559 [ 3252.201394] Node 0 DMA32 free:27776kB min:36296kB low:45368kB high:54440kB active_anon:1876480kB inactive_anon:16140kB active_file:20kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17088kB pagetables:58744kB bounce:0kB free_pcp:696kB local_pcp:0kB free_cma:0kB [ 3252.201409] lowmem_reserve[]: 0 0 0 0 0 [ 3252.201427] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3252.201441] lowmem_reserve[]: 0 0 0 0 0 [ 3252.201457] Node 1 Normal free:45384kB min:53592kB low:66988kB high:80384kB active_anon:3083620kB inactive_anon:24908kB active_file:2724kB inactive_file:2660kB unevictable:0kB writepending:36kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61024kB pagetables:172076kB bounce:0kB free_pcp:332kB local_pcp:0kB free_cma:0kB [ 3252.201472] lowmem_reserve[]: 0 0 0 0 0 [ 3252.201488] Node 0 DMA: 7*4kB (UEH) 25*8kB (UH) 7*16kB (UEH) 4*32kB (UEH) 3*64kB (UME) 2*128kB (UE) 3*256kB (UME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10388kB [ 3252.201552] Node 0 DMA32: 164*4kB (UME) 210*8kB (UME) 104*16kB (UME) 49*32kB (UME) 11*64kB (UME) 15*128kB (UM) 7*256kB (UM) 7*512kB (UME) 8*1024kB (UM) 3*2048kB (UE) 0*4096kB = 27904kB [ 3252.201615] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3252.201654] Node 1 Normal: 462*4kB (UMEH) 567*8kB (UME) 362*16kB (UMEH) 366*32kB (UMEH) 184*64kB (UMEH) 80*128kB (MH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45904kB [ 3252.201711] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3252.201716] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3252.201721] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3252.201726] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3252.201729] 11829 total pagecache pages [ 3252.201737] 0 pages in swap cache [ 3252.201741] Swap cache stats: add 0, delete 0, find 0/0 [ 3252.201744] Free swap = 0kB [ 3252.201747] Total swap = 0kB [ 3252.201752] 1965979 pages RAM [ 3252.201754] 0 pages HighMem/MovableOnly [ 3252.201757] 338455 pages reserved [ 3252.201760] 0 pages cma reserved [ 3252.201766] Out of memory: Kill process 18710 (syz-executor.2) score 1007 or sacrifice child 04:24:52 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r2, r1, 0x0, 0x800000080004103) 04:24:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1a) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x4, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r3}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x3c}}, 0x0) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 04:24:53 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0x800000080004103) 04:24:53 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB="2f2a2230b259182fff0af702172ac3385cb6adcf607df687a7c125057a7f00000000002378c158392932f310666f4cb5e78d22b3345ed36a16c5f4dc093de5"], &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setrlimit(0x8, &(0x7f0000000140)={0x10001, 0x8}) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x10) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, r2, 0x0) clock_gettime(0x0, &(0x7f0000000240)) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000003c0)={0x2, 0x8, 0x4, 0x400000, 0x4, {0x0, 0x2710}, {0x4, 0x8, 0x20, 0xff, 0xfb, 0x8, 'xoU\v'}, 0x801, 0x6, @fd=r1, 0x6, 0x0, r0}) recvfrom$netrom(r3, &(0x7f0000000440)=""/9, 0x9, 0x40, 0x0, 0x0) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000040)={0x6000, 0x1000, 0xe3, 0xff, 0x6}) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:24:53 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8000}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f00000000c0)={0xfff00000, 0x1, 0x7}, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}]) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2000000b136) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0x800000080004103) 04:24:53 executing program 5: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:24:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40001, 0x0) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) r3 = dup2(r0, r1) getsockopt$nfc_llcp(r3, 0x118, 0x0, &(0x7f0000000240)=""/172, 0xac) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x3c}}, 0x0) 04:24:56 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r2, r1, 0x0, 0x800000080004103) 04:24:57 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r3, 0xffffffffffffffff, 0x0, 0x800000080004103) [ 3258.835016] ipvlan1: Invalid MTU 8650 requested, hw max 1500 [ 3258.848410] team0: Device ipvlan1 failed to change mtu [ 3258.916700] ipvlan1: Invalid MTU 8650 requested, hw max 1500 [ 3258.939810] team0: Device ipvlan1 failed to change mtu [ 3260.686215] modprobe invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3260.723458] modprobe cpuset=/ mems_allowed=0-1 [ 3260.732656] CPU: 1 PID: 18781 Comm: modprobe Not tainted 4.14.181-syzkaller #0 [ 3260.740061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3260.749413] Call Trace: [ 3260.752005] dump_stack+0x1b2/0x283 [ 3260.755626] dump_header+0x178/0x7aa [ 3260.759330] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3260.764341] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3260.769439] ? ___ratelimit+0x2cd/0x522 [ 3260.773416] oom_kill_process.cold+0x10/0xc16 [ 3260.777895] ? lock_downgrade+0x6e0/0x6e0 [ 3260.782026] out_of_memory+0x2d5/0x10f0 [ 3260.785982] ? oom_killer_disable+0x1c0/0x1c0 [ 3260.790461] ? mutex_trylock+0x152/0x1a0 [ 3260.794506] __alloc_pages_nodemask+0x2556/0x2730 [ 3260.799858] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3260.804688] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3260.809512] ? trace_hardirqs_on+0x10/0x10 [ 3260.813746] ? cache_grow_begin+0x3f/0x410 [ 3260.817978] cache_grow_begin+0x91/0x410 [ 3260.822035] fallback_alloc+0x205/0x2b0 [ 3260.825994] kmem_cache_alloc+0x1e5/0x3c0 [ 3260.830123] getname_flags+0xc8/0x550 [ 3260.834003] ? finish_fault+0x290/0x290 [ 3260.838218] user_path_at_empty+0x2a/0x50 [ 3260.842349] vfs_statx+0xd1/0x160 [ 3260.845890] ? vfs_statx_fd+0x90/0x90 [ 3260.849686] ? vm_insert_mixed_mkwrite+0x30/0x30 [ 3260.854447] SyS_newstat+0x83/0xe0 [ 3260.857967] ? SyS_fstat+0xd0/0xd0 [ 3260.861488] ? lock_downgrade+0x6e0/0x6e0 [ 3260.865622] ? up_read+0x17/0x30 [ 3260.868982] ? __do_page_fault+0x19a/0xb50 [ 3260.873210] ? do_syscall_64+0x4c/0x640 [ 3260.877173] ? SyS_fstat+0xd0/0xd0 [ 3260.880696] do_syscall_64+0x1d5/0x640 [ 3260.884582] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3260.889755] RIP: 0033:0x7f6ae5a3f295 [ 3260.893462] RSP: 002b:00007ffd07a17c28 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 3260.901153] RAX: ffffffffffffffda RBX: 000055b817b9d090 RCX: 00007f6ae5a3f295 [ 3260.908403] RDX: 00007ffd07a17cf0 RSI: 00007ffd07a17cf0 RDI: 000055b8166f0e99 [ 3260.915652] RBP: 000055b8166f0e99 R08: 0000000000000003 R09: 0000000000000020 [ 3260.922903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3260.930173] R13: 0000000000000000 R14: 000055b8168f8068 R15: 0000000000000000 [ 3261.261269] Mem-Info: [ 3261.263790] active_anon:1242352 inactive_anon:10262 isolated_anon:0 [ 3261.263790] active_file:53 inactive_file:265 isolated_file:67 [ 3261.263790] unevictable:0 dirty:3 writeback:0 unstable:0 [ 3261.263790] slab_reclaimable:18794 slab_unreclaimable:145509 [ 3261.263790] mapped:58231 shmem:10429 pagetables:57714 bounce:0 [ 3261.263790] free:21121 free_pcp:269 free_cma:0 [ 3261.339027] Node 0 active_anon:1882640kB inactive_anon:16140kB active_file:0kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184580kB dirty:4kB writeback:0kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3261.397346] Node 1 active_anon:3086768kB inactive_anon:24908kB active_file:212kB inactive_file:736kB unevictable:0kB isolated(anon):0kB isolated(file):176kB mapped:47944kB dirty:8kB writeback:0kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3261.461601] Node 0 DMA free:10388kB min:220kB low:272kB high:324kB active_anon:4800kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3261.493783] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3261.498930] Node 0 DMA32 free:27564kB min:36296kB low:45368kB high:54440kB active_anon:1877840kB inactive_anon:16140kB active_file:0kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17088kB pagetables:58736kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3261.533556] lowmem_reserve[]: 0 0 0 0 0 [ 3261.537663] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3261.649632] lowmem_reserve[]: 0 0 0 0 0 [ 3261.653753] Node 1 Normal free:48044kB min:53592kB low:66988kB high:80384kB active_anon:3086612kB inactive_anon:24908kB active_file:212kB inactive_file:592kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61024kB pagetables:172116kB bounce:0kB free_pcp:48kB local_pcp:0kB free_cma:0kB [ 3261.687075] lowmem_reserve[]: 0 0 0 0 0 [ 3261.691169] Node 0 DMA: 7*4kB (UEH) 25*8kB (UH) 7*16kB (UEH) 4*32kB (UEH) 3*64kB (UME) 2*128kB (UE) 3*256kB (UME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10388kB [ 3261.710497] Node 0 DMA32: 179*4kB (UME) 172*8kB (UME) 102*16kB (UME) 49*32kB (UME) 11*64kB (UME) 15*128kB (UM) 7*256kB (UM) 7*512kB (UME) 8*1024kB (UM) 3*2048kB (UE) 0*4096kB = 27628kB [ 3261.730998] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3261.741799] Node 1 Normal: 979*4kB (UMEH) 1175*8kB (UMEH) 255*16kB (UME) 299*32kB (UMEH) 183*64kB (UMEH) 79*128kB (MH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 48788kB [ 3261.761335] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3261.772666] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3261.785820] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3261.796401] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3261.807061] 10473 total pagecache pages [ 3261.811056] 0 pages in swap cache [ 3261.816322] Swap cache stats: add 0, delete 0, find 0/0 [ 3261.826287] Free swap = 0kB [ 3261.829720] Total swap = 0kB [ 3261.833114] 1965979 pages RAM [ 3261.837916] 0 pages HighMem/MovableOnly [ 3261.841899] 338455 pages reserved [ 3261.847078] 0 pages cma reserved [ 3261.850450] Out of memory: Kill process 13430 (syz-executor.5) score 1007 or sacrifice child [ 3261.861162] Killed process 13430 (syz-executor.5) total-vm:75236kB, anon-rss:16120kB, file-rss:34816kB, shmem-rss:0kB [ 3261.947771] oom_reaper: reaped process 13430 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 04:25:01 executing program 5: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0c0000005d08cb50745a9459cd9f7816"], &(0x7f0000000100)=0x14) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f00000004c0)={0x6, "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"}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_names\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:01 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:01 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r3, 0xffffffffffffffff, 0x0, 0x800000080004103) 04:25:01 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r3}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x3c}}, 0x0) 04:25:01 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000000200)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x18258, 0x3, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) fadvise64(r1, 0x7, 0x5, 0x5) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3262.227497] ipvlan1: Invalid MTU 8654 requested, hw max 1500 [ 3262.258195] block nbd3: Attempted send on invalid socket [ 3262.263823] print_req_error: I/O error, dev nbd3, sector 64 [ 3262.271401] block nbd3: Attempted send on invalid socket [ 3262.277359] print_req_error: I/O error, dev nbd3, sector 120 04:25:06 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r3, 0xffffffffffffffff, 0x0, 0x800000080004103) 04:25:06 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40001, 0x0) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) r3 = dup2(r0, r1) getsockopt$nfc_llcp(r3, 0x118, 0x0, &(0x7f0000000240)=""/172, 0xac) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x3c}}, 0x0) 04:25:06 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(0xffffffffffffffff, r1, 0x0, 0x800000080004103) 04:25:06 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0x5, 0x2, 0x4, 0x40000000, 0xf4, {0x77359400}, {0x1, 0xc, 0x3f, 0x1, 0x2, 0x3, "6f9be50b"}, 0x2, 0x1, @planes=&(0x7f0000000040)={0x7ff, 0x975, @mem_offset=0x5, 0x91}, 0x4, 0x0, r1}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r2, 0xc1004111, &(0x7f0000000240)={0x0, [0xb291, 0x1, 0x50254b77], [{0x0, 0x7fff, 0x0, 0x1}, {0x1, 0x20, 0x1}, {0x3f, 0x1, 0x0, 0x1, 0x1}, {0x80000001, 0x7fff, 0x1, 0x1, 0x1, 0x1}, {0x20, 0x8001, 0x0, 0x0, 0x1}, {0x1, 0x5, 0x1, 0x0, 0x0, 0x1}, {0x7ff, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x100, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x8ee, 0x1, 0x1}, {0x81, 0x9, 0x0, 0x1, 0x1}, {0x80000000, 0x23, 0x0, 0x0, 0x0, 0x1}, {0x8, 0x3, 0x0, 0x1, 0x1}], 0x7fffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') write$ppp(r4, &(0x7f0000000340)="80f5f07a9149874e0ae648760cfa27374ceadbda0f3f028b44c6a52f8565157864993c76ae83d4726f63a1e4d4caf4b5a703136b364e777871773ed8e5eb4642fe353e5d8ae91e632b748e9fbebe8e989f72b9a8721d639c478588b984194ce8ef086d30f12a5c481873068a6b5afb073b19a3a9d19f30bd25d135f71c30546d4a5fabbea3ea479b75c0e792523d431929c6b6a41bd7924f568998446e213e3eb8901e20abad7b82a1cdd293ef3979c7aeb8116753a9951d80b847061fb69aeb05671b204f2146dd7ad5c36c99af634f807b6d76703e95e819c52b8aa52c99dd4fe881", 0xe3) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000440)=ANY=[@ANYBLOB="50000b00a472e8962429eefeb41c5571e767dab6ae0a00000000"]) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x809, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r6}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x3c}}, 0x0) 04:25:06 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000380)={0x0, 0x17, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r2, 0x8, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0xbf}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:25:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = dup(0xffffffffffffffff) connect$bt_rfcomm(r4, &(0x7f0000000000), 0xa) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x884) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x3c}}, 0x0) [ 3262.663166] team0: Device ipvlan1 failed to change mtu [ 3268.104550] syz-executor.5 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 3268.136267] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3268.144196] CPU: 0 PID: 6350 Comm: syz-executor.5 Not tainted 4.14.181-syzkaller #0 [ 3268.151985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3268.161341] Call Trace: [ 3268.163915] dump_stack+0x1b2/0x283 [ 3268.167537] dump_header+0x178/0x7aa [ 3268.171230] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3268.176758] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3268.181843] ? ___ratelimit+0x2cd/0x522 [ 3268.185822] oom_kill_process.cold+0x10/0xc16 [ 3268.190301] ? lock_downgrade+0x6e0/0x6e0 [ 3268.194445] out_of_memory+0x2d5/0x10f0 [ 3268.198409] ? oom_killer_disable+0x1c0/0x1c0 [ 3268.202883] ? mutex_trylock+0x152/0x1a0 [ 3268.206924] __alloc_pages_nodemask+0x2556/0x2730 [ 3268.211756] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3268.216592] ? enqueue_task_rt+0x58c/0xdb0 [ 3268.220824] ? lock_acquire+0x170/0x3f0 [ 3268.224798] alloc_pages_current+0xe7/0x1e0 [ 3268.229100] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3268.234356] __get_free_pages+0xb/0x40 [ 3268.238221] __pud_alloc+0x33/0x200 [ 3268.241825] copy_page_range+0x14f2/0x27b0 [ 3268.246057] ? mark_held_locks+0xa6/0xf0 [ 3268.250119] ? wake_up_q+0x90/0xe0 [ 3268.253665] ? rwsem_wake+0x1ba/0x280 [ 3268.257443] ? rwsem_optimistic_spin+0x400/0x400 [ 3268.262193] ? apply_to_page_range+0x9c0/0x9c0 [ 3268.266769] ? validate_mm_rb+0x3a/0xa0 [ 3268.270746] copy_process.part.0+0x4c2f/0x6fa0 [ 3268.275322] ? __cleanup_sighand+0x40/0x40 [ 3268.279539] ? lock_downgrade+0x6e0/0x6e0 [ 3268.283673] _do_fork+0x180/0xc80 [ 3268.287118] ? put_timespec64+0xaa/0xf0 [ 3268.291079] ? fork_idle+0x270/0x270 [ 3268.294773] ? SyS_clock_gettime+0xf5/0x180 [ 3268.299094] ? SyS_clock_settime+0x1a0/0x1a0 [ 3268.303498] ? do_syscall_64+0x4c/0x640 [ 3268.307466] ? sys_vfork+0x20/0x20 [ 3268.310985] do_syscall_64+0x1d5/0x640 [ 3268.314874] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3268.320042] RIP: 0033:0x45b05a [ 3268.323210] RSP: 002b:00007fff87bcb150 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3268.330984] RAX: ffffffffffffffda RBX: 00007fff87bcb150 RCX: 000000000045b05a [ 3268.338234] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3268.345497] RBP: 00007fff87bcb190 R08: 0000000000000001 R09: 0000000001d41940 [ 3268.352749] R10: 0000000001d41c10 R11: 0000000000000246 R12: 0000000000000001 [ 3268.360100] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff87bcb1e0 [ 3268.659188] Mem-Info: [ 3268.662044] active_anon:1238668 inactive_anon:10262 isolated_anon:0 [ 3268.662044] active_file:423 inactive_file:363 isolated_file:36 [ 3268.662044] unevictable:0 dirty:40 writeback:1 unstable:0 [ 3268.662044] slab_reclaimable:18827 slab_unreclaimable:145720 [ 3268.662044] mapped:58595 shmem:10429 pagetables:57738 bounce:0 [ 3268.662044] free:23623 free_pcp:24 free_cma:0 [ 3268.709456] Node 0 active_anon:1874908kB inactive_anon:16148kB active_file:220kB inactive_file:256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184808kB dirty:88kB writeback:0kB shmem:16820kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3268.740644] Node 1 active_anon:3079764kB inactive_anon:24900kB active_file:920kB inactive_file:844kB unevictable:0kB isolated(anon):0kB isolated(file):144kB mapped:48872kB dirty:72kB writeback:4kB shmem:24896kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3268.793463] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4800kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3268.849004] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3268.861262] Node 0 DMA32 free:32152kB min:36296kB low:45368kB high:54440kB active_anon:1870108kB inactive_anon:16148kB active_file:220kB inactive_file:256kB unevictable:0kB writepending:88kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17248kB pagetables:58456kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3268.892494] lowmem_reserve[]: 0 0 0 0 0 [ 3268.897050] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3268.978076] lowmem_reserve[]: 0 0 0 0 0 [ 3268.982177] Node 1 Normal free:57848kB min:53592kB low:66988kB high:80384kB active_anon:3075228kB inactive_anon:24900kB active_file:420kB inactive_file:492kB unevictable:0kB writepending:76kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:60832kB pagetables:172376kB bounce:0kB free_pcp:968kB local_pcp:640kB free_cma:0kB [ 3269.070208] lowmem_reserve[]: 0 0 0 0 0 [ 3269.078835] Node 0 DMA: 7*4kB (UEH) 26*8kB (UH) 7*16kB (UEH) 4*32kB (UEH) 3*64kB (UME) 2*128kB (UE) 3*256kB (UME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10396kB [ 3269.146799] Node 0 DMA32: 1177*4kB (UME) 310*8kB (UME) 142*16kB (UME) 85*32kB (MEH) 23*64kB (ME) 15*128kB (MH) 7*256kB (MH) 8*512kB (MEH) 7*1024kB (MH) 2*2048kB (M) 0*4096kB = 32724kB [ 3269.168271] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3269.179081] Node 1 Normal: 1610*4kB (UMEH) 1113*8kB (UMEH) 307*16kB (UMEH) 402*32kB (UMEH) 196*64kB (UMEH) 84*128kB (MH) 2*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 57952kB [ 3269.195629] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3269.204647] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3269.224380] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3269.236533] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3269.245196] 11264 total pagecache pages [ 3269.249181] 0 pages in swap cache [ 3269.252628] Swap cache stats: add 0, delete 0, find 0/0 [ 3269.258088] Free swap = 0kB [ 3269.261138] Total swap = 0kB [ 3269.268562] 1965979 pages RAM [ 3269.271729] 0 pages HighMem/MovableOnly [ 3269.275817] 338455 pages reserved [ 3269.279289] 0 pages cma reserved [ 3269.282652] Out of memory: Kill process 13965 (syz-executor.2) score 1007 or sacrifice child [ 3269.291444] Killed process 13965 (syz-executor.2) total-vm:75368kB, anon-rss:15856kB, file-rss:34816kB, shmem-rss:0kB [ 3269.429176] oom_reaper: reaped process 13965 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 04:25:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000070040000d8010000d801000008010000d801000000000000a0030000a0030000a0030000a0030000a00300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000050000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000fe880000000000000000000000000001ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000726f73653000000000000000000000006e657464657673696d300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000a001c801000000000000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000010073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000100000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socket(0x80000000000000a, 0x2, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000700), &(0x7f0000001200)=0x4) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000507004008000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4], 0x3c}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000001180)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0xfff, @private0={0xfc, 0x0, [], 0x1}, 0x2}, 0x1c, &(0x7f0000000a40)=[{&(0x7f00000005c0)="fb97ef46f9", 0x5}, {&(0x7f0000000600)="ac0e2d2eb730cbecc29c6894e29ac4e9a81bad1ba28ecaaed4803f7ab552548e1476691d6e33b9cc48f8835b46f21a832f6ff39dcec9739c48c39e8a5511258f5a37ea417ee9a9ad893335586417f401d6c551d47f0f6d887c50424e1672152ab5135773cd67d03a169f01b03a79ea4ee0a6fbecac75078f91a9c1f93ccc17033a8fc29b7117356077ba3b136b3f2e5168d17ac490ded34203f55ad1c8569968513ef1bc0177b693f3f981d48edaecdcfc7c5a1594e691d28465282bbdda578d027e8402808e03ab6757db", 0xcb}, {&(0x7f0000000800)="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", 0xfe}, {&(0x7f0000000700)}, {&(0x7f0000000740)="b5c5f61469fc0905798ce9c7b7fe2e9c9ce82eeb66d3e748680472e640a03c6bb985b354bf94ad079d8c8fe92ec9b8b6283c9936ad93c16a2dcf52534c94d79eab84c131b8ff18d32d7c429bfeda46a90e96d2a7d7ae9decfd261a2e9415a476160f952b2b3135dbb82abf2c639e75601fc409db8ab5d0380d6028a9b32a9d", 0x7f}, {&(0x7f0000000900)="c1b153ea2fbd3ab54d7073070103c6b3db15d23b45ade27cb8ded14b8efc25929c939d6d30a46e3408c80a89d376006a9ff195febf4b5fa6de0bd9ec652b1a41cb2c5ed11206542d3e4df5e25376bcdd92d92a3d5439e4e74328298f0cb48d3567b34f7108c948279ffb3120c86569bba171bb08d8c7dd10797a9c3c90fb52a3fb76243c55787fae601f7a18702b1b26dc2c75e1b64419e5cc171820", 0x9c}, {&(0x7f00000009c0)="2dc6022e69c84119315a0b4e92df2e28bafd6ae8b28e2fdb2c667cc52b4513ccbd222a0832f8e995eaaaaae14e135ca02c13c4dc1f57f4d61e7b050e38d22d27d588e522d30a2b3916bf655c86dec6fd9815490c03d2cfa6dece2d7c24a9d74c", 0x60}], 0x7, &(0x7f0000000ac0)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, [], 0x1}, r4}}}, @hopopts={{0x110, 0x29, 0x36, {0x3b, 0x1e, [], [@enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x18, {0x2, 0x4, 0xf4, 0x2, [0x20, 0x6]}}, @generic={0x6, 0xd2, "cb7d0d425bda50bf5d5c24ec46e71b6169340eb742dc8131e5ef963c87a4fc2b61372aaa321b0bd1b90d0d082c66313a2b33197edc3c0ab0df2c6a3486ae4e4f03fe6ef374f9db4a0746ebaed36baf5add187e9c086f887164033b720ad254e8b078c3dc376ff16b82a8d12f5a5e9bb60d752c0055413a5c831338913274d0f119bdbb51110d369940198ec704c7156fb90366cba11c52d832b87ed1fe0bf777e8fb2515d48155c7b7c2a60f03f294e28cb75020f8fb936ea10c37177d168502cd227781c5d2d1ea6e2ef340bd4d536bc19a"}, @enc_lim={0x4, 0x1, 0x40}]}}}, @tclass={{0x14}}, @hoplimit={{0x14, 0x29, 0x34, 0x8000}}], 0x180}}, {{&(0x7f0000000c40)={0xa, 0x4e21, 0xffffffff, @private1={0xfc, 0x1, [], 0x1}, 0xad1}, 0x1c, &(0x7f0000000e80)=[{&(0x7f0000000c80)="c2", 0x1}, {&(0x7f0000000cc0)="5269cd372d389603c0ba1a99ade955b0af6570caac62a4b8be3577087d4267cbdb88f809c24d5747197aeb970b42725648acc74564f2f5ddeb5f156e884721dc5c68b8253aa78a99151a85d36075b1227ba946832e789a38f7bbda8580d58a3ec36731dac048131fe86f4db31bb9250aa5fe126bdc2ee24ac650a87bdeb739a2cc5f13bec2156fb96a5c0b6751877e344c65690b3b54ac28445a35fef006cf855e1d1ff3c89276b73544a64bb0e7e3fa912cfdae4684b14ebc9c080aed213817a768915cb75404603ececb07eeafcb9fcc756986712fb3aab761d366429c", 0xde}, {&(0x7f0000000dc0)="303274167ece0639b5ad825a3001b572f99ab61b47b4f1e199eaa16aff7980a524ee7cd5cfe3b93a47a122379f4cb15a01d2943b1638b1bd36265c6e7b10d5b3c5909ddb929e835e0caa07d7a89050fe91e9b39dbd1425f8713a40eb6b175223ce490f4efe47442f3d6d324bb0f51e43d63d8af1b8b5cdf4f06b4430bc999d6863c4a8ec6387527ad43d", 0x8a}], 0x3, &(0x7f0000000ec0)=[@rthdr_2292={{0xb8, 0x29, 0x39, {0x1, 0x14, 0x2, 0x4b, 0x0, [@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @ipv4={[], [], @private=0xa010101}, @private2, @private0={0xfc, 0x0, [], 0x1}, @private2, @private2, @rand_addr=' \x01\x00', @remote]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x1, 0xa, 0x0, 0x1, 0x0, [@private2={0xfc, 0x2, [], 0x1}, @empty, @local, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}}}, @hopopts={{0x88, 0x29, 0x36, {0x87, 0xd, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x2, 0xa, 0x0, 0x80, [0xffffffff, 0x81, 0x1, 0xf349, 0x93]}}, @hao={0xc9, 0x10, @ipv4={[], [], @multicast1}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, [], 0x1}}, @ra, @enc_lim={0x4, 0x1, 0x1f}]}}}, @hopopts_2292={{0x88, 0x29, 0x36, {0x33, 0xd, [], [@hao={0xc9, 0x10, @mcast2}, @pad1, @enc_lim={0x4, 0x1, 0x1}, @pad1, @hao={0xc9, 0x10, @private1={0xfc, 0x1, [], 0x1}}, @enc_lim={0x4, 0x1, 0xff}, @calipso={0x7, 0x28, {0x1, 0x8, 0x80, 0x4435, [0x41, 0x7ff, 0xa1, 0x5]}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x13}}, @padn={0x1, 0x1, [0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r4}}}], 0x288}}], 0x2, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$RTC_PIE_OFF(r5, 0x7006) 04:25:09 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:09 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x4000400092}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:09 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3269.622888] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 3269.680817] hfs: can't find a HFS filesystem on dev loop3 [ 3269.736644] block nbd3: Attempted send on invalid socket [ 3269.742475] print_req_error: I/O error, dev nbd3, sector 64 [ 3269.752063] block nbd3: Attempted send on invalid socket [ 3269.758700] print_req_error: I/O error, dev nbd3, sector 120 [ 3269.775914] ipvlan1: Invalid MTU 8658 requested, hw max 1500 04:25:10 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:10 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:10 executing program 5: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0xffffffff}, 0x0, 0x0, 0x3, 0x0, 0x4b66, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYRES16=r2, @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB="44416701497145c60067217430e3a07e53853357449929cc3913b97abe0be7a0401f44552fe233c4f0d4031229fb6fd319a1f2f6ecb51f3235bcdca1886eb2fba2963553b7a67ad74657bf427d87c4e0da7980816fba5e5398179d553a6f286d530fa1d9365770e3b6fd540579cb86899876f6e3208ef517c1c5bfb9e8268aefcd1e723e7e2389291fd3ec2ac5073c646716347dc3d9d5f3e9071c7320391697d266cab1caa05740e6d6ffce0c58f78d06d3b101b1d9a99e0c67baf154b7efe072eb07afce4d9099d1a537c73809cf7e76", @ANYBLOB="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", @ANYBLOB="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"]) r4 = syz_open_procfs(r0, &(0x7f0000000040)='maps\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0x800000080004103) 04:25:10 executing program 5: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0xffffffff}, 0x0, 0x0, 0x3, 0x0, 0x4b66, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYRES16=r2, @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB="44416701497145c60067217430e3a07e53853357449929cc3913b97abe0be7a0401f44552fe233c4f0d4031229fb6fd319a1f2f6ecb51f3235bcdca1886eb2fba2963553b7a67ad74657bf427d87c4e0da7980816fba5e5398179d553a6f286d530fa1d9365770e3b6fd540579cb86899876f6e3208ef517c1c5bfb9e8268aefcd1e723e7e2389291fd3ec2ac5073c646716347dc3d9d5f3e9071c7320391697d266cab1caa05740e6d6ffce0c58f78d06d3b101b1d9a99e0c67baf154b7efe072eb07afce4d9099d1a537c73809cf7e76", @ANYBLOB="48804c674107067060eda85072749eff7efc6f65faed988c4c12bfaf013c4ac667a159249c80f04dfefbb7bb1bf9193ae2310d9ad2832168786e3992093f516b34aeb8ec30581a45f023935f6df9a800000000cea780c2a14d0f5d34535da3afee58bf50fdd1f4251e72c3d06de66203c3e40094185a5b676f776f0302fd1ec654702ce337397ce192d27e556c27c4f3033fdd81ea36022fa49fb6f33d8b9fc5c01cd396605f68f4234083e051960afcafecbbde4e2ffac5603b9efbc3722b25e2246a9a8222c84154d6cdfa7ea5dfd6032691b6878a36d334cd9e55febccac6b453b6fad9f16708d933706011343289608a741c3e31d504463414c616dce97536a86ac36951c0b69a44919cfddb0ca30d2d87294e4d47ccebfef8082d42d2ea5fc3c23e886e42a13d6b7663addde5", @ANYBLOB="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"]) r4 = syz_open_procfs(r0, &(0x7f0000000040)='maps\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0x800000080004103) 04:25:10 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:11 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0xd0, 0x8001, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_LABELS={0x20, 0x16, 0x1, 0x0, [0x0, 0x1ff, 0x5, 0x6, 0x800, 0x38, 0x7]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:11 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000000200)=ANY=[@ANYBLOB="80"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:25:11 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000070040000d8010000d801000008010000d801000000000000a0030000a0030000a0030000a0030000a00300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000050000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000fe880000000000000000000000000001ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000726f73653000000000000000000000006e657464657673696d300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000a001c801000000000000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000010073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000100000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000040)={r5, 0x80, 0x10, 0xbb4, 0x2}, &(0x7f0000000640)=0x18) write$cgroup_subtree(r1, &(0x7f00000005c0)={[{0x2b, 'rdma'}, {0x2d, 'cpu'}, {0x2d, 'memory'}, {0x1dbf99f711f0124d, 'pids'}, {0x0, 'memory'}, {0x2b, 'pids'}, {0x2b, 'io'}, {0x2b, 'memory'}, {0x2d, 'memory'}, {0x2d, 'rdma'}]}, 0x41) r6 = socket(0x80000000000000a, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000000c40)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x24}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=' '], 0x20}}], 0x1, 0x0) [ 3270.191385] team0: Device ipvlan1 failed to change mtu [ 3272.221398] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 3272.302165] block nbd3: Attempted send on invalid socket [ 3272.357542] print_req_error: I/O error, dev nbd3, sector 64 [ 3272.370091] block nbd3: Attempted send on invalid socket [ 3272.375785] print_req_error: I/O error, dev nbd3, sector 120 04:25:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000400)={&(0x7f0000000240)="bc43ff6a68c9d1cc51018c9fa54f628ddd674a28398401da5dd717ab18d8b69df4a5327f94d1764b468a7611f306816f9bc98d6d360ea76f4ed6fbad548be576f067d061ce3b29b2a02543b955a243e2c2fccdec65e6fd1fe51e702b74ecfcf97f2a7acb74c8fd79658f4597fa04671a68100362d43741adb1644215675a20d2bf18640e", &(0x7f0000000300)=""/195, &(0x7f0000000000)="ac6e1f5764e291e292af42c8483318f601a7e99a36a79777d9c47436bc66677cf9786cbcf0a2a590ea425f35940afdc79723608c111bfcd63c39759136b6a42260b68c1694ba5af70d44edcdcd0d194a103199103aa0b5d6881d0d4b07d59c", &(0x7f00000000c0)="c1a9963f74edfb7df47605df9ea92386119e95f55dac76b24579ebc812d8f5654e82bc4ae1a4ff6f91da7d561b40858f90e3b69bef8bda4f63761d433c1f3921293d8731835a86847f14a26671d09c70ccd686775f155bd6f485198eb7c5e2f5d48bd7d051ca7610645a80ef58cfaba9cfce07dd1e39ab51c0d85660", 0x5, r3}, 0x38) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x3c}}, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f0000000480)={0xffff7fff, "41f6acab505713e8aa808e140646bf40d71e8137415039581db5b0698cafc50d", 0x1}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000507004008000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r6], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r9}}, 0x20}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000600)={@private1, 0x0}, &(0x7f0000000640)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)=@newtfilter={0xf5e0, 0x2c, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffe0, 0xd}, {0x3, 0xfff2}, {0x10, 0xffff}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xa054, 0x2, [@TCA_BASIC_EMATCHES={0x260, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xf4, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8000, 0x1, 0xd0}, {0x7, 0x9, 0xd, 0x4, 0xf, 0x0, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7d, 0x3, 0x7}, {0x2, 0x7, 0x9, 0x6}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x5, 0x2, 0x2}, {0x225, 0x3, 0x0, "cf8806"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1, 0x1, 0x2a}, {0x7, 0x8, 0x3f, 0x2}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xfffe, 0x8, 0x9}, {0x0, 0x1, 0x3}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x17, 0x8, 0x9}, {0x3, 0x3, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x2, 0x8, 0x1}, {0x1, 0x6}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3702, 0x1, 0x49}, {0x5, 0x1d, 0xffff, 0xc, 0x2, 0x1, 0x1}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x5, 0x2, 0x9}, {0x8, 0x5, 0x1, "8eddc39137"}}}, @TCF_EM_META={0x2c, 0x2, 0x0, 0x0, {{0xff, 0x4, 0x1ff}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x34, 0x9, 0x1}, {0xfff7, 0x8, 0x2}}}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="df7fcacd3a1862", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="53e647"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x7}, {0x1, 0x2, 0x2}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x3, 0x1, 0x7}, {0x100, 0x5, 0x8001, 0x4, 0x3}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1, 0x8, 0x8}, {0x4, 0x4, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x3, 0x20}, {0x80000001, 0xfff, 0x6, 0x2a6}}}]}, @TCA_EMATCH_TREE_LIST={0x104, 0x2, 0x0, 0x1, [@TCF_EM_META={0x80, 0x2, 0x0, 0x0, {{0x2a7, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0x2a, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="7e6bbc63c24478a0badf", @TCF_META_TYPE_VAR="4d06aa9932532209", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0x30, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="d0586255aa74", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="d99aa462881b9d8f3a26", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="bbdad1d3cf6b7990b5"]}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x3, 0x3}, {0x8, 0x3, 0x4, 0x1000}}}, @TCF_EM_CONTAINER={0x64, 0x3, 0x0, 0x0, {{0x0, 0x0, 0x5}, "9a074b8d86fca455b5dcc02f68e8867be17fc9783750ba503588315df1f65360dc3a4c085b84712aa0a190a2c0f847175a9840df9919f264ac326499e62db23d1a45fba1a3043750512c1ec61a2b92385194a4ebcbf2a3"}}]}]}, @TCA_BASIC_ACT={0x741c, 0x3, [@m_gact={0xb8, 0x19, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x80, 0x2, 0x800, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x10000, 0x7ff, 0x7, 0x6, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x975, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1c1a, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0xbd, 0x20000000, 0x200, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1f8f, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1180, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0xfade, 0x7, 0xc013, 0x1000}}]}, {0x13, 0x6, "0539288b4ae084972eb8560258e31d"}}}, @m_connmark={0x198, 0x9, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x3ff, 0x0, 0x2, 0x8}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x401, 0x4, 0x400, 0x5}, 0x650f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffa, 0x81, 0x6, 0x10001, 0x3}, 0xf649}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x5, 0x4, 0x4, 0x7ff}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfff, 0x2, 0xffffffffcffffffb, 0x1, 0x2}}}]}, {0xf2, 0x6, "c12e2bc1295e09b681705d3a1fc100877f4eed535d9ed88ae57c2aecc15d3005f7f74915770114c991c555777021a0625ef92ee16419f3ce875186fca89d8d681881cd65021a63d7a9c622cc0d869f6331c752fc688e8d7f3a635715df25f6d4bd62eae04a046bd38f9a235c4e24f49ac837b28867a954e8df1337173019cf5a0d5f55163695810e153a4ed0aae75c6616d3cc2d1ec450a5ea2ff8204300ed69e34063aad0d3459585c6dbc39966bb8daa1d8e37edd0686b75a65110419304d17334f9317c8951aae5e381ad00a2e8b8c6615c046d2a2214888148ff61c466e07a4100940d67fc75bee05e67fe55"}}}, @m_tunnel_key={0x118, 0x16, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x64, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}]}, {0x9e, 0x6, "993b39bdb9fe00b38c2abed34efc3e8b9f9d84d830c2cb6f06770b115456a5d4c3991348090ce4b658185a121214621b7538ab2cbd7e48f9810897b25dc7485f24e9565d5818ec5256162076099fcf7ec20cb7d1e588a076af8d106a5e179cc84788b10fb73934f7b3c3b5e03050cac8c289b1c7aed4bef8a9fe1f3fdfb52e91416ed3fa1230c5e813aa30b1b70fc2e1cf1605e57cdc066385db"}}}, @m_connmark={0x144, 0x4, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x0, 0xfffffc01, 0x3ff}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xe3a, 0x4, 0x4}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffec, 0x400, 0x0, 0x3, 0x9a03}, 0xff80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff, 0x7, 0x2, 0x5, 0xffffffe4}, 0x100}}]}, {0xbb, 0x6, "4c32d662a2f486997f1b1d21836685c19f1e2579641ce19f72d01a001be8dc75ed79c170e12005e6b34aa1944536df966607b52930600a7f75b95398ce5d8ad7ad3ed66a2bf45004c317624b77e3627655beda2466fed0bedb5c3531bca344530d0634b77c984eb76de4865a4b64ef371464c3b6af9668e35fc08b1aa6501815219d6a381a91740b27fb42a07fae2fd8ab412eafa252951229f7dc2c93406f670dd34268554d0c7a016f79855355d0be921d3aa5e868fb"}}}, @m_ctinfo={0xd4, 0x20, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x7fffffff, 0x327891ac, 0x7, 0x400, 0x80}}]}, {0xa7, 0x6, "af2fc9f8471e1ff12f98c4633efa879716d919b36fd7ba8c7c1d2818055ffc3a0131c8f2fb4d35a14599085f9c177aff1213b8beb59ed99a9d7383a62bdabb2a722b04600d65f936a87fbaa80b504833ed0cdc78c344a8138c5970acb0286f9ceb0f594ca2d6210e830c10e4540f96bf3e9e1dff0ebd5c29d6c7ae8b48dc194ef2dd85f7c3336a34400e5b36e85bce4e4fb02c0b3f60a61f1c93b83ede5b314965ec66"}}}, @m_skbmod={0x10b4, 0x17, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0xa0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xf76, 0x2, 0x2, 0xb1c3, 0x2}, 0x2}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1a}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8000}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7e, 0x9, 0x3, 0x3f, 0x4}, 0x2}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x1, 0xffffffffffffffff, 0x80, 0x100}, 0xb}}]}, {0x1004, 0x6, "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"}}}, @m_pedit={0x4bdc, 0x9, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x4b40, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x90, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x400, 0x8, 0x0, 0x80, 0x9bf}, 0x81, 0x1, [{0x7, 0x8001, 0x6, 0x3, 0x0, 0xf6fc}, {0x523e, 0x9, 0xfff, 0x3, 0x5, 0x80000001}]}, [{0x3, 0x4, 0x3, 0x4b6e557c, 0x80000001, 0xb4}, {0x7, 0x3, 0x28, 0x2, 0x1, 0x401}, {0x5, 0x9b, 0x1f, 0x9, 0x10000, 0x7e9a}, {0x87e1, 0xf9, 0x3f, 0x8, 0xa8f, 0x8}, {0x800, 0x6, 0x10001, 0x6, 0x5, 0x7fffffff}, {0x3256c277, 0x5, 0x87, 0x5, 0x8, 0x7f}, {0x6, 0x7fff, 0x101, 0x5, 0x9, 0x6}, {0x0, 0x1, 0x9, 0x3f, 0x1, 0x2}, {0x6, 0x4, 0x401, 0x5, 0xf9be}, {0x6, 0xf, 0x1, 0x8001, 0x7, 0x6}, {0x2, 0x1ff, 0x7fff, 0x5, 0x8, 0x1000}, {0x4, 0x200000, 0xb85c, 0x6, 0x1, 0xffffffff}, {0x7fa0, 0xfffffffb, 0x401, 0xf00, 0x4, 0x18000000}, {0x7, 0x8, 0x2, 0x75de, 0x1, 0x20}, {0x1, 0x7, 0x7, 0xffffffff, 0x3ff, 0x6}, {0x5a3, 0x8, 0x1, 0x2, 0x56d2, 0xff}, {0x0, 0xfffffffc, 0x1, 0xfff, 0x80000001, 0x2}, {0x791, 0x100, 0x6bfb, 0x4, 0x4, 0x8}, {0x80000001, 0x9, 0x80000001, 0x9, 0xe6, 0x5}, {0x3, 0x3, 0xfff, 0x200, 0xd517, 0x8}, {0x5, 0x5, 0x8, 0x400, 0x7fff, 0x4}, {0x8, 0xd5, 0x1, 0x1, 0x2}, {0xd94, 0x4, 0xfffffffd, 0x1, 0x3, 0xfffffffe}, {0xb6b, 0x80000000, 0x8, 0x1f, 0x3, 0x3}, {0x47b8ef4f, 0x3, 0x9, 0x1, 0x4, 0x6}, {0x200, 0x7b4f, 0x40, 0x6, 0xfffffff7, 0x9}, {0x2, 0x4, 0x9, 0x200, 0x0, 0xc2}, {0x1, 0x7, 0x7, 0x2, 0xc4, 0x7}, {0xc4, 0x981, 0x4, 0x7f, 0x7, 0xff}, {0x6, 0x38, 0x85ba, 0x0, 0x3, 0x1000}, {0x40, 0x3, 0xffffff00, 0x1, 0x4, 0x1}, {0x3, 0x2, 0x0, 0x5, 0x6, 0x10001}, {0xb9a2, 0x6, 0x7, 0x3, 0x11, 0x8}, {0x7, 0x7, 0x9, 0xfffffffa, 0xfffffff9, 0x8d}, {0x9, 0x3ff, 0x4, 0x2c, 0x8, 0xff}, {0x4, 0x9, 0xd5, 0x6, 0x1, 0x4}, {0x6b4, 0x9, 0x3, 0x40, 0x8000, 0x3}, {0x4, 0x1000, 0x3ff, 0x7, 0x8, 0x80000000}, {0x20, 0x3, 0x2, 0x4, 0x1, 0x3}, {0x8, 0xf82, 0x6, 0x3, 0x1, 0x1}, {0x5, 0x57bd6328, 0x267, 0x5, 0x1000, 0x20}, {0x80000001, 0x0, 0x97d, 0x6, 0x88be, 0x81}, {0x144, 0x8001, 0x1, 0x2, 0xfd50, 0x6}, {0x0, 0x6, 0xff, 0x10000, 0x9, 0xc42}, {0x8000, 0x3ff, 0x1, 0x8, 0xffffffff, 0x1}, {0xf353, 0x9, 0x3ff, 0x9, 0x5c727000, 0xc188}, {0xffff, 0x1, 0x3, 0x10000, 0x3, 0xffffffff}, {0x7, 0x2, 0x2ee, 0x8, 0x2, 0x7}, {0x9, 0x8d, 0x2, 0x3fd2, 0x9eaa, 0x7823}, {0x5, 0xe1, 0x2df8, 0x800, 0x6, 0x3}, {0xfff, 0xb91, 0x3, 0x80000001, 0xd7249b5, 0x4}, {0x3, 0xe, 0x4, 0x9, 0x3f, 0x8}, {0x9, 0x3913901, 0x5, 0x57, 0x2, 0x7f}, {0x5, 0x7fffffff, 0xc5, 0xff, 0x8000, 0x4}, {0xeb04, 0xff, 0x100, 0x0, 0xffff, 0x10001}, {0x7bb1, 0x9, 0x37, 0x1, 0x100, 0xffff}, {0x0, 0x0, 0x6, 0x401, 0x6, 0xd64}, {0x401, 0xffff, 0x1f, 0x3, 0x1ff, 0xffff1a58}, {0x8000, 0xa9b8, 0x10001, 0x2, 0x5, 0x6}, {0xb4dd, 0x1, 0xffff, 0x1f, 0x78a1, 0x6}, {0xc5e, 0xe602, 0x8, 0x44e0, 0x9, 0x2}, {0x2, 0x8, 0x2, 0x7f, 0x34c1cefe, 0x3f}, {0x318, 0x8, 0x1, 0x6, 0x1, 0x8001}, {0x3, 0x7fffffff, 0xbad, 0x1ff, 0x9, 0x3f}, {0x10000, 0x1, 0x800, 0xfff, 0xffffffff, 0x3f}, {0x1, 0xffff0001, 0x9, 0x3, 0x4, 0x1e}, {0x38bc, 0x5, 0x6, 0xfba0, 0x4, 0x428}, {0x10000, 0xe3ee, 0x7, 0x4, 0x10000, 0x9ff}, {0x9, 0x8000, 0x8a, 0x0, 0xfffffffd, 0xffffff81}, {0xffffffff, 0x1, 0x7f, 0x7, 0x20, 0xff}, {0x20, 0x7, 0x3, 0x33c, 0xffffffe0, 0x7}, {0x3, 0x5, 0xfffffffc, 0x7, 0x10001, 0x1}, {0x1, 0x8, 0x373, 0x2, 0xffff, 0x81}, {0x3, 0x1f574f80, 0x6, 0x101, 0x8, 0x7}, {0x3, 0x0, 0x7, 0x8, 0xe634, 0x3}, {0x8, 0x8, 0x0, 0x81, 0x8, 0x1}, {0x7, 0x4, 0x83, 0x383, 0x3f, 0x3}, {0x1ff, 0x9, 0x0, 0x3, 0x7, 0x80}, {0x100, 0x3, 0x80000000, 0x7f, 0x5, 0x400}, {0x7, 0x2, 0x914, 0x4, 0x3, 0x400}, {0x800, 0x2, 0x9, 0x81, 0xfff, 0x10001}, {0x9, 0x0, 0x1, 0x8000, 0x9, 0x39}, {0x7, 0x2, 0x55f66a30, 0x2, 0x3, 0x6}, {0x400, 0x4, 0x5, 0x94e, 0x6, 0x100}, {0x5, 0x1000, 0x200, 0x7fffffff, 0x8, 0x9}, {0x2, 0x2, 0x7f, 0xfffffffa, 0x1, 0x67a70c3d}, {0x9, 0xffffffff, 0x7ff, 0x7fffffff, 0x7}, {0x8, 0x0, 0x3, 0x4, 0x6, 0x3c01}, {0x8, 0x8, 0x1ff, 0x0, 0x3, 0x91c}, {0x2, 0x400, 0xfd, 0x5b236e81, 0x8, 0x6}, {0x0, 0x3, 0x20, 0x7, 0x3, 0x3ff}, {0x7, 0x1, 0x1, 0x6, 0xffffffff, 0x7fffffff}, {0x3ff, 0x7, 0x181, 0x7, 0xfff, 0xfffffffc}, {0xa7, 0x1, 0xffffff00, 0x1ff, 0x80000000, 0x6}, {0x4, 0x1, 0x3, 0x7ff, 0x1000, 0x5}, {0x4, 0xe3, 0xb417, 0x1, 0x0, 0x7fff}, {0x0, 0x4, 0x8, 0x5, 0x80000000, 0x2}, {0x7, 0x5, 0x3, 0xffff7fff, 0x100, 0x1}, {0x2da, 0x8, 0x7, 0x1, 0x3601, 0x8001}, {0x6, 0x800, 0x81, 0x81, 0x7, 0x6}, {0x0, 0x6, 0x7, 0x8, 0xffffffff, 0x9}, {0x7, 0x0, 0x8001, 0x4, 0x7f, 0x2}, {0xfffeffff, 0x8, 0x0, 0xfffffffa, 0x3f, 0x2}, {0x3ff, 0xe34, 0x6, 0x6, 0x7, 0x3ff}, {0x7fff, 0x7, 0x7, 0xd, 0xcb64}, {0x4, 0x100, 0x6, 0x9, 0x80000001, 0xd4b7}, {0x1, 0xffff, 0x20, 0x5, 0x101, 0x8}, {0x0, 0x3, 0x1, 0x80000001, 0x7, 0x8}, {0x9, 0x8, 0x8, 0x2, 0xffffffc1, 0x4}, {0x1, 0x4, 0x1, 0x1, 0x13c, 0x3}, {0x10001, 0x80000001, 0x5, 0x0, 0x5, 0x1}, {0x1, 0x2, 0x7, 0x75a4f1d0, 0x2, 0x72}, {0x401, 0x401, 0x7fffffff, 0x8, 0x200, 0x4cbc}, {0x3, 0x401, 0xea, 0x5, 0xab3, 0x5}, {0x5, 0x10000, 0x9ecb, 0x8e62, 0x7, 0x100}, {0x7fff, 0x2, 0x1, 0x1, 0x8, 0x8}, {0x568d, 0x7fffffff, 0x10001, 0x2, 0x7, 0x8}, {0x7, 0x7f, 0x3, 0x160, 0x0, 0x50e}, {0x1, 0x4056, 0x7fffffff, 0x80, 0x6, 0xfff}, {0x4, 0x7f, 0x3, 0x80, 0xffc00000, 0x400}, {0xc28, 0xffff, 0x4, 0x1, 0x81}, {0x8000, 0x80000001, 0x7fffffff, 0x1, 0x2, 0xe729}, {0x7ff, 0x2, 0x7, 0x200, 0x5, 0x5}, {0x91bb, 0x3, 0x2, 0x2, 0x0, 0x7}, {0x4, 0xfffffe7b, 0x7, 0x6, 0x9, 0x699}, {0x3, 0x7fffffff, 0x7, 0xffffffff, 0xfffffc00}, {0xffffff00, 0x7, 0x1c20, 0x10001, 0x0, 0xffff}, {0xfffffe01, 0x4, 0x1, 0x1c9fb3dd, 0x6d, 0x80000000}], [{0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x2}, {0x4}, {}, {0x7, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {}, {0x3}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x5}, {0x6}, {}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x2}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x2}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5a582c5e401af3d0}, {0x5}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x2}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0xf80ceadff4ee2ec4}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x4}, {0x2}, {0x3}, {0x7}, {0x2}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0xd4, 0x5, 0x0, 0x1, [{0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6d96f3e68f4154ec}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_KEYS_EX={0x8c, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x4, 0xfff, 0x6, 0x0, 0x6}, 0x1f, 0x8, [{0x4f1362f3, 0x9, 0x0, 0x3, 0x5, 0x9}]}, [{0x6, 0x9, 0x1, 0x3, 0x1, 0xe0000000}, {0x0, 0x4, 0x7fffffff, 0xaec60, 0x8, 0x9}, {0x81, 0x8, 0x3ff, 0xfff, 0x1ff, 0x9}, {0x73, 0xc10, 0xfffff000, 0x5, 0x9, 0x3}, {0x8001, 0x4, 0xffffff80, 0xfffff663, 0x6}, {0x0, 0x7fff, 0x9, 0x0, 0x40}, {0x9, 0xfa0c, 0x3, 0x8, 0xfffffffc, 0x80000001}, {0x6, 0x8e1, 0x5, 0xfffff801, 0x3, 0x1}, {0xffffff81, 0x8, 0x5, 0x1ff, 0xffffff52, 0x2}, {0xfffffc01, 0x0, 0x6, 0x7fff, 0xfffffffe, 0x200}, {0x10000, 0x3, 0x614, 0x401, 0x8, 0x19}, {0xfff, 0x2, 0x3f, 0x0, 0xfffffbff, 0x2}, {0x9, 0x27, 0x5, 0x1, 0x6, 0x1}, {0x6, 0x3, 0x1, 0x400, 0x7, 0x8}, {0x0, 0x255, 0x0, 0x2, 0xc6, 0x40}, {0x8, 0x600, 0x0, 0x200, 0x400, 0x10001}, {0x4, 0xfff, 0x0, 0x3, 0x9, 0x20}, {0x4, 0x40, 0x3, 0x9, 0x800, 0x7}, {0x80, 0xfffffffb, 0x0, 0xff, 0x3ff, 0x1}, {0xff, 0x7fffffff, 0x800000, 0x5f81, 0x7}, {0x9, 0x8, 0x1, 0x10000000, 0x5e46, 0xfffffffd}, {0x341, 0x7, 0x2, 0x94, 0x2, 0x6}, {0x2, 0xffff, 0x379, 0xcb12, 0x40, 0x3ff}, {0x8000, 0x800, 0x43, 0x28000000, 0x0, 0x934}, {0x7fffffff, 0x40, 0x9, 0x400, 0x7fff, 0x7ff}, {0x10000, 0x6, 0x1ba, 0x7, 0x4, 0x3}, {0x800, 0x69, 0xffff, 0x10000, 0x4, 0x3ff}, {0x3, 0x8000, 0x0, 0x32, 0xfa55ed6, 0x80000001}, {0x20, 0x80000000, 0x2, 0x50259c4, 0x80000000, 0x7}, {0x2, 0xee, 0x8001, 0x2, 0x9}, {0x80000000, 0x7c, 0xffff, 0x8, 0x3ff, 0x3}, {0x3, 0x1, 0x4, 0x8000, 0x1ff, 0x3}, {0x7, 0x8, 0xff, 0x40, 0x1ff, 0x7fffffff}, {0x40, 0x81, 0x69, 0x5, 0x4, 0x5}, {0x9, 0x9, 0x200, 0x8}, {0x400, 0x80000000, 0x191c65df, 0x800, 0xb45, 0x3}, {0xbcf, 0x4, 0x4, 0x9, 0x81, 0x5}, {0x8, 0xff, 0xffffffab, 0x1f, 0x8, 0x3}, {0x6, 0xffff, 0x4, 0x7, 0x0, 0x3ae}, {0x7f, 0x6c5, 0x3, 0x80000001, 0x0, 0x6}, {0x8, 0x0, 0x1, 0xe93, 0x8, 0x8000}, {0x7, 0x2, 0x400, 0x40000, 0x200}, {0xdcd9, 0xa69e, 0x0, 0x8, 0xf8000000, 0x6}, {0xd0d5, 0x0, 0x9, 0xe8b, 0x6, 0xbf}, {0x0, 0x8, 0xffffffb8, 0x25b6, 0x64, 0x81}, {0x0, 0x400, 0x8, 0xaecc, 0x8, 0x4}, {0x1f, 0x1, 0xbd1, 0x159, 0x2, 0xc755}, {0x0, 0x8, 0x55, 0x9170, 0x20, 0x7}, {0x9c1, 0x77df175e, 0x10001, 0x10001, 0x1, 0x6}, {0x0, 0x0, 0x81, 0x7ff, 0x1}, {0x3, 0x2, 0x20, 0x3, 0x8001, 0x200}, {0x7fffffff, 0x7f, 0x0, 0x1ff, 0x2, 0xff}, {0x9, 0x7fffffff, 0x8, 0x1, 0x80000001, 0xff}, {0x315, 0x5, 0x10001, 0x3ff, 0x401, 0x400}, {0x4, 0x0, 0xfffffffe, 0x9, 0x3, 0x965}, {0x4, 0xffff, 0x6, 0x0, 0x1}, {0x9, 0xad, 0xff, 0x53c72951, 0x0, 0xffff}, {0x1000, 0x80000001, 0x8, 0x46e, 0x7, 0x1}, {0xc000000, 0x400, 0x5b, 0x595, 0x2, 0x7}, {0x6000, 0x7, 0x80000001, 0x374, 0x2, 0x3}, {0x6, 0x83, 0x3339, 0x800, 0x6, 0x7f}, {0x7, 0x8, 0x4ef, 0x8, 0x7fffffff, 0x6000}, {0x1000, 0x82, 0x6, 0x4, 0x3, 0xc5ec}, {0x8000, 0x1, 0x1, 0x80, 0x401, 0x101}, {0x80000001, 0xffff, 0x3f, 0x930f, 0x5, 0x2}, {0x2, 0x80, 0xe6, 0x10001, 0x1, 0x9}, {0x9, 0x1, 0x1f, 0xffffffff, 0x13c14047, 0xf8d3}, {0x40, 0x0, 0x8, 0x0, 0x0, 0x8}, {0x0, 0xfff, 0x0, 0x800, 0xd88a, 0x4}, {0x3, 0x9, 0x6, 0x4, 0x2, 0x1}, {0x8, 0xffff8000, 0xacc, 0x3, 0x7, 0xd88}, {0x6, 0x1f, 0x6, 0x3, 0xcd9, 0x80}, {0x80000001, 0x3f, 0x6, 0x2f36, 0x5, 0x2}, {0x7, 0x2e0, 0x9, 0x9, 0x1, 0x20}, {0x6, 0x200, 0x8f, 0x8001, 0x0, 0x100}, {0x7, 0xfff, 0x1, 0x3, 0xf4, 0x401}, {0x7, 0x9, 0x8, 0xc73, 0x1000, 0x80000000}, {0x5, 0x10000, 0x7, 0x1000, 0x9, 0x5}, {0x40ba79ac, 0x7fffffff, 0xa766, 0x0, 0x100, 0x4}, {0x30d, 0x80000000, 0x7f, 0x81, 0x200, 0x80000001}, {0x3, 0x4, 0x1, 0x400, 0x8, 0x3}, {0x1, 0xfffffff9, 0x6, 0xf273, 0xc76c, 0x7}, {0x0, 0x1ff, 0x51800000, 0xed9, 0x9, 0x205f}, {0xd55, 0xf1, 0x0, 0x495b038c, 0x1}, {0x3, 0xff, 0xffffffdd, 0x1, 0xfffff000, 0x8000}, {0x452800, 0x1000, 0x400, 0x9, 0x1, 0x8}, {0x8, 0x9, 0x2, 0x8, 0x7, 0x4}, {0xfffffe01, 0x7, 0x5, 0x7, 0xff, 0x2}, {0x80000000, 0xa24, 0x0, 0x5, 0x3, 0x7}, {0x2, 0x85, 0x7, 0x5, 0x0, 0x9}, {0x2, 0x30fd, 0x8, 0x40, 0x3f, 0x81}, {0x7ff, 0x1, 0x5, 0x7, 0xffffffff, 0x7390}, {0x5, 0x384, 0x9, 0xfffffffd, 0x10, 0x5}, {0xffff0b2b, 0x2, 0x0, 0x400, 0xd2b2, 0x800}, {0xa915, 0x1000, 0x8, 0x9, 0x8001}, {0xe, 0x0, 0x3, 0x80, 0xff}, {0x5, 0x3, 0x1, 0x81, 0x7fffffff}, {0xc4, 0x6, 0x4, 0xfff, 0x0, 0x2}, {0xff, 0xfffffff8, 0x9, 0x80, 0x9, 0x80000001}, {0x8, 0x1f, 0x9, 0x0, 0x8, 0x7}, {0xffff, 0x5, 0x3, 0x6, 0x4, 0x2}, {0x2, 0x3, 0x1, 0x1, 0x7, 0x3}, {0x4, 0x2606, 0x6, 0x101, 0x9, 0x9}, {0x7, 0x5, 0x6a47, 0x9, 0x4}, {0xfffffffa, 0x8, 0x1, 0x7, 0x5, 0x7}, {0x8, 0x0, 0x8, 0x40, 0x1ff, 0xffffffff}, {0x4, 0x6ffe, 0xccb, 0x80000000, 0x80000001, 0x7f}, {0x2, 0xffff0000, 0x4, 0x1, 0x76af, 0x1}, {0x2, 0x4a09, 0x28b3, 0xffffffe1, 0x1e, 0x7}, {0x100, 0x4a9, 0x40, 0xfffffffa, 0x0, 0x6}, {0x8, 0x5, 0x8001, 0x0, 0x6291, 0x4}, {0x1f, 0x2, 0xfffff222, 0x5, 0x5}, {0xff, 0x0, 0x3f, 0x1, 0x1b, 0x1a}, {0xfe, 0x8af, 0x7fff, 0xc8e, 0x0, 0x4}, {0x6, 0xfff, 0x8001, 0x0, 0x8, 0x8}, {0x7fff, 0x4, 0x5, 0x2, 0x7, 0x7}, {0x3, 0x1, 0x9, 0x4, 0x4, 0xffffffff}, {0x196, 0x0, 0x1, 0x9, 0x7fffffff, 0x1000}, {0x8000, 0x7, 0x5, 0xffffffff, 0xfff, 0x5897}, {0x57, 0xfff, 0xffff, 0x3, 0x20, 0x7fffffff}, {0x401, 0x3, 0x5, 0x1, 0x4, 0x7f}, {0x5, 0x85, 0x2, 0x200, 0x2, 0x2}, {0x3, 0x388, 0xffffffff, 0x1e, 0x258, 0x5}, {0xfffffffc, 0x7, 0x21, 0xd58, 0x81, 0x100}, {0x7, 0x1, 0x5, 0x80000001, 0x8, 0x7}, {0x97de, 0x8, 0x5, 0x0, 0x1, 0x38}, {0x101, 0x400, 0x200, 0x40, 0x7ff, 0x10000}, {0xffffffe0, 0x20, 0x0, 0x101, 0x1, 0x7}], [{0x5}, {0x4}, {0x3}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x4, 0x2}, {0x4}, {0x2}, {}, {0x5}, {0x2}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3}, {0x2}, {0x2}, {0x5}, {0x2, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x3}, {}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x5}, {0x1, 0x1}, {0x2}, {0x4}, {0x2}, {0x4}, {0x4}, {0x2}, {0x2}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0xea983f58b2573001}, {0x3}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x5}, {0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x5}, {0x5}, {0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x3}, {0x4}, {0x4}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x6, 0x5, 0x10000000, 0x2, 0x100}, 0x2, 0x4, [{0x0, 0x0, 0x26, 0x3f, 0xfffffffb, 0x4}, {0xffffffff, 0x10001, 0x1f, 0x8, 0xfff, 0x7fff}, {0x7, 0x9, 0xfffffffa, 0x2, 0x5ae7, 0x7}, {0x2, 0x4, 0x7ff, 0x20, 0x14000, 0x6}, {0xfb98, 0x7, 0xb0cf, 0xffffffff, 0x7f, 0x2}]}, [{0x400, 0x4, 0x3f, 0xfffffffe, 0xdb9c, 0x7}, {0x6, 0x7, 0x6, 0x7ff, 0x7fffffff, 0x2}, {0x50, 0x0, 0x0, 0xff, 0x8001, 0xe7e6}, {0x0, 0x84e, 0x80000000, 0xfffffff8, 0x5, 0x8}, {0xfffffffe, 0x8, 0x3ff, 0x2, 0x101, 0x80000000}, {0x4, 0x0, 0x2, 0x4, 0x8, 0x1}, {0x4, 0x400, 0x93, 0x19, 0xffff, 0x6}, {0x0, 0x20, 0x9c4, 0x0, 0x7660, 0x2}, {0x1, 0xfffffff7, 0x6, 0xea, 0x100, 0x7}, {0x80000000, 0x4, 0x7e0, 0x4000000, 0x0, 0x8000}, {0x400, 0xffffffff, 0x2, 0x0, 0x9, 0x3}, {0xfff, 0x1, 0x0, 0x8, 0x7, 0x80000000}, {0x10001, 0x80000000, 0xfff, 0x0, 0x400, 0x7}, {0x3, 0x6, 0x14000, 0x5, 0x34a7, 0x4955}, {0x80000000, 0x81, 0x1ff, 0x9, 0xfffffffe, 0x7}, {0x9, 0x40, 0x2000000, 0x9, 0x4, 0x2}, {0x8, 0x7fffffff, 0x3f, 0x5, 0x1, 0x5}, {0x800, 0x8001, 0x7fff, 0xa46e, 0x1000, 0x8}, {0xff, 0x5, 0x2, 0x5, 0x6, 0xff}, {0x20, 0x6, 0x101, 0x3, 0x508, 0x1ff}, {0x2, 0x1ff, 0x8000, 0x0, 0x3, 0x6}, {0x1, 0xb5e5f7, 0x5, 0x3f, 0xdfb}, {0x2, 0x0, 0x5, 0x7, 0x9, 0x1}, {0x8, 0x3, 0x800, 0xffffffc7, 0xe3, 0xfffffff8}, {0x100, 0x79, 0x80000001, 0x8, 0x400, 0xfffff800}, {0x80, 0x1, 0x61c50000, 0x9c, 0x8, 0x100}, {0x9, 0x4, 0x401, 0x4, 0x7, 0x7}, {0xbbc, 0x7fffffff, 0x2, 0x3, 0x81, 0x2}, {0x5, 0xb2, 0x2, 0x1, 0x8, 0x81}, {0xfff, 0x3, 0x1, 0x3ff, 0x4, 0x2}, {0x7, 0x5, 0x44011ccf, 0xffffff81, 0x0, 0x9}, {0x3df, 0xfffffc01, 0x3d, 0x7fff, 0x6, 0x7}, {0x9, 0x6, 0x35, 0x10000, 0x20, 0xfff}, {0x546, 0x7f, 0x1, 0x442, 0x9, 0xfffff793}, {0xfffff001, 0x5, 0x2fa, 0x1f, 0x94}, {0x4, 0x0, 0x4, 0x7, 0xf8f1, 0x7}, {0x29, 0xfffffffa, 0x7fff, 0x4, 0x5, 0x10001}, {0x1, 0x4, 0xc1, 0x40, 0x9, 0x4}, {0x3, 0x1, 0x200, 0x40, 0x1000, 0x1ff}, {0x2, 0x7f, 0x4, 0xab5, 0x5, 0x2}, {0x6, 0x1f, 0x0, 0x59, 0x1, 0x80}, {0x8, 0x7b, 0x6, 0xffff, 0x7e1, 0x3f}, {0xffffffff, 0x8, 0x8001, 0xef, 0x7, 0x10001}, {0x7de9b11f, 0x80000000, 0x5, 0x7, 0x9, 0x20}, {0x8, 0x0, 0x4, 0x5, 0x3f, 0x5}, {0x5, 0x5, 0x9, 0x24000, 0x0, 0x4}, {0x9, 0xf66, 0xffff1736, 0x3, 0xfff, 0x1f}, {0x8b24, 0x7, 0x11, 0x3, 0xaf8e, 0x100}, {0x832, 0x7, 0x5, 0x6d96, 0x0, 0x1}, {0x784936f7, 0x2, 0xfffff546, 0x1, 0x200, 0x30}, {0x3ff, 0x8, 0x1, 0xfffffffc, 0x2, 0x2}, {0x1, 0x6, 0x100, 0xdcea1c00, 0x100, 0x1}, {0x200, 0x7ff, 0x30, 0x8, 0x7415, 0x3}, {0x1, 0x200, 0xf8c0, 0x1000, 0xffffffe1, 0xfffff5a7}, {0x4, 0x4730, 0x7, 0x7, 0x6, 0xfff}, {0xae, 0x4, 0x5, 0x81, 0x7f, 0x9}, {0x2, 0x5, 0x6, 0x6, 0xa85c, 0x4}, {0x3, 0xffff, 0x1, 0x2, 0x40, 0x100}, {0x80000001, 0x800000, 0x0, 0x8, 0x20, 0x5}, {0x6, 0x80000000, 0xee4, 0x1b, 0xfffffff7, 0x5}, {0x0, 0x1, 0x7, 0x101, 0x1, 0x7}, {0x800, 0x7, 0x200, 0x0, 0x4, 0x6}, {0x1ec, 0x9, 0x8001, 0x0, 0x0, 0xbab}, {0x0, 0x40000000, 0x80000001, 0x7, 0x2, 0x1c68203c}, {0x94f, 0x101, 0x0, 0x1, 0x1, 0x80}, {0xffff, 0x5, 0x80, 0x6, 0x9, 0x7}, {0xff, 0xfffffffd, 0xae74, 0x1, 0xffffffe1, 0x1}, {0x7fffffff, 0x200, 0x8, 0x5, 0x81, 0x40}, {0x3, 0x9, 0x47ff, 0x0, 0x40}, {0x5, 0xaa, 0x6, 0x400, 0xe53, 0x7}, {0x0, 0x8000, 0x7, 0x2, 0x1ff, 0x3}, {0x6, 0x0, 0x4, 0x800, 0xfffffff9}, {0x800, 0xfffffffe, 0xffff0001, 0x7, 0x7d, 0x8}, {0x5, 0x80000001, 0x448, 0x9510, 0xfffffffb}, {0x66, 0x7fff, 0x599, 0x800, 0xd9, 0x7284}, {0x100, 0x80000001, 0x95d, 0x4, 0xfffffff0, 0x40}, {0x401, 0xffffffb7, 0x3, 0x9, 0x0, 0x8}, {0xc06d, 0x6, 0x7f12, 0x2, 0x7f, 0x3c9}, {0x84, 0xfaa8, 0x2, 0x4, 0x81, 0x2}, {0x800, 0xff, 0x3, 0x9, 0x8, 0x3}, {0x2, 0x8, 0x8, 0x5898, 0x2, 0x7}, {0x3ff, 0x70ebbd5f, 0x2, 0x7, 0x18a8, 0x80}, {0x400, 0x8, 0x0, 0x347b, 0x2e, 0x81}, {0x80000000, 0x40, 0x8, 0x3f, 0xfb, 0x1}, {0x6, 0xc3, 0x3, 0x514d3d76, 0x7, 0x20}, {0x6, 0x9, 0xe6e0, 0xb97e, 0x8, 0xffffffff}, {0x8, 0x3, 0x9, 0x6d1, 0x1}, {0x1f, 0x3, 0x9, 0xffffffa7, 0xb8, 0x2}, {0x6d, 0x7, 0x1000, 0x80000001, 0x3ff, 0x6}, {0x1, 0x638, 0x905, 0x6, 0x4, 0x5}, {0x3, 0x78e, 0xc6d, 0x5, 0x5}, {0xfffff801, 0x6, 0x1f, 0x0, 0x5, 0x83}, {0x3, 0xfffff030, 0x44, 0x0, 0x3, 0x3}, {0x3b8, 0x9, 0x1ff, 0x20, 0x3ff, 0x4}, {0x7479, 0x95, 0x9, 0x40, 0x1f, 0xfffff800}, {0x23, 0xff, 0x3, 0x4, 0xffff8001}, {0x1, 0x2, 0x8, 0xcaa, 0x400, 0x8}, {0x7fffffff, 0x2, 0x6, 0x8, 0x63, 0x4}, {0x3, 0xf4, 0xbc, 0x5c, 0x7fff, 0x8000}, {0x4, 0x7, 0x9, 0x8, 0x8001, 0x20}, {0x8001, 0x6, 0x8, 0x3ef381fd, 0x9, 0x4}, {0x7, 0x7a1, 0x9364, 0xa430, 0x80000001}, {0x6, 0x2, 0x10000, 0x7, 0x3f, 0x255}, {0x0, 0x1ff, 0x2, 0x2, 0x18000, 0x7}, {0x7, 0x20, 0x800, 0x6, 0x9, 0x2}, {0xfff, 0x1000, 0x7f, 0x3f, 0xffffffff, 0x380000}, {0x4, 0x8, 0x7fff, 0x3f, 0x1, 0x40}, {0x1, 0x9, 0x7, 0x0, 0x0, 0x1}, {0x4, 0x5, 0xb30, 0x0, 0x2, 0x1}, {0x1, 0x3, 0x2, 0xfff, 0x2, 0xffffffff}, {0x4, 0x7fffffff, 0x6, 0x1f, 0x0, 0x1}, {0x2, 0x6, 0xffff, 0x5, 0x36}, {0x4, 0x80, 0x7c, 0x7fffffff, 0x1, 0x7}, {0x2, 0x3, 0x5, 0x8001, 0x0, 0x6}, {0x0, 0x401, 0xffffffff, 0x7, 0x914}, {0x0, 0x6, 0x2, 0xffffffb1, 0x7f, 0xa3}, {0x2, 0x10000, 0x6, 0xfffffffc, 0x3, 0xffff7fff}, {0x1, 0x10000, 0x8, 0x6, 0x3, 0xffff}, {0x3, 0x10000, 0x80000000, 0x7, 0x64, 0x40}, {0x2, 0x20, 0x3f, 0x1000, 0x3, 0x9}, {0x2, 0x9, 0x4, 0x80000000, 0x1b, 0xff2}, {0x8b, 0x2, 0x9, 0x124, 0xa53, 0x4}, {0x5, 0x7, 0x6, 0x1, 0x800, 0x5}, {0x426, 0x2, 0xfffffff9, 0x5, 0x6, 0x750}, {0x8, 0x46, 0x1000, 0x100, 0x0, 0x1}, {0x2, 0xfffffffe, 0x3, 0x0, 0x0, 0x2}, {0x7, 0x1ff, 0x10001, 0x4, 0x9, 0xb89}, {0xf, 0x6, 0x8, 0xbb0, 0x8, 0xfffffeff}], [{0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x4}, {0x4}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0xaf836520f7463bc1}, {}, {0x1}, {0x51600beed670db0f, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0xc6bfeab73c7aff45}, {0x3, 0x1}, {0x3, 0x1}, {0x7}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1, 0x69f931bc366cd76d}, {0x4}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x40d5d891fcd71408}, {0x2}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x4}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x3}, {0x6, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x1}, {0xa98378be0acdff44}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x1}, {0x5}, {0x1}, {0x3}, {0x3}, {0x3}, {0x3, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x7fffffff, 0x4, 0x6, 0x40, 0xfffffffe}, 0x5, 0x9, [{0x4, 0x3, 0x4, 0x7, 0xffff, 0x9}, {0x1, 0x4, 0x3, 0x7, 0x80000001, 0x7}]}, [{0xffffffff, 0xfffff801, 0x5, 0x1, 0x9, 0x4}, {0x101, 0x3, 0x10001, 0xfff, 0x5, 0x47}, {0x3, 0x100, 0x3ff, 0x8000, 0x3f, 0x3}, {0xfffffffc, 0x80, 0x6, 0x0, 0x4, 0x200}, {0x9, 0xfffffff9, 0x7, 0x8001, 0x1f, 0x100}, {0x80000001, 0x3, 0x3, 0xca15, 0x3, 0x4f5}, {0x401, 0x8100, 0x2, 0x4, 0x8, 0x9}, {0x66a, 0x1, 0xffff7fff, 0x1, 0x5, 0x3}, {0x8, 0x8, 0xffffffff, 0x9, 0x0, 0xf8}, {0xda6, 0x9, 0x64, 0x4, 0x4, 0x5}, {0xfffffff9, 0x80000000, 0x9, 0x0, 0x3, 0x1f}, {0x7133b3ed, 0x400, 0x80000000, 0xffff, 0x401, 0x8}, {0x7, 0x3, 0x2, 0x3f, 0x9c74, 0x7}, {0x2, 0x8, 0x0, 0x36ec, 0xff, 0x7}, {0xf27, 0x2, 0x28c6, 0x4, 0x1, 0x100}, {0x8001, 0xbe, 0x6, 0x2, 0x2}, {0x101, 0x9, 0x200, 0xb6cd, 0x10001, 0x3}, {0x5, 0x5, 0x3, 0x4, 0x5, 0x80000001}, {0x8000, 0x39, 0xfffff8aa, 0x6d, 0x7ff, 0x1}, {0x2, 0x400, 0x0, 0x1, 0x16, 0x7}, {0x5, 0x1, 0x1f, 0x9, 0x9, 0x4}, {0xfff, 0xe236, 0x2, 0x5, 0x2}, {0x3, 0x3ff, 0x9, 0xfffffff7, 0x6, 0x3ff}, {0x400, 0x21f, 0x2, 0x5, 0xffffff4d, 0x6}, {0x4, 0xffffffff, 0x0, 0x80000001, 0x4b6, 0x5}, {0x10000, 0x4, 0x1, 0xf7, 0x8, 0x100}, {0x100, 0x817f, 0x6, 0x0, 0x7, 0x80000000}, {0x3, 0x3138, 0x8980, 0x1, 0x4, 0x7fffffff}, {0x1, 0x1, 0x9, 0x6, 0x8, 0x20}, {0x8, 0x3, 0xb19, 0x6, 0x400, 0x9}, {0x1000, 0xfffffffe, 0x8f7, 0x80000001, 0x4}, {0x1, 0x3, 0x8, 0x3, 0x7, 0x1}, {0x0, 0x7fff, 0x4, 0x80b, 0x1, 0x9b}, {0x4, 0xfd7, 0x8, 0x4000, 0x0, 0x6}, {0x2, 0x0, 0x1, 0x334, 0x3, 0x976b}, {0x8b, 0x1, 0x3, 0x9, 0x4, 0x7ff}, {0x0, 0x101, 0x8, 0x1, 0x7fffffff, 0x1}, {0xc6f1, 0x80, 0x9, 0x2, 0x101, 0x2}, {0xfff, 0x0, 0xdd, 0x1000, 0x3, 0x20}, {0x7, 0x9e9, 0x7, 0x1f, 0x3ff, 0x6}, {0x1, 0x9, 0x90, 0x5, 0xffffffff, 0xfffff095}, {0x8, 0x4, 0x1000, 0x100, 0x7ff, 0x3}, {0x2, 0x9, 0x4, 0x5, 0x80000000, 0x80000000}, {0x7ff, 0x12be, 0x5, 0x4, 0x800}, {0x9, 0x4, 0x80000000, 0x3, 0x8, 0xdb}, {0x8, 0x9, 0x0, 0x3, 0x8, 0x4000}, {0x7, 0xfffffffa, 0x0, 0x5, 0x0, 0x2}, {0x1, 0x7, 0x374, 0xeb, 0x1, 0x7ff}, {0x8, 0x0, 0x2, 0x0, 0x2, 0x2}, {0x1e, 0x7, 0x5, 0x1, 0x0, 0x6}, {0x0, 0x1ff, 0x8, 0x4, 0x8, 0x4}, {0xfffffc00, 0xe9, 0x5, 0x3, 0x1, 0x21e}, {0x7f, 0x80000000, 0xd32, 0x9, 0x800, 0x7fff}, {0x1ff, 0xfffffff7, 0xffffffc9, 0x0, 0x3ff, 0x2}, {0xcbd, 0x8, 0x1f, 0x533e, 0x5, 0x9}, {0x3000, 0x7fffffff, 0x1e, 0x11, 0x4, 0x212}, {0x7, 0x6, 0x9, 0x7, 0xffff}, {0x4, 0x2, 0x0, 0x8, 0x7, 0x5}, {0x9, 0x80000000, 0x6, 0x399, 0x1, 0xffff}, {0xfffffff7, 0x8, 0x7edf, 0x80, 0x2, 0x3}, {0x0, 0x1ff, 0x1, 0x6, 0x1, 0x1000}, {0x0, 0x800000, 0x0, 0xaa, 0x2066, 0x8}, {0x7fffffff, 0x4, 0x6, 0x1000, 0x8, 0x6}, {0x4, 0xa6, 0x3, 0xfff, 0xffffffff}, {0x7fffffff, 0x4cd, 0x5, 0x3b4d, 0x1, 0x8001}, {0x2, 0x8000, 0x0, 0xfff, 0x3, 0x304}, {0x0, 0x6, 0x1, 0x8, 0x6000, 0x7f}, {0x101, 0x2, 0x101, 0x81, 0x9, 0x8001}, {0xb5, 0x100, 0x200, 0x5, 0x6, 0xb47}, {0x4, 0x101, 0x0, 0xfffffffb, 0x550, 0xfffffffa}, {0x8, 0x1, 0x400, 0xca5a, 0x4, 0xfffffffd}, {0x8, 0xc3, 0x6, 0xb6, 0x7, 0x4b}, {0x6, 0x5, 0x80000000, 0xaa, 0x7f, 0xe0b}, {0xa18, 0x1, 0x0, 0x8f4a, 0x8001, 0x7f2b}, {0x6166, 0x1da, 0x0, 0x7cb6, 0x8000, 0xa104}, {0x81, 0xc3ee, 0x46, 0x7ff, 0x1000, 0xa973}, {0x101, 0x9, 0x0, 0x1, 0x3b809f31, 0x10000}, {0x1, 0x3ff, 0x9, 0x2, 0x5, 0x58}, {0x0, 0x9, 0x6, 0x4, 0x1, 0xc8a}, {0x1000, 0x8000, 0x7f, 0x5, 0x8, 0x7}, {0x4132, 0x2, 0x7, 0xfff, 0x581, 0x401}, {0x7f, 0x9, 0xdacf, 0x8001, 0x10000, 0x6}, {0x80, 0xd15, 0x0, 0x4, 0x8, 0xffffffff}, {0x8000, 0x7fff, 0xa0b6, 0x3, 0x2daf4c7c, 0x400}, {0x4, 0x2, 0xe9, 0x4, 0x5, 0x200}, {0x1, 0x67, 0x183c6f3a, 0x7fc, 0x8000, 0x1}, {0x9, 0xff, 0x1, 0x10001, 0x23, 0xffff}, {0x0, 0x80000000, 0x0, 0x2, 0x4, 0xd873}, {0x5e, 0x0, 0x4, 0x6, 0x4, 0x1ff}, {0x7, 0x3, 0xfffff3a0, 0x9, 0xffff, 0x100}, {0x48b0, 0xe229, 0xffffffc0, 0x2, 0xffffffff, 0xffffffff}, {0x80000001, 0x10000, 0x8, 0x1, 0xfffffffb, 0x773}, {0xfff, 0x8, 0x7, 0x9, 0x4, 0x800}, {0x81, 0x2, 0x1, 0x2, 0x2, 0x2}, {0x0, 0x7, 0x8, 0x9, 0x490, 0x6a}, {0x1, 0x80, 0x4, 0x1, 0xfffffff8}, {0x4, 0x9, 0x1000, 0x7, 0x1ff, 0x8}, {0x54, 0x8ca, 0x8001, 0x9, 0x97000, 0x77dc724}, {0x7, 0x5, 0x5, 0x4eb, 0xa6d, 0x1}, {0xf95a, 0x1, 0x8, 0x7, 0x81, 0xffff}, {0xfffff801, 0x8, 0xb0, 0xa65d, 0x9, 0xffff}, {0x3c8, 0x7ff, 0xc5, 0xde, 0x9, 0x7}, {0x5, 0x7, 0xb4f, 0x0, 0x6, 0x1}, {0x0, 0x3, 0x40, 0x4, 0x7fff, 0x80000001}, {0x40, 0x3ff, 0x7ff, 0x72, 0x6, 0x793}, {0xff, 0xbe08, 0x9, 0x7, 0x8, 0xbb}, {0xffffaf66, 0x1, 0x10000, 0xffffffff, 0x3, 0x3}, {0x2, 0xf75, 0x6a2e, 0x2, 0x3, 0x2}, {0x0, 0x8, 0x4, 0xffffffff, 0x8bb, 0xff}, {0x10, 0x315a, 0x100, 0x2, 0x100, 0x5}, {0x4, 0x0, 0x7, 0x4a9, 0x9}, {0x101, 0x5c, 0x100, 0x7, 0x4, 0xe2}, {0x7f, 0x9, 0x7, 0x6, 0x15}, {0x1ff, 0xfffffffc, 0x8, 0x1, 0x130, 0x7ff}, {0x9, 0x4, 0x800, 0x0, 0x0, 0x8}, {0x3, 0x7fffffff, 0x0, 0x6, 0x1, 0x8}, {0x0, 0x6, 0x5, 0x1f, 0x8, 0xaa}, {0x0, 0xf9, 0x2, 0x401, 0x4, 0x7ff}, {0x7, 0x80, 0xffff, 0x101, 0x9, 0xffffffff}, {0x6, 0x4, 0x20, 0x2000000, 0xe7, 0x8}, {0x5, 0x5, 0x1ff, 0x85c, 0x4b6a, 0xb7b}, {0x7fffffff, 0x0, 0x0, 0xffffffff, 0x5, 0x3ff}, {0x4, 0x0, 0x3, 0x5365, 0x9, 0x1}, {0x4, 0x7, 0x5, 0x7fffffff, 0x89f0, 0x850b}, {0x3, 0xfff, 0x80, 0x7, 0x8, 0x6}, {0x20, 0x5, 0x2, 0x3f2, 0x10000, 0x81}, {0x2, 0x8, 0x1, 0x1, 0x6, 0xea6}, {0x40, 0x0, 0x1, 0x81, 0xee2e, 0x10001}], [{0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2}, {}, {0x3}, {0x4}, {0x2}, {}, {0x1, 0x1}, {0x1}, {0x5}, {}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x4}, {0x7b977fa6a72b508a}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x1}, {}, {0x0, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {}, {}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {}, {0x5, 0x702650cdef64e0a5}, {0x0, 0x1}, {0x5}, {0x1}, {0x4}, {0x1}, {0x7, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x5}, {0x4, 0x1}, {0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x144, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x8}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_PARMS={0xe98, 0x2, {{{0x0, 0x20, 0xffffffffffffffff, 0x2, 0x3}, 0x1, 0x61, [{0x100, 0x4, 0x4, 0x2, 0x2, 0x80}, {0x81, 0xfffffffe, 0x0, 0x93e, 0xfbe, 0x9cfa}, {0x7f, 0x9, 0x3, 0x80000001, 0x6, 0x9f}, {0x6, 0x80000001, 0x10000, 0x9f26, 0x101, 0x2c9}, {0x6, 0x6, 0x7, 0x10001, 0x3ff, 0xe0000}]}, [{0xfffffffc, 0x1f, 0x7, 0xce8, 0x81, 0x40}, {0xfffffffc, 0x8, 0x1, 0x3, 0xffff3a65, 0x1f}, {0xfffffff9, 0x7ff, 0x4, 0x7, 0x2, 0x7}, {0x4, 0x3, 0x8, 0x400, 0x3, 0x6}, {0x6, 0x200, 0x7fff, 0x4, 0x3, 0x5}, {0xeb, 0x1ff, 0x94e, 0x6, 0x5, 0x5113}, {0x5, 0xffffffff, 0x7fffffff, 0x80, 0x400, 0xaf61}, {0x2, 0x80000000, 0x1, 0x4, 0x5, 0xbb1}, {0x1, 0x8000, 0x3ff, 0x3, 0x3, 0x100}, {0x10000, 0x1, 0x5, 0x3, 0x2, 0x4}, {0xcc, 0x5, 0x1, 0x8, 0xffffffa0, 0x7}, {0x5, 0x3, 0x7, 0x4, 0x9b20, 0x73}, {0x2, 0x80, 0x9, 0x3, 0xff, 0x3}, {0x75, 0x7, 0x9, 0xffffffc0, 0x200, 0x8}, {0x40000000, 0x8, 0x1f, 0x3f, 0x2, 0x8000}, {0xa04, 0x8, 0x3ff, 0x400, 0x42af}, {0xa0000000, 0xfa8, 0x8b0, 0x1, 0x3, 0x4cf}, {0x5, 0x7f, 0x4, 0x2, 0x7f, 0x5}, {0xffffffff, 0x5, 0x6e0, 0x1, 0x100}, {0x1, 0x100, 0x3, 0x7fffffff, 0x7, 0x7fff}, {0x6, 0x6, 0x9e, 0x6, 0x8, 0x8}, {0x401, 0x6, 0x4, 0x9, 0x9, 0x1000}, {0x2f49, 0x1, 0xff, 0xff, 0xffffff30, 0x7f}, {0x8c, 0x9, 0x7, 0xffffffff, 0x7, 0x7}, {0x7, 0x7f, 0x7, 0x0, 0x7, 0x800}, {0x8000, 0x1, 0x2, 0x7, 0x20, 0x10000}, {0x6, 0x0, 0x3, 0x9, 0x3ff, 0x5}, {0x9, 0x8, 0x9, 0x10e, 0x5, 0x3}, {0x1f, 0x40, 0x0, 0x8, 0x31, 0x9}, {0x5, 0x0, 0x101, 0x101, 0x5, 0x1000}, {0x4, 0x5, 0xeb1, 0x222aa485, 0x6, 0x401}, {0x4000, 0xbdc, 0x2d035792, 0xff, 0x1, 0x101}, {0x2, 0xffff, 0xfffffff8, 0x6e16, 0x8001, 0x4}, {0x0, 0x7ff, 0x4000000}, {0x1, 0x7a, 0x0, 0x3, 0x81, 0x1}, {0x796b, 0xc77a, 0x7, 0x9, 0x1f, 0x3}, {0x7ff, 0x15a, 0xfff, 0x1, 0x32, 0x80}, {0xff, 0x800, 0x5, 0x9, 0x5, 0x2}, {0xef80, 0x1, 0x2, 0x1, 0x6, 0x5}, {0x0, 0x39f, 0x0, 0x6, 0x6e8f, 0xf2ba}, {0x7, 0xfffffff7, 0x6, 0x6, 0x0, 0xbe28}, {0x8, 0x7, 0x7, 0x3ff, 0x1, 0x8}, {0x5, 0x1f, 0x5, 0x3, 0x800}, {0x6, 0x6, 0x6, 0x6, 0x7ff, 0x3}, {0x101, 0x4000, 0x1, 0x6, 0x101, 0x60}, {0xffffffff, 0x8000, 0x80000000, 0x1, 0xbe9c, 0x4}, {0x5, 0x9, 0x10000, 0xa048, 0x1, 0x8}, {0x3, 0x1ff, 0xcb3, 0x1, 0xfd, 0x2}, {0x1, 0x10001, 0x4, 0x400, 0xfffffffa, 0x7}, {0x5, 0x1ffe, 0x1, 0xa81, 0x10000, 0x7c}, {0x2a, 0xff, 0x80, 0x7, 0x3, 0x7}, {0x744c, 0x8, 0x8, 0x1, 0x0, 0x120000}, {0xfffffffb, 0xff, 0x3, 0x3f, 0x1, 0x8}, {0x100, 0x8000, 0x6, 0x0, 0x3, 0x3}, {0x1, 0x4, 0xffffffb7, 0x81, 0x1, 0x3}, {0x2, 0x7, 0x7c6f, 0x200, 0x9, 0x9}, {0x8, 0x4, 0x8000, 0xb2, 0x9, 0x4}, {0xffff, 0x10001, 0x5, 0x1, 0x9, 0xdd}, {0x9b, 0x3df, 0x1, 0x7ff, 0x20004, 0x8000}, {0x6, 0x9, 0x800, 0x1, 0x660}, {0x40, 0x80, 0xf4, 0x4, 0x20}, {0x5, 0xe90, 0x0, 0x5, 0x3ff, 0x800}, {0x2, 0x9, 0x4, 0xffffffff, 0x5162, 0x5d9}, {0xc4, 0x40, 0x9266, 0x200, 0x6, 0xfffffffd}, {0x8, 0x8, 0x7f, 0x94c1, 0x4ed1, 0x8}, {0x9, 0x8, 0x0, 0x0, 0x101, 0x7}, {0x8001, 0x1, 0xffffffff, 0x3, 0x7, 0x4}, {0x3, 0x80000001, 0x6, 0x6, 0xfff, 0x1ff}, {0x6, 0x6, 0xb95, 0x8001}, {0x4aa142d, 0x5, 0x5, 0x1, 0x81, 0x27d}, {0x7, 0x401, 0xff, 0xfe3, 0xa0e, 0x7fff}, {0x80000001, 0x587, 0x5, 0x401, 0x3f}, {0x0, 0x8, 0x3, 0x1, 0x9, 0x3ff}, {0x4, 0x1, 0x0, 0x6d, 0x4, 0xfff}, {0x0, 0x0, 0x0, 0x7, 0x1, 0x7}, {0x10000, 0x80, 0x84f, 0x2, 0x3, 0x1}, {0x2, 0xffff, 0x0, 0x1, 0x9, 0x3}, {0xff, 0x101, 0x10000, 0x5, 0x5, 0xff}, {0x101, 0x3, 0x0, 0x80, 0x6, 0x20}, {0x1cf, 0x200, 0x7ff, 0xfffffe01, 0x101, 0x3ff}, {0x7fff, 0x81, 0xba0, 0x10000, 0x7fff, 0xffff54a9}, {0x8, 0x0, 0x4, 0x6, 0x7ff, 0x695}, {0x3, 0x20, 0xff800000, 0xffffffdc, 0x401, 0x8}, {0x7fffffff, 0x9, 0xfffff800, 0x5, 0x9, 0x81}, {0x3, 0x0, 0x80000000, 0x0, 0x7f, 0x7}, {0x10000, 0xa6e, 0x52, 0x2, 0x80000001, 0x7}, {0x5, 0x0, 0x1, 0x3ff, 0x0, 0x5}, {0x4, 0x9, 0xfffffff8, 0x3, 0x8000, 0x1}, {0x7, 0xffffffff, 0x3, 0x8, 0xf1, 0x4}, {0x1, 0x6, 0xfffffffb, 0x8, 0x52, 0x8}, {0x3, 0x4, 0xaf, 0x80, 0x1f, 0xcd0d}, {0x80, 0x49, 0x4, 0x1, 0x6, 0x1}, {0x3, 0x10000, 0x8001, 0x8, 0x6, 0x1}, {0x3, 0xfff, 0x4, 0x4, 0x9, 0x1}, {0xffff, 0x3, 0x455adebe, 0x8, 0xffffffff, 0x3}, {0x2, 0x74d2, 0x2, 0x7, 0x4, 0x7}, {0x100, 0x8, 0x8, 0x1, 0x8, 0xff}, {0xb04, 0x6, 0x1, 0x4, 0x9, 0x4}, {0x1, 0x2, 0x1, 0x1, 0x2, 0x1}, {0x7, 0x21e9, 0x7, 0x8, 0x40, 0x7ff}, {0x5, 0x687, 0x8, 0x42, 0x8, 0x6}, {0x7f, 0x80000001, 0x7fff, 0x401, 0x8000, 0x5}, {0x7, 0x4, 0x80000000, 0x5, 0x5, 0x400}, {0x5, 0x5, 0x623, 0x0, 0x20, 0x331}, {0x3, 0xfffffffc, 0x0, 0x401, 0x1f, 0xeddd}, {0x8, 0x2, 0x1, 0x7, 0x1, 0x2}, {0x80000000, 0x4, 0x6, 0x8, 0xfffffc5c, 0x8000}, {0x8000, 0x57b3f335, 0x9dbd, 0x10000, 0x6, 0x40}, {0x7ff, 0x3, 0x1c000, 0x1, 0x40, 0x1}, {0xfff, 0x401e13fd, 0x101, 0x9, 0x8, 0x1}, {0x1000, 0x9, 0x1, 0xffffffff, 0x5, 0x1}, {0x4, 0x4, 0x0, 0x6b, 0xe735, 0x2}, {0x0, 0x7ff, 0x2, 0xd6, 0xfffff800, 0x3}, {0xffffffff, 0x1c000, 0x70000000, 0xe7b7, 0x9, 0x7fff}, {0x7, 0x2, 0x1000, 0xe07a, 0xfffffb0e, 0x10000}, {0x8, 0x4, 0x6, 0x101, 0x4, 0x800}, {0x2, 0x80, 0x2, 0x1f, 0x7e0, 0x7}, {0x0, 0xffffff21, 0x1, 0xfffffffd, 0x8, 0xffffffff}, {0x9, 0x4, 0x101, 0x3ff, 0x4, 0xfffffffe}, {0x0, 0x5, 0x40, 0x1, 0x3, 0x400}, {0x8, 0x7, 0x1, 0x4, 0xfffffffd, 0x685f}, {0xfffffffb, 0x200, 0x54, 0x230b, 0x9, 0xfffffb18}, {0x7, 0x7fff, 0x7ff, 0xe15, 0x3}, {0x8, 0x3, 0x650, 0x101, 0x6, 0x7fffffff}, {0x1, 0x5, 0xdd, 0xad5, 0x8, 0x6}, {0x2b2, 0x40, 0x6, 0x0, 0x1, 0xaf6}, {0x2, 0x8001, 0x4, 0xffffffe0, 0x9, 0x3}, {0x3, 0xfe, 0x9, 0x100, 0x800}], [{0x4, 0x1}, {0x4}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x3}, {0x1}, {0x4, 0x1}, {}, {0x2, 0x68d379d91b6b73f6}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x6}, {}, {0x0, 0x1}, {0x3}, {0x5, 0xcc3040ab65472be8}, {0x2}, {0x2, 0x1}, {0x36c6d2e2c482344c}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x6, 0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x4}, {0x2}, {0x3}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x6, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4}, {0x4}, {0xf816d9ad05a69553}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x3}]}}]}, {0x89, 0x6, "5b5b8c3a8eab79fdf231587a524a1f3453c38a9f256880b996aa6b38c47a6f8072cdb997c202007b118cb070be27c44f8a0b31f16e81177a530f8fb57066ea380e9e04fb6a29e8fcf7fc60c983124816b60350d5a36dc972be05f01b31f26023ff7d17c42eddf20a549b818bf42c9aa4239d2f40e2e272f5140080dad5f5aae410985f7210"}}}, @m_vlan={0x1054, 0xd, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x40, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x100, 0x0, 0x7f, 0x5}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa8a}]}, {0x1004, 0x6, "c35449340493cb8563cc722a260a21d3ae2adafa92da739f0a865cbf4e114c064dd64f50c9a0d3b0738e80ab926223285a569d95f6cb90af4d651d20a1793d9ddc8a82d09c332c45aec184462af277ed283f66c9636d8ed68bcb88cefed2698ee1d7c4ebca86f8a75f8ad544e5fdea7c881db100ec3bb44ad7e6e81d3f1e34d3d10ebedb1b4834c1b30e19f546ccb8b91b45ae8ffb733ff453b3c49c7de0be682f4136b99d7a4a256d3163816d71b75181f9b0d4e7a0454b06536fd0ca766d6575ece3f077ee6d6fdc881dbb837a21ece63762ea16910ed743d7c9a06dc7bce57765a1a909df2e1959aacfc9a8af87e62884344a60eea7dd8a4edf7bd47cc5cbe7e8d0fd47e833c03e4df74f140858be33c08bac24b635852b6425219e0a151811c47a2ea79bb91d939522a96c8a0cd36c024702814a05d61c13f5dcddb670f7205ef5ad3ec70b0693cc51312497280b145c7e96e3265d8362080b69d1cfc995287680dd88cf1007dc17a0a7ccf3feacbd44f3746f50e153339a1880bee3ef1bd4026ffb20208f77d4760c519df9b5df3e09d2384b9cbb027a4bd01cf5c1de456a8c04d6534bfd4b26442246b3f834cef7e5b29da3d588e92a689c8d6a6a68b4b14a7cc21cfd57499cdbf7dc993d347256911dd5519aedeb86a1b6fbad8ecebd6d722b8e84bab5ac0783b9ab1363dbbc66523a9653eeefc778cbbb5351d4a5d963881313793530c6d4be591e7f427788a5a485f8dc6c9e3aafbc78bc92bb9a269973670184eab00a6cde701897ecb229eeea2dc8a2c0b4dea7c1e60ba3b5798eb70fa0423ed2cbd5fa0516b7094a45aed4be38a08ce9c2330ff57f440c86eeec5f5e90832aafabc04fd4323174f3a378bf027112b8fc6e1b8d39d7eeb918fa4c820d95bd15420154e2b345aae3e10b4a71719766c6b1cfdddcf297adcbdb96926ac0d96f6c77e169c3ff91fb0e6dae0685d0556843e2218817ae1320181d8616a6bbd17c239c7ce873ffac818b54e7f0d2624b69fed0482e2f85f937fbcd100581146d381e855ba1faa096fdc86547ea031c012701c4af085fcb20378cd2cb0bfe9c0bd7109e145df8dc4d29c4092526d3135cfab3bf813719438e2394eca8ec748895fce74adb7bc3cd77fc37b3a8805dfb5d7d9292c2f3e1357edee054d2298e8f9337a7d1d90d88778b8eba2b9ba212ec590131e6af5623da81eb34ce162d97a5bc8088bfaa00810644944c644521adeb0ab43a6034d72575f6d13c890bb43d3a3118ad711902b0b0e24479c5ec664eca1016071a191d68d88f236153d82ba8671ed62ed2b763a92e23bc44f4e7abeee957bd95c9fa4472cf6863cad803d77d05aede3754eafea0b755df1417c9445a993040cc05f0af828b806a657a70bbf3425e6c898d481ca53cd79730b0ad4e0f534cb8d5d988d5eccbbc8cbea6abb27608f35572fe0fd64d8111d430c0a0c3f1b03aafad99873ec5956ab8932dbdd77150d678f80a081d1310202760c95efe7d915de696d535621d7ac8248a067115f2898ae238473fc9779be19242bc10387cc926e725979852d944cadc635f04ff2a26ffd33661ac83147cf8012eab57bbd11c9e99ec27fa59bcfac3d650e78adf9514ec8e9fea6aa1b5958d8ebeefb3fa9f6b02d4d86250c0c496bb86f9f253a375ee0c4ee8d3ef14237e8f996ea601adeae008aac0f006c65829722f4333e047097f6c816c40894a18a501dd566d51c2daee1767daa670773777a60ef70e634c52ef564582cd59d363c836634c70c4e22d8aa8251d586a250e3de9a273c743170fe8c2b930b6424bd57dc6caf96dac3083cc7037379487268560a12af1b7d6467fc22c5d4c2981fa3e7216f50d7b1d9039bdb9d449403938a30d471cf570cfdf13eaca7b6cf1762f02b377908ad2f07432f3b08ba6e8509e9597d36e640ec70ed587a037853af5912f266d8fe58886d8138721b392b798c5c7a2a08dedd697cb43671885e3c7a3be2734f6fa8af867e8dbf2917f2161dd4cd733746de29018428a32a2aaa5b270d8384f2476b19595668fcfef3d34982913eea569c46884d49853a761916a6af088cd9dbebf9488558e321433a7e1a117afbf0f763d6761228efd0b07c5d9f4a9202819bb1fd4e475b21662065e5f9bebc2abf3eb97b7249b6d494c61d6f8d5bb145432f92e975b72320067a658822bfab41b3ee090a3fc452a3531aaa78b229227dedb3fb541bafb31e0af02f9623cd90486bfdd7c707d3610d298294262925dde747aa478cca3bfde3360a39f55f4c762fbbf3f36363584667c2549238ab5be9d20a76b032e04d1b8bf0f364dd00d78ba269adf01bca35ff828e9001abe9ad5abd6e8ca00574cd5155da14eaf5a192ac038f0598000fc0e5a7165d4c9c7602a55e8b8c6b629f2c9950bb01ac8423e05491c022c88d6b695c08d8fa2269fe11c3d8fe6a6976fbf3fa5b5f1404db864c3ad8290740ea61e67eaa21ea3d2914c42cd454d9d342c1b5bc1f900dfdf2829b46db6e4a0b5122888eba123b1ef324faf0e403b8c593eb9d2864e51f721c7fe9c143ec6613c6278a37cb16de812990c7513591c1b37fef4bf1f194d99854efb99c99f84ea37c4a5074d2137f585c7bc103cccbc2329ec355f649b7abe469bcdb86b1c5e1d183f10bacfc7f619d35697409ce0c18a39a4e3650733ed5c81b811dc43fec2d15cba054b517bec6d83775207b72d3d90ec7cd93499b6e1bd4a5af7d278b91e04c071262ce800281dbaa0d0492d74b081e352f171404e22f17ab217ffc0ecbb262ac4f1019f1cabe8a00237cf34708a9212115d8ea847ae4234dd38a7e4e03074946e078b820dcd7623155c22ebe1788bff070e0643dc339dc4336f981900b9ba7fc5455de6f49caa85929802edbddb5a524ba78e18bb9161e6885b639eb3aafff4dd1252252dafe2618bb78669b1fc86f5c4b706d590e514cab4b0bb3522d05983992082bc2b20137279f71cc2e35aa4be1b3a581eb028955421b27ebc30b854da4e88a2a8b0fc51b61b56e10c9d158db574b142bb376d4e9bfe514c5bdac1512d35e90e9b39de94e8a34b39ba1f3d781317b6372b007de5d0c051568d760ab90069b3ea0632df241fdcb8d647f35d97d16331055f48a3c872af683344ecb4e7b819d757ee6597467b3070b5206758be552f96aac0ae53f9b9ad7bf2f6cf4f8b4eb67156b69148c800cfb2e47eccaa30cce0431de9245b7dd13c401d5bdb3af98bfb166978a8b1fd64255ec480d2c770e4728fda68960e64edc397e21ef0ea633108e0671ca75eb700c7a499f3855a426fb31db807166dfc9bc64f6509f9260b2c142ca1a8f433b8a516f67e0082c005869ef5e17cbd0b003b9b2e64d3a68410b6e6a425fa416117c8a4d0c1bff7bc119293200ef0faa71d18b5b76b20d3ff52ef2d172ef3281f80e8a77464a678f6f94f21f50827e8d263e3e33d14d83f09753cb91f045863f502ad8cd08e234a9934a635c9178581f126bfec9523f2a51176d6e11d01cc5662771f0af005140576ed8b9c7fde8bdbc118fe8d0cb4b3e239b5795b7ae725ad1cd6710bb4321f345f3c0828ea0a0c984f9223f8a22b9d9dd06aa2f20c2b1d1141161da2856d910c5d1e4c7c6c56b79b9a2caf7c251eb13cf9f134d5742ef7147eae662493cc52a982fc758e9788afcaea9295386e887923f9eeb0763ea0c5d58d9112f7e93a46828425133b1b6f7edc92f8ec15af107eb93d3fcbcbfbdbd518689092d39d1b22af01d65b5e75bce08ba2479f23086e7469f7b0efa5e5453ca0dc08a8d03c211c1c59f516a633edbfd93dea349962a98777d1799270a4b23448fb45ddda00fff833e3c79176113db480f94a235f0b8cbedb9e73822ed872c882d3a74216cea1c10833c7ea8823d9383aa5fd7570564ce0d656a42374aa1a186970a9bc49c6c7d3f15a4dcd2f92a6e8a292ec96c26242a82aee5fa6bb12f13decbc6f6fdbcfe91ffb34a1cdd4f76c74c1d9b3c686d6c95a45f3153824d45abc4fe1155c2031458609fa4e20cb8035dd4a0e375be2178a9ba235d0b3e6e44d1af793eb62481ded552354c6cef49427c421525fcd52144416817c102029a493182fdaf71e4ad930e3462921b25aa66471e47d55542ab6bc0b0c1232de3bc691643e43a30f44bcfbf4cfac66640c5dec5ca99d78cff835451b422886094348dce1f391e3012b17632c477d58188751216f3f4837e00c3fd3a57c439aae359c0b7f1698c1eff420ca837aed3107a33dc96c6fa0eb5dfa81ee74c15a22f402b6170158ba8da5ead5fdc4d6cfa6c5187dd103ebcc538df95e9f06dd669706ec33ea09dda540796651868c415e94956fd398722e127b5c04ffc18f31720a83ebd5c4c3d638f9bdb68beaced1327eb1b7025f357d67e0a269d5e528c0bf74a99bb2a5e2f9218043101436befade3df89ef0f1e66a8ab6e40474ba8a258ef6b8db1fb1390537700153bfa65073a0c88d8d7f5b2eb25c8a7343698a6cdc375ef727899d78f092e47ae7f608668e0987c175c4765c4fd1d9dc7ecd361eedbd5ddda3ad23c2ea3aaf6fb8327cc79f683bc124b3c6b974ec7df8b03c961d6a8748241362273ad8cfdb0b7e286182a6529ef823f27d97225d37e4f76395347b2bdcd6ece87969497849bc991b9e0bcdb671c928ef76f03f42ef2608945d75955061166acbb11aff30aa2d8ef857d2e9a4f70e172ae86b0228c99f84f30f612bb5e1c26de29b1b45d654912aa6c0c9c3f85d92a7c40dfe68d4ae6914026cc1257556f35bd21bc8a527232a6930a9d6830d8ca43c419a4875e6b742a652bc61ac5a84f90b8f2edda3d9fa92b3ee94b5bec75ccab048947313b9fef6d71c1aeb4488d9ec62e73bab0fc8b9aaa589f094672a572a785c66e88728eec6917191ab9b5ebc6ea6c3df6eef3a3421f96b225a72b38c5171cb71441449080284fd49fe43b0886466b8cbf6936b0ac7d1e01fdc468b3aa3ca78d40bb72d2305c13b346d95d931dabfb557bbdbc56d7ca1f25765e0e290e934d9452206c14741f1de36e13454c0b41105d1698122431b3d6bc0a4f2ee68e9688c3bf1623610b66d619ed31583532caa23a9fe03c318bdc04f778a4f5cbc8400364f0bbb31334e13191a8223e5ed5f49bec666b9f579983e12c74390cc3b6f702dd60695f9b51d890836863c1a1379d8264b78eeb55f1e942cdffec040eff4cda4025def1e35fe91747ec527c84b47a0750b6bac0c77b482c2ebeb1dc23a91efc21db912f06b22808ab2b053dbd4f2dc1d3e6009076bfedac8308c89d8575a5e97aa49f8a61f3996b4f548e8696c67712304777c844a5bc22a4ebc9e0c3e15e3c2e67e521edf4e315c4dfb13a583612c68f0c49e9ba70bfbcaa1c2761d9aa79f3511a68db4a2eb49d81145223ebf3397589b2f5db63100736ea6d6496f16e568d8be4555fe1af457d3882a2c3b127c4b8fc613c03d428fdecee44426b47c761f28bbcc5c3ba80f215684f2b62c33a96d799f988404edcc6ab125e83994af154ebfaf05a8a81c812c9b875d93f2e2a63a2248d53640264315e0db202b33292ba3c0924ea0b755e411a38e0bb4a1035cd669bf473444b060a4523e41bd845bf20cae73733f5a768cb7ef83116074b696630a8bc3e1361ad453296035bde07f10347766b447c04a12519729dce60ed263ea8d744d22f238d2272a69b31044341db0059718317a7b2278dc15924577f9a0fd1f6df6460bc984d821f0b4266bcffbbd935077ed8c62397d8d753c20338b406b7ea301"}}}, @m_ife={0x1b4, 0x16, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0xb0, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7f}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @dev={[], 0x16}}, @TCA_IFE_DMAC={0xa, 0x3, @dev={[], 0x22}}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa87, 0x10000, 0x0, 0x1, 0x4}}}, @TCA_IFE_DMAC={0xa, 0x3, @random="b1d2142d69b9"}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xff47, 0xffffffffffffffff, 0x80000001, 0x1f}}}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x1}]}]}, {0xf7, 0x6, "597f598b3c01ad1aff15788eead715c79ca700fa6c4f4bb41aed6616005503801935c3c17be14b7a0af7c5e7b73f84b2217090aef8482273c2753ac80a45e5e5391ae8f03ecd6bd4b397b7ff2e713d1c714b34b4012214bedea29479adbf1ee2fa5d8cccb94d5277dcc953dfb199d9657e3042e11c2c75186db55d7927dbf888d4e84ed6d56289f8dba520f47ffc09191bd1bac8976cb87be40a9a1a937d33bef87e6734fd75a0a70df6d6c0336461d8bdd5853a205026dcc506c0421d490b0f4761e3da6984b8aadad07afcfd18c9cd900cbe8cf181cd3c4a8b2033da08c6341fa91cb9951c85e7ad16d74e9882062fb09d9a"}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2, 0xa}}, @TCA_BASIC_ACT={0x29c4, 0x3, [@m_police={0x29c0, 0x5, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x2934, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff7, 0x5, 0x199, 0x352, 0xa02, {0x3, 0x1, 0x3f, 0x7, 0x6, 0xfff}, {0xff, 0x3, 0x1, 0x8, 0x5, 0xf7}, 0xff, 0x8, 0x5}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0xfb, 0x4, 0x5, 0x6, 0xe4, 0x5, 0x4, 0x5, 0x7fffffff, 0x0, 0xffff0000, 0x8c, 0xfffffffb, 0x8, 0x8000, 0x9, 0x3, 0x63f, 0x81, 0x6, 0x5, 0x289c, 0x7fffffff, 0x2, 0x80000001, 0x1000, 0xffffffff, 0x540000, 0x9, 0x40, 0x9, 0x8, 0x3, 0x6, 0xfffffffd, 0xd2, 0x10001, 0x4, 0x664, 0xffff, 0x6, 0x9, 0x9, 0x0, 0x10000, 0x7f, 0x9, 0x4, 0x8, 0x7, 0x8, 0x0, 0x0, 0x3f, 0x7fff, 0x200, 0x0, 0x560, 0x5, 0x0, 0x2000, 0x4, 0x6, 0xfffffffc, 0x4, 0x10000, 0xfff, 0x100, 0x3, 0x3, 0x80000000, 0x80, 0x864, 0x15d7, 0x4, 0x40, 0x1ff, 0x47e, 0x0, 0x81, 0x9f, 0x7, 0xc6b3, 0x1, 0x1000, 0x7, 0x0, 0x5, 0x2, 0xcc4d, 0x1, 0x401, 0x1, 0x6, 0x6190, 0x7, 0x6, 0x4, 0x0, 0x6, 0xb, 0x0, 0x3, 0x1, 0x7fffffff, 0x8001, 0x7fffffff, 0x200, 0x303b, 0x40, 0x200, 0x8, 0x0, 0x4, 0x8000, 0x7, 0x547, 0xffff, 0x9, 0x4, 0x9, 0x7, 0xd9, 0x5, 0x1, 0x4, 0x7, 0x0, 0x75, 0x11386ec2, 0x8000, 0x9, 0x3ff, 0x10000, 0x6, 0x401, 0x3, 0x1, 0x1, 0x7, 0x4, 0x8001, 0x2cd0, 0x6, 0x9, 0x1, 0xff, 0xfe1, 0x3, 0x6, 0x10000, 0x8, 0x3a, 0x7f, 0x4, 0x10000, 0x81, 0x64f, 0x4, 0x5, 0x1, 0x10000, 0x9, 0x80000000, 0x401, 0x200, 0x4, 0xca6, 0x7fffffff, 0x800, 0xffffffff, 0x3, 0x1, 0x9, 0x200, 0x8, 0x9, 0xbedf, 0x400, 0xffffff72, 0xffffffff, 0x7f, 0x7f, 0x1, 0x5, 0x92, 0xa44, 0x2ec, 0xc4, 0x3, 0x5, 0xfff, 0x6, 0x0, 0x5, 0x40, 0x100, 0x8, 0x8f, 0xa0, 0x6fa1, 0x2, 0xfffffffb, 0x600, 0xd8, 0x5, 0x8f, 0x3, 0x3f, 0xc0, 0x1000, 0x3, 0x3f0, 0x3, 0x3e2, 0x1, 0x80, 0xe5, 0xffff7fff, 0x23, 0xdd53, 0xffffffdc, 0x1, 0x6, 0x0, 0x9, 0x6, 0x13d7, 0x1ff, 0x1, 0x2, 0x8, 0x7, 0x6, 0xd7a9, 0x189b, 0xd8, 0x6856, 0x5, 0x5, 0x2, 0x3, 0x0, 0xffffffff, 0x3ff, 0x200, 0x0, 0x5fce, 0x80000000, 0x7, 0x2, 0x3, 0x7fff, 0x3, 0xfd]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x53, 0x8000, 0x122accad, 0x0, 0xffff0001, 0x8000000, 0xff, 0x4, 0x9, 0xff, 0x20, 0x65fd2e63, 0xf8c, 0x81, 0x1, 0x0, 0x8, 0x4, 0x1, 0x200, 0x4dbdafce, 0xfffff800, 0x80000000, 0x7, 0x7be, 0xb9c7, 0xffff, 0x200, 0xee2, 0x5, 0x3, 0x7ff, 0xffffffff, 0x4, 0x3, 0x3, 0x6, 0x101, 0x3, 0x3, 0x4, 0x2, 0x505, 0x3f, 0x9, 0x800, 0x1ff, 0xffffffff, 0x1, 0x0, 0x1, 0x0, 0x7, 0x7, 0x8, 0x33d, 0x7f, 0xffffffff, 0x0, 0x4, 0x0, 0x7fffffff, 0x52, 0x10001, 0x5, 0x47, 0x8000000, 0x7, 0x3, 0x88, 0x8000, 0x2, 0x80, 0x7, 0x5, 0x80, 0x7ff, 0x0, 0x1, 0xdc2d, 0x1, 0x5, 0x7, 0x2, 0xc9, 0xd005, 0x200, 0x7, 0xf5, 0x100, 0xab9, 0x13, 0x0, 0x8, 0x8, 0x8b7, 0x101, 0x5, 0x81, 0x4, 0x6, 0x5, 0x7, 0x6, 0x200, 0x20, 0xb3, 0x5bc, 0x1f, 0x2, 0x3, 0x10001, 0x9, 0x40, 0xa2a, 0x1ff, 0xf558, 0x7ff, 0x100, 0x3f, 0x7d89, 0xfffff800, 0x8, 0x5, 0x6, 0x200, 0x89, 0x4, 0x0, 0xff, 0x0, 0x3, 0x9, 0x6, 0x9, 0xfff, 0x8000, 0x6, 0xfff, 0x700, 0x0, 0x8000, 0x9, 0x86, 0x400, 0x43, 0x6, 0x1, 0xfffffffa, 0x1a810137, 0x7fc0, 0xcf3, 0x7, 0x0, 0x4, 0x2, 0x7, 0x5, 0xfff, 0x6, 0x4, 0xdd4, 0x9, 0x3, 0x5, 0x40, 0x400, 0x1, 0x8, 0xffff8001, 0x0, 0x2, 0x9, 0x8, 0x0, 0x8, 0x1, 0x3, 0x3ff, 0x3, 0x8, 0x33c, 0x3ff, 0x3, 0x101, 0x7, 0x401, 0x59, 0x8001, 0x9, 0x6, 0xffffffe1, 0xffff6f18, 0x1420, 0x1, 0x40, 0x9, 0x200, 0x0, 0x6, 0x7fff, 0x80000001, 0x8, 0x6, 0x1, 0x6a36, 0x3ff, 0x4, 0x6, 0x1, 0xffffffff, 0x8001, 0x7, 0x80, 0x401, 0xfff, 0x6, 0xfffffffb, 0x3ff, 0x9, 0x9e, 0x8, 0x3ff, 0x8, 0xff, 0x9, 0x1, 0xc84, 0x80000001, 0x7, 0x101, 0x1, 0x2, 0xfffffffc, 0xffff0001, 0xffff, 0x8, 0x7f, 0x1ff, 0xffffff2e, 0x9, 0x5, 0x6, 0x3d2, 0xc55, 0x7fffffff, 0x2, 0xeae, 0x1, 0xfae, 0x1a74, 0x40, 0x4, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x81, 0x1, 0x0, 0xfffffff7, 0x4, 0x1ff, 0x401, 0x1, 0x23, 0x80000001, 0x5, 0x1, 0x101, 0xffffb468, 0x8, 0x4, 0x0, 0x2, 0x608, 0x7, 0xc081, 0x4e, 0x6, 0x7e19, 0xffffa490, 0x80000000, 0x4, 0x4000000, 0x7ff, 0x0, 0x7, 0x2, 0x4, 0x0, 0x800, 0x4, 0x9, 0xc3d, 0x9, 0x1, 0x0, 0x40, 0x401, 0x80, 0x800, 0xb599, 0x80000000, 0x6, 0x40, 0x2, 0x0, 0x1f, 0xa1, 0x400, 0x2, 0x3f, 0x1, 0x4, 0x4, 0x10000, 0x40, 0x52c6e8c5, 0x80000001, 0x4, 0x9, 0x0, 0x1, 0x15, 0x0, 0x0, 0x7, 0x1, 0x80, 0x9, 0x7ff, 0x0, 0x8, 0xf9, 0x8, 0x5, 0x5, 0xc56, 0xff, 0x9, 0x0, 0xfe, 0xca65, 0xfffffffc, 0x7ff, 0xeef, 0x0, 0x7ff, 0x2, 0x0, 0x9, 0xffffff7f, 0x3, 0xfdfa, 0xffff, 0x2, 0x1, 0x1f, 0x6, 0xdce, 0x1, 0x1a4c, 0x7, 0x8001, 0x4, 0xffffffff, 0x100, 0x7, 0x8, 0x3, 0x80000001, 0x10001, 0x101, 0x2, 0x2, 0xfffffff9, 0x4, 0xfffff800, 0x9, 0x2c, 0x7ff, 0x5, 0x3ff, 0x1ff, 0x9, 0x2, 0x4af5, 0x6, 0x3ff, 0x0, 0x3, 0x66, 0x1f0e, 0x8000, 0x7, 0x10001, 0x9c, 0x7, 0x7fffffff, 0x7fff, 0xffffffff, 0x3, 0x7ff, 0x8, 0x400, 0x9, 0x97d2, 0x3f, 0x672d, 0x0, 0x141ca379, 0x9, 0xfff, 0x7fffffff, 0xb, 0x0, 0x0, 0x4, 0x6, 0x1000, 0x80000000, 0xef3b, 0x53b, 0x2, 0x0, 0x4, 0x3, 0x8, 0xf7a, 0x6, 0x80, 0x9, 0x0, 0x200, 0x7, 0x6, 0x4, 0x5, 0x7fffffff, 0x2, 0x5, 0x80, 0x6, 0x51882507, 0x2, 0x4, 0x5, 0x0, 0x80000000, 0x9e9, 0x1ff, 0x81, 0x400, 0xfff, 0x800, 0x84, 0x3, 0x4, 0x7f, 0x81, 0x7fffffff, 0x0, 0xffff, 0x8, 0x200, 0x6, 0x4, 0x7, 0x5, 0x3, 0x5dae, 0x5da1, 0x400, 0x5, 0x5, 0x0, 0xfffffffd, 0x3, 0x80, 0x9, 0x1, 0x400, 0x10000000, 0x0, 0x2, 0x200, 0x1ab4, 0x80000001, 0x401, 0x400, 0x30e4, 0x56, 0x3f, 0x8001, 0x4, 0x42a6, 0x0, 0x1, 0x1, 0x8, 0x7, 0x6, 0x3, 0x9, 0x10001, 0x40000000, 0xfffffffc, 0x80000001, 0x80000000, 0x0, 0x3ff, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xb9, 0x3, 0x6, 0x9, 0x7, 0x9, 0x7, 0x7, 0x80000001, 0xfffffff8, 0x4, 0x1ff, 0x1f, 0x5, 0x63b, 0xffffffff, 0xb6c, 0xae, 0x0, 0x5, 0x9, 0xd7e, 0x61aa, 0x4, 0x6f7d, 0x8000, 0x5, 0x8c2e, 0x9, 0x3d, 0x9, 0x101, 0x5, 0x3, 0x40, 0x14a0, 0x7, 0x0, 0x0, 0x4, 0x101, 0x9, 0xfffffffb, 0xfffffbff, 0x7, 0x2, 0x6, 0x1, 0x6, 0x401, 0xffffffff, 0xb4, 0x4, 0x5, 0x4, 0x0, 0x80, 0x8c92, 0x4, 0x0, 0x6f9, 0x3, 0xeeb, 0x5, 0x5, 0xca9d, 0x4, 0xffffff30, 0xe3, 0x8c59, 0x20, 0x800, 0x2, 0x56b, 0x72, 0x8, 0x200, 0xf4, 0xa, 0x56cf, 0x8000, 0x7, 0x80000001, 0x1, 0x1, 0x16, 0x7, 0x3000, 0x8001, 0x0, 0x7, 0x60, 0xcaf5, 0x6, 0x5, 0xa048, 0x5000, 0xffffffff, 0x1d, 0x6, 0x6, 0x1, 0xa58, 0x4af, 0x2000400, 0x7, 0x5, 0x4, 0xff, 0x1, 0x4, 0x9b65, 0xffff, 0x8, 0x1, 0x8, 0x5, 0x3, 0x5, 0x0, 0xffff, 0x21000000, 0x8, 0x5, 0x8, 0x0, 0x7, 0x1, 0x80, 0x1, 0x1, 0x2, 0x2, 0x2, 0x5, 0x6000, 0xfffffffc, 0x8, 0x3aa9, 0x361, 0xffff, 0x36, 0x800, 0x7, 0x2, 0x1, 0x39, 0x8000000, 0x10001, 0x1, 0x6e000000, 0xa82, 0x5d9, 0x4, 0x6, 0x7, 0x4, 0xff8d, 0x7f, 0x9, 0x400, 0x1, 0x8, 0x2, 0xffffff19, 0x20, 0x2, 0x800, 0x5fa8, 0xa82c, 0x101, 0x0, 0x6, 0x80000, 0x5, 0x5, 0x2, 0x20, 0x9, 0xbf, 0x9, 0xfffffff8, 0x10000, 0x8, 0x0, 0xffffffff, 0x2, 0x400, 0x8, 0x6, 0x7fffffff, 0x17e, 0x8001, 0x0, 0xf8, 0x7, 0x5, 0x7, 0x7, 0x7fff, 0x80, 0x6, 0x5, 0x10000, 0x9, 0x7ff, 0x4, 0xffffffff, 0x5, 0x8, 0x1, 0x1f, 0x8, 0xff0, 0x20, 0x7e600000, 0x1, 0x4, 0x1, 0xfffffffe, 0x7fffffff, 0x3, 0x6cf09962, 0xe2ef, 0x200, 0x2a1, 0x8, 0x1f, 0xf3, 0x0, 0x53, 0xffffa521, 0x0, 0x2, 0xfff, 0xffffffff, 0x9, 0xa73, 0x8, 0x3f, 0xdb4, 0x6, 0x4, 0xffff, 0xfffffffb, 0x987d, 0x9, 0x1e7, 0x4, 0xfffffff9, 0xfffff885, 0x0, 0x83, 0xc000000, 0x10000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0xffff0a2a, 0x6da1, 0x2, 0x8000, 0x0, 0x10000, 0x9, 0x81, 0x8, 0x8, 0x400, 0x7fff, 0x1, 0x2, 0x8, 0x7, 0x40, 0x1f, 0x7, 0x168f8399, 0x2, 0x3, 0x1000, 0x800, 0x80, 0x80000000, 0x7, 0x7, 0x1000, 0x10000, 0x2, 0x8, 0x4, 0x3f, 0x7, 0x9, 0x40, 0x671c, 0x2, 0x2, 0x8, 0x6a26, 0x0, 0x7, 0x7fff, 0x3, 0x10000, 0x9, 0x1, 0x1c000, 0x0, 0x7, 0x1f, 0xecc, 0x3f, 0xffff, 0x8000, 0x8, 0x7ff, 0x6, 0x7, 0x3, 0xd77, 0x10001, 0x1, 0x3, 0x8, 0x1, 0x7, 0x80, 0x8, 0x9, 0x4674, 0x100, 0x8000, 0x6ec, 0xfffffbff, 0x9, 0x8, 0x1ff, 0x4, 0x7ff, 0x1, 0x38, 0x5, 0x891, 0x4, 0x26, 0x3, 0x5, 0x7, 0x2, 0x81, 0x5, 0xcb3, 0xfffffffe, 0x7dc1, 0x9, 0x6b, 0xb9d, 0x10000, 0x88, 0xfff, 0xff, 0x6, 0x666c, 0xcb2, 0x9, 0xfff, 0x4, 0x100, 0xdf7, 0x7, 0xb36, 0x3000, 0x8001, 0x800, 0x5, 0x81, 0x6, 0x4, 0x401, 0x3ff, 0x2, 0x200, 0x10001, 0x5, 0x5, 0x0, 0x2, 0x64d2, 0x7, 0x5b997b93, 0xffffffff, 0xfffffe61, 0x0, 0xd4a3, 0x3, 0x3, 0x1f, 0x3, 0x1ff000, 0x9, 0x7, 0x2, 0x0, 0x9, 0x2, 0x1, 0x6, 0x7, 0x3, 0x7f, 0x1ff, 0x5, 0x5e6c, 0x0, 0x40, 0x3, 0x8, 0x0, 0x7, 0x5, 0xfffffffc, 0x1, 0x40, 0x8, 0x0, 0x40, 0x4d7c, 0x3, 0x7fff, 0x7, 0x2e1, 0xfffffffc, 0x5, 0x2, 0x9, 0xfd, 0x2, 0x1, 0x9, 0x2, 0xff, 0x0, 0x7, 0x3f, 0x8, 0x80000000, 0x1f, 0x8a, 0x52374c54, 0x2c8, 0x10001, 0x6, 0x4, 0x10001, 0x4, 0x4, 0x1, 0x6, 0x512, 0x4, 0xa510, 0x251c, 0x1, 0x3, 0x101, 0x1, 0x0, 0x300000, 0x9, 0x8, 0x8, 0x7e, 0xffff, 0x80, 0x7, 0x2, 0x2, 0x1, 0x134c, 0xff, 0xffff, 0x81, 0x20, 0x78, 0x198c, 0x800, 0xd5, 0x2, 0x3, 0x4, 0x1c000000, 0xffff, 0x800, 0x1, 0x6, 0x3, 0x1a, 0x80000001, 0x7fff, 0x7, 0x15665d00, 0x0, 0xfffffff8, 0xffffffff, 0x6, 0xf3f, 0x7, 0x7, 0xffff6051, 0x3, 0x7, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x200, 0x4, 0x360f, 0x4, 0x7fff, {0x40, 0x1, 0x9, 0x7, 0x81, 0x13}, {0x2, 0x1, 0x1, 0x1, 0xfffc, 0xbd}, 0x4, 0x0, 0x10001}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3bb}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x3, 0x2, 0x7fff, 0x2000000, {0x7, 0x2, 0x81, 0x5, 0xfffc, 0x6d8}, {0x9, 0x0, 0x9, 0x7, 0x9f5, 0x80000000}, 0x101, 0x1, 0x200}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x315, 0xfffffffb, 0x0, 0x3ff, 0x1ff, 0x8, 0x6, 0x0, 0x458d, 0x6, 0xfffffff9, 0x0, 0x3, 0x9, 0x7a8, 0x4, 0x8001, 0x9e5400, 0x0, 0x2, 0x7, 0x5, 0x4, 0x8001, 0x200, 0x7f, 0xffff, 0x0, 0x9c5, 0x80, 0x5, 0x8d80, 0x3, 0x3, 0x8, 0x4, 0x1ff, 0x20, 0x3ff, 0x80000001, 0x401, 0x8, 0x9d, 0x800, 0x8000, 0x1f, 0x20, 0x5, 0x10001, 0x6, 0x0, 0x40, 0x8e4e, 0x8000, 0x5, 0x5, 0x8000, 0x2, 0x6, 0x5, 0x0, 0xf3e2, 0x5, 0x1, 0x1, 0xffffffff, 0xdb, 0x9, 0x6, 0x80000001, 0x6, 0x40, 0x8, 0x1ff, 0x3f, 0x1, 0x1ff, 0x6, 0x7, 0x0, 0x8, 0x2f9a, 0x3, 0xffffffff, 0x400, 0x9, 0x4, 0x6, 0x81, 0x9e0, 0x8e, 0x8000, 0x1, 0x2, 0x4, 0x7ff, 0x80, 0x4, 0x3ff, 0x8, 0x0, 0x2, 0x0, 0x7f, 0x0, 0x7fffffff, 0x73a3, 0x0, 0x6, 0x7ff, 0x8, 0x2, 0x4, 0x81, 0x400, 0x9, 0x6, 0x81, 0x7fff, 0x80000000, 0x10000000, 0x6, 0x7, 0xaa24000, 0x80, 0x8, 0x7, 0x0, 0x1ff, 0x7, 0x5, 0x2000000, 0x2, 0x2, 0x20, 0x9, 0x3, 0x0, 0x5, 0x7, 0x0, 0x7ff, 0x1, 0x6, 0x80000000, 0x7fa8, 0xfffffeff, 0x4, 0x5, 0x5, 0x0, 0x6, 0x1, 0x6, 0x5, 0x3, 0x1, 0x906d, 0x8, 0x3, 0x7, 0x2, 0x0, 0xc803, 0x7fffffff, 0x5a6, 0xfffffffa, 0x1, 0x2b2, 0x6, 0x80000001, 0x9, 0x3374, 0xffffffff, 0xffffff27, 0x0, 0x4, 0x1a1f, 0x2, 0x600000, 0x400, 0x7f, 0xb5d6, 0x80, 0xc01, 0x1, 0xc0, 0x4, 0x80, 0x8, 0x4, 0x200, 0x1000, 0x3, 0x5, 0x7, 0x2, 0x6, 0x5, 0x6, 0x9a, 0xffff, 0x3f, 0xb2, 0x34, 0x0, 0x3, 0x7ff, 0x4, 0x1f, 0x6, 0xdb, 0xfffffffa, 0x8, 0x8, 0x21, 0x8, 0x2, 0x3, 0x1, 0x5, 0x2, 0x80, 0x0, 0x1, 0x3ff, 0x81, 0x1, 0x7, 0x2, 0x2, 0x9, 0x81, 0x3, 0x7, 0x58, 0x2, 0x1000, 0x8001, 0x5, 0x7, 0x50, 0xfffffff9, 0x3, 0x3023, 0x4, 0x159, 0x35, 0xffffff7f, 0x1, 0x1, 0x40, 0x8c32, 0x6, 0x6cf, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xff6d}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000000, 0x3, 0xffff2f3b, 0x3, 0x80, 0x7, 0x2, 0x9, 0x2, 0x58a, 0x7fffffff, 0x6, 0x4, 0xa35, 0x20, 0x3f, 0x5, 0x1239, 0x6, 0xf1cc, 0x1ff, 0x4, 0x9, 0x1, 0x6, 0x164b, 0x5, 0x61, 0xff, 0x0, 0x3ff, 0x8001, 0x445, 0x4, 0x400, 0x759, 0xe3, 0x9, 0x1ff, 0xfffffff7, 0x4, 0x6, 0x101, 0xffff0000, 0x40, 0x5, 0x1, 0x6, 0x5, 0xffff, 0x4, 0x0, 0x7, 0xae9, 0x4, 0xfffffffb, 0x7, 0x2, 0x80, 0xffffffff, 0x2, 0x8, 0x3, 0x5, 0x9, 0x8, 0x1000, 0xb8b, 0xffffffff, 0xeac, 0x40, 0x5, 0x3, 0x6f5a09e2, 0x9, 0x6, 0x8c, 0xfff, 0xfffffff8, 0x4612c958, 0x0, 0x800, 0xd9ba, 0x9, 0x80, 0x7fffffff, 0xffffff07, 0x5, 0xb9, 0x9, 0x3, 0xfffff000, 0x62164b1a, 0x4, 0x3, 0x9, 0x0, 0x0, 0x2, 0xb572, 0x5, 0x0, 0x1, 0x0, 0x80000001, 0xffff, 0x401, 0x2f5, 0x4, 0x4cdb5c12, 0x1e, 0x5, 0x5, 0x80000000, 0x1, 0x3f, 0xed93, 0xefc, 0x1, 0x9, 0x3, 0x6, 0xa0, 0x6, 0x3, 0x4, 0x5, 0xbe2, 0x7f, 0x7, 0x1, 0x1, 0x100, 0xda, 0x2, 0x80000000, 0x0, 0x7, 0x8001, 0x8000, 0x7, 0x2, 0x80000000, 0x0, 0xffffffff, 0x80000001, 0x5, 0x8, 0x3, 0x48, 0x7ff, 0x200, 0x3, 0x4, 0x9, 0x0, 0x5, 0x7839, 0x200, 0x8000, 0x7, 0x8, 0x2, 0x31d, 0x1000, 0x4, 0x7, 0x200, 0xfffffffe, 0x8, 0x5, 0x4, 0x1, 0x80000000, 0x8, 0x7, 0x0, 0x3ff, 0x901f, 0x2, 0xffffffff, 0x800, 0x6, 0x6, 0x7f, 0x1, 0x7f, 0x0, 0x7, 0xfffffff9, 0x7, 0x9, 0x8, 0x0, 0x3, 0x6, 0x6, 0x7, 0x7, 0x90fc, 0x7fff, 0x1, 0x1, 0xe2, 0x2, 0x8, 0x40008, 0x81d0, 0x400, 0xfffffffb, 0x0, 0x2, 0x9, 0x7, 0x3, 0x113d056b, 0x2, 0x401, 0x211, 0x80000001, 0x4, 0x7, 0x1, 0x1, 0x2b27, 0x9, 0x3011, 0x40, 0x3, 0x800, 0x9, 0x4, 0x6, 0x56, 0x1, 0xfc, 0x20, 0x5, 0x7, 0x6, 0xfff, 0x40, 0x7f, 0x4, 0x3, 0x2, 0x100, 0x7, 0x3ff, 0x8000, 0x200, 0x6, 0x9, 0xc5f, 0x7, 0xffff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x80000001, 0x1, 0x9, 0x8, 0xffffd474, 0x80, 0xffff, 0x81, 0x3ff, 0x81, 0x5, 0x9, 0x7fffffff, 0x8001, 0x800000, 0xa71, 0x80000001, 0x5, 0x7fff, 0x8, 0x9, 0x8001, 0x6, 0x7, 0x7, 0x8, 0x200, 0x0, 0x7f, 0xfffffffd, 0x4, 0x5, 0x80000001, 0x1, 0x1000, 0x101, 0x3, 0x8000, 0x5, 0x200000, 0x25c07611, 0xfffffffa, 0x8001, 0x9, 0x0, 0xfff, 0xa23, 0x10000, 0x0, 0x4, 0xb553, 0x968, 0x3f, 0x6, 0x1f, 0x7, 0xff, 0x9, 0x1, 0x4, 0x0, 0x800, 0x80000000, 0x9, 0x401, 0x2, 0x101, 0x0, 0x35d, 0xff41, 0x0, 0x200, 0x9, 0xc18, 0xfc3, 0x9, 0x1, 0x9, 0x7, 0x3, 0x7, 0x5, 0x1, 0x0, 0x0, 0x7fffffff, 0x400, 0x5, 0x7fff, 0x4a4, 0x84, 0x70f, 0x6, 0x20, 0x6, 0x8000, 0x0, 0x3ff, 0x0, 0x1ff, 0x10001, 0x0, 0x732, 0xfff, 0x4, 0x7, 0xff, 0xffff0000, 0x3f, 0x1907f95e, 0xf975, 0x3, 0x74e1270c, 0x9, 0x3, 0xba, 0x2, 0x7bdf, 0x3, 0x200, 0x1, 0xffff, 0x8, 0x3, 0xc83, 0x1, 0x6, 0x9, 0x0, 0x0, 0xffffffff, 0x5, 0x80000000, 0x6, 0x1f, 0xffffffff, 0x9, 0x1, 0x8001, 0x101, 0x40, 0xffff2bdc, 0x55f, 0x2, 0x104, 0x5, 0x1, 0x1000, 0x7, 0x9, 0x9, 0x1ff, 0x1000, 0xfa11, 0x7, 0x8b, 0x4, 0x5, 0x5, 0x8, 0x80000001, 0x1485, 0x7, 0x0, 0x20, 0x3, 0x2, 0x2, 0x7, 0x400, 0x6, 0xee, 0x80000000, 0x8001, 0x9, 0x8, 0x3, 0xffff, 0x93, 0x1, 0x2df, 0xab8, 0x9, 0xcec, 0x8, 0xbd, 0x5, 0x9, 0x5, 0x7, 0x3, 0x7fff, 0x1c0, 0x8, 0x8, 0x7fffffff, 0x0, 0xc5ad, 0x2, 0x80, 0x1, 0x1, 0x2, 0x79, 0x1, 0x7613, 0x0, 0x8, 0x5, 0x3, 0x3ff, 0x2008, 0x3cba, 0x100, 0x15, 0x4fc59573, 0x9, 0x40, 0x3f, 0x7, 0xf0f, 0xa28, 0x6, 0x401, 0x3, 0x8, 0x5, 0x4, 0x0, 0x9, 0x3f, 0x1990, 0x5, 0x1, 0x3, 0xffffffff, 0x9, 0x81, 0x1, 0x5, 0x80000000, 0xda, 0x9, 0x6, 0x40000000, 0x4, 0x2, 0x0, 0x61, 0x7fffffff, 0x3, 0x6, 0x9, 0xf6dc, 0x5]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x3f, 0x3, 0xffffff81, 0x4, 0x8, 0x3, 0x7fffffff, 0x6, 0xb0, 0xfffffffc, 0x6, 0x9, 0x2, 0x1, 0x71f4, 0xdfc, 0x0, 0x20, 0xb, 0x1, 0x0, 0x7, 0x10000, 0xfc000000, 0x9, 0x4, 0x9, 0x0, 0x40, 0xf6a, 0x0, 0xffff, 0x6, 0x2, 0x6, 0x6, 0x80, 0xff, 0x4, 0x7, 0x6, 0x4, 0xea, 0x9066, 0x0, 0x4, 0x5000000, 0x7, 0x8, 0x8, 0x340e, 0x2d, 0x8b, 0x8, 0x8, 0x0, 0x308, 0xffff28ca, 0x6, 0x0, 0x100, 0xfffffff7, 0x3, 0x7f, 0x4, 0x3f, 0x0, 0x7, 0x7, 0x7, 0x7f, 0x2, 0x4, 0x5e4022a7, 0x2, 0x7fff, 0x730, 0x1, 0x1ff, 0x3, 0x200, 0x10000, 0x0, 0x60ad, 0x2, 0x4, 0xff, 0x6, 0x5, 0x8, 0x39, 0x4, 0xfffffc00, 0xc3, 0x3, 0xacd, 0x800, 0x3f, 0x0, 0xaa35, 0x8, 0x2, 0x80000001, 0x800, 0x65, 0xff, 0x10001, 0x20, 0x1000, 0x6, 0x0, 0x5, 0x0, 0x1000, 0x5, 0x1, 0x3, 0x81, 0x400, 0x3, 0x10000, 0x0, 0x80, 0x80000001, 0x80000000, 0x81, 0x6, 0x7, 0x1f, 0x97fd, 0x74b68298, 0x10001, 0x9a36, 0x6, 0x800, 0x9, 0x7, 0x0, 0x0, 0x7, 0x67, 0x6, 0x5, 0x3, 0x3, 0x8, 0x7, 0x1, 0x40000000, 0x5, 0xf1, 0x3, 0x1, 0x7, 0x4, 0x3, 0x4, 0x3, 0x6, 0x6, 0x0, 0x2, 0x4, 0x1, 0x6, 0x400, 0xde, 0x7, 0x0, 0x1, 0x4, 0x9, 0x2, 0x80, 0xfff, 0xfffffffa, 0x4, 0x5, 0x0, 0x80000001, 0x3, 0x2, 0x200, 0x6bb, 0x90, 0x2, 0x7, 0x9, 0x10000, 0x8, 0x9, 0x80000000, 0x9, 0xffffffff, 0x9, 0x1ff, 0x0, 0x0, 0xa1, 0x1000, 0x5, 0x7, 0x0, 0xc86, 0x5, 0x1, 0x2, 0x6, 0x5, 0x0, 0x6, 0x352, 0x3f, 0x200, 0x8, 0xfa, 0x40, 0x7f, 0x1, 0x1, 0x3, 0x3715, 0x1, 0x7, 0xffffffff, 0x3a, 0xbbd, 0x2, 0x401, 0x10000, 0x3f, 0x1, 0x3, 0x0, 0x0, 0x4, 0x7fff, 0x5, 0x9, 0x5, 0x100, 0x4, 0x1, 0x7, 0x7, 0x0, 0x27, 0x7f, 0x2, 0x26, 0x8, 0x1, 0x5, 0x1, 0x4, 0x116]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2d4, 0xffff, 0x8, 0x9, 0x8, 0x723, 0xffffffff, 0x8, 0xa3d5, 0xf3, 0x400, 0x2f24, 0x80000001, 0x0, 0x80000000, 0x7, 0x40, 0xffffffe1, 0x1, 0xfe4, 0x1ff, 0x1, 0x0, 0xfa28f02c, 0x800, 0x81, 0xdfa000, 0x8, 0x10001, 0xfffffffd, 0x5, 0x0, 0x8, 0xffffff81, 0x4, 0x80000001, 0x6, 0x0, 0x2, 0x6, 0x6, 0x1, 0x7, 0x3, 0x5, 0x174d, 0x44, 0x10000, 0x100, 0x8, 0x2, 0x2, 0x1, 0x1f, 0xfffffff9, 0xfff, 0x3, 0x1, 0x9, 0x1, 0x25b966b6, 0x8, 0x10b, 0x0, 0x5, 0x0, 0xffff, 0x31, 0x3, 0xfffffffb, 0x5, 0x6, 0x5, 0x8000, 0x6, 0x9, 0x8c0, 0x2, 0x7, 0x2, 0xfffffff7, 0x9a60, 0x100, 0x0, 0x6, 0x6, 0x2, 0x0, 0xe5cd, 0x81, 0x62b, 0x5, 0x0, 0x20, 0x10001, 0x3, 0xffff8001, 0x1ff, 0x4, 0x4, 0x7, 0x1, 0x5, 0x6170eccb, 0x1, 0x7fffffff, 0xfffff001, 0x1, 0xffff, 0x7ff, 0x9, 0x8, 0x3, 0x101, 0x4ba4, 0x80000, 0x1, 0x80000001, 0x1, 0xfffffc9b, 0xffffffff, 0xffffff5c, 0x101, 0x400000, 0x5c7, 0xffff33cc, 0x5, 0xe8, 0x1, 0x8001, 0xcfe, 0x1, 0x7, 0x7, 0x2, 0x8, 0x2, 0x8, 0x1ff, 0x6, 0x2, 0x5, 0x3ff, 0xfff, 0x0, 0x6, 0x4, 0x0, 0x6, 0x4, 0x7f, 0xffffffc7, 0x100, 0x77, 0x4, 0x1, 0x3d, 0x7, 0x400, 0x21f, 0x3, 0x9, 0x4517aa20, 0x8001, 0xffffff81, 0x3a9, 0x5, 0x4, 0x3ff, 0x0, 0x3f8, 0xec, 0x80000000, 0x1c, 0x4, 0x7, 0x8, 0xe6, 0x5, 0xffffffff, 0x3, 0x5ca8ca82, 0x2, 0x7fff, 0x3, 0x8000, 0x6a1d, 0x3, 0x20, 0x0, 0x200, 0x101, 0xff, 0x1, 0x1, 0x5, 0x4, 0x48, 0x6, 0x7ff, 0x168a, 0x3, 0x10000, 0x7ff, 0x1325, 0x400, 0x8, 0x1000, 0x3de, 0x56e, 0x8, 0x9, 0xde66, 0x80000001, 0x101, 0x9, 0x4, 0x8001, 0x225c32d0, 0x3, 0x8000, 0x5, 0x5, 0x0, 0x9, 0x5fad, 0x9, 0x6, 0x100, 0x6, 0x200, 0xfffffff7, 0xdb, 0x8001, 0x7, 0x10000, 0x200, 0x1000, 0x400, 0x8, 0x4, 0x1, 0x0, 0x9, 0xfffffffb, 0x4, 0x8, 0x2, 0x81, 0x0, 0x7a0a, 0xfffffff7, 0x6, 0x80000001, 0x61, 0x800]}]]}, {0x7c, 0x6, "2c6c19ab9b158e80fc38ba4157751638a5c5dbd91e46dd9efeec5ec05ecc42e2313ab7b925da9f9aca47e442eada8a6ae3306de5beb2df0bc8df1bff795075d35f74af14c0ab038bd9598745ea1d8663c34ddc79a02ad7e30c56b26ae7cd5a3b73fc7482b9b218001937bb19e7e1990795bfc8d7e6914fbb"}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0xfff3}}]}}, @filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x1460, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0xc385}, @TCA_FW_INDEV={0x14, 0x3, 'gretap0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xe, 0x8}}, @TCA_FW_INDEV={0x14, 0x3, 'sit0\x00'}, @TCA_FW_ACT={0x141c, 0x4, [@m_mirred={0x1078, 0x2, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x87dc, 0x3, 0x7, 0x7fffffff}, 0x6, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9a, 0x955b, 0x2, 0x5, 0xda30}, 0x4, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x8, 0x20000000, 0x8, 0xbb}, 0x4, r10}}]}, {0x1004, 0x6, "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"}}}, @m_mpls={0xd8, 0x2, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0xf4}]}, {0xb4, 0x6, "3414b39d26a10dc5e0a64d074123388117dfa2e21fa9059d63373a1c3aa2c17c509a4d96db282982fdaa8609336d4e8079070c3223c5ffab2820b73d9a07769223669b489deba2def69d8f5c6fa6c57b1146d52bfd8446eeea4e24a1d3ba9bee680cf95b7d5331a384583c56c4e5b36e3a5c30a1d8a0da1e00ef7c6fd9c0ff83041204a2730708690b21970fc53ace73108a7f366f536f9272d80e7470bdaf057bfd96e7d7c09ae87c7701d7aada3cbd"}}}, @m_ctinfo={0x98, 0x3, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x10001, 0x8, 0x20000005, 0x9, 0x6}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x10001, 0x3, 0xffffffff, 0x5}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xffffffff}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xd079}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x81}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xfc0}]}, {0x32, 0x6, "d503b56f174df1c01a155c028e52713301ecccf6434567b5be63a9ebdb2147e36d0a9bb5e6f1d1d8be78a21e6f86"}}}, @m_mpls={0xdc, 0x0, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0xf}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0xb6, 0x6, "fbdb4f31b40a19e1072614b3d6cb4b3934a1904293204cd38437bd1c2d54efeb6d211bf780ece37f36788a6be9ff7c9680383f0d9fc89766a80e3942c77f66d599da3df1ce108bf8e4098fab855cd1944f210b7cda54a88ba0310f823c2a7ca43877962134058171e23b2ab11161d236d907eac138ee9d800d7245e990b7b1e1ff7f652d562bc9d43e27cc2d077cea6fe28658bcb09df16d668c9243e512c8a7b550d43167b306fef31fd6bccf3f57b593f5"}}}, @m_tunnel_key={0x154, 0xd, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfeee, 0x7f, 0x6, 0xec, 0xff}, 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x400, 0x10000000, 0x3, 0x47c3}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0xf3, 0x6, "263fb0d8512a4507006c12ef12000d22cca96a4a81404a308a876ca99f77bf412115781b79e31b17cea9a3c392c92ce0d0a5228708d01d25a6f4a50f21705df2647f3efc63cb021853a25d63d480fac8dbd493b4b7c1fbbc653b57e0daee8ef38fbc71cc634f5641f7dd328969d84a7da409caab9daf0794c65e8f9c25bfc84988e54900d8d8c236dc9332ca7d4cc353f815076b4244f12eda439b67adf7d8d2f77feed5d463ec2e0bad0798c5ccb40f4c7bd95e3978a9099291dd6b9dea2b7b7dfa11c415618535551eeff2d7c87be8b4b67cdcbd1d18638427e4b9ed65a1bb6afc12fcba7bc0651b36a71330096e"}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xb, 0xb}}]}}, @TCA_RATE={0x6, 0x5, {0x20, 0x4}}, @filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x40dc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0xe0, 0x2, [@m_mpls={0x58, 0xf, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x3c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88b5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xb3621}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88a8}, @TCA_MPLS_TTL={0x5, 0x7, 0x40}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88f7}, @TCA_MPLS_PROTO={0x6, 0x4, 0xf7}]}, {0xa, 0x6, "442df209453b"}}}, @m_nat={0x84, 0x16, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3e95b319, 0x5, 0x7, 0x9, 0x6}, @private=0xa010100, @remote, 0xff}}]}, {0x4c, 0x6, "e2b29c049d3279711ae880e5a1ddebe91312a7f16a97ad2b7ce40f651cfb35f0d3dd5b7cd3387909745be4abaeaaa71e25da084149ff1b0fdf8cdd3fa8e83e76868ac5d691abffaf"}}}]}, @TCA_MATCHALL_ACT={0x3fe0, 0x2, [@m_police={0x2f28, 0x16, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x2ee4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8000, 0x4, 0x400, 0x7, 0x40000000, 0x4, 0xffff, 0x6, 0x4b, 0x1, 0x7ff, 0xfff, 0x1, 0x2, 0x4, 0x40, 0x2, 0xffffffff, 0x81, 0x7, 0x4, 0x101, 0xfff, 0x13c1, 0x8, 0x9, 0x200, 0x1, 0x8, 0x9, 0x5, 0x4, 0x7ff, 0x0, 0x2, 0x0, 0x1, 0xcc9, 0xaa, 0x7, 0xfffff801, 0x0, 0x1, 0x7, 0x1400000, 0x9, 0xb3, 0x101, 0xffffff80, 0x8, 0x0, 0x3, 0x9, 0x401, 0x4, 0x5, 0x6e, 0x6, 0x7fffffff, 0x401, 0xffffffff, 0x6f2, 0x3, 0x5, 0xd30e, 0x1, 0x20000, 0x5217, 0x9, 0xfffffffc, 0x8001, 0x7, 0x20, 0x9, 0x1, 0x4, 0x377, 0xcf, 0x60, 0x98, 0xffffffd2, 0x0, 0x5, 0x5, 0x7ff, 0x3ff, 0x0, 0x0, 0x80000, 0x9, 0x6, 0x400, 0x2, 0x5, 0x3, 0x5, 0x0, 0x8b, 0x2, 0x101, 0x200, 0x8, 0x1, 0x3e1, 0x5, 0x119, 0x7fff, 0xd2, 0x1, 0x9, 0x81, 0x6, 0x7fffffff, 0x7fff, 0x14825322, 0x3, 0xff, 0x40, 0x5, 0xfff, 0xffffffff, 0x0, 0x1, 0x2, 0x8001, 0x7, 0x6, 0xffffffff, 0x5, 0x5, 0x7, 0x8, 0xac9, 0x3, 0x80000001, 0xfffffff9, 0x3, 0x9, 0x3, 0x5, 0x9, 0x9, 0x5, 0x90, 0x0, 0x80, 0x8, 0x80, 0x6, 0x1, 0xa499, 0x7fff, 0x7fff, 0xd5, 0x1, 0xfffff9ab, 0x0, 0x3ff, 0x8, 0x3f, 0x8000, 0x8, 0xff, 0x3f, 0x5, 0x9, 0x761, 0x6f7, 0x1c, 0x4, 0x3, 0xffff3a62, 0x3, 0x10001, 0x3, 0x8, 0x75e0, 0x8, 0x6, 0x400, 0x8000, 0x5, 0x9, 0x5bb0, 0xcc0, 0x7ff, 0x80000001, 0x1, 0x460, 0xa0, 0x8001, 0x3, 0x5, 0x8001, 0xff, 0x200, 0x9973, 0x3, 0xb4, 0x2, 0x6, 0x9, 0x3, 0xffffff80, 0x0, 0x0, 0x3, 0x9b8f, 0x7f, 0x100, 0x9, 0x2, 0x651, 0x5, 0x0, 0x7ff, 0x9, 0x6, 0xff, 0x9, 0x7fffffff, 0x3, 0x401, 0x1240, 0x80, 0x0, 0x81, 0xffff8001, 0x2, 0x10000, 0x400, 0xcd7, 0x6, 0x0, 0x401, 0x0, 0x96bd, 0x10001, 0x9, 0x8, 0xfffffffd, 0x9, 0x8, 0xf4b7, 0x2dd3, 0x2, 0x200, 0x81, 0x3, 0x2, 0x1, 0x3, 0x400, 0x1f, 0x7, 0xffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1ec, 0xa, 0x400, 0x8, 0x73, {0x2, 0x1, 0x4, 0x0, 0x4, 0x2}, {0x3f, 0x1, 0x6, 0x2, 0x1ff, 0xffff}, 0xdd1, 0xfff, 0x3d6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x40, 0xffffffffffffffff, 0x1, 0x4d5, 0xd2, {0x80, 0x2, 0xed6c, 0xfff8, 0x6, 0x2}, {0x1, 0x0, 0x1, 0xf2c5, 0x8001, 0x5b04}, 0x48d5827d, 0x3, 0xfffff801}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x4, 0x6b, 0x7a, 0x5, 0x8220, 0x2, 0x9, 0x27, 0x52e, 0x7, 0x9, 0x3f, 0x8, 0x1000, 0x5, 0x9, 0x80, 0x2, 0x1, 0xfffffc00, 0x2, 0x2, 0x8, 0x9, 0x1, 0x1ff0000, 0x4, 0x1, 0x5, 0x2, 0x5, 0x80000001, 0x10000, 0x9, 0x4fa, 0x4, 0xfffffff7, 0x80, 0x9, 0x6, 0x4d88, 0x80, 0x0, 0x100, 0x7, 0x1, 0x0, 0x6, 0x7, 0x5, 0x6, 0x0, 0x101, 0x8, 0x8000, 0x800, 0x40, 0x2, 0xfffffffb, 0x6, 0x4, 0x8000, 0x23b, 0xed, 0xfffffbff, 0x81, 0x4, 0x0, 0xfffffffc, 0x40, 0x9, 0x1000, 0x8, 0x1f, 0xffffffff, 0xffffffff, 0x5, 0x3, 0x3, 0x7fffffff, 0x6, 0x3, 0x9e6f, 0x800, 0x81, 0x3f, 0x4000, 0xfffffff8, 0x10001, 0x4, 0x7fff, 0x26, 0xb2, 0x4, 0xbf54, 0x2, 0x6471, 0x3aed, 0x2, 0x1, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x4, 0x9, 0x3, 0x7, 0x7, 0x1f, 0x7fffffff, 0x80000001, 0x6, 0x86, 0x4d, 0xffffffff, 0x4, 0x10001, 0x3, 0x1000, 0x5, 0x5c89, 0xffffffe1, 0x63e, 0x2bfe, 0x3ff, 0x7fffffff, 0xa97, 0x9, 0x5, 0x1, 0x1f, 0x10000, 0x7, 0x800, 0x200040, 0x8, 0x6, 0x1, 0x2892, 0x3, 0x1, 0x7, 0xac0, 0x9, 0x0, 0x6, 0x800, 0xfb9, 0xcc3c, 0x7, 0x6, 0x1ff, 0x10000, 0x4, 0x2, 0x1, 0xfffffffe, 0x5, 0xbc, 0x7, 0x100, 0x12000, 0xc7, 0x9, 0x0, 0x3, 0x1f, 0xe9b, 0x3, 0x8, 0x1, 0xffc00000, 0x7fffffff, 0x80000000, 0x8, 0x99, 0x10001, 0xff, 0x100, 0x1400, 0x3, 0xffff, 0x22, 0x10001, 0x100, 0xfffffffd, 0x1000, 0x8000, 0x6, 0x0, 0x7ff, 0x401, 0x6, 0x8, 0xd3, 0x92f, 0x7fffffff, 0x7f, 0x800, 0x7, 0xffffffff, 0x7, 0x2f033856, 0xfffff001, 0x2b, 0x7, 0x800, 0x9, 0x5, 0xffffffff, 0x6, 0x6, 0x80, 0xb44d, 0x1, 0x1bfc, 0x81, 0x9, 0x4, 0x401, 0x7, 0x1ff, 0x8, 0x401, 0x40, 0x4, 0x909, 0x5, 0xb4e, 0x1, 0x7, 0x6a, 0x800, 0x10001, 0x6, 0x9, 0x1c84, 0x9, 0x100, 0x0, 0x8000, 0x4, 0x7, 0x2, 0x7, 0x10000, 0x10001, 0xfffff801, 0x4, 0xfff, 0x7, 0x2]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x5f, 0x4, 0x6, {0x81, 0x1, 0x6, 0x0, 0x1, 0x2ca20}, {0x8, 0x0, 0xa6, 0x8, 0x6, 0x200}, 0x4, 0xf7}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0xffffffffffffffff, 0x1, 0x3ff, 0x8, {0x77, 0x1, 0x0, 0x7, 0x8, 0x7fff}, {0x4, 0x0, 0x5, 0x5, 0x5, 0xfffffffd}, 0x6, 0x1f, 0x1f}}, @TCA_POLICE_RATE={0x404, 0x2, [0xa0, 0x8, 0x8, 0xff, 0x3d4, 0x8, 0xc33, 0x0, 0x7, 0xc9, 0x9, 0x1, 0xfffffffb, 0x7ff, 0x5, 0x2, 0xfffffffc, 0x3918d108, 0xfe0, 0x8, 0xffff70d7, 0x1, 0x1000, 0x400, 0xfffffe01, 0x4, 0x9, 0x3, 0x8001, 0x7, 0x0, 0x6f72, 0x3635, 0x8, 0x4, 0xff, 0x7, 0x3f, 0x8, 0xfffffffc, 0x51b, 0x915, 0x74, 0x0, 0xcc4, 0xf1, 0x800, 0x7, 0x45, 0x6, 0xb5f0, 0x1, 0xb4a7, 0xf8, 0x8, 0x75, 0x1, 0x2e0, 0x40, 0x2, 0x8, 0x3, 0x8, 0x81, 0x7, 0xff, 0x8000, 0xe4, 0x2b, 0x6, 0x9, 0x7ff, 0x0, 0x0, 0x3, 0x8c, 0x6, 0x9, 0x0, 0xfffff263, 0x4, 0x8, 0xff, 0x7, 0x8344, 0x5, 0xfffffffa, 0x7, 0x401, 0x1, 0x7, 0x31, 0x6, 0x3, 0x8, 0x9, 0x3, 0x3ff, 0x9bf, 0x9, 0x3, 0x20, 0xed, 0x2, 0x2, 0x1f, 0x5, 0x42af3999, 0xff, 0x4, 0x30000000, 0x49e7, 0x10000, 0x3, 0x6, 0x1, 0x3, 0x1, 0x800, 0x183c, 0x80000000, 0x4, 0x9, 0x83, 0x0, 0x8, 0x1ff, 0x3f, 0x0, 0x2000200, 0x1, 0x9, 0xa5, 0x8000, 0x7, 0x7a5, 0xffffffff, 0xf5, 0x662, 0xfffffffa, 0x2, 0x71d, 0x80, 0x205, 0x26f4, 0x4, 0x800, 0x0, 0x7, 0xfffffff8, 0x8, 0x9, 0x7fff, 0x101, 0x21e, 0x2, 0x4, 0x3, 0x3bb, 0x4, 0x4, 0x45ef000, 0x8, 0x7, 0xffffff91, 0x7, 0x4, 0x5, 0x8001, 0x6, 0x800, 0x7fffffff, 0x3, 0x1ff, 0x7ff, 0x4, 0x0, 0x1ff, 0x7, 0x37bd, 0x5, 0x5, 0x8, 0x901, 0x2, 0xa5, 0x9e, 0x3, 0x596c, 0x8001, 0x5936, 0x4, 0x20, 0x6b4, 0x6b8, 0x492a, 0xffffff72, 0x7, 0x3, 0x1, 0x9, 0x4, 0x10000, 0x8001, 0x200, 0x3, 0x5, 0x4542, 0x4, 0x3, 0x1, 0x10001, 0x8001, 0x8, 0x3, 0xff, 0x3, 0x80000000, 0x6, 0x3f, 0x9, 0x9, 0x5, 0x8, 0x7, 0x5, 0x3, 0x7, 0x7, 0x80, 0x2, 0xff, 0x978, 0x1, 0x7fffffff, 0x7ff, 0x40, 0x64, 0xffffff01, 0x3, 0x2, 0x200, 0x2, 0xfa6b, 0x0, 0x2, 0x5, 0x7fff, 0x2da0ced6, 0x3, 0x94, 0x4, 0x3, 0x8000, 0x9, 0xffffff00]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x4, 0x3ff, 0x6, 0x3f, 0xfff, 0x2, 0x6, 0x100, 0xffffff81, 0x101, 0x6, 0x8aa, 0x7, 0x946, 0x259, 0x4, 0x7ff, 0x200, 0x7b2, 0x1, 0x0, 0x52bc, 0x0, 0x0, 0x2, 0x9, 0x10001, 0x4, 0x9, 0x800, 0x10000, 0x9, 0x6d43, 0xd61d, 0x6, 0x1f, 0x76, 0x4, 0x1f, 0x8, 0xcc, 0x40, 0x3, 0x92, 0x8, 0x10000, 0x8, 0x5, 0x7, 0x200, 0x4a5, 0x101, 0xffffffff, 0x600, 0x2, 0x7fff, 0x7, 0x7, 0x2, 0x0, 0x4, 0x3, 0x6, 0x6, 0x6, 0x76b3, 0x61, 0x0, 0x5, 0xed7, 0x2, 0x5, 0x8, 0x1, 0x1, 0x3, 0x57, 0x309, 0x8000, 0x1f, 0x74, 0x0, 0x4, 0xffffff81, 0x20, 0x3f, 0x4, 0x10001, 0x4, 0x1c15, 0x3f, 0x1000, 0x8000, 0x100, 0x3, 0x1, 0x6, 0x8, 0xffffffc0, 0x1, 0xa053, 0x8, 0x80000001, 0xfffffffb, 0xfffffffc, 0x3, 0x4, 0x5, 0x0, 0x1f, 0x3bdc, 0x83e, 0x6, 0x9, 0x3f, 0x7, 0x8000, 0x8ae, 0x10001, 0x2, 0x8, 0x81, 0x7ff, 0xe46, 0x5, 0xfffff7c2, 0x0, 0x475, 0x4, 0x7, 0x1, 0x81, 0x7, 0x5, 0x5, 0x7, 0x3ff, 0xca9, 0x3a, 0x7f, 0x1f, 0x2, 0x0, 0xffff, 0x80000000, 0x9af, 0x6, 0x5, 0x80000001, 0x1, 0x5, 0x1f, 0x9, 0x4, 0x400, 0x1, 0x7, 0x7, 0x2, 0x3b1e, 0xffffffc0, 0x147, 0x1, 0x1ff, 0x5, 0x3ff, 0xe034, 0x100, 0x101, 0x810, 0x1, 0x1, 0x4, 0x8, 0x348, 0x81, 0x6, 0x9, 0x0, 0xae0, 0x4, 0x9, 0x1, 0x8001, 0x2, 0x6, 0x8d9, 0xfffffffb, 0xffffffff, 0x10000, 0xffffffff, 0xfffffc01, 0x81, 0x0, 0x3, 0x2, 0x9d, 0x7, 0x5, 0x5, 0x1000, 0x80, 0x49, 0xffffff00, 0x6, 0xe2c, 0x9, 0xfffffffa, 0xffff, 0x2, 0x8b, 0x1, 0x4, 0x8, 0x1000, 0x5, 0x7fff, 0x0, 0x9, 0x3, 0x99dd, 0x1f, 0x3, 0xfffffff7, 0xd2, 0xb2, 0x8, 0x0, 0x1f, 0x91, 0xfffffe01, 0xfffffffc, 0x2375ca58, 0xffffe000, 0x2, 0x564, 0x1, 0x1, 0x2, 0x3141, 0xffff, 0xc3cc, 0x0, 0x4, 0xfffffff7, 0x9, 0x8, 0x1, 0x100, 0x0, 0x3, 0x8, 0x4, 0x9, 0x800]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x8, 0x7fff, 0x452c, 0x7, {0xd5, 0x1, 0x4, 0x9, 0x8, 0x1}, {0x8, 0x2, 0x9, 0x4, 0x7fff, 0x8}, 0x7fff, 0x9, 0x80000000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x63}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x83b5, 0x1, 0x9, 0xc0982fa, 0x6, {0x1f, 0x1, 0x5, 0x80, 0x8, 0x1}, {0x15, 0x1, 0xa2, 0x1000, 0x7, 0x6}, 0x7, 0x9, 0x3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9fe5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x265}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4c}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x401}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x90, 0x1f, 0x9, 0x7e000000, 0x100, 0xffffff1d, 0xe6c4, 0x5, 0x81, 0x1, 0x5, 0x3f, 0xfffffffd, 0x1000, 0x2000000, 0x2, 0x7f, 0x10000, 0x0, 0x1, 0x2, 0x6, 0x3, 0x7, 0x101, 0x6, 0x5, 0x390e, 0x6, 0x6, 0x37, 0x100, 0x8000, 0x5, 0x0, 0x5, 0x4, 0x8, 0xff, 0x7, 0x5, 0x1, 0x0, 0xfff, 0x5, 0x2, 0x3, 0x4, 0x13ab, 0x35c2, 0x631b, 0x4, 0xfffffff8, 0x400, 0x2, 0xd1, 0x0, 0x1, 0x5d94, 0xdd81, 0xff, 0xffffffff, 0x8000, 0xfff, 0x9c, 0x3, 0x5, 0x200, 0xffffffe0, 0x8, 0xf5ed, 0x3, 0x7, 0xfffffc01, 0x6, 0x2, 0xef01, 0x7f, 0x0, 0x8000, 0x1, 0x0, 0x6, 0x5, 0x1000, 0x0, 0x7, 0x80, 0x4, 0xc6, 0xf0, 0x8, 0x87, 0x58, 0x3ee, 0x1c, 0xffffffd9, 0x7, 0x5, 0x10000, 0x2, 0x9, 0x10, 0x5, 0xfffffffd, 0x80000000, 0x4, 0x9, 0x80, 0x1, 0x4, 0x2, 0x2, 0x4, 0x7, 0x9, 0x800, 0x0, 0x228, 0x8, 0xf54, 0x58, 0x73f1, 0x8, 0x7000000, 0x9c04, 0x401, 0x37, 0xff, 0x9, 0x4bdc3f96, 0xfffffffd, 0x100, 0x401, 0x8e, 0x9, 0x401, 0xffffffff, 0x0, 0xfff, 0x8, 0x8, 0x6e9b, 0xffffff80, 0x5, 0x1, 0x7, 0x40, 0x1, 0x72c63ec5, 0x1c, 0x1, 0x4, 0x0, 0x10001, 0x0, 0xac28, 0x84, 0x5, 0x863, 0x7, 0x8, 0x400, 0x40, 0x10001, 0x7, 0x9, 0x9, 0x8001, 0x7, 0x9, 0x7, 0x2, 0x20, 0x4, 0x1, 0x3, 0x5, 0xda, 0x9, 0x16, 0xffff, 0xdc04, 0x4, 0x940d, 0x4bed, 0x2, 0x48f, 0x2, 0xf7eb, 0x1, 0x20, 0x6, 0x84c, 0x457, 0x6, 0x9, 0x20, 0x21a2, 0x82ff, 0x9, 0x0, 0x206600, 0x4, 0x6, 0x1, 0x20, 0x7, 0x400, 0x4, 0x7ff, 0x3, 0x101, 0x7fff, 0x7, 0xfffffffa, 0x7fff0, 0x0, 0x41, 0x0, 0x603d0179, 0x8, 0xffff, 0x3, 0xad, 0x5, 0x4, 0x8, 0x800, 0x95, 0x91, 0x3, 0x40, 0x100, 0x9, 0x80, 0x4b2, 0x9, 0x10000, 0x4, 0x3, 0x7, 0x1, 0x8, 0x7, 0x10000, 0xd3, 0x7, 0x9, 0x8, 0x1f, 0xa3a, 0x9, 0x10000, 0x4fde, 0x3b7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0x200, 0x0, 0xffffffff, 0x10000, 0x3, 0x3f, 0x2, 0x3, 0x7ff, 0x1000, 0x5df, 0x6, 0x9e13, 0x1, 0xf0000000, 0x4, 0x8001, 0x9, 0x2f90, 0x5, 0x7ff, 0x6, 0x1ff, 0x5, 0x5, 0x9, 0x773, 0x1, 0x7f, 0x1, 0x10001, 0x9, 0x80, 0x20, 0x4, 0x2, 0x2930, 0x1278, 0x8, 0x9, 0xffffffff, 0x7, 0x3, 0x80000000, 0xf0, 0x7f, 0xfffffffd, 0xff, 0x0, 0x10001, 0x200, 0x6, 0x3, 0x8, 0x7f, 0x3, 0x0, 0x80, 0x4, 0x5, 0x1, 0x837, 0x2, 0x3, 0x1, 0x6, 0x6, 0x8, 0x23f9, 0x7ff, 0x101, 0x80000001, 0xd396, 0x0, 0x80000001, 0x9, 0x2, 0xffffff81, 0xc0ca, 0x4, 0x8, 0x9, 0x100, 0x80000000, 0x7fff, 0xffff0000, 0x323f, 0x3ff, 0x0, 0x1000, 0x1, 0x3, 0x8001, 0x1ff, 0x5, 0x6, 0x8, 0xffff, 0x6, 0x7f, 0x5, 0x40, 0x3b, 0x7, 0x1, 0x2, 0x9, 0x2, 0x6, 0x2, 0x200, 0x27c4a16, 0x0, 0x3, 0x1e, 0x0, 0x7f, 0x8, 0x401, 0x6, 0x8, 0x1, 0x401, 0x7, 0x80, 0x7f, 0x40, 0x3, 0x8, 0x9, 0x7fff, 0x4, 0x200, 0x800, 0x214d, 0x0, 0xbc21, 0x3, 0x9, 0x9, 0x0, 0x80, 0x7ff, 0x2, 0x87, 0x7ff, 0x1, 0x1, 0x2, 0x0, 0x3, 0x0, 0x1, 0x0, 0x3, 0x9, 0x0, 0xff, 0x7, 0x80000000, 0x800, 0x1eebde3a, 0x200, 0xfc, 0xffff, 0x1, 0x0, 0xfffffffc, 0x84, 0x5, 0xffffffff, 0x7, 0xffffffff, 0x1, 0x20000, 0x800, 0x8, 0x6, 0x9063, 0x5d3, 0x101, 0x5, 0x6, 0x79a575e9, 0x7af9, 0x0, 0x58ae, 0x778, 0x9, 0xcee, 0xc33f437, 0x6, 0x10001, 0xd379, 0xe6c, 0x1000, 0x9, 0xa93, 0x8001, 0x7ff, 0x0, 0x8000, 0x81, 0x5e9, 0x9, 0x1, 0xffff7fff, 0x400, 0x2, 0x5, 0x9, 0x200, 0x7ff, 0xfff, 0x6, 0xffff, 0x7, 0xae4f, 0x3ff, 0x80000000, 0x7fffffff, 0x1, 0x10000, 0xb17, 0x2, 0xff, 0x25, 0xb8c000, 0x0, 0x89, 0x320, 0x0, 0x1, 0x411c, 0xfffffe00, 0x2, 0x7a, 0x7, 0x6, 0xd0f, 0x2, 0x3ff, 0x7fffffff, 0x40, 0x3, 0x1, 0x2, 0x1f, 0x7, 0x81, 0x0, 0x4, 0x2, 0x3, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1d}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x8492, 0x1bb4, 0x2, 0x7, 0x6, 0x8b, 0x3d8, 0x7f, 0x3f, 0x0, 0x1, 0x400, 0x8, 0x5, 0x40, 0x67, 0x8001, 0x9, 0xffffffff, 0x5, 0x7, 0x5, 0xffff, 0x10000, 0x3553, 0xfff, 0x7fff, 0x3ff, 0x4, 0x1, 0xe525, 0xa4b, 0x6, 0xa5, 0x73b, 0x101, 0xba7f, 0x0, 0x3, 0x100, 0x7, 0x3, 0x4, 0x26, 0x81, 0x1, 0x7, 0x5, 0x2, 0x80, 0xffff, 0x0, 0x7ff, 0x8, 0x3a, 0x1, 0x4, 0x900, 0x189b, 0x800, 0x6, 0x6, 0x5, 0x8, 0x7ff, 0x800, 0xffffffff, 0xfff, 0x5, 0x7, 0x4121, 0x0, 0x4, 0x9, 0xbd5, 0x81, 0x1, 0xffffffff, 0x101, 0x2, 0x2, 0x101, 0x7fffffff, 0x2, 0x4, 0xa15a, 0x92e, 0x8001, 0x5, 0x80, 0x1, 0x4f43, 0xff, 0x5, 0x0, 0x100, 0x6, 0x10000, 0xfedf, 0xff, 0x800, 0x5, 0x7fffffff, 0xffffffff, 0x0, 0x5, 0x40, 0x7f, 0x5, 0xffff, 0x2, 0x7, 0x332, 0x3, 0x4c6, 0x0, 0x461, 0x9, 0x80000000, 0x7, 0x7, 0x861, 0x1, 0x800, 0xffffffff, 0x0, 0x1, 0x7fffffff, 0x157, 0x8, 0x4, 0x200, 0x8, 0x0, 0x6a8, 0x2, 0x7, 0x3c, 0x0, 0x5, 0x7fff, 0x10100, 0xe4, 0x6d3, 0x10001, 0x3ff, 0x5, 0xffffffff, 0x6, 0x5, 0xe6ca, 0x8, 0x1c9c, 0x5bd, 0x1, 0x9, 0x8, 0x6c68, 0x9, 0x8, 0x3, 0x9, 0x8, 0xfff, 0x3, 0xe0, 0x2, 0x5, 0x3, 0x9, 0x4, 0x1b6, 0x7fff, 0x5, 0x4, 0x4, 0x2, 0x6b1, 0x1, 0xf9, 0x8, 0x6c2d, 0x9, 0x758, 0x0, 0x67e0, 0x0, 0x3, 0x80, 0x10001, 0x5, 0x0, 0x4, 0x3, 0x1, 0x2, 0x2a, 0xef, 0x0, 0x80000001, 0x3, 0x4, 0x1ff, 0x59, 0x5, 0x87, 0x2, 0x1, 0xcf, 0x2, 0x24, 0x6, 0x8000, 0x80000001, 0x4fc, 0x8, 0x5, 0x80000000, 0x9, 0x7ff, 0x49f, 0x9, 0x4000, 0x0, 0x3, 0x6, 0x2, 0x81, 0x5, 0x4, 0xffffffe0, 0x8, 0x4, 0x2, 0x1000, 0xa16c, 0x81, 0x0, 0x4, 0xfff, 0x8, 0x30c12ade, 0x22, 0xa0000000, 0x8, 0xfffffffd, 0x1, 0xe5, 0x1, 0x3, 0x80, 0x0, 0x8, 0x9, 0xffffffff, 0x1f]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x4, 0x9, 0x5, 0xa7b, 0x6, 0x10000, 0x1, 0x2, 0x1, 0x4, 0xff, 0x2a, 0x7fff, 0x7, 0xbc, 0x9, 0xffffffff, 0x7, 0x6, 0x3, 0x401, 0x7fffffff, 0x7, 0x7ff, 0xda, 0x6, 0x4, 0xffff4003, 0x2, 0x7, 0xffff9206, 0x5, 0x3, 0xe4, 0xffff8001, 0x2, 0x1e, 0x5, 0x400, 0x2f96, 0x7, 0x7, 0xa57, 0x8001, 0x7, 0x3f, 0x1, 0x9, 0x8, 0x1, 0x7, 0xd9, 0x100, 0x5, 0x1, 0x8, 0x1f00, 0xf4, 0x10000, 0x3, 0x5, 0x10001, 0x6, 0x4, 0x716d, 0x0, 0x3ff, 0x1f, 0xffff, 0x333, 0x9, 0x5, 0x3, 0x2, 0x80, 0x7, 0x1, 0x9, 0x401, 0x49, 0x3ff, 0xffffff8e, 0x1, 0x0, 0x1, 0x2, 0x4, 0x3, 0x6, 0x5b, 0xffff, 0x10001, 0x200, 0xdd05, 0x5, 0x1000, 0xffff, 0xea9, 0x1000, 0x1ff, 0x8001, 0x92c, 0x9, 0x1, 0x1, 0x6, 0x3, 0xcc73feb7, 0x8000, 0x3ff, 0x1, 0x1000000, 0x6, 0x91, 0x5, 0x401, 0x7, 0x6, 0x9, 0x100, 0x491, 0x3f, 0x5, 0x311, 0x4, 0x1, 0x3, 0x7, 0xaf8, 0x2, 0xfffffffe, 0x1, 0x7, 0x760, 0x1, 0x7, 0x2, 0x9, 0xdd15, 0x8e, 0x8, 0x9, 0xffffffff, 0x4, 0x1, 0xad, 0x3, 0xd1, 0x1ff, 0x138b, 0x2, 0x101, 0x101, 0x1, 0x7, 0x6f8a, 0x6, 0xd9, 0x9, 0x2, 0x5, 0x401, 0x5, 0x8001, 0xffff, 0x7fff, 0x5, 0xa7af, 0x1, 0x200, 0xfffffff7, 0x6, 0x0, 0x8, 0x10000, 0x6, 0x8, 0xffffff01, 0x200, 0x2, 0x10001, 0x9, 0x3f, 0x5, 0x40, 0x7, 0x4, 0x10000, 0x4, 0x4, 0x5, 0x10001, 0x4, 0x1, 0x0, 0x1, 0x3ff, 0x40, 0x1, 0x7fff, 0x2da, 0x3f, 0x3, 0x8001, 0x400, 0x70, 0xfffffffd, 0x8, 0x0, 0x8001, 0x40, 0x0, 0x7, 0x7, 0x6, 0x17, 0x800, 0x6, 0x11e, 0x7, 0x0, 0xb1, 0x43, 0x8, 0xffff58b2, 0x6b47, 0x2d77, 0xffffff81, 0xfffffffe, 0x9, 0x4, 0x7, 0x1, 0x7, 0x5, 0x1f, 0x80000000, 0x0, 0x4, 0x5ba, 0x7fff, 0x4, 0x2fb3, 0x0, 0xc757, 0xfffffe00, 0x5, 0x4, 0x7, 0x9, 0x7, 0x1000, 0x7fffffff, 0x5, 0x1ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x401, 0x0, 0x6, 0x8001, 0x800, 0x9, 0x1, 0x8000, 0x2, 0x4, 0x0, 0xfffffff7, 0xffff, 0x5, 0x5, 0x400, 0x81, 0xd8a, 0x1f, 0x6, 0x9, 0x0, 0x6, 0x3, 0x100, 0x7, 0x5, 0x1, 0x401, 0xbf, 0x2, 0x368c, 0x9, 0x6, 0x40, 0x8, 0x7fffffff, 0x7, 0x4, 0x4, 0x4, 0x2, 0x1, 0x1, 0x9, 0x2, 0x2, 0x0, 0x7, 0x7, 0x1f, 0x7, 0x5, 0x6f2aa293, 0x2, 0x80, 0x0, 0x80000000, 0x2, 0x7fff, 0x9d54, 0x0, 0x81, 0x800, 0x9, 0xcb58, 0x7a, 0x5, 0x1ff, 0x5, 0x80000001, 0x7fff, 0x3, 0x0, 0x5223, 0x9, 0x101, 0x9, 0x6, 0x8001, 0x7, 0x5, 0x4, 0x5000, 0xc8ed, 0x1, 0xfffffffc, 0x8, 0x5, 0x1f, 0x2, 0x3, 0x7dd, 0x0, 0x7fff, 0x4, 0x35b4, 0xcb, 0x80, 0xee55, 0x4, 0x6, 0x401, 0x8, 0x2, 0xffff, 0xffff8169, 0x7, 0xaf, 0xf12, 0x8001, 0x0, 0x8, 0x4, 0x80000001, 0x7, 0x0, 0x0, 0x6, 0x23f9, 0x4, 0x8, 0x30000, 0x2, 0x80000000, 0x3ff, 0x7, 0xffffff4c, 0x80000000, 0x120000, 0x8000000, 0x33, 0x7, 0x20, 0x1a, 0x100, 0xe35, 0x4, 0x80000000, 0x6a6, 0x7f, 0x5, 0x1, 0xb8, 0x0, 0x70a0, 0x3, 0x4, 0x200, 0xac, 0x6, 0xb391, 0x7fffffff, 0x4, 0x5, 0x8, 0xfffffffd, 0xf0, 0x8, 0x0, 0xffff, 0x1, 0x2, 0x80000001, 0x1f, 0x3, 0x7fffffff, 0x8, 0x5, 0x81, 0xc23, 0x800, 0x2, 0x2, 0x1, 0x7ff, 0x4, 0x6, 0x8, 0x80000000, 0x9, 0x4, 0x6, 0x8, 0x3, 0x782, 0x9, 0x8, 0x6, 0x0, 0x8, 0xce0, 0x2, 0x21d, 0x3, 0xf00, 0x2, 0x5, 0x1, 0x7, 0x46e, 0x2, 0x819b, 0x1, 0x1f, 0x1000, 0xffffffff, 0xfffeffff, 0x3ff, 0x20, 0x10001, 0x2, 0xfffff801, 0xffffffff, 0x100, 0x9, 0xffffffff, 0x6, 0x3, 0x1ff, 0x8, 0x5, 0x0, 0x4, 0x7, 0x8000, 0x8, 0x987, 0x3f, 0x5, 0x5, 0x7, 0x2, 0xff, 0x200, 0xfffffff9, 0x6b, 0x1000, 0x1ff, 0x1, 0x9, 0x3980, 0x0, 0x7, 0x100, 0x6, 0x9, 0x2, 0x1f, 0x5e8, 0x4, 0x7ff, 0x3, 0x2, 0x8, 0x7c]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffc01}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x200, 0x6, 0x0, 0x800, 0x0, 0x101, 0x786c, 0x1, 0x3, 0x3, 0xffff, 0xff, 0xfff, 0x7fff, 0x5, 0x80000001, 0x0, 0x0, 0xfffffb9d, 0x7ff, 0x1, 0x7fff, 0x3f, 0x400, 0x6, 0x0, 0x5, 0x5, 0x745a, 0x0, 0x5, 0x4, 0x8000, 0xd, 0x8, 0x80000001, 0x1, 0x7ff, 0x20, 0x8, 0x7, 0x21c5, 0x8, 0x84, 0x1ff, 0x5, 0x1, 0x380, 0x1, 0x39da2d4d, 0x0, 0x5, 0x1000, 0x4, 0xe6e6, 0xcd, 0x2, 0x8, 0x1, 0x4, 0x3, 0x69fc, 0x5, 0x8, 0x800, 0x6, 0xfffffff8, 0x0, 0x8001, 0x10001, 0x3, 0x6674ee17, 0x1f, 0x2cc86a39, 0x3, 0xffffff80, 0x2, 0x1, 0x5, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0xe42, 0x1f, 0x2, 0x3, 0x27d, 0x9, 0x0, 0x5, 0x6, 0xa2, 0x3, 0xa0000000, 0x457, 0x1, 0xffffffff, 0x7f, 0x6, 0x9, 0x1, 0x4, 0x40, 0x1, 0x6, 0x2e, 0x101, 0x1000, 0x2, 0x5, 0x80000000, 0x80000001, 0x81, 0x100, 0x100, 0x4, 0x1, 0x5, 0x2, 0xffffffff, 0x8b5c, 0xc88, 0xfffffff8, 0x9, 0x10001, 0x8, 0x4, 0x8001, 0x1, 0x5, 0xff, 0x7ff, 0xffffffff, 0x1604, 0x5ba, 0x0, 0x2, 0x1, 0x5379f64e, 0x9, 0x2, 0x3, 0x7, 0x6, 0x7fffffff, 0x3, 0x2, 0x5, 0x3, 0x8, 0x800, 0x100, 0x6, 0x8001, 0x0, 0x1, 0x4, 0xc508, 0x93e, 0x5, 0x83bc, 0x6, 0x7, 0x0, 0x6, 0xfff, 0xd37, 0x3f, 0x996a, 0x101, 0xe576, 0x3, 0x9, 0x2, 0x8f50, 0x4, 0x9969, 0x7, 0x4, 0x147, 0x1, 0x10000, 0x71f7, 0x6, 0x7, 0x2, 0x10001, 0x5, 0x7ff, 0x9, 0x4, 0x800, 0xffffffff, 0x0, 0x9, 0x200, 0xfffffff9, 0x1f, 0x4, 0x6, 0x6, 0x1f, 0x9, 0x8, 0x1f, 0x3, 0x1, 0x20, 0x9, 0x0, 0x3, 0xcc, 0x1, 0x8, 0x5, 0x6, 0x6, 0x6, 0x38000, 0x3, 0x0, 0x3f, 0x3ff, 0xffff, 0x9, 0x7fffffff, 0x0, 0x7, 0x5, 0xc1, 0x2, 0x5, 0xfffffff7, 0x9, 0x7, 0xe400000, 0x8000, 0x7fffffff, 0x81, 0x2, 0x0, 0x101, 0x5, 0x200, 0xc08, 0x401, 0x7, 0x180000, 0xffff, 0x8d, 0x9000000, 0xffffffff]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0xffff5379, 0x101, 0x0, {0x0, 0x0, 0x3, 0x3f8, 0x5, 0x6}, {0x9, 0x2, 0x1, 0x20, 0x846, 0x8001}, 0x6, 0x40, 0xa}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x8, 0x7fff, 0x9, 0x1dd96c8c, {0x1, 0x0, 0x1, 0x1, 0xb, 0xc4}, {0x1f, 0x0, 0x1c, 0x1ff, 0x7, 0x80}, 0x9, 0x9, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x47be, 0x81, 0x4, 0x0, 0x3ff, 0x7839, 0x0, 0x20, 0x0, 0x9aa, 0xfffffff7, 0x0, 0x1, 0x83a3, 0xb22, 0x80000001, 0xdd0, 0x80200000, 0x4, 0xffff, 0x401, 0x10000, 0x8001, 0xffffff1e, 0x800, 0x7, 0x7, 0x8, 0x101, 0x5, 0x20, 0x6, 0x7, 0x7fff, 0x20, 0x4, 0x101, 0x554a9717, 0x8, 0x3, 0x6df7fe6, 0xf9, 0x2, 0x6, 0x10001, 0x4, 0x200, 0x1, 0x3, 0xa8, 0x5, 0x3, 0x2, 0x5, 0x20, 0xc9eb, 0x2, 0x47d, 0x5, 0xfff, 0x200, 0x401, 0x81, 0x3, 0xb59, 0x1, 0xc, 0xfff, 0x4, 0x0, 0x100, 0x5, 0x1, 0x5, 0x0, 0x3, 0x3, 0x7f65, 0x6, 0x9, 0x80000000, 0x8, 0x0, 0x8, 0x4, 0x7f, 0x200, 0xff, 0x7b, 0x6, 0x4, 0x7fff, 0x1f4, 0xfffffff7, 0x155, 0x9, 0x1, 0xff, 0x40, 0x1, 0x3ff, 0x3ff, 0x0, 0xb0e, 0x1, 0x1ff, 0x3ff, 0x3, 0x35f7, 0x7fffffff, 0xdad, 0xf9, 0x8, 0x10000, 0x7, 0xba7, 0xffffffff, 0x7, 0x6, 0x6, 0x3, 0x2, 0x0, 0x7d, 0x9, 0x1, 0x22b, 0x6, 0x28, 0x8, 0xff, 0x3ff, 0x0, 0x7, 0xee02, 0x4, 0x7ff, 0x98d, 0x9, 0x981, 0x7fffffff, 0x2, 0x0, 0x4, 0x6, 0x8, 0x4, 0x5, 0x1, 0x7, 0x5, 0x6, 0x100, 0xffffffff, 0x7f38, 0xfffffff7, 0xa0, 0x1, 0x9, 0x3, 0x40, 0x40, 0x0, 0x4, 0x1f, 0x10001, 0x9, 0x4, 0x9, 0x10001, 0x1, 0x8000, 0x80000000, 0x8, 0x4, 0x5, 0x5d0, 0x0, 0x1000, 0xffffffff, 0x4, 0x10001, 0x4, 0x6, 0x8, 0xff, 0x0, 0x4, 0x1, 0x10000, 0x6, 0x9, 0xe610, 0x9c1, 0xe08, 0x3, 0x0, 0x0, 0x4, 0x8, 0x2, 0x167, 0x7, 0x1, 0x6, 0xff, 0x0, 0x8, 0x7, 0xf42, 0x1, 0x7, 0x4, 0x8, 0x1, 0x5, 0x5, 0x0, 0x0, 0x5, 0xff, 0x2, 0x1f, 0x8a, 0x7f, 0xff, 0x100, 0x9, 0xfff, 0xdbd9, 0x4, 0x248, 0x100, 0x2, 0xffff566f, 0xe, 0x1, 0x100, 0x9, 0x5, 0x68, 0x7ff, 0x4, 0x9, 0x76bc, 0x2cf, 0x2, 0x1, 0x4, 0x80000000, 0x6, 0x29a3, 0x1, 0x4, 0x7, 0x1ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xed9c, 0x10000000, 0x3, 0x0, 0x0, {0x0, 0x1, 0x400, 0x9, 0x7f, 0x200}, {0x8, 0x1, 0x40, 0xfff, 0x412b, 0x4}, 0x9, 0x2, 0x1}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]]}, {0x33, 0x6, "971fc41f9e5ae8a4524860eed5a326edca0047217eb4db92bb51db99c17a959f188ccdee60fb1270a0dadd5bf4bb78"}}}, @m_simple={0x6c, 0x2, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3e000000, 0x0, 0x5, 0x200, 0xb3}}]}, {0x3d, 0x6, "d129e5977fcd43a33e211738ae1cb102cf72012dbf8e775d5ba459b3d6f23e4736c5fbfc67088c487dc2266a7a210bc70a485aa4da4428e4cd"}}}, @m_sample={0x1048, 0xc, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x100}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9b}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x400}]}, {0x1004, 0x6, "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"}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x7}}]}}]}, 0xf5e0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 04:25:12 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:12 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x6802, 0x0) recvmsg$can_raw(r0, &(0x7f0000000900)={&(0x7f00000002c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/182, 0xb6}, {&(0x7f0000000400)=""/248, 0xf8}, {&(0x7f0000000500)=""/255, 0xff}, {&(0x7f0000000600)=""/126, 0x7e}, {&(0x7f0000000680)=""/121, 0x79}, {&(0x7f0000000700)=""/127, 0x7f}, {&(0x7f0000000240)=""/49, 0x31}, {&(0x7f0000000780)=""/3, 0x3}], 0x8, &(0x7f0000000840)=""/143, 0x8f}, 0x400120c2) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2, 0xffffffff}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000940)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x2, @ipv4={[], [], @broadcast}, 0x5}, {0xa, 0x4e24, 0x6, @local, 0x80}, r2, 0x18f}}, 0x48) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0043b69a7f3a27f80be7fffb4a"]) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x88000, 0x1) ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xc, 0x7f, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @bcast, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:25:12 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:13 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000380)={0x0, 0x17, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r2, 0x8, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0xbf}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3273.526349] block nbd3: Attempted send on invalid socket [ 3273.526365] print_req_error: I/O error, dev nbd3, sector 64 [ 3273.526510] block nbd3: Attempted send on invalid socket [ 3273.526519] print_req_error: I/O error, dev nbd3, sector 120 04:25:13 executing program 3: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000140)={0x1, 0x58, "4a8cbd75b020348adf5437b4740af25bb5640c473d2aa0542d697f7f5793c55c1b031db182fb87c5c022cafdac1f585164c376ba3693782567fb8c611758e68453f4a3cdd17d0fb35b37a7b6b7138e97e508f9f43fab2efa"}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:25:13 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3273.792261] block nbd5: Attempted send on invalid socket [ 3273.792302] print_req_error: I/O error, dev nbd5, sector 64 [ 3273.794640] block nbd5: Attempted send on invalid socket [ 3273.794657] print_req_error: I/O error, dev nbd5, sector 120 04:25:13 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3274.858098] ipvlan1: Invalid MTU 8661 requested, hw max 1500 [ 3274.858119] team0: Device ipvlan1 failed to change mtu [ 3277.041408] syz-executor.4 (19083) used greatest stack depth: 22512 bytes left [ 3277.985308] syz-executor.3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3277.985322] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3277.985341] CPU: 1 PID: 6348 Comm: syz-executor.3 Not tainted 4.14.181-syzkaller #0 [ 3277.985346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3277.985349] Call Trace: [ 3277.985366] dump_stack+0x1b2/0x283 [ 3277.985378] dump_header+0x178/0x7aa [ 3277.985386] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3277.985395] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3277.985404] ? ___ratelimit+0x2cd/0x522 [ 3277.985413] oom_kill_process.cold+0x10/0xc16 [ 3277.985422] ? lock_downgrade+0x6e0/0x6e0 [ 3277.985438] out_of_memory+0x2d5/0x10f0 [ 3277.985450] ? oom_killer_disable+0x1c0/0x1c0 [ 3277.985456] ? mutex_trylock+0x152/0x1a0 [ 3277.985467] __alloc_pages_nodemask+0x2556/0x2730 [ 3277.985487] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3277.985494] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3277.985501] ? trace_hardirqs_on+0x10/0x10 [ 3277.985518] ? cache_grow_begin+0x3f/0x410 [ 3277.985527] cache_grow_begin+0x91/0x410 [ 3277.985537] fallback_alloc+0x205/0x2b0 [ 3277.985548] kmem_cache_alloc+0x1e5/0x3c0 [ 3277.985558] getname_flags+0xc8/0x550 [ 3277.985567] ? __hrtimer_run_queues+0xb90/0xb90 [ 3277.985577] do_sys_open+0x202/0x3e0 [ 3277.985585] ? filp_open+0x60/0x60 [ 3277.985594] ? hrtimer_nanosleep+0x460/0x460 [ 3277.985602] ? do_syscall_64+0x4c/0x640 [ 3277.985608] ? do_sys_open+0x3e0/0x3e0 [ 3277.985616] do_syscall_64+0x1d5/0x640 [ 3277.985628] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3277.985634] RIP: 0033:0x45aa00 [ 3277.985638] RSP: 002b:00007fffa03d5b80 EFLAGS: 00000202 ORIG_RAX: 0000000000000002 [ 3277.985646] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045aa00 [ 3277.985650] RDX: 0000000000000000 RSI: 0000000000090800 RDI: 00000000004c15bb [ 3277.985654] RBP: 0000000000002ad6 R08: 0000000000000001 R09: 0000000000e18940 [ 3277.985658] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 3277.985663] R13: 00007fffa03d5c60 R14: 000000000031f5ce R15: 00007fffa03d5c70 [ 3277.985676] Mem-Info: [ 3277.985694] active_anon:1242519 inactive_anon:10262 isolated_anon:0 [ 3277.985694] active_file:452 inactive_file:516 isolated_file:67 [ 3277.985694] unevictable:0 dirty:0 writeback:35 unstable:0 [ 3277.985694] slab_reclaimable:19061 slab_unreclaimable:143896 [ 3277.985694] mapped:58783 shmem:10429 pagetables:57756 bounce:0 [ 3277.985694] free:20784 free_pcp:333 free_cma:0 [ 3277.985707] Node 0 active_anon:1878916kB inactive_anon:16148kB active_file:72kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:184672kB dirty:0kB writeback:60kB shmem:16820kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3277.985720] Node 1 active_anon:3091160kB inactive_anon:24900kB active_file:1736kB inactive_file:1960kB unevictable:0kB isolated(anon):0kB isolated(file):256kB mapped:50460kB dirty:16kB writeback:80kB shmem:24896kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3277.985723] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4800kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3277.985739] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3277.985755] Node 0 DMA32 free:27180kB min:36296kB low:45368kB high:54440kB active_anon:1874116kB inactive_anon:16148kB active_file:72kB inactive_file:104kB unevictable:0kB writepending:44kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17248kB pagetables:58464kB bounce:0kB free_pcp:360kB local_pcp:0kB free_cma:0kB [ 3277.985771] lowmem_reserve[]: 0 0 0 0 0 [ 3277.985787] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3277.985802] lowmem_reserve[]: 0 0 0 0 0 [ 3277.985817] Node 1 Normal free:45560kB min:53592kB low:66988kB high:80384kB active_anon:3091012kB inactive_anon:24900kB active_file:1652kB inactive_file:2332kB unevictable:0kB writepending:96kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:60736kB pagetables:172556kB bounce:0kB free_pcp:972kB local_pcp:716kB free_cma:0kB [ 3277.985834] lowmem_reserve[]: 0 0 0 0 0 [ 3277.985850] Node 0 DMA: 7*4kB (UEH) 26*8kB (UH) 7*16kB (UEH) 4*32kB (UEH) 3*64kB (UME) 2*128kB (UE) 3*256kB (UME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10396kB [ 3277.988208] Node 0 DMA32: 651*4kB (UME) 121*8kB (UME) 37*16kB (UME) 95*32kB (ME) 28*64kB (ME) 19*128kB (M) 6*256kB (M) 10*512kB (ME) 9*1024kB (M) 0*2048kB 0*4096kB = 27300kB [ 3277.988270] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3277.988309] Node 1 Normal: 191*4kB (UMEH) 434*8kB (UMEH) 213*16kB (UMEH) 326*32kB (UME) 238*64kB (UMEH) 85*128kB (M) 2*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 45724kB [ 3277.988373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3277.988378] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3277.988383] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3277.988388] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3277.988391] 11435 total pagecache pages [ 3277.988400] 0 pages in swap cache [ 3277.988404] Swap cache stats: add 0, delete 0, find 0/0 [ 3277.988407] Free swap = 0kB [ 3277.988410] Total swap = 0kB [ 3277.988415] 1965979 pages RAM [ 3277.988417] 0 pages HighMem/MovableOnly [ 3277.988420] 338455 pages reserved [ 3277.988423] 0 pages cma reserved [ 3277.988428] Out of memory: Kill process 19065 (syz-executor.1) score 1007 or sacrifice child [ 3277.988461] Killed process 19065 (syz-executor.1) total-vm:75236kB, anon-rss:16572kB, file-rss:35188kB, shmem-rss:0kB [ 3278.166266] oom_reaper: reaped process 19065 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 04:25:17 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:17 executing program 5: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1800006, 0x10, 0xffffffffffffffff, 0xff) bind(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@id, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x3c}}, 0x0) 04:25:18 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)="e169c9897b4fa5ab12b89f553b0016baba7c217fb3aff99d66b896ea626675edc8c4038e25582992ee8fe485cc0296d36b1505cac1b858906ebc5001ce5e1b7ece402f8634d5f1d985cf2a3251c9f69fb465b6127567fd3c34d1f51ca188cf31d67846e2e4fe9d2468c7ba78e7703ccd97b4fe308eb6aaa83fa1007daefac64917f1913dace2777ed5dcbc4f7122ca3526d14f970ce680b398e5cfb47369f385a244d997aa38909ecfb0c937f4f4f51bb0ed1ea6e80a33b617e2aca5aa16d350d4075fe0", 0xc4}, {&(0x7f0000000280)="d4db", 0x2}, {&(0x7f00000002c0)="e3c1c0660dcfc872094b72e4afdaac39a4da33a243825b45c388a632f941d9e8b07c3ab2dd176b154b45f52dbd8b75de370e2871cd6f4d7f431954e68fc4703bec4760fc9d079d44b6308274755f3fbe6fb0cc1c6037f8f8bcfda1ddadbd298917a50b62e195c534e0213adc21e7cb3aabddcb22d3bf78004c29f120adce0d8f9474e8425e7d1b2e7615780eda0d76fe78f043339f18b4ff3ab3eedeab2309a2ff9340a5ba698f8838cd1f012d579eac7d3631aeb8ae5a93263e30d3ddd0bee8352fa393fe3776ade131a0b5a94aae7c", 0xd0}, {&(0x7f00000003c0)="ee8f620cb0095976dea66b5d37bdf4183e7d5d085191069698f43fc6bc41f814907107c2aa99e51dc09705b5d35245c99875fd0b89e7f9ef74c5b21e80c6bbf240b1d13eaf6776ed2c51e25741ea8ccf4a5bbf2688a5306d5516cf97b4122125ddd6c8af2dea0cde394685b0cbb6400858e7a6f7b56a", 0x76}], 0x4, 0x6) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:18 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:18 executing program 3: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0xd0, 0x8001, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_LABELS={0x20, 0x16, 0x1, 0x0, [0x0, 0x1ff, 0x5, 0x6, 0x800, 0x38, 0x7]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3278.937296] team0: Invalid MTU 0 requested, hw min 68 04:25:22 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:22 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:22 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') fstatfs(0xffffffffffffffff, &(0x7f00000000c0)=""/221) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:23 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:25:23 executing program 5: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) read$usbmon(0xffffffffffffffff, &(0x7f00000004c0)=""/4096, 0x1000) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3285.755688] syz-executor.1 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3285.755703] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 3285.755722] CPU: 0 PID: 19163 Comm: syz-executor.1 Not tainted 4.14.181-syzkaller #0 [ 3285.755727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3285.755730] Call Trace: [ 3285.755747] dump_stack+0x1b2/0x283 [ 3285.755760] dump_header+0x178/0x7aa [ 3285.755768] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3285.755776] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3285.755784] ? ___ratelimit+0x2cd/0x522 [ 3285.755793] oom_kill_process.cold+0x10/0xc16 [ 3285.755803] ? lock_downgrade+0x6e0/0x6e0 [ 3285.755814] out_of_memory+0x2d5/0x10f0 [ 3285.755825] ? oom_killer_disable+0x1c0/0x1c0 [ 3285.755832] ? mutex_trylock+0x152/0x1a0 [ 3285.755846] __alloc_pages_nodemask+0x2556/0x2730 [ 3285.755866] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3285.755873] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3285.755880] ? trace_hardirqs_on+0x10/0x10 [ 3285.755897] ? cache_grow_begin+0x3f/0x410 [ 3285.755906] cache_grow_begin+0x91/0x410 [ 3285.755916] fallback_alloc+0x205/0x2b0 [ 3285.755927] kmem_cache_alloc+0x1e5/0x3c0 [ 3285.755938] getname_flags+0xc8/0x550 [ 3285.755947] do_sys_open+0x202/0x3e0 [ 3285.755955] ? filp_open+0x60/0x60 [ 3285.755964] ? __do_page_fault+0x19a/0xb50 [ 3285.755972] ? do_syscall_64+0x4c/0x640 [ 3285.755978] ? do_sys_open+0x3e0/0x3e0 [ 3285.755987] do_syscall_64+0x1d5/0x640 [ 3285.755998] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3285.756005] RIP: 0033:0x416800 [ 3285.756009] RSP: 002b:00007ffe62a49e28 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 3285.756017] RAX: ffffffffffffffda RBX: 00007ffe62a49e54 RCX: 0000000000416800 [ 3285.756022] RDX: 00007ffe62a49e5a RSI: 0000000000080001 RDI: 00000000004c2597 [ 3285.756026] RBP: 00007ffe62a49e50 R08: 0000000000000000 R09: 0000000000000004 [ 3285.756030] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000004c2597 [ 3285.756034] R13: 00007ffe62a4a370 R14: 0000000000000000 R15: 00007ffe62a4a380 [ 3285.758609] Mem-Info: [ 3285.758629] active_anon:1244726 inactive_anon:10262 isolated_anon:0 [ 3285.758629] active_file:168 inactive_file:164 isolated_file:77 [ 3285.758629] unevictable:0 dirty:15 writeback:1 unstable:0 [ 3285.758629] slab_reclaimable:19275 slab_unreclaimable:143051 [ 3285.758629] mapped:58272 shmem:10429 pagetables:57858 bounce:0 [ 3285.758629] free:19805 free_pcp:155 free_cma:0 [ 3285.758649] Node 0 active_anon:1879216kB inactive_anon:16148kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184544kB dirty:0kB writeback:0kB shmem:16820kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3285.758662] Node 1 active_anon:3099688kB inactive_anon:24900kB active_file:668kB inactive_file:656kB unevictable:0kB isolated(anon):0kB isolated(file):308kB mapped:48544kB dirty:60kB writeback:4kB shmem:24896kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3285.758665] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4800kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3285.758682] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3285.758698] Node 0 DMA32 free:27300kB min:36296kB low:45368kB high:54440kB active_anon:1874416kB inactive_anon:16148kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17312kB pagetables:58460kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3285.758714] lowmem_reserve[]: 0 0 0 0 0 [ 3285.758729] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3285.758745] lowmem_reserve[]: 0 0 0 0 0 [ 3285.758760] Node 1 Normal free:41524kB min:53592kB low:66988kB high:80384kB active_anon:3099528kB inactive_anon:24900kB active_file:596kB inactive_file:656kB unevictable:0kB writepending:64kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:60960kB pagetables:172968kB bounce:0kB free_pcp:620kB local_pcp:220kB free_cma:0kB [ 3285.758776] lowmem_reserve[]: 0 0 0 0 0 [ 3285.758791] Node 0 DMA: 7*4kB (UEH) 26*8kB (UH) 7*16kB (UEH) 4*32kB (UEH) 3*64kB (UME) 2*128kB (UE) 3*256kB (UME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10396kB [ 3285.758854] Node 0 DMA32: 697*4kB (UE) 119*8kB (UE) 37*16kB (UME) 98*32kB (UME) 28*64kB (UME) 19*128kB (M) 7*256kB (UM) 9*512kB (ME) 9*1024kB (UM) 0*2048kB 0*4096kB = 27308kB [ 3285.758914] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3285.758952] Node 1 Normal: 252*4kB (UME) 385*8kB (UMEH) 279*16kB (UMEH) 223*32kB (UEH) 198*64kB (UMEH) 91*128kB (UMH) 2*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 41544kB [ 3285.759013] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3285.759019] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3285.759024] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3285.759028] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3285.759031] 10840 total pagecache pages [ 3285.759040] 0 pages in swap cache [ 3285.759044] Swap cache stats: add 0, delete 0, find 0/0 [ 3285.759047] Free swap = 0kB [ 3285.759050] Total swap = 0kB [ 3285.759054] 1965979 pages RAM [ 3285.759057] 0 pages HighMem/MovableOnly [ 3285.759060] 338455 pages reserved [ 3285.759062] 0 pages cma reserved [ 3285.759068] Out of memory: Kill process 19128 (syz-executor.0) score 1007 or sacrifice child [ 3285.759098] Killed process 19128 (syz-executor.0) total-vm:75632kB, anon-rss:16596kB, file-rss:34840kB, shmem-rss:0kB [ 3286.022914] oom_reaper: reaped process 19128 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3286.614824] kworker/u4:8 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3286.614838] kworker/u4:8 cpuset=/ mems_allowed=0-1 [ 3286.614858] CPU: 0 PID: 19166 Comm: kworker/u4:8 Not tainted 4.14.181-syzkaller #0 [ 3286.614862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3286.614865] Call Trace: [ 3286.614883] dump_stack+0x1b2/0x283 [ 3286.614895] dump_header+0x178/0x7aa [ 3286.614904] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3286.614912] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3286.614920] ? ___ratelimit+0x2cd/0x522 [ 3286.614930] oom_kill_process.cold+0x10/0xc16 [ 3286.614939] ? lock_downgrade+0x6e0/0x6e0 [ 3286.614950] out_of_memory+0x2d5/0x10f0 [ 3286.614961] ? oom_killer_disable+0x1c0/0x1c0 [ 3286.614968] ? mutex_trylock+0x152/0x1a0 [ 3286.614978] __alloc_pages_nodemask+0x2556/0x2730 [ 3286.614998] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3286.615006] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3286.615013] ? trace_hardirqs_on+0x10/0x10 [ 3286.615027] ? mark_held_locks+0xa6/0xf0 [ 3286.615035] ? cache_grow_begin+0x3f/0x410 [ 3286.615043] cache_grow_begin+0x91/0x410 [ 3286.615053] fallback_alloc+0x205/0x2b0 [ 3286.615064] kmem_cache_alloc+0x1e5/0x3c0 [ 3286.615074] ima_d_path+0x4d/0x1d3 [ 3286.615083] process_measurement+0x905/0xb20 [ 3286.615095] ? ima_rdwr_violation_check+0x3a0/0x3a0 [ 3286.615102] ? __lock_acquire+0x655/0x42a0 [ 3286.615109] ? __lock_acquire+0x655/0x42a0 [ 3286.615119] ? follow_page_mask+0x1830/0x1830 [ 3286.615135] ? trace_hardirqs_on+0x10/0x10 [ 3286.615142] ? trace_hardirqs_on+0x10/0x10 [ 3286.615154] ? check_stack_object+0x86/0xa0 [ 3286.615161] ? __might_fault+0xf/0x1b0 [ 3286.615170] ? _copy_from_user+0x94/0x100 [ 3286.615179] ? __task_pid_nr_ns+0x1c3/0x440 [ 3286.615188] ? do_execveat_common.isra.0+0xec1/0x1c50 [ 3286.615200] security_bprm_check+0x8d/0xa0 [ 3286.615208] search_binary_handler+0x61/0x6c0 [ 3286.615219] do_execveat_common.isra.0+0xef0/0x1c50 [ 3286.615230] ? prepare_bprm_creds+0x110/0x110 [ 3286.615241] do_execve+0x2c/0x40 [ 3286.615250] call_usermodehelper_exec_async+0x289/0x4c0 [ 3286.615257] ? umh_complete+0x80/0x80 [ 3286.615265] ret_from_fork+0x24/0x30 [ 3286.615277] Mem-Info: [ 3286.615296] active_anon:1240607 inactive_anon:10262 isolated_anon:0 [ 3286.615296] active_file:18 inactive_file:46 isolated_file:8 [ 3286.615296] unevictable:0 dirty:4 writeback:0 unstable:0 [ 3286.615296] slab_reclaimable:19279 slab_unreclaimable:143078 [ 3286.615296] mapped:57962 shmem:10429 pagetables:57861 bounce:0 [ 3286.615296] free:24105 free_pcp:286 free_cma:0 [ 3286.615310] Node 0 active_anon:1874312kB inactive_anon:16148kB active_file:40kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:184612kB dirty:0kB writeback:0kB shmem:16820kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3286.615323] Node 1 active_anon:3088116kB inactive_anon:24900kB active_file:32kB inactive_file:156kB unevictable:0kB isolated(anon):0kB isolated(file):24kB mapped:47236kB dirty:16kB writeback:0kB shmem:24896kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3286.615326] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4800kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3286.615342] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3286.615359] Node 0 DMA32 free:32180kB min:36296kB low:45368kB high:54440kB active_anon:1869512kB inactive_anon:16148kB active_file:40kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17280kB pagetables:58460kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3286.615376] lowmem_reserve[]: 0 0 0 0 0 [ 3286.615393] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3286.615408] lowmem_reserve[]: 0 0 0 0 0 [ 3286.615425] Node 1 Normal free:53844kB min:53592kB low:66988kB high:80384kB active_anon:3088116kB inactive_anon:24900kB active_file:408kB inactive_file:520kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:60928kB pagetables:172980kB bounce:0kB free_pcp:1144kB local_pcp:724kB free_cma:0kB [ 3286.615441] lowmem_reserve[]: 0 0 0 0 0 [ 3286.615458] Node 0 DMA: 7*4kB (UEH) 26*8kB (UH) 7*16kB (UEH) 4*32kB (UEH) 3*64kB (UME) 2*128kB (UE) 3*256kB (UME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10396kB [ 3286.615525] Node 0 DMA32: 1146*4kB (UME) 378*8kB (UME) 102*16kB (UME) 99*32kB (UME) 28*64kB (UME) 19*128kB (M) 7*256kB (UM) 9*512kB (ME) 9*1024kB (UM) 0*2048kB 0*4096kB = 32248kB [ 3286.615589] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3286.615629] Node 1 Normal: 589*4kB (UME) 1015*8kB (UMEH) 540*16kB (UMEH) 285*32kB (UMEH) 198*64kB (UMEH) 91*128kB (UMH) 2*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 54092kB [ 3286.615696] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3286.615701] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3286.615706] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3286.615712] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3286.615715] 10512 total pagecache pages [ 3286.615724] 0 pages in swap cache [ 3286.615728] Swap cache stats: add 0, delete 0, find 0/0 [ 3286.615731] Free swap = 0kB [ 3286.615734] Total swap = 0kB [ 3286.615739] 1965979 pages RAM [ 3286.615742] 0 pages HighMem/MovableOnly [ 3286.615744] 338455 pages reserved [ 3286.615747] 0 pages cma reserved [ 3286.615753] Out of memory: Kill process 19420 (syz-executor.4) score 1007 or sacrifice child [ 3286.615781] Killed process 19420 (syz-executor.4) total-vm:75236kB, anon-rss:15776kB, file-rss:34816kB, shmem-rss:0kB [ 3286.698669] oom_reaper: reaped process 19420 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 04:25:27 executing program 3: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0xd0, 0x8001, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_LABELS={0x20, 0x16, 0x1, 0x0, [0x0, 0x1ff, 0x5, 0x6, 0x800, 0x38, 0x7]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:27 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:25:27 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:27 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3288.202101] block nbd4: Attempted send on invalid socket [ 3288.202190] print_req_error: I/O error, dev nbd4, sector 64 [ 3288.232068] block nbd4: Attempted send on invalid socket [ 3288.232263] print_req_error: I/O error, dev nbd4, sector 120 [ 3288.236619] block nbd0: Attempted send on invalid socket [ 3288.236636] print_req_error: I/O error, dev nbd0, sector 64 [ 3288.237521] block nbd0: Attempted send on invalid socket [ 3288.237601] print_req_error: I/O error, dev nbd0, sector 120 04:25:29 executing program 5: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0xb4, 0xa, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'netdevsim0\x00'}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6e}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_bond\x00'}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}]}]}, 0xb4}}, 0x50) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:29 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:29 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:29 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3290.758317] syz-executor.4 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 3290.758331] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3290.758354] CPU: 0 PID: 19255 Comm: syz-executor.4 Not tainted 4.14.181-syzkaller #0 [ 3290.758359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3290.758362] Call Trace: [ 3290.758379] dump_stack+0x1b2/0x283 [ 3290.758391] dump_header+0x178/0x7aa [ 3290.758399] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3290.758407] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3290.758414] ? ___ratelimit+0x2cd/0x522 [ 3290.758422] oom_kill_process.cold+0x10/0xc16 04:25:30 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:30 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3290.758430] ? lock_downgrade+0x6e0/0x6e0 [ 3290.758440] out_of_memory+0x2d5/0x10f0 [ 3290.758450] ? oom_killer_disable+0x1c0/0x1c0 04:25:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000001bc0)={@mcast2, 0x3b}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)={0x2d4, 0x9, 0x4, 0x800, 0xa8d, {r4, r5/1000+60000}, {0x5, 0xc, 0x83, 0xff, 0x33, 0xf8, "dd69f355"}, 0xc87f, 0x1, @fd, 0x200, 0x0, r0}) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x20000, 0x0) getsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f00000000c0), &(0x7f0000000000)=0xfffffffffffffe46) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, r9, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x9}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd97}]}, 0x30}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r9, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd97}]}, 0x2c}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x12}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, r9, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x6, 0x3f, 0x8]}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd1f6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @private2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x180c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000108000000000000000000004800", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="140003007465616d3000"/20], 0x3c}}, 0x0) 04:25:31 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3290.758456] ? mutex_trylock+0x152/0x1a0 [ 3290.758466] __alloc_pages_nodemask+0x2556/0x2730 [ 3290.758484] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3290.758494] ? __handle_mm_fault+0x18e8/0x3700 [ 3290.758502] ? __lock_acquire+0x655/0x42a0 [ 3290.758508] ? __lock_acquire+0x655/0x42a0 [ 3290.758524] alloc_pages_current+0xe7/0x1e0 [ 3290.758534] pte_alloc_one+0x15/0x100 [ 3290.758541] __handle_mm_fault+0x29f2/0x3700 [ 3290.758550] ? vm_insert_mixed_mkwrite+0x30/0x30 [ 3290.758567] handle_mm_fault+0x306/0x794 [ 3290.758577] __do_page_fault+0x578/0xb50 [ 3290.758587] ? mm_fault_error+0x2c0/0x2c0 [ 3290.758594] ? do_page_fault+0x60/0x4f2 [ 3290.758601] ? page_fault+0x2f/0x50 [ 3290.758607] page_fault+0x45/0x50 [ 3290.758611] RIP: 0000: (null) [ 3290.758615] RSP: 2f9a3e50:00007ffe2f9a3e90 EFLAGS: 00000001 [ 3290.760543] Mem-Info: [ 3290.760562] active_anon:1243333 inactive_anon:10262 isolated_anon:0 [ 3290.760562] active_file:784 inactive_file:680 isolated_file:84 [ 3290.760562] unevictable:0 dirty:86 writeback:13 unstable:0 [ 3290.760562] slab_reclaimable:19358 slab_unreclaimable:143213 [ 3290.760562] mapped:59307 shmem:10429 pagetables:58006 bounce:0 [ 3290.760562] free:19434 free_pcp:49 free_cma:0 [ 3290.760576] Node 0 active_anon:1879080kB inactive_anon:16144kB active_file:52kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184580kB dirty:24kB writeback:0kB shmem:16816kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3290.760587] Node 1 active_anon:3094252kB inactive_anon:24904kB active_file:3084kB inactive_file:2672kB unevictable:0kB isolated(anon):0kB isolated(file):336kB mapped:52648kB dirty:320kB writeback:52kB shmem:24900kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3290.760590] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4800kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3290.760606] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3290.760622] Node 0 DMA32 free:27164kB min:36296kB low:45368kB high:54440kB active_anon:1874280kB inactive_anon:16144kB active_file:52kB inactive_file:48kB unevictable:0kB writepending:24kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17376kB pagetables:58460kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 3290.760637] lowmem_reserve[]: 0 0 0 0 0 [ 3290.760659] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3290.760673] lowmem_reserve[]: 0 0 0 0 0 [ 3290.760688] Node 1 Normal free:40176kB min:53592kB low:66988kB high:80384kB active_anon:3094232kB inactive_anon:24904kB active_file:3696kB inactive_file:2672kB unevictable:0kB writepending:572kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61568kB pagetables:173560kB bounce:0kB free_pcp:76kB local_pcp:0kB free_cma:0kB [ 3290.760702] lowmem_reserve[]: 0 0 0 0 0 [ 3290.760717] Node 0 DMA: 7*4kB (UEH) 26*8kB (UH) 7*16kB (UEH) 4*32kB (UEH) 3*64kB (UME) 2*128kB (UE) 3*256kB (UME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10396kB [ 3290.760784] Node 0 DMA32: 682*4kB (UE) 125*8kB (UE) 40*16kB (UME) 97*32kB (ME) 28*64kB (ME) 20*128kB (M) 6*256kB (M) 9*512kB (ME) 9*1024kB (M) 0*2048kB 0*4096kB = 27184kB [ 3290.760840] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3290.760876] Node 1 Normal: 124*4kB (UME) 57*8kB (UME) 139*16kB (UME) 210*32kB (UMEH) 179*64kB (UMEH) 111*128kB (UMH) 8*256kB (M) 2*512kB (M) 2*1024kB (M) 0*2048kB 0*4096kB = 40680kB [ 3290.763391] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3290.763396] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3290.763401] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3290.763406] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3290.763409] 12017 total pagecache pages [ 3290.763417] 0 pages in swap cache [ 3290.763422] Swap cache stats: add 0, delete 0, find 0/0 [ 3290.763424] Free swap = 0kB [ 3290.763427] Total swap = 0kB [ 3290.763432] 1965979 pages RAM [ 3290.763435] 0 pages HighMem/MovableOnly [ 3290.763437] 338455 pages reserved [ 3290.763440] 0 pages cma reserved [ 3290.763446] Out of memory: Kill process 19203 (syz-executor.5) score 1007 or sacrifice child [ 3290.763475] Killed process 19203 (syz-executor.5) total-vm:75236kB, anon-rss:16568kB, file-rss:35712kB, shmem-rss:0kB [ 3290.888784] oom_reaper: reaped process 19203 (syz-executor.5), now anon-rss:0kB, file-rss:8kB, shmem-rss:0kB [ 3292.108094] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3292.705207] syz-executor.4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=1000 [ 3292.705223] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3292.705244] CPU: 0 PID: 19278 Comm: syz-executor.4 Not tainted 4.14.181-syzkaller #0 [ 3292.705249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3292.705253] Call Trace: [ 3292.705268] dump_stack+0x1b2/0x283 [ 3292.705283] dump_header+0x178/0x7aa [ 3292.705293] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3292.705302] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3292.705311] ? ___ratelimit+0x2cd/0x522 [ 3292.705322] oom_kill_process.cold+0x10/0xc16 [ 3292.705332] ? lock_downgrade+0x6e0/0x6e0 [ 3292.705347] out_of_memory+0x2d5/0x10f0 [ 3292.705363] ? oom_killer_disable+0x1c0/0x1c0 [ 3292.705374] ? mutex_trylock+0x152/0x1a0 [ 3292.705389] __alloc_pages_nodemask+0x2556/0x2730 [ 3292.705402] ? trace_hardirqs_on+0x10/0x10 [ 3292.705415] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3292.705423] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3292.705432] ? trace_hardirqs_on+0x10/0x10 [ 3292.705448] ? cache_grow_begin+0x3f/0x410 [ 3292.705457] cache_grow_begin+0x91/0x410 [ 3292.705466] fallback_alloc+0x205/0x2b0 [ 3292.705475] kmem_cache_alloc_node+0xe3/0x400 [ 3292.705487] copy_process.part.0+0x17d5/0x6fa0 [ 3292.705494] ? trace_hardirqs_on+0x10/0x10 [ 3292.705502] ? trace_hardirqs_on+0x10/0x10 [ 3292.705512] ? kcov_ioctl+0x4d/0x180 [ 3292.705520] ? lock_acquire+0x170/0x3f0 [ 3292.705531] ? __cleanup_sighand+0x40/0x40 [ 3292.705536] ? lock_downgrade+0x6e0/0x6e0 [ 3292.705547] _do_fork+0x180/0xc80 [ 3292.705555] ? put_timespec64+0xaa/0xf0 [ 3292.705561] ? fork_idle+0x270/0x270 [ 3292.705571] ? SyS_clock_gettime+0xf5/0x180 [ 3292.705578] ? SyS_clock_settime+0x1a0/0x1a0 [ 3292.705585] ? fput+0xb/0x140 [ 3292.705592] ? do_syscall_64+0x4c/0x640 [ 3292.705598] ? sys_vfork+0x20/0x20 [ 3292.705615] do_syscall_64+0x1d5/0x640 [ 3292.705626] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3292.705632] RIP: 0033:0x45ca29 [ 3292.705635] RSP: 002b:00007f361b871c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3292.705644] RAX: ffffffffffffffda RBX: 00000000004dabc0 RCX: 000000000045ca29 [ 3292.705647] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000026100900 [ 3292.705651] RBP: 000000000078bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 3292.705655] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 3292.705660] R13: 0000000000000076 R14: 00000000004c331e R15: 00007f361b8726d4 [ 3292.706897] Mem-Info: [ 3292.706916] active_anon:1243440 inactive_anon:10262 isolated_anon:0 [ 3292.706916] active_file:308 inactive_file:283 isolated_file:33 [ 3292.706916] unevictable:0 dirty:25 writeback:1 unstable:0 [ 3292.706916] slab_reclaimable:19403 slab_unreclaimable:143009 [ 3292.706916] mapped:58425 shmem:10429 pagetables:57989 bounce:0 [ 3292.706916] free:20451 free_pcp:91 free_cma:0 [ 3292.706930] Node 0 active_anon:1878712kB inactive_anon:16140kB active_file:124kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184616kB dirty:56kB writeback:0kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3292.706943] Node 1 active_anon:3095048kB inactive_anon:24908kB active_file:1108kB inactive_file:1092kB unevictable:0kB isolated(anon):0kB isolated(file):132kB mapped:49084kB dirty:44kB writeback:4kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3292.706946] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4800kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3292.706963] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3292.706979] Node 0 DMA32 free:27264kB min:36296kB low:45368kB high:54440kB active_anon:1873912kB inactive_anon:16140kB active_file:124kB inactive_file:40kB unevictable:0kB writepending:56kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17344kB pagetables:58460kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3292.706996] lowmem_reserve[]: 0 0 0 0 0 [ 3292.707011] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3292.707026] lowmem_reserve[]: 0 0 0 0 0 [ 3292.707041] Node 1 Normal free:44144kB min:53592kB low:66988kB high:80384kB active_anon:3094780kB inactive_anon:24908kB active_file:1760kB inactive_file:1724kB unevictable:0kB writepending:248kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61248kB pagetables:173492kB bounce:0kB free_pcp:364kB local_pcp:140kB free_cma:0kB [ 3292.707058] lowmem_reserve[]: 0 0 0 0 0 [ 3292.707073] Node 0 DMA: 7*4kB (UEH) 26*8kB (UH) 7*16kB (UEH) 4*32kB (UEH) 3*64kB (UME) 2*128kB (UE) 3*256kB (UME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10396kB [ 3292.707135] Node 0 DMA32: 678*4kB (UME) 125*8kB (UME) 53*16kB (UME) 96*32kB (UME) 28*64kB (UME) 20*128kB (UM) 6*256kB (M) 9*512kB (ME) 9*1024kB (UM) 0*2048kB 0*4096kB = 27344kB [ 3292.707194] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3292.707232] Node 1 Normal: 377*4kB (UME) 294*8kB (UMH) 142*16kB (UMEH) 219*32kB (UMEH) 187*64kB (UME) 112*128kB (UMH) 8*256kB (M) 2*512kB (M) 2*1024kB (M) 0*2048kB 0*4096kB = 44564kB [ 3292.707294] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3292.707300] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3292.707305] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3292.707311] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3292.707314] 11130 total pagecache pages [ 3292.707323] 0 pages in swap cache [ 3292.707328] Swap cache stats: add 0, delete 0, find 0/0 [ 3292.707331] Free swap = 0kB [ 3292.707334] Total swap = 0kB [ 3292.707339] 1965979 pages RAM [ 3292.707342] 0 pages HighMem/MovableOnly [ 3292.707345] 338455 pages reserved [ 3292.707347] 0 pages cma reserved [ 3292.707353] Out of memory: Kill process 19273 (syz-executor.0) score 1007 or sacrifice child [ 3292.707428] Killed process 19273 (syz-executor.0) total-vm:75368kB, anon-rss:16560kB, file-rss:35596kB, shmem-rss:0kB [ 3292.780146] oom_reaper: reaped process 19273 (syz-executor.0), now anon-rss:0kB, file-rss:32kB, shmem-rss:0kB 04:25:34 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000000200)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, &(0x7f00000004c0)={0x0, &(0x7f0000000480)=[&(0x7f0000000140)="45c0aa9c30e63edcfdde4062f1aae4cd1b9ffc66eabbf2dde0c61299732de894b332d6ca0ccf3207c3a345a8e0d3919f00c2e929898f9f3c17bad677c130bf6533a6d22f8265251e0ee5a7fe36c9ae8250a31f8887b1381e38", &(0x7f0000000040)="7bcfd72e47b50a371dd17d60e54aa02e972b24630bc8cd81cf65313000c4807d073f940099c6d77b012678227a", &(0x7f00000000c0)="9b4ab2e521734be73f1335466a96d3865da68d600f80d63d2dd23cbd3d281ee2", &(0x7f00000002c0)="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", &(0x7f00000003c0)="9cf4d92b793c45d24a91b05bc96a79c946e4b5a8cb2aab1835e052d381f67958f3f5f7aeafda412db89f765a2b2f427cc6f74afabf24041cfa54981a5abc1001e3970881bb742bb03f60b455fa066311dc44962a7492015309faff07cb36ea8c05654620efa86caccbc4ef936bc64004932b45273314d2674a140683e5252668112ae88ee6e7c0df8959ec77eb67529463492cc51b", &(0x7f0000000240)="04d8"]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:25:34 executing program 3: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0xd0, 0x8001, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_LABELS={0x20, 0x16, 0x1, 0x0, [0x0, 0x1ff, 0x5, 0x6, 0x800, 0x38, 0x7]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:34 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:34 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:34 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:25:34 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) getpid() socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r3, r2, 0x0, 0x800000080004103) [ 3295.458477] block nbd4: Attempted send on invalid socket [ 3295.465092] print_req_error: I/O error, dev nbd4, sector 64 [ 3295.471761] block nbd4: Attempted send on invalid socket [ 3295.477371] print_req_error: I/O error, dev nbd4, sector 120 04:25:35 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:25:37 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) getpid() socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r3, r2, 0x0, 0x800000080004103) [ 3298.960513] syz-executor.3 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 3299.002234] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3299.007387] CPU: 0 PID: 19316 Comm: syz-executor.3 Not tainted 4.14.181-syzkaller #0 [ 3299.015289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3299.024641] Call Trace: [ 3299.027236] dump_stack+0x1b2/0x283 [ 3299.030864] dump_header+0x178/0x7aa [ 3299.034572] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3299.039589] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3299.044691] ? ___ratelimit+0x2cd/0x522 [ 3299.048662] oom_kill_process.cold+0x10/0xc16 [ 3299.053143] ? lock_acquire+0x170/0x3f0 [ 3299.057188] ? lock_downgrade+0x6e0/0x6e0 [ 3299.061326] out_of_memory+0x2d5/0x10f0 [ 3299.065289] ? oom_killer_disable+0x1c0/0x1c0 [ 3299.069773] ? mutex_trylock+0x152/0x1a0 [ 3299.073826] __alloc_pages_nodemask+0x2556/0x2730 [ 3299.078669] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3299.083492] ? _raw_spin_unlock+0x29/0x40 [ 3299.087641] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3299.092653] ? kmem_cache_alloc_node+0x387/0x400 [ 3299.097390] copy_process.part.0+0x26a/0x6fa0 [ 3299.101887] ? do_raw_spin_unlock+0x164/0x250 [ 3299.106371] ? _raw_spin_unlock+0x29/0x40 [ 3299.110527] ? do_anonymous_page+0x62d/0x17d0 [ 3299.115026] ? finish_fault+0x290/0x290 [ 3299.118980] ? trace_hardirqs_on+0x10/0x10 [ 3299.123199] ? __cleanup_sighand+0x40/0x40 [ 3299.127429] ? vm_insert_mixed_mkwrite+0x30/0x30 [ 3299.132165] _do_fork+0x180/0xc80 [ 3299.135602] ? fork_idle+0x270/0x270 [ 3299.139309] ? up_read+0x17/0x30 [ 3299.142656] ? __do_page_fault+0x19a/0xb50 [ 3299.146871] ? do_syscall_64+0x4c/0x640 [ 3299.150836] ? sys_vfork+0x20/0x20 [ 3299.154701] do_syscall_64+0x1d5/0x640 [ 3299.158572] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3299.163769] RIP: 0033:0x45f3f9 [ 3299.166947] RSP: 002b:00007fffa03d5938 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3299.174656] RAX: ffffffffffffffda RBX: 00007f1abf895700 RCX: 000000000045f3f9 [ 3299.182880] RDX: 00007f1abf8959d0 RSI: 00007f1abf894db0 RDI: 00000000003d0f00 [ 3299.190146] RBP: 00007fffa03d5b60 R08: 00007f1abf895700 R09: 00007f1abf895700 [ 3299.197396] R10: 00007f1abf8959d0 R11: 0000000000000202 R12: 0000000000000000 [ 3299.204646] R13: 00007fffa03d59ef R14: 00007f1abf8959c0 R15: 000000000078c04c [ 3299.243860] Mem-Info: [ 3299.246503] active_anon:1241683 inactive_anon:10260 isolated_anon:0 [ 3299.246503] active_file:166 inactive_file:128 isolated_file:32 [ 3299.246503] unevictable:0 dirty:12 writeback:0 unstable:0 [ 3299.246503] slab_reclaimable:19442 slab_unreclaimable:143109 [ 3299.246503] mapped:58212 shmem:10429 pagetables:58108 bounce:0 [ 3299.246503] free:22598 free_pcp:2 free_cma:0 [ 3299.283210] Node 0 active_anon:1878596kB inactive_anon:16136kB active_file:324kB inactive_file:172kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184964kB dirty:8kB writeback:0kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3299.311750] Node 1 active_anon:3088136kB inactive_anon:24904kB active_file:340kB inactive_file:340kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:47884kB dirty:40kB writeback:0kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3299.360721] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4800kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3299.430772] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3299.436135] Node 0 DMA32 free:27616kB min:36296kB low:45368kB high:54440kB active_anon:1873796kB inactive_anon:16136kB active_file:224kB inactive_file:172kB unevictable:0kB writepending:8kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17344kB pagetables:58460kB bounce:0kB free_pcp:60kB local_pcp:24kB free_cma:0kB [ 3299.470170] lowmem_reserve[]: 0 0 0 0 0 [ 3299.474603] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3299.500621] lowmem_reserve[]: 0 0 0 0 0 [ 3299.505061] Node 1 Normal free:52480kB min:53592kB low:66988kB high:80384kB active_anon:3088136kB inactive_anon:24904kB active_file:524kB inactive_file:564kB unevictable:0kB writepending:40kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61152kB pagetables:173968kB bounce:0kB free_pcp:216kB local_pcp:0kB free_cma:0kB [ 3299.590930] lowmem_reserve[]: 0 0 0 0 0 [ 3299.594958] Node 0 DMA: 7*4kB (UEH) 26*8kB (UH) 7*16kB (UEH) 4*32kB (UEH) 3*64kB (UME) 2*128kB (UE) 3*256kB (UME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10396kB [ 3299.720532] Node 0 DMA32: 720*4kB (UME) 136*8kB (UME) 57*16kB (UME) 98*32kB (UME) 28*64kB (UME) 20*128kB (UM) 6*256kB (M) 9*512kB (ME) 9*1024kB (UM) 0*2048kB 0*4096kB = 27728kB [ 3299.790540] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3299.841011] Node 1 Normal: 693*4kB (UM) 164*8kB (UM) 22*16kB (UMEH) 452*32kB (UMEH) 221*64kB (UMEH) 114*128kB (UMH) 10*256kB (UM) 2*512kB (M) 2*1024kB (M) 0*2048kB 0*4096kB = 53268kB [ 3299.887612] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3299.905720] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3299.914638] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3299.923680] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3299.932511] 10535 total pagecache pages [ 3299.936636] 0 pages in swap cache [ 3299.940222] Swap cache stats: add 0, delete 0, find 0/0 [ 3299.947938] Free swap = 0kB [ 3299.953897] Total swap = 0kB [ 3299.957086] 1965979 pages RAM [ 3299.960297] 0 pages HighMem/MovableOnly [ 3299.966526] 338455 pages reserved [ 3299.970122] 0 pages cma reserved [ 3299.976284] Out of memory: Kill process 18008 (syz-executor.1) score 1007 or sacrifice child [ 3299.985705] Killed process 18008 (syz-executor.1) total-vm:75236kB, anon-rss:15388kB, file-rss:34816kB, shmem-rss:0kB [ 3300.023997] oom_reaper: reaped process 18008 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 04:25:40 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000000200)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, &(0x7f00000004c0)={0x0, &(0x7f0000000480)=[&(0x7f0000000140)="45c0aa9c30e63edcfdde4062f1aae4cd1b9ffc66eabbf2dde0c61299732de894b332d6ca0ccf3207c3a345a8e0d3919f00c2e929898f9f3c17bad677c130bf6533a6d22f8265251e0ee5a7fe36c9ae8250a31f8887b1381e38", &(0x7f0000000040)="7bcfd72e47b50a371dd17d60e54aa02e972b24630bc8cd81cf65313000c4807d073f940099c6d77b012678227a", &(0x7f00000000c0)="9b4ab2e521734be73f1335466a96d3865da68d600f80d63d2dd23cbd3d281ee2", &(0x7f00000002c0)="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", &(0x7f00000003c0)="9cf4d92b793c45d24a91b05bc96a79c946e4b5a8cb2aab1835e052d381f67958f3f5f7aeafda412db89f765a2b2f427cc6f74afabf24041cfa54981a5abc1001e3970881bb742bb03f60b455fa066311dc44962a7492015309faff07cb36ea8c05654620efa86caccbc4ef936bc64004932b45273314d2674a140683e5252668112ae88ee6e7c0df8959ec77eb67529463492cc51b", &(0x7f0000000240)="04d8"]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:25:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000070040000d8010000d801000008010000d801000000000000a0030000a0030000a0030000a0030000a00300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000050000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000fe880000000000000000000000000001ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000726f73653000000000000000000000006e657464657673696d300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000a001c801000000000000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000010073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000100000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffffdb5daac5e6da864ec964e9bf17dcaacb3239fd8d15036d1b83cfbd381636d1df7d99dce9bbb6e4404d03b436322d9aea63261057ba0e5750f2f41a6edf92d30c2c23999121be5f10fd27345ab6bc3ca0da63e026003ccb83e8980c482b43092d072f4471817f81b046251b736f91cf3d382e75bcf7311ee76c7b71672be7491bfd97a5eb3897545c285b0376ee9d4d650ab10a4eedd4a9d72080fe15d65a321d5f0da314e9fd"], 0x1) r1 = socket(0x80000000000000a, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000180)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x3f, @local, 0x6}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="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", 0x1b0}, {&(0x7f0000000bc0)="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", 0x1000}], 0x2}}], 0x1, 0x4000080) [ 3300.547293] block nbd4: Attempted send on invalid socket [ 3300.553017] print_req_error: I/O error, dev nbd4, sector 64 [ 3300.561436] block nbd4: Attempted send on invalid socket [ 3300.567670] print_req_error: I/O error, dev nbd4, sector 120 04:25:40 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3300.658459] block nbd5: Attempted send on invalid socket [ 3300.664057] print_req_error: I/O error, dev nbd5, sector 64 [ 3300.669985] block nbd5: Attempted send on invalid socket [ 3300.675544] print_req_error: I/O error, dev nbd5, sector 120 04:25:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1800006, 0x10, 0xffffffffffffffff, 0xff) bind(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e21}}, 0x80) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x3c}}, 0x0) 04:25:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000070040000d8010000d801000008010000d801000000000000a0030000a0030000a0030000a0030000a00300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000050000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000fe880000000000000000000000000001ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000726f73653000000000000000000000006e657464657673696d300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000a001c801000000000000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000010073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000100000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r3, r4}) sendmmsg$inet6(r1, &(0x7f0000000c40)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB=' '], 0x20}}], 0x1, 0x0) 04:25:40 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3301.079546] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 3301.142548] block nbd4: Attempted send on invalid socket [ 3301.148076] print_req_error: I/O error, dev nbd4, sector 64 [ 3301.154318] block nbd4: Attempted send on invalid socket [ 3301.159816] print_req_error: I/O error, dev nbd4, sector 120 [ 3301.163429] ip6_tables: ip6tables: counters copy to user failed while replacing table 04:25:40 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:25:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0xff) bind(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e21}}, 0x80) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x3c}}, 0x0) 04:25:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1800006, 0x10, 0xffffffffffffffff, 0xff) bind(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e21}}, 0x80) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x3c}}, 0x0) 04:25:41 executing program 3: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0xffffffff}, 0x0, 0x0, 0x3, 0x0, 0x4b66, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES16=r2, @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB="44416701497145c60067217430e3a07e53853357449929cc3913b97abe0be7a0401f44552fe233c4f0d4031229fb6fd319a1f2f6ecb51f3235bcdca1886eb2fba2963553b7a67ad74657bf427d87c4e0da7980816fba5e5398179d553a6f286d530fa1d9365770e3b6fd540579cb86899876f6e3208ef517c1c5bfb9e8268aefcd1e723e7e2389291fd3ec2ac5073c646716347dc3d9d5f3e9071c7320391697d266cab1caa05740e6d6ffce0c58f78d06d3b101b1d9a99e0c67baf154b7efe072eb07afce4d9099d1a537c73809cf7e76", @ANYBLOB="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", @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074fe532a6f78014182d6c000000000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0x800000080004103) [ 3302.574601] syz-executor.1 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3302.574617] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 3302.574644] CPU: 1 PID: 19375 Comm: syz-executor.1 Not tainted 4.14.181-syzkaller #0 [ 3302.574649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3302.574653] Call Trace: [ 3302.574671] dump_stack+0x1b2/0x283 [ 3302.574684] dump_header+0x178/0x7aa [ 3302.574693] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3302.574703] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3302.574713] ? ___ratelimit+0x2cd/0x522 [ 3302.574724] oom_kill_process.cold+0x10/0xc16 [ 3302.574739] ? lock_downgrade+0x6e0/0x6e0 [ 3302.574751] out_of_memory+0x2d5/0x10f0 [ 3302.574764] ? oom_killer_disable+0x1c0/0x1c0 [ 3302.574771] ? mutex_trylock+0x152/0x1a0 [ 3302.574783] __alloc_pages_nodemask+0x2556/0x2730 [ 3302.574798] ? _find_next_bit+0xdb/0x100 [ 3302.574813] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3302.574823] ? __lock_acquire+0x655/0x42a0 [ 3302.574847] alloc_pages_vma+0xc1/0x4b0 [ 3302.574859] wp_page_copy+0x1005/0x1bc0 [ 3302.574874] ? add_mm_counter_fast.part.0+0x30/0x30 [ 3302.574881] ? __lock_acquire+0x655/0x42a0 [ 3302.574893] do_wp_page+0x244/0x1dc0 [ 3302.574903] ? __handle_mm_fault+0x18e8/0x3700 [ 3302.574912] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 3302.574919] ? trace_hardirqs_on+0x10/0x10 [ 3302.574931] __handle_mm_fault+0x1ee8/0x3700 [ 3302.574944] ? vm_insert_mixed_mkwrite+0x30/0x30 [ 3302.574954] ? cpuacct_charge+0x1d3/0x350 [ 3302.574975] handle_mm_fault+0x306/0x794 [ 3302.574988] __do_page_fault+0x578/0xb50 [ 3302.575001] ? mm_fault_error+0x2c0/0x2c0 [ 3302.575012] ? do_page_fault+0x60/0x4f2 [ 3302.575022] page_fault+0x25/0x50 [ 3302.575032] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 3302.575036] RSP: 0018:ffff88815decfb60 EFLAGS: 00010206 [ 3302.575044] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000500 [ 3302.575049] RDX: 0000000000001000 RSI: ffff888213ae1b00 RDI: 000000002038a000 [ 3302.575054] RBP: 0000000020389500 R08: ffffed104275c400 R09: 0000000000000000 [ 3302.575059] R10: ffffed104275c3ff R11: ffff888213ae1fff R12: ffff888213ae1000 [ 3302.575064] R13: 00007ffffffff000 R14: 000000002038a500 R15: ffff88815decfde0 [ 3302.575080] copyout+0x99/0xc0 [ 3302.575090] copy_page_to_iter+0x32a/0xc90 [ 3302.575106] pipe_to_user+0xa8/0x160 [ 3302.575118] __splice_from_pipe+0x332/0x740 [ 3302.575129] ? iter_to_pipe+0x4c0/0x4c0 04:25:42 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r3, r2, 0x0, 0x800000080004103) [ 3302.575140] vmsplice_to_user+0x197/0x1c0 [ 3302.575149] ? __splice_from_pipe+0x740/0x740 [ 3302.575158] ? __might_fault+0x104/0x1b0 [ 3302.575169] ? lock_acquire+0x170/0x3f0 [ 3302.575182] ? lock_acquire+0x170/0x3f0 [ 3302.575190] ? lock_downgrade+0x6e0/0x6e0 [ 3302.575205] ? __fget+0x226/0x360 [ 3302.575220] SyS_vmsplice+0x12a/0x150 [ 3302.575229] ? default_file_splice_write+0x80/0x80 [ 3302.575241] do_syscall_64+0x1d5/0x640 [ 3302.575254] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3302.575261] RIP: 0033:0x45ca29 [ 3302.575265] RSP: 002b:00007f5217baec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 3302.575274] RAX: ffffffffffffffda RBX: 000000000050a380 RCX: 000000000045ca29 [ 3302.575279] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 3302.575284] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 3302.575289] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 3302.575295] R13: 0000000000000c55 R14: 00000000004ce9f5 R15: 00007f5217baf6d4 [ 3302.580404] Mem-Info: [ 3302.580427] active_anon:1242806 inactive_anon:10261 isolated_anon:0 [ 3302.580427] active_file:870 inactive_file:764 isolated_file:142 [ 3302.580427] unevictable:0 dirty:63 writeback:0 unstable:0 [ 3302.580427] slab_reclaimable:19464 slab_unreclaimable:143294 [ 3302.580427] mapped:59469 shmem:10429 pagetables:58066 bounce:0 [ 3302.580427] free:19581 free_pcp:16 free_cma:0 [ 3302.580444] Node 0 active_anon:1879500kB inactive_anon:16136kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184544kB dirty:4kB writeback:0kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3302.580460] Node 1 active_anon:3091724kB inactive_anon:24908kB active_file:3480kB inactive_file:3052kB unevictable:0kB isolated(anon):0kB isolated(file):568kB mapped:53332kB dirty:248kB writeback:0kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3302.580464] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4800kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3302.580485] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3302.580508] Node 0 DMA32 free:27252kB min:36296kB low:45368kB high:54440kB active_anon:1874700kB inactive_anon:16136kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17408kB pagetables:58460kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3302.580527] lowmem_reserve[]: 0 0 0 0 0 [ 3302.580549] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3302.580568] lowmem_reserve[]: 0 0 0 0 0 [ 3302.580589] Node 1 Normal free:40676kB min:53592kB low:66988kB high:80384kB active_anon:3091268kB inactive_anon:24908kB active_file:3448kB inactive_file:3280kB unevictable:0kB writepending:148kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61248kB pagetables:173800kB bounce:0kB free_pcp:64kB local_pcp:64kB free_cma:0kB [ 3302.580609] lowmem_reserve[]: 0 0 0 0 0 [ 3302.580636] Node 0 DMA: 7*4kB (UEH) 26*8kB (UH) 7*16kB (UEH) 4*32kB (UEH) 3*64kB (UME) 2*128kB (UE) 3*256kB (UME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10396kB [ 3302.580721] Node 0 DMA32: 756*4kB (UME) 146*8kB (UE) 23*16kB (UE) 95*32kB (ME) 28*64kB (UME) 20*128kB (UM) 6*256kB (M) 9*512kB (ME) 9*1024kB (UM) 0*2048kB 0*4096kB = 27312kB [ 3302.580800] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3302.580852] Node 1 Normal: 245*4kB (UMEH) 34*8kB (UME) 7*16kB (UMEH) 107*32kB (UMEH) 233*64kB (UMEH) 124*128kB (UMH) 10*256kB (UM) 2*512kB (M) 2*1024kB (M) 0*2048kB 0*4096kB = 41204kB [ 3302.580939] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3302.580946] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3302.580952] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3302.580959] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3302.580963] 12246 total pagecache pages [ 3302.580973] 0 pages in swap cache [ 3302.580979] Swap cache stats: add 0, delete 0, find 0/0 [ 3302.580982] Free swap = 0kB [ 3302.580985] Total swap = 0kB [ 3302.580991] 1965979 pages RAM [ 3302.580994] 0 pages HighMem/MovableOnly [ 3302.580998] 338455 pages reserved [ 3302.581002] 0 pages cma reserved [ 3302.581009] Out of memory: Kill process 19384 (syz-executor.3) score 1007 or sacrifice child [ 3302.581060] Killed process 19384 (syz-executor.3) total-vm:75236kB, anon-rss:16548kB, file-rss:35772kB, shmem-rss:0kB [ 3302.651188] oom_reaper: reaped process 19384 (syz-executor.3), now anon-rss:0kB, file-rss:104kB, shmem-rss:0kB [ 3302.814808] block nbd4: Attempted send on invalid socket [ 3303.475491] print_req_error: I/O error, dev nbd4, sector 64 [ 3303.480717] block nbd4: Attempted send on invalid socket [ 3303.489244] print_req_error: I/O error, dev nbd4, sector 120 04:25:44 executing program 3: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000280)={0xb, "52ae0ab212064a53ec4190227c1b46564021c0eb94c087d1bd452956a33907e49bd9bdf5c4e63f000e337b449662bdee84218364428a50bfadb4087f1986c7344663e24154704bbe227864155dc37b97bb1c3f9a3a92e1a4a22fcfff42b7733ac1305d2a319989d342ad5f5a4c06cced76de8ce6dc987b550abf2efcaab0643d"}) socket$inet6(0xa, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x4) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x8103303, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:44 executing program 5: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0xffffffff}, 0x0, 0x0, 0x3, 0x0, 0x4b66, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES16=r2, @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB="44416701497145c60067217430e3a07e53853357449929cc3913b97abe0be7a0401f44552fe233c4f0d4031229fb6fd319a1f2f6ecb51f3235bcdca1886eb2fba2963553b7a67ad74657bf427d87c4e0da7980816fba5e5398179d553a6f286d530fa1d9365770e3b6fd540579cb86899876f6e3208ef517c1c5bfb9e8268aefcd1e723e7e2389291fd3ec2ac5073c646716347dc3d9d5f3e9071c7320391697d266cab1caa05740e6d6ffce0c58f78d06d3b101b1d9a99e0c67baf154b7efe072eb07afce4d9099d1a537c73809cf7e76", @ANYBLOB="48804c674107067060eda85072749eff7efc6f65faed988c4c12bfaf013c4ac667a159249c80f04dfefbb7bb1bf9193ae2310d9ad2832168786e3992093f516b34aeb8ec30581a45f023935f6df9a841b98233cea780c2a14d0f5d34535da3afee58bf50fdd1f4251e72c3d06de66203c3e40094185a5b676f776f0302fd1ec654702ce337397ce192d27e556c27c4f3033fdd81ea36022fa49fb6f33d8b9fc5c01cd396605f68f4234083e051960afcafecbbde4e2ffac5603b9efbc3722b25e2246a9a8222c84154d6cdfa7ea5dfd6032691b6878a36d334cd9e55febccac6b453b6fad9f16708d933706011343289608a741c3e31d504463414c616dce97536a86ac36951c0b69a44919cfddb0ca30d2d87294e4d47ccebfef8082d42d2ea5fc3c23e886e42a13d6b7663addde5", @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074fe532a6f78014182d6c000000000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0x800000080004103) 04:25:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000070040000d8010000d801000008010000d801000000000000a0030000a0030000a0030000a0030000a00300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000050000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000fe880000000000000000000000000001ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000726f73653000000000000000000000006e657464657673696d300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000a001c801000000000000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000010073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000100000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r1 = socket(0x80000000000000a, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000c40)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB=' '], 0x20}}], 0x1, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1081, 0x0, 0xff, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200802, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000040)={0x0, r3}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f00000005c0)=0x2, 0x4) 04:25:44 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) getpid() socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r3, r2, 0x0, 0x800000080004103) 04:25:44 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:25:44 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r3, r2, 0x0, 0x800000080004103) [ 3305.456097] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 3305.631334] block nbd4: Attempted send on invalid socket [ 3305.636891] print_req_error: I/O error, dev nbd4, sector 64 [ 3305.643541] block nbd4: Attempted send on invalid socket [ 3305.649159] print_req_error: I/O error, dev nbd4, sector 120 04:25:45 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:45 executing program 5: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') finit_module(0xffffffffffffffff, &(0x7f00000000c0)='\x02\x00\x00\x00\x00\x00\x00\x00setwlan0-pp\x00'/35, 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:46 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r3, r2, 0x0, 0x800000080004103) 04:25:46 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r3, r2, 0x0, 0x800000080004103) [ 3307.978876] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3307.978930] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3307.978951] CPU: 0 PID: 19465 Comm: syz-executor.3 Not tainted 4.14.181-syzkaller #0 [ 3307.978956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3307.978960] Call Trace: [ 3307.978979] dump_stack+0x1b2/0x283 [ 3307.978993] dump_header+0x178/0x7aa [ 3307.979002] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3307.979012] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3307.979027] ? ___ratelimit+0x2cd/0x522 [ 3307.979037] oom_kill_process.cold+0x10/0xc16 [ 3307.979048] ? lock_downgrade+0x6e0/0x6e0 [ 3307.979060] out_of_memory+0x2d5/0x10f0 [ 3307.979073] ? oom_killer_disable+0x1c0/0x1c0 [ 3307.979081] ? mutex_trylock+0x152/0x1a0 [ 3307.979094] __alloc_pages_nodemask+0x2556/0x2730 [ 3307.979107] ? trace_hardirqs_on+0x10/0x10 [ 3307.979123] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3307.979131] ? check_preemption_disabled+0x35/0x240 [ 3307.979141] ? finish_task_switch+0x178/0x610 [ 3307.979158] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3307.979167] ? _raw_spin_unlock_irq+0x5a/0x90 [ 3307.979179] alloc_pages_vma+0xc1/0x4b0 [ 3307.979192] wp_page_copy+0x1005/0x1bc0 [ 3307.979208] ? add_mm_counter_fast.part.0+0x30/0x30 [ 3307.979221] do_wp_page+0x244/0x1dc0 [ 3307.979231] ? __handle_mm_fault+0x18e8/0x3700 [ 3307.979240] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 3307.979253] __handle_mm_fault+0x1ee8/0x3700 [ 3307.979266] ? vm_insert_mixed_mkwrite+0x30/0x30 [ 3307.979273] ? check_preemption_disabled+0x35/0x240 [ 3307.979293] handle_mm_fault+0x306/0x794 [ 3307.979306] __do_page_fault+0x578/0xb50 [ 3307.979318] ? mm_fault_error+0x2c0/0x2c0 [ 3307.979332] ? do_page_fault+0x60/0x4f2 [ 3307.979342] page_fault+0x25/0x50 [ 3307.979351] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 3307.979356] RSP: 0018:ffff88816ae4fb60 EFLAGS: 00010206 [ 3307.979364] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000500 [ 3307.979369] RDX: 0000000000001000 RSI: ffff8880a0e12b00 RDI: 00000000200e4000 [ 3307.979374] RBP: 00000000200e3500 R08: ffffed10141c2600 R09: 0000000000000000 [ 3307.979380] R10: ffffed10141c25ff R11: ffff8880a0e12fff R12: ffff8880a0e12000 [ 3307.979384] R13: 00007ffffffff000 R14: 00000000200e4500 R15: ffff88816ae4fde0 [ 3307.979402] copyout+0x99/0xc0 [ 3307.979413] copy_page_to_iter+0x32a/0xc90 [ 3307.979428] pipe_to_user+0xa8/0x160 [ 3307.979440] __splice_from_pipe+0x332/0x740 [ 3307.979451] ? iter_to_pipe+0x4c0/0x4c0 [ 3307.979463] vmsplice_to_user+0x197/0x1c0 [ 3307.979472] ? __splice_from_pipe+0x740/0x740 [ 3307.979481] ? __might_fault+0x104/0x1b0 [ 3307.979492] ? lock_acquire+0x170/0x3f0 [ 3307.979505] ? lock_acquire+0x170/0x3f0 [ 3307.979513] ? lock_downgrade+0x6e0/0x6e0 [ 3307.979526] ? __fget+0x226/0x360 [ 3307.979542] SyS_vmsplice+0x12a/0x150 [ 3307.979551] ? default_file_splice_write+0x80/0x80 [ 3307.979563] do_syscall_64+0x1d5/0x640 [ 3307.979577] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3307.979583] RIP: 0033:0x45ca29 [ 3307.979588] RSP: 002b:00007f1abf8d6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 3307.979596] RAX: ffffffffffffffda RBX: 000000000050a380 RCX: 000000000045ca29 [ 3307.979601] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 3307.979606] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3307.979610] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 3307.979615] R13: 0000000000000c55 R14: 00000000004ce9f5 R15: 00007f1abf8d76d4 [ 3307.983151] Mem-Info: [ 3307.983174] active_anon:1242488 inactive_anon:10260 isolated_anon:0 [ 3307.983174] active_file:986 inactive_file:870 isolated_file:114 [ 3307.983174] unevictable:0 dirty:4 writeback:18 unstable:0 [ 3307.983174] slab_reclaimable:19541 slab_unreclaimable:143575 [ 3307.983174] mapped:59593 shmem:10429 pagetables:58131 bounce:0 [ 3307.983174] free:19339 free_pcp:81 free_cma:0 [ 3307.983190] Node 0 active_anon:1879060kB inactive_anon:16136kB active_file:144kB inactive_file:152kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184696kB dirty:0kB writeback:36kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3307.983206] Node 1 active_anon:3090892kB inactive_anon:24904kB active_file:3800kB inactive_file:3328kB unevictable:0kB isolated(anon):0kB isolated(file):456kB mapped:53676kB dirty:16kB writeback:36kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3307.983209] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4800kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3307.983228] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3307.983247] Node 0 DMA32 free:27196kB min:36296kB low:45368kB high:54440kB active_anon:1874260kB inactive_anon:16136kB active_file:144kB inactive_file:152kB unevictable:0kB writepending:0kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17600kB pagetables:58460kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 3307.983266] lowmem_reserve[]: 0 0 0 0 0 [ 3307.983285] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3307.983302] lowmem_reserve[]: 0 0 0 0 0 [ 3307.983321] Node 1 Normal free:39764kB min:53592kB low:66988kB high:80384kB active_anon:3090892kB inactive_anon:24904kB active_file:4176kB inactive_file:3228kB unevictable:0kB writepending:152kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61216kB pagetables:174060kB bounce:0kB free_pcp:320kB local_pcp:320kB free_cma:0kB [ 3307.983341] lowmem_reserve[]: 0 0 0 0 0 [ 3307.983360] Node 0 DMA: 7*4kB (UEH) 26*8kB (UH) 7*16kB (UEH) 4*32kB (UEH) 3*64kB (UME) 2*128kB (UE) 3*256kB (UME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10396kB [ 3307.983439] Node 0 DMA32: 726*4kB (UME) 142*8kB (UME) 46*16kB (UME) 98*32kB (ME) 28*64kB (ME) 19*128kB (M) 7*256kB (M) 10*512kB (ME) 8*1024kB (M) 0*2048kB 0*4096kB = 27240kB [ 3308.736041] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3308.747436] Node 1 Normal: 794*4kB (UMEH) 226*8kB (UMEH) 36*16kB (UME) 13*32kB (UEH) 267*64kB (MH) 126*128kB (MH) 8*256kB (M) 2*512kB (M) 2*1024kB (UM) 0*2048kB 0*4096kB = 44312kB [ 3308.794693] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3308.806758] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3308.830256] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3308.855746] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3308.864973] 11138 total pagecache pages [ 3308.869413] 0 pages in swap cache [ 3308.901692] Swap cache stats: add 0, delete 0, find 0/0 [ 3308.913018] Free swap = 0kB [ 3308.929884] Total swap = 0kB [ 3308.936489] 1965979 pages RAM [ 3308.944735] 0 pages HighMem/MovableOnly [ 3308.953450] 338455 pages reserved [ 3308.961936] 0 pages cma reserved [ 3308.980222] Out of memory: Kill process 19472 (syz-executor.5) score 1007 or sacrifice child [ 3309.041686] oom_reaper: reaped process 19473 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3309.128671] oom_reaper: reaped process 19465 (syz-executor.3), now anon-rss:0kB, file-rss:28kB, shmem-rss:0kB [ 3309.222447] syz-executor.1 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3309.289767] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 3309.294924] CPU: 1 PID: 19470 Comm: syz-executor.1 Not tainted 4.14.181-syzkaller #0 [ 3309.302821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3309.312191] Call Trace: [ 3309.314793] dump_stack+0x1b2/0x283 [ 3309.318426] dump_header+0x178/0x7aa [ 3309.322139] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3309.327159] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3309.332270] ? ___ratelimit+0x2cd/0x522 [ 3309.336254] oom_kill_process.cold+0x10/0xc16 [ 3309.340762] ? lock_downgrade+0x6e0/0x6e0 [ 3309.344921] out_of_memory+0x2d5/0x10f0 [ 3309.348984] ? oom_killer_disable+0x1c0/0x1c0 [ 3309.353480] ? mutex_trylock+0x152/0x1a0 [ 3309.357544] __alloc_pages_nodemask+0x2556/0x2730 [ 3309.362379] ? trace_hardirqs_on+0x10/0x10 [ 3309.366602] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3309.371426] ? __lock_acquire+0x655/0x42a0 [ 3309.375668] alloc_pages_vma+0xc1/0x4b0 [ 3309.379627] wp_page_copy+0x1005/0x1bc0 [ 3309.383598] ? add_mm_counter_fast.part.0+0x30/0x30 [ 3309.388610] ? __lock_acquire+0x655/0x42a0 [ 3309.392851] do_wp_page+0x244/0x1dc0 [ 3309.396565] ? __handle_mm_fault+0x18e8/0x3700 [ 3309.401141] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 3309.405805] ? trace_hardirqs_on+0x10/0x10 [ 3309.410474] __handle_mm_fault+0x1ee8/0x3700 [ 3309.414876] ? vm_insert_mixed_mkwrite+0x30/0x30 [ 3309.419612] ? check_preemption_disabled+0x35/0x240 [ 3309.424620] handle_mm_fault+0x306/0x794 [ 3309.428666] __do_page_fault+0x578/0xb50 [ 3309.432713] ? mm_fault_error+0x2c0/0x2c0 [ 3309.436845] ? do_page_fault+0x60/0x4f2 [ 3309.440803] page_fault+0x25/0x50 [ 3309.444249] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 3309.450111] RSP: 0018:ffff88817ccffb60 EFLAGS: 00010206 [ 3309.455488] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000500 [ 3309.462739] RDX: 0000000000001000 RSI: ffff888082035b00 RDI: 000000002012b000 [ 3309.470009] RBP: 000000002012a500 R08: ffffed1010406c00 R09: 0000000000000000 [ 3309.477261] R10: ffffed1010406bff R11: ffff888082035fff R12: ffff888082035000 [ 3309.484513] R13: 00007ffffffff000 R14: 000000002012b500 R15: ffff88817ccffde0 [ 3309.491794] copyout+0x99/0xc0 [ 3309.494970] copy_page_to_iter+0x32a/0xc90 [ 3309.499192] pipe_to_user+0xa8/0x160 [ 3309.502894] __splice_from_pipe+0x332/0x740 [ 3309.507222] ? iter_to_pipe+0x4c0/0x4c0 [ 3309.511181] vmsplice_to_user+0x197/0x1c0 [ 3309.515423] ? __splice_from_pipe+0x740/0x740 [ 3309.519916] ? __might_fault+0x104/0x1b0 [ 3309.524156] ? lock_acquire+0x170/0x3f0 [ 3309.528112] ? lock_acquire+0x170/0x3f0 [ 3309.532063] ? lock_downgrade+0x6e0/0x6e0 [ 3309.536204] ? __fget+0x226/0x360 [ 3309.539675] SyS_vmsplice+0x12a/0x150 [ 3309.543473] ? default_file_splice_write+0x80/0x80 [ 3309.548412] do_syscall_64+0x1d5/0x640 [ 3309.552293] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3309.557475] RIP: 0033:0x45ca29 [ 3309.560643] RSP: 002b:00007f5217bcfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 3309.568331] RAX: ffffffffffffffda RBX: 000000000050a380 RCX: 000000000045ca29 [ 3309.575592] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 3309.582843] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3309.590112] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 3309.597362] R13: 0000000000000c55 R14: 00000000004ce9f5 R15: 00007f5217bd06d4 [ 3309.688232] Mem-Info: [ 3309.694503] active_anon:1242204 inactive_anon:10260 isolated_anon:0 [ 3309.694503] active_file:59 inactive_file:44 isolated_file:29 [ 3309.694503] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3309.694503] slab_reclaimable:19541 slab_unreclaimable:143560 [ 3309.694503] mapped:58122 shmem:10429 pagetables:58105 bounce:0 [ 3309.694503] free:21631 free_pcp:94 free_cma:0 [ 3309.732794] Node 0 active_anon:1879040kB inactive_anon:16136kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184556kB dirty:0kB writeback:0kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3309.773854] Node 1 active_anon:3089776kB inactive_anon:24904kB active_file:184kB inactive_file:228kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47716kB dirty:0kB writeback:0kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3309.834477] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4800kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3309.887447] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3309.896851] Node 0 DMA32 free:27656kB min:36296kB low:45368kB high:54440kB active_anon:1874240kB inactive_anon:16136kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17472kB pagetables:58460kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 3309.931578] lowmem_reserve[]: 0 0 0 0 0 [ 3309.935977] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3309.973420] lowmem_reserve[]: 0 0 0 0 0 [ 3309.979176] Node 1 Normal free:48616kB min:53592kB low:66988kB high:80384kB active_anon:3089776kB inactive_anon:24904kB active_file:184kB inactive_file:228kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:60992kB pagetables:173956kB bounce:0kB free_pcp:152kB local_pcp:72kB free_cma:0kB [ 3310.024894] lowmem_reserve[]: 0 0 0 0 0 [ 3310.036980] Node 0 DMA: 7*4kB (UEH) 26*8kB (UH) 7*16kB (UEH) 4*32kB (UEH) 3*64kB (UME) 2*128kB (UE) 3*256kB (UME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10396kB [ 3310.061144] Node 0 DMA32: 807*4kB (UME) 140*8kB (UME) 46*16kB (UME) 99*32kB (ME) 28*64kB (ME) 20*128kB (M) 7*256kB (M) 10*512kB (ME) 8*1024kB (M) 0*2048kB 0*4096kB = 27708kB [ 3310.085143] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3310.099537] Node 1 Normal: 1602*4kB (UMEH) 384*8kB (UMEH) 62*16kB (UME) 18*32kB (UMEH) 267*64kB (MH) 126*128kB (MH) 8*256kB (M) 2*512kB (M) 2*1024kB (UM) 0*2048kB 0*4096kB = 49384kB [ 3310.119522] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3310.131023] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3310.152464] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3310.168007] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3310.178841] 10491 total pagecache pages [ 3310.186401] 0 pages in swap cache [ 3310.189948] Swap cache stats: add 0, delete 0, find 0/0 [ 3310.195377] Free swap = 0kB [ 3310.198457] Total swap = 0kB [ 3310.207172] 1965979 pages RAM [ 3310.214634] 0 pages HighMem/MovableOnly [ 3310.218727] 338455 pages reserved [ 3310.228015] 0 pages cma reserved [ 3310.239264] Out of memory: Kill process 19486 (syz-executor.5) score 1007 or sacrifice child [ 3310.251975] Killed process 19486 (syz-executor.5) total-vm:75236kB, anon-rss:16180kB, file-rss:34832kB, shmem-rss:0kB 04:25:50 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:50 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:50 executing program 5: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') finit_module(0xffffffffffffffff, &(0x7f00000000c0)='\x02\x00\x00\x00\x00\x00\x00\x00setwlan0-pp\x00'/35, 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:50 executing program 3: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) prctl$PR_GET_FP_MODE(0x2e) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, r0, 0x6, 0xffffffffffffffff, 0x3) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:50 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3311.580784] syz-executor.3 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 3311.580799] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3311.580819] CPU: 0 PID: 6348 Comm: syz-executor.3 Not tainted 4.14.181-syzkaller #0 [ 3311.580823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3311.580826] Call Trace: [ 3311.580841] dump_stack+0x1b2/0x283 [ 3311.580853] dump_header+0x178/0x7aa [ 3311.580861] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3311.580870] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3311.580877] ? ___ratelimit+0x2cd/0x522 [ 3311.580886] oom_kill_process.cold+0x10/0xc16 [ 3311.580895] ? lock_downgrade+0x6e0/0x6e0 [ 3311.580906] out_of_memory+0x2d5/0x10f0 [ 3311.580917] ? oom_killer_disable+0x1c0/0x1c0 [ 3311.580924] ? mutex_trylock+0x152/0x1a0 [ 3311.580935] __alloc_pages_nodemask+0x2556/0x2730 [ 3311.580955] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3311.580969] ? firmware_map_remove+0x18f/0x18f [ 3311.580981] ? ___preempt_schedule+0x16/0x18 [ 3311.580988] ? preempt_schedule_common+0x4a/0xc0 [ 3311.580999] alloc_pages_current+0xe7/0x1e0 [ 3311.581008] __get_free_pages+0xb/0x40 [ 3311.581015] __pud_alloc+0x33/0x200 [ 3311.581024] copy_page_range+0x14f2/0x27b0 [ 3311.581037] ? mark_held_locks+0xa6/0xf0 [ 3311.581046] ? wake_up_q+0x90/0xe0 [ 3311.581055] ? rwsem_wake+0x1ba/0x280 [ 3311.581062] ? rwsem_optimistic_spin+0x400/0x400 [ 3311.581076] ? apply_to_page_range+0x9c0/0x9c0 [ 3311.581082] ? validate_mm_rb+0x3a/0xa0 [ 3311.581095] copy_process.part.0+0x4c2f/0x6fa0 [ 3311.581119] ? __cleanup_sighand+0x40/0x40 [ 3311.581126] ? lock_downgrade+0x6e0/0x6e0 [ 3311.581138] _do_fork+0x180/0xc80 [ 3311.581152] ? put_timespec64+0xaa/0xf0 [ 3311.581159] ? fork_idle+0x270/0x270 [ 3311.581170] ? SyS_clock_gettime+0xf5/0x180 [ 3311.581177] ? SyS_clock_settime+0x1a0/0x1a0 [ 3311.581184] ? do_syscall_64+0x4c/0x640 [ 3311.581190] ? sys_vfork+0x20/0x20 [ 3311.581199] do_syscall_64+0x1d5/0x640 [ 3311.581210] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3311.581217] RIP: 0033:0x45b05a [ 3311.581221] RSP: 002b:00007fffa03d5be0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3311.581229] RAX: ffffffffffffffda RBX: 00007fffa03d5be0 RCX: 000000000045b05a [ 3311.581233] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3311.581238] RBP: 00007fffa03d5c20 R08: 0000000000000001 R09: 0000000000e18940 [ 3311.581242] R10: 0000000000e18c10 R11: 0000000000000246 R12: 0000000000000001 [ 3311.581246] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffa03d5c70 [ 3311.581258] Mem-Info: [ 3311.581277] active_anon:1241991 inactive_anon:10261 isolated_anon:0 [ 3311.581277] active_file:1219 inactive_file:1063 isolated_file:154 [ 3311.581277] unevictable:0 dirty:41 writeback:0 unstable:0 [ 3311.581277] slab_reclaimable:19541 slab_unreclaimable:143399 [ 3311.581277] mapped:59971 shmem:10429 pagetables:58037 bounce:0 [ 3311.581277] free:19663 free_pcp:67 free_cma:0 [ 3311.581290] Node 0 active_anon:1879348kB inactive_anon:16136kB active_file:28kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:184580kB dirty:4kB writeback:0kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3311.581303] Node 1 active_anon:3088616kB inactive_anon:24908kB active_file:4848kB inactive_file:4248kB unevictable:0kB isolated(anon):0kB isolated(file):608kB mapped:55304kB dirty:160kB writeback:0kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3311.581307] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4800kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3311.581323] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3311.581341] Node 0 DMA32 free:27176kB min:36296kB low:45368kB high:54440kB active_anon:1874548kB inactive_anon:16136kB active_file:28kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17440kB pagetables:58460kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3311.581357] lowmem_reserve[]: 0 0 0 0 0 [ 3311.581374] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3311.581390] lowmem_reserve[]: 0 0 0 0 0 [ 3311.581409] Node 1 Normal free:41080kB min:53592kB low:66988kB high:80384kB active_anon:3088380kB inactive_anon:24908kB active_file:4840kB inactive_file:4684kB unevictable:0kB writepending:260kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61024kB pagetables:173684kB bounce:0kB free_pcp:268kB local_pcp:172kB free_cma:0kB [ 3311.581425] lowmem_reserve[]: 0 0 0 0 0 [ 3311.581443] Node 0 DMA: 7*4kB (UEH) 26*8kB (UH) 7*16kB (UEH) 4*32kB (UEH) 3*64kB (UME) 2*128kB (UE) 3*256kB (UME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10396kB [ 3311.581513] Node 0 DMA32: 737*4kB (UME) 140*8kB (UME) 41*16kB (UME) 99*32kB (ME) 28*64kB (ME) 20*128kB (M) 7*256kB (M) 10*512kB (ME) 8*1024kB (M) 0*2048kB 0*4096kB = 27348kB [ 3311.581579] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3311.581622] Node 1 Normal: 271*4kB (UMEH) 110*8kB (UME) 135*16kB (UME) 16*32kB (UMEH) 240*64kB (UMH) 130*128kB (UMH) 8*256kB (M) 2*512kB (M) 2*1024kB (UM) 0*2048kB 0*4096kB = 41756kB [ 3311.581694] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3311.581699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3311.581704] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3311.581709] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3311.581713] 12884 total pagecache pages [ 3311.581722] 0 pages in swap cache [ 3311.581727] Swap cache stats: add 0, delete 0, find 0/0 [ 3311.581730] Free swap = 0kB [ 3311.581733] Total swap = 0kB [ 3311.581738] 1965979 pages RAM [ 3311.581741] 0 pages HighMem/MovableOnly [ 3311.581744] 338455 pages reserved [ 3311.581746] 0 pages cma reserved [ 3311.581752] Out of memory: Kill process 19489 (syz-executor.0) score 1007 or sacrifice child [ 3311.581904] Killed process 19498 (syz-executor.0) total-vm:75236kB, anon-rss:16568kB, file-rss:35848kB, shmem-rss:0kB [ 3312.361752] oom_reaper: reaped process 19498 (syz-executor.0), now anon-rss:0kB, file-rss:36kB, shmem-rss:0kB [ 3313.546024] syz-executor.4 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 3313.546038] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3313.546056] CPU: 1 PID: 19507 Comm: syz-executor.4 Not tainted 4.14.181-syzkaller #0 [ 3313.546061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3313.546064] Call Trace: [ 3313.546083] dump_stack+0x1b2/0x283 [ 3313.546095] dump_header+0x178/0x7aa [ 3313.546103] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3313.546112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3313.546120] ? ___ratelimit+0x2cd/0x522 [ 3313.546129] oom_kill_process.cold+0x10/0xc16 [ 3313.546138] ? lock_downgrade+0x6e0/0x6e0 [ 3313.546149] out_of_memory+0x2d5/0x10f0 [ 3313.546160] ? oom_killer_disable+0x1c0/0x1c0 [ 3313.546166] ? mutex_trylock+0x152/0x1a0 [ 3313.546177] __alloc_pages_nodemask+0x2556/0x2730 [ 3313.546197] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3313.546216] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3313.546224] ? kmem_cache_alloc_node+0x387/0x400 [ 3313.546236] copy_process.part.0+0x26a/0x6fa0 [ 3313.546244] ? trace_hardirqs_on+0x10/0x10 [ 3313.546254] ? cpuacct_charge+0x1ce/0x350 [ 3313.546262] ? check_preemption_disabled+0x35/0x240 [ 3313.546271] ? check_preemption_disabled+0x35/0x240 [ 3313.546280] ? finish_task_switch+0x178/0x610 [ 3313.546293] ? __cleanup_sighand+0x40/0x40 [ 3313.546299] ? _raw_spin_unlock_irq+0x24/0x90 [ 3313.546307] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3313.546314] ? _raw_spin_unlock_irq+0x5a/0x90 [ 3313.546323] _do_fork+0x180/0xc80 [ 3313.546333] ? fork_idle+0x270/0x270 [ 3313.546343] ? firmware_map_remove+0x18f/0x18f [ 3313.546352] ? __do_page_fault+0x19a/0xb50 [ 3313.546361] ? do_syscall_64+0x4c/0x640 [ 3313.546367] ? sys_vfork+0x20/0x20 [ 3313.546376] do_syscall_64+0x1d5/0x640 [ 3313.546387] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3313.546394] RIP: 0033:0x45f3f9 [ 3313.546398] RSP: 002b:00007ffe2f9a3ba8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3313.546406] RAX: ffffffffffffffda RBX: 00007f361b872700 RCX: 000000000045f3f9 [ 3313.546410] RDX: 00007f361b8729d0 RSI: 00007f361b871db0 RDI: 00000000003d0f00 [ 3313.546415] RBP: 00007ffe2f9a3dd0 R08: 00007f361b872700 R09: 00007f361b872700 [ 3313.546419] R10: 00007f361b8729d0 R11: 0000000000000202 R12: 0000000000000000 [ 3313.546427] R13: 00007ffe2f9a3c5f R14: 00007f361b8729c0 R15: 000000000078bfac [ 3313.548643] Mem-Info: [ 3313.548662] active_anon:1242033 inactive_anon:10261 isolated_anon:0 [ 3313.548662] active_file:962 inactive_file:910 isolated_file:97 [ 3313.548662] unevictable:0 dirty:0 writeback:17 unstable:0 [ 3313.548662] slab_reclaimable:19546 slab_unreclaimable:144033 [ 3313.548662] mapped:59496 shmem:10429 pagetables:58006 bounce:0 [ 3313.548662] free:19365 free_pcp:97 free_cma:0 [ 3313.548676] Node 0 active_anon:1879424kB inactive_anon:16136kB active_file:20kB inactive_file:120kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:184580kB dirty:0kB writeback:8kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3313.548689] Node 1 active_anon:3088708kB inactive_anon:24908kB active_file:3828kB inactive_file:3520kB unevictable:0kB isolated(anon):0kB isolated(file):384kB mapped:53404kB dirty:0kB writeback:60kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3313.548692] Node 0 DMA free:10392kB min:220kB low:272kB high:324kB active_anon:4820kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3313.548708] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3313.548724] Node 0 DMA32 free:27232kB min:36296kB low:45368kB high:54440kB active_anon:1874624kB inactive_anon:16136kB active_file:20kB inactive_file:120kB unevictable:0kB writepending:8kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17504kB pagetables:58460kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 3313.548740] lowmem_reserve[]: 0 0 0 0 0 [ 3313.548756] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3313.548770] lowmem_reserve[]: 0 0 0 0 0 [ 3313.548786] Node 1 Normal free:39836kB min:53592kB low:66988kB high:80384kB active_anon:3088428kB inactive_anon:24908kB active_file:3720kB inactive_file:3796kB unevictable:0kB writepending:60kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:60928kB pagetables:173560kB bounce:0kB free_pcp:372kB local_pcp:372kB free_cma:0kB [ 3313.548802] lowmem_reserve[]: 0 0 0 0 0 [ 3313.549008] Node 0 DMA: 8*4kB (UMEH) 27*8kB (UMH) 8*16kB (UEH) 5*32kB (UMEH) 2*64kB (UE) 2*128kB (UE) 3*256kB (UME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10392kB [ 3313.549072] Node 0 DMA32: 747*4kB (UE) 153*8kB (UE) 29*16kB (UME) 97*32kB (ME) 28*64kB (ME) 20*128kB (M) 7*256kB (M) 10*512kB (ME) 8*1024kB (M) 0*2048kB 0*4096kB = 27236kB [ 3313.549134] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3313.549173] Node 1 Normal: 117*4kB (UMEH) 26*8kB (UME) 19*16kB (UE) 52*32kB (UMEH) 267*64kB (UMH) 127*128kB (MH) 8*256kB (UM) 2*512kB (M) 1*1024kB (U) 0*2048kB 0*4096kB = 40084kB [ 3313.549238] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3313.549243] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3313.549248] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3313.549252] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3313.549255] 12390 total pagecache pages [ 3313.549264] 0 pages in swap cache [ 3313.549268] Swap cache stats: add 0, delete 0, find 0/0 [ 3313.549271] Free swap = 0kB [ 3313.549273] Total swap = 0kB [ 3313.549278] 1965979 pages RAM [ 3313.549281] 0 pages HighMem/MovableOnly [ 3313.549283] 338455 pages reserved [ 3313.549286] 0 pages cma reserved [ 3313.549291] Out of memory: Kill process 19505 (syz-executor.5) score 1007 or sacrifice child [ 3313.549342] Killed process 19505 (syz-executor.5) total-vm:75236kB, anon-rss:16552kB, file-rss:35668kB, shmem-rss:0kB [ 3314.359787] oom_reaper: reaped process 19505 (syz-executor.5), now anon-rss:0kB, file-rss:100kB, shmem-rss:0kB [ 3315.104511] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3315.104525] systemd-journal cpuset=/ mems_allowed=0-1 [ 3315.104544] CPU: 0 PID: 3626 Comm: systemd-journal Not tainted 4.14.181-syzkaller #0 [ 3315.104548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3315.104551] Call Trace: [ 3315.104569] dump_stack+0x1b2/0x283 [ 3315.104581] dump_header+0x178/0x7aa [ 3315.104589] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3315.104598] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3315.104605] ? ___ratelimit+0x2cd/0x522 [ 3315.104615] oom_kill_process.cold+0x10/0xc16 [ 3315.104624] ? lock_downgrade+0x6e0/0x6e0 [ 3315.104634] out_of_memory+0x2d5/0x10f0 [ 3315.104646] ? oom_killer_disable+0x1c0/0x1c0 [ 3315.104653] ? mutex_trylock+0x152/0x1a0 [ 3315.104663] __alloc_pages_nodemask+0x2556/0x2730 [ 3315.104677] ? kmemdup+0x23/0x50 [ 3315.104690] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3315.104697] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3315.104704] ? trace_hardirqs_on+0x10/0x10 [ 3315.104721] ? cache_grow_begin+0x3f/0x410 [ 3315.104730] cache_grow_begin+0x91/0x410 [ 3315.104739] fallback_alloc+0x205/0x2b0 [ 3315.104750] kmem_cache_alloc+0x1e5/0x3c0 [ 3315.104760] getname_flags+0xc8/0x550 [ 3315.104771] user_path_at_empty+0x2a/0x50 [ 3315.104781] SyS_faccessat+0x21b/0x680 [ 3315.104791] ? SyS_fallocate+0x80/0x80 [ 3315.104800] ? do_syscall_64+0x4c/0x640 [ 3315.104807] ? SyS_faccessat+0x680/0x680 [ 3315.104815] do_syscall_64+0x1d5/0x640 [ 3315.104827] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3315.104834] RIP: 0033:0x7f79169e89c7 [ 3315.104838] RSP: 002b:00007ffdbfe66508 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 3315.104846] RAX: ffffffffffffffda RBX: 00007ffdbfe69420 RCX: 00007f79169e89c7 [ 3315.104850] RDX: 00007f7917459a00 RSI: 0000000000000000 RDI: 000055abe904f9a3 [ 3315.104854] RBP: 00007ffdbfe66540 R08: 0000000000000000 R09: 0000000000000000 [ 3315.104858] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 3315.104863] R13: 0000000000000000 R14: 00007ffdbfe69420 R15: 00007ffdbfe66a30 [ 3315.104875] Mem-Info: [ 3315.104893] active_anon:1242015 inactive_anon:10261 isolated_anon:0 [ 3315.104893] active_file:634 inactive_file:1065 isolated_file:98 [ 3315.104893] unevictable:0 dirty:12 writeback:24 unstable:0 [ 3315.104893] slab_reclaimable:19546 slab_unreclaimable:144143 [ 3315.104893] mapped:59453 shmem:10429 pagetables:58118 bounce:0 [ 3315.104893] free:19360 free_pcp:228 free_cma:0 [ 3315.104907] Node 0 active_anon:1878844kB inactive_anon:16136kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184580kB dirty:4kB writeback:4kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3315.104920] Node 1 active_anon:3089216kB inactive_anon:24908kB active_file:2508kB inactive_file:4232kB unevictable:0kB isolated(anon):0kB isolated(file):392kB mapped:53232kB dirty:44kB writeback:92kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3315.104923] Node 0 DMA free:10392kB min:220kB low:272kB high:324kB active_anon:4820kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3315.104938] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3315.104954] Node 0 DMA32 free:27328kB min:36296kB low:45368kB high:54440kB active_anon:1874044kB inactive_anon:16136kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:8kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17504kB pagetables:58460kB bounce:0kB free_pcp:680kB local_pcp:0kB free_cma:0kB [ 3315.104970] lowmem_reserve[]: 0 0 0 0 0 [ 3315.106335] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3315.106350] lowmem_reserve[]: 0 0 0 0 0 [ 3315.106366] Node 1 Normal free:39720kB min:53592kB low:66988kB high:80384kB active_anon:3088720kB inactive_anon:24908kB active_file:2608kB inactive_file:4256kB unevictable:0kB writepending:236kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:60960kB pagetables:174008kB bounce:0kB free_pcp:232kB local_pcp:8kB free_cma:0kB [ 3315.106382] lowmem_reserve[]: 0 0 0 0 0 [ 3315.106398] Node 0 DMA: 8*4kB (UMEH) 27*8kB (UMH) 8*16kB (UEH) 5*32kB (UMEH) 2*64kB (UE) 2*128kB (UE) 3*256kB (UME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10392kB [ 3315.106468] Node 0 DMA32: 749*4kB (UME) 154*8kB (UME) 37*16kB (UME) 97*32kB (UME) 28*64kB (UME) 20*128kB (UM) 7*256kB (M) 10*512kB (UME) 8*1024kB (UM) 0*2048kB 0*4096kB = 27380kB [ 3315.106528] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3315.106566] Node 1 Normal: 167*4kB (UMEH) 4*8kB (UME) 24*16kB (UME) 44*32kB (UME) 268*64kB (UMH) 127*128kB (MH) 8*256kB (UM) 2*512kB (M) 1*1024kB (U) 0*2048kB 0*4096kB = 39996kB [ 3315.106630] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3315.106636] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3315.106641] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3315.106645] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3315.106648] 12235 total pagecache pages [ 3315.106657] 0 pages in swap cache [ 3315.106661] Swap cache stats: add 0, delete 0, find 0/0 [ 3315.106664] Free swap = 0kB [ 3315.106667] Total swap = 0kB [ 3315.106671] 1965979 pages RAM [ 3315.106674] 0 pages HighMem/MovableOnly [ 3315.106677] 338455 pages reserved [ 3315.106679] 0 pages cma reserved [ 3315.106685] Out of memory: Kill process 19513 (syz-executor.3) score 1007 or sacrifice child [ 3315.106727] Killed process 19513 (syz-executor.3) total-vm:75236kB, anon-rss:16020kB, file-rss:35672kB, shmem-rss:0kB [ 3315.820920] oom_reaper: reaped process 19513 (syz-executor.3), now anon-rss:0kB, file-rss:60kB, shmem-rss:0kB 04:25:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1800006, 0x10, 0xffffffffffffffff, 0xff) bind(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e21}}, 0x80) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x3c}}, 0x0) 04:25:55 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r3, r2, 0x0, 0x800000080004103) 04:25:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1800006, 0x10, 0xffffffffffffffff, 0xff) bind(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e21}}, 0x80) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x3c}}, 0x0) 04:25:55 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:25:55 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:25:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1800006, 0x10, 0xffffffffffffffff, 0xff) bind(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e21}}, 0x80) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x3c}}, 0x0) [ 3317.283340] team0: Invalid MTU 0 requested, hw min 68 [ 3317.962473] block nbd4: Attempted send on invalid socket [ 3317.968036] print_req_error: I/O error, dev nbd4, sector 64 [ 3317.978478] block nbd4: Attempted send on invalid socket [ 3317.984135] print_req_error: I/O error, dev nbd4, sector 120 [ 3318.552025] team0: Invalid MTU 0 requested, hw min 68 04:25:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=ANY=[], 0x1) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) sendto$inet6(r1, &(0x7f0000000000)="0f8e296cb474dc090fc905bc75d0c3069cb65eec6f131733a9db0d31", 0x1c, 0x814, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @remote, 0x4}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000c40)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB=' '], 0x20}}], 0x1, 0x0) 04:25:57 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:25:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1800006, 0x10, 0xffffffffffffffff, 0xff) bind(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e21}}, 0x80) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x3c}}, 0x0) 04:25:58 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0xffffffff}, 0x0, 0x0, 0x3, 0x0, 0x4b66, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES16=r2, @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB="44416701497145c60067217430e3a07e53853357449929cc3913b97abe0be7a0401f44552fe233c4f0d4031229fb6fd319a1f2f6ecb51f3235bcdca1886eb2fba2963553b7a67ad74657bf427d87c4e0da7980816fba5e5398179d553a6f286d530fa1d9365770e3b6fd540579cb86899876f6e3208ef517c1c5bfb9e8268aefcd1e723e7e2389291fd3ec2ac5073c646716347dc3d9d5f3e9071c7320391697d266cab1caa05740e6d6ffce0c58f78d06d3b101b1d9a99e0c67baf154b7efe072eb07afce4d9099d1a537c73809cf7e76", @ANYBLOB="48804c674107067060eda85072749eff7efc6f65faed988c4c12bfaf013c4ac667a159249c80f04dfefbb7bb1bf9193ae2310d9ad2832168786e3992093f516b34aeb8ec30581a45f023935f6df9a841b98233cea780c2a14d0f5d34535da3afee58bf50fdd1f4251e72c3d06de66203c3e40094185a5b676f776f0302fd1ec654702ce337397ce192d27e556c27c4f3033fdd81ea36022fa49fb6f33d8b9fc5c01cd396605f68f4234083e051960afcafecbbde4e2ffac5603b9efbc3722b25e2246a9a8222c84154d6cdfa7ea5dfd6032691b6878a36d334cd9e55febccac6b453b6fad9f16708d933706011343289608a741c3e31d504463414c616dce97536a86ac36951c0b69a44919cfddb0ca30d2d87294e4d47ccebfef8082d42d2ea5fc3c23e886e42a13d6b7663addde5", @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59f9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be9f85a7122b6336a0ebdd2367206c9fc5fe074fe532a6f78014182d6c000000000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0x800000080004103) 04:25:59 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3320.510325] kworker/u4:2 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3320.544254] kworker/u4:2 cpuset=/ mems_allowed=0-1 [ 3320.556183] CPU: 1 PID: 19557 Comm: kworker/u4:2 Not tainted 4.14.181-syzkaller #0 [ 3320.563924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3320.573262] Call Trace: [ 3320.575839] dump_stack+0x1b2/0x283 [ 3320.579448] dump_header+0x178/0x7aa [ 3320.583141] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3320.588143] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3320.593234] ? ___ratelimit+0x2cd/0x522 [ 3320.597366] oom_kill_process.cold+0x10/0xc16 [ 3320.601846] ? lock_downgrade+0x6e0/0x6e0 [ 3320.605976] out_of_memory+0x2d5/0x10f0 [ 3320.609936] ? oom_killer_disable+0x1c0/0x1c0 [ 3320.614424] ? mutex_trylock+0x152/0x1a0 [ 3320.618485] __alloc_pages_nodemask+0x2556/0x2730 [ 3320.623347] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3320.628175] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3320.633014] ? trace_hardirqs_on+0x10/0x10 [ 3320.637235] ? cache_grow_begin+0x3f/0x410 [ 3320.641449] cache_grow_begin+0x91/0x410 [ 3320.645494] fallback_alloc+0x205/0x2b0 [ 3320.649472] kmem_cache_alloc+0x1e5/0x3c0 [ 3320.653607] getname_kernel+0x4e/0x340 [ 3320.657485] call_usermodehelper_exec_async+0x27b/0x4c0 [ 3320.662833] ? umh_complete+0x80/0x80 [ 3320.666615] ret_from_fork+0x24/0x30 [ 3320.872097] Mem-Info: [ 3320.874559] active_anon:1239659 inactive_anon:10259 isolated_anon:0 [ 3320.874559] active_file:243 inactive_file:207 isolated_file:24 [ 3320.874559] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3320.874559] slab_reclaimable:19475 slab_unreclaimable:144244 [ 3320.874559] mapped:58404 shmem:10429 pagetables:58183 bounce:0 [ 3320.874559] free:22947 free_pcp:245 free_cma:0 [ 3320.927600] Node 0 active_anon:1879400kB inactive_anon:16136kB active_file:100kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184660kB dirty:0kB writeback:0kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3320.998864] Node 1 active_anon:3079236kB inactive_anon:24900kB active_file:616kB inactive_file:676kB unevictable:0kB isolated(anon):0kB isolated(file):144kB mapped:48676kB dirty:0kB writeback:0kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3321.026879] Node 0 DMA free:10392kB min:220kB low:272kB high:324kB active_anon:4820kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3321.054350] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3321.059501] Node 0 DMA32 free:27596kB min:36296kB low:45368kB high:54440kB active_anon:1874580kB inactive_anon:16136kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17472kB pagetables:58460kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 3321.122903] lowmem_reserve[]: 0 0 0 0 0 [ 3321.128205] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3321.159119] lowmem_reserve[]: 0 0 0 0 0 [ 3321.163196] Node 1 Normal free:55216kB min:53592kB low:66988kB high:80384kB active_anon:3079236kB inactive_anon:24900kB active_file:824kB inactive_file:928kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61088kB pagetables:174268kB bounce:0kB free_pcp:56kB local_pcp:0kB free_cma:0kB [ 3321.196686] lowmem_reserve[]: 0 0 0 0 0 [ 3321.200967] Node 0 DMA: 8*4kB (UMEH) 27*8kB (UMH) 8*16kB (UEH) 5*32kB (UMEH) 2*64kB (UE) 2*128kB (UE) 3*256kB (UME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10392kB [ 3321.232941] Node 0 DMA32: 801*4kB (UME) 156*8kB (UME) 41*16kB (UME) 99*32kB (UME) 27*64kB (ME) 20*128kB (UM) 7*256kB (M) 10*512kB (UME) 8*1024kB (UM) 0*2048kB 0*4096kB = 27668kB [ 3321.296157] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3321.312175] Node 1 Normal: 1449*4kB (UMEH) 243*8kB (UMEH) 86*16kB (UMEH) 340*32kB (UMEH) 268*64kB (M) 127*128kB (UMH) 6*256kB (UM) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 55964kB [ 3321.330891] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3321.341255] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3321.350192] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3321.359434] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3321.369030] 10564 total pagecache pages [ 3321.373737] 0 pages in swap cache [ 3321.377761] Swap cache stats: add 0, delete 0, find 0/0 [ 3321.383606] Free swap = 0kB [ 3321.387101] Total swap = 0kB [ 3321.391254] 1965979 pages RAM [ 3321.405243] 0 pages HighMem/MovableOnly [ 3321.413488] 338455 pages reserved [ 3321.416966] 0 pages cma reserved [ 3321.420394] Out of memory: Kill process 12097 (syz-executor.5) score 1007 or sacrifice child [ 3321.436603] Killed process 12097 (syz-executor.5) total-vm:75236kB, anon-rss:15308kB, file-rss:34816kB, shmem-rss:0kB [ 3321.516559] oom_reaper: reaped process 12097 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 04:26:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=ANY=[], 0x1) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) sendto$inet6(r1, &(0x7f0000000000)="0f8e296cb474dc090fc905bc75d0c3069cb65eec6f131733a9db0d31", 0x1c, 0x814, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @remote, 0x4}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000c40)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB=' '], 0x20}}], 0x1, 0x0) 04:26:02 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0xffffffff}, 0x0, 0x0, 0x3, 0x0, 0x4b66, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES16=r2, @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB="44416701497145c60067217430e3a07e53853357449929cc3913b97abe0be7a0401f44552fe233c4f0d4031229fb6fd319a1f2f6ecb51f3235bcdca1886eb2fba2963553b7a67ad74657bf427d87c4e0da7980816fba5e5398179d553a6f286d530fa1d9365770e3b6fd540579cb86899876f6e3208ef517c1c5bfb9e8268aefcd1e723e7e2389291fd3ec2ac5073c646716347dc3d9d5f3e9071c7320391697d266cab1caa05740e6d6ffce0c58f78d06d3b101b1d9a99e0c67baf154b7efe072eb07afce4d9099d1a537c73809cf7e76", @ANYBLOB="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", @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59f9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be9f85a7122b6336a0ebdd2367206c9fc5fe074fe532a6f78014182d6c000000000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0x800000080004103) 04:26:02 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:26:02 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r3, r2, 0x0, 0x800000080004103) 04:26:02 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3323.223354] block nbd4: Attempted send on invalid socket [ 3323.229090] print_req_error: I/O error, dev nbd4, sector 64 [ 3323.257968] block nbd4: Attempted send on invalid socket [ 3323.263542] print_req_error: I/O error, dev nbd4, sector 120 04:26:03 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0xffffffff}, 0x0, 0x0, 0x3, 0x0, 0x4b66, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES16=r2, @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB="44416701497145c60067217430e3a07e53853357449929cc3913b97abe0be7a0401f44552fe233c4f0d4031229fb6fd319a1f2f6ecb51f3235bcdca1886eb2fba2963553b7a67ad74657bf427d87c4e0da7980816fba5e5398179d553a6f286d530fa1d9365770e3b6fd540579cb86899876f6e3208ef517c1c5bfb9e8268aefcd1e723e7e2389291fd3ec2ac5073c646716347dc3d9d5f3e9071c7320391697d266cab1caa05740e6d6ffce0c58f78d06d3b101b1d9a99e0c67baf154b7efe072eb07afce4d9099d1a537c73809cf7e76", @ANYBLOB="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", @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59f9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be9f85a7122b6336a0ebdd2367206c9fc5fe074fe532a6f78014182d6c000000000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0x800000080004103) 04:26:03 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4108002}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'gretap0\x00'}}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40002}, 0x40040) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:26:03 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3324.762812] syz-executor.3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3324.762827] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3324.762847] CPU: 1 PID: 6348 Comm: syz-executor.3 Not tainted 4.14.181-syzkaller #0 [ 3324.762851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3324.762855] Call Trace: [ 3324.762872] dump_stack+0x1b2/0x283 [ 3324.762891] dump_header+0x178/0x7aa [ 3324.762900] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3324.762909] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3324.762916] ? ___ratelimit+0x2cd/0x522 [ 3324.762926] oom_kill_process.cold+0x10/0xc16 [ 3324.762935] ? lock_downgrade+0x6e0/0x6e0 [ 3324.762946] out_of_memory+0x2d5/0x10f0 [ 3324.762959] ? oom_killer_disable+0x1c0/0x1c0 [ 3324.762966] ? mutex_trylock+0x152/0x1a0 [ 3324.762976] __alloc_pages_nodemask+0x2556/0x2730 [ 3324.762989] ? trace_hardirqs_on+0x10/0x10 [ 3324.763001] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3324.763008] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3324.763020] ? trace_hardirqs_on+0x10/0x10 [ 3324.763036] ? cache_grow_begin+0x3f/0x410 [ 3324.763045] cache_grow_begin+0x91/0x410 [ 3324.763055] fallback_alloc+0x205/0x2b0 [ 3324.763066] kmem_cache_alloc_node+0xe3/0x400 [ 3324.763077] copy_process.part.0+0x17d5/0x6fa0 [ 3324.763085] ? trace_hardirqs_on+0x10/0x10 [ 3324.763095] ? trace_hardirqs_on+0x10/0x10 [ 3324.763103] ? do_wp_page+0x24c/0x1dc0 [ 3324.763111] ? __handle_mm_fault+0x18e8/0x3700 [ 3324.763118] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 3324.763132] ? __cleanup_sighand+0x40/0x40 [ 3324.763138] ? lock_downgrade+0x6e0/0x6e0 [ 3324.763151] _do_fork+0x180/0xc80 [ 3324.763161] ? put_timespec64+0xaa/0xf0 [ 3324.763167] ? fork_idle+0x270/0x270 [ 3324.763178] ? SyS_clock_gettime+0xf5/0x180 [ 3324.763185] ? SyS_clock_settime+0x1a0/0x1a0 [ 3324.763193] ? do_syscall_64+0x4c/0x640 [ 3324.763199] ? sys_vfork+0x20/0x20 [ 3324.763208] do_syscall_64+0x1d5/0x640 [ 3324.763219] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3324.763226] RIP: 0033:0x45b05a [ 3324.763230] RSP: 002b:00007fffa03d5be0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3324.763238] RAX: ffffffffffffffda RBX: 00007fffa03d5be0 RCX: 000000000045b05a [ 3324.763243] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3324.763247] RBP: 00007fffa03d5c20 R08: 0000000000000001 R09: 0000000000e18940 [ 3324.763251] R10: 0000000000e18c10 R11: 0000000000000246 R12: 0000000000000001 [ 3324.763255] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffa03d5c70 [ 3324.764456] Mem-Info: [ 3324.764474] active_anon:1239107 inactive_anon:10260 isolated_anon:0 [ 3324.764474] active_file:637 inactive_file:672 isolated_file:87 [ 3324.764474] unevictable:0 dirty:70 writeback:22 unstable:0 [ 3324.764474] slab_reclaimable:19452 slab_unreclaimable:143963 [ 3324.764474] mapped:59176 shmem:10429 pagetables:58205 bounce:0 [ 3324.764474] free:22570 free_pcp:398 free_cma:0 [ 3324.764488] Node 0 active_anon:1872412kB inactive_anon:16136kB active_file:780kB inactive_file:824kB unevictable:0kB isolated(anon):0kB isolated(file):228kB mapped:185980kB dirty:100kB writeback:0kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3324.764500] Node 1 active_anon:3084016kB inactive_anon:24904kB active_file:1768kB inactive_file:1864kB unevictable:0kB isolated(anon):0kB isolated(file):120kB mapped:50724kB dirty:180kB writeback:88kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3324.764503] Node 0 DMA free:10428kB min:220kB low:272kB high:324kB active_anon:4376kB inactive_anon:0kB active_file:184kB inactive_file:40kB unevictable:0kB writepending:16kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3324.764520] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3324.764536] Node 0 DMA32 free:32120kB min:36296kB low:45368kB high:54440kB active_anon:1868056kB inactive_anon:16136kB active_file:648kB inactive_file:780kB unevictable:0kB writepending:8kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17568kB pagetables:58336kB bounce:0kB free_pcp:328kB local_pcp:0kB free_cma:0kB [ 3324.764552] lowmem_reserve[]: 0 0 0 0 0 [ 3324.764567] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3324.764583] lowmem_reserve[]: 0 0 0 0 0 [ 3324.764598] Node 1 Normal free:47732kB min:53592kB low:66988kB high:80384kB active_anon:3084080kB inactive_anon:24904kB active_file:1644kB inactive_file:2032kB unevictable:0kB writepending:268kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61248kB pagetables:174480kB bounce:0kB free_pcp:1264kB local_pcp:596kB free_cma:0kB [ 3324.764614] lowmem_reserve[]: 0 0 0 0 0 [ 3324.764630] Node 0 DMA: 13*4kB (MEH) 27*8kB (UMH) 9*16kB (UEH) 7*32kB (UMEH) 3*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10428kB [ 3324.764694] Node 0 DMA32: 902*4kB (UME) 398*8kB (UME) 105*16kB (UME) 142*32kB (UME) 27*64kB (ME) 20*128kB (UM) 8*256kB (UM) 9*512kB (ME) 8*1024kB (UM) 0*2048kB 0*4096kB = 32152kB [ 3324.764753] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3324.766892] Node 1 Normal: 607*4kB (UMEH) 303*8kB (UMEH) 50*16kB (UMEH) 86*32kB (UMEH) 281*64kB (UM) 129*128kB (MH) 7*256kB (M) 4*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 47764kB [ 3324.766958] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3324.766963] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3324.766968] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3324.766973] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3324.766976] 11845 total pagecache pages [ 3324.766984] 0 pages in swap cache [ 3324.766989] Swap cache stats: add 0, delete 0, find 0/0 [ 3324.766991] Free swap = 0kB [ 3324.766994] Total swap = 0kB [ 3324.766999] 1965979 pages RAM [ 3324.767002] 0 pages HighMem/MovableOnly [ 3324.767004] 338455 pages reserved [ 3324.767007] 0 pages cma reserved [ 3324.767012] Out of memory: Kill process 19625 (syz-executor.2) score 1007 or sacrifice child [ 3324.767063] Killed process 19625 (syz-executor.2) total-vm:75236kB, anon-rss:16468kB, file-rss:34816kB, shmem-rss:0kB [ 3325.525187] oom_reaper: reaped process 19625 (syz-executor.2), now anon-rss:0kB, file-rss:24kB, shmem-rss:0kB 04:26:05 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x1f, 0x210001) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x168e049d3c1f03e9, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) connect(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @loopback}, 0x4, 0x2, 0x1, 0x2}}, 0x80) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3326.546290] block nbd3: Attempted send on invalid socket [ 3326.552303] print_req_error: I/O error, dev nbd3, sector 64 [ 3326.560972] block nbd3: Attempted send on invalid socket [ 3326.566482] print_req_error: I/O error, dev nbd3, sector 120 [ 3327.474263] kworker/u4:2 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3327.475518] kworker/u4:2 cpuset=/ mems_allowed=0-1 [ 3327.475537] CPU: 0 PID: 19002 Comm: kworker/u4:2 Not tainted 4.14.181-syzkaller #0 [ 3327.475542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3327.475557] Workqueue: events_unbound call_usermodehelper_exec_work [ 3327.475562] Call Trace: [ 3327.475579] dump_stack+0x1b2/0x283 [ 3327.475591] dump_header+0x178/0x7aa [ 3327.475599] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3327.475607] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3327.475615] ? ___ratelimit+0x2cd/0x522 [ 3327.475624] oom_kill_process.cold+0x10/0xc16 [ 3327.475633] ? lock_downgrade+0x6e0/0x6e0 [ 3327.475644] out_of_memory+0x2d5/0x10f0 [ 3327.475703] ? oom_killer_disable+0x1c0/0x1c0 [ 3327.475710] ? mutex_trylock+0x152/0x1a0 [ 3327.475720] __alloc_pages_nodemask+0x2556/0x2730 [ 3327.475740] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3327.475760] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3327.475768] ? kmem_cache_alloc_node+0x387/0x400 [ 3327.475781] copy_process.part.0+0x26a/0x6fa0 [ 3327.475790] ? __lock_acquire+0x655/0x42a0 [ 3327.475797] ? __lock_acquire+0x655/0x42a0 [ 3327.475806] ? debug_object_activate+0x1dd/0x450 [ 3327.475821] ? umh_complete+0x80/0x80 [ 3327.475829] ? __cleanup_sighand+0x40/0x40 [ 3327.475838] ? mod_timer+0x538/0xe60 [ 3327.475847] ? umh_complete+0x80/0x80 [ 3327.475856] _do_fork+0x180/0xc80 [ 3327.475866] ? fork_idle+0x270/0x270 [ 3327.475872] ? mark_held_locks+0xa6/0xf0 [ 3327.475879] ? _raw_spin_unlock_irq+0x24/0x90 [ 3327.475887] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3327.475894] ? _raw_spin_unlock_irq+0x5a/0x90 [ 3327.475902] ? kernel_sigaction+0x13b/0x200 [ 3327.475910] ? flush_sigqueue_mask.isra.0+0x340/0x340 [ 3327.475916] ? umh_complete+0x80/0x80 [ 3327.475924] kernel_thread+0x2f/0x40 [ 3327.475933] call_usermodehelper_exec_work+0x97/0x210 [ 3327.475942] ? call_usermodehelper_exec_async+0x4c0/0x4c0 [ 3327.475950] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3327.475959] process_one_work+0x7c0/0x14c0 [ 3327.475971] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 3327.475976] ? worker_thread+0x163/0x1080 [ 3327.475984] ? _raw_spin_unlock_irq+0x24/0x90 [ 3327.475994] worker_thread+0x5d7/0x1080 [ 3327.476009] ? process_one_work+0x14c0/0x14c0 [ 3327.476017] kthread+0x30d/0x420 [ 3327.476025] ? kthread_create_on_node+0xd0/0xd0 [ 3327.476033] ret_from_fork+0x24/0x30 [ 3327.476046] Mem-Info: [ 3327.476064] active_anon:1239252 inactive_anon:10261 isolated_anon:0 [ 3327.476064] active_file:500 inactive_file:490 isolated_file:89 [ 3327.476064] unevictable:0 dirty:51 writeback:10 unstable:0 [ 3327.476064] slab_reclaimable:19437 slab_unreclaimable:144349 [ 3327.476064] mapped:58941 shmem:10429 pagetables:58232 bounce:0 [ 3327.476064] free:22370 free_pcp:277 free_cma:0 [ 3327.476077] Node 0 active_anon:1876696kB inactive_anon:16136kB active_file:816kB inactive_file:852kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:185956kB dirty:160kB writeback:0kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3327.476090] Node 1 active_anon:3080312kB inactive_anon:24908kB active_file:1184kB inactive_file:1108kB unevictable:0kB isolated(anon):0kB isolated(file):228kB mapped:49808kB dirty:44kB writeback:40kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3327.476093] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4460kB inactive_anon:0kB active_file:152kB inactive_file:140kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3327.476109] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3327.476127] Node 0 DMA32 free:27416kB min:36296kB low:45368kB high:54440kB active_anon:1872196kB inactive_anon:16136kB active_file:692kB inactive_file:672kB unevictable:0kB writepending:112kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17600kB pagetables:58436kB bounce:0kB free_pcp:340kB local_pcp:0kB free_cma:0kB [ 3327.476143] lowmem_reserve[]: 0 0 0 0 0 [ 3327.476159] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3327.476174] lowmem_reserve[]: 0 0 0 0 0 [ 3327.476191] Node 1 Normal free:51668kB min:53592kB low:66988kB high:80384kB active_anon:3080072kB inactive_anon:24908kB active_file:1432kB inactive_file:1008kB unevictable:0kB writepending:84kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61120kB pagetables:174484kB bounce:0kB free_pcp:768kB local_pcp:632kB free_cma:0kB [ 3327.476207] lowmem_reserve[]: 0 0 0 0 0 [ 3327.476225] Node 0 DMA: 5*4kB (UH) 29*8kB (UMH) 10*16kB (UEH) 6*32kB (UEH) 3*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10396kB [ 3327.476292] Node 0 DMA32: 653*4kB (UME) 156*8kB (UME) 24*16kB (UME) 133*32kB (UME) 27*64kB (ME) 19*128kB (M) 8*256kB (UM) 9*512kB (ME) 8*1024kB (UM) 0*2048kB 0*4096kB = 27508kB [ 3327.476357] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3327.476398] Node 1 Normal: 858*4kB (UMEH) 125*8kB (UMEH) 45*16kB (UMEH) 231*32kB (UMEH) 283*64kB (UM) 130*128kB (MH) 7*256kB (M) 4*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 52160kB [ 3327.476467] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3327.476472] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3327.476477] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3327.482533] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3328.343066] hfs: can't find a HFS filesystem on dev loop4 [ 3328.352403] 10593 total pagecache pages [ 3328.356619] 0 pages in swap cache [ 3328.362069] Swap cache stats: add 0, delete 0, find 0/0 [ 3328.367669] Free swap = 0kB [ 3328.370956] Total swap = 0kB [ 3328.374283] 1965979 pages RAM [ 3328.377560] 0 pages HighMem/MovableOnly [ 3328.381966] 338455 pages reserved [ 3328.385774] 0 pages cma reserved [ 3328.389579] Out of memory: Kill process 19644 (syz-executor.0) score 1007 or sacrifice child [ 3330.176437] modprobe invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3330.266672] modprobe cpuset=/ mems_allowed=0-1 [ 3330.276327] CPU: 1 PID: 19652 Comm: modprobe Not tainted 4.14.181-syzkaller #0 [ 3330.283706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3330.293056] Call Trace: [ 3330.295647] dump_stack+0x1b2/0x283 [ 3330.299271] dump_header+0x178/0x7aa [ 3330.302975] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3330.307985] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3330.313212] ? ___ratelimit+0x2cd/0x522 [ 3330.317177] oom_kill_process.cold+0x10/0xc16 [ 3330.321669] ? lock_downgrade+0x6e0/0x6e0 [ 3330.325806] out_of_memory+0x2d5/0x10f0 [ 3330.329778] ? oom_killer_disable+0x1c0/0x1c0 [ 3330.334325] ? mutex_trylock+0x152/0x1a0 [ 3330.338376] __alloc_pages_nodemask+0x2556/0x2730 [ 3330.343211] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3330.348037] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3330.352863] ? trace_hardirqs_on+0x10/0x10 [ 3330.357097] ? cache_grow_begin+0x3f/0x410 [ 3330.361311] cache_grow_begin+0x91/0x410 [ 3330.365354] fallback_alloc+0x205/0x2b0 [ 3330.369346] kmem_cache_alloc+0x1e5/0x3c0 [ 3330.373481] getname_flags+0xc8/0x550 [ 3330.377259] ? finish_fault+0x290/0x290 [ 3330.381211] user_path_at_empty+0x2a/0x50 [ 3330.385336] vfs_statx+0xd1/0x160 [ 3330.388771] ? vfs_statx_fd+0x90/0x90 [ 3330.392551] ? vm_insert_mixed_mkwrite+0x30/0x30 [ 3330.397287] SyS_newstat+0x83/0xe0 [ 3330.400804] ? SyS_fstat+0xd0/0xd0 [ 3330.404338] ? lock_downgrade+0x6e0/0x6e0 [ 3330.408466] ? up_read+0x17/0x30 [ 3330.411899] ? __do_page_fault+0x19a/0xb50 [ 3330.416111] ? do_syscall_64+0x4c/0x640 [ 3330.420065] ? SyS_fstat+0xd0/0xd0 [ 3330.423597] do_syscall_64+0x1d5/0x640 [ 3330.427483] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3330.432667] RIP: 0033:0x7f6c24430295 [ 3330.436365] RSP: 002b:00007ffe24070ac8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 3330.444062] RAX: ffffffffffffffda RBX: 0000561ee6ac4090 RCX: 00007f6c24430295 [ 3330.451310] RDX: 00007ffe24070b90 RSI: 00007ffe24070b90 RDI: 0000561ee5756e99 [ 3330.458575] RBP: 0000561ee5756e99 R08: 0000000000000003 R09: 0000000000000020 [ 3330.466270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3330.473518] R13: 0000000000000000 R14: 0000561ee595e068 R15: 0000000000000000 [ 3330.483156] Mem-Info: [ 3330.486205] active_anon:1239301 inactive_anon:10261 isolated_anon:0 [ 3330.486205] active_file:24 inactive_file:70 isolated_file:0 [ 3330.486205] unevictable:0 dirty:2 writeback:0 unstable:0 [ 3330.486205] slab_reclaimable:19433 slab_unreclaimable:144101 [ 3330.486205] mapped:58029 shmem:10429 pagetables:58213 bounce:0 [ 3330.486205] free:23679 free_pcp:138 free_cma:0 [ 3330.534337] Node 0 active_anon:1876792kB inactive_anon:16136kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184544kB dirty:4kB writeback:0kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3330.563029] Node 1 active_anon:3080412kB inactive_anon:24908kB active_file:88kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):80kB mapped:47572kB dirty:4kB writeback:0kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3330.590974] Node 0 DMA free:10456kB min:220kB low:272kB high:324kB active_anon:4464kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:16kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3330.628287] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3330.637688] Node 0 DMA32 free:29456kB min:36296kB low:45368kB high:54440kB active_anon:1872328kB inactive_anon:16136kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17568kB pagetables:58444kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3330.689249] lowmem_reserve[]: 0 0 0 0 0 [ 3330.693677] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3330.720042] lowmem_reserve[]: 0 0 0 0 0 [ 3330.724432] Node 1 Normal free:55028kB min:53592kB low:66988kB high:80384kB active_anon:3080412kB inactive_anon:24908kB active_file:196kB inactive_file:504kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61088kB pagetables:174392kB bounce:0kB free_pcp:232kB local_pcp:160kB free_cma:0kB [ 3330.755227] lowmem_reserve[]: 0 0 0 0 0 [ 3330.759820] Node 0 DMA: 6*4kB (UMH) 28*8kB (UMH) 12*16kB (UMEH) 7*32kB (MEH) 3*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10456kB [ 3330.777265] Node 0 DMA32: 1044*4kB (UME) 182*8kB (UME) 25*16kB (UME) 138*32kB (UME) 27*64kB (ME) 19*128kB (M) 8*256kB (UM) 9*512kB (ME) 8*1024kB (UM) 0*2048kB 0*4096kB = 29456kB [ 3330.793871] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3330.804765] Node 1 Normal: 856*4kB (UMEH) 343*8kB (UMEH) 49*16kB (UMEH) 245*32kB (UMEH) 281*64kB (UM) 132*128kB (UMH) 7*256kB (M) 4*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 54536kB [ 3330.828547] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3330.840968] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3330.850128] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3330.859101] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3330.867685] 10500 total pagecache pages [ 3330.872173] 0 pages in swap cache [ 3330.876020] Swap cache stats: add 0, delete 0, find 0/0 [ 3330.882355] Free swap = 0kB [ 3330.885459] Total swap = 0kB [ 3330.888543] 1965979 pages RAM [ 3330.891650] 0 pages HighMem/MovableOnly [ 3330.896199] 338455 pages reserved [ 3330.900268] 0 pages cma reserved [ 3330.903725] Out of memory: Kill process 19659 (syz-executor.0) score 1007 or sacrifice child [ 3330.912413] Killed process 19659 (syz-executor.0) total-vm:75236kB, anon-rss:16568kB, file-rss:34816kB, shmem-rss:0kB [ 3330.982980] oom_reaper: reaped process 19659 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 04:26:11 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x1f, 0x210001) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x168e049d3c1f03e9, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) connect(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @loopback}, 0x4, 0x2, 0x1, 0x2}}, 0x80) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:26:11 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:26:11 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:26:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1800006, 0x10, 0xffffffffffffffff, 0xff) bind(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e21}}, 0x80) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x3c}}, 0x0) 04:26:11 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:26:11 executing program 3: openat$ppp(0xffffffffffffff9c, 0x0, 0x620800, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3331.717083] team0: Invalid MTU 0 requested, hw min 68 04:26:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @loopback, 0x2}}, 0x6, 0x0, 0x0, 0x800, 0x10, 0x4, 0x6}, &(0x7f0000000000)=0x9c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={r2, 0x7}, &(0x7f0000000680)=0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000070040000d8010000d801000008010000d801000000000000a0030000a0030000a0030000a0030000a00300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000050000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000fe880000000000000000000000000001ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000726f73653000000000000000000000006e657464657673696d300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000a001c801000000000000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000010073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000100000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r3 = socket(0x80000000000000a, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000000c40)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB=' '], 0x20}}], 0x1, 0x0) [ 3332.077844] block nbd4: Attempted send on invalid socket [ 3332.083516] print_req_error: I/O error, dev nbd4, sector 64 [ 3332.090240] block nbd4: Attempted send on invalid socket [ 3332.095731] print_req_error: I/O error, dev nbd4, sector 120 04:26:11 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3333.201075] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 3333.426938] kthreadd invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 3333.456209] kthreadd cpuset=/ mems_allowed=0-1 [ 3333.465881] CPU: 1 PID: 2 Comm: kthreadd Not tainted 4.14.181-syzkaller #0 [ 3333.472928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3333.482293] Call Trace: [ 3333.484886] dump_stack+0x1b2/0x283 [ 3333.488516] dump_header+0x178/0x7aa [ 3333.492233] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3333.497256] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3333.502362] ? ___ratelimit+0x2cd/0x522 [ 3333.506344] oom_kill_process.cold+0x10/0xc16 [ 3333.510845] ? lock_downgrade+0x6e0/0x6e0 [ 3333.514998] out_of_memory+0x2d5/0x10f0 [ 3333.518978] ? oom_killer_disable+0x1c0/0x1c0 [ 3333.523475] ? mutex_trylock+0x152/0x1a0 [ 3333.527547] __alloc_pages_nodemask+0x2556/0x2730 [ 3333.532499] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3333.537353] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3333.542374] ? kmem_cache_alloc_node+0x387/0x400 [ 3333.547133] copy_process.part.0+0x26a/0x6fa0 [ 3333.551980] ? trace_hardirqs_on+0x10/0x10 [ 3333.556247] ? __lock_acquire+0x655/0x42a0 [ 3333.560481] ? check_preemption_disabled+0x35/0x240 [ 3333.565498] ? kthread_create_on_node+0xd0/0xd0 [ 3333.570168] ? __cleanup_sighand+0x40/0x40 [ 3333.574403] ? trace_hardirqs_on+0x10/0x10 [ 3333.578660] ? _raw_spin_unlock_irq+0x24/0x90 [ 3333.583152] ? kthread_create_on_node+0xd0/0xd0 [ 3333.587822] _do_fork+0x180/0xc80 [ 3333.591276] ? fork_idle+0x270/0x270 [ 3333.594987] ? kthreadd+0x4bd/0x770 [ 3333.598612] ? lock_acquire+0x170/0x3f0 [ 3333.602584] ? lock_downgrade+0x6e0/0x6e0 [ 3333.606731] ? kthread_create_on_node+0xd0/0xd0 [ 3333.611398] kernel_thread+0x2f/0x40 [ 3333.615224] kthreadd+0x516/0x770 [ 3333.618678] ? kthread_create_on_cpu+0x1b0/0x1b0 [ 3333.623426] ? kthread_create_on_cpu+0x1b0/0x1b0 [ 3333.628176] ? kthread_create_on_cpu+0x1b0/0x1b0 [ 3333.632930] ret_from_fork+0x24/0x30 [ 3333.692085] Mem-Info: [ 3333.694526] active_anon:1241495 inactive_anon:10261 isolated_anon:0 [ 3333.694526] active_file:737 inactive_file:672 isolated_file:61 [ 3333.694526] unevictable:0 dirty:47 writeback:0 unstable:0 [ 3333.694526] slab_reclaimable:19423 slab_unreclaimable:144508 [ 3333.694526] mapped:59226 shmem:10429 pagetables:58317 bounce:0 [ 3333.694526] free:19665 free_pcp:266 free_cma:0 [ 3333.728606] Node 0 active_anon:1877192kB inactive_anon:16136kB active_file:1084kB inactive_file:880kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:186100kB dirty:52kB writeback:0kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3333.781200] Node 1 active_anon:3088904kB inactive_anon:24908kB active_file:1716kB inactive_file:1712kB unevictable:0kB isolated(anon):0kB isolated(file):60kB mapped:50332kB dirty:136kB writeback:0kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3334.251233] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:4424kB inactive_anon:0kB active_file:112kB inactive_file:92kB unevictable:0kB writepending:12kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3334.251254] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3334.251271] Node 0 DMA32 free:29920kB min:36296kB low:45368kB high:54440kB active_anon:1869692kB inactive_anon:16136kB active_file:988kB inactive_file:680kB unevictable:0kB writepending:80kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17568kB pagetables:58352kB bounce:0kB free_pcp:872kB local_pcp:680kB free_cma:0kB [ 3334.251288] lowmem_reserve[]: 0 0 0 0 0 [ 3334.251304] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3334.251318] lowmem_reserve[]: 0 0 0 0 0 [ 3334.251335] Node 1 Normal free:47816kB min:53592kB low:66988kB high:80384kB active_anon:3083864kB inactive_anon:24908kB active_file:1312kB inactive_file:1492kB unevictable:0kB writepending:140kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61152kB pagetables:174820kB bounce:0kB free_pcp:1300kB local_pcp:660kB free_cma:0kB [ 3334.251351] lowmem_reserve[]: 0 0 0 0 0 [ 3334.251366] Node 0 DMA: 22*4kB (MEH) 32*8kB (UMEH) 8*16kB (UH) 4*32kB (MEH) 4*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10456kB [ 3334.251430] Node 0 DMA32: 762*4kB (UME) 321*8kB (UMEH) 88*16kB (UMEH) 123*32kB (MEH) 29*64kB (MEH) 20*128kB (MH) 7*256kB (M) 9*512kB (ME) 8*1024kB (MH) 0*2048kB 0*4096kB = 29968kB [ 3334.251490] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3334.251534] Node 1 Normal: 1083*4kB (UMEH) 317*8kB (UME) 123*16kB (UMEH) 92*32kB (UMEH) 267*64kB (M) 129*128kB (MH) 7*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 48196kB [ 3334.251598] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3334.251603] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3334.251608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3334.251613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3334.251616] 11441 total pagecache pages [ 3334.251625] 0 pages in swap cache [ 3334.251629] Swap cache stats: add 0, delete 0, find 0/0 [ 3334.251632] Free swap = 0kB [ 3334.251634] Total swap = 0kB [ 3334.251640] 1965979 pages RAM [ 3334.251642] 0 pages HighMem/MovableOnly [ 3334.251645] 338455 pages reserved [ 3334.251648] 0 pages cma reserved [ 3334.251654] Out of memory: Kill process 19699 (syz-executor.2) score 1007 or sacrifice child [ 3334.251683] Killed process 19710 (syz-executor.2) total-vm:75368kB, anon-rss:16564kB, file-rss:35704kB, shmem-rss:0kB [ 3334.711266] oom_reaper: reaped process 19710 (syz-executor.2), now anon-rss:0kB, file-rss:32kB, shmem-rss:0kB 04:26:14 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:26:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0xffffffff}, 0x0, 0x0, 0x3, 0x0, 0x4b66, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES16=r2, @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB="44416701497145c60067217430e3a07e53853357449929cc3913b97abe0be7a0401f44552fe233c4f0d4031229fb6fd319a1f2f6ecb51f3235bcdca1886eb2fba2963553b7a67ad74657bf427d87c4e0da7980816fba5e5398179d553a6f286d530fa1d9365770e3b6fd540579cb86899876f6e3208ef517c1c5bfb9e8268aefcd1e723e7e2389291fd3ec2ac5073c646716347dc3d9d5f3e9071c7320391697d266cab1caa05740e6d6ffce0c58f78d06d3b101b1d9a99e0c67baf154b7efe072eb07afce4d9099d1a537c73809cf7e76", @ANYBLOB="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", @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074fe532a6f78014182d6c000000000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0x800000080004103) 04:26:14 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r2, r1, 0x0, 0x800000080004103) 04:26:14 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x1f, 0x210001) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x168e049d3c1f03e9, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) connect(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @loopback}, 0x4, 0x2, 0x1, 0x2}}, 0x80) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3335.610887] block nbd4: Attempted send on invalid socket [ 3335.617445] print_req_error: I/O error, dev nbd4, sector 64 [ 3335.632228] block nbd4: Attempted send on invalid socket [ 3335.637934] print_req_error: I/O error, dev nbd4, sector 120 [ 3336.369880] syz-executor.5 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 3336.369895] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3336.369914] CPU: 1 PID: 19732 Comm: syz-executor.5 Not tainted 4.14.181-syzkaller #0 [ 3336.369919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3336.369922] Call Trace: [ 3336.369944] dump_stack+0x1b2/0x283 [ 3336.369956] dump_header+0x178/0x7aa [ 3336.369964] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3336.369973] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3336.369980] ? ___ratelimit+0x2cd/0x522 [ 3336.369990] oom_kill_process.cold+0x10/0xc16 [ 3336.369998] ? lock_downgrade+0x6e0/0x6e0 [ 3336.370009] out_of_memory+0x2d5/0x10f0 [ 3336.370021] ? oom_killer_disable+0x1c0/0x1c0 [ 3336.370027] ? mutex_trylock+0x152/0x1a0 [ 3336.370037] __alloc_pages_nodemask+0x2556/0x2730 [ 3336.370057] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3336.370075] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3336.370083] ? kmem_cache_alloc_node+0x387/0x400 [ 3336.370094] copy_process.part.0+0x26a/0x6fa0 [ 3336.370104] ? do_raw_spin_unlock+0x164/0x250 [ 3336.370112] ? _raw_spin_unlock+0x29/0x40 [ 3336.370120] ? do_anonymous_page+0x62d/0x17d0 [ 3336.370130] ? finish_fault+0x290/0x290 [ 3336.370138] ? trace_hardirqs_on+0x10/0x10 [ 3336.370149] ? __cleanup_sighand+0x40/0x40 [ 3336.370157] ? vm_insert_mixed_mkwrite+0x30/0x30 [ 3336.370169] _do_fork+0x180/0xc80 [ 3336.370180] ? fork_idle+0x270/0x270 [ 3336.370190] ? up_read+0x17/0x30 [ 3336.370199] ? __do_page_fault+0x19a/0xb50 [ 3336.370207] ? do_syscall_64+0x4c/0x640 [ 3336.370213] ? sys_vfork+0x20/0x20 [ 3336.370220] do_syscall_64+0x1d5/0x640 [ 3336.370231] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3336.370237] RIP: 0033:0x45f3f9 [ 3336.370240] RSP: 002b:00007fff87bcaea8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3336.370248] RAX: ffffffffffffffda RBX: 00007ff622dc2700 RCX: 000000000045f3f9 [ 3336.370251] RDX: 00007ff622dc29d0 RSI: 00007ff622dc1db0 RDI: 00000000003d0f00 [ 3336.370255] RBP: 00007fff87bcb0d0 R08: 00007ff622dc2700 R09: 00007ff622dc2700 [ 3336.370259] R10: 00007ff622dc29d0 R11: 0000000000000202 R12: 0000000000000000 [ 3336.370263] R13: 00007fff87bcaf5f R14: 00007ff622dc29c0 R15: 000000000078bf0c [ 3336.377638] Mem-Info: [ 3337.146036] active_anon:1239579 inactive_anon:10261 isolated_anon:0 [ 3337.146036] active_file:319 inactive_file:321 isolated_file:70 [ 3337.146036] unevictable:0 dirty:26 writeback:39 unstable:0 [ 3337.146036] slab_reclaimable:19399 slab_unreclaimable:144583 [ 3337.146036] mapped:58648 shmem:10429 pagetables:58318 bounce:0 [ 3337.146036] free:22480 free_pcp:0 free_cma:0 [ 3337.234469] Node 0 active_anon:1876408kB inactive_anon:16136kB active_file:276kB inactive_file:280kB unevictable:0kB isolated(anon):0kB isolated(file):56kB mapped:184876kB dirty:88kB writeback:120kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3337.306681] Node 1 active_anon:3081908kB inactive_anon:24908kB active_file:884kB inactive_file:892kB unevictable:0kB isolated(anon):0kB isolated(file):224kB mapped:49216kB dirty:16kB writeback:36kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3337.374908] Node 0 DMA free:10492kB min:220kB low:272kB high:324kB active_anon:4532kB inactive_anon:0kB active_file:40kB inactive_file:20kB unevictable:0kB writepending:8kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3337.401978] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3337.407371] Node 0 DMA32 free:29740kB min:36296kB low:45368kB high:54440kB active_anon:1871876kB inactive_anon:16136kB active_file:240kB inactive_file:220kB unevictable:0kB writepending:200kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17632kB pagetables:58348kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3337.440404] lowmem_reserve[]: 0 0 0 0 0 [ 3337.449212] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3337.476401] lowmem_reserve[]: 0 0 0 0 0 [ 3337.480860] Node 1 Normal free:49688kB min:53592kB low:66988kB high:80384kB active_anon:3081908kB inactive_anon:24908kB active_file:776kB inactive_file:744kB unevictable:0kB writepending:52kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61056kB pagetables:174920kB bounce:0kB free_pcp:844kB local_pcp:416kB free_cma:0kB [ 3337.515978] lowmem_reserve[]: 0 0 0 0 0 [ 3337.522001] Node 0 DMA: 20*4kB (UMEH) 37*8kB (UMEH) 7*16kB (UH) 5*32kB (MEH) 4*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10504kB [ 3337.541958] Node 0 DMA32: 1144*4kB (UME) 187*8kB (UME) 32*16kB (UME) 141*32kB (UME) 28*64kB (UME) 20*128kB (UM) 8*256kB (UM) 10*512kB (UME) 7*1024kB (M) 0*2048kB 0*4096kB = 29784kB [ 3337.570396] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3337.585027] Node 1 Normal: 753*4kB (UMEH) 323*8kB (UME) 9*16kB (UMEH) 248*32kB (UMEH) 281*64kB (M) 130*128kB (UMH) 7*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 50604kB [ 3337.606894] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3337.616212] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3337.629045] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3337.640215] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3337.651107] 10825 total pagecache pages [ 3337.655394] 0 pages in swap cache [ 3337.663366] Swap cache stats: add 0, delete 0, find 0/0 [ 3337.670954] Free swap = 0kB [ 3337.674248] Total swap = 0kB [ 3337.677704] 1965979 pages RAM [ 3337.681112] 0 pages HighMem/MovableOnly [ 3337.685434] 338455 pages reserved [ 3337.694397] 0 pages cma reserved [ 3337.698170] Out of memory: Kill process 19727 (syz-executor.0) score 1007 or sacrifice child [ 3338.044064] oom_reaper: reaped process 19728 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3338.083268] kworker/u4:2 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3338.148885] kworker/u4:2 cpuset=/ mems_allowed=0-1 [ 3338.153868] CPU: 0 PID: 19002 Comm: kworker/u4:2 Not tainted 4.14.181-syzkaller #0 [ 3338.161588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3338.171215] Workqueue: events_unbound call_usermodehelper_exec_work [ 3338.177624] Call Trace: [ 3338.180216] dump_stack+0x1b2/0x283 [ 3338.183847] dump_header+0x178/0x7aa [ 3338.187557] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3338.192585] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3338.197688] ? ___ratelimit+0x2cd/0x522 [ 3338.201660] oom_kill_process.cold+0x10/0xc16 [ 3338.206152] ? lock_downgrade+0x6e0/0x6e0 [ 3338.210305] out_of_memory+0x2d5/0x10f0 [ 3338.214277] ? oom_killer_disable+0x1c0/0x1c0 [ 3338.218769] ? mutex_trylock+0x152/0x1a0 [ 3338.222827] __alloc_pages_nodemask+0x2556/0x2730 [ 3338.227679] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3338.232521] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3338.237538] ? retint_kernel+0x2d/0x2d [ 3338.241435] cache_grow_begin+0x91/0x410 [ 3338.245501] fallback_alloc+0x205/0x2b0 [ 3338.250010] kmem_cache_alloc_node+0xe3/0x400 [ 3338.254508] copy_process.part.0+0x17d5/0x6fa0 [ 3338.259086] ? __lock_acquire+0x655/0x42a0 [ 3338.263315] ? mark_held_locks+0xa6/0xf0 [ 3338.267374] ? umh_complete+0x80/0x80 [ 3338.271168] ? __cleanup_sighand+0x40/0x40 [ 3338.275399] ? __schedule+0x8ae/0x1d70 [ 3338.279285] ? umh_complete+0x80/0x80 [ 3338.283080] _do_fork+0x180/0xc80 [ 3338.286528] ? fork_idle+0x270/0x270 [ 3338.290235] ? mark_held_locks+0xa6/0xf0 [ 3338.294293] ? _raw_spin_unlock_irq+0x24/0x90 [ 3338.298780] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3338.303791] ? _raw_spin_unlock_irq+0x5a/0x90 [ 3338.308287] ? kernel_sigaction+0x13b/0x200 [ 3338.312604] ? flush_sigqueue_mask.isra.0+0x340/0x340 [ 3338.317791] ? umh_complete+0x80/0x80 [ 3338.321586] kernel_thread+0x2f/0x40 [ 3338.325299] call_usermodehelper_exec_work+0x97/0x210 [ 3338.330495] ? call_usermodehelper_exec_async+0x4c0/0x4c0 [ 3338.336039] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3338.341491] process_one_work+0x7c0/0x14c0 [ 3338.345730] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 3338.350403] ? worker_thread+0x163/0x1080 [ 3338.354723] ? _raw_spin_unlock_irq+0x24/0x90 [ 3338.359213] worker_thread+0x5d7/0x1080 [ 3338.363190] ? process_one_work+0x14c0/0x14c0 [ 3338.367690] kthread+0x30d/0x420 [ 3338.371053] ? kthread_create_on_node+0xd0/0xd0 [ 3338.375857] ret_from_fork+0x24/0x30 [ 3338.477479] Mem-Info: [ 3338.479938] active_anon:1239555 inactive_anon:10261 isolated_anon:0 [ 3338.479938] active_file:36 inactive_file:20 isolated_file:0 [ 3338.479938] unevictable:0 dirty:0 writeback:27 unstable:0 [ 3338.479938] slab_reclaimable:19398 slab_unreclaimable:144574 [ 3338.479938] mapped:58047 shmem:10429 pagetables:58318 bounce:0 [ 3338.479938] free:23285 free_pcp:0 free_cma:0 [ 3338.644312] Node 0 active_anon:1876412kB inactive_anon:16136kB active_file:76kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184544kB dirty:0kB writeback:88kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3338.700865] Node 1 active_anon:3081808kB inactive_anon:24908kB active_file:68kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47644kB dirty:0kB writeback:20kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3338.728737] Node 0 DMA free:10520kB min:220kB low:272kB high:324kB active_anon:4540kB inactive_anon:0kB active_file:16kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3338.755299] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3338.760374] Node 0 DMA32 free:30040kB min:36296kB low:45368kB high:54440kB active_anon:1871876kB inactive_anon:16136kB active_file:48kB inactive_file:60kB unevictable:0kB writepending:88kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17632kB pagetables:58348kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3338.789988] lowmem_reserve[]: 0 0 0 0 0 [ 3338.793996] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3338.841597] lowmem_reserve[]: 0 0 0 0 0 [ 3338.845628] Node 1 Normal free:52740kB min:53592kB low:66988kB high:80384kB active_anon:3081792kB inactive_anon:24908kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:60992kB pagetables:174920kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3339.114798] lowmem_reserve[]: 0 0 0 0 0 [ 3339.161632] Node 0 DMA: 7*4kB (UMEH) 33*8kB (UMEH) 9*16kB (UMH) 5*32kB (MEH) 4*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10452kB [ 3339.225373] Node 0 DMA32: 1191*4kB (UME) 197*8kB (UME) 32*16kB (UME) 143*32kB (UME) 28*64kB (UME) 20*128kB (UM) 8*256kB (UM) 10*512kB (UME) 7*1024kB (M) 0*2048kB 0*4096kB = 30116kB [ 3339.423425] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3339.513547] Node 1 Normal: 1213*4kB (UMEH) 352*8kB (UME) 11*16kB (UMEH) 247*32kB (UMEH) 282*64kB (UM) 130*128kB (UMH) 7*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 52740kB [ 3339.645755] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3339.693344] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3339.745241] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3339.801130] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3339.895095] 10461 total pagecache pages [ 3339.922596] 0 pages in swap cache [ 3339.926083] Swap cache stats: add 0, delete 0, find 0/0 [ 3339.969975] Free swap = 0kB [ 3339.973023] Total swap = 0kB [ 3339.976033] 1965979 pages RAM [ 3340.017110] 0 pages HighMem/MovableOnly [ 3340.024363] 338455 pages reserved [ 3340.080929] 0 pages cma reserved [ 3340.084373] Out of memory: Kill process 19743 (syz-executor.0) score 1007 or sacrifice child [ 3340.123805] Killed process 19743 (syz-executor.0) total-vm:75236kB, anon-rss:16568kB, file-rss:34816kB, shmem-rss:0kB [ 3340.275380] oom_reaper: reaped process 19743 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 04:26:22 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:26:22 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r2, r1, 0x0, 0x800000080004103) 04:26:22 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:26:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0xffffffff}, 0x0, 0x0, 0x3, 0x0, 0x4b66, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES16=r2, @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB="44416701497145c60067217430e3a07e53853357449929cc3913b97abe0be7a0401f44552fe233c4f0d4031229fb6fd319a1f2f6ecb51f3235bcdca1886eb2fba2963553b7a67ad74657bf427d87c4e0da7980816fba5e5398179d553a6f286d530fa1d9365770e3b6fd540579cb86899876f6e3208ef517c1c5bfb9e8268aefcd1e723e7e2389291fd3ec2ac5073c646716347dc3d9d5f3e9071c7320391697d266cab1caa05740e6d6ffce0c58f78d06d3b101b1d9a99e0c67baf154b7efe072eb07afce4d9099d1a537c73809cf7e76", @ANYBLOB="48804c674107067060eda85072749eff7efc6f65faed988c4c12bfaf013c4ac667a159249c80f04dfefbb7bb1bf9193ae2310d9ad2832168786e3992093f516b34aeb8ec30581a45f023935f6df9a841b98233cea780c2a14d0f5d34535da3afee58bf50fdd1f4251e72c3d06de66203c3e40094185a5b676f776f0302fd1ec654702ce337397ce192d27e556c27c4f3033fdd81ea36022fa49fb6f33d8b9fc5c01cd396605f68f4234083e051960afcafecbbde4e2ffac5603b9efbc3722b25e2246a9a8222c84154d6cdfa7ea5dfd6032691b6878a36d334cd9e55febccac6b453b6fad9f16708d933706011343289608a741c3e31d504463414c616dce97536a86ac36951c0b69a44919cfddb0ca30d2d87294e4d47ccebfef8082d42d2ea5fc3c23e886e42a13d6b7663addde5", @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074fe532a6f78014182d6c000000000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0x800000080004103) 04:26:22 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:26:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0xffffffff}, 0x0, 0x0, 0x3, 0x0, 0x4b66, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES16=r2, @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB="44416701497145c60067217430e3a07e53853357449929cc3913b97abe0be7a0401f44552fe233c4f0d4031229fb6fd319a1f2f6ecb51f3235bcdca1886eb2fba2963553b7a67ad74657bf427d87c4e0da7980816fba5e5398179d553a6f286d530fa1d9365770e3b6fd540579cb86899876f6e3208ef517c1c5bfb9e8268aefcd1e723e7e2389291fd3ec2ac5073c646716347dc3d9d5f3e9071c7320391697d266cab1caa05740e6d6ffce0c58f78d06d3b101b1d9a99e0c67baf154b7efe072eb07afce4d9099d1a537c73809cf7e76", @ANYBLOB="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", @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074fe532a6f78014182d6c000000000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0x800000080004103) [ 3344.275848] syz-executor.4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3344.363879] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3344.385798] CPU: 0 PID: 19766 Comm: syz-executor.4 Not tainted 4.14.181-syzkaller #0 [ 3344.394657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3344.404722] Call Trace: [ 3344.407331] dump_stack+0x1b2/0x283 [ 3344.411332] dump_header+0x178/0x7aa [ 3344.415211] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3344.420332] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3344.425539] ? ___ratelimit+0x2cd/0x522 [ 3344.429655] oom_kill_process.cold+0x10/0xc16 [ 3344.434433] ? lock_downgrade+0x6e0/0x6e0 [ 3344.438750] out_of_memory+0x2d5/0x10f0 [ 3344.442844] ? oom_killer_disable+0x1c0/0x1c0 [ 3344.447489] ? mutex_trylock+0x152/0x1a0 [ 3344.451720] __alloc_pages_nodemask+0x2556/0x2730 [ 3344.456671] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3344.461504] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3344.468686] ? trace_hardirqs_on+0x10/0x10 [ 3344.472986] ? cache_grow_begin+0x3f/0x410 [ 3344.477317] cache_grow_begin+0x91/0x410 [ 3344.481507] fallback_alloc+0x205/0x2b0 [ 3344.485490] kmem_cache_alloc+0x1e5/0x3c0 [ 3344.489836] getname_flags+0xc8/0x550 [ 3344.493630] SyS_symlinkat+0x6d/0x1f0 [ 3344.497422] ? SyS_unlink+0x20/0x20 [ 3344.501043] ? __do_page_fault+0x19a/0xb50 [ 3344.505271] ? do_syscall_64+0x4c/0x640 [ 3344.509381] ? SyS_symlinkat+0x1f0/0x1f0 [ 3344.513434] do_syscall_64+0x1d5/0x640 [ 3344.517464] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3344.522646] RIP: 0033:0x45c7b7 [ 3344.525889] RSP: 002b:00007ffe2f9a3e98 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 3344.533926] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045c7b7 [ 3344.541694] RDX: 00007ffe2f9a3f37 RSI: 00000000004c256f RDI: 00007ffe2f9a3f20 [ 3344.549102] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000017 [ 3344.556579] R10: 0000000000000075 R11: 0000000000000202 R12: 0000000000000000 [ 3344.564372] R13: 00007ffe2f9a3ed0 R14: 0000000000000000 R15: 00007ffe2f9a3ee0 [ 3344.978273] Mem-Info: [ 3344.983413] active_anon:1239622 inactive_anon:10258 isolated_anon:0 [ 3344.983413] active_file:256 inactive_file:253 isolated_file:44 [ 3344.983413] unevictable:0 dirty:62 writeback:4 unstable:0 [ 3344.983413] slab_reclaimable:19394 slab_unreclaimable:144288 [ 3344.983413] mapped:58456 shmem:10429 pagetables:58364 bounce:0 [ 3344.983413] free:22929 free_pcp:10 free_cma:0 [ 3345.084866] Node 0 active_anon:1877220kB inactive_anon:16136kB active_file:248kB inactive_file:152kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184640kB dirty:180kB writeback:0kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3345.196573] Node 1 active_anon:3081268kB inactive_anon:24896kB active_file:492kB inactive_file:512kB unevictable:0kB isolated(anon):0kB isolated(file):364kB mapped:48684kB dirty:68kB writeback:16kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3345.274007] Node 0 DMA free:10504kB min:220kB low:272kB high:324kB active_anon:4456kB inactive_anon:0kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3345.398401] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3345.409990] Node 0 DMA32 free:28836kB min:36296kB low:45368kB high:54440kB active_anon:1872764kB inactive_anon:16136kB active_file:212kB inactive_file:100kB unevictable:0kB writepending:180kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17632kB pagetables:58352kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3345.481547] lowmem_reserve[]: 0 0 0 0 0 [ 3345.490872] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3345.575855] lowmem_reserve[]: 0 0 0 0 0 [ 3345.593106] Node 1 Normal free:52536kB min:53592kB low:66988kB high:80384kB active_anon:3081268kB inactive_anon:24896kB active_file:660kB inactive_file:700kB unevictable:0kB writepending:84kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61216kB pagetables:175096kB bounce:0kB free_pcp:368kB local_pcp:228kB free_cma:0kB [ 3345.706844] lowmem_reserve[]: 0 0 0 0 0 [ 3345.711247] Node 0 DMA: 17*4kB (UMH) 36*8kB (UMEH) 11*16kB (UMH) 6*32kB (MEH) 3*64kB (ME) 1*128kB (E) 3*256kB (UME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10516kB [ 3345.777394] Node 0 DMA32: 923*4kB (UME) 175*8kB (UME) 29*16kB (UME) 145*32kB (UME) 28*64kB (UME) 20*128kB (UM) 8*256kB (UM) 10*512kB (UME) 7*1024kB (M) 0*2048kB 0*4096kB = 28884kB [ 3345.807798] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3345.819783] Node 1 Normal: 1207*4kB (UMEH) 599*8kB (UME) 124*16kB (UMEH) 213*32kB (UMEH) 281*64kB (M) 130*128kB (UMH) 7*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 55348kB [ 3345.837568] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3345.846585] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3345.855821] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3345.871519] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3345.881877] 10500 total pagecache pages [ 3345.891943] 0 pages in swap cache [ 3345.898666] Swap cache stats: add 0, delete 0, find 0/0 [ 3345.904860] Free swap = 0kB [ 3345.908953] Total swap = 0kB [ 3345.913038] 1965979 pages RAM [ 3345.918583] 0 pages HighMem/MovableOnly [ 3345.924023] 338455 pages reserved [ 3345.928669] 0 pages cma reserved [ 3345.933842] Out of memory: Kill process 19771 (syz-executor.3) score 1007 or sacrifice child [ 3346.008651] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3346.059247] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3346.064498] CPU: 1 PID: 19770 Comm: syz-executor.5 Not tainted 4.14.181-syzkaller #0 [ 3346.073042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3346.082926] Call Trace: [ 3346.085730] dump_stack+0x1b2/0x283 [ 3346.089404] dump_header+0x178/0x7aa [ 3346.093151] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3346.098274] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3346.103673] ? ___ratelimit+0x2cd/0x522 [ 3346.107677] oom_kill_process.cold+0x10/0xc16 [ 3346.112625] ? lock_downgrade+0x6e0/0x6e0 [ 3346.117050] out_of_memory+0x2d5/0x10f0 [ 3346.121131] ? oom_killer_disable+0x1c0/0x1c0 [ 3346.125732] ? mutex_trylock+0x152/0x1a0 [ 3346.129935] __alloc_pages_nodemask+0x2556/0x2730 [ 3346.134798] ? __schedule+0x8ae/0x1d70 [ 3346.138705] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3346.143577] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3346.148434] ? retint_kernel+0x2d/0x2d [ 3346.152548] cache_grow_begin+0x91/0x410 [ 3346.156796] fallback_alloc+0x205/0x2b0 [ 3346.161089] kmem_cache_alloc+0x1e5/0x3c0 [ 3346.165345] getname_flags+0xc8/0x550 [ 3346.169267] do_sys_open+0x202/0x3e0 [ 3346.173342] ? filp_open+0x60/0x60 [ 3346.176904] ? __do_page_fault+0x19a/0xb50 [ 3346.181175] ? do_syscall_64+0x4c/0x640 [ 3346.185349] ? do_sys_open+0x3e0/0x3e0 [ 3346.189366] do_syscall_64+0x1d5/0x640 [ 3346.193275] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3346.198760] RIP: 0033:0x416800 [ 3346.202265] RSP: 002b:00007fff87bcac88 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 3346.210205] RAX: ffffffffffffffda RBX: 00007fff87bcacb4 RCX: 0000000000416800 [ 3346.217486] RDX: 00007fff87bcacba RSI: 0000000000080001 RDI: 00000000004c2597 [ 3346.224771] RBP: 00007fff87bcacb0 R08: 0000000000000000 R09: 0000000000000004 [ 3346.232225] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000004c2597 [ 3346.240016] R13: 00007fff87bcb1d0 R14: 0000000000000000 R15: 00007fff87bcb1e0 [ 3346.253005] Mem-Info: [ 3346.255480] active_anon:1239897 inactive_anon:10258 isolated_anon:0 [ 3346.255480] active_file:33 inactive_file:125 isolated_file:25 [ 3346.255480] unevictable:0 dirty:4 writeback:0 unstable:0 [ 3346.255480] slab_reclaimable:19394 slab_unreclaimable:143916 [ 3346.255480] mapped:58187 shmem:10429 pagetables:58364 bounce:0 [ 3346.255480] free:23185 free_pcp:108 free_cma:0 [ 3346.296877] Node 0 active_anon:1877220kB inactive_anon:16136kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184544kB dirty:0kB writeback:0kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3346.329428] Node 1 active_anon:3082368kB inactive_anon:24896kB active_file:96kB inactive_file:148kB unevictable:0kB isolated(anon):0kB isolated(file):100kB mapped:47804kB dirty:16kB writeback:0kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3346.362011] Node 0 DMA free:10456kB min:220kB low:272kB high:324kB active_anon:4456kB inactive_anon:0kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3346.395813] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3346.401421] Node 0 DMA32 free:28984kB min:36296kB low:45368kB high:54440kB active_anon:1872764kB inactive_anon:16136kB active_file:56kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17632kB pagetables:58352kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3346.437101] lowmem_reserve[]: 0 0 0 0 0 [ 3346.441198] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3346.473013] lowmem_reserve[]: 0 0 0 0 0 [ 3346.477091] Node 1 Normal free:53300kB min:53592kB low:66988kB high:80384kB active_anon:3082276kB inactive_anon:24896kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61216kB pagetables:175096kB bounce:0kB free_pcp:524kB local_pcp:8kB free_cma:0kB [ 3346.508561] lowmem_reserve[]: 0 0 0 0 0 [ 3346.512874] Node 0 DMA: 6*4kB (UMH) 34*8kB (UMEH) 11*16kB (UMH) 6*32kB (MEH) 3*64kB (ME) 1*128kB (E) 3*256kB (UME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10456kB [ 3346.529707] Node 0 DMA32: 958*4kB (UME) 175*8kB (UME) 31*16kB (UME) 145*32kB (UME) 28*64kB (UME) 20*128kB (UM) 8*256kB (UM) 10*512kB (UME) 7*1024kB (M) 0*2048kB 0*4096kB = 29056kB [ 3346.549132] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3346.560386] Node 1 Normal: 843*4kB (UMEH) 618*8kB (UME) 124*16kB (UMEH) 212*32kB (UMEH) 281*64kB (M) 130*128kB (UMH) 7*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 54012kB [ 3346.577506] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3346.587001] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3346.595928] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3346.605720] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3346.614648] 10484 total pagecache pages [ 3346.618833] 0 pages in swap cache [ 3346.622708] Swap cache stats: add 0, delete 0, find 0/0 [ 3346.629418] Free swap = 0kB [ 3346.632702] Total swap = 0kB [ 3346.635845] 1965979 pages RAM [ 3346.639044] 0 pages HighMem/MovableOnly [ 3346.643016] 338455 pages reserved [ 3346.650373] 0 pages cma reserved [ 3346.654038] Out of memory: Kill process 19784 (syz-executor.3) score 1007 or sacrifice child [ 3346.663334] Killed process 19784 (syz-executor.3) total-vm:75236kB, anon-rss:16564kB, file-rss:34816kB, shmem-rss:0kB [ 3346.720541] oom_reaper: reaped process 19784 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 04:26:27 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:26:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x3c}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000100)={r5, 0x2a, "b3ffe6fb7a5ca7fd315e14e0ebeb8de0b19a0368dc4589639b2c743fc3eaee2315061a7e534b1d4317e3"}, &(0x7f0000000240)=0x32) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r5}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={r5, 0x892}, 0x8) 04:26:28 executing program 3: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0xffffffff}, 0x0, 0x0, 0x3, 0x0, 0x4b66, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES16=r2, @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB="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", @ANYBLOB="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", @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f3aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074fe532a6f78014182d6c000000000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0x800000080004103) 04:26:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:26:28 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:26:29 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r2, r1, 0x0, 0x800000080004103) [ 3350.421565] syz-executor.4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3350.421579] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3350.421598] CPU: 0 PID: 19805 Comm: syz-executor.4 Not tainted 4.14.181-syzkaller #0 [ 3350.421603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3350.421606] Call Trace: [ 3350.421625] dump_stack+0x1b2/0x283 [ 3350.421637] dump_header+0x178/0x7aa [ 3350.421645] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3350.421654] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3350.421662] ? ___ratelimit+0x2cd/0x522 [ 3350.421671] oom_kill_process.cold+0x10/0xc16 [ 3350.421680] ? lock_downgrade+0x6e0/0x6e0 [ 3350.421691] out_of_memory+0x2d5/0x10f0 [ 3350.421703] ? oom_killer_disable+0x1c0/0x1c0 [ 3350.421709] ? mutex_trylock+0x152/0x1a0 [ 3350.421725] __alloc_pages_nodemask+0x2556/0x2730 [ 3350.421744] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3350.421751] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3350.421759] ? trace_hardirqs_on+0x10/0x10 [ 3350.421776] ? cache_grow_begin+0x3f/0x410 [ 3350.421785] cache_grow_begin+0x91/0x410 [ 3350.421794] fallback_alloc+0x205/0x2b0 [ 3350.421805] kmem_cache_alloc+0x1e5/0x3c0 [ 3350.421815] getname_flags+0xc8/0x550 [ 3350.421826] SyS_symlinkat+0x6d/0x1f0 [ 3350.421835] ? SyS_unlink+0x20/0x20 [ 3350.421844] ? __do_page_fault+0x19a/0xb50 [ 3350.421852] ? do_syscall_64+0x4c/0x640 [ 3350.421859] ? SyS_symlinkat+0x1f0/0x1f0 [ 3350.421868] do_syscall_64+0x1d5/0x640 [ 3350.421879] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3350.421886] RIP: 0033:0x45c7b7 [ 3350.421890] RSP: 002b:00007ffe2f9a3e98 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 3350.421898] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045c7b7 [ 3350.421902] RDX: 00007ffe2f9a3f37 RSI: 00000000004c256f RDI: 00007ffe2f9a3f20 [ 3350.421906] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000017 [ 3350.421910] R10: 0000000000000075 R11: 0000000000000202 R12: 0000000000000000 [ 3350.421914] R13: 00007ffe2f9a3ed0 R14: 0000000000000000 R15: 00007ffe2f9a3ee0 [ 3350.423395] Mem-Info: [ 3350.423415] active_anon:1239522 inactive_anon:10260 isolated_anon:0 [ 3350.423415] active_file:463 inactive_file:528 isolated_file:75 [ 3350.423415] unevictable:0 dirty:22 writeback:0 unstable:0 [ 3350.423415] slab_reclaimable:19358 slab_unreclaimable:144910 [ 3350.423415] mapped:58943 shmem:10429 pagetables:58307 bounce:0 [ 3350.423415] free:21934 free_pcp:175 free_cma:0 [ 3350.423429] Node 0 active_anon:1877728kB inactive_anon:16136kB active_file:308kB inactive_file:524kB unevictable:0kB isolated(anon):0kB isolated(file):84kB mapped:185164kB dirty:56kB writeback:0kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3350.423441] Node 1 active_anon:3080360kB inactive_anon:24904kB active_file:1544kB inactive_file:1588kB unevictable:0kB isolated(anon):0kB isolated(file):216kB mapped:50608kB dirty:32kB writeback:0kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3350.423444] Node 0 DMA free:10404kB min:220kB low:272kB high:324kB active_anon:4448kB inactive_anon:0kB active_file:64kB inactive_file:88kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:16kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3350.423461] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3350.423477] Node 0 DMA32 free:27276kB min:36296kB low:45368kB high:54440kB active_anon:1873320kB inactive_anon:16136kB active_file:244kB inactive_file:436kB unevictable:0kB writepending:56kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17664kB pagetables:58440kB bounce:0kB free_pcp:228kB local_pcp:0kB free_cma:0kB [ 3350.423493] lowmem_reserve[]: 0 0 0 0 0 [ 3350.423508] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3350.423522] lowmem_reserve[]: 0 0 0 0 0 [ 3350.423538] Node 1 Normal free:50056kB min:53592kB low:66988kB high:80384kB active_anon:3079916kB inactive_anon:24904kB active_file:1916kB inactive_file:1492kB unevictable:0kB writepending:32kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61024kB pagetables:174772kB bounce:0kB free_pcp:472kB local_pcp:248kB free_cma:0kB [ 3350.423554] lowmem_reserve[]: 0 0 0 0 0 [ 3350.423570] Node 0 DMA: 6*4kB (UMH) 32*8kB (UMEH) 8*16kB (UMH) 6*32kB (MEH) 3*64kB (ME) 1*128kB (E) 3*256kB (UME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10392kB [ 3350.423634] Node 0 DMA32: 621*4kB (UME) 178*8kB (UME) 25*16kB (UME) 141*32kB (UME) 28*64kB (UME) 19*128kB (M) 8*256kB (UM) 10*512kB (UME) 7*1024kB (M) 0*2048kB 0*4096kB = 27380kB [ 3350.423694] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3350.423732] Node 1 Normal: 1023*4kB (UMEH) 143*8kB (UME) 15*16kB (UMEH) 217*32kB (UMEH) 281*64kB (M) 130*128kB (UMH) 6*256kB (M) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 49604kB [ 3350.423794] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3350.423799] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3350.423804] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3350.423809] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3350.423812] 11520 total pagecache pages [ 3350.423820] 0 pages in swap cache [ 3350.423825] Swap cache stats: add 0, delete 0, find 0/0 [ 3350.423828] Free swap = 0kB [ 3350.423831] Total swap = 0kB [ 3350.423836] 1965979 pages RAM [ 3350.423839] 0 pages HighMem/MovableOnly [ 3350.423842] 338455 pages reserved [ 3350.423844] 0 pages cma reserved [ 3350.423850] Out of memory: Kill process 19809 (syz-executor.1) score 1007 or sacrifice child [ 3350.423883] Killed process 19817 (syz-executor.1) total-vm:75236kB, anon-rss:16572kB, file-rss:35876kB, shmem-rss:0kB [ 3351.085412] oom_reaper: reaped process 19817 (syz-executor.1), now anon-rss:0kB, file-rss:56kB, shmem-rss:0kB 04:26:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000507004008000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4], 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r7, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000006c0)={@rand_addr, @broadcast, 0x0}, &(0x7f0000000700)=0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000507004008000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r11], 0x3c}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000e40)={0x614, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0xbc, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0xac2, 0x1, 0x17, 0x8}, {0x3, 0x1, 0xb0, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x101}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xf15}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x58}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x101}}}]}}, {{0x8, 0x1, r2}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x18}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r2}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x315, 0x2e, 0x7, 0xfffffffb}, {0x9, 0x5b, 0x3f, 0x80000000}, {0x9d2f, 0x3c, 0x0, 0x9}, {0xfffd, 0x65, 0x80, 0x2}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3f3}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r7}, {0x154, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0xd130, 0x5, 0x4, 0x85}, {0x3f, 0x5, 0xf8, 0xd2}, {0x20, 0x4, 0x96, 0x3fe}, {0x0, 0x0, 0x1f, 0x7fff}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x614}, 0x1, 0x0, 0x0, 0x24008040}, 0x4000000) 04:26:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:26:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:26:33 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:26:33 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:26:33 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3354.980583] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3355.508132] kworker/u4:8 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3355.508146] kworker/u4:8 cpuset=/ mems_allowed=0-1 [ 3355.508166] CPU: 0 PID: 19873 Comm: kworker/u4:8 Not tainted 4.14.181-syzkaller #0 [ 3355.508171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3355.508174] Call Trace: [ 3355.508193] dump_stack+0x1b2/0x283 [ 3355.508205] dump_header+0x178/0x7aa [ 3355.508213] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3355.508222] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3355.508230] ? ___ratelimit+0x2cd/0x522 [ 3355.508239] oom_kill_process.cold+0x10/0xc16 [ 3355.508248] ? lock_downgrade+0x6e0/0x6e0 [ 3355.508259] out_of_memory+0x2d5/0x10f0 [ 3355.508270] ? oom_killer_disable+0x1c0/0x1c0 [ 3355.508277] ? mutex_trylock+0x152/0x1a0 [ 3355.508287] __alloc_pages_nodemask+0x2556/0x2730 [ 3355.508307] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3355.508316] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3355.508323] ? trace_hardirqs_on+0x10/0x10 [ 3355.508340] ? cache_grow_begin+0x3f/0x410 [ 3355.508349] cache_grow_begin+0x91/0x410 [ 3355.508358] fallback_alloc+0x205/0x2b0 [ 3355.508369] kmem_cache_alloc+0x1e5/0x3c0 [ 3355.508379] getname_kernel+0x4e/0x340 [ 3355.508389] call_usermodehelper_exec_async+0x27b/0x4c0 [ 3355.508396] ? umh_complete+0x80/0x80 [ 3355.508404] ret_from_fork+0x24/0x30 [ 3355.508417] Mem-Info: [ 3355.508441] active_anon:1239992 inactive_anon:10260 isolated_anon:0 [ 3355.508441] active_file:614 inactive_file:659 isolated_file:103 [ 3355.508441] unevictable:0 dirty:1 writeback:0 unstable:0 [ 3355.508441] slab_reclaimable:19307 slab_unreclaimable:144505 [ 3355.508441] mapped:59093 shmem:10429 pagetables:58363 bounce:0 [ 3355.508441] free:21369 free_pcp:163 free_cma:0 [ 3355.508454] Node 0 active_anon:1877900kB inactive_anon:16136kB active_file:456kB inactive_file:424kB unevictable:0kB isolated(anon):0kB isolated(file):44kB mapped:184944kB dirty:0kB writeback:0kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3355.508466] Node 1 active_anon:3082068kB inactive_anon:24904kB active_file:2000kB inactive_file:2212kB unevictable:0kB isolated(anon):0kB isolated(file):368kB mapped:51428kB dirty:4kB writeback:0kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3355.508469] Node 0 DMA free:10416kB min:220kB low:272kB high:324kB active_anon:4484kB inactive_anon:0kB active_file:56kB inactive_file:24kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3355.508485] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3355.508502] Node 0 DMA32 free:27196kB min:36296kB low:45368kB high:54440kB active_anon:1873396kB inactive_anon:16136kB active_file:376kB inactive_file:348kB unevictable:0kB writepending:0kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17792kB pagetables:58340kB bounce:0kB free_pcp:140kB local_pcp:20kB free_cma:0kB [ 3355.508518] lowmem_reserve[]: 0 0 0 0 0 [ 3355.508534] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3355.508548] lowmem_reserve[]: 0 0 0 0 0 [ 3355.508564] Node 1 Normal free:47864kB min:53592kB low:66988kB high:80384kB active_anon:3081624kB inactive_anon:24904kB active_file:1868kB inactive_file:1976kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61280kB pagetables:175108kB bounce:0kB free_pcp:512kB local_pcp:292kB free_cma:0kB [ 3355.508580] lowmem_reserve[]: 0 0 0 0 0 [ 3355.508596] Node 0 DMA: 18*4kB (UMH) 29*8kB (UEH) 8*16kB (UMH) 6*32kB (MEH) 3*64kB (ME) 1*128kB (E) 3*256kB (UME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10416kB [ 3355.510775] Node 0 DMA32: 600*4kB (UE) 184*8kB (UE) 24*16kB (UE) 144*32kB (ME) 27*64kB (ME) 20*128kB (UM) 7*256kB (M) 10*512kB (UME) 7*1024kB (M) 0*2048kB 0*4096kB = 27232kB [ 3355.510835] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3355.510874] Node 1 Normal: 181*4kB (UEH) 349*8kB (UE) 13*16kB (UMEH) 208*32kB (UMEH) 282*64kB (UM) 129*128kB (MH) 7*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 47244kB [ 3355.510936] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3355.510941] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3355.510946] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3355.510951] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3355.510954] 11830 total pagecache pages [ 3355.510962] 0 pages in swap cache [ 3355.510967] Swap cache stats: add 0, delete 0, find 0/0 [ 3355.510969] Free swap = 0kB [ 3355.510972] Total swap = 0kB [ 3355.510977] 1965979 pages RAM [ 3355.510980] 0 pages HighMem/MovableOnly [ 3355.510982] 338455 pages reserved [ 3355.510985] 0 pages cma reserved [ 3355.510991] Out of memory: Kill process 19874 (syz-executor.1) score 1007 or sacrifice child [ 3355.511042] Killed process 19874 (syz-executor.1) total-vm:75236kB, anon-rss:16540kB, file-rss:35720kB, shmem-rss:0kB [ 3356.090123] syz-executor.3 (19836) used greatest stack depth: 22240 bytes left [ 3356.420222] oom_reaper: reaped process 19874 (syz-executor.1), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 3356.472210] bond1: making interface bridge6 the new active one [ 3356.472969] bond1: Enslaving bridge6 as an active interface with an up link [ 3357.131641] block nbd4: Attempted send on invalid socket [ 3357.137226] print_req_error: I/O error, dev nbd4, sector 64 [ 3357.143233] block nbd4: Attempted send on invalid socket [ 3357.148763] print_req_error: I/O error, dev nbd4, sector 120 04:26:36 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3359.150779] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3359.237053] systemd-journal cpuset=/ mems_allowed=0-1 [ 3359.254255] CPU: 0 PID: 3626 Comm: systemd-journal Not tainted 4.14.181-syzkaller #0 [ 3359.262177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3359.271534] Call Trace: [ 3359.274135] dump_stack+0x1b2/0x283 [ 3359.277789] dump_header+0x178/0x7aa [ 3359.281537] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3359.286559] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3359.291658] ? ___ratelimit+0x2cd/0x522 [ 3359.295616] oom_kill_process.cold+0x10/0xc16 [ 3359.300095] ? lock_downgrade+0x6e0/0x6e0 [ 3359.304225] out_of_memory+0x2d5/0x10f0 [ 3359.308205] ? oom_killer_disable+0x1c0/0x1c0 [ 3359.312696] ? mutex_trylock+0x152/0x1a0 [ 3359.316741] __alloc_pages_nodemask+0x2556/0x2730 [ 3359.321570] ? kmemdup+0x23/0x50 [ 3359.324920] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3359.329764] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3359.334616] ? trace_hardirqs_on+0x10/0x10 [ 3359.338838] ? cache_grow_begin+0x3f/0x410 [ 3359.343073] cache_grow_begin+0x91/0x410 [ 3359.347239] fallback_alloc+0x205/0x2b0 [ 3359.351468] kmem_cache_alloc+0x1e5/0x3c0 [ 3359.355627] getname_flags+0xc8/0x550 [ 3359.359428] user_path_at_empty+0x2a/0x50 [ 3359.363744] SyS_faccessat+0x21b/0x680 [ 3359.367622] ? SyS_fallocate+0x80/0x80 [ 3359.371488] ? do_syscall_64+0x4c/0x640 [ 3359.375456] ? SyS_faccessat+0x680/0x680 [ 3359.379498] do_syscall_64+0x1d5/0x640 [ 3359.383467] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3359.388810] RIP: 0033:0x7f79169e89c7 [ 3359.392523] RSP: 002b:00007ffdbfe66508 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 3359.400319] RAX: ffffffffffffffda RBX: 00007ffdbfe69420 RCX: 00007f79169e89c7 [ 3359.407580] RDX: 00007f7917459a00 RSI: 0000000000000000 RDI: 000055abe904f9a3 [ 3359.414829] RBP: 00007ffdbfe66540 R08: 0000000000000000 R09: 0000000000000000 [ 3359.422078] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 3359.429341] R13: 0000000000000000 R14: 00007ffdbfe69420 R15: 00007ffdbfe66a30 [ 3359.765741] Mem-Info: [ 3359.768199] active_anon:1239984 inactive_anon:10260 isolated_anon:0 [ 3359.768199] active_file:191 inactive_file:257 isolated_file:71 [ 3359.768199] unevictable:0 dirty:0 writeback:24 unstable:0 [ 3359.768199] slab_reclaimable:19340 slab_unreclaimable:144110 [ 3359.768199] mapped:58503 shmem:10429 pagetables:58344 bounce:0 [ 3359.768199] free:22825 free_pcp:32 free_cma:0 [ 3359.803518] Node 0 active_anon:1877332kB inactive_anon:16136kB active_file:64kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):28kB mapped:184604kB dirty:0kB writeback:32kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3359.832675] Node 1 active_anon:3082604kB inactive_anon:24904kB active_file:700kB inactive_file:952kB unevictable:0kB isolated(anon):0kB isolated(file):256kB mapped:49408kB dirty:0kB writeback:64kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3359.862344] Node 0 DMA free:10484kB min:220kB low:272kB high:324kB active_anon:4444kB inactive_anon:0kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3359.889450] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3359.894493] Node 0 DMA32 free:28372kB min:36296kB low:45368kB high:54440kB active_anon:1872888kB inactive_anon:16136kB active_file:48kB inactive_file:32kB unevictable:0kB writepending:32kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17696kB pagetables:58448kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3359.925263] lowmem_reserve[]: 0 0 0 0 0 [ 3359.929292] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3359.956014] lowmem_reserve[]: 0 0 0 0 0 [ 3359.960022] Node 1 Normal free:52444kB min:53592kB low:66988kB high:80384kB active_anon:3082604kB inactive_anon:24904kB active_file:1080kB inactive_file:1248kB unevictable:0kB writepending:64kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61056kB pagetables:174924kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3359.990620] lowmem_reserve[]: 0 0 0 0 0 [ 3359.994626] Node 0 DMA: 15*4kB (UMH) 34*8kB (UMH) 14*16kB (UMH) 7*32kB (UMEH) 4*64kB (UME) 2*128kB (UE) 2*256kB (ME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10508kB [ 3360.011426] Node 0 DMA32: 730*4kB (UME) 181*8kB (UME) 54*16kB (UME) 152*32kB (UME) 27*64kB (ME) 20*128kB (UM) 7*256kB (M) 10*512kB (UME) 7*1024kB (M) 0*2048kB 0*4096kB = 28464kB [ 3360.049314] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3360.090094] Node 1 Normal: 1091*4kB (UMEH) 562*8kB (UME) 113*16kB (UMEH) 163*32kB (UMEH) 283*64kB (UM) 130*128kB (UMH) 7*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 52940kB [ 3360.126186] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3360.145223] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3360.165427] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3360.185643] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3360.204359] 10636 total pagecache pages [ 3360.232155] 0 pages in swap cache [ 3360.235701] Swap cache stats: add 0, delete 0, find 0/0 [ 3360.241148] Free swap = 0kB [ 3360.244160] Total swap = 0kB [ 3360.260045] 1965979 pages RAM [ 3360.263173] 0 pages HighMem/MovableOnly [ 3360.267187] 338455 pages reserved [ 3360.270631] 0 pages cma reserved [ 3360.273990] Out of memory: Kill process 19915 (syz-executor.2) score 1007 or sacrifice child [ 3360.282636] Killed process 19915 (syz-executor.2) total-vm:75236kB, anon-rss:16556kB, file-rss:35056kB, shmem-rss:0kB [ 3360.344885] oom_reaper: reaped process 19915 (syz-executor.2), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB 04:26:40 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:26:40 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:26:40 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB="2f6465762f6e62643000d71bea4a66444e785cd5c3c50396cbfe8b004b40451ada3fba9c4e5d388f3247f1310b07410c0316005f24a37d3b00465113c58f8e0b0934af2816fd4a3aec11e2680e38f205336da98792c576def63b13df4f90e12542ec72d45a6540391e0c2875d8fd1d400ea7516b807f31354ec2d62e94cef4fb1d36064092c55d798f0bfaa685138578fff1d8694a79f978a88ff7cca9f4790f32ee6026dee70190ca625473e41d7455dc1fd04ef104fd"], &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x2, 'ipvlan0\x00', {0xaeef}, 0x51}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x6b) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, r2, 0xf01, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x18}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0xb0, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0xbe6fea3238dabe8b}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5e51}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1800}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x8010) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:26:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x3c}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000100)={r5, 0x2a, "b3ffe6fb7a5ca7fd315e14e0ebeb8de0b19a0368dc4589639b2c743fc3eaee2315061a7e534b1d4317e3"}, &(0x7f0000000240)=0x32) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r5}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={r5, 0x892}, 0x8) 04:26:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000507004008000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4], 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r7, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000006c0)={@rand_addr, @broadcast, 0x0}, &(0x7f0000000700)=0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000507004008000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r11], 0x3c}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000e40)={0x614, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0xbc, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0xac2, 0x1, 0x17, 0x8}, {0x3, 0x1, 0xb0, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x101}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xf15}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x58}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x101}}}]}}, {{0x8, 0x1, r2}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x18}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r2}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x315, 0x2e, 0x7, 0xfffffffb}, {0x9, 0x5b, 0x3f, 0x80000000}, {0x9d2f, 0x3c, 0x0, 0x9}, {0xfffd, 0x65, 0x80, 0x2}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3f3}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r7}, {0x154, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0xd130, 0x5, 0x4, 0x85}, {0x3f, 0x5, 0xf8, 0xd2}, {0x20, 0x4, 0x96, 0x3fe}, {0x0, 0x0, 0x1f, 0x7fff}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x614}, 0x1, 0x0, 0x0, 0x24008040}, 0x4000000) 04:26:40 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3361.847664] block nbd0: Attempted send on invalid socket [ 3361.853217] print_req_error: I/O error, dev nbd0, sector 64 [ 3361.861326] block nbd0: Attempted send on invalid socket [ 3361.866918] print_req_error: I/O error, dev nbd0, sector 120 04:26:41 executing program 5: [ 3363.000884] block nbd4: Attempted send on invalid socket [ 3363.006521] print_req_error: I/O error, dev nbd4, sector 64 [ 3363.013957] block nbd4: Attempted send on invalid socket [ 3363.019623] print_req_error: I/O error, dev nbd4, sector 120 04:26:42 executing program 0: 04:26:42 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3364.204408] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3364.290197] bond2: making interface bridge7 the new active one [ 3364.303499] bond2: Enslaving bridge7 as an active interface with an up link 04:26:45 executing program 0: 04:26:45 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:26:45 executing program 3: 04:26:45 executing program 5: 04:26:45 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:26:45 executing program 0: 04:26:45 executing program 3: 04:26:46 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x57) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x22f3, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) [ 3368.151028] kworker/u4:7 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3368.168932] kworker/u4:7 cpuset=/ mems_allowed=0-1 [ 3368.174220] CPU: 1 PID: 20008 Comm: kworker/u4:7 Not tainted 4.14.181-syzkaller #0 [ 3368.181930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3368.191285] Call Trace: [ 3368.193901] dump_stack+0x1b2/0x283 [ 3368.197560] dump_header+0x178/0x7aa [ 3368.201270] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3368.206296] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3368.211395] ? ___ratelimit+0x2cd/0x522 [ 3368.215354] oom_kill_process.cold+0x10/0xc16 [ 3368.219829] ? lock_downgrade+0x6e0/0x6e0 [ 3368.223957] out_of_memory+0x2d5/0x10f0 [ 3368.227923] ? oom_killer_disable+0x1c0/0x1c0 [ 3368.232406] ? mutex_trylock+0x152/0x1a0 [ 3368.236462] __alloc_pages_nodemask+0x2556/0x2730 [ 3368.241297] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3368.246124] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3368.251045] ? trace_hardirqs_on+0x10/0x10 [ 3368.255292] ? cache_grow_begin+0x3f/0x410 [ 3368.259507] cache_grow_begin+0x91/0x410 [ 3368.263563] fallback_alloc+0x205/0x2b0 [ 3368.267523] kmem_cache_alloc+0x1e5/0x3c0 [ 3368.271654] getname_kernel+0x4e/0x340 [ 3368.275523] call_usermodehelper_exec_async+0x27b/0x4c0 [ 3368.280880] ? umh_complete+0x80/0x80 [ 3368.284678] ret_from_fork+0x24/0x30 [ 3368.325834] Mem-Info: [ 3368.328583] active_anon:1240003 inactive_anon:10261 isolated_anon:0 [ 3368.328583] active_file:500 inactive_file:509 isolated_file:79 [ 3368.328583] unevictable:0 dirty:9 writeback:0 unstable:0 [ 3368.328583] slab_reclaimable:19458 slab_unreclaimable:143999 [ 3368.328583] mapped:59013 shmem:10429 pagetables:58368 bounce:0 [ 3368.328583] free:22156 free_pcp:93 free_cma:0 [ 3368.366986] Node 0 active_anon:1877864kB inactive_anon:16136kB active_file:84kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184600kB dirty:28kB writeback:0kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3368.401001] Node 1 active_anon:3082148kB inactive_anon:24908kB active_file:1592kB inactive_file:1664kB unevictable:0kB isolated(anon):0kB isolated(file):304kB mapped:51052kB dirty:8kB writeback:0kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3368.435099] Node 0 DMA free:10424kB min:220kB low:272kB high:324kB active_anon:4444kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3368.474512] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3368.480025] Node 0 DMA32 free:27912kB min:36296kB low:45368kB high:54440kB active_anon:1873420kB inactive_anon:16136kB active_file:68kB inactive_file:88kB unevictable:0kB writepending:28kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17696kB pagetables:58356kB bounce:0kB free_pcp:124kB local_pcp:60kB free_cma:0kB [ 3368.514105] lowmem_reserve[]: 0 0 0 0 0 [ 3368.518718] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3368.548692] lowmem_reserve[]: 0 0 0 0 0 [ 3368.553238] Node 1 Normal free:50792kB min:53592kB low:66988kB high:80384kB active_anon:3082148kB inactive_anon:24908kB active_file:1916kB inactive_file:1792kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61216kB pagetables:175112kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB [ 3368.609932] lowmem_reserve[]: 0 0 0 0 0 [ 3368.614348] Node 0 DMA: 10*4kB (MEH) 32*8kB (MEH) 13*16kB (UMH) 4*32kB (MH) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10424kB [ 3368.651953] Node 0 DMA32: 663*4kB (UME) 207*8kB (UME) 34*16kB (UME) 155*32kB (UME) 28*64kB (UME) 19*128kB (M) 7*256kB (M) 10*512kB (UME) 7*1024kB (M) 0*2048kB 0*4096kB = 28116kB [ 3368.692737] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3368.704038] Node 1 Normal: 884*4kB (UMEH) 219*8kB (UME) 240*16kB (UMEH) 198*32kB (UMEH) 281*64kB (M) 129*128kB (MH) 6*256kB (M) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 52520kB [ 3368.727042] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3368.740203] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3368.749394] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3368.762516] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3368.771609] 10954 total pagecache pages [ 3368.779595] 0 pages in swap cache [ 3368.783415] Swap cache stats: add 0, delete 0, find 0/0 [ 3368.792301] Free swap = 0kB [ 3368.799369] Total swap = 0kB [ 3368.802783] 1965979 pages RAM [ 3368.806649] 0 pages HighMem/MovableOnly [ 3368.811046] 338455 pages reserved [ 3368.814868] 0 pages cma reserved [ 3368.822203] Out of memory: Kill process 20013 (syz-executor.2) score 1007 or sacrifice child [ 3368.833261] Killed process 20013 (syz-executor.2) total-vm:75236kB, anon-rss:16556kB, file-rss:35432kB, shmem-rss:0kB [ 3368.925922] oom_reaper: reaped process 20013 (syz-executor.2), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB 04:26:49 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:26:49 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:26:49 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:26:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x8100}, 0x0) 04:26:50 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x2000000000000001, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180), 0x4) 04:26:50 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) fcntl$setlease(r2, 0x400, 0x10) [ 3371.169110] block nbd4: Attempted send on invalid socket [ 3371.174714] print_req_error: I/O error, dev nbd4, sector 64 [ 3371.182712] block nbd4: Attempted send on invalid socket [ 3371.188489] print_req_error: I/O error, dev nbd4, sector 120 [ 3373.141572] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3373.214410] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3373.219619] CPU: 1 PID: 6350 Comm: syz-executor.5 Not tainted 4.14.181-syzkaller #0 [ 3373.227517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3373.236868] Call Trace: [ 3373.239462] dump_stack+0x1b2/0x283 [ 3373.243094] dump_header+0x178/0x7aa [ 3373.246803] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3373.251815] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3373.256919] ? ___ratelimit+0x2cd/0x522 [ 3373.260882] oom_kill_process.cold+0x10/0xc16 [ 3373.265392] ? lock_downgrade+0x6e0/0x6e0 [ 3373.269538] out_of_memory+0x2d5/0x10f0 [ 3373.273506] ? oom_killer_disable+0x1c0/0x1c0 [ 3373.277990] ? mutex_trylock+0x152/0x1a0 [ 3373.282040] __alloc_pages_nodemask+0x2556/0x2730 [ 3373.286886] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3373.291769] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3373.296639] ? trace_hardirqs_on+0x10/0x10 [ 3373.300861] ? __lock_acquire+0x655/0x42a0 [ 3373.305073] ? cache_grow_begin+0x3f/0x410 [ 3373.309294] cache_grow_begin+0x91/0x410 [ 3373.313332] fallback_alloc+0x205/0x2b0 [ 3373.317294] kmem_cache_alloc+0x1e5/0x3c0 [ 3373.321419] getname_flags+0xc8/0x550 [ 3373.325193] ? list_lru_add+0x227/0x490 [ 3373.329219] user_path_at_empty+0x2a/0x50 [ 3373.333412] vfs_statx+0xd1/0x160 [ 3373.336850] ? vfs_statx_fd+0x90/0x90 [ 3373.340644] ? lock_downgrade+0x6e0/0x6e0 [ 3373.344783] SyS_newlstat+0x83/0xe0 [ 3373.348386] ? SyS_newstat+0xe0/0xe0 [ 3373.352077] ? SyS_umount+0x180/0xc00 [ 3373.355865] ? do_rmdir+0x340/0x340 [ 3373.359488] ? __detach_mounts+0x2e0/0x2e0 [ 3373.363818] ? __do_page_fault+0x19a/0xb50 [ 3373.368030] ? do_syscall_64+0x4c/0x640 [ 3373.371993] ? SyS_newstat+0xe0/0xe0 [ 3373.375682] do_syscall_64+0x1d5/0x640 [ 3373.379594] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3373.384760] RIP: 0033:0x45be45 [ 3373.387942] RSP: 002b:00007fff87bca0a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 3373.395628] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045be45 [ 3373.402916] RDX: 00007fff87bca0c0 RSI: 00007fff87bca0c0 RDI: 00007fff87bca150 [ 3373.410175] RBP: 0000000000003446 R08: 0000000000000000 R09: 0000000000000011 [ 3373.417421] R10: 000000000000000a R11: 0000000000000246 R12: 00007fff87bcb1e0 [ 3373.424666] R13: 0000000001d42940 R14: 0000000000000000 R15: 00007fff87bcb1e0 [ 3373.433943] Mem-Info: [ 3373.436826] active_anon:1238255 inactive_anon:10261 isolated_anon:0 [ 3373.436826] active_file:28 inactive_file:56 isolated_file:0 [ 3373.436826] unevictable:0 dirty:0 writeback:1 unstable:0 [ 3373.436826] slab_reclaimable:19487 slab_unreclaimable:143487 [ 3373.436826] mapped:58149 shmem:10429 pagetables:58298 bounce:0 [ 3373.436826] free:25161 free_pcp:243 free_cma:0 [ 3373.470746] Node 0 active_anon:1869444kB inactive_anon:16136kB active_file:8kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184648kB dirty:0kB writeback:0kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3373.517956] Node 1 active_anon:3083976kB inactive_anon:24908kB active_file:540kB inactive_file:608kB unevictable:0kB isolated(anon):0kB isolated(file):212kB mapped:48748kB dirty:0kB writeback:4kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3373.546085] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:4404kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3373.573754] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3373.578850] Node 0 DMA32 free:36080kB min:36296kB low:45368kB high:54440kB active_anon:1865040kB inactive_anon:16136kB active_file:4kB inactive_file:108kB unevictable:0kB writepending:0kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17664kB pagetables:58428kB bounce:0kB free_pcp:304kB local_pcp:0kB free_cma:0kB [ 3373.608289] lowmem_reserve[]: 0 0 0 0 0 [ 3373.612468] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3373.640358] lowmem_reserve[]: 0 0 0 0 0 [ 3373.644929] Node 1 Normal free:54188kB min:53592kB low:66988kB high:80384kB active_anon:3084004kB inactive_anon:24908kB active_file:436kB inactive_file:744kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61152kB pagetables:174760kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 3373.674957] lowmem_reserve[]: 0 0 0 0 0 [ 3373.679340] Node 0 DMA: 14*4kB (UMEH) 35*8kB (UMH) 12*16kB (MH) 4*32kB (MH) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10448kB [ 3373.696412] Node 0 DMA32: 890*4kB (UM) 660*8kB (UME) 259*16kB (UME) 156*32kB (UME) 28*64kB (UME) 19*128kB (M) 7*256kB (M) 10*512kB (UME) 7*1024kB (M) 0*2048kB 0*4096kB = 36280kB [ 3373.713055] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3373.724435] Node 1 Normal: 133*4kB (UMEH) 360*8kB (UME) 281*16kB (UMEH) 280*32kB (UMEH) 281*64kB (M) 129*128kB (MH) 6*256kB (M) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53924kB [ 3373.741828] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3373.751302] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3373.770395] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3373.779949] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3373.790520] 10663 total pagecache pages [ 3373.795356] 0 pages in swap cache [ 3373.799214] Swap cache stats: add 0, delete 0, find 0/0 [ 3373.805763] Free swap = 0kB [ 3373.810180] Total swap = 0kB [ 3373.813564] 1965979 pages RAM [ 3373.816815] 0 pages HighMem/MovableOnly [ 3373.820791] 338455 pages reserved [ 3373.824243] 0 pages cma reserved [ 3373.828302] Out of memory: Kill process 13386 (syz-executor.5) score 1007 or sacrifice child [ 3373.836983] Killed process 13386 (syz-executor.5) total-vm:75236kB, anon-rss:15236kB, file-rss:34816kB, shmem-rss:0kB [ 3373.936462] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3373.949267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3373.956521] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3374.154249] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3374.201330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3374.242289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3374.322236] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3374.354495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3374.392595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3376.560179] modprobe invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3376.583674] modprobe cpuset=/ mems_allowed=0-1 [ 3376.602315] CPU: 0 PID: 20050 Comm: modprobe Not tainted 4.14.181-syzkaller #0 [ 3376.609705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3376.619589] Call Trace: [ 3376.622188] dump_stack+0x1b2/0x283 [ 3376.625825] dump_header+0x178/0x7aa [ 3376.629539] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3376.635004] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3376.640111] ? ___ratelimit+0x2cd/0x522 [ 3376.644105] oom_kill_process.cold+0x10/0xc16 [ 3376.648612] ? lock_downgrade+0x6e0/0x6e0 [ 3376.652743] out_of_memory+0x2d5/0x10f0 [ 3376.656703] ? oom_killer_disable+0x1c0/0x1c0 [ 3376.661198] ? mutex_trylock+0x152/0x1a0 [ 3376.665242] __alloc_pages_nodemask+0x2556/0x2730 [ 3376.670080] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3376.674902] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3376.679744] ? trace_hardirqs_on+0x10/0x10 [ 3376.683969] ? cache_grow_begin+0x3f/0x410 [ 3376.688186] cache_grow_begin+0x91/0x410 [ 3376.692248] fallback_alloc+0x205/0x2b0 [ 3376.696214] kmem_cache_alloc+0x1e5/0x3c0 [ 3376.700365] getname_flags+0xc8/0x550 [ 3376.704172] ? finish_fault+0x290/0x290 [ 3376.708152] user_path_at_empty+0x2a/0x50 [ 3376.712291] vfs_statx+0xd1/0x160 [ 3376.715740] ? vfs_statx_fd+0x90/0x90 [ 3376.719524] ? vm_insert_mixed_mkwrite+0x30/0x30 [ 3376.724286] SyS_newstat+0x83/0xe0 [ 3376.727810] ? SyS_fstat+0xd0/0xd0 [ 3376.731330] ? lock_downgrade+0x6e0/0x6e0 [ 3376.735461] ? up_read+0x17/0x30 [ 3376.738823] ? __do_page_fault+0x19a/0xb50 [ 3376.743041] ? do_syscall_64+0x4c/0x640 [ 3376.746996] ? SyS_fstat+0xd0/0xd0 [ 3376.750594] do_syscall_64+0x1d5/0x640 [ 3376.754491] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3376.759681] RIP: 0033:0x7ffa879e0295 [ 3376.763372] RSP: 002b:00007ffc8004b5c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 3376.771063] RAX: ffffffffffffffda RBX: 000055e752ddc090 RCX: 00007ffa879e0295 [ 3376.778315] RDX: 00007ffc8004b690 RSI: 00007ffc8004b690 RDI: 000055e751801e99 [ 3376.785568] RBP: 000055e751801e99 R08: 0000000000000003 R09: 0000000000000020 [ 3376.792847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3376.800096] R13: 0000000000000000 R14: 000055e751a09068 R15: 0000000000000000 [ 3376.924585] Mem-Info: [ 3376.927050] active_anon:1240322 inactive_anon:10261 isolated_anon:0 [ 3376.927050] active_file:267 inactive_file:274 isolated_file:1 [ 3376.927050] unevictable:0 dirty:22 writeback:3 unstable:0 [ 3376.927050] slab_reclaimable:19437 slab_unreclaimable:143849 [ 3376.927050] mapped:58576 shmem:10429 pagetables:58326 bounce:0 [ 3376.927050] free:22665 free_pcp:34 free_cma:0 [ 3377.014368] Node 0 active_anon:1877892kB inactive_anon:16136kB active_file:64kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:184648kB dirty:16kB writeback:0kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3377.074371] Node 1 active_anon:3083396kB inactive_anon:24908kB active_file:832kB inactive_file:708kB unevictable:0kB isolated(anon):0kB isolated(file):308kB mapped:49456kB dirty:72kB writeback:12kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3377.134358] Node 0 DMA free:10392kB min:220kB low:272kB high:324kB active_anon:4464kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3377.184360] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3377.189429] Node 0 DMA32 free:27764kB min:36296kB low:45368kB high:54440kB active_anon:1873428kB inactive_anon:16136kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:16kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17696kB pagetables:58444kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 3377.254332] lowmem_reserve[]: 0 0 0 0 0 [ 3377.258383] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3377.327247] lowmem_reserve[]: 0 0 0 0 0 [ 3377.336209] Node 1 Normal free:53020kB min:53592kB low:66988kB high:80384kB active_anon:3083396kB inactive_anon:24908kB active_file:500kB inactive_file:1008kB unevictable:0kB writepending:68kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61024kB pagetables:174856kB bounce:0kB free_pcp:216kB local_pcp:64kB free_cma:0kB [ 3377.378446] lowmem_reserve[]: 0 0 0 0 0 [ 3377.382809] Node 0 DMA: 6*4kB (UEH) 32*8kB (UMH) 12*16kB (MH) 4*32kB (MH) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10392kB [ 3377.420278] Node 0 DMA32: 516*4kB (UM) 210*8kB (UME) 25*16kB (UME) 146*32kB (UME) 31*64kB (UME) 19*128kB (M) 9*256kB (M) 10*512kB (UME) 7*1024kB (M) 0*2048kB 0*4096kB = 27824kB [ 3377.460193] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3377.501611] Node 1 Normal: 455*4kB (UMEH) 810*8kB (UME) 276*16kB (UMEH) 128*32kB (UMEH) 281*64kB (M) 129*128kB (MH) 6*256kB (M) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53868kB [ 3377.530460] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3377.539745] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3377.551576] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3377.560513] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3377.569188] 10511 total pagecache pages [ 3377.573155] 0 pages in swap cache [ 3377.577644] Swap cache stats: add 0, delete 0, find 0/0 [ 3377.583016] Free swap = 0kB [ 3377.586189] Total swap = 0kB [ 3377.589212] 1965979 pages RAM [ 3377.592303] 0 pages HighMem/MovableOnly [ 3377.598596] 338455 pages reserved 04:26:51 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:26:54 executing program 5: clone(0x60047fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r0 = gettid() pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace(0x4206, r0) [ 3377.602049] 0 pages cma reserved [ 3377.605483] Out of memory: Kill process 20054 (syz-executor.2) score 1007 or sacrifice child [ 3377.614082] Killed process 20054 (syz-executor.2) total-vm:75236kB, anon-rss:16556kB, file-rss:34840kB, shmem-rss:0kB [ 3377.702333] oom_reaper: reaped process 20054 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3378.261389] block nbd4: Attempted send on invalid socket [ 3378.267072] print_req_error: I/O error, dev nbd4, sector 64 [ 3378.273050] block nbd4: Attempted send on invalid socket [ 3378.278580] print_req_error: I/O error, dev nbd4, sector 120 04:26:58 executing program 3: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x4b60, 0x0) 04:26:58 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:26:58 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') syz_open_procfs(0x0, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:26:58 executing program 0: [ 3380.170426] syz-executor.3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3380.170441] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3380.170459] CPU: 1 PID: 6348 Comm: syz-executor.3 Not tainted 4.14.181-syzkaller #0 [ 3380.170464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3380.170467] Call Trace: [ 3380.170484] dump_stack+0x1b2/0x283 [ 3380.170496] dump_header+0x178/0x7aa [ 3380.170504] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3380.170513] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3380.170521] ? ___ratelimit+0x2cd/0x522 [ 3380.170530] oom_kill_process.cold+0x10/0xc16 [ 3380.170539] ? lock_downgrade+0x6e0/0x6e0 [ 3380.170550] out_of_memory+0x2d5/0x10f0 [ 3380.170561] ? oom_killer_disable+0x1c0/0x1c0 [ 3380.170567] ? mutex_trylock+0x152/0x1a0 [ 3380.170578] __alloc_pages_nodemask+0x2556/0x2730 [ 3380.170596] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3380.170603] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3380.170610] ? trace_hardirqs_on+0x10/0x10 [ 3380.170621] ? avc_has_extended_perms+0xbe0/0xbe0 [ 3380.170633] ? cache_grow_begin+0x3f/0x410 [ 3380.170643] cache_grow_begin+0x91/0x410 [ 3380.170653] fallback_alloc+0x205/0x2b0 [ 3380.170664] kmem_cache_alloc+0x1e5/0x3c0 [ 3380.170675] getname_flags+0xc8/0x550 [ 3380.170686] user_path_mountpoint_at+0x23/0x40 [ 3380.170695] SyS_umount+0x11b/0xc00 [ 3380.170701] ? lock_downgrade+0x6e0/0x6e0 [ 3380.170711] ? __detach_mounts+0x2e0/0x2e0 [ 3380.170717] ? up_read+0x17/0x30 [ 3380.170726] ? __do_page_fault+0x19a/0xb50 [ 3380.170735] ? do_syscall_64+0x4c/0x640 [ 3380.170742] ? __detach_mounts+0x2e0/0x2e0 [ 3380.170750] do_syscall_64+0x1d5/0x640 [ 3380.170762] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3380.170768] RIP: 0033:0x45f457 [ 3380.170773] RSP: 002b:00007fffa03d4b38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 3380.170781] RAX: ffffffffffffffda RBX: 00000000003390f8 RCX: 000000000045f457 [ 3380.170785] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007fffa03d5c70 [ 3380.170789] RBP: 0000000000002b22 R08: 0000000000000001 R09: 0000000000e18940 [ 3380.170793] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffa03d5c70 [ 3380.170798] R13: 00007fffa03d5c60 R14: 0000000000000000 R15: 00007fffa03d5c70 [ 3380.170810] Mem-Info: [ 3380.170827] active_anon:1240322 inactive_anon:10261 isolated_anon:0 [ 3380.170827] active_file:301 inactive_file:572 isolated_file:66 [ 3380.170827] unevictable:0 dirty:16 writeback:0 unstable:0 [ 3380.170827] slab_reclaimable:19455 slab_unreclaimable:144048 [ 3380.170827] mapped:58807 shmem:10429 pagetables:58329 bounce:0 [ 3380.170827] free:21808 free_pcp:124 free_cma:0 [ 3380.170840] Node 0 active_anon:1877356kB inactive_anon:16136kB active_file:196kB inactive_file:272kB unevictable:0kB isolated(anon):0kB isolated(file):136kB mapped:185168kB dirty:16kB writeback:0kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3380.170852] Node 1 active_anon:3083932kB inactive_anon:24908kB active_file:1008kB inactive_file:2016kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:50060kB dirty:48kB writeback:0kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3380.170855] Node 0 DMA free:10392kB min:220kB low:272kB high:324kB active_anon:4464kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3380.170871] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3380.170887] Node 0 DMA32 free:27312kB min:36296kB low:45368kB high:54440kB active_anon:1872892kB inactive_anon:16136kB active_file:196kB inactive_file:272kB unevictable:0kB writepending:16kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17728kB pagetables:58448kB bounce:0kB free_pcp:228kB local_pcp:108kB free_cma:0kB [ 3380.170903] lowmem_reserve[]: 0 0 0 0 0 [ 3380.170919] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3380.170933] lowmem_reserve[]: 0 0 0 0 0 [ 3380.170949] Node 1 Normal free:49528kB min:53592kB low:66988kB high:80384kB active_anon:3083748kB inactive_anon:24908kB active_file:1008kB inactive_file:2340kB unevictable:0kB writepending:48kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61216kB pagetables:174864kB bounce:0kB free_pcp:268kB local_pcp:152kB free_cma:0kB [ 3380.170965] lowmem_reserve[]: 0 0 0 0 0 [ 3380.170980] Node 0 DMA: 6*4kB (UEH) 32*8kB (UMH) 12*16kB (MH) 4*32kB (MH) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10392kB [ 3380.171045] Node 0 DMA32: 506*4kB (UME) 196*8kB (UME) 27*16kB (UME) 137*32kB (UME) 31*64kB (UME) 19*128kB (M) 9*256kB (M) 10*512kB (UME) 7*1024kB (M) 0*2048kB 0*4096kB = 27416kB [ 3380.171110] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3380.171148] Node 1 Normal: 199*4kB (UMEH) 72*8kB (UMEH) 270*16kB (UMEH) 216*32kB (UMEH) 281*64kB (M) 129*128kB (MH) 6*256kB (M) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 49660kB [ 3380.172466] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3380.172471] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3380.172476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3380.172481] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3380.172484] 11411 total pagecache pages [ 3380.172492] 0 pages in swap cache [ 3380.172496] Swap cache stats: add 0, delete 0, find 0/0 [ 3380.172499] Free swap = 0kB [ 3380.172502] Total swap = 0kB [ 3380.172507] 1965979 pages RAM [ 3380.172509] 0 pages HighMem/MovableOnly [ 3380.172512] 338455 pages reserved [ 3380.172515] 0 pages cma reserved [ 3380.172520] Out of memory: Kill process 20068 (syz-executor.2) score 1007 or sacrifice child [ 3380.172555] Killed process 20081 (syz-executor.2) total-vm:75236kB, anon-rss:16556kB, file-rss:35652kB, shmem-rss:0kB [ 3380.991987] oom_reaper: reaped process 20081 (syz-executor.2), now anon-rss:0kB, file-rss:32kB, shmem-rss:0kB [ 3382.103249] block nbd4: Attempted send on invalid socket [ 3382.108851] print_req_error: I/O error, dev nbd4, sector 64 [ 3382.119156] block nbd4: Attempted send on invalid socket [ 3382.125091] print_req_error: I/O error, dev nbd4, sector 120 04:27:02 executing program 0: 04:27:02 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') syz_open_procfs(0x0, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:02 executing program 3: 04:27:02 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:02 executing program 5: 04:27:02 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:02 executing program 3: 04:27:02 executing program 0: 04:27:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000640)=""/148, 0x94}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000540)=[{&(0x7f0000000080)=""/243, 0xf3}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xb) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfffffdbe, 0x0, 0x0, 0x800e00516) shutdown(r3, 0x0) r5 = socket(0x2, 0x1, 0x0) connect$unix(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="000200bcb9"], 0x10) shutdown(r4, 0x0) [ 3382.770744] block nbd4: Attempted send on invalid socket [ 3382.776414] print_req_error: I/O error, dev nbd4, sector 64 [ 3382.783739] block nbd4: Attempted send on invalid socket [ 3382.789673] print_req_error: I/O error, dev nbd4, sector 120 04:27:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000640)=""/148, 0x94}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000700)=[{&(0x7f0000000180)=""/251, 0xfb}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfffffdbe, 0x0, 0x0, 0x800e00516) shutdown(r3, 0x0) r5 = socket(0x2, 0x1, 0x0) connect$unix(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="000200bcb9"], 0x10) shutdown(r4, 0x0) 04:27:02 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') syz_open_procfs(0x0, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:03 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xb, 0x800, 0x8, 0x0, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={r0, &(0x7f0000000040), &(0x7f00000021c0)=""/4096}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001080)={r0, &(0x7f0000000040), &(0x7f0000000080)=""/4096}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x2, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_MARK={0x8}]}, 0x1c}}, 0x0) splice(r0, &(0x7f0000000040)=0x42, r1, &(0x7f00000010c0)=0x1, 0x7f, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000001280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000012c0)=0x14) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x9}, @IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x5}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x68}}, 0x20000040) 04:27:03 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:03 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:03 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3383.979760] block nbd4: Attempted send on invalid socket [ 3383.985346] print_req_error: I/O error, dev nbd4, sector 64 [ 3383.991267] block nbd4: Attempted send on invalid socket [ 3383.997009] print_req_error: I/O error, dev nbd4, sector 120 [ 3384.173557] device geneve2 entered promiscuous mode 04:27:03 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3384.211209] block nbd4: Attempted send on invalid socket [ 3384.216843] print_req_error: I/O error, dev nbd4, sector 64 [ 3384.230030] block nbd4: Attempted send on invalid socket [ 3384.235635] print_req_error: I/O error, dev nbd4, sector 120 04:27:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 04:27:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 04:27:04 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:05 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xd, 0x6, 0x1}, 0x14}}, 0x0) 04:27:06 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:06 executing program 0: unshare(0x6c060000) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="01"], 0x1}}, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0200fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740c00000000d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @private=0xa010100}}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='reno\x00', 0x5) sendto$inet(r3, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) 04:27:07 executing program 5: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000800)=0x14000195e, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000300)={0x0, 0xcff, 0x80000001}, 0x14) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x140006, 0x0) 04:27:07 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x0, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3387.553782] block nbd4: Attempted send on invalid socket [ 3387.559404] print_req_error: I/O error, dev nbd4, sector 64 [ 3387.570146] netlink: 40027 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3387.590329] block nbd4: Attempted send on invalid socket [ 3387.595921] print_req_error: I/O error, dev nbd4, sector 120 [ 3388.267671] IPVS: ftp: loaded support on port[0] = 21 04:27:07 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) getpid() socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r3, r2, 0x0, 0x800000080004103) 04:27:07 executing program 5: sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0x10, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860045ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 04:27:08 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000740)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0xe5, 0x0, 0x0, 0x0, 0x664, 0x3, 0x5}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'ipvlan1\x00', 0x0}) socket(0x10, 0x80002, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') socket(0x10, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @private}, &(0x7f0000000300)=0x10, 0x80000) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="0503002cf015480001020200c52cf7c25975e605b02f0800eb2b2ff0dac8897c6b118777faffffff306609000700c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x1005a, 0x800, 0x0, 0x2f) [ 3389.092423] hfs: can't find a HFS filesystem on dev loop4 04:27:10 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) getpid() socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r3, r2, 0x0, 0x800000080004103) 04:27:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0xf8, 0xc0, 0x88, 0xf8, 0x0, 0x1d8, 0x1a0, 0x1a0, 0x1d8, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x48], 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3e6}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'tunl0\x00', 'veth1_vlan\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d0) 04:27:11 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:11 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000003440)=[{{&(0x7f0000000040)={0x2, 0x4e24, 0x0, @ipv4={[0xff], [], @remote}}, 0x1c, 0x0}}], 0x1, 0x8840) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 04:27:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x20000000) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x41) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dab22ac5e97a04f, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x8, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000340)={@local, 0xffffffff}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @rand_addr=' \x01\x00', @loopback, 0x0, 0x0, 0x0, 0x0, 0x3, 0x82}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000100)) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x50) socketpair(0xf, 0x800, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3fb, 0x2, 0x70bd2b, 0x0, "", ["", "", ""]}, 0x10}}, 0x0) socket$unix(0x1, 0x1, 0x0) 04:27:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r3, 0x5606, 0x5) 04:27:12 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x0, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3393.255346] Cannot find add_set index 998 as target 04:27:12 executing program 5: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) r2 = socket$alg(0x26, 0x5, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000580), 0x10000005c) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x85}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x4}, 0x0) write$P9_RLCREATE(r3, 0x0, 0xffffffffffffff43) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x4139569a) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r7 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) splice(r0, 0x0, r7, 0x0, 0x80000001, 0x0) [ 3393.615863] block nbd4: Attempted send on invalid socket [ 3393.621390] print_req_error: I/O error, dev nbd4, sector 64 [ 3393.627916] block nbd4: Attempted send on invalid socket [ 3393.633476] print_req_error: I/O error, dev nbd4, sector 120 04:27:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r3, 0x1, 0xe, &(0x7f0000000000), 0x4) 04:27:13 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:13 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) getpid() socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r3, r2, 0x0, 0x800000080004103) [ 3395.900449] syz-executor.4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=1000 [ 3395.931318] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3395.940303] CPU: 1 PID: 20326 Comm: syz-executor.4 Not tainted 4.14.181-syzkaller #0 [ 3395.948203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3395.957555] Call Trace: [ 3395.960158] dump_stack+0x1b2/0x283 [ 3395.963804] dump_header+0x178/0x7aa [ 3395.967526] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3395.972575] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3395.977687] ? ___ratelimit+0x2cd/0x522 [ 3395.981712] oom_kill_process.cold+0x10/0xc16 [ 3395.986212] ? lock_downgrade+0x6e0/0x6e0 [ 3395.990370] out_of_memory+0x2d5/0x10f0 [ 3395.994356] ? oom_killer_disable+0x1c0/0x1c0 [ 3395.998853] ? mutex_trylock+0x152/0x1a0 [ 3396.002932] __alloc_pages_nodemask+0x2556/0x2730 [ 3396.007791] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3396.012669] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3396.017603] ? trace_hardirqs_on+0x10/0x10 [ 3396.021848] ? cache_grow_begin+0x3f/0x410 [ 3396.026119] cache_grow_begin+0x91/0x410 [ 3396.030186] fallback_alloc+0x205/0x2b0 [ 3396.034171] kmem_cache_alloc_node+0xe3/0x400 [ 3396.038669] copy_process.part.0+0x17d5/0x6fa0 [ 3396.043236] ? do_raw_spin_unlock+0x164/0x250 [ 3396.047711] ? _raw_spin_unlock+0x29/0x40 [ 3396.051845] ? do_anonymous_page+0x62d/0x17d0 [ 3396.056339] ? finish_fault+0x290/0x290 [ 3396.060306] ? trace_hardirqs_on+0x10/0x10 [ 3396.064544] ? __cleanup_sighand+0x40/0x40 [ 3396.068766] ? vm_insert_mixed_mkwrite+0x30/0x30 [ 3396.073507] _do_fork+0x180/0xc80 [ 3396.076959] ? fork_idle+0x270/0x270 [ 3396.080670] ? up_read+0x17/0x30 [ 3396.084473] ? __do_page_fault+0x19a/0xb50 [ 3396.088693] ? do_syscall_64+0x4c/0x640 [ 3396.092672] ? sys_vfork+0x20/0x20 [ 3396.096212] do_syscall_64+0x1d5/0x640 [ 3396.100084] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3396.105253] RIP: 0033:0x45f3f9 [ 3396.108426] RSP: 002b:00007ffe2f9a3ba8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3396.116202] RAX: ffffffffffffffda RBX: 00007f361b893700 RCX: 000000000045f3f9 [ 3396.123475] RDX: 00007f361b8939d0 RSI: 00007f361b892db0 RDI: 00000000003d0f00 [ 3396.130725] RBP: 00007ffe2f9a3dd0 R08: 00007f361b893700 R09: 00007f361b893700 [ 3396.137999] R10: 00007f361b8939d0 R11: 0000000000000202 R12: 0000000000000000 [ 3396.145261] R13: 00007ffe2f9a3c5f R14: 00007f361b8939c0 R15: 000000000078bf0c [ 3396.153544] Mem-Info: [ 3396.156099] active_anon:1236519 inactive_anon:10261 isolated_anon:0 [ 3396.156099] active_file:105 inactive_file:96 isolated_file:32 [ 3396.156099] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3396.156099] slab_reclaimable:19319 slab_unreclaimable:143856 [ 3396.156099] mapped:58356 shmem:10429 pagetables:58464 bounce:0 [ 3396.156099] free:23340 free_pcp:115 free_cma:0 [ 3396.191145] Node 0 active_anon:1876432kB inactive_anon:16136kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184548kB dirty:0kB writeback:0kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3396.219301] Node 1 active_anon:3069644kB inactive_anon:24908kB active_file:404kB inactive_file:268kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:48780kB dirty:0kB writeback:0kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3396.247694] Node 0 DMA free:10452kB min:220kB low:272kB high:324kB active_anon:4404kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3396.276308] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3396.281535] Node 0 DMA32 free:29308kB min:36296kB low:45368kB high:54440kB active_anon:1872028kB inactive_anon:16136kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17792kB pagetables:58344kB bounce:0kB free_pcp:112kB local_pcp:0kB free_cma:0kB [ 3396.311234] lowmem_reserve[]: 0 0 0 0 0 [ 3396.315462] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3396.340939] lowmem_reserve[]: 0 0 0 0 0 [ 3396.345150] Node 1 Normal free:53220kB min:53592kB low:66988kB high:80384kB active_anon:3069644kB inactive_anon:24908kB active_file:404kB inactive_file:512kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61184kB pagetables:175508kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3396.374959] lowmem_reserve[]: 0 0 0 0 0 [ 3396.379115] Node 0 DMA: 15*4kB (UMEH) 35*8kB (UMH) 12*16kB (MH) 4*32kB (MH) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 3*512kB (UEH) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10452kB [ 3396.402996] Node 0 DMA32: 585*4kB (UME) 216*8kB (UME) 73*16kB (UME) 164*32kB (UME) 32*64kB (UME) 20*128kB (UM) 10*256kB (UM) 9*512kB (ME) 7*1024kB (M) 0*2048kB 0*4096kB = 29428kB [ 3396.435045] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3396.448291] Node 1 Normal: 1378*4kB (MEH) 913*8kB (UMEH) 137*16kB (UMEH) 305*32kB (UMEH) 250*64kB (UM) 102*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53824kB [ 3396.464008] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3396.473067] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3396.481844] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3396.491150] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3396.500053] 10585 total pagecache pages [ 3396.508737] 0 pages in swap cache [ 3396.512731] Swap cache stats: add 0, delete 0, find 0/0 [ 3396.518810] Free swap = 0kB [ 3396.522386] Total swap = 0kB [ 3396.529788] 1965979 pages RAM [ 3396.533494] 0 pages HighMem/MovableOnly [ 3396.538042] 338455 pages reserved [ 3396.542074] 0 pages cma reserved [ 3396.549844] Out of memory: Kill process 12321 (syz-executor.3) score 1007 or sacrifice child [ 3396.570654] Killed process 12321 (syz-executor.3) total-vm:75236kB, anon-rss:15136kB, file-rss:34816kB, shmem-rss:0kB [ 3396.684586] block nbd4: Attempted send on invalid socket [ 3396.690127] print_req_error: I/O error, dev nbd4, sector 64 [ 3396.696913] block nbd4: Attempted send on invalid socket [ 3396.702600] print_req_error: I/O error, dev nbd4, sector 120 [ 3396.736980] oom_reaper: reaped process 12321 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3397.278066] oom_reaper: reaped process 20330 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3397.342363] syz-executor.3 invoked oom-killer: gfp_mask=0x14082c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3397.357738] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3397.363287] CPU: 0 PID: 20339 Comm: syz-executor.3 Not tainted 4.14.181-syzkaller #0 [ 3397.371308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3397.380666] Call Trace: [ 3397.383272] dump_stack+0x1b2/0x283 [ 3397.386899] dump_header+0x178/0x7aa [ 3397.390610] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3397.395630] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3397.400762] ? ___ratelimit+0x2cd/0x522 [ 3397.404741] oom_kill_process.cold+0x10/0xc16 [ 3397.409242] ? lock_downgrade+0x6e0/0x6e0 [ 3397.413393] out_of_memory+0x2d5/0x10f0 [ 3397.417388] ? oom_killer_disable+0x1c0/0x1c0 [ 3397.421881] ? mutex_trylock+0x152/0x1a0 [ 3397.425964] __alloc_pages_nodemask+0x2556/0x2730 [ 3397.430823] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3397.435669] ? vm_unmap_ram+0x410/0x410 [ 3397.439647] ? map_vm_area+0xa4/0xd0 [ 3397.443372] alloc_pages_current+0xe7/0x1e0 [ 3397.447696] __vmalloc_node_range+0x3f9/0x690 [ 3397.452198] vzalloc+0x42/0x50 [ 3397.455389] ? packet_set_ring+0x72c/0x1840 [ 3397.459713] packet_set_ring+0x72c/0x1840 [ 3397.463875] ? tpacket_destruct_skb+0x4d0/0x4d0 [ 3397.468548] ? lock_downgrade+0x6e0/0x6e0 [ 3397.472700] ? __might_fault+0x177/0x1b0 [ 3397.476767] packet_setsockopt+0x41b/0x2810 [ 3397.481089] ? unix_ioctl+0x9e/0x370 [ 3397.484804] ? __fget+0x1ff/0x360 [ 3397.488257] ? sock_has_perm+0x1c0/0x230 [ 3397.492317] ? packet_release+0xb70/0xb70 [ 3397.496469] ? lock_downgrade+0x6e0/0x6e0 [ 3397.500688] ? selinux_netlbl_socket_setsockopt+0x72/0x300 [ 3397.506325] ? selinux_netlbl_sock_rcv_skb+0x3d0/0x3d0 [ 3397.511610] ? __fget+0x226/0x360 [ 3397.515075] ? selinux_socket_setsockopt+0x60/0x80 [ 3397.520018] ? security_socket_setsockopt+0x83/0xb0 [ 3397.525045] SyS_setsockopt+0x110/0x1e0 [ 3397.529029] ? SyS_recv+0x40/0x40 [ 3397.532489] ? SyS_clock_gettime+0xf5/0x180 [ 3397.536816] ? SyS_clock_settime+0x1a0/0x1a0 [ 3397.541230] ? do_syscall_64+0x4c/0x640 [ 3397.545211] ? SyS_recv+0x40/0x40 [ 3397.548671] do_syscall_64+0x1d5/0x640 [ 3397.552568] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3397.557756] RIP: 0033:0x45ca29 [ 3397.561031] RSP: 002b:00007f1abf873c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3397.568750] RAX: ffffffffffffffda RBX: 0000000000505ec0 RCX: 000000000045ca29 [ 3397.576022] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000005 [ 3397.583296] RBP: 000000000078c0e0 R08: 000000000000001c R09: 0000000000000000 [ 3397.590569] R10: 0000000020000040 R11: 0000000000000246 R12: 00000000ffffffff [ 3397.597840] R13: 0000000000000b42 R14: 00000000004cda98 R15: 00007f1abf8746d4 [ 3397.609326] Mem-Info: [ 3397.611904] active_anon:1232546 inactive_anon:10261 isolated_anon:0 [ 3397.611904] active_file:13 inactive_file:33 isolated_file:21 [ 3397.611904] unevictable:0 dirty:2 writeback:17 unstable:0 [ 3397.611904] slab_reclaimable:19329 slab_unreclaimable:143547 [ 3397.611904] mapped:58235 shmem:10429 pagetables:58406 bounce:0 [ 3397.611904] free:13783 free_pcp:30 free_cma:0 [ 3397.647564] Node 0 active_anon:1876428kB inactive_anon:16136kB active_file:0kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184544kB dirty:0kB writeback:8kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3397.676138] Node 1 active_anon:3053728kB inactive_anon:24908kB active_file:116kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48180kB dirty:4kB writeback:64kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3397.703982] Node 0 DMA free:10332kB min:220kB low:272kB high:324kB active_anon:4404kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3397.746868] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3397.751941] Node 0 DMA32 free:17596kB min:36296kB low:45368kB high:54440kB active_anon:1872024kB inactive_anon:16136kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17792kB pagetables:58344kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 3397.831726] lowmem_reserve[]: 0 0 0 0 0 [ 3397.839478] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3397.976930] lowmem_reserve[]: 0 0 0 0 0 [ 3397.981000] Node 1 Normal free:26744kB min:53592kB low:66988kB high:80384kB active_anon:3053720kB inactive_anon:24908kB active_file:160kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61024kB pagetables:175172kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 3398.079805] lowmem_reserve[]: 0 0 0 0 0 [ 3398.129759] Node 0 DMA: 15*4kB (UME) 34*8kB (UM) 13*16kB (UM) 4*32kB (UM) 5*64kB (UME) 1*128kB (E) 2*256kB (ME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10332kB [ 3398.180551] Node 0 DMA32: 80*4kB (ME) 30*8kB (UME) 63*16kB (UME) 161*32kB (UME) 30*64kB (UME) 15*128kB (M) 9*256kB (UM) 9*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 17472kB [ 3398.195206] syz-executor.3: vmalloc: allocation failure, allocated 1916928 of 8392704 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 3398.241616] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3398.246596] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3398.310903] CPU: 0 PID: 20330 Comm: syz-executor.3 Not tainted 4.14.181-syzkaller #0 [ 3398.318933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3398.323415] Node 1 [ 3398.328296] Call Trace: [ 3398.328298] Normal: 1426*4kB [ 3398.330534] dump_stack+0x1b2/0x283 [ 3398.339812] warn_alloc.cold+0x96/0x1af [ 3398.343787] ? zone_watermark_ok_safe+0x250/0x250 [ 3398.348623] ? map_vm_area+0xa4/0xd0 [ 3398.351561] (UME) 1035*8kB (UME) 80*16kB [ 3398.352373] __vmalloc_node_range+0x47c/0x690 [ 3398.352389] vzalloc+0x42/0x50 [ 3398.364178] ? packet_set_ring+0x72c/0x1840 [ 3398.368614] packet_set_ring+0x72c/0x1840 [ 3398.372780] ? tpacket_destruct_skb+0x4d0/0x4d0 [ 3398.378195] ? lock_downgrade+0x6e0/0x6e0 [ 3398.382350] ? __might_fault+0x177/0x1b0 [ 3398.386420] packet_setsockopt+0x41b/0x2810 [ 3398.390743] ? selinux_file_alloc_security+0xaf/0x190 [ 3398.395934] ? __fget+0x1ff/0x360 [ 3398.396135] (UME) [ 3398.399384] ? sock_has_perm+0x1c0/0x230 [ 3398.399387] 187*32kB (UME) [ 3398.401525] ? packet_release+0xb70/0xb70 [ 3398.413243] ? lock_downgrade+0x6e0/0x6e0 [ 3398.417477] ? selinux_netlbl_socket_setsockopt+0x72/0x300 [ 3398.423102] ? selinux_netlbl_sock_rcv_skb+0x3d0/0x3d0 [ 3398.428380] ? __fget+0x226/0x360 [ 3398.431858] ? selinux_socket_setsockopt+0x60/0x80 [ 3398.436790] ? security_socket_setsockopt+0x83/0xb0 [ 3398.440043] 86*64kB (UM) [ 3398.441822] SyS_setsockopt+0x110/0x1e0 [ 3398.441834] ? SyS_recv+0x40/0x40 [ 3398.452003] ? SyS_clock_gettime+0xf5/0x180 [ 3398.456328] ? SyS_clock_settime+0x1a0/0x1a0 [ 3398.460731] ? do_syscall_64+0x4c/0x640 [ 3398.464703] ? SyS_recv+0x40/0x40 [ 3398.468156] do_syscall_64+0x1d5/0x640 [ 3398.472052] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3398.477237] RIP: 0033:0x45ca29 [ 3398.480420] RSP: 002b:00007f1abf8b5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3398.480873] 1*128kB [ 3398.488232] RAX: ffffffffffffffda RBX: 0000000000505ec0 RCX: 000000000045ca29 [ 3398.488238] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000005 [ 3398.488243] RBP: 000000000078bfa0 R08: 000000000000001c R09: 0000000000000000 [ 3398.488247] R10: 0000000020000040 R11: 0000000000000246 R12: 00000000ffffffff [ 3398.488251] R13: 0000000000000b42 R14: 00000000004cda98 R15: 00007f1abf8b66d4 [ 3398.510535] Mem-Info: [ 3398.562588] active_anon:1232537 inactive_anon:10261 isolated_anon:0 [ 3398.562588] active_file:38 inactive_file:0 isolated_file:0 [ 3398.562588] unevictable:0 dirty:1 writeback:0 unstable:0 [ 3398.562588] slab_reclaimable:19329 slab_unreclaimable:143517 [ 3398.562588] mapped:58165 shmem:10429 pagetables:58380 bounce:0 [ 3398.562588] free:13694 free_pcp:58 free_cma:0 [ 3398.596959] (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26880kB [ 3398.636125] Node 0 active_anon:1876428kB inactive_anon:16136kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184544kB dirty:0kB writeback:0kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3398.646950] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3398.736448] Node 1 active_anon:3053720kB inactive_anon:24908kB active_file:104kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48116kB dirty:4kB writeback:0kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3398.742369] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3398.771168] Node 0 DMA free:10332kB min:220kB low:272kB high:324kB active_anon:4404kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3398.826466] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3398.831542] Node 0 DMA32 free:17472kB min:36296kB low:45368kB high:54440kB active_anon:1872024kB inactive_anon:16136kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17792kB pagetables:58344kB bounce:0kB free_pcp:220kB local_pcp:100kB free_cma:0kB [ 3398.889909] lowmem_reserve[]: 0 0 0 0 0 [ 3398.897004] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3398.905209] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3398.929321] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3398.961342] lowmem_reserve[]: 0 0 0 0 0 [ 3398.970465] 10464 total pagecache pages [ 3398.979001] 0 pages in swap cache [ 3398.982461] Swap cache stats: add 0, delete 0, find 0/0 [ 3399.013719] Free swap = 0kB [ 3399.016768] Total swap = 0kB [ 3399.020057] 1965979 pages RAM [ 3399.025736] Node 1 Normal free:26880kB min:53592kB low:66988kB high:80384kB active_anon:3053720kB inactive_anon:24908kB active_file:84kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61024kB pagetables:175172kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 3399.049091] 0 pages HighMem/MovableOnly [ 3399.058980] 338455 pages reserved [ 3399.091124] lowmem_reserve[]: 0 0 0 0 0 [ 3399.092262] 0 pages cma reserved [ 3399.136363] Out of memory: Kill process 13698 (syz-executor.5) score 1007 or sacrifice child [ 3399.137797] Node 0 DMA: 15*4kB (UME) 34*8kB (UM) 13*16kB (UM) 4*32kB (UM) 5*64kB (UME) 1*128kB (E) 2*256kB (ME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10332kB [ 3399.230514] Node 0 DMA32: 80*4kB (ME) 30*8kB (UME) 63*16kB (UME) 161*32kB (UME) 30*64kB (UME) 15*128kB (M) 9*256kB (UM) 9*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 17472kB [ 3399.238512] Killed process 13698 (syz-executor.5) total-vm:75236kB, anon-rss:14948kB, file-rss:34816kB, shmem-rss:0kB [ 3399.292284] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3399.438642] Node 1 Normal: 1438*4kB (ME) 1025*8kB (UME) 82*16kB (UME) 176*32kB (ME) 92*64kB (UM) 4*128kB (UM) 3*256kB (M) 2*512kB (M) 2*1024kB (UM) 3*2048kB (UM) 0*4096kB = 37280kB [ 3399.488668] oom_reaper: reaped process 13698 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3399.598643] systemd-udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 3399.612677] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3399.621621] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3399.659309] systemd-udevd cpuset=/ mems_allowed=0-1 [ 3399.665465] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3399.683264] CPU: 0 PID: 3644 Comm: systemd-udevd Not tainted 4.14.181-syzkaller #0 [ 3399.690999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3399.700354] Call Trace: [ 3399.702971] dump_stack+0x1b2/0x283 [ 3399.706597] dump_header+0x178/0x7aa [ 3399.710311] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3399.715324] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3399.720415] ? ___ratelimit+0x2cd/0x522 [ 3399.724384] oom_kill_process.cold+0x10/0xc16 [ 3399.728881] ? lock_downgrade+0x6e0/0x6e0 [ 3399.733033] out_of_memory+0x2d5/0x10f0 [ 3399.737014] ? oom_killer_disable+0x1c0/0x1c0 [ 3399.742159] ? mutex_trylock+0x152/0x1a0 [ 3399.746500] __alloc_pages_nodemask+0x2556/0x2730 [ 3399.751346] ? SyS_readlinkat+0xa8/0x270 [ 3399.755408] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3399.760243] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3399.765086] ? trace_hardirqs_on+0x10/0x10 [ 3399.769325] ? __lock_acquire+0x655/0x42a0 [ 3399.773584] ? cache_grow_begin+0x3f/0x410 [ 3399.777817] cache_grow_begin+0x91/0x410 [ 3399.781874] fallback_alloc+0x205/0x2b0 [ 3399.785846] kmem_cache_alloc+0x1e5/0x3c0 [ 3399.789993] getname_flags+0xc8/0x550 [ 3399.793798] user_path_at_empty+0x2a/0x50 [ 3399.797948] vfs_statx+0xd1/0x160 [ 3399.801398] ? vfs_statx_fd+0x90/0x90 [ 3399.805194] ? lock_downgrade+0x6e0/0x6e0 [ 3399.809342] SyS_newlstat+0x83/0xe0 [ 3399.812973] ? SyS_newstat+0xe0/0xe0 [ 3399.816689] ? __secure_computing+0xe5/0x3e0 [ 3399.821105] ? syscall_trace_enter+0x486/0xc20 [ 3399.825690] ? SyS_readlinkat+0x17d/0x270 [ 3399.829840] ? syscall_slow_exit_work+0x560/0x560 [ 3399.834690] ? do_syscall_64+0x4c/0x640 [ 3399.838666] ? SyS_newstat+0xe0/0xe0 [ 3399.842381] do_syscall_64+0x1d5/0x640 [ 3399.846275] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3399.851460] RIP: 0033:0x7f87e8357335 [ 3399.855178] RSP: 002b:00007ffc33edade8 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 3399.862892] RAX: ffffffffffffffda RBX: 000055b0e4b32f70 RCX: 00007f87e8357335 [ 3399.870178] RDX: 00007ffc33edae20 RSI: 00007ffc33edae20 RDI: 000055b0e4b31f70 [ 3399.877612] RBP: 00007ffc33edaee0 R08: 00007f87e86162a8 R09: 0000000000001010 [ 3399.886045] R10: 00007f87e8615b58 R11: 0000000000000246 R12: 000055b0e4b31f70 [ 3399.893317] R13: 000055b0e4b31f74 R14: 000055b0e4b18541 R15: 000055b0e4b18544 [ 3399.918735] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3399.951951] 10464 total pagecache pages [ 3399.980717] 0 pages in swap cache [ 3399.989306] Swap cache stats: add 0, delete 0, find 0/0 [ 3400.016565] Free swap = 0kB [ 3400.019614] Total swap = 0kB [ 3400.047559] 1965979 pages RAM [ 3400.050691] 0 pages HighMem/MovableOnly [ 3400.082753] 338455 pages reserved [ 3400.086239] 0 pages cma reserved [ 3400.308565] Mem-Info: [ 3400.311025] active_anon:1228798 inactive_anon:10261 isolated_anon:0 [ 3400.311025] active_file:19 inactive_file:16 isolated_file:0 [ 3400.311025] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3400.311025] slab_reclaimable:19329 slab_unreclaimable:143534 [ 3400.311025] mapped:58165 shmem:10429 pagetables:58324 bounce:0 [ 3400.311025] free:13707 free_pcp:88 free_cma:0 [ 3400.344723] syz-executor.3: vmalloc: allocation failure, allocated 3371008 of 8392704 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 3400.376243] Node 0 active_anon:1874676kB inactive_anon:16136kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184544kB dirty:0kB writeback:0kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3400.412499] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3400.417650] CPU: 1 PID: 20339 Comm: syz-executor.3 Not tainted 4.14.181-syzkaller #0 [ 3400.425522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3400.434876] Call Trace: [ 3400.437465] dump_stack+0x1b2/0x283 [ 3400.441099] warn_alloc.cold+0x96/0x1af [ 3400.445078] ? zone_watermark_ok_safe+0x250/0x250 [ 3400.449929] ? map_vm_area+0xa4/0xd0 [ 3400.453831] __vmalloc_node_range+0x47c/0x690 [ 3400.458329] vzalloc+0x42/0x50 [ 3400.461520] ? packet_set_ring+0x72c/0x1840 [ 3400.465844] packet_set_ring+0x72c/0x1840 [ 3400.469998] ? tpacket_destruct_skb+0x4d0/0x4d0 [ 3400.473948] sock: process `syz-executor.3' is using obsolete setsockopt SO_BSDCOMPAT [ 3400.474749] ? lock_downgrade+0x6e0/0x6e0 [ 3400.486765] ? __might_fault+0x177/0x1b0 [ 3400.488508] Node 1 active_anon:3040516kB inactive_anon:24908kB active_file:72kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48116kB dirty:0kB writeback:0kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3400.490824] packet_setsockopt+0x41b/0x2810 [ 3400.522814] ? unix_ioctl+0x9e/0x370 [ 3400.526530] ? __fget+0x1ff/0x360 [ 3400.529981] ? sock_has_perm+0x1c0/0x230 [ 3400.534040] ? packet_release+0xb70/0xb70 [ 3400.536178] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:4404kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3400.538190] ? lock_downgrade+0x6e0/0x6e0 [ 3400.538203] ? selinux_netlbl_socket_setsockopt+0x72/0x300 [ 3400.564749] lowmem_reserve[]: [ 3400.568859] ? selinux_netlbl_sock_rcv_skb+0x3d0/0x3d0 [ 3400.574472] 0 [ 3400.577546] ? __fget+0x226/0x360 [ 3400.582897] 2559 [ 3400.584673] ? selinux_socket_setsockopt+0x60/0x80 [ 3400.588101] 2559 [ 3400.590148] ? security_socket_setsockopt+0x83/0xb0 [ 3400.595107] 2559 [ 3400.597140] SyS_setsockopt+0x110/0x1e0 [ 3400.602123] 2559 [ 3400.604173] ? SyS_recv+0x40/0x40 [ 3400.604184] ? SyS_clock_gettime+0xf5/0x180 [ 3400.604208] ? SyS_clock_settime+0x1a0/0x1a0 [ 3400.610198] ? do_syscall_64+0x4c/0x640 [ 3400.613645] Node 0 [ 3400.617934] ? SyS_recv+0x40/0x40 [ 3400.622322] DMA32 free:28212kB min:36296kB low:45368kB high:54440kB active_anon:1870272kB inactive_anon:16136kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17792kB pagetables:58236kB bounce:0kB free_pcp:772kB local_pcp:652kB free_cma:0kB [ 3400.622327] lowmem_reserve[]: [ 3400.626285] do_syscall_64+0x1d5/0x640 [ 3400.626302] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3400.626311] RIP: 0033:0x45ca29 [ 3400.628522] 0 [ 3400.631956] RSP: 002b:00007f1abf873c78 EFLAGS: 00000246 [ 3400.660688] 0 [ 3400.663714] ORIG_RAX: 0000000000000036 [ 3400.663721] RAX: ffffffffffffffda RBX: 0000000000505ec0 RCX: 000000000045ca29 [ 3400.663726] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000005 [ 3400.663730] RBP: 000000000078c0e0 R08: 000000000000001c R09: 0000000000000000 [ 3400.663738] R10: 0000000020000040 R11: 0000000000000246 R12: 00000000ffffffff [ 3400.667946] 0 [ 3400.673111] R13: 0000000000000b42 R14: 00000000004cda98 R15: 00007f1abf8746d4 [ 3400.675034] Mem-Info: [ 3400.676306] 0 [ 3400.678102] active_anon:1228798 inactive_anon:10261 isolated_anon:0 [ 3400.678102] active_file:19 inactive_file:16 isolated_file:0 [ 3400.678102] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3400.678102] slab_reclaimable:19329 slab_unreclaimable:143222 [ 3400.678102] mapped:58165 shmem:10429 pagetables:58324 bounce:0 [ 3400.678102] free:23815 free_pcp:379 free_cma:0 [ 3400.767015] Node 0 active_anon:1874676kB inactive_anon:16136kB active_file:0kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184544kB dirty:0kB writeback:4kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3400.784852] 0 [ 3400.796266] Node 1 active_anon:3040532kB inactive_anon:24908kB active_file:396kB inactive_file:2908kB unevictable:0kB isolated(anon):0kB isolated(file):332kB mapped:50064kB dirty:12kB writeback:0kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3400.843291] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3400.871289] Node 0 DMA free:10452kB min:220kB low:272kB high:324kB active_anon:4404kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3400.919658] lowmem_reserve[]: 0 0 0 0 0 [ 3400.931634] Node 1 Normal free:53832kB min:53592kB low:66988kB high:80384kB active_anon:3040532kB inactive_anon:24908kB active_file:900kB inactive_file:1360kB unevictable:0kB writepending:12kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:60992kB pagetables:175144kB bounce:0kB free_pcp:784kB local_pcp:200kB free_cma:0kB [ 3400.935843] lowmem_reserve[]: [ 3400.980846] lowmem_reserve[]: 0 0 0 0 0 [ 3400.988194] Node 0 DMA: 15*4kB (UME) 35*8kB (UM) 12*16kB (UM) 4*32kB (UM) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10452kB [ 3401.004271] Node 0 DMA32: 639*4kB (UME) 253*8kB (UME) 75*16kB (UME) 169*32kB (UM) 37*64kB (UM) 24*128kB (UM) 14*256kB (UM) 10*512kB (UM) 4*1024kB (U) 0*2048kB 0*4096kB = 29428kB [ 3401.005826] 0 [ 3401.020472] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3401.042508] 2559 2559 2559 2559 [ 3401.045919] Node 0 DMA32 free:29364kB min:36296kB low:45368kB high:54440kB active_anon:1870272kB inactive_anon:16136kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:4kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17792kB pagetables:58236kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 3401.098090] Node 1 Normal: 987*4kB (ME) 1422*8kB (UME) 134*16kB (UME) 347*32kB (UME) 250*64kB (UM) 71*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53660kB [ 3401.122523] lowmem_reserve[]: 0 0 0 0 0 [ 3401.126637] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3401.139917] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3401.176560] lowmem_reserve[]: 0 0 0 0 0 [ 3401.176588] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3401.176596] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3401.192467] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3401.236071] 11211 total pagecache pages [ 3401.248865] Node 1 Normal free:53316kB min:53592kB low:66988kB high:80384kB active_anon:3040532kB inactive_anon:24908kB active_file:900kB inactive_file:1840kB unevictable:0kB writepending:12kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:60992kB pagetables:175144kB bounce:0kB free_pcp:860kB local_pcp:636kB free_cma:0kB [ 3401.285926] 0 pages in swap cache [ 3401.289403] Swap cache stats: add 0, delete 0, find 0/0 [ 3401.305837] Free swap = 0kB [ 3401.308875] Total swap = 0kB [ 3401.311885] 1965979 pages RAM [ 3401.325352] lowmem_reserve[]: 0 0 0 0 0 [ 3401.326030] 0 pages HighMem/MovableOnly [ 3401.333822] Node 0 DMA: 15*4kB (UME) 35*8kB (UM) 12*16kB (UM) 4*32kB (UM) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10452kB [ 3401.342427] 338455 pages reserved [ 3401.375695] 0 pages cma reserved [ 3401.379871] Out of memory: Kill process 13372 (syz-executor.0) score 1007 or sacrifice child [ 3401.380059] Node 0 [ 3401.402599] Killed process 13372 (syz-executor.0) total-vm:75236kB, anon-rss:14812kB, file-rss:34816kB, shmem-rss:0kB [ 3401.407541] DMA32: 608*4kB (UME) 253*8kB (UME) 75*16kB (UME) 169*32kB (UM) 37*64kB (UM) 24*128kB (UM) 14*256kB (UM) 10*512kB (UM) 4*1024kB (U) 0*2048kB 0*4096kB = 29304kB [ 3401.459560] oom_reaper: reaped process 13372 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3401.472071] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3401.495360] Node 1 Normal: 1463*4kB (UME) 2224*8kB (UME) 414*16kB (UME) 348*32kB (UME) 251*64kB (UM) 71*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 66556kB 04:27:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e6661740002", 0xd}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x20000000) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x41) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x8, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000340)={@local, 0xffffffff}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @rand_addr=' \x01\x00', @loopback, 0x0, 0x0, 0x0, 0x0, 0x3, 0x82}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000100)) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c1188d5235bc5f0530e0000", @ANYRES16=0x0, @ANYBLOB="200026bd7000fedbdf251200000030000100000008002c000700000005003700010000000800340001000100050038000100000005002e000000000005"], 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x50) socketpair(0xf, 0x800, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3fb, 0x2, 0x70bd2b, 0x0, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$unix(0x1, 0x1, 0x0) 04:27:21 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x20000000) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x41) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dab22ac5e97a04f, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x8, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000340)={@local, 0xffffffff}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @rand_addr=' \x01\x00', @loopback, 0x0, 0x0, 0x0, 0x0, 0x3, 0x82}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000100)) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x50) socketpair(0xf, 0x800, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3fb, 0x2, 0x70bd2b, 0x0, "", ["", "", ""]}, 0x10}}, 0x0) socket$unix(0x1, 0x1, 0x0) 04:27:21 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x0, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3401.595932] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3401.609927] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3401.618664] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3401.630316] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3401.665528] 12773 total pagecache pages [ 3401.685170] block nbd4: Attempted send on invalid socket [ 3401.690706] print_req_error: I/O error, dev nbd4, sector 64 [ 3401.696871] block nbd4: Attempted send on invalid socket [ 3401.702418] print_req_error: I/O error, dev nbd4, sector 120 [ 3401.715056] 0 pages in swap cache [ 3401.727453] Swap cache stats: add 0, delete 0, find 0/0 [ 3401.752173] FAT-fs (loop5): bogus number of reserved sectors [ 3401.767500] Free swap = 0kB [ 3401.770657] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3401.782010] Total swap = 0kB [ 3401.789158] 1965979 pages RAM [ 3401.792667] 0 pages HighMem/MovableOnly [ 3401.796738] 338455 pages reserved 04:27:21 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3401.820109] 0 pages cma reserved [ 3401.979860] block nbd4: Attempted send on invalid socket [ 3401.985430] print_req_error: I/O error, dev nbd4, sector 64 [ 3401.991638] block nbd4: Attempted send on invalid socket [ 3401.997213] print_req_error: I/O error, dev nbd4, sector 120 04:27:21 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3402.056296] FAT-fs (loop5): bogus number of reserved sectors [ 3402.066769] FAT-fs (loop5): Can't find a valid FAT filesystem 04:27:21 executing program 3: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f00000002c0)) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="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", 0x14d, 0x805, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) 04:27:21 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:21 executing program 5: 04:27:21 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:21 executing program 0: [ 3402.225700] block nbd4: Attempted send on invalid socket [ 3402.231236] print_req_error: I/O error, dev nbd4, sector 64 [ 3402.238614] block nbd4: Attempted send on invalid socket [ 3402.244326] print_req_error: I/O error, dev nbd4, sector 120 [ 3402.318805] block nbd4: Attempted send on invalid socket [ 3402.324604] print_req_error: I/O error, dev nbd4, sector 64 [ 3402.333744] block nbd4: Attempted send on invalid socket [ 3402.339289] print_req_error: I/O error, dev nbd4, sector 120 [ 3402.397894] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3402.406913] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3402.422760] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3402.442511] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3402.461722] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3402.476448] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3402.489856] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3402.502716] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3402.517514] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3402.530672] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 04:27:22 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r3, r2, 0x0, 0x800000080004103) 04:27:22 executing program 5: 04:27:22 executing program 0: 04:27:22 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r1, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:22 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:22 executing program 3: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f00000002c0)) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="0fa9f2190522725fbaeabbb63954135da58099c8b79b3bb68e1b0f98f6f374385634f8b2f842b469e2ba4118be1d0dea98f8ffac6f893673d117d7f8ad85c14a971723f1dc3ff95f30e4199b50b30d20833fffd6fbe9f42fd2a837df4373fb0caf24b780c106202dbc9b31eb39f4134f4e427c190d5c53bfafc51e6fe3aab4eaf60d75e3a50bdf8967fa0747794b488b42f7058ee3a5e4d0a12eaab7244a82e38687212078b3ed3c8c9eeb24dabad381d7954faef6ac611a7a0eccef6947f5c056f971c0eb1542ca77163e52e5473ec0fb3dc29926ba142f5a961f9c0477abe073569a2eaa6a99fefd1386340e96586d9bb49d99c353bccde1b66ab56f1867d3bc9997eca1cda8d2443d0d703417a7140925fd83a92e19d06c7d82cfe35b3f4e0f6c2cc47916e08935423358e7ad8f47acf27c4605f2033822e75fd868152d24ca69ce4beb3396d6e57ebce256", 0x14d, 0x805, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) 04:27:22 executing program 5: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f00000002c0)) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="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", 0x14d, 0x805, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) 04:27:22 executing program 0: [ 3403.306338] block nbd4: Attempted send on invalid socket [ 3403.311872] print_req_error: I/O error, dev nbd4, sector 64 [ 3403.318673] block nbd4: Attempted send on invalid socket [ 3403.324269] print_req_error: I/O error, dev nbd4, sector 120 04:27:22 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r1, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:23 executing program 0: [ 3404.052894] kworker/u4:1 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3404.152261] kworker/u4:1 cpuset=/ mems_allowed=0-1 [ 3404.157260] CPU: 0 PID: 20480 Comm: kworker/u4:1 Not tainted 4.14.181-syzkaller #0 [ 3404.165018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3404.174908] Call Trace: [ 3404.177511] dump_stack+0x1b2/0x283 [ 3404.181141] dump_header+0x178/0x7aa [ 3404.184841] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3404.189891] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3404.195353] ? ___ratelimit+0x2cd/0x522 [ 3404.199339] oom_kill_process.cold+0x10/0xc16 [ 3404.203844] ? lock_downgrade+0x6e0/0x6e0 [ 3404.208026] out_of_memory+0x2d5/0x10f0 [ 3404.212016] ? oom_killer_disable+0x1c0/0x1c0 [ 3404.216583] ? mutex_trylock+0x152/0x1a0 [ 3404.220631] __alloc_pages_nodemask+0x2556/0x2730 [ 3404.225466] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3404.230306] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3404.235153] ? trace_hardirqs_on+0x10/0x10 [ 3404.239397] ? cache_grow_begin+0x3f/0x410 [ 3404.244071] cache_grow_begin+0x91/0x410 [ 3404.248117] fallback_alloc+0x205/0x2b0 [ 3404.252077] kmem_cache_alloc+0x1e5/0x3c0 [ 3404.256211] getname_kernel+0x4e/0x340 [ 3404.260083] call_usermodehelper_exec_async+0x27b/0x4c0 [ 3404.265429] ? umh_complete+0x80/0x80 [ 3404.269216] ret_from_fork+0x24/0x30 [ 3404.324378] Mem-Info: [ 3404.344199] active_anon:1226288 inactive_anon:10260 isolated_anon:0 [ 3404.344199] active_file:1054 inactive_file:1179 isolated_file:96 [ 3404.344199] unevictable:0 dirty:95 writeback:22 unstable:0 [ 3404.344199] slab_reclaimable:19180 slab_unreclaimable:146126 [ 3404.344199] mapped:60282 shmem:10429 pagetables:58436 bounce:0 04:27:23 executing program 3: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f00000002c0)) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="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", 0x14d, 0x805, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) 04:27:24 executing program 5: [ 3404.344199] free:32229 free_pcp:501 free_cma:0 [ 3404.386109] Node 0 active_anon:1873056kB inactive_anon:16136kB active_file:36kB inactive_file:228kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184560kB dirty:20kB writeback:12kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 04:27:24 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r3, r2, 0x0, 0x800000080004103) 04:27:24 executing program 0: 04:27:24 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:24 executing program 5: [ 3404.595329] Node 1 active_anon:3033496kB inactive_anon:24904kB active_file:4808kB inactive_file:4984kB unevictable:0kB isolated(anon):0kB isolated(file):232kB mapped:56468kB dirty:360kB writeback:76kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 04:27:24 executing program 0: 04:27:24 executing program 5: 04:27:24 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r3, r2, 0x0, 0x800000080004103) 04:27:24 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r3, r2, 0x0, 0x800000080004103) [ 3405.008293] Node 0 DMA free:10452kB min:220kB low:272kB high:324kB active_anon:4404kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3405.174958] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3405.199935] Node 0 DMA32 free:30624kB min:36296kB low:45368kB high:54440kB active_anon:1871324kB inactive_anon:16136kB active_file:40kB inactive_file:60kB unevictable:0kB writepending:28kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17824kB pagetables:58236kB bounce:0kB free_pcp:308kB local_pcp:236kB free_cma:0kB [ 3405.336649] lowmem_reserve[]: 0 0 0 0 0 [ 3405.340969] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3405.447289] lowmem_reserve[]: 0 0 0 0 0 [ 3405.451873] Node 1 Normal free:76804kB min:53592kB low:66988kB high:80384kB active_anon:3037344kB inactive_anon:24908kB active_file:5956kB inactive_file:4336kB unevictable:0kB writepending:336kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61248kB pagetables:175588kB bounce:0kB free_pcp:776kB local_pcp:656kB free_cma:0kB [ 3405.493570] lowmem_reserve[]: 0 0 0 0 0 [ 3405.527052] Node 0 DMA: 12*4kB (UME) 34*8kB (UM) 14*16kB (UM) 2*32kB (M) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10400kB [ 3405.582848] Node 0 DMA32: 964*4kB (UME) 297*8kB (UME) 40*16kB (UME) 101*32kB (UMEH) 49*64kB (UMH) 23*128kB (UM) 15*256kB (UM) 10*512kB (UMH) 4*1024kB (U) 0*2048kB 0*4096kB = 29240kB [ 3405.622953] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3405.672149] Node 1 Normal: 900*4kB (UMEH) 1590*8kB (UMEH) 342*16kB (MEH) 373*32kB (UMEH) 316*64kB (UMH) 139*128kB (MH) 3*256kB (U) 5*512kB (UM) 3*1024kB (U) 1*2048kB (U) 0*4096kB = 80192kB [ 3405.704654] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3405.718551] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3405.765823] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3405.799694] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3405.825539] 12802 total pagecache pages [ 3405.829577] 0 pages in swap cache [ 3405.846455] Swap cache stats: add 0, delete 0, find 0/0 [ 3405.854518] Free swap = 0kB [ 3405.858107] Total swap = 0kB [ 3405.866827] 1965979 pages RAM [ 3405.871068] 0 pages HighMem/MovableOnly 04:27:25 executing program 5: 04:27:25 executing program 0: 04:27:25 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r3, r2, 0x0, 0x800000080004103) 04:27:25 executing program 3: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f00000002c0)) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="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", 0x14d, 0x805, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) 04:27:25 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:25 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r1, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3405.884922] 338455 pages reserved [ 3405.899487] 0 pages cma reserved [ 3405.903721] Out of memory: Kill process 20454 (syz-executor.3) score 1007 or sacrifice child 04:27:25 executing program 0: 04:27:25 executing program 5: 04:27:25 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r1, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, 0xffffffffffffffff, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:25 executing program 5: 04:27:25 executing program 0: 04:27:25 executing program 0: 04:27:26 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 04:27:26 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r3, r2, 0x0, 0x800000080004103) 04:27:26 executing program 0: 04:27:26 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r1, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, 0xffffffffffffffff, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3406.583642] EXT4-fs (loop5): bad geometry: block count 1080 exceeds size of device (1 blocks) [ 3406.699748] EXT4-fs (loop5): bad geometry: block count 1080 exceeds size of device (1 blocks) 04:27:26 executing program 3: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f00000002c0)) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="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", 0x14d, 0x805, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() 04:27:26 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:26 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) read(r1, &(0x7f0000000000)=""/171, 0xab) 04:27:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 04:27:26 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r1, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, 0xffffffffffffffff, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:26 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:26 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3406.838543] nbd_handle_cmd: 8 callbacks suppressed [ 3406.838553] block nbd4: Attempted send on invalid socket [ 3406.849481] print_req_error: 8 callbacks suppressed [ 3406.849487] print_req_error: I/O error, dev nbd4, sector 64 [ 3406.862801] block nbd4: Attempted send on invalid socket [ 3406.868514] print_req_error: I/O error, dev nbd4, sector 120 [ 3406.971471] block nbd4: Attempted send on invalid socket [ 3406.977270] print_req_error: I/O error, dev nbd4, sector 64 [ 3406.986285] block nbd4: Attempted send on invalid socket [ 3406.992305] print_req_error: I/O error, dev nbd4, sector 120 04:27:26 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x0, 0x1b, 0x0, 0x62}}) 04:27:26 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:26 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:26 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3407.738905] block nbd4: Attempted send on invalid socket [ 3407.744602] print_req_error: I/O error, dev nbd4, sector 64 [ 3407.751007] block nbd4: Attempted send on invalid socket [ 3407.756830] print_req_error: I/O error, dev nbd4, sector 120 04:27:27 executing program 3: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f00000002c0)) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="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", 0x14d, 0x805, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() 04:27:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:27:27 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:27 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:27 executing program 5: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 3407.945579] block nbd4: Attempted send on invalid socket [ 3407.951137] print_req_error: I/O error, dev nbd4, sector 64 [ 3407.961116] block nbd4: Attempted send on invalid socket [ 3407.966849] print_req_error: I/O error, dev nbd4, sector 120 04:27:27 executing program 0: ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f00000001c0)={&(0x7f0000000500)="cadf380b204cfbaa0c0e7a9c996b45ee12b2377f2a0811552099ff3b2d6dac4ee39c842810ddbf1413b1698b4b7e0c611e17e67cb32e4b6722b2b0e5c3846631f08a7880de5b627e465b0918fea3b8428dbfe69790ae48d91a9f2a584018985951b1e768dc648314caa4e70cf5a923f017ba83c3a725f36796236de8b2ce821ee662c2fa859032d0817702be7b008d8f15f313f898d5e1d32ea7e87248170b992d59e83939831dbeb1d2746edae6ee96b0acac6ef8f92cd282bd9a91ec04df1558759ad258fc2c3c6d6564eac7daad72fffb45010d8dae3921298b450368b916cbceb69998d2e14576", 0xe9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:27:27 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3408.077723] nla_parse: 149 callbacks suppressed [ 3408.082775] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3408.091655] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3408.108984] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3408.120322] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3408.133092] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3408.145247] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3408.145769] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3408.167275] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3408.170367] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3408.173907] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 04:27:27 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3408.573768] block nbd4: Attempted send on invalid socket [ 3408.579620] print_req_error: I/O error, dev nbd4, sector 64 [ 3408.590205] block nbd4: Attempted send on invalid socket [ 3408.595982] print_req_error: I/O error, dev nbd4, sector 120 04:27:28 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:28 executing program 3: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f00000002c0)) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="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", 0x14d, 0x805, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() 04:27:28 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:28 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:28 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:28 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:30 executing program 5: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) 04:27:30 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:30 executing program 3: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f00000002c0)) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="0fa9f2190522725fbaeabbb63954135da58099c8b79b3bb68e1b0f98f6f374385634f8b2f842b469e2ba4118be1d0dea98f8ffac6f893673d117d7f8ad85c14a971723f1dc3ff95f30e4199b50b30d20833fffd6fbe9f42fd2a837df4373fb0caf24b780c106202dbc9b31eb39f4134f4e427c190d5c53bfafc51e6fe3aab4eaf60d75e3a50bdf8967fa0747794b488b42f7058ee3a5e4d0a12eaab7244a82e38687212078b3ed3c8c9eeb24dabad381d7954faef6ac611a7a0eccef6947f5c056f971c0eb1542ca77163e52e5473ec0fb3dc29926ba142f5a961f9c0477abe073569a2eaa6a99fefd1386340e96586d9bb49d99c353bccde1b66ab56f1867d3bc9997eca1cda8d2443d0d703417a7140925fd83a92e19d06c7d82cfe35b3f4e0f6c2cc47916e08935423358e7ad8f47acf27c4605f2033822e75fd868152d24ca69ce4beb3396d6e57ebce256", 0x14d, 0x805, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 04:27:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000740)=ANY=[], 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 04:27:30 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:30 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:30 executing program 0: sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x148, 0x1, 0x3, 0x0, 0x0, 0x0, {}, [@NFQA_VLAN={0x24, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}, @NFQA_VLAN_TCI={0x6}, @NFQA_VLAN_PROTO={0x6}, @NFQA_VLAN_TCI={0x6}]}, @NFQA_CT={0x110, 0xb, 0x0, 0x1, [@CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK_MASK={0x8}, @CTA_NAT_SRC={0x7c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @dev}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00'}]}, @CTA_TUPLE_MASTER={0x20, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_ID={0x8}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x0, 0x0]}, @CTA_LABELS_MASK={0x4}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, [], 0x1}}]}]}]}, 0x148}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:27:30 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:30 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:30 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:31 executing program 3: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f00000002c0)) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="0fa9f2190522725fbaeabbb63954135da58099c8b79b3bb68e1b0f98f6f374385634f8b2f842b469e2ba4118be1d0dea98f8ffac6f893673d117d7f8ad85c14a971723f1dc3ff95f30e4199b50b30d20833fffd6fbe9f42fd2a837df4373fb0caf24b780c106202dbc9b31eb39f4134f4e427c190d5c53bfafc51e6fe3aab4eaf60d75e3a50bdf8967fa0747794b488b42f7058ee3a5e4d0a12eaab7244a82e38687212078b3ed3c8c9eeb24dabad381d7954faef6ac611a7a0eccef6947f5c056f971c0eb1542ca77163e52e5473ec0fb3dc29926ba142f5a961f9c0477abe073569a2eaa6a99fefd1386340e96586d9bb49d99c353bccde1b66ab56f1867d3bc9997eca1cda8d2443d0d703417a7140925fd83a92e19d06c7d82cfe35b3f4e0f6c2cc47916e08935423358e7ad8f47acf27c4605f2033822e75fd868152d24ca69ce4beb3396d6e57ebce256", 0x14d, 0x805, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 04:27:31 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1, 0x0, 0x4}}, 0xe8) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="380100001a00010800000000000000007487f654b36e414647e04d6a85aceeb0e3daef21b274a924bab3619673863f5d00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c0000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001000000000000000000480003006465666c617465"], 0x138}}, 0x0) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) 04:27:31 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:31 executing program 0: ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)=[0x0, 0x2], 0x0, 0x0, 0x0}) r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r0, &(0x7f0000000d40)=[{{&(0x7f0000000340)=@xdp={0x2c, 0x0, r3}, 0x80, 0x0}}], 0x1, 0x0) 04:27:31 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:31 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3411.990730] nbd_handle_cmd: 10 callbacks suppressed [ 3411.990739] block nbd4: Attempted send on invalid socket [ 3412.002358] print_req_error: 10 callbacks suppressed [ 3412.002405] print_req_error: I/O error, dev nbd4, sector 64 [ 3412.016011] block nbd4: Attempted send on invalid socket [ 3412.021917] print_req_error: I/O error, dev nbd4, sector 120 04:27:32 executing program 3: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f00000002c0)) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="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", 0x14d, 0x805, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 04:27:32 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020031000505d25a80648c63940d0224fc60100f324002000000051a82c137153e670800038014000000d1bd", 0x33fe0}], 0x1}, 0x0) 04:27:32 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:32 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:32 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3413.667858] nla_parse: 109 callbacks suppressed [ 3413.667865] netlink: 131606 bytes leftover after parsing attributes in process `syz-executor.0'. 04:27:33 executing program 3: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f00000002c0)) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="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", 0x14d, 0x805, 0x0, 0x0) 04:27:33 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1, 0x0, 0x4}}, 0xe8) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="380100001a00010800000000000000007487f654b36e414647e04d6a85aceeb0e3daef21b274a924bab3619673863f5d00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c0000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001000000000000000000480003006465666c617465"], 0x138}}, 0x0) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) 04:27:33 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:33 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:34 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3414.825087] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3414.834451] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3414.851101] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3414.868568] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3414.886642] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3414.897337] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3414.907445] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3414.918433] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3414.932221] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3415.206165] syz-executor.1 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 3415.276490] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 3415.293605] CPU: 1 PID: 21012 Comm: syz-executor.1 Not tainted 4.14.181-syzkaller #0 [ 3415.301514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3415.310868] Call Trace: [ 3415.313470] dump_stack+0x1b2/0x283 [ 3415.317110] dump_header+0x178/0x7aa [ 3415.320826] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3415.325846] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3415.330954] ? ___ratelimit+0x2cd/0x522 [ 3415.334935] oom_kill_process.cold+0x10/0xc16 [ 3415.339437] ? lock_downgrade+0x6e0/0x6e0 [ 3415.343594] out_of_memory+0x2d5/0x10f0 [ 3415.347573] ? oom_killer_disable+0x1c0/0x1c0 [ 3415.352095] ? mutex_trylock+0x152/0x1a0 [ 3415.356161] __alloc_pages_nodemask+0x2556/0x2730 [ 3415.361024] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3415.365879] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3415.370898] ? kmem_cache_alloc_node+0x387/0x400 [ 3415.375682] copy_process.part.0+0x26a/0x6fa0 [ 3415.380187] ? do_raw_spin_unlock+0x164/0x250 [ 3415.384710] ? _raw_spin_unlock+0x29/0x40 [ 3415.388957] ? do_anonymous_page+0x62d/0x17d0 [ 3415.393584] ? finish_fault+0x290/0x290 [ 3415.397675] ? trace_hardirqs_on+0x10/0x10 [ 3415.401945] ? __cleanup_sighand+0x40/0x40 [ 3415.406206] ? vm_insert_mixed_mkwrite+0x30/0x30 [ 3415.410988] _do_fork+0x180/0xc80 [ 3415.414482] ? fork_idle+0x270/0x270 [ 3415.418204] ? up_read+0x17/0x30 [ 3415.421571] ? __do_page_fault+0x19a/0xb50 [ 3415.425902] ? do_syscall_64+0x4c/0x640 [ 3415.429878] ? sys_vfork+0x20/0x20 [ 3415.433418] do_syscall_64+0x1d5/0x640 [ 3415.437311] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3415.442506] RIP: 0033:0x45f3f9 [ 3415.445809] RSP: 002b:00007ffe62a4a048 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3415.453553] RAX: ffffffffffffffda RBX: 00007f5217bf1700 RCX: 000000000045f3f9 [ 3415.460823] RDX: 00007f5217bf19d0 RSI: 00007f5217bf0db0 RDI: 00000000003d0f00 [ 3415.468093] RBP: 00007ffe62a4a270 R08: 00007f5217bf1700 R09: 00007f5217bf1700 [ 3415.475391] R10: 00007f5217bf19d0 R11: 0000000000000202 R12: 0000000000000000 [ 3415.482675] R13: 00007ffe62a4a0ff R14: 00007f5217bf19c0 R15: 000000000078bf0c [ 3415.509412] Mem-Info: [ 3415.511934] active_anon:1232924 inactive_anon:10261 isolated_anon:0 [ 3415.511934] active_file:920 inactive_file:674 isolated_file:91 [ 3415.511934] unevictable:0 dirty:49 writeback:0 unstable:0 [ 3415.511934] slab_reclaimable:18678 slab_unreclaimable:149204 [ 3415.511934] mapped:59798 shmem:10429 pagetables:58630 bounce:0 [ 3415.511934] free:23342 free_pcp:363 free_cma:0 [ 3415.546029] Node 0 active_anon:1873148kB inactive_anon:16136kB active_file:28kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184544kB dirty:24kB writeback:0kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3415.574038] Node 1 active_anon:3052548kB inactive_anon:24908kB active_file:3652kB inactive_file:2888kB unevictable:0kB isolated(anon):0kB isolated(file):240kB mapped:54548kB dirty:172kB writeback:0kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3415.602485] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:4404kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3415.638599] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3415.645978] Node 0 DMA32 free:33668kB min:36296kB low:45368kB high:54440kB active_anon:1868644kB inactive_anon:16136kB active_file:28kB inactive_file:8kB unevictable:0kB writepending:24kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17856kB pagetables:58236kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 3415.679999] lowmem_reserve[]: 0 0 0 0 0 [ 3415.684528] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3415.714005] lowmem_reserve[]: 0 0 0 0 0 [ 3415.718015] Node 1 Normal free:57516kB min:53592kB low:66988kB high:80384kB active_anon:3051248kB inactive_anon:24908kB active_file:3264kB inactive_file:2980kB unevictable:0kB writepending:272kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61344kB pagetables:176280kB bounce:0kB free_pcp:560kB local_pcp:228kB free_cma:0kB 04:27:35 executing program 3: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f00000002c0)) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) [ 3415.818451] lowmem_reserve[]: 0 0 0 0 0 [ 3415.900337] Node 0 DMA: 21*4kB (UM) 37*8kB (UME) 15*16kB (UME) 5*32kB (UME) 3*64kB (M) 2*128kB (UE) 2*256kB (ME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10444kB [ 3416.088343] Node 0 DMA32: 1333*4kB (UME) 290*8kB (UME) 99*16kB (UME) 191*32kB (UME) 47*64kB (UM) 23*128kB (UM) 15*256kB (UM) 9*512kB (UM) 4*1024kB (U) 0*2048kB 0*4096kB = 33844kB [ 3416.231784] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3416.457932] Node 1 Normal: 636*4kB (UE) 414*8kB (UMEH) 239*16kB (UMEH) 299*32kB (UME) 293*64kB (UM) 122*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53616kB [ 3416.661262] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3416.723610] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3416.758443] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3416.797419] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3416.850090] 11761 total pagecache pages [ 3416.869311] 0 pages in swap cache [ 3416.888038] Swap cache stats: add 0, delete 0, find 0/0 [ 3416.913070] Free swap = 0kB [ 3416.927815] Total swap = 0kB [ 3416.942546] 1965979 pages RAM [ 3416.956216] 0 pages HighMem/MovableOnly [ 3416.974800] 338455 pages reserved [ 3416.988181] 0 pages cma reserved [ 3416.999811] Out of memory: Kill process 21003 (syz-executor.3) score 1007 or sacrifice child [ 3417.314164] block nbd4: Attempted send on invalid socket [ 3417.319693] print_req_error: I/O error, dev nbd4, sector 64 [ 3417.326842] block nbd4: Attempted send on invalid socket [ 3417.332771] print_req_error: I/O error, dev nbd4, sector 120 04:27:36 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0x2e7) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000480), 0xa198) 04:27:36 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:37 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020031000505d25a80648c63940d0224fc60100f324002000000051a82c137153e670800038014000000d1bd", 0x33fe0}], 0x1}, 0x0) 04:27:37 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x0, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:37 executing program 3: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f00000002c0)) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) 04:27:37 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:37 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:38 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x0, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:38 executing program 3: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f00000002c0)) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) 04:27:38 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:38 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020031000505d25a80648c63940d0224fc60100f324002000000051a82c137153e670800038014000000d1bd", 0x33fe0}], 0x1}, 0x0) 04:27:39 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:39 executing program 5: syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="58465342000010000190a600000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x0, 0x0) [ 3419.797550] nla_parse: 82 callbacks suppressed [ 3419.797557] netlink: 131606 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3419.891906] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3419.901960] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3419.920676] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 04:27:39 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3419.926679] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3419.931194] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 04:27:39 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3419.935074] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3419.939250] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3419.944815] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3419.949915] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 04:27:40 executing program 3: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f00000002c0)) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="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", 0x14d, 0x805, 0x0, 0x0) [ 3420.414962] systemd-udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 3420.414975] systemd-udevd cpuset=/ mems_allowed=0-1 [ 3420.414994] CPU: 1 PID: 3644 Comm: systemd-udevd Not tainted 4.14.181-syzkaller #0 [ 3420.414997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3420.415000] Call Trace: [ 3420.415022] dump_stack+0x1b2/0x283 [ 3420.415035] dump_header+0x178/0x7aa [ 3420.415044] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3420.415052] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3420.415060] ? ___ratelimit+0x2cd/0x522 [ 3420.415070] oom_kill_process.cold+0x10/0xc16 [ 3420.415079] ? lock_downgrade+0x6e0/0x6e0 [ 3420.415089] out_of_memory+0x2d5/0x10f0 [ 3420.415099] ? oom_killer_disable+0x1c0/0x1c0 [ 3420.415105] ? mutex_trylock+0x152/0x1a0 [ 3420.415114] __alloc_pages_nodemask+0x2556/0x2730 [ 3420.415128] ? __schedule+0x8ae/0x1d70 [ 3420.415139] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3420.415150] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3420.415160] ? retint_kernel+0x2d/0x2d [ 3420.415174] cache_grow_begin+0x91/0x410 [ 3420.415184] fallback_alloc+0x205/0x2b0 [ 3420.415195] kmem_cache_alloc+0x1e5/0x3c0 [ 3420.415207] getname_flags+0xc8/0x550 [ 3420.415217] user_path_at_empty+0x2a/0x50 [ 3420.415226] vfs_statx+0xd1/0x160 [ 3420.415235] ? vfs_statx_fd+0x90/0x90 [ 3420.415243] ? lock_downgrade+0x6e0/0x6e0 [ 3420.415252] SyS_newlstat+0x83/0xe0 [ 3420.415259] ? SyS_newstat+0xe0/0xe0 [ 3420.415267] ? __secure_computing+0xe5/0x3e0 [ 3420.415276] ? syscall_trace_enter+0x486/0xc20 [ 3420.415283] ? SyS_readlinkat+0x17d/0x270 [ 3420.415291] ? syscall_slow_exit_work+0x560/0x560 [ 3420.415302] ? do_syscall_64+0x4c/0x640 [ 3420.415310] ? SyS_newstat+0xe0/0xe0 [ 3420.415317] do_syscall_64+0x1d5/0x640 [ 3420.415330] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3420.415337] RIP: 0033:0x7f87e8357335 [ 3420.415341] RSP: 002b:00007ffc33edae88 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 3420.415350] RAX: ffffffffffffffda RBX: 000055b0e4b33640 RCX: 00007f87e8357335 [ 3420.415355] RDX: 00007ffc33edaec0 RSI: 00007ffc33edaec0 RDI: 000055b0e4b32640 [ 3420.415359] RBP: 00007ffc33edaf80 R08: 00007f87e8616238 R09: 0000000000001010 [ 3420.415364] R10: 00007f87e8615b58 R11: 0000000000000246 R12: 000055b0e4b32640 [ 3420.415368] R13: 000055b0e4b32644 R14: 000055b0e4b1e761 R15: 000055b0e4b1e764 [ 3420.433099] Mem-Info: [ 3420.433120] active_anon:1235588 inactive_anon:10261 isolated_anon:0 [ 3420.433120] active_file:889 inactive_file:895 isolated_file:70 [ 3420.433120] unevictable:0 dirty:64 writeback:25 unstable:0 [ 3420.433120] slab_reclaimable:18606 slab_unreclaimable:148481 [ 3420.433120] mapped:59883 shmem:10429 pagetables:58687 bounce:0 [ 3420.433120] free:21221 free_pcp:448 free_cma:0 [ 3420.433133] Node 0 active_anon:1878060kB inactive_anon:16136kB active_file:128kB inactive_file:120kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184736kB dirty:52kB writeback:0kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3420.433146] Node 1 active_anon:3064292kB inactive_anon:24908kB active_file:3428kB inactive_file:3460kB unevictable:0kB isolated(anon):0kB isolated(file):280kB mapped:54796kB dirty:204kB writeback:100kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3420.433149] Node 0 DMA free:10392kB min:220kB low:272kB high:324kB active_anon:4464kB inactive_anon:0kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3420.433164] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3420.433181] Node 0 DMA32 free:27368kB min:36296kB low:45368kB high:54440kB active_anon:1873456kB inactive_anon:16136kB active_file:128kB inactive_file:104kB unevictable:0kB writepending:52kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17952kB pagetables:58236kB bounce:0kB free_pcp:376kB local_pcp:376kB free_cma:0kB [ 3420.433197] lowmem_reserve[]: 0 0 0 0 0 [ 3420.433212] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3420.433226] lowmem_reserve[]: 0 0 0 0 0 [ 3420.433241] Node 1 Normal free:47124kB min:53592kB low:66988kB high:80384kB active_anon:3064080kB inactive_anon:24908kB active_file:3596kB inactive_file:3380kB unevictable:0kB writepending:304kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61504kB pagetables:176508kB bounce:0kB free_pcp:1416kB local_pcp:736kB free_cma:0kB [ 3420.433256] lowmem_reserve[]: 0 0 0 0 0 [ 3420.433272] Node 0 DMA: 12*4kB (UMH) 30*8kB (UMEH) 15*16kB (UMEH) 4*32kB (UME) 4*64kB (MH) 2*128kB (EH) 2*256kB (ME) 3*512kB (UEH) 3*1024kB (MEH) 2*2048kB (UE) 0*4096kB = 10384kB [ 3420.433332] Node 0 DMA32: 964*4kB (UME) 96*8kB (UME) 41*16kB (UME) 118*32kB (UME) 45*64kB (UM) 23*128kB (UM) 15*256kB (UM) 9*512kB (UM) 4*1024kB (U) 0*2048kB 0*4096kB = 27424kB [ 3420.433390] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3420.433427] Node 1 Normal: 604*4kB (UME) 378*8kB (UME) 360*16kB (UME) 58*32kB (UMEH) 295*64kB (MH) 120*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 47296kB [ 3420.433482] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3420.433487] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3420.433492] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3420.433496] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3420.433500] 12273 total pagecache pages [ 3420.433508] 0 pages in swap cache [ 3420.433512] Swap cache stats: add 0, delete 0, find 0/0 [ 3420.433515] Free swap = 0kB [ 3420.433518] Total swap = 0kB [ 3420.433522] 1965979 pages RAM [ 3420.433525] 0 pages HighMem/MovableOnly [ 3420.433528] 338455 pages reserved [ 3420.433531] 0 pages cma reserved [ 3420.433536] Out of memory: Kill process 21113 (syz-executor.3) score 1007 or sacrifice child [ 3420.433591] Killed process 21113 (syz-executor.3) total-vm:75236kB, anon-rss:16476kB, file-rss:34816kB, shmem-rss:0kB [ 3420.564497] oom_reaper: reaped process 21113 (syz-executor.3), now anon-rss:0kB, file-rss:28kB, shmem-rss:0kB [ 3421.415658] syz-executor.1 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3421.415673] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 3421.415692] CPU: 0 PID: 21150 Comm: syz-executor.1 Not tainted 4.14.181-syzkaller #0 [ 3421.415697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3421.415699] Call Trace: [ 3421.415727] dump_stack+0x1b2/0x283 [ 3421.415741] dump_header+0x178/0x7aa [ 3421.415751] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3421.415761] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3421.415769] ? ___ratelimit+0x2cd/0x522 [ 3421.415779] oom_kill_process.cold+0x10/0xc16 [ 3421.415787] ? lock_downgrade+0x6e0/0x6e0 [ 3421.415798] out_of_memory+0x2d5/0x10f0 [ 3421.415809] ? oom_killer_disable+0x1c0/0x1c0 [ 3421.415816] ? mutex_trylock+0x152/0x1a0 [ 3421.415826] __alloc_pages_nodemask+0x2556/0x2730 [ 3421.415840] ? __schedule+0x8ae/0x1d70 [ 3421.415857] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3421.415866] ? __lock_acquire+0x655/0x42a0 [ 3421.415887] alloc_pages_vma+0xc1/0x4b0 [ 3421.415899] wp_page_copy+0x1005/0x1bc0 [ 3421.415913] ? add_mm_counter_fast.part.0+0x30/0x30 [ 3421.415919] ? __lock_acquire+0x655/0x42a0 [ 3421.415929] do_wp_page+0x244/0x1dc0 [ 3421.415938] ? __handle_mm_fault+0x18e8/0x3700 [ 3421.415946] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 3421.415952] ? trace_hardirqs_on+0x10/0x10 [ 3421.415962] __handle_mm_fault+0x1ee8/0x3700 [ 3421.415973] ? vm_insert_mixed_mkwrite+0x30/0x30 [ 3421.415980] ? check_preemption_disabled+0x35/0x240 [ 3421.415998] handle_mm_fault+0x306/0x794 [ 3421.416009] __do_page_fault+0x578/0xb50 [ 3421.416020] ? mm_fault_error+0x2c0/0x2c0 [ 3421.416028] ? do_page_fault+0x60/0x4f2 [ 3421.416037] page_fault+0x25/0x50 [ 3421.416045] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 3421.416049] RSP: 0000:ffff888131897b60 EFLAGS: 00010206 [ 3421.416056] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000500 [ 3421.416060] RDX: 0000000000001000 RSI: ffff8880904aab00 RDI: 0000000020111000 [ 3421.416064] RBP: 0000000020110500 R08: ffffed1012095600 R09: 0000000000000000 [ 3421.416069] R10: ffffed10120955ff R11: ffff8880904aafff R12: ffff8880904aa000 [ 3421.416073] R13: 00007ffffffff000 R14: 0000000020111500 R15: ffff888131897de0 [ 3421.416088] copyout+0x99/0xc0 [ 3421.416098] copy_page_to_iter+0x32a/0xc90 [ 3421.416115] pipe_to_user+0xa8/0x160 [ 3421.416126] __splice_from_pipe+0x332/0x740 [ 3421.416136] ? iter_to_pipe+0x4c0/0x4c0 [ 3421.416146] vmsplice_to_user+0x197/0x1c0 [ 3421.416155] ? __splice_from_pipe+0x740/0x740 [ 3421.416164] ? __might_fault+0x104/0x1b0 [ 3421.416174] ? lock_acquire+0x170/0x3f0 [ 3421.416185] ? lock_acquire+0x170/0x3f0 [ 3421.416192] ? lock_downgrade+0x6e0/0x6e0 [ 3421.416204] ? __fget+0x226/0x360 [ 3421.416217] SyS_vmsplice+0x12a/0x150 [ 3421.416225] ? default_file_splice_write+0x80/0x80 [ 3421.416234] do_syscall_64+0x1d5/0x640 [ 3421.416246] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3421.416253] RIP: 0033:0x45ca29 [ 3421.416256] RSP: 002b:00007f5217bf0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 3421.416264] RAX: ffffffffffffffda RBX: 000000000050a380 RCX: 000000000045ca29 [ 3421.416268] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 3421.416272] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3421.416275] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 3421.416279] R13: 0000000000000c55 R14: 00000000004ce9f5 R15: 00007f5217bf16d4 [ 3421.418594] Mem-Info: [ 3421.418616] active_anon:1236372 inactive_anon:10261 isolated_anon:0 [ 3421.418616] active_file:1162 inactive_file:674 isolated_file:66 [ 3421.418616] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3421.418616] slab_reclaimable:18623 slab_unreclaimable:147999 [ 3421.418616] mapped:59721 shmem:10429 pagetables:58674 bounce:0 [ 3421.418616] free:20835 free_pcp:413 free_cma:0 [ 3421.418630] Node 0 active_anon:1877520kB inactive_anon:16136kB active_file:136kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184736kB dirty:0kB writeback:0kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3421.418643] Node 1 active_anon:3067968kB inactive_anon:24908kB active_file:4512kB inactive_file:2588kB unevictable:0kB isolated(anon):0kB isolated(file):264kB mapped:54148kB dirty:0kB writeback:0kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3421.418647] Node 0 DMA free:10420kB min:220kB low:272kB high:324kB active_anon:4444kB inactive_anon:0kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3421.418663] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3421.418680] Node 0 DMA32 free:27184kB min:36296kB low:45368kB high:54440kB active_anon:1873056kB inactive_anon:16136kB active_file:136kB inactive_file:92kB unevictable:0kB writepending:0kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:18112kB pagetables:58232kB bounce:0kB free_pcp:608kB local_pcp:360kB free_cma:0kB [ 3422.424874] lowmem_reserve[]: 0 0 0 0 0 [ 3422.429886] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3422.504731] lowmem_reserve[]: 0 0 0 0 0 [ 3422.525955] Node 1 Normal free:62400kB min:53592kB low:66988kB high:80384kB active_anon:3054936kB inactive_anon:24912kB active_file:1728kB inactive_file:2004kB unevictable:0kB writepending:108kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61568kB pagetables:176660kB bounce:0kB free_pcp:1304kB local_pcp:640kB free_cma:0kB [ 3422.531839] XFS (loop5): SB sanity check failed 04:27:42 executing program 3: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f00000002c0)) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="0fa9f2190522725fbaeabbb63954135da58099c8b79b3bb68e1b0f98f6f374385634f8b2f842b469e2ba4118be1d0dea98f8ffac6f893673d117d7f8ad85c14a971723f1dc3ff95f30e4199b50b30d20833fffd6fbe9f42fd2a837df4373fb0caf24b780c106202dbc9b31eb39f4134f4e427c190d5c53bfafc51e6fe3aab4eaf60d75e3a50bdf8967fa0747794b488b42f7058ee3a5e4d0a12eaab7244a82e38687212078b3ed3c8c9eeb24dabad381d7954faef6ac611a7a0eccef6947f5c056f971c0eb1542ca77163e52e5473ec0fb3dc29926ba142f5a961f9c0477abe073569a2eaa6a99fefd1386340e96586d9bb49d99c353bccde1b66ab56f1867d3bc9997eca1cda8d2443d0d703417a7140925fd83a92e19d06c7d82cfe35b3f4e0f6c2cc47916e08935423358e7ad8f47acf27c4605f2033822e75fd868152d24ca69ce4beb3396d6e57ebce256", 0x14d, 0x805, 0x0, 0x0) [ 3422.675865] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x2fd/0x380, xfs_sb block 0xffffffffffffffff [ 3422.712002] lowmem_reserve[]: 0 0 0 0 0 04:27:42 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x0, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:42 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:42 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020031000505d25a80648c63940d0224fc60100f324002000000051a82c137153e670800038014000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 3422.717570] Node 0 DMA: 13*4kB (UMH) 33*8kB (UMEH) 15*16kB (UMEH) 5*32kB (UME) 4*64kB (MH) 2*128kB (EH) 2*256kB (ME) 3*512kB (UEH) 3*1024kB (MEH) 2*2048kB (UE) 0*4096kB = 10444kB [ 3422.760552] XFS (loop5): Unmount and run xfs_repair [ 3422.877327] XFS (loop5): First 64 bytes of corrupted metadata buffer: [ 3422.916256] Node 0 DMA32: 1313*4kB (UME) 197*8kB (UME) 110*16kB (UME) 170*32kB (UME) 45*64kB (UM) 23*128kB (UM) 15*256kB (UM) 9*512kB (UM) 4*1024kB (U) 0*2048kB 0*4096kB = 32396kB [ 3422.964238] ffff8881bd742000: 58 46 53 42 00 00 10 00 01 90 a6 00 00 00 10 00 XFSB............ [ 3423.025605] ffff8881bd742010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3423.065648] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3423.098987] ffff8881bd742020: 34 fb 8f b9 e4 bf 48 b6 ad 26 c5 97 eb 4f 5c 19 4.....H..&...O\. [ 3423.143581] Node 1 Normal: 690*4kB (UME) 180*8kB (UME) 362*16kB (UME) 251*32kB (UME) 303*64kB (UMH) 130*128kB (UMH) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54824kB [ 3423.170268] ffff8881bd742030: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 0d 88 ................ [ 3423.216818] XFS (loop5): SB validate failed with error -117. [ 3423.242301] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3423.290145] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3423.332690] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3423.379589] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3423.379996] block nbd4: Attempted send on invalid socket [ 3423.391568] 12746 total pagecache pages [ 3423.399824] 0 pages in swap cache [ 3423.403187] print_req_error: I/O error, dev nbd4, sector 64 [ 3423.418103] block nbd4: Attempted send on invalid socket [ 3423.423702] print_req_error: I/O error, dev nbd4, sector 120 04:27:43 executing program 5: syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="58465342000010000190a600000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x0, 0x0) [ 3423.438865] Swap cache stats: add 0, delete 0, find 0/0 [ 3423.580997] Free swap = 0kB [ 3423.688523] Total swap = 0kB 04:27:43 executing program 3: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f00000002c0)) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="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", 0x14d, 0x805, 0x0, 0x0) [ 3423.732671] 1965979 pages RAM [ 3423.747213] 0 pages HighMem/MovableOnly [ 3423.781960] 338455 pages reserved [ 3423.785493] 0 pages cma reserved [ 3423.788878] Out of memory: Kill process 21149 (syz-executor.3) score 1007 or sacrifice child 04:27:43 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:43 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3423.953514] XFS (loop5): SB sanity check failed [ 3423.965066] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x2fd/0x380, xfs_sb block 0xffffffffffffffff [ 3424.356256] XFS (loop5): Unmount and run xfs_repair [ 3424.445656] XFS (loop5): First 64 bytes of corrupted metadata buffer: [ 3424.497942] ffff888211f44000: 58 46 53 42 00 00 10 00 01 90 a6 00 00 00 10 00 XFSB............ [ 3424.539109] ffff888211f44010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3424.590477] ffff888211f44020: 34 fb 8f b9 e4 bf 48 b6 ad 26 c5 97 eb 4f 5c 19 4.....H..&...O\. [ 3424.635283] ffff888211f44030: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 0d 88 ................ [ 3424.650178] kworker/u4:5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3424.692367] XFS (loop5): SB validate failed with error -117. 04:27:44 executing program 3: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f00000002c0)) r4 = socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="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", 0x14d, 0x805, 0x0, 0x0) [ 3424.802381] kworker/u4:5 cpuset=/ mems_allowed=0-1 [ 3424.830647] CPU: 1 PID: 21248 Comm: kworker/u4:5 Not tainted 4.14.181-syzkaller #0 [ 3424.838390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3424.849251] Call Trace: [ 3424.851850] dump_stack+0x1b2/0x283 [ 3424.855484] dump_header+0x178/0x7aa [ 3424.859203] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3424.864224] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3424.869417] ? ___ratelimit+0x2cd/0x522 [ 3424.873395] oom_kill_process.cold+0x10/0xc16 [ 3424.877893] ? lock_downgrade+0x6e0/0x6e0 [ 3424.882082] out_of_memory+0x2d5/0x10f0 [ 3424.886058] ? oom_killer_disable+0x1c0/0x1c0 [ 3424.890556] ? mutex_trylock+0x152/0x1a0 [ 3424.894621] __alloc_pages_nodemask+0x2556/0x2730 [ 3424.899471] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3424.904486] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3424.909330] ? trace_hardirqs_on+0x10/0x10 [ 3424.913578] ? cache_grow_begin+0x3f/0x410 [ 3424.917822] cache_grow_begin+0x91/0x410 [ 3424.921908] fallback_alloc+0x205/0x2b0 [ 3424.925888] kmem_cache_alloc+0x1e5/0x3c0 04:27:44 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2270, &(0x7f0000000000)) 04:27:44 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020031000505d25a80648c63940d0224fc60100f324002000000051a82c137153e670800038014000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 3424.930134] getname_kernel+0x4e/0x340 [ 3424.934112] call_usermodehelper_exec_async+0x27b/0x4c0 [ 3424.939472] ? umh_complete+0x80/0x80 [ 3424.943302] ret_from_fork+0x24/0x30 04:27:44 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r2, r1, 0x0, 0x800000080004103) 04:27:44 executing program 5: r0 = socket(0x10, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "0d5000c3729e6bf9", "96171fc5340e2ed02dd1c317e0f4cf37", "0f19d81f", "b46a23ba930b611f"}, 0x28) r1 = memfd_create(&(0x7f0000000140)='\xedr!QY\x88=Vx\xa1\xd1<\xdeb\x17\xd3\xe2i\x1d5\x17\xa4\x00\xd8\x02\x9f\x11\xfa\t\x13]\f\xcbo\xc4X\x00\x94/\x96h\xef~Ms\"\x00\x00', 0x0) write$eventfd(r1, &(0x7f0000000080)=0x20000100000094, 0x8) write(r1, &(0x7f0000000040)="0600", 0x2) sendfile(r1, r1, &(0x7f00000000c0), 0xfeff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x264, &(0x7f0000000000)=[{}]}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'veth1\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "00bc713c364e7f508cf9b7df9644e1118159ac99c6ef3f696654535bb89342ff", "8d2061956c74865110495112f0b6940b870af874d18d173470d9aca11e0a15f4", "3eb50733790c184601705e0ced1c6ecacb08f8f942e4219e9ebc52c75e23e2d8", "5c5bd0603e1f6d93105907fa41dc4736a4f9c4a2d7be7c2b760a35cf9c41d335", "505fa0a58561cee36df64dcbed6d1018c1ba2dc5890efd43d70f2792168c1f35", "75ebffd177acd491657c3ba3"}}) 04:27:44 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:44 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020031000505d25a80648c63940d0224fc60100f324002000000051a82c137153e670800038014000000d1bd", 0x33fe0}], 0x1}, 0x0) 04:27:44 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3425.327389] Mem-Info: [ 3425.337824] active_anon:1235065 inactive_anon:10261 isolated_anon:0 [ 3425.337824] active_file:1183 inactive_file:689 isolated_file:11 [ 3425.337824] unevictable:0 dirty:66 writeback:6 unstable:0 [ 3425.337824] slab_reclaimable:18681 slab_unreclaimable:148137 [ 3425.337824] mapped:59607 shmem:10429 pagetables:58668 bounce:0 [ 3425.337824] free:22254 free_pcp:297 free_cma:0 04:27:45 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r2, r1, 0x0, 0x800000080004103) 04:27:45 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020031000505d25a80648c63940d0224fc60100f324002000000051a82c137153e670800038014000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 3425.569319] Node 0 active_anon:1877248kB inactive_anon:16136kB active_file:244kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184816kB dirty:52kB writeback:16kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3425.635041] Node 1 active_anon:3065112kB inactive_anon:24908kB active_file:3780kB inactive_file:2124kB unevictable:0kB isolated(anon):0kB isolated(file):300kB mapped:53612kB dirty:212kB writeback:8kB shmem:24904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3425.745357] Node 0 DMA free:10404kB min:220kB low:272kB high:324kB active_anon:4444kB inactive_anon:0kB active_file:40kB inactive_file:8kB unevictable:0kB writepending:8kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 04:27:45 executing program 3: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f00000002c0)) r4 = socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="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", 0x14d, 0x805, 0x0, 0x0) [ 3425.826983] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3425.832473] Node 0 DMA32 free:31180kB min:36296kB low:45368kB high:54440kB active_anon:1868724kB inactive_anon:16136kB active_file:192kB inactive_file:56kB unevictable:0kB writepending:68kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17888kB pagetables:58244kB bounce:0kB free_pcp:696kB local_pcp:684kB free_cma:0kB [ 3425.868428] lowmem_reserve[]: 0 0 0 0 0 [ 3425.889671] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3425.927849] block nbd4: Attempted send on invalid socket [ 3425.933592] print_req_error: I/O error, dev nbd4, sector 64 [ 3425.945099] block nbd4: Attempted send on invalid socket [ 3425.951127] print_req_error: I/O error, dev nbd4, sector 120 [ 3425.990643] lowmem_reserve[]: 0 0 0 0 0 [ 3425.999429] Node 1 Normal free:61208kB min:53592kB low:66988kB high:80384kB active_anon:3053008kB inactive_anon:24908kB active_file:3356kB inactive_file:3708kB unevictable:0kB writepending:284kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61280kB pagetables:176352kB bounce:0kB free_pcp:1000kB local_pcp:740kB free_cma:0kB [ 3426.038826] lowmem_reserve[]: 0 0 0 0 0 [ 3426.045707] Node 0 DMA: 15*4kB (UMH) 32*8kB (UME) 15*16kB (UMEH) 5*32kB (UME) 4*64kB (MH) 2*128kB (EH) 2*256kB (ME) 3*512kB (UEH) 3*1024kB (MEH) 2*2048kB (UE) 0*4096kB = 10444kB [ 3426.064171] Node 0 DMA32: 1305*4kB (UME) 201*8kB (UME) 108*16kB (UME) 159*32kB (UME) 46*64kB (UM) 21*128kB (UM) 13*256kB (UM) 9*512kB (UM) 4*1024kB (U) 0*2048kB 0*4096kB = 31308kB [ 3426.083792] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3426.097537] Node 1 Normal: 738*4kB (UME) 600*8kB (UME) 412*16kB (UME) 285*32kB (UMEH) 299*64kB (UM) 131*128kB (UM) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 60136kB [ 3426.139304] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3426.158800] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3426.202642] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3426.236642] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3426.268253] 12539 total pagecache pages [ 3426.281667] 0 pages in swap cache [ 3426.294199] hfs: can't find a HFS filesystem on dev loop4 [ 3426.306110] Swap cache stats: add 0, delete 0, find 0/0 04:27:45 executing program 5: r0 = socket(0x10, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "0d5000c3729e6bf9", "96171fc5340e2ed02dd1c317e0f4cf37", "0f19d81f", "b46a23ba930b611f"}, 0x28) r1 = memfd_create(&(0x7f0000000140)='\xedr!QY\x88=Vx\xa1\xd1<\xdeb\x17\xd3\xe2i\x1d5\x17\xa4\x00\xd8\x02\x9f\x11\xfa\t\x13]\f\xcbo\xc4X\x00\x94/\x96h\xef~Ms\"\x00\x00', 0x0) write$eventfd(r1, &(0x7f0000000080)=0x20000100000094, 0x8) write(r1, &(0x7f0000000040)="0600", 0x2) sendfile(r1, r1, &(0x7f00000000c0), 0xfeff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x264, &(0x7f0000000000)=[{}]}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'veth1\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "00bc713c364e7f508cf9b7df9644e1118159ac99c6ef3f696654535bb89342ff", "8d2061956c74865110495112f0b6940b870af874d18d173470d9aca11e0a15f4", "3eb50733790c184601705e0ced1c6ecacb08f8f942e4219e9ebc52c75e23e2d8", "5c5bd0603e1f6d93105907fa41dc4736a4f9c4a2d7be7c2b760a35cf9c41d335", "505fa0a58561cee36df64dcbed6d1018c1ba2dc5890efd43d70f2792168c1f35", "75ebffd177acd491657c3ba3"}}) [ 3426.320769] Free swap = 0kB [ 3426.325529] Total swap = 0kB [ 3426.334618] 1965979 pages RAM [ 3426.354723] 0 pages HighMem/MovableOnly [ 3426.358754] 338455 pages reserved [ 3426.363240] 0 pages cma reserved 04:27:45 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3426.370036] Out of memory: Kill process 18100 (syz-executor.0) score 1007 or sacrifice child [ 3426.388255] Killed process 18100 (syz-executor.0) total-vm:75368kB, anon-rss:14724kB, file-rss:34816kB, shmem-rss:0kB 04:27:46 executing program 0: r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020031000505d25a80648c63940d0224fc60100f324002000000051a82c137153e670800038014000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 3426.546258] oom_reaper: reaped process 18100 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3426.555650] block nbd4: Attempted send on invalid socket [ 3426.563180] print_req_error: I/O error, dev nbd4, sector 64 [ 3426.569196] block nbd4: Attempted send on invalid socket [ 3426.575079] print_req_error: I/O error, dev nbd4, sector 120 04:27:46 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r2, r1, 0x0, 0x800000080004103) 04:27:46 executing program 0: r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020031000505d25a80648c63940d0224fc60100f324002000000051a82c137153e670800038014000000d1bd", 0x33fe0}], 0x1}, 0x0) 04:27:46 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:46 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:47 executing program 4: mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:47 executing program 3: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f00000002c0)) r4 = socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="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", 0x14d, 0x805, 0x0, 0x0) 04:27:47 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x1276, 0x0) 04:27:47 executing program 0: r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020031000505d25a80648c63940d0224fc60100f324002000000051a82c137153e670800038014000000d1bd", 0x33fe0}], 0x1}, 0x0) 04:27:47 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:47 executing program 5: 04:27:47 executing program 5: 04:27:47 executing program 4: mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:47 executing program 5: 04:27:47 executing program 3: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f00000002c0)) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="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", 0x14d, 0x805, 0x0, 0x0) 04:27:48 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r3, r2, 0x0, 0x800000080004103) 04:27:48 executing program 0: socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020031000505d25a80648c63940d0224fc60100f324002000000051a82c137153e670800038014000000d1bd", 0x33fe0}], 0x1}, 0x0) 04:27:48 executing program 5: 04:27:48 executing program 5: 04:27:48 executing program 0: socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020031000505d25a80648c63940d0224fc60100f324002000000051a82c137153e670800038014000000d1bd", 0x33fe0}], 0x1}, 0x0) 04:27:48 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r3, r2, 0x0, 0x800000080004103) 04:27:48 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:48 executing program 5: 04:27:48 executing program 3: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f00000002c0)) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="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", 0x14d, 0x805, 0x0, 0x0) [ 3430.034948] hfs: can't find a HFS filesystem on dev loop4 04:27:49 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r3, r2, 0x0, 0x800000080004103) 04:27:49 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x1000000, 0x0}) 04:27:49 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:49 executing program 0: socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020031000505d25a80648c63940d0224fc60100f324002000000051a82c137153e670800038014000000d1bd", 0x33fe0}], 0x1}, 0x0) 04:27:49 executing program 4: mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:50 executing program 3: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f00000002c0)) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="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", 0x14d, 0x805, 0x0, 0x0) [ 3430.445377] binder: 21515:21516 ioctl c0306201 20000240 returned -14 04:27:50 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) [ 3430.503620] binder: 21515:21539 ioctl c0306201 20000240 returned -14 04:27:50 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid'}}]}}) 04:27:50 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:50 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:50 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) [ 3431.138644] 9pnet: Insufficient options for proto=fd 04:27:50 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:50 executing program 3: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="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", 0x14d, 0x805, 0x0, 0x0) 04:27:51 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 04:27:51 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 04:27:51 executing program 4: mknod$loop(0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:51 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) [ 3431.542628] nla_parse: 144 callbacks suppressed [ 3431.547565] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3431.556490] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3431.568216] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3431.578944] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 04:27:51 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3431.589060] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3431.600740] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3431.611385] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3431.622178] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3431.633614] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3431.644664] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 04:27:51 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:51 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 04:27:51 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:51 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 04:27:51 executing program 3: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="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", 0x14d, 0x805, 0x0, 0x0) 04:27:52 executing program 4: mknod$loop(0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:52 executing program 5: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f00000011c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYBLOB='[d::],0::6:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) 04:27:52 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 04:27:52 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3432.816353] libceph: connect [d::]:6789 error -101 [ 3432.828355] libceph: mon0 [d::]:6789 connect error 04:27:52 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) [ 3432.868633] ceph: No mds server is up or the cluster is laggy [ 3432.878153] libceph: connect [d::]:6789 error -101 [ 3432.894272] libceph: mon0 [d::]:6789 connect error [ 3433.074034] ceph: No mds server is up or the cluster is laggy [ 3433.080767] libceph: connect [d::]:6789 error -101 [ 3433.087584] libceph: mon0 [d::]:6789 connect error 04:27:52 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3433.166191] ceph: No mds server is up or the cluster is laggy [ 3433.172804] libceph: connect [d::]:6789 error -101 [ 3433.185428] libceph: mon0 [d::]:6789 connect error 04:27:52 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r3, r2, 0x0, 0x800000080004103) [ 3433.235117] ceph: No mds server is up or the cluster is laggy [ 3433.241631] libceph: connect [d::]:6789 error -101 [ 3433.253183] libceph: mon0 [d::]:6789 connect error 04:27:52 executing program 4: mknod$loop(0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3433.292531] ceph: No mds server is up or the cluster is laggy 04:27:52 executing program 3: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="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", 0x14d, 0x805, 0x0, 0x0) [ 3433.348405] ceph: No mds server is up or the cluster is laggy [ 3433.356760] libceph: mon1 [::6]:6789 socket closed (con state CONNECTING) 04:27:53 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r3, r2, 0x0, 0x800000080004103) [ 3433.400586] ceph: No mds server is up or the cluster is laggy [ 3433.459113] ceph: No mds server is up or the cluster is laggy [ 3433.465653] libceph: connect [d::]:6789 error -101 [ 3433.472329] libceph: mon0 [d::]:6789 connect error 04:27:53 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 04:27:53 executing program 5: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f00000011c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYBLOB='[d::],0::6:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) 04:27:53 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:53 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r3, r2, 0x0, 0x800000080004103) [ 3433.797225] hfs: can't find a HFS filesystem on dev loop4 04:27:53 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 04:27:53 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3433.957586] ceph: No mds server is up or the cluster is laggy 04:27:53 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:53 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3434.260186] libceph: connect [d::]:6789 error -101 [ 3434.265365] libceph: mon0 [d::]:6789 connect error [ 3434.288795] ceph: No mds server is up or the cluster is laggy 04:27:53 executing program 3: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f00000002c0)) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="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", 0x14d, 0x805, 0x0, 0x0) [ 3434.337798] ceph: No mds server is up or the cluster is laggy [ 3434.344363] libceph: connect [d::]:6789 error -101 [ 3434.349672] libceph: mon0 [d::]:6789 connect error [ 3434.413891] ceph: No mds server is up or the cluster is laggy [ 3434.420350] libceph: connect [d::]:6789 error -101 [ 3434.425373] libceph: mon0 [d::]:6789 connect error 04:27:54 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:54 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3434.574944] ceph: No mds server is up or the cluster is laggy [ 3434.646462] libceph: connect [d::]:6789 error -101 [ 3434.651744] libceph: mon0 [d::]:6789 connect error [ 3434.727121] ceph: No mds server is up or the cluster is laggy 04:27:54 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3435.018237] ceph: No mds server is up or the cluster is laggy 04:27:54 executing program 5: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f00000011c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYBLOB='[d::],0::6:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) 04:27:54 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 04:27:54 executing program 3: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f00000002c0)) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="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", 0x14d, 0x805, 0x0, 0x0) [ 3435.284568] hfs: can't find a HFS filesystem on dev loop4 04:27:55 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:27:55 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) [ 3435.480594] libceph: connect [d::]:6789 error -101 [ 3435.487040] libceph: mon0 [d::]:6789 connect error [ 3435.507084] ceph: No mds server is up or the cluster is laggy 04:27:55 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000000c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:55 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) [ 3435.548534] libceph: connect [d::]:6789 error -101 [ 3435.564214] libceph: mon0 [d::]:6789 connect error [ 3435.635213] ceph: No mds server is up or the cluster is laggy 04:27:55 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) [ 3435.872897] ceph: No mds server is up or the cluster is laggy 04:27:56 executing program 3: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f00000002c0)) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="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", 0x14d, 0x805, 0x0, 0x0) 04:27:56 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 04:27:56 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r3, 0x0, 0x800000080004103) 04:27:56 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000240), &(0x7f0000001480)=0x4) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)=0x0) syz_open_procfs(r2, &(0x7f0000001500)='net/rpc\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f00000002c0)="01bd44899fde2943558d3558f55f5f9c9bb087c2582f266288254210b88487344d7e65162b5b77f98d7a4aa4ac5e9f19676d4ef3fceee0c8b92009bbf1c715d98ca8de99dc266381c5b7437ffe1955eca19fd311aba8da218f737929dc7f2c764197c8b41adafc2b7099b3e79167829040306ff61d27d1559c07d93bc10c1151b5c7ae365d2f068f9aef81b23fa7bacb90d820c5dabe79b154cf21baee55320eb0c15f772f57949f63da9dd764e123b207388e6d571aabcfa7a5a72402899fa8b5da137b7617be1e197e16eab0914605d447fdc7ea157daabd69be6357c2e6829dd84112c1db866fc87e9f283f", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="0455cfd48ef669c57aa10a59825a3c69fd306c840c7df9c0e81b2a9ec8aa2d86cb32b69280222a3e7afa38dd6869666bbc057d6cc636d73f0044a36e17e34ac6f5a663a566da7730018ecc852fc10825578d846d15cf1a6cf7a9c329d7b62c8bcae53fb4de1caa80bb4ae7822fa95728d030498eb9bbbf576c11100ac1b1ce3384effcada0ff5415522277281dafb0c737b8d7fb4960202ff1ce4af69aa6c7f29b7ba6e95ba69e1fc3d9e4934f6785b14c3e17044bfce57f", &(0x7f0000000140)="cefc55957607435a03add5432d70595b5b7ca6fc2f3d1c325bd987471c025032cc1b6fad250d3b9b1bda186e1730446da247e86c4f7e835e402ee91e1d145d5e25f85fe26e6b8753dcda79c37ea7f3758dd8600f75d9f3fd3b", 0x2, r0, 0x4}, 0x38) syz_mount_image$hfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x1200000, &(0x7f0000001540)=ANY=[@ANYBLOB="00377dae26f40252b917922439d6ca25a8b5a0724c3ef87f9721be6cce620c83ca7b2ef966d5631e68386881a9bff110978da4eb3c16"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3436.616014] syz-executor.5: page allocation failure: order:5, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 3436.688787] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3436.697385] nla_parse: 156 callbacks suppressed [ 3436.697391] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3436.711404] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3436.723239] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3436.733547] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3436.743923] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3436.754017] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3436.764325] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3436.774244] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3436.784799] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3436.794755] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3436.872732] CPU: 1 PID: 21906 Comm: syz-executor.5 Not tainted 4.14.181-syzkaller #0 [ 3436.880647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3436.890010] Call Trace: [ 3436.892611] dump_stack+0x1b2/0x283 [ 3436.896251] warn_alloc.cold+0x96/0x1af [ 3436.900443] ? zone_watermark_ok_safe+0x250/0x250 [ 3436.908241] ? try_to_compact_pages+0x52a/0x770 [ 3436.912922] ? __alloc_pages_direct_compact+0xba/0x360 [ 3436.918217] __alloc_pages_nodemask+0x2129/0x2730 [ 3436.923055] ? rcu_read_lock_sched_held+0x10a/0x130 [ 3436.928074] ? __lock_acquire+0x655/0x42a0 [ 3436.932309] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 3436.936808] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3436.941642] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3436.946475] ? trace_hardirqs_on+0x10/0x10 [ 3436.950711] ? lock_acquire+0x170/0x3f0 [ 3436.954680] ? ____cache_alloc_node+0x153/0x1c0 [ 3436.959346] ? cache_grow_begin+0x3f/0x410 [ 3436.963600] cache_grow_begin+0x91/0x410 [ 3436.967668] fallback_alloc+0x205/0x2b0 [ 3436.971635] __kmalloc+0x213/0x400 [ 3436.975243] ? mempool_create_node+0x2bb/0x3d0 [ 3436.979837] ? mempool_kfree+0x20/0x20 [ 3436.983731] mempool_create_node+0x2bb/0x3d0 [ 3436.988265] ceph_mount+0x78a/0x181c [ 3436.992141] ? __lockdep_init_map+0x100/0x560 [ 3436.996629] mount_fs+0x92/0x2a0 [ 3437.000105] vfs_kern_mount.part.0+0x5b/0x3c0 [ 3437.004744] do_mount+0x3c9/0x25e0 [ 3437.008282] ? copy_mount_string+0x40/0x40 [ 3437.012699] ? __might_fault+0x177/0x1b0 [ 3437.016774] ? _copy_from_user+0x94/0x100 [ 3437.020923] ? memdup_user+0x54/0xa0 [ 3437.024632] ? copy_mount_options+0x1ec/0x2e0 [ 3437.029243] ? copy_mnt_ns+0x8a0/0x8a0 [ 3437.033129] SyS_mount+0xa8/0x120 [ 3437.036571] ? copy_mnt_ns+0x8a0/0x8a0 [ 3437.040469] do_syscall_64+0x1d5/0x640 [ 3437.044352] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3437.049541] RIP: 0033:0x45ca29 [ 3437.052725] RSP: 002b:00007ff622dc1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3437.060441] RAX: ffffffffffffffda RBX: 00000000004f6280 RCX: 000000000045ca29 [ 3437.067705] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000020000640 [ 3437.074990] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3437.082252] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 3437.089518] R13: 0000000000000751 R14: 00000000004ca3aa R15: 00007ff622dc26d4 [ 3437.144085] Mem-Info: [ 3437.147491] active_anon:1230973 inactive_anon:10262 isolated_anon:0 [ 3437.147491] active_file:1215 inactive_file:1033 isolated_file:103 [ 3437.147491] unevictable:0 dirty:82 writeback:0 unstable:0 [ 3437.147491] slab_reclaimable:19046 slab_unreclaimable:147876 [ 3437.147491] mapped:60104 shmem:10430 pagetables:58755 bounce:0 [ 3437.147491] free:25712 free_pcp:181 free_cma:0 [ 3437.405289] Node 0 active_anon:1873064kB inactive_anon:16136kB active_file:220kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):28kB mapped:184816kB dirty:40kB writeback:0kB shmem:16812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3437.454029] Node 1 active_anon:3040704kB inactive_anon:24908kB active_file:4916kB inactive_file:5300kB unevictable:0kB isolated(anon):0kB isolated(file):460kB mapped:56560kB dirty:304kB writeback:0kB shmem:24908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3437.535366] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:4404kB inactive_anon:0kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3437.670462] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 3437.689263] Node 0 DMA32 free:30228kB min:36296kB low:45368kB high:54440kB active_anon:1868644kB inactive_anon:16136kB active_file:232kB inactive_file:16kB unevictable:0kB writepending:40kB present:3129332kB managed:2623996kB mlocked:0kB kernel_stack:17952kB pagetables:58244kB bounce:0kB free_pcp:756kB local_pcp:108kB free_cma:0kB [ 3437.721057] lowmem_reserve[]: 0 0 0 0 0 [ 3437.725225] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3437.752989] lowmem_reserve[]: 0 0 0 0 0 [ 3437.757178] Node 1 Normal free:65076kB min:53592kB low:66988kB high:80384kB active_anon:3041040kB inactive_anon:24888kB active_file:5424kB inactive_file:4936kB unevictable:0kB writepending:312kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:61280kB pagetables:176856kB bounce:0kB free_pcp:876kB local_pcp:172kB free_cma:0kB [ 3437.788493] lowmem_reserve[]: 0 0 0 0 0 [ 3437.816261] Node 0 DMA: 17*4kB (UMH) 33*8kB (UME) 14*16kB (UMEH) 5*32kB (UME) 4*64kB (MH) 2*128kB (EH) 2*256kB (ME) 3*512kB (UEH) 3*1024kB (MEH) 2*2048kB (UE) 0*4096kB = 10444kB [ 3437.853488] Node 0 DMA32: 1347*4kB (UMEH) 194*8kB (UMEH) 82*16kB (UME) 182*32kB (UME) 45*64kB (UM) 18*128kB (M) 10*256kB (M) 9*512kB (UM) 4*1024kB (U) 0*2048kB 0*4096kB = 30524kB [ 3437.902097] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3437.932981] Node 1 Normal: 1131*4kB (UME) 720*8kB (UME) 1024*16kB (UMEH) 356*32kB (UMEH) 413*64kB (UM) 4*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 65004kB [ 3437.965330] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3437.984930] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3438.004781] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3438.023652] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3438.042874] 12821 total pagecache pages [ 3438.051686] 0 pages in swap cache [ 3438.060225] Swap cache stats: add 0, delete 0, find 0/0 [ 3438.071538] Free swap = 0kB [ 3438.078131] Total swap = 0kB [ 3438.085944] 1965979 pages RAM [ 3438.092623] 0 pages HighMem/MovableOnly [ 3438.101403] 338455 pages reserved [ 3438.108427] 0 pages cma reserved [ 3438.118637] ================================================================== [ 3438.128099] BUG: KASAN: use-after-free in ceph_destroy_options+0xda/0x100 [ 3438.135157] Read of size 8 at addr ffff8880971bff50 by task syz-executor.5/21906 [ 3438.142686] [ 3438.144321] CPU: 0 PID: 21906 Comm: syz-executor.5 Not tainted 4.14.181-syzkaller #0 [ 3438.152209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3438.161569] Call Trace: [ 3438.164191] dump_stack+0x1b2/0x283 [ 3438.167829] ? ceph_destroy_options+0xda/0x100 [ 3438.172421] print_address_description.cold+0x54/0x1dc [ 3438.177709] ? ceph_destroy_options+0xda/0x100 [ 3438.182294] kasan_report.cold+0xa9/0x2b9 [ 3438.186448] ceph_destroy_options+0xda/0x100 [ 3438.190859] ceph_mount+0xd43/0x181c [ 3438.194575] ? __lockdep_init_map+0x100/0x560 [ 3438.199092] mount_fs+0x92/0x2a0 [ 3438.202597] vfs_kern_mount.part.0+0x5b/0x3c0 [ 3438.207127] do_mount+0x3c9/0x25e0 [ 3438.210676] ? copy_mount_string+0x40/0x40 [ 3438.214915] ? __might_fault+0x177/0x1b0 [ 3438.218977] ? _copy_from_user+0x94/0x100 [ 3438.223128] ? memdup_user+0x54/0xa0 [ 3438.226871] ? copy_mount_options+0x1ec/0x2e0 [ 3438.231363] ? copy_mnt_ns+0x8a0/0x8a0 [ 3438.235251] SyS_mount+0xa8/0x120 [ 3438.238688] ? copy_mnt_ns+0x8a0/0x8a0 [ 3438.242567] do_syscall_64+0x1d5/0x640 [ 3438.246449] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3438.256746] RIP: 0033:0x45ca29 [ 3438.259917] RSP: 002b:00007ff622dc1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3438.267793] RAX: ffffffffffffffda RBX: 00000000004f6280 RCX: 000000000045ca29 [ 3438.275047] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000020000640 [ 3438.282313] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3438.289567] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 3438.296921] R13: 0000000000000751 R14: 00000000004ca3aa R15: 00007ff622dc26d4 [ 3438.304269] [ 3438.305882] Allocated by task 21906: [ 3438.309583] kasan_kmalloc.part.0+0x4f/0xd0 [ 3438.313892] kmem_cache_alloc_trace+0x14d/0x3f0 [ 3438.318541] ceph_parse_options+0xb8/0xe50 [ 3438.322779] ceph_mount+0x44f/0x181c [ 3438.326500] mount_fs+0x92/0x2a0 [ 3438.329853] vfs_kern_mount.part.0+0x5b/0x3c0 [ 3438.334367] do_mount+0x3c9/0x25e0 [ 3438.337890] SyS_mount+0xa8/0x120 [ 3438.341326] do_syscall_64+0x1d5/0x640 [ 3438.345197] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3438.350376] [ 3438.352003] Freed by task 21906: [ 3438.355380] kasan_slab_free+0xaf/0x190 [ 3438.359336] kfree+0xcb/0x260 [ 3438.362456] ceph_destroy_client+0x90/0xb0 [ 3438.366673] ceph_mount+0xd1c/0x181c [ 3438.370367] mount_fs+0x92/0x2a0 [ 3438.373714] vfs_kern_mount.part.0+0x5b/0x3c0 [ 3438.378191] do_mount+0x3c9/0x25e0 [ 3438.381714] SyS_mount+0xa8/0x120 [ 3438.385148] do_syscall_64+0x1d5/0x640 [ 3438.389042] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3438.394338] [ 3438.395947] The buggy address belongs to the object at ffff8880971bfe80 [ 3438.395947] which belongs to the cache kmalloc-256 of size 256 [ 3438.408584] The buggy address is located 208 bytes inside of [ 3438.408584] 256-byte region [ffff8880971bfe80, ffff8880971bff80) [ 3438.420453] The buggy address belongs to the page: [ 3438.425367] page:ffffea00025c6fc0 count:1 mapcount:0 mapping:ffff8880971bf0c0 index:0x0 [ 3438.433519] flags: 0xfffe0000000100(slab) [ 3438.437654] raw: 00fffe0000000100 ffff8880971bf0c0 0000000000000000 000000010000000c [ 3438.445523] raw: ffffea0002a3b520 ffffea0002a274a0 ffff8880aa8007c0 0000000000000000 [ 3438.453385] page dumped because: kasan: bad access detected [ 3438.459072] [ 3438.460680] Memory state around the buggy address: [ 3438.465692] ffff8880971bfe00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 3438.473030] ffff8880971bfe80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3438.480469] >ffff8880971bff00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3438.487807] ^ [ 3438.493762] ffff8880971bff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3438.501115] ffff8880971c0000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3438.508607] ================================================================== [ 3438.515957] Disabling lock debugging due to kernel taint [ 3438.530296] Kernel panic - not syncing: panic_on_warn set ... [ 3438.530296] [ 3438.537700] CPU: 0 PID: 21906 Comm: syz-executor.5 Tainted: G B 4.14.181-syzkaller #0 [ 3438.546796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3438.556151] Call Trace: [ 3438.558745] dump_stack+0x1b2/0x283 [ 3438.562407] panic+0x1f9/0x42d [ 3438.565604] ? add_taint.cold+0x16/0x16 [ 3438.569578] ? preempt_schedule_common+0x4a/0xc0 [ 3438.574341] ? ceph_destroy_options+0xda/0x100 [ 3438.578921] ? ___preempt_schedule+0x16/0x18 [ 3438.583334] ? ceph_destroy_options+0xda/0x100 [ 3438.587912] kasan_end_report+0x43/0x49 [ 3438.591890] kasan_report.cold+0x12f/0x2b9 [ 3438.596126] ceph_destroy_options+0xda/0x100 [ 3438.600535] ceph_mount+0xd43/0x181c [ 3438.604247] ? __lockdep_init_map+0x100/0x560 [ 3438.609120] mount_fs+0x92/0x2a0 [ 3438.612486] vfs_kern_mount.part.0+0x5b/0x3c0 [ 3438.616978] do_mount+0x3c9/0x25e0 [ 3438.620517] ? copy_mount_string+0x40/0x40 [ 3438.624751] ? __might_fault+0x177/0x1b0 [ 3438.628810] ? _copy_from_user+0x94/0x100 [ 3438.632964] ? memdup_user+0x54/0xa0 [ 3438.636687] ? copy_mount_options+0x1ec/0x2e0 [ 3438.641186] ? copy_mnt_ns+0x8a0/0x8a0 [ 3438.645164] SyS_mount+0xa8/0x120 [ 3438.648619] ? copy_mnt_ns+0x8a0/0x8a0 [ 3438.652506] do_syscall_64+0x1d5/0x640 [ 3438.656397] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3438.661594] RIP: 0033:0x45ca29 [ 3438.664779] RSP: 002b:00007ff622dc1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3438.672484] RAX: ffffffffffffffda RBX: 00000000004f6280 RCX: 000000000045ca29 [ 3438.679760] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000020000640 [ 3438.687063] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3438.694366] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 3438.701639] R13: 0000000000000751 R14: 00000000004ca3aa R15: 00007ff622dc26d4 [ 3438.710282] Kernel Offset: disabled [ 3438.713902] Rebooting in 86400 seconds..