283 [ 3187.142604] dump_header+0x178/0x7aa [ 3187.146310] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3187.151322] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3187.156422] ? ___ratelimit+0x2cd/0x522 [ 3187.160397] oom_kill_process.cold+0x10/0xc16 [ 3187.164887] ? lock_downgrade+0x6e0/0x6e0 [ 3187.169034] out_of_memory+0x2d5/0x10f0 [ 3187.173007] ? oom_killer_disable+0x1c0/0x1c0 [ 3187.177495] ? mutex_trylock+0x152/0x1a0 [ 3187.181557] __alloc_pages_nodemask+0x2556/0x2730 [ 3187.186403] ? kmem_cache_free+0x7c/0x2b0 [ 3187.190551] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3187.195388] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3187.200234] ? HARDIRQ_verbose+0x10/0x10 [ 3187.204294] ? cache_grow_begin+0x3f/0x410 [ 3187.208529] cache_grow_begin+0x91/0x410 [ 3187.212588] fallback_alloc+0x205/0x2b0 [ 3187.216563] kmem_cache_alloc+0x1e5/0x3c0 [ 3187.220709] getname_flags+0xc8/0x550 [ 3187.224508] SyS_mkdirat+0x83/0x220 [ 3187.228133] ? SyS_mknod+0x30/0x30 [ 3187.231672] ? do_syscall_64+0x4c/0x640 [ 3187.235641] ? SyS_mkdirat+0x220/0x220 [ 3187.239526] do_syscall_64+0x1d5/0x640 [ 3187.243420] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3187.248607] RIP: 0033:0x45bed7 [ 3187.251788] RSP: 002b:00007ffc677c9e08 EFLAGS: 00000202 ORIG_RAX: 0000000000000053 [ 3187.259488] RAX: ffffffffffffffda RBX: 00000000003095e7 RCX: 000000000045bed7 [ 3187.266751] RDX: 00007ffc677c9e56 RSI: 00000000000001ff RDI: 00007ffc677c9e50 [ 3187.274031] RBP: 0000000000002ff0 R08: 0000000000000000 R09: 0000000000000006 [ 3187.281292] R10: 0000000000000064 R11: 0000000000000202 R12: 0000000000000011 [ 3187.288556] R13: 00007ffc677c9e40 R14: 0000000000309247 R15: 00007ffc677c9e50 [ 3187.306326] Mem-Info: [ 3187.308751] active_anon:1020659 inactive_anon:215618 isolated_anon:0 [ 3187.308751] active_file:25 inactive_file:101 isolated_file:0 [ 3187.308751] unevictable:10062 dirty:2 writeback:0 unstable:0 [ 3187.308751] slab_reclaimable:22214 slab_unreclaimable:167486 [ 3187.308751] mapped:57680 shmem:8366 pagetables:37197 bounce:0 [ 3187.308751] free:31314 free_pcp:56 free_cma:0 [ 3187.362167] Node 0 active_anon:1536148kB inactive_anon:58908kB active_file:88kB inactive_file:116kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:225012kB dirty:8kB writeback:0kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 806912kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3187.390754] Node 1 active_anon:2546488kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5608kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3187.418443] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3187.445860] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3187.450979] Node 0 DMA32 free:58484kB min:36296kB low:45368kB high:54440kB active_anon:1535980kB inactive_anon:58908kB active_file:272kB inactive_file:912kB unevictable:16156kB writepending:0kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:16544kB pagetables:60132kB bounce:0kB free_pcp:184kB local_pcp:0kB free_cma:0kB [ 3187.493818] lowmem_reserve[]: 0 0 0 0 0 [ 3187.497839] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3187.523529] lowmem_reserve[]: 0 0 0 0 0 [ 3187.527534] Node 1 Normal free:55636kB min:53592kB low:66988kB high:80384kB active_anon:2546488kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39264kB pagetables:88656kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3187.557318] lowmem_reserve[]: 0 0 0 0 0 [ 3187.561433] Node 0 DMA: 5*4kB (UE) 4*8kB (UM) 5*16kB (UM) 2*32kB (UE) 4*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10436kB [ 3187.577273] Node 0 DMA32: 1006*4kB (UME) 658*8kB (UME) 328*16kB (UME) 401*32kB (UME) 83*64kB (UME) 26*128kB (UME) 7*256kB (UM) 3*512kB (UM) 1*1024kB (E) 7*2048kB (M) 1*4096kB (M) = 58792kB [ 3187.594377] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3187.605233] Node 1 Normal: 237*4kB (UMEH) 238*8kB (UMEH) 851*16kB (UMEH) 602*32kB (UMH) 217*64kB (UMH) 45*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55636kB [ 3187.621085] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3187.629914] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3187.638591] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3187.647520] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3187.656162] 13953 total pagecache pages [ 3187.660129] 0 pages in swap cache [ 3187.667840] Swap cache stats: add 0, delete 0, find 0/0 [ 3187.673313] Free swap = 0kB [ 3187.676351] Total swap = 0kB [ 3187.679362] 1965979 pages RAM [ 3187.682581] 0 pages HighMem/MovableOnly [ 3187.686544] 338456 pages reserved [ 3187.689984] 0 pages cma reserved [ 3187.693459] Out of memory: Kill process 19046 (syz-executor.1) score 1005 or sacrifice child [ 3187.702968] Killed process 19046 (syz-executor.1) total-vm:75240kB, anon-rss:2224kB, file-rss:35840kB, shmem-rss:0kB [ 3187.751538] oom_reaper: reaped process 19046 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 09:35:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETA(r2, 0x5406, &(0x7f00000000c0)={0x10a, 0x0, 0x0, 0xbd7d, 0x0, "000000b65a383600"}) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000100)={0xd}) 09:35:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000a00)={0x2, &(0x7f0000000080)=[{0x2c}, {0x80000006}]}, 0x10) 09:35:17 executing program 0: openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000000c0)='dns_resolver\x00', 0x0, &(0x7f0000000240)="dee7030522cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f3233a68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fee505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edecdbd8be51d9917c3e033b06b9e9860ab49c3a4f51ab0124b50c3362201a307df03000", 0x85, r0) 09:35:17 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x40}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="0300023a0967f207d598a5b45874729900e9015d72d208dec34d4f04c28552da92b996429baf080000000000006d9f15c4c6e1a7f5d5cb1318b850bcf18c3b87d91face8dacc7c865f4e4d3e77f3ecfbb5080c5a52260c5a715c25beaef60800042b708f9c2007cd3887a135e0ffaba4f83a6166b50b7489720c3d9460aa08d441f2ffff1c9d32d352ea9b286a4a1f98b5966a3e41baea951b180bff3c37de694eaa8a8d2689c3d4d29e8c1a43c52f53235c8acbfc8c89ede226af2a79f1c0e97f3daef296cd1d61"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x10040, 0x0, 0x0, 0x0, 0x34}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) fanotify_mark(0xffffffffffffffff, 0x18, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='rdma.current\x00', 0x275a, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x0) [ 3188.447590] syz-executor.3 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3188.544061] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3188.583488] CPU: 0 PID: 6355 Comm: syz-executor.3 Not tainted 4.14.184-syzkaller #0 [ 3188.591311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3188.600663] Call Trace: [ 3188.603256] dump_stack+0x1b2/0x283 [ 3188.606890] dump_header+0x178/0x7aa [ 3188.610600] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3188.615613] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3188.620714] ? ___ratelimit+0x2cd/0x522 [ 3188.624712] oom_kill_process.cold+0x10/0xc16 [ 3188.629213] ? lock_downgrade+0x6e0/0x6e0 [ 3188.633363] out_of_memory+0x2d5/0x10f0 [ 3188.637340] ? oom_killer_disable+0x1c0/0x1c0 [ 3188.641828] ? mutex_trylock+0x152/0x1a0 [ 3188.645884] __alloc_pages_nodemask+0x2556/0x2730 [ 3188.650718] ? HARDIRQ_verbose+0x10/0x10 [ 3188.654802] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3188.659632] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3188.664626] ? kmem_cache_alloc_node+0x387/0x400 [ 3188.669377] copy_process.part.0+0x26a/0x6fa0 [ 3188.673903] ? check_preemption_disabled+0x35/0x240 [ 3188.678930] ? perf_trace_lock+0x109/0x4b0 [ 3188.683155] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 3188.688066] ? HARDIRQ_verbose+0x10/0x10 [ 3188.692166] ? __cleanup_sighand+0x40/0x40 [ 3188.696381] ? lock_downgrade+0x6e0/0x6e0 [ 3188.700556] _do_fork+0x180/0xc80 [ 3188.704024] ? put_timespec64+0xaa/0xf0 [ 3188.708006] ? fork_idle+0x270/0x270 [ 3188.711734] ? SyS_clock_gettime+0xf5/0x180 [ 3188.716059] ? SyS_clock_settime+0x1a0/0x1a0 [ 3188.720458] ? do_syscall_64+0x4c/0x640 [ 3188.724439] ? sys_vfork+0x20/0x20 [ 3188.727957] do_syscall_64+0x1d5/0x640 [ 3188.731828] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3188.737019] RIP: 0033:0x45b08a [ 3188.740203] RSP: 002b:00007ffe12d769f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3188.747903] RAX: ffffffffffffffda RBX: 00007ffe12d769f0 RCX: 000000000045b08a [ 3188.755161] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3188.762424] RBP: 00007ffe12d76a30 R08: 0000000000000001 R09: 0000000001e7e940 [ 3188.769772] R10: 0000000001e7ec10 R11: 0000000000000246 R12: 0000000000000001 [ 3188.777020] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe12d76a80 [ 3188.793396] Mem-Info: [ 3188.801325] active_anon:1020061 inactive_anon:215618 isolated_anon:0 [ 3188.801325] active_file:160 inactive_file:297 isolated_file:18 [ 3188.801325] unevictable:10062 dirty:17 writeback:0 unstable:0 [ 3188.801325] slab_reclaimable:22212 slab_unreclaimable:167443 [ 3188.801325] mapped:57889 shmem:8366 pagetables:37128 bounce:0 [ 3188.801325] free:31848 free_pcp:70 free_cma:0 [ 3188.836039] Node 0 active_anon:1533768kB inactive_anon:58908kB active_file:632kB inactive_file:596kB unevictable:16156kB isolated(anon):0kB isolated(file):72kB mapped:225648kB dirty:68kB writeback:0kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 802816kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3188.864991] Node 1 active_anon:2546476kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5608kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3188.892871] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3188.919682] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3188.924903] Node 0 DMA32 free:62000kB min:36296kB low:45368kB high:54440kB active_anon:1533644kB inactive_anon:58908kB active_file:556kB inactive_file:760kB unevictable:16156kB writepending:80kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:16480kB pagetables:59856kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3188.955584] lowmem_reserve[]: 0 0 0 0 0 [ 3188.960173] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3189.075888] lowmem_reserve[]: 0 0 0 0 0 [ 3189.080096] Node 1 Normal free:55564kB min:53592kB low:66988kB high:80384kB active_anon:2546432kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39168kB pagetables:88656kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3189.138715] lowmem_reserve[]: 0 0 0 0 0 [ 3189.148653] Node 0 DMA: 5*4kB (UE) 2*8kB (UM) 4*16kB (UM) 1*32kB (E) 5*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10436kB [ 3189.172293] Node 0 DMA32: 1170*4kB (UME) 725*8kB (UME) 356*16kB (UME) 414*32kB (UME) 88*64kB (UME) 26*128kB (UME) 7*256kB (UM) 3*512kB (UM) 1*1024kB (E) 8*2048kB (M) 1*4096kB (M) = 63216kB [ 3189.189483] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 09:35:17 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000580)=ANY=[], 0x39, 0x0) r2 = gettid() creat(&(0x7f0000000400)='./file0\x00', 0x0) unlink(&(0x7f0000000180)='./file0\x00') tkill(r2, 0x1000000000016) [ 3189.223764] Node 1 Normal: 251*4kB (UMEH) 226*8kB (UMEH) 843*16kB (UMEH) 605*32kB (UMH) 217*64kB (UMH) 45*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55564kB [ 3189.305280] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3189.349542] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3189.367715] systemd[1]: systemd-journald.service: Main process exited, code=exited, status=219/CGROUP [ 3189.379659] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3189.414371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3189.440424] 14701 total pagecache pages [ 3189.444437] 0 pages in swap cache [ 3189.447920] Swap cache stats: add 0, delete 0, find 0/0 [ 3189.460078] Free swap = 0kB [ 3189.463164] Total swap = 0kB [ 3189.466180] 1965979 pages RAM [ 3189.469302] 0 pages HighMem/MovableOnly [ 3189.473530] 338456 pages reserved [ 3189.476978] 0 pages cma reserved [ 3189.480497] Out of memory: Kill process 12796 (syz-executor.5) score 1005 or sacrifice child [ 3189.490149] Killed process 12796 (syz-executor.5) total-vm:75240kB, anon-rss:2224kB, file-rss:35840kB, shmem-rss:0kB [ 3189.536130] oom_reaper: reaped process 12796 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3189.821530] Option ':híó5«ó^Å' to dns_resolver key: bad/missing value [ 3190.238537] systemd[1]: Failed to start Journal Service. [ 3190.266135] systemd[1]: systemd-journald.service: Unit entered failed state. [ 3190.278090] systemd[1]: systemd-journald.service: Failed with result 'exit-code'. 09:35:18 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000580)=ANY=[], 0x39, 0x0) r2 = gettid() creat(&(0x7f0000000400)='./file0\x00', 0x0) unlink(&(0x7f0000000180)='./file0\x00') tkill(r2, 0x1000000000016) 09:35:19 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x40}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="0300023a0967f207d598a5b45874729900e9015d72d208dec34d4f04c28552da92b996429baf080000000000006d9f15c4c6e1a7f5d5cb1318b850bcf18c3b87d91face8dacc7c865f4e4d3e77f3ecfbb5080c5a52260c5a715c25beaef60800042b708f9c2007cd3887a135e0ffaba4f83a6166b50b7489720c3d9460aa08d441f2ffff1c9d32d352ea9b286a4a1f98b5966a3e41baea951b180bff3c37de694eaa8a8d2689c3d4d29e8c1a43c52f53235c8acbfc8c89ede226af2a79f1c0e97f3daef296cd1d61"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x10040, 0x0, 0x0, 0x0, 0x34}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) fanotify_mark(0xffffffffffffffff, 0x18, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='rdma.current\x00', 0x275a, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x0) 09:35:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETA(r2, 0x5406, &(0x7f00000000c0)={0x10a, 0x0, 0x0, 0xbd7d, 0x0, "000000b65a383600"}) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000100)={0xd}) 09:35:18 executing program 0: openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000000c0)='dns_resolver\x00', 0x0, &(0x7f0000000240)="dee7030522cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f3233a68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fee505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edecdbd8be51d9917c3e033b06b9e9860ab49c3a4f51ab0124b50c3362201a307df03000", 0x85, r0) 09:35:18 executing program 1: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 040'], 0x1, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) [ 3190.286218] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 3190.302558] systemd[1]: Stopped Journal Service. [ 3190.320876] systemd[1]: systemd-journald.service: Failed to create cgroup /system.slice/systemd-journald.service: No such file or directory [ 3190.341422] Option ':híó5«ó^Å' to dns_resolver key: bad/missing value [ 3190.368988] systemd[1]: Starting Journal Service... [ 3190.374880] encrypted_key: keyword 'new' not allowed when called from .update method [ 3190.611841] systemd[1]: Failed to parse /proc/self/mountinfo: No such file or directory 09:35:19 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x0, @multicast1=0xe0000002}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, {0x2, 0x0, @dev}, 0xef, 0x0, 0x0, 0x0, 0x702}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r0, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x34) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) rename(&(0x7f0000000200)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, &(0x7f0000000440)) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x0, 0x800, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0x28}}, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0}, 0x0) 09:35:19 executing program 0: openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000000c0)='dns_resolver\x00', 0x0, &(0x7f0000000240)="dee7030522cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f3233a68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fee505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edecdbd8be51d9917c3e033b06b9e9860ab49c3a4f51ab0124b50c3362201a307df03000", 0x85, r0) 09:35:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETA(r2, 0x5406, &(0x7f00000000c0)={0x10a, 0x0, 0x0, 0xbd7d, 0x0, "000000b65a383600"}) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000100)={0xd}) 09:35:19 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454de, 0xb05300) 09:35:19 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) 09:35:19 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x40}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="0300023a0967f207d598a5b45874729900e9015d72d208dec34d4f04c28552da92b996429baf080000000000006d9f15c4c6e1a7f5d5cb1318b850bcf18c3b87d91face8dacc7c865f4e4d3e77f3ecfbb5080c5a52260c5a715c25beaef60800042b708f9c2007cd3887a135e0ffaba4f83a6166b50b7489720c3d9460aa08d441f2ffff1c9d32d352ea9b286a4a1f98b5966a3e41baea951b180bff3c37de694eaa8a8d2689c3d4d29e8c1a43c52f53235c8acbfc8c89ede226af2a79f1c0e97f3daef296cd1d61"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x10040, 0x0, 0x0, 0x0, 0x34}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) fanotify_mark(0xffffffffffffffff, 0x18, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='rdma.current\x00', 0x275a, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x0) [ 3190.675695] systemd[1]: Failed to parse /proc/self/mountinfo: No such file or directory 09:35:19 executing program 0: openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000000c0)='dns_resolver\x00', 0x0, &(0x7f0000000240)="dee7030522cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f3233a68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fee505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edecdbd8be51d9917c3e033b06b9e9860ab49c3a4f51ab0124b50c3362201a307df03000", 0x85, r0) [ 3190.717504] IPVS: Error connecting to the multicast addr [ 3190.735299] Option ':híó5«ó^Å' to dns_resolver key: bad/missing value 09:35:19 executing program 1: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x498, 0x188, 0x188, 0x310, 0x0, 0x270, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0x0, 'xfrm0\x00', 'macvlan0\x00'}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@set4={{0x50, 'set\x00'}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @dev}}}, {{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'veth1_virt_wifi\x00', 'ipvlan1\x00'}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}, @common=@ah={{0x30, 'ah\x00'}}]}, @TTL={0x28, 'TTL\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) 09:35:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETA(r2, 0x5406, &(0x7f00000000c0)={0x10a, 0x0, 0x0, 0xbd7d, 0x0, "000000b65a383600"}) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000100)={0xd}) 09:35:19 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) [ 3190.767406] IPVS: Error connecting to the multicast addr 09:35:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x69, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000380)={0x1, {&(0x7f0000000140)=""/206, 0xce, &(0x7f0000000340)=""/14, 0x1, 0x1}}, 0x48) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x8, 0x89, 0xffd}, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0x0, @none}, &(0x7f0000000440)=0xe, 0x80800) r2 = gettid() r3 = creat(&(0x7f0000000100)='./file0\x00', 0x1) write$binfmt_script(r3, 0x0, 0x2f2) prctl$PR_SET_PTRACER(0x59616d61, r2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x90428, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x2b0e}, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) getcwd(&(0x7f00000002c0)=""/117, 0x75) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) 09:35:19 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) [ 3190.837168] Option ':híó5«ó^Å' to dns_resolver key: bad/missing value [ 3190.871831] IPVS: Error connecting to the multicast addr [ 3190.977660] IPVS: Error connecting to the multicast addr 09:35:20 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x0, @multicast1=0xe0000002}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, {0x2, 0x0, @dev}, 0xef, 0x0, 0x0, 0x0, 0x702}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r0, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x34) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) rename(&(0x7f0000000200)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, &(0x7f0000000440)) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x0, 0x800, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0x28}}, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0}, 0x0) 09:35:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 09:35:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00', 0x1}) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x8b7, 0x842200) 09:35:20 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) 09:35:20 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='<'], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x3f5, &(0x7f0000000000)=[{}]}, 0x10) [ 3191.635956] syz-executor.2 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3191.699812] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3191.708783] CPU: 0 PID: 9699 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 3191.716609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3191.725971] Call Trace: [ 3191.728588] dump_stack+0x1b2/0x283 [ 3191.732222] dump_header+0x178/0x7aa [ 3191.735932] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3191.740954] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3191.746056] ? ___ratelimit+0x2cd/0x522 [ 3191.750033] oom_kill_process.cold+0x10/0xc16 [ 3191.754534] ? lock_downgrade+0x6e0/0x6e0 [ 3191.758688] out_of_memory+0x2d5/0x10f0 [ 3191.762681] ? oom_killer_disable+0x1c0/0x1c0 [ 3191.767175] ? mutex_trylock+0x152/0x1a0 [ 3191.771240] __alloc_pages_nodemask+0x2556/0x2730 [ 3191.776101] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3191.780941] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3191.785790] ? HARDIRQ_verbose+0x10/0x10 [ 3191.789878] ? cache_grow_begin+0x3f/0x410 [ 3191.794111] cache_grow_begin+0x91/0x410 [ 3191.798172] fallback_alloc+0x205/0x2b0 [ 3191.802161] kmem_cache_alloc+0x1e5/0x3c0 [ 3191.806312] getname_flags+0xc8/0x550 [ 3191.810117] ? SyS_access+0x20/0x20 [ 3191.813746] user_path_at_empty+0x2a/0x50 [ 3191.817992] SyS_chdir+0x7e/0x1a0 [ 3191.821616] ? SyS_access+0x20/0x20 [ 3191.825258] ? __do_page_fault+0x19a/0xb50 [ 3191.829493] ? do_syscall_64+0x4c/0x640 [ 3191.833463] ? SyS_access+0x20/0x20 [ 3191.837087] do_syscall_64+0x1d5/0x640 [ 3191.840978] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3191.846166] RIP: 0033:0x45c0a7 [ 3191.849351] RSP: 002b:00007ffc677c9e08 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 3191.857059] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045c0a7 [ 3191.864346] RDX: 0000000000000001 RSI: 0000000000741e70 RDI: 00007ffc677c9e50 [ 3191.871615] RBP: 0000000000000000 R08: 0000000000000001 R09: 000000000206e940 [ 3191.878880] R10: 000000000206ec10 R11: 0000000000000246 R12: 0000000000000001 [ 3191.886237] R13: 00007ffc677c9e40 R14: 0000000000000000 R15: 00007ffc677c9e50 [ 3191.925602] Mem-Info: [ 3191.945665] active_anon:1019647 inactive_anon:215618 isolated_anon:0 [ 3191.945665] active_file:180 inactive_file:189 isolated_file:0 [ 3191.945665] unevictable:10062 dirty:15 writeback:0 unstable:0 [ 3191.945665] slab_reclaimable:22279 slab_unreclaimable:166889 [ 3191.945665] mapped:57932 shmem:8366 pagetables:37276 bounce:0 [ 3191.945665] free:32643 free_pcp:146 free_cma:0 [ 3191.997113] Node 0 active_anon:1532252kB inactive_anon:58908kB active_file:160kB inactive_file:1256kB unevictable:16156kB isolated(anon):0kB isolated(file):112kB mapped:226020kB dirty:60kB writeback:0kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 800768kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3192.043252] Node 1 active_anon:2546336kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5608kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3192.079520] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3192.124329] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3192.134311] Node 0 DMA32 free:63824kB min:36296kB low:45368kB high:54440kB active_anon:1532084kB inactive_anon:58908kB active_file:500kB inactive_file:508kB unevictable:16156kB writepending:60kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:16448kB pagetables:60448kB bounce:0kB free_pcp:804kB local_pcp:668kB free_cma:0kB [ 3192.182310] lowmem_reserve[]: 0 0 0 0 0 [ 3192.187329] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3192.226885] lowmem_reserve[]: 0 0 0 0 0 [ 3192.231241] Node 1 Normal free:56396kB min:53592kB low:66988kB high:80384kB active_anon:2546336kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24092kB kernel_stack:39520kB pagetables:88656kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 3192.269587] lowmem_reserve[]: 0 0 0 0 0 [ 3192.287157] Node 0 DMA: 5*4kB (UE) 3*8kB (UM) 4*16kB (UM) 1*32kB (E) 5*64kB (UME) 2*128kB (ME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10444kB [ 3192.309652] Node 0 DMA32: 860*4kB (UME) 714*8kB (UME) 373*16kB (UME) 398*32kB (UME) 83*64kB (UME) 26*128kB (UME) 7*256kB (UM) 3*512kB (UM) 1*1024kB (E) 9*2048kB (M) 1*4096kB (M) = 63376kB [ 3192.332343] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3192.347129] Node 1 Normal: 273*4kB (UMEH) 181*8kB (MEH) 890*16kB (UMEH) 595*32kB (UMH) 213*64kB (UMH) 43*128kB (UM) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55980kB [ 3192.365370] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3192.380484] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3192.389529] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3192.398790] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3192.419984] 14150 total pagecache pages [ 3192.429998] 0 pages in swap cache [ 3192.454444] Swap cache stats: add 0, delete 0, find 0/0 [ 3192.487568] Free swap = 0kB [ 3192.511946] Total swap = 0kB 09:35:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 3192.534705] 1965979 pages RAM [ 3192.552510] 0 pages HighMem/MovableOnly [ 3192.579226] 338456 pages reserved [ 3192.586589] 0 pages cma reserved [ 3192.606977] Out of memory: Kill process 20916 (syz-executor.4) score 1005 or sacrifice child [ 3192.631186] Killed process 20916 (syz-executor.4) total-vm:74976kB, anon-rss:2212kB, file-rss:35840kB, shmem-rss:0kB [ 3192.855477] IPVS: Error connecting to the multicast addr 09:35:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 09:35:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00', 0x1}) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x8b7, 0x842200) 09:35:22 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='<'], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x3f5, &(0x7f0000000000)=[{}]}, 0x10) 09:35:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 09:35:22 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='<'], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x3f5, &(0x7f0000000000)=[{}]}, 0x10) 09:35:22 executing program 0: vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000300)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @private1}}}}, &(0x7f00000003c0)=0xb0) 09:35:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 3194.310070] overlayfs: failed to resolve './file1': -2 09:35:23 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='<'], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x3f5, &(0x7f0000000000)=[{}]}, 0x10) 09:35:23 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r2, 0x0, 0x10000000000443) 09:35:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00', 0x1}) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x8b7, 0x842200) 09:35:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 09:35:23 executing program 5: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000074774270600fd5721d412dea281", @ANYRES32=0x0, @ANYBLOB="7f210102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c010000000000000000800"], 0x50}}, 0x20000044) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 09:35:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x0, 0xbdfa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x16, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 09:35:23 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="665f07000005eb301420385373bc337600360600000000000000c6b18f7f8054617cbed5f8000400001500", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, 0x78) tkill(r2, 0x36) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 09:35:23 executing program 1: r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x24000000) fchdir(r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x16) 09:35:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 09:35:23 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x4}, 0x1c) recvmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001600), 0x45, 0x0, 0x172}}], 0x2f4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd601bfc97004d8800fe800000000000000000000000000000ff02000000000000000000000000000100004e20004d90"], 0x0) shutdown(r0, 0x0) 09:35:23 executing program 2: r0 = syz_open_procfs(0x0, 0x0) openat(r0, &(0x7f00000001c0)='./bus\x00', 0x40041, 0x5) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x4) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(0xffffffffffffffff, &(0x7f0000000100), 0x18d, 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 09:35:23 executing program 1: r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x24000000) fchdir(r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x16) [ 3195.309158] device macsec1 entered promiscuous mode 09:35:24 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00', 0x1}) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x8b7, 0x842200) [ 3195.384953] device @þþÿ entered promiscuous mode [ 3195.390410] device team_slave_0 entered promiscuous mode [ 3195.396532] device team_slave_1 entered promiscuous mode [ 3195.404388] IPv6: ADDRCONF(NETDEV_UP): macsec1: link is not ready 09:35:24 executing program 2: r0 = syz_open_procfs(0x0, 0x0) openat(r0, &(0x7f00000001c0)='./bus\x00', 0x40041, 0x5) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x4) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(0xffffffffffffffff, &(0x7f0000000100), 0x18d, 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 09:35:24 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000, 0x3f, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000001740)="01", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000280)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r0, r1}, &(0x7f0000000700)=""/250, 0xfa, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000380), 0x4) 09:35:24 executing program 2: r0 = syz_open_procfs(0x0, 0x0) openat(r0, &(0x7f00000001c0)='./bus\x00', 0x40041, 0x5) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x4) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(0xffffffffffffffff, &(0x7f0000000100), 0x18d, 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 09:35:24 executing program 5: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000074774270600fd5721d412dea281", @ANYRES32=0x0, @ANYBLOB="7f210102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c010000000000000000800"], 0x50}}, 0x20000044) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 09:35:24 executing program 2: r0 = syz_open_procfs(0x0, 0x0) openat(r0, &(0x7f00000001c0)='./bus\x00', 0x40041, 0x5) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x4) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(0xffffffffffffffff, &(0x7f0000000100), 0x18d, 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 3196.736456] systemd[1]: systemd-journald.service: Main process exited, code=exited, status=219/CGROUP [ 3196.747028] systemd[1]: Failed to start Journal Service. [ 3196.756323] systemd[1]: systemd-journald.service: Unit entered failed state. [ 3196.765138] systemd[1]: systemd-journald.service: Failed with result 'exit-code'. [ 3196.773069] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 3196.782765] systemd[1]: Stopped Journal Service. [ 3196.805606] systemd[1]: systemd-journald.service: Failed to create cgroup /system.slice/systemd-journald.service: No such file or directory [ 3196.825096] systemd[1]: Starting Journal Service... 09:35:26 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="665f07000005eb301420385373bc337600360600000000000000c6b18f7f8054617cbed5f8000400001500", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, 0x78) tkill(r2, 0x36) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 09:35:26 executing program 1: r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x24000000) fchdir(r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x16) 09:35:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r2) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x12f}]) 09:35:26 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x2, 0x4c}, &(0x7f0000000040)='R\x10rist\x18m\x84\x89\xa5\x05\x04Vi0\x97ddR\xd1\x06\xd3r\x90J%P\x0f\x82[\n~P\xd7\x12\x805', 0xfffffffffffffffb) syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') prctl$PR_GET_FPEXC(0xb, &(0x7f0000000340)) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:35:26 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000, 0x3f, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000001740)="01", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000280)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r0, r1}, &(0x7f0000000700)=""/250, 0xfa, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000380), 0x4) 09:35:26 executing program 5: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000074774270600fd5721d412dea281", @ANYRES32=0x0, @ANYBLOB="7f210102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c010000000000000000800"], 0x50}}, 0x20000044) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 09:35:26 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000, 0x3f, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000001740)="01", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000280)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r0, r1}, &(0x7f0000000700)=""/250, 0xfa, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000380), 0x4) 09:35:26 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket(0x11, 0x2, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="c18f0000000000000c0020"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x20, r2, 0x800, 0x70bd25, 0x0, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0xc080) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 09:35:27 executing program 1: r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x24000000) fchdir(r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x16) 09:35:27 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000, 0x3f, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000001740)="01", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000280)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r0, r1}, &(0x7f0000000700)=""/250, 0xfa, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000380), 0x4) 09:35:27 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000, 0x3f, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000001740)="01", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000280)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r0, r1}, &(0x7f0000000700)=""/250, 0xfa, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000380), 0x4) 09:35:27 executing program 5: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000074774270600fd5721d412dea281", @ANYRES32=0x0, @ANYBLOB="7f210102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c010000000000000000800"], 0x50}}, 0x20000044) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) [ 3198.796921] systemd[1]: systemd-journald.service: Main process exited, code=exited, status=219/CGROUP [ 3199.350614] systemd[1]: Failed to start Journal Service. 09:35:29 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="665f07000005eb301420385373bc337600360600000000000000c6b18f7f8054617cbed5f8000400001500", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, 0x78) tkill(r2, 0x36) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 09:35:29 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000, 0x3f, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000001740)="01", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000280)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r0, r1}, &(0x7f0000000700)=""/250, 0xfa, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000380), 0x4) 09:35:29 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000, 0x3f, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000001740)="01", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000280)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r0, r1}, &(0x7f0000000700)=""/250, 0xfa, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000380), 0x4) 09:35:29 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x1}]}}]}, 0x38}}, 0x0) 09:35:29 executing program 1: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7bfd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x5fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000005c0)=ANY=[@ANYBLOB='[d::]::'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860", 0x10, 0x11, 0x0, 0x0) 09:35:29 executing program 3: r0 = memfd_create(&(0x7f0000000180)='\vem1\xc1\xf8\xa6\x8dL\xc4J\x80\x89K\xf6w\xf3\x97\xac#*\x7f{\x16\xe1\v\xbb\x91gu\x88_[)i\xe1MK_S#%\xd8\x82h\xe2\x1f\xd4\xd6\x80!\xcb`\xbc\xaa%\xed*\xc4\x9fU\"\xa7\xe5SK8\xe5b\xaf^\x02\xb8-Hr\x13\b7\x80\xe0\xb2\xaf\xb6\x98\x02J\xed\x1d\x9cO\x15m\'\xd2\xa2AI\xdb \xc8\x85\xf9\x93\xe0^A{\x8av\xbb{\t\xd3\xf1b\x83\xb4\xa9\x894\xb9m\x8f\x8e:2L\x06J\xf8\xde\xd0nRA\x8d\x8c\xf9\x1cT\x10\x94\x9a\x90\xc6\x87*zBX\xca\x00\xdc\x1b}\xfe\x97\x1al\xdd\xa9 \x18\xcf\xc7\r\xae\xc8 \xb2\x81\xb4\xf6\xa6\xd7$\xda\xc3\x1fN\x8d\x85-%M\xed\xff\x13\x9e\x02\x1e\x9a', 0x4) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x1000004, 0x4046811, r0, 0x0) 09:35:29 executing program 3: openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000200)='X', 0x1, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) [ 3201.422162] syz-executor.1: page allocation failure: order:5, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 3201.451194] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 3201.464347] CPU: 0 PID: 9889 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 3201.472157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3201.481515] Call Trace: [ 3201.484123] dump_stack+0x1b2/0x283 [ 3201.487769] warn_alloc.cold+0x96/0x1af [ 3201.491746] ? zone_watermark_ok_safe+0x250/0x250 [ 3201.496701] ? try_to_compact_pages+0x525/0x770 [ 3201.501372] ? try_to_compact_pages+0x52a/0x770 [ 3201.506063] ? __alloc_pages_direct_compact+0xba/0x360 [ 3201.511349] __alloc_pages_nodemask+0x2129/0x2730 [ 3201.516195] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3201.521214] ? __lock_acquire+0x655/0x42a0 [ 3201.525461] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 3201.529983] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3201.534825] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3201.539688] ? HARDIRQ_verbose+0x10/0x10 [ 3201.543752] ? ____cache_alloc_node+0x153/0x1c0 [ 3201.548423] ? cache_grow_begin+0x3f/0x410 [ 3201.552658] cache_grow_begin+0x91/0x410 [ 3201.556724] fallback_alloc+0x205/0x2b0 [ 3201.560710] __kmalloc+0x213/0x400 [ 3201.564250] ? mempool_create_node+0x2bb/0x3d0 [ 3201.568835] ? mempool_kfree+0x20/0x20 [ 3201.572730] mempool_create_node+0x2bb/0x3d0 [ 3201.577234] ceph_mount+0x78a/0x181c [ 3201.580956] ? __lockdep_init_map+0x100/0x560 [ 3201.585462] mount_fs+0x92/0x2a0 [ 3201.588834] vfs_kern_mount.part.0+0x5b/0x3c0 [ 3201.593332] do_mount+0x3c9/0x25e0 [ 3201.596877] ? copy_mount_string+0x40/0x40 [ 3201.601126] ? __might_fault+0x177/0x1b0 [ 3201.605200] ? _copy_from_user+0x94/0x100 [ 3201.609361] ? memdup_user+0x54/0xa0 [ 3201.613080] ? copy_mount_options+0x1ec/0x2e0 [ 3201.617575] ? copy_mnt_ns+0x8a0/0x8a0 [ 3201.621472] SyS_mount+0xa8/0x120 [ 3201.624930] ? copy_mnt_ns+0x8a0/0x8a0 [ 3201.628830] do_syscall_64+0x1d5/0x640 [ 3201.632727] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3201.637910] RIP: 0033:0x45ca59 [ 3201.641093] RSP: 002b:00007ff5011ebc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3201.648808] RAX: ffffffffffffffda RBX: 00000000004f6be0 RCX: 000000000045ca59 [ 3201.656168] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 00000000200005c0 [ 3201.663444] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 09:35:30 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0xd, &(0x7f0000000080), 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r1) dup3(r5, r0, 0x0) 09:35:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x85, &(0x7f00000003c0)={@local, @local, @void, {@generic={0x88f5, "714d96488c2fe434a0e561ae949acb9336b2e303411ae5edd6a2af03757a2201b93a96b18006fb6a35e122d20fc8912961b16a333076be9876e1773e663047cb88da95cf2d3d97d0530d574f5177d9666b1cd7862b4b614d4502abd8f57e2a1c0edc53510fed9041e4f5914ac74d7675b5fa9904f7cbff"}}}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$sock_netdev_private(r4, 0x89b1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$sock(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000040)="1f11c391ebb0498200c347e9bd472454e7f8bd23544bcb8aa2529d374448452e2f7b27efda85e330dc9220b9081ef4e1f31c0e632cad4fc988caf71b479bc6c8e1c31a471c0300000061d295561c906c7f45fb3d2197e86aa42fa237e4880e1c43f22ef649b1e31f8eac87aef5fd0dc37827e4d4c83a4bc5b6d97b441cbfc80000", 0x81}, {&(0x7f0000000840)="f46cbd20fd4b1cbce1a13485b90f59ea6f6ff7d1d49d49638713fdb1f9948a1c0b6f3fe3d61a2acf22d1366859278aeff3d7877b013f83663b0b10f2a41ede88514b50e870f171bf281675932c38887237a754b1bd142f633071c6621340274ad26fec3bca58a92c7a867327e91084834ea6e49a916be86a997789b25ceec3", 0x7f}, {&(0x7f0000000940)="c97bead89525da49a6e9e27830e41ac4aa53b96bf12be3495b331e23ee0c4747d34977d8bf41ab9f082d981f820fa784fd2274ad3944d71110286a211b65db461de7cd29323b", 0x46}, {&(0x7f00000009c0)="9a97b4714716eac6000e39ae06bb1893e3abdb1c3bc5439ded8ec8258984d920fd5c16aa0e08751b24f01dfbe9739d021138fe06f497c78c21c8c2aeb603c16ad31d42ed3f239652eced63555f131fba39d3cb2bac97a366e5b3aacf5705ae4ae9bfece85d6c15f38cf83738cbd3d0648ceb04dceb7d968e12f6be4a7cf42dcaf8fc9ec5a4c44ce73338ead1d78e9054becf951dd58c56d458f90d69dad1bea60ac98f3ffc14fd9d7d0b984911e3d4e82eb41ec3236ac6f6460e4fb7", 0xbc}, {&(0x7f0000000a80)="8b392db9b7a4ffb8f4184472a38d4021e56db1c33c4b", 0x16}, {0x0}], 0x6}, 0x0) splice(r2, 0x0, r1, 0x0, 0x6e803, 0x0) [ 3201.670827] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 3201.678102] R13: 0000000000000768 R14: 00000000004ca5c0 R15: 00007ff5011ec6d4 09:35:30 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000600"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="e861185d77d71def825bf43935bce46916a6c3afd26b659a878f50471a09f6ef8ba084236390df8cdac475d2f97fe8123d22f4696f158a903175adde91380b027e21639e27878cf71b77cda815fbd5439d7be692f19ac77b925eb247b66e7ff6379e16393e9be4b31b5496777bf454f563980e67f0b4ee5aebd007309cdcd46535b4c2ba57a42d175a89a5a63f221acb2cde1ec5c7bff4f903e0c93dd1d87280791daa8ba43ad9c5e12f3a470cbbd744334f53bf621d33dcc3c81d332981bcb15233", @ANYBLOB="7bcb9edbcc9d1dd33846e70f2444fc768f92a8f07763fb63fc6fa9b081ddd072bc035b568311aa58e58b081556c31beeeff913acf3793d936e4610838efb2f636d66a8e9d692f04f65c4d6e455dcdd91"], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000040)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) socket(0x0, 0x2, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x3f, 0x2, @thr={&(0x7f00000002c0)="4c74145667c72c981e0c20426a29454df3ee760f4108b436329d7ab2471fb0bb498d5a1950bfebcd77518d2221ec186b7ced3a1792149817bef87efb68521bd70484e790ec45a8f67bc4eb0bdc19", 0x0}}) lseek(0xffffffffffffffff, 0x0, 0x3) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000180)) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x86180, 0x0) write$binfmt_script(r3, &(0x7f0000000640)={'#! ', './file0', [{0x20, ':8*'}, {0x20, '@)'}, {0x20, ',:\\\\(&'}, {0x20, ',!/\\.#)+'}, {0x20, '[:'}, {0x20, '/dev/ptmx\x00'}, {}, {0x20, '/dev/ptmx\x00'}, {0x20, '/dev/ptmx\x00'}], 0xa, "0df3750e342c0e64544d484e57b08e9ac44477e0bb1d375f5c640253efa4cd005728726cc9f8fa78173afe662ef7892a34b8ff67892c4a635b430b041113c33d1e5408fd76a419c7e41da08c77ab0445a4574bfb159e6879576a1e8d10a1be62333ce68e28076c9c45fd0e238727936cec9ba3d038e813d1ac1104e069844726699931d14e3741"}, 0xce) [ 3202.002190] Mem-Info: [ 3202.005546] active_anon:1022889 inactive_anon:215618 isolated_anon:0 [ 3202.005546] active_file:271 inactive_file:386 isolated_file:0 [ 3202.005546] unevictable:10062 dirty:27 writeback:0 unstable:0 [ 3202.005546] slab_reclaimable:22312 slab_unreclaimable:167256 [ 3202.005546] mapped:58153 shmem:8366 pagetables:37228 bounce:0 [ 3202.005546] free:29384 free_pcp:67 free_cma:0 [ 3202.040478] syz-executor.1: page allocation failure: order:5, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 3202.065225] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 3202.085806] CPU: 1 PID: 9910 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 3202.093629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3202.095879] Node 0 active_anon:1545748kB inactive_anon:58908kB active_file:1568kB inactive_file:3328kB unevictable:16156kB isolated(anon):0kB isolated(file):0kB mapped:228804kB dirty:108kB writeback:0kB shmem:16992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 798720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3202.102974] Call Trace: [ 3202.102993] dump_stack+0x1b2/0x283 [ 3202.103008] warn_alloc.cold+0x96/0x1af [ 3202.103019] ? zone_watermark_ok_safe+0x250/0x250 [ 3202.103031] ? try_to_compact_pages+0x52a/0x770 [ 3202.103049] ? __alloc_pages_direct_compact+0xba/0x360 [ 3202.103064] __alloc_pages_nodemask+0x2129/0x2730 [ 3202.103075] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3202.103105] ? __lock_acquire+0x655/0x42a0 [ 3202.103123] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 3202.103144] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3202.103157] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3202.103175] ? retint_kernel+0x2d/0x2d [ 3202.103199] cache_grow_begin+0x91/0x410 [ 3202.132911] Node 1 active_anon:2545808kB inactive_anon:803564kB active_file:8kB inactive_file:8kB unevictable:24092kB isolated(anon):0kB isolated(file):0kB mapped:5608kB dirty:0kB writeback:0kB shmem:16472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3202.134568] fallback_alloc+0x205/0x2b0 [ 3202.134584] __kmalloc+0x213/0x400 [ 3202.134593] ? mempool_create_node+0x2bb/0x3d0 [ 3202.134603] ? mempool_kfree+0x20/0x20 [ 3202.134615] mempool_create_node+0x2bb/0x3d0 [ 3202.134635] ceph_mount+0x78a/0x181c [ 3202.134655] mount_fs+0x92/0x2a0 [ 3202.134673] vfs_kern_mount.part.0+0x5b/0x3c0 [ 3202.134690] do_mount+0x3c9/0x25e0 [ 3202.140247] Node 0 [ 3202.142357] ? check_preemption_disabled+0x35/0x240 [ 3202.142371] ? copy_mount_string+0x40/0x40 [ 3202.142381] ? copy_mnt_ns+0x8a0/0x8a0 [ 3202.142396] ? copy_mount_options+0x1ec/0x2e0 [ 3202.142405] ? copy_mnt_ns+0x8a0/0x8a0 [ 3202.142417] SyS_mount+0xa8/0x120 [ 3202.142426] ? copy_mnt_ns+0x8a0/0x8a0 [ 3202.142440] do_syscall_64+0x1d5/0x640 [ 3202.142459] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3202.142468] RIP: 0033:0x45ca59 [ 3202.142475] RSP: 002b:00007ff5011a9c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3202.142487] RAX: ffffffffffffffda RBX: 00000000004f6be0 RCX: 000000000045ca59 [ 3202.142494] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 00000000200005c0 [ 3202.142500] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 3202.142506] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 3202.142513] R13: 0000000000000768 R14: 00000000004ca5c0 R15: 00007ff5011aa6d4 [ 3202.299239] syz-executor.4 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask= [ 3202.309474] DMA free:10380kB min:220kB low:272kB high:324kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3202.330696] ================================================================== [ 3202.333997] lowmem_reserve[]: [ 3202.340833] BUG: KASAN: use-after-free in ceph_destroy_options+0xda/0x100 [ 3202.340842] Read of size 8 at addr ffff888045f86b90 by task syz-executor.1/9910 [ 3202.340846] [ 3202.340856] CPU: 1 PID: 9910 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 3202.340862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3202.340865] Call Trace: [ 3202.340879] dump_stack+0x1b2/0x283 [ 3202.340892] ? ceph_destroy_options+0xda/0x100 [ 3202.340911] print_address_description.cold+0x54/0x1dc [ 3202.340924] ? ceph_destroy_options+0xda/0x100 [ 3202.340934] kasan_report.cold+0xa9/0x2b9 [ 3202.340947] ceph_destroy_options+0xda/0x100 [ 3202.349019] 0 [ 3202.358070] ceph_mount+0xd43/0x181c [ 3202.358091] mount_fs+0x92/0x2a0 [ 3202.358107] vfs_kern_mount.part.0+0x5b/0x3c0 [ 3202.358120] do_mount+0x3c9/0x25e0 [ 3202.358133] ? check_preemption_disabled+0x35/0x240 [ 3202.358144] ? copy_mount_string+0x40/0x40 09:35:31 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x8000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0209000100"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000000000000000000200130002000000000000000000001f0300060000000051020049e4f0000002c99a00000000000002000100000000100000000200000000030005000001000002"], 0x60}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r3 = accept(r2, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r4 = accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000001fc0)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0xffffffa3, @private1, 0x49}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000002c0)="89c4f578b080ac4db0b465f428368b15a96834de6b55dd282ee598beca4c6f1712ffe68915fc6f22c011fe93951af59c46f170dd813d4ca2eead", 0x3a}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x1, @mcast1, 0x2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000380)="eca559d86d002c91b7e0aad6131576551270a7bca5c4e7a36294fabbd4424d77824bd5f2e6a0ff017ca62b62c46619a5", 0x30}, {&(0x7f00000003c0)="624b3521aa12c0028ad8dcf420d296535ae77794c7b70c84c39e64df4b10aaf4601bc7590a2b87b3256d8ceb5b6357f5f178d6a114110e83d3ae0c14a6c44a308c551179f410e4b27636b966c11e21293bd49e56caa8ad6d2826ecc07781931c36e70fcaba61a1c1168a6f8fe419656ac3bb7199", 0x74}], 0x2}}, {{&(0x7f0000000480)={0xa, 0x4e22, 0x8, @local, 0xc884}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000500)}, {&(0x7f0000000540)}, {&(0x7f0000000580)="ae3049c4563d695ddc8f7db4cf258195d0944a4c873ddbddc0cf5c6c", 0x1c}, {&(0x7f00000005c0)="15b8d0a4c29ffdf9624f989b64cbbdc4fc9c932134ce605ad7c3a57acc2c68cfe0615847b74fbfd7edd9f0da4aff12dd96fdf5e0c941ff72c92f197b0ebcc3606305fae2fc2651012577d6fad238956481e8f2bcd903baad490932856fe874760feacafdcfc39f164e2d6d411d28807c187e3a2a5d97ad700bb29b8c61e228384d8d7d040c804657849a3b8daed409812adbb9915139853de9cd933d5d07834d1e3e3a52e05f7291c9f6885a6d5450b0a0f4dcf0b3195e487250d867628a4225a999c2e3199f06d6afaa41a157b75adb907d5e4bf068850ef65ee208796964870581aee13ef052f832f68640e54e", 0xee}], 0x4, &(0x7f0000002100)=ANY=[@ANYBLOB="d80000000000000029000000370000003317000000000000c20400000fff010500000000000105000000000004013f01020000c910fe800000000000000000000000bb07180000000204b8c0ff060000000000000010ffffffffffffff4772aea5976e2aef95e37ef5c5b12133db2dac1029b260a65576d8743a72f3f0d28dd06e04beb183177f08052350aa4ea795130a3746a603d36f952ebb69f9efbc2e9ad2d4082b532c93b0807007552db077832fc47623f322d0cb7c8ecc1c4a6b3a3a8e2a7b35e3ef42d337a3e5f9a03415b4e8045a08cccdba00000000290000003e000000090000000000000080000000000000002900000037000000620c000000000000000100050200040812f54b1626ae3e7cf7fcc72880e2b568c5deafc910fc0100000000000000000000000000010710000000010202ce000500000000000000050287e6c20400000003071800000001040801004e2b000000000000000000800000000000000000001400000000000000290000000b000000ffffffff00000000ad5839d7eba99da95f00e35c08a6a8e02a773648330afb99c54a24d90f12ff19ad4c2959c2b555cc0fd671398b9715"], 0x188}}, {{&(0x7f0000000900)={0xa, 0x4e24, 0x8, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xca88}, 0x1c, &(0x7f0000001b80)=[{&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="e731f62bec0340bfbcc58e12ee37965adfb3fdad915e5eb6f168363c0a7e0d89af413ec61cbc89aefd5e0315cbc0231ed223a6bd91d6a3693f9c8fe4cae5f8da45157ddc26012c31c1833eb4c7fe9fe2419856fa4031ab1ba5ee3548ed2badf73bbb5f33075917c988501442949c963f71734d41900e6a19c03ebd4ac7bdce9be506120443c880836a93970b40d2ffacbb0dc9a5ccecd35a1d5ba7514bddc5a917e44db3b2b93974c92ca0a42475624eed53b56c16be", 0xb6}, {&(0x7f0000001a00)="8771769e4aaf5347173eea44c5ce82e863549097ed2963fd1bce1c9e0fc5fefaf90fd9e8728a307b316e1689eeba527d3f21", 0x32}, {&(0x7f0000001a40)="e61d2ca88b07c85d0df537603afb8ab5bd1ca3393a421079e9b96ee34fbc3f12171673c0cbb5e486982735fc5fb492519db37f8e587ff44b55c86e04207619667007bf9553b93d14", 0x48}, {&(0x7f0000001ac0)="4cf97fe61a417ad3216a915edf577b99ac04867f7969d75ee570cc6f9726bcd0ae9ac026f4c31e55e62dc3a114bfbe9c932a2bd6f4b44500313ad6b19617a818ecb8f2118355dccf283439179422b15635485b5c0ac8bba7cf2f51e4c6777a1680c5e193a5158e3f5ae2c041a623665ec9795cd704b6368fa3dd703997074ba9cdbe2e294b625734929fbc3f8a9864a13f4b076dea9161ae31768942cba39e6e3c0452282029cbd0410e9994defbd9d6a16ab7", 0xb3}], 0x5}}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001c00)="65ecccc8751c19759647a4a3b63bac988068562bd6e61c5acccf27ffa88006fa932cd425bc31575ae725790dfff111384a2d3a3a0d7154dfe898c9d5d320", 0x3e}, {&(0x7f0000001c40)}, {&(0x7f0000001c80)="88ba2b0e1c0997be27e037a0f063b078dbfecc86abfe6ab6c70f9254e3756df2540b5ec9cc2ea130500855105dd0af57e2815ec089f7bc4ea2d25294bf21ffcab027d3d035aae37d63873ff857923b", 0x4f}, {&(0x7f0000001d00)="1c0184b235a227", 0x7}, {&(0x7f0000001d40)="c60fbbfe614ee51a124154e50ed124ab565211f839fd54358de032885627965422f2ecc1c9559412678784fbf1f1efd6e5ca51608f9cbd1052cabf8ad3cb82d330caa9a458a35e8913c53b867767c136b952c24e0d310647442527cce5d899e6da86673818357ef3b6952378d2e4aff5f01e254191a1bcbd990ca9f3900af019af3e86085e5e5792f8177e7b46bfbef13f58fb560e2086e7f2d54edd0b1abf2ed65af2393406812dc85a23fa51048eda19e98a95cdc7dc27b764f0b4eacf6c3e684d70a5af3b39c71161bc875a004ad4655d5f2761385b1a09de45b7a410d40af5e368d78c", 0xe5}], 0x5, &(0x7f0000001ec0)=[@tclass={{0x14, 0x29, 0x43, 0x21c13b15}}, @hopopts_2292={{0xa0, 0x29, 0x36, {0x3c, 0x10, [], [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x40, {0x2, 0xe, 0x8, 0x0, [0xc9, 0x4, 0x3, 0xa5, 0x0, 0x2, 0x2]}}, @calipso={0x7, 0x38, {0x2, 0xc, 0x91, 0x200, [0x7fffffff, 0x0, 0x6, 0x9, 0x8, 0x4]}}, @enc_lim]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xffffffcc}}, @flowinfo={{0x14, 0x29, 0xb, 0x8000}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffd}}], 0x100}}], 0x5, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000240)={0x5, [0xff, 0x80, 0x20, 0x4, 0x101]}, 0xe) sendmmsg$inet6(r3, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x1f}], 0x17e}}], 0x3204257417b757c, 0x0) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000100)=0x8) r5 = dup(r1) socket$key(0xf, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000180), 0x4000000000000d0, 0x0) 09:35:31 executing program 3: openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000200)='X', 0x1, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) [ 3202.358155] ? copy_mnt_ns+0x8a0/0x8a0 [ 3202.358167] ? copy_mount_options+0x1ec/0x2e0 [ 3202.358176] ? copy_mnt_ns+0x8a0/0x8a0 [ 3202.358188] SyS_mount+0xa8/0x120 [ 3202.358197] ? copy_mnt_ns+0x8a0/0x8a0 [ 3202.358211] do_syscall_64+0x1d5/0x640 [ 3202.358230] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3202.358240] RIP: 0033:0x45ca59 [ 3202.403814] 2559 [ 3202.408759] RSP: 002b:00007ff5011a9c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3202.408772] RAX: ffffffffffffffda RBX: 00000000004f6be0 RCX: 000000000045ca59 [ 3202.408777] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 00000000200005c0 [ 3202.408784] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 3202.408789] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 3202.408795] R13: 0000000000000768 R14: 00000000004ca5c0 R15: 00007ff5011aa6d4 [ 3202.408818] [ 3202.408823] Allocated by task 9910: [ 3202.408839] kasan_kmalloc.part.0+0x4f/0xd0 [ 3202.408848] kmem_cache_alloc_trace+0x14d/0x3f0 [ 3202.408858] ceph_parse_options+0xb8/0xe50 [ 3202.408869] ceph_mount+0x44f/0x181c [ 3202.408879] mount_fs+0x92/0x2a0 [ 3202.408897] vfs_kern_mount.part.0+0x5b/0x3c0 [ 3202.411222] 2559 [ 3202.418280] do_mount+0x3c9/0x25e0 [ 3202.418288] SyS_mount+0xa8/0x120 [ 3202.418298] do_syscall_64+0x1d5/0x640 [ 3202.418309] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3202.418312] [ 3202.418316] Freed by task 9910: [ 3202.418326] kasan_slab_free+0xaf/0x190 [ 3202.418334] kfree+0xcb/0x260 [ 3202.418344] ceph_destroy_client+0x90/0xb0 [ 3202.418354] ceph_mount+0xd1c/0x181c [ 3202.418363] mount_fs+0x92/0x2a0 [ 3202.418372] vfs_kern_mount.part.0+0x5b/0x3c0 [ 3202.418380] do_mount+0x3c9/0x25e0 [ 3202.418388] SyS_mount+0xa8/0x120 [ 3202.418395] do_syscall_64+0x1d5/0x640 [ 3202.418404] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3202.418408] [ 3202.418416] The buggy address belongs to the object at ffff888045f86ac0 [ 3202.418416] which belongs to the cache kmalloc-256 of size 256 [ 3202.418423] The buggy address is located 208 bytes inside of [ 3202.418423] 256-byte region [ffff888045f86ac0, ffff888045f86bc0) [ 3202.418429] The buggy address belongs to the page: [ 3202.429341] 2559 [ 3202.430337] page:ffffea000117e180 count:1 mapcount:0 mapping:ffff888045f860c0 index:0x0 [ 3202.430348] flags: 0xfffe0000000100(slab) [ 3202.430360] raw: 00fffe0000000100 ffff888045f860c0 0000000000000000 000000010000000c [ 3202.430370] raw: ffffea00023c87a0 ffffea0001741760 ffff8880aa8007c0 0000000000000000 [ 3202.430375] page dumped because: kasan: bad access detected [ 3202.430378] [ 3202.430382] Memory state around the buggy address: [ 3202.430390] ffff888045f86a80: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 3202.430397] ffff888045f86b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3202.430404] >ffff888045f86b80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 3202.430409] ^ [ 3202.430416] ffff888045f86c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3202.430424] ffff888045f86c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3202.430428] ================================================================== [ 3202.430432] Disabling lock debugging due to kernel taint [ 3202.450157] (null) [ 3202.460326] 2559 [ 3202.481096] , order=3, oom_score_adj=0 [ 3202.698955] syz-executor.4 cpuset= [ 3202.701094] Node 0 [ 3202.717181] / [ 3202.721374] DMA32 free:51412kB min:36296kB low:45368kB high:54440kB active_anon:1545680kB inactive_anon:58908kB active_file:292kB inactive_file:1420kB unevictable:16156kB writepending:208kB present:3129332kB managed:2623992kB mlocked:16156kB kernel_stack:16416kB pagetables:60404kB bounce:0kB free_pcp:528kB local_pcp:288kB free_cma:0kB [ 3202.742402] mems_allowed=0-1 [ 3202.748925] lowmem_reserve[]: [ 3202.773714] CPU: 1 PID: 13828 Comm: syz-executor.4 Tainted: G B 4.14.184-syzkaller #0 [ 3202.774895] 0 [ 3202.781833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3202.781836] Call Trace: [ 3202.781852] dump_stack+0x1b2/0x283 [ 3202.781864] dump_header+0x178/0x7aa [ 3202.781872] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3202.781880] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3202.781888] ? ___ratelimit+0x2cd/0x522 [ 3202.781897] oom_kill_process.cold+0x10/0xc16 [ 3202.781906] ? lock_downgrade+0x6e0/0x6e0 [ 3202.781921] out_of_memory+0x2d5/0x10f0 [ 3202.787654] 0 [ 3202.789491] ? oom_killer_disable+0x1c0/0x1c0 [ 3202.789499] ? mutex_trylock+0x152/0x1a0 [ 3202.789510] __alloc_pages_nodemask+0x2556/0x2730 [ 3202.789530] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3202.789539] ? _raw_spin_unlock+0x29/0x40 [ 3202.789556] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3202.789564] ? kmem_cache_alloc_node+0x387/0x400 [ 3202.789577] copy_process.part.0+0x26a/0x6fa0 [ 3202.791805] 0 [ 3202.795575] ? check_preemption_disabled+0x35/0x240 [ 3202.795584] ? perf_trace_lock+0x109/0x4b0 [ 3202.795594] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 3202.795603] ? HARDIRQ_verbose+0x10/0x10 [ 3202.795617] ? __cleanup_sighand+0x40/0x40 [ 3202.795623] ? lock_downgrade+0x6e0/0x6e0 [ 3202.795636] _do_fork+0x180/0xc80 [ 3202.799610] Kernel panic - not syncing: panic_on_warn set ... [ 3202.799610] [ 3202.801369] ? put_timespec64+0xaa/0xf0 [ 3202.976676] ? fork_idle+0x270/0x270 [ 3202.980373] ? SyS_clock_gettime+0xf5/0x180 [ 3202.984672] ? SyS_clock_settime+0x1a0/0x1a0 [ 3202.989069] ? do_syscall_64+0x4c/0x640 [ 3202.993020] ? sys_vfork+0x20/0x20 [ 3202.996537] do_syscall_64+0x1d5/0x640 [ 3203.000409] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3203.005579] RIP: 0033:0x45b08a [ 3203.008744] RSP: 002b:00007ffe62ee3ab0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3203.016552] RAX: ffffffffffffffda RBX: 00007ffe62ee3ab0 RCX: 000000000045b08a [ 3203.023802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3203.031051] RBP: 00007ffe62ee3af0 R08: 0000000000000001 R09: 0000000001167940 [ 3203.038303] R10: 0000000001167c10 R11: 0000000000000246 R12: 0000000000000001 [ 3203.045559] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe62ee3b40 [ 3203.052827] CPU: 0 PID: 9910 Comm: syz-executor.1 Tainted: G B 4.14.184-syzkaller #0 [ 3203.061841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3203.071196] Call Trace: [ 3203.073801] dump_stack+0x1b2/0x283 [ 3203.077435] panic+0x1f9/0x42d [ 3203.080634] ? add_taint.cold+0x16/0x16 [ 3203.084614] ? preempt_schedule_common+0x4a/0xc0 [ 3203.089382] ? ceph_destroy_options+0xda/0x100 [ 3203.093974] ? ___preempt_schedule+0x16/0x18 [ 3203.098402] ? ceph_destroy_options+0xda/0x100 [ 3203.102995] kasan_end_report+0x43/0x49 [ 3203.107097] kasan_report.cold+0x12f/0x2b9 [ 3203.111351] ceph_destroy_options+0xda/0x100 [ 3203.115761] ceph_mount+0xd43/0x181c [ 3203.119489] mount_fs+0x92/0x2a0 [ 3203.122865] vfs_kern_mount.part.0+0x5b/0x3c0 [ 3203.127468] do_mount+0x3c9/0x25e0 [ 3203.131027] ? check_preemption_disabled+0x35/0x240 [ 3203.136044] ? copy_mount_string+0x40/0x40 [ 3203.140284] ? copy_mnt_ns+0x8a0/0x8a0 [ 3203.144182] ? copy_mount_options+0x1ec/0x2e0 [ 3203.148684] ? copy_mnt_ns+0x8a0/0x8a0 [ 3203.152581] SyS_mount+0xa8/0x120 [ 3203.156045] ? copy_mnt_ns+0x8a0/0x8a0 [ 3203.159938] do_syscall_64+0x1d5/0x640 [ 3203.163845] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3203.169030] RIP: 0033:0x45ca59 [ 3203.172217] RSP: 002b:00007ff5011a9c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3203.179920] RAX: ffffffffffffffda RBX: 00000000004f6be0 RCX: 000000000045ca59 [ 3203.187313] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 00000000200005c0 [ 3203.194579] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 3203.201843] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 3203.209117] R13: 0000000000000768 R14: 00000000004ca5c0 R15: 00007ff5011aa6d4 [ 3203.217724] Kernel Offset: disabled [ 3203.221338] Rebooting in 86400 seconds..