{0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x8, [{0xfffffff4}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}}) 06:16:56 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCGETX(r2, 0x5432, &(0x7f0000000000)) 06:16:56 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 272.663530] Unknown ioctl 4701 [ 272.730569] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 272.785070] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 272.810933] CPU: 0 PID: 15132 Comm: syz-executor.3 Not tainted 4.14.194-syzkaller #0 [ 272.818866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.823942] Unknown ioctl 4701 [ 272.828259] Call Trace: [ 272.828282] dump_stack+0x1b2/0x283 [ 272.828306] warn_alloc.cold+0x96/0x1cc [ 272.828316] ? zone_watermark_ok_safe+0x220/0x220 [ 272.828327] ? perf_trace_lock_acquire+0x510/0x510 [ 272.828337] ? perf_trace_lock_acquire+0x510/0x510 [ 272.828348] ? fs_reclaim_release+0xd0/0x110 [ 272.828366] __vmalloc_node_range+0x10e/0x150 [ 272.828380] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 272.828388] vmalloc_user+0x47/0xa0 [ 272.828400] ? vb2_vmalloc_alloc+0xa6/0x280 [ 272.878720] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 272.884101] vb2_vmalloc_alloc+0xa6/0x280 [ 272.888265] __vb2_queue_alloc+0x47a/0xd90 [ 272.892530] vb2_core_create_bufs+0x279/0x5a0 [ 272.897034] ? __vb2_queue_free+0x7a0/0x7a0 [ 272.901370] ? __lock_acquire+0x5fc/0x3f20 [ 272.905619] vb2_create_bufs+0x2e1/0x5b0 [ 272.909833] ? vb2_thread_start.cold+0x24/0x24 [ 272.914445] ? check_preemption_disabled+0x35/0x240 [ 272.919477] ? perf_trace_lock+0xf7/0x490 [ 272.923660] vb2_ioctl_create_bufs+0x1f7/0x330 [ 272.928535] v4l_create_bufs+0xa4/0x150 [ 272.932522] __video_do_ioctl+0x65b/0x6a0 [ 272.936703] ? video_ioctl2+0x30/0x30 [ 272.940514] ? __might_fault+0x177/0x1b0 [ 272.944607] video_usercopy+0xf5/0xe90 [ 272.948503] ? video_ioctl2+0x30/0x30 [ 272.952316] ? v4l_g_ctrl+0x390/0x390 [ 272.956130] ? check_preemption_disabled+0x35/0x240 [ 272.961182] ? check_preemption_disabled+0x35/0x240 [ 272.966209] ? perf_trace_lock+0xf7/0x490 [ 272.970364] ? perf_trace_lock_acquire+0x510/0x510 [ 272.975320] v4l2_ioctl+0x1bb/0x2f0 [ 272.978951] ? v4l2_open+0x2f0/0x2f0 [ 272.982675] do_vfs_ioctl+0x75a/0xff0 [ 272.986509] ? selinux_inode_setxattr+0x730/0x730 [ 272.991386] ? ioctl_preallocate+0x1a0/0x1a0 [ 272.995796] ? lock_downgrade+0x740/0x740 [ 272.999957] ? __fget+0x225/0x360 [ 273.003417] ? security_file_ioctl+0x83/0xb0 [ 273.007832] SyS_ioctl+0x7f/0xb0 [ 273.011205] ? do_vfs_ioctl+0xff0/0xff0 [ 273.015194] do_syscall_64+0x1d5/0x640 [ 273.019103] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 273.024304] RIP: 0033:0x45d579 [ 273.027493] RSP: 002b:00007fa14ead2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.035219] RAX: ffffffffffffffda RBX: 000000000001f340 RCX: 000000000045d579 [ 273.042496] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 273.049773] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 06:16:56 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="4ab84cb9", 0xffffffffffffff3c}, {&(0x7f0000000100)="24ac06ec9eb3829e1da40c889a2547c1bb987b83589ec6d914e0f7f09e09559c3c27ef2f16c22140b2ef0a004c63bfc54b7d2fa0f9253be82f5c8446", 0x3c}], 0x2}, 0x404c091) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:16:56 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:16:56 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=ANY=[@ANYBLOB="6c010000170001000000000000000000fe8000000000000000000000000000bb0000000000000000ac14140000000000000000000000000000000000000000000000000000000000ac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000005000000000000000000000100000000000000000200009a00000000", @ANYRES32=0x0, @ANYRES16=r0, @ANYRESOCT=r0], 0x16c}}, 0x0) [ 273.057063] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 273.064336] R13: 00007ffc763ef02f R14: 00007fa14ead39c0 R15: 000000000118cf4c 06:16:56 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 273.155579] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 273.187942] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 273.286273] Mem-Info: [ 273.288761] active_anon:218401 inactive_anon:4323 isolated_anon:0 [ 273.288761] active_file:7240 inactive_file:22667 isolated_file:0 [ 273.288761] unevictable:0 dirty:263 writeback:0 unstable:0 [ 273.288761] slab_reclaimable:17317 slab_unreclaimable:122125 [ 273.288761] mapped:61409 shmem:4516 pagetables:3023 bounce:0 [ 273.288761] free:1031113 free_pcp:337 free_cma:0 [ 273.341217] Node 0 active_anon:873804kB inactive_anon:17292kB active_file:28824kB inactive_file:90668kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:245636kB dirty:1044kB writeback:0kB shmem:18064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 843776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 273.374742] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 273.401260] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 273.428925] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 273.435612] Node 0 DMA32 free:329496kB min:36272kB low:45340kB high:54408kB active_anon:870612kB inactive_anon:17296kB active_file:28824kB inactive_file:90668kB unevictable:0kB writepending:1044kB present:3129332kB managed:2621192kB mlocked:0kB kernel_stack:10080kB pagetables:11740kB bounce:0kB free_pcp:1360kB local_pcp:708kB free_cma:0kB [ 273.467003] lowmem_reserve[]: 0 0 0 0 0 [ 273.471256] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 273.497600] lowmem_reserve[]: 0 0 0 0 0 [ 273.501693] Node 1 Normal free:3784084kB min:53612kB low:67012kB high:80412kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 273.529568] lowmem_reserve[]: 0 0 0 0 0 [ 273.529592] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 273.529673] Node 0 DMA32: 488*4kB (UME) 313*8kB (UM) 295*16kB (UM) 420*32kB (UME) 64*64kB (UME) 31*128kB (UM) 16*256kB (UM) 8*512kB (UM) 0*1024kB 6*2048kB (UME) 68*4096kB (M) = 329688kB [ 273.529755] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 273.529808] Node 1 Normal: 57*4kB (UE) 380*8kB (UE) 277*16kB (UM) 62*32kB (UM) 21*64kB (UME) 11*128kB (UM) 7*256kB (UM) 1*512kB (U) 1*1024kB (M) 4*2048kB (ME) 918*4096kB (M) = 3784084kB [ 273.529918] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 273.529925] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 273.529932] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 273.529938] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 273.529942] 22766 total pagecache pages [ 273.529950] 0 pages in swap cache [ 273.529955] Swap cache stats: add 0, delete 0, find 0/0 [ 273.529959] Free swap = 0kB [ 273.529962] Total swap = 0kB [ 273.529967] 1965979 pages RAM [ 273.529970] 0 pages HighMem/MovableOnly [ 273.529974] 339073 pages reserved [ 273.529977] 0 pages cma reserved [ 273.530096] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 273.530126] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 273.530255] CPU: 0 PID: 15154 Comm: syz-executor.1 Not tainted 4.14.194-syzkaller #0 [ 273.530263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.530268] Call Trace: [ 273.530288] dump_stack+0x1b2/0x283 [ 273.530308] warn_alloc.cold+0x96/0x1cc [ 273.530321] ? zone_watermark_ok_safe+0x220/0x220 [ 273.530337] ? perf_trace_lock_acquire+0x510/0x510 [ 273.530353] ? perf_trace_lock_acquire+0x510/0x510 [ 273.530371] ? fs_reclaim_release+0xd0/0x110 [ 273.530396] __vmalloc_node_range+0x10e/0x150 [ 273.530412] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 273.530423] vmalloc_user+0x47/0xa0 [ 273.530433] ? vb2_vmalloc_alloc+0xa6/0x280 [ 273.530441] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 273.530449] vb2_vmalloc_alloc+0xa6/0x280 [ 273.530464] __vb2_queue_alloc+0x47a/0xd90 [ 273.530493] vb2_core_create_bufs+0x279/0x5a0 [ 273.530508] ? __vb2_queue_free+0x7a0/0x7a0 [ 273.530529] ? __lock_acquire+0x5fc/0x3f20 [ 273.530547] vb2_create_bufs+0x2e1/0x5b0 [ 273.530567] ? vb2_thread_start.cold+0x24/0x24 [ 273.530581] ? check_preemption_disabled+0x35/0x240 [ 273.530596] ? perf_trace_lock+0xf7/0x490 [ 273.530614] vb2_ioctl_create_bufs+0x1f7/0x330 [ 273.530630] v4l_create_bufs+0xa4/0x150 [ 273.530646] __video_do_ioctl+0x65b/0x6a0 [ 273.530666] ? video_ioctl2+0x30/0x30 [ 273.530683] ? __might_fault+0x177/0x1b0 [ 273.530700] video_usercopy+0xf5/0xe90 [ 273.530713] ? video_ioctl2+0x30/0x30 [ 273.530726] ? v4l_g_ctrl+0x390/0x390 [ 273.530738] ? check_preemption_disabled+0x35/0x240 [ 273.530753] ? check_preemption_disabled+0x35/0x240 [ 273.530771] ? perf_trace_lock_acquire+0x510/0x510 [ 273.530788] v4l2_ioctl+0x1bb/0x2f0 [ 273.530798] ? v4l2_open+0x2f0/0x2f0 [ 273.530815] do_vfs_ioctl+0x75a/0xff0 [ 273.530840] ? selinux_inode_setxattr+0x730/0x730 [ 273.530852] ? ioctl_preallocate+0x1a0/0x1a0 [ 273.530863] ? lock_downgrade+0x740/0x740 [ 273.530883] ? __fget+0x225/0x360 [ 273.530903] ? security_file_ioctl+0x83/0xb0 [ 273.530918] SyS_ioctl+0x7f/0xb0 [ 273.530929] ? do_vfs_ioctl+0xff0/0xff0 [ 273.530947] do_syscall_64+0x1d5/0x640 [ 273.530970] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 273.530979] RIP: 0033:0x45d579 [ 273.530985] RSP: 002b:00007f53308c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.530999] RAX: ffffffffffffffda RBX: 000000000001f340 RCX: 000000000045d579 [ 273.531006] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 273.531014] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 06:16:57 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x9, 0x4, 0x1, {0x1, @raw_data="514fb675bf540f3e180d5599de65fd86b684c4731dcba818b19a0e7318bba5e8562ac13da4ef71144a26b7eeadbb5f9b2bb56a7e8b8f39f313d5de8d4f4f8a2e6bc2e8f468cd89a36a0c0fecda3a17d369c26ce1abaf3786e0215447a14591c4c19c805e35b44ea41ae6b800205bd2c4b95fddfe0a49d32ac84fa33514db1bf460f6a0a21775b0ba42fcdb5ebe2a33b408161cda0bc7231a7683f0bd7f4f774dbf6ba969030c2e4f02b218b7c8681386218c058b7c00"}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_smc(0x2b, 0x1, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f00000001c0)=0x2) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x3, 0x3f, 0xff, 0x5, 0x0, 0x6, 0x10000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000100), 0x4}, 0x4600a, 0xc4b1, 0x9, 0x3, 0x70c4, 0x3, 0x9}, r2, 0x4, r4, 0x4) 06:16:57 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c010000170001000000000000000000fe8000000000000000000000000000bb0000000000000000ac14140000000000000000000000000000000000000000000000000000000000ac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000005000000000000000000000100000000000000000200000000004000193aaf5216ca1849b132be62a4a3cd86fdf0ceceb75e6b682f15703f15ec3e3fec7ddb03ae8c692834c2cbff366124b7f2bd175026588e490c0f5e0fac9bd10800216925e24d91aa852c6dacbbbeb109b5fc9f22e309c63649dc364529", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500ac141400000000000000000000000000000000003200000000000000fe88000000000000000000000000000100"/196], 0x16c}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x8, 0x378b, 0xffffffc1, 0x4, 0xf, "96cdf422c8be50bbaff453406a9a23112551dc"}) 06:16:57 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:16:57 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r2, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRES32=r3, @ANYBLOB="14000200000000cb8beca92335"], 0x2c}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@ipv6_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x2b, 0x0, r4}, [@IFA_FLAGS={0x8, 0x8, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c001}, 0x0) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000100)={0x4005, 0x4, 0x6, 0xffff}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x6, 0x8, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/41, &(0x7f00000000c0)=0x29) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:16:57 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) r3 = socket(0x10, 0x803, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r6, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r7, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000100)={{0x2, 0x4e21, @remote}, {0x6, @dev={[], 0x18}}, 0x22, {0x2, 0x4e20, @multicast1}, 'vlan0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x8, [{0xfffffff4}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}}) 06:16:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000140)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = signalfd4(r3, &(0x7f00000000c0)={[0x5]}, 0x8, 0x80000) r6 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r8, 0x4) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000540)=r8, 0x4) dup3(r0, r1, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000080)={0x0, 0x3d}, &(0x7f0000000100)) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4138ae84, &(0x7f0000000000)={0xffffffff}) [ 273.531021] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 273.531028] R13: 00007ffd30f7116f R14: 00007f53308c59c0 R15: 000000000118cfec [ 273.997895] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 06:16:57 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x80) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:16:57 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 274.067531] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 06:16:57 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r4, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r5, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r9, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x18, 0x1411, 0x400, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x4801}, 0x20040000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x2, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0d0}, 0x40) [ 274.130745] sctp: [Deprecated]: syz-executor.1 (pid 15205) Use of int in maxseg socket option. [ 274.130745] Use struct sctp_assoc_value instead 06:16:57 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:16:57 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:16:57 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 274.346715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=15211 comm=syz-executor.2 [ 274.385260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=15211 comm=syz-executor.2 [ 274.430242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=15211 comm=syz-executor.2 [ 274.834575] sctp: [Deprecated]: syz-executor.1 (pid 15242) Use of int in maxseg socket option. [ 274.834575] Use struct sctp_assoc_value instead 06:17:00 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) delete_module(&(0x7f0000000140)='/dev/video#\x00', 0x800) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000100)=0x7fff, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x5, 0x0, [{0xfffffff4}]}}}) 06:17:00 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/245, 0xf5) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x29, 0x800, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:00 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x0, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:00 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r3, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self\x00', 0xe8200, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x8cda565e792d4839, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008194}, 0x4000) 06:17:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x9, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x49, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008137ffff003b0004ffffffff00000000000000060000daaeffffffffff0878bb975fecccfde524050047015eff000555ba6225e3f45f00e1032e1b8f9e7c5cb07471bae11e390c42a24743bb94734b555b90ff1a179f56464671c2198eadbffaa3eebdb8e16709086fc213094bd2f432cd27343f644c96dac8322d8402a4540b3c5c55c0f3ca2fc5f6fa56354e8cde0f075e3e958fc8e02cd02649093a3e5690cd15a5c1d796122b48d6fcb83051b2ffd2d2095b0f97c648556fc1f18ee4e6c8efbe9d2416f7edae026003a17b8124630a064adf4cebbab700f1c540f717de5cffe283688b9ab9599ff9d584bd96d087666aa525b65017252ffeb49214539c38eaa053fa205706f1aebf1608ba852a74a187e79ef1e43fcd71e8161dbf6e1ff35b623f05984fa5efb2111b068f3de2854b75c2ce45b22e80699aa151994c169ddf45fe587e8efbfa78537adf8cdedb55aea9a2044d716d9e38f63af6405968bd527e68cf3388879d8bac313264c99f21144148c0ee3aa2f06e28852a0c2da9f36c49cd130358599d902a91b6cb1c6a71b04d7bde5772dd4e3d5a73503e08fd0570879d93f7"], 0x0) 06:17:00 executing program 0: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) dup(0xffffffffffffffff) umount2(&(0x7f0000000240)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setreuid(0x0, 0x0) r0 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0x1, 0x5}, 0x10) 06:17:00 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x9, 0x4, 0x1, {0x1, @raw_data="514fb675bf540f3e180d5599de65fd86b684c4731dcba818b19a0e7318bba5e8562ac13da4ef71144a26b7eeadbb5f9b2bb56a7e8b8f39f313d5de8d4f4f8a2e6bc2e8f468cd89a36a0c0fecda3a17d369c26ce1abaf3786e0215447a14591c4c19c805e35b44ea41ae6b800205bd2c4b95fddfe0a49d32ac84fa33514db1bf460f6a0a21775b0ba42fcdb5ebe2a33b408161cda0bc7231a7683f0bd7f4f774dbf6ba969030c2e4f02b218b7c8681386218c058b7c00"}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_smc(0x2b, 0x1, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f00000001c0)=0x2) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x3, 0x3f, 0xff, 0x5, 0x0, 0x6, 0x10000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000100), 0x4}, 0x4600a, 0xc4b1, 0x9, 0x3, 0x70c4, 0x3, 0x9}, r2, 0x4, r4, 0x4) [ 277.387665] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) 06:17:00 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:00 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x0, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 277.459547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15277 comm=syz-executor.2 [ 277.472728] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 277.500793] CPU: 0 PID: 15268 Comm: syz-executor.3 Not tainted 4.14.194-syzkaller #0 [ 277.508729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.518097] Call Trace: [ 277.520705] dump_stack+0x1b2/0x283 [ 277.524354] warn_alloc.cold+0x96/0x1cc [ 277.528345] ? zone_watermark_ok_safe+0x220/0x220 [ 277.533203] ? perf_trace_lock_acquire+0x510/0x510 [ 277.538156] ? perf_trace_lock_acquire+0x510/0x510 [ 277.540755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15277 comm=syz-executor.2 [ 277.543109] ? fs_reclaim_release+0xd0/0x110 [ 277.543130] __vmalloc_node_range+0x10e/0x150 [ 277.543145] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 277.569658] vmalloc_user+0x47/0xa0 [ 277.573301] ? vb2_vmalloc_alloc+0xa6/0x280 [ 277.577643] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 277.583026] vb2_vmalloc_alloc+0xa6/0x280 [ 277.587195] __vb2_queue_alloc+0x47a/0xd90 [ 277.591461] vb2_core_create_bufs+0x279/0x5a0 [ 277.595978] ? __vb2_queue_free+0x7a0/0x7a0 [ 277.600335] ? __lock_acquire+0x5fc/0x3f20 [ 277.604599] vb2_create_bufs+0x2e1/0x5b0 [ 277.608686] ? vb2_thread_start.cold+0x24/0x24 [ 277.613321] ? check_preemption_disabled+0x35/0x240 [ 277.618354] ? perf_trace_lock+0xf7/0x490 [ 277.622515] vb2_ioctl_create_bufs+0x1f7/0x330 [ 277.627236] v4l_create_bufs+0xa4/0x150 [ 277.631217] __video_do_ioctl+0x65b/0x6a0 [ 277.635354] ? video_ioctl2+0x30/0x30 [ 277.639141] ? __might_fault+0x177/0x1b0 [ 277.643191] video_usercopy+0xf5/0xe90 [ 277.647080] ? video_ioctl2+0x30/0x30 [ 277.650887] ? v4l_g_ctrl+0x390/0x390 [ 277.654693] ? check_preemption_disabled+0x35/0x240 [ 277.659703] ? check_preemption_disabled+0x35/0x240 [ 277.664731] ? perf_trace_lock+0xf7/0x490 [ 277.668877] ? perf_trace_lock_acquire+0x510/0x510 [ 277.673818] v4l2_ioctl+0x1bb/0x2f0 [ 277.677445] ? v4l2_open+0x2f0/0x2f0 [ 277.681157] do_vfs_ioctl+0x75a/0xff0 [ 277.684945] ? selinux_inode_setxattr+0x730/0x730 [ 277.689783] ? ioctl_preallocate+0x1a0/0x1a0 [ 277.694196] ? lock_downgrade+0x740/0x740 [ 277.698374] ? __fget+0x225/0x360 [ 277.701820] ? security_file_ioctl+0x83/0xb0 [ 277.706225] SyS_ioctl+0x7f/0xb0 [ 277.709592] ? do_vfs_ioctl+0xff0/0xff0 [ 277.713574] do_syscall_64+0x1d5/0x640 [ 277.717476] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 277.722673] RIP: 0033:0x45d579 [ 277.725881] RSP: 002b:00007fa14ead2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.733689] RAX: ffffffffffffffda RBX: 000000000001f340 RCX: 000000000045d579 [ 277.741038] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 06:17:01 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) connect$ax25(0xffffffffffffffff, &(0x7f0000004300)={{0x3, @default, 0x4}, [@null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0xe429, 0x0, 0x0, 0x4}}, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000000)="9eda438838743bd4e9720bee57093515dc189a5ea685e9556c1c2c3cfc4df50d66d31a48aa312663b68d18c5826b5b55fb738208863dac0f10f423aee7a5d8ddc45ebdfeb7424bae859d7c37ecfc4b63914d5a56d91017dd22bc84f759a15969951aef9d5c88c96560896988fa18cd946cfcc3a0f1c993348377904eac32c980bdf7976ebca2b499cab63c4e841514277fc71d4620e29a92523402485de0e82896484c0ae497a4d686df23ca7b68c3fd5e624d3510d7f94838e54af877ca58a00c5a672bba11f5aa1ed1980dfef47b9973d0bf456ded5e72f1702b3dc5197fce39cba53a038d8dc0ec783ce70577107dc5e8b299e64a0b7f1191f0926bd25762370191710bab2f44e9069f55f8a3f87e4cb488a2fb3348c0bf3b3874291f83e4776b160ea73aafa3919c7c069c73c0052173a63158db8b65541d161f9c964926ad7f06bdd6cb6a32135b04e35701c2e13c49c1f75dc7a25d623378860692d172ec3f1e1f2d9dc77c015c13721efcb101c2390abb847e871132f472a37cc0163b39b1d575a5444e246a08a1afb1a696cabab29498a314429a3b9f44c43ba29f71fac1fbe0d01c3c16d22730932704bcfb0c1b7a432bc51dd3f5dd5afc3b342cbe6a6ff899039e28f9a51881b1d46fdcf31767cb6f5c5c69ab3c80615d77c4d1664fc4ec831b8cea2e752bbb7a9ce79df875b29f1e232751daf32a1a0c4ff8bd0688e2b8e2d668b8a77e20a9eb6ec2e2c23b94e507baeacbcfa31fb6e1ca3343668f43e3aa6d85e7c29bf0bb4dbdabddc92be7f4a6f5d21b19e6da17bfb6cc926e3847532fae29c7b62fb909130ec372d3c16cfe6aaf3ce2af0fe7610fde7aad61bc80d2f96b999c8ccf6d22cf903ca8ae8b879ec4a416f334982e9810c0140a18d4dc81b5edaae23e9f4abaf40ed71512aebbba5bb251545e188db789558a845a2877b14bdaeec3c738b7d730c0860531bf5517d4f0e8f95ed3571f8a35816d5116fcb8d7cbf42b7d5d5e65541508c898bb2e0fe96297d2ab7135662de39df099ebaed5871111f5346278cee5728cec512e6c0a0d65b51e3d627873195b84103341c2bc83b6c8fdd8ba17f5957413f61c69d618c9b9d0b1f08dc81921b6c662ee1da3bfa019b095e9a03c2db4d645ccb7364e895098cbf7d932c72d80663c7a1694d122f7348393079223c11d36c64a5856eae0397ab9a9d948204b74e56525a9d552dd0916de81cbb5af3c59b3d7f8f9154423ce2cb45a5bc808e24bef13212019a19545fe54ba84d01534358380192b8c7b0eda907810375bb66a578a58fec392b47991271c8367b91d710e8a176bc1a4e96f0e137d4c25fbb03eddc392f9f170dd744472b864fbbae7c93d86e682308b21b73c5652065d72cf02e1152b44024a90a3b52eb0bb3cb412e518d37a68aa4c7f46789c54ab30d3a73d0a8712fde612294cda2aa1ccf164930b9b1d17801d4fbb06e849d39bf2b5141330caa0d2618b616f1c67e1ca57080e79ed9092ba7a55e8121cfc825cd26a0199a479a7ab1b7b23d2a4dd82fa6d04ee41ca680435efc934f0451e865e8632ac2f1115f4cdd33b0fccb7a2326127faf20cba37c828613dba5a98f4e1ad25eb6b91078cf73d873df9ef91531476f64b83559ff7ccdc4c070d478b18196ea05fe8d4ea0216ee5273dfabbd04582f40f064c9781afd2cbf30901f28cd09cc934f1b2d50883778274177e3dba8af0a1b931d80ce1a6c4085780ea2195b65ecfd2953f78a5290fe560d0cd6a5e73890a5a82dc410b92a3ef2be05ec5607820fd4ca6b9c3aa258d59022fdcb21665f1ce4e8aad8fd918c43bd3c2afe3dc223ff9f48831d401c8b6996190793d1dd7551f8511b69283992398d8f9b4bd2b3398d3b8c6f3c5d8b802ca5282b70242df2b7be4b38e70c3065f8da888631375afcc05ce578089c4f783776b286b7a60d1b5e189e2742a3240c1036a953d886885422eef01413c38099b64505fd5a73488acb4e611820674c58ae74d6c64a885d4beda9bd7903bcdc71e3711e2a057c0eab2100c321050ab14c6e453c53182577ad3178603cd9afde40a701120e9a36074fd582428c74e02781318e6c65450f8f020bd22475696fe13b8c59260e53a06d16eabd135e887a0a6bbc8ad21be7661df76fec5b13844f68b8eed1a7379713738beac9f23c7a26520e19797a910cde9fb285179526889b908b7eb49bb06f70f6271fba8712c1a4269ebcf4b7d043e924e3d2c4c753fd7e547d95841e335179836f76424e728810d7f32b78256ea30c79d9238a6588426e1f2d4c0b03d5605bd826ed24f0f11326b4cf958632b86e017aa80e142db1580c44f76d9c98196f3f6852ab2bfc6a01a3553a130c2d171957f5a45c3550fbbc990ef8742a98a86b280a57b9f198ff436bc01161ada50e6f23026c3254adf2321bff7e20aa54080bbb57d8d52c6a6df6107706a2e5bc6da68f17b474c0edd39401d765086e885cf7992405f856557915603cbe8894676e996bbadbb649a5e7498b91f9bd2f697dd9ebbe4d386050258b9f4c94781e61c660651c3f1e3ae51f8c035eca365bf15d6db48ea9ce183515f4a208d010f7c23dcacbd6e225490d7e9c133525f5c9018d752b21b4897bf18b64b6a9936f538a0a8958fc934440aeeaad2b68ac844d76f0900a6c95bd0b353d85d4fb62eb88360112237fd8c636a80e3130b21d66ae8ec58a4b76cba0602f96da919f7e84fd37e3ec2379f58e389a39c78d2482e03c379e3c4649ad63a76e3707ecff07d2fcb0c9dfc524cab49e69a09c92e4f88714335cb57d3f6184d07bef9657280fb5c9fd2d8f940f7ac6c5407e3077aa2e4ba8e217e0ee19e302d6d90e3be05a86dade35d2e454e511afb5cf5936f1d11f2fa6be6ceaa817dbdc7a6aabf2fad8ff3efa8382a25099f0c5989d2ad56ae0f4968b2cfcfc67b4f1c161c75900b4848f59a3c0376dfcb7997bf28e9e85d6dd942a360516de38e1c1a038a796f9a77ff2b0c7e5e8f4932391a0e58e76dacc6f9764178a211dfde3e75d367d2911ff398126ffdf83cf2fbdf1ad5232bed9155f7a168638a572094a9e934d4969b358cf6e121d7fd2aeae2f499068b42c152f0e3403a230885d6f92f038ddaa23499f804ffb06abdbabb51f6c38c92fb1a6271a4b13d6d11125b8ec12efa5907dc65062797fb9cca15e2f254e76b182d3fcdb4e96ac4de36d6df7e7bba5c32f422286b1be3b79bffb6fd693761952d195a84ad9ceb07287a0fbefab9e0347b513c5f60233ccd4b52d90ec144a2f896d9dc7f279f8aa93038f3efa286e1c3006933a4d7183d952f8d28b141b28b2af355b5bd8198dfde1ffb8d09202aff0d16ca3fec194662892a49f829813970a4520f1228aa03d211a45bed3b2e05bf1f10b1a152761e7b6c6ddea863a3c02224256092c70ca70dc185c4c385dd98b09e2682661e1e66f71d9c4037048eb70e8a1cbe57de87ec43713abf5fdcf63b9c482f318e3bec37e878dadbae15a02d731e6c8574eb14c059d72f73be5174add786d06b585a28a06d349d8e434a491b34897b3c1ad786ec8280d7f57edd4fbc6aea5485d659b59d393e331cf91e6ed76f340fcf7cf460892fa7318fc42b883f61d888ad982a751accb613c66661fba5f3d6de751a6a9ef8a4700316aaad04e991aab7903f4ef012ec2a8c092234e74ef335daf360ae47bbd2bbc6ad8c1a4f81efe8bbd703cb55ef36b32b4e30cb5a3b165c02ba295d0e1c40ce6ff8f479a74f01275f113ebfa8ade37a59ce70e6ca2a6f48f1be085f61bf772e2c2da523a2cfe63e99c57bdb1ff23139d4fca49eff7547e9880eefd3f7511a677efa23b52098ba89037c48dfcda2e8c1cfb9f892161049e53f8cee55256279512aecab8c441600dae0fd957883273047cf5c66ba209f830aa2ce0cbe41ca08c0cef4aed7f4324009200661a7ce680e5a8df2d051c1d8b2f63d25d8d74d05c75c46c8f3f24d625539e63459650960498a54ec3b16225bbbf4d3930009df265839d72611f5332a904cdebada108236e4414a2909ad01ec44b9d7f75de4385ad7ca5152e890a0919b3639fd1bcbca3b737ebb8d9ae541b1271cf2166ba15830e66f3d3afd3b754a7f81ad4f0999704ae99c114907c5be4a4797f13b80564f234723a34dbe137dabfd7fa23562df679f54a6ab54def6d63deae9844f72fd73efd0413551f5c4b9ee826eb3b7faf92a59ea34a16723b4fea14d1c8815a4e2d39fc48d1dbce526a7c53f5a96d0ef6463a0cee73fd3505f5c764a264b83c4a21f80e8b61c82d24442d13da99d18dc1b2538e7a510f6093d9ef2bc5cc777d4f98411e93919eddfd69d6e20d227cb61c50f358ea227f4de941fb080c1cf6b1f6e25533768fe133dbfc3f9d29c603bed38aa3c5af5b81a706b0067b40b88f992610d04c7cc36b8f649697cd6a93fae51138161891ae75a7147780fc59af5a6e18c54f9d2a4fe7fa92314b399afba9a40d0cc24f70a2593acf8d179215e06b7a9a88224bafcb2cbf60caf5fe4ff38208a70793b5dc33cd572956260e1c86312d3ba9b3a4b2b44376f2e78c616a6c0880ac8dcbaa30b9f761d500fd03a8518dd0509157b184a2d95e0caf3ffc8ac2db6c54d80c71a1e5b9ea3bf51071e2118af204123daceeb04e4f6f31f32a4d3fbb76ee49440cabda2c121c1b99acab5b87cecc37c3f9066af34ab29d6598bbfd91047a2ac7ce3a8f3027ff5e6d743506f161087278896a98ed37122ba208b61cf54d3929555ab06b564cd5e4f46f4755a6cfa2ef2b30d29ea66f2749d4060d411fa9160c91b6f55cf071ac8222c6313df18759e2958cddfe3db4cbeb9cd39abcf5f0beaecae8437813995cb7ed0b87d42ca942ff7245ece204798d01361c5f008e0d82bdf76660515bc78f7f8f409ccf68614b2cb50f5af2615661326fd971bc57eeeade60ea906b8df1cb0dfafd318cd2c396309c329d0469ca192aa8f51d7c4227685440f073983255baf054b97b9d7be1d1470d7eabd5c09b2116b4e86b0567b7e97e088717a4fe3dbdd310a1c39136ea4d2c47492001f9885dba03bf97e7da376171d666441cdc2f999db137603d57df32b4260fa0165e82917bb1631ea314e7a7437e66fc68cef22cda8f456d6e583f6e3237e0bc79987a9103f7cf0918e26881f67ea582e1ff3a49177599d385bf6e42572a2547933aeddb826530e9adf30dd84c3a7fae5c4c26f6c6f3a9f0906decd314e2407825abef959c5416d18a92ff34e6c521a16e8a0a29937c77d4ee99b41d530a732acbe0bf5d274df9d496b47a9a624546bdcf9976cde12ec989cb2a70b33a7c8a3a77652023164695f9db30dfcf587f0cd4f73e385730bcbdd688f6dcb08ba0efbb9f579220afefa4acfea522e864fce9b1782ce9f14824d16e9d33a2609c23ba3c5a1af02549357a0dcc12e37819d778021762cf895abeac1125b744c8b8225a091e7be9ded9993cfa3ca9abb83e25c8f559009977a2ed9374a89619fae5ef6d164bb73d242004dc8428e44689b33ee3bbe88bb4962ab0a32a90e7aea044f08410752cb2d7aeaf3196648a3a99092665b478bb394b48f79b36db0efc7f50d6a5179c945f5298cfaac5e5dea715296f92abce7281d48a0c9c6b785a35ef5f1697c047ddb254fe9a8ab9f498b0c1ae09ffd01a3d8d427fee7e36c51e0e5c2fee2245fb8464626ab5c9857ebce91f7d22bf024d10c2d71021cd69268472de419e6cefd970cc3a8e4d1bbe6496799aa7f100411766e712aff08b731460f14f9d7356db12cf8e1c6121968dc68b1d81c086b325ca4ce6fe1f476707e08fa913144b757c6be17cf93150db29544d207f09a896f33b7335d9339215da751e7af2c6bdd19db6f521af2c8a5998dc607f97026d07111488741134c1c86eba123273d1fd5ee4b471e86f9ae9478a04c7482076ab34a1eca5c64f89e5106eed44bceec019c67c12fb4db4fdac153f4ac3b63ffeb6d30de58ec039e2dd3c181e254cd94d0a2b0b44490384cc5915b54ee1db2b6d059879bf8126c9ca976d0f7862da07ecd350930a081810a7afd72b2ad3f65b96ae9c7f91227a2b5513a559f36b90fe01be9ae5ad3ca65e2c26f358fc26b858a3633fda7ae49a5fb705220a5819b3cca41b1ccc21d7c40f5fa9c422288efa5394e4312675899d704a2aab62b8363f58fd4bc12a8bea6ffc45b4414237bf5f019321206dbba439acb5ef26641f30fdac20f964354bce94e4c9d73e137f9806deefaf6f4acaa0e76ad4fef9f6cb7fc01bbabda9612c05adbe46afcf94819e8a4b4b49ff764784fa432d47fb6d4230900043d1b4521cd6839fe8c5df4d1899fdfb13880e207cac73f0a29020bdd563bd9c2f6bcd1ec523b3e03ebf6164fc65af001830c51396f9df2d346f83a59cfc82201cf1150ea57259d579fc2ed199b3fbe42d5188c84e4354610743e5b23a265246313cc63913f17412fa00d98b379b80b96d936969572e11316bc8926cb23115186f3b2387b82c3898fa41bf16a308da62d5a3eb3609af1943fddde08a4036eb2a41b7292caad9eb082614b02a1fa255bc7abd4d0e3b4ec1801e131e68c7aa9da1a0ff10f9de87dec8fad1ad8bfa99caa49e203a7b9c33e044d4544a537471e7a452468b821959bc488c6b8cbf81e90081a26de273ad1203cc06adb6af242ab19f96c1c66b58c37e2c9309704fba63af99a8d9c5efc651afb631fe9f546b938cc3b8e526c4159e5c9f7afb29fd1d55fabf09367ce2a63a35e7a2062d1c772ed981fd77157a847f687a177cf9886ce41df8cc509302b46bc1e2ba896b1c1656a1bbfdf4cd9ac39cf8510d1c823075f16550fd044aacc8d42a56f03718f7b18475cdc3999faeb25ab3dd8a807ee04d8e5d831d08b4e309dff50330685138797e10c6362636f53f22bfc1f3d5090a5d369282d9de36bb4e2505411ccc6ea395afa1567b15a2fb4be2adeea7126b1a8e80034105e0d98bdd78e796ce1cdc06a4ae666fc0baec5c52614340ed997673e26ec47c88846c000bb7c9077337cd44f5c041fdcc64986e5e1c0f488148f0ee6f842c44c0b72e82109270341bba6e9080b70fcf930d0f10be5a36798e70111fed72727b72282ff164fc08319d74f1f57cde71b57cb397a9e753f87b97729bafba017a24cbfdee5dfe7fc296c112e93bb8fce560ca80a3afd8370baaa79ad783b51352b5440b144a47378c9ae22eda5794328e95bcca220fd07bb56915529b155c61858efe89ad36a79288e74c0e251addcfaf797432175a5562b46eff5e3aebeb74623e18beef85389383c604d8884431b07dc4bea0174aadc337ff41f558a63f16690feae47efa2a5d1318b7397e1e4ba398727d286791b71610e1d78d32800e7e113c12abf0f60b6ca4401ecd23b7aacd990633b2b017daf6bfef1b2361ece74b7dbcbb1a73d4bc1f9d2e5c9fb0b7980d25cc44d1b10c09ef5a6a05c84669294a5cadf0cd88ab449f9f0bcdd8c48590d416c5c1feaa494a2145949c2a3373df7c6014225f2745bbeb20ff294d22c0d96ca111e6926946207cab56a03162a49e68968e398f70690188ee3ca847ef421742d60b9a6ad029e8a3d607950b2bf8ad8ff297cb39acc94905635770436e134435e28205140331b5100d9f64469792fffac87bca0835cbc617446ff86a7b50418c305f32e658b32130e491e38709fd3697017ac8084cdf1ed81a28375aed092ab4e32ca88a933154dd3a9e99351acbada926b67b310c7070ac1a414a28c5abfe1f45476249a12f18ca2d981528d881ed3c5072e46a6eff3cdf37dcbc89c7f79c88a1f8d15d15beb66a0e4440c7b93e379c4e2bac1d5c8e85f1852887e2cfeb178fba1c67dc2adb0c87df8ca4444ca7f455509f492effb5001328b8cc696e2933207a2d78bbce8562ca34a248193c914406b161c8141479d891b0c6110ec1e25cad38299b489f2ec437017cadba67dcb58abd4933c95b3526f1d4747b8701a7d71e446e4b62e2941d4281faca0cf22914be5aad80f47100000000ceb24e82508fe55a92fb6db70d03d1c1ec09cfee31639341756a4630a0eaaecac7bfbddf9d30c42cbd45eb181d5bd341307ad26f496bb042e2b655c03ac3dcc587acbf50f79b5c239be9938b62d3251b199f8413b020605d5d0552cfd9c39c9132719d6d0a326b000e12fcb51bc274df79d11430060d05978cdd50583f1bca82c57dbee605e2d00fcb5414af13a596d35cb5ba62de6a28cbccc857d23547b1c7fd5ac8fbf6758d5b8451fa46d9acc00344dc2e565674b1dd3547eb8f8aa5fff99042f8d1d59e6ad2f53379211e6832fcb68f5777eb2db85b28f724f4e4ce6342cf55713ff7b0cb4f7f47dd12a6566b86709eaefae024373267ce72a89e7f3e42ab48edcccc96b5d0403fe93a927e5ccf470014f220b8257393226cd7b996f20e6a34f81206733a9fdce03b701943c1b560d3eab68c2c225cf7f7f2b56123be2bb173e9e5b37f4d3348f6b987764ad07c2acd44514ff264d7eda31e5e517a179414841ad4553d51c08f435e05f10aa82d74b97a9ba3a133e6c9175fdcd4f3dc9c16d3be1d5bbaf13240177081ac1d56681bfa988a93af09868afd608520c0bfd71d857a6661fdaf6f2e166987eb007449dd26334ae932c5003fefc0f983b9e49cbfcea325f2de16a9ae935caa46f5b3433957fb370971ed957f138f08a60fed5b84995e428e7ae7d5c22021ff016baef0e713a118344c016a99ad469313ba7f2452da0dd82e019f64aa229cf80a69b3e08ac5847f10d247179855546313232f23e055c2f74ecef14e0fdcc29a9bf0976fbb249bd5c7903183d2a53c70960a183630e7d4928daa7091a85ad987d2a4a5b8f6be6612fa72d9fbb33c67bb38eff19f2e784f94e0354cf6d35a5b2c62233c039de3734b38e97ec72bd673fef09fd56fec329818cc68cdf12cb52f7d37a8350c16e94208880bfcd3e895d7aa4489e3dd15db4a9026f0d2a46f1e89c35845dbd976a1992b87c15a0c7580e6424b8792a7bb7b933d7c5433d4133ba4dbbcf7995d6ed3feaa32f876a287feeb9cc6107778c1f83e0119d980b9e994c2a3ae3de24a103efb3cacb746b49d1ad85746b233ab4aaf0e988ec2a786bc93f32040d3bdc3008031634cdfded5ac95b2279e096243228296591e7ba53c4a127772cc4620e6b238ccad250629194533d0a669ff3366c52d64928693e0b0cbb0b8e2c6029089d4dfe2b4b6c5dcd85f1a02770611e65001e48a32a8b0431a3b9d77fa3a95be38a0436a704c05a8e0183f3214c25531a63796f679bf72885aa766468d42b2543542d7e82544efc5c5e81e6a91a0f5d4e68000cff687d63e45c9a11d4ef515050daa592c9a828ac7c0488e7cdb3d6fdaef5e9176ee68d981ea50d386d74df3b40660351736deb03bfceb721878cf9894b0302df15964242ab6b9f77f98ba1c7993735983d2b022600ab74a19e3636e1400d08ba45d3a5c2774cb06a1c358bbfc11d27efaf7ca53c2e7757c8c76da24707d91a4a5244262898d68083ff91c514d9b9b1ebaa0cb0b10254fda1b1e82b9a1a47f117b5b280ddbec1f6732d11117ef1a7a674699df87fe795d1243cb9c4527e364e2b711b6562a87fafc130ce0baf1701686639b05f0c8dc708f008b1e6ab89e8d623bb83f3d54b7bcdbdacd055ac4eccbd36bbe0af0f65a00e3d6dd985ae8851d176976cfb5816d1fc2a63d3546aecaa4e712ca6961d1f181315d553de6b53485faed0dcfcf819a1ba3badffe797377d3d1ddaed8e7a0acc0c3d277762262a139f94de49faca167b11bf04f2104a5ab9a73367a6461f7124c91a2c4229ef98e6ebde9aac283c7d029400d71293f488ba169b62c1e94689cf5b248ed4aea62b88d65bb764cfe27d5231a58486e7381df518f4ed81cb905108c54a5050a94ca0e94da20d3794bc5fab9127dc95b6404b1e27b4e28136fc27806f7be798444c33aca88ffd45b860eba0d5033839f5a092863954604f1952bd61dad23b11643fe14f3ade08116aa2c13eee701ccd13e506bd65a1060bf69579aea8c8143cd38c0891a3065f251eba0c20ab9c69ddf28e3bd6400cc203bac8de1882239ad4e1b97b0ae2f1abb7bac7c0d8ef82b97ebfb1f5577f06a3a1377b09ada4db87d342f20ab0eca4b9c206042471307511429cb57a578211f92d3647189861cad9145f5eb26ab696abe50a2a6c1b469df97da28aba4e79b586c348a430f5ea61c4be1032fa61d18581f05a07fb8707c8996e0fff1c3eda59b992687fa12483b9327e10224b20d42e8b3fc4670bf070ced602283273d6818acd1f6da567c44d3f5e1377065d43d87d889843ae48e7fa8ba1634815695b8c480ca271e6e833799c70da80fd79acc09b989667a2294de5da73f0363df9a33ad4dab8d27cf7bed0a06838672e3d07d52b6396e9b5576021d5e925abd533bf161c944795065fdd44e8462e3070c479f1c118276653488dd9b2f1a673f8cad3612ca1fab4388ec9c8f834a01a499adb7b3a9a977672f6d75b41bbdd7f91ceb7e7a88568d17bb432be9e4e96e115075bce197ef4754d2914c2c59e2d7f4c08f0dbe34d31f229428f211bf1d7e8f5c319ed4a8273cb6255eb318851ac4557b0278fac63107a54d407c42f300b843a12abd3b893b46c7efac2e388ab42b87aebe2543bd4c15f459bc50aad10ffe1c1196fb52c26e54bdaa7fbd52451f207ffb073ef4b3f71eedd7da40c89505019739e3fa733bcdc84ff4919e8fe2358129ef28291be1d6426b8bafe88463b1d3cd7273745381c7f65221898e6ad361e88b24c54ccc7ac9a830145b6dc096e2d71ef71ec4f03524cb870b724e08d223bdec2f6fdde6200217a13b5136004d455d66547f5a1793e0cad85677d49e5c558852107007c8136812cf021afaf6f7e8f59883371be46cda412dd9c6fcf187c31252ceb5758901d39cd5355ab386d9a7fe6ea46ebf277aaf809c3023211ea9aa189de4d422080ebb9fec50ffab6b95ba4ae5018accc497e79149ed6047ce561ccc10e9194cdccd5c9fb75175c8dbc9d0a916ad59288f010defbbb50d263041ab37aac0f93253bef6f898cd0825d99d27224f26181f9713b8979da64756c95e7505f25a2688960d6155c3613dcc31b6c337a6dbfc6b12cfde1db22b93bbd5e48534fb0bda8b212577a14dcf665c834b0bd24e5f624d2455fe048dbe930328d7cb632db3b0e244bb5d43390b420b15157a339487fc78976f867d3a361aafdd3f50a93c01882da7c220089a544381db22e2c86b228dc2be01820468460437588952a549d37498e529e62aa62bad1580546bcb1e9a6ed1870b7838d05d12f6e3a041e78b1bdb80894626f20889ccb3a468aa4fb24b9c87cbb28623ce59c6b3c6286db366d08004551a25fe4d8d194a2bb7c52e1c85a5fbe4cb15b171489da121bea1c469a6bb185d63213084e3a81ee54dc03a94dc5ecdda7bfaad1df68021aaf4627c9d529f13e5c81b5ee4dd228949ca16b9a61d186211d153294470907557e5e14ae665013f285fe4d3766e7b3d8ce5e2a14692072d4d8f79354bcc8db8a2a36c8bcd", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}}, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004400)='./file0/file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000002000)='./file0/file0\x00', 0x34) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0xcfa) 06:17:01 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$nl_crypto(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@upd={0xf8, 0x12, 0x300, 0x70bd2d, 0x25dfdbff, {{'aegis128l\x00'}, [], [], 0x400, 0x2000}, [{0x8, 0x1, 0xfffffff8}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0x2}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4040800}, 0x4) [ 277.748298] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 277.755566] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 277.762844] R13: 00007ffc763ef02f R14: 00007fa14ead39c0 R15: 000000000118cf4c [ 277.774042] warn_alloc_show_mem: 1 callbacks suppressed [ 277.774047] Mem-Info: [ 277.783403] active_anon:217636 inactive_anon:4323 isolated_anon:0 [ 277.783403] active_file:7241 inactive_file:22676 isolated_file:0 [ 277.783403] unevictable:0 dirty:270 writeback:2 unstable:0 [ 277.783403] slab_reclaimable:17316 slab_unreclaimable:121921 [ 277.783403] mapped:61389 shmem:4516 pagetables:2932 bounce:0 [ 277.783403] free:1031218 free_pcp:551 free_cma:0 [ 277.819117] Node 0 active_anon:870544kB inactive_anon:17292kB active_file:28828kB inactive_file:90704kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:245556kB dirty:1072kB writeback:8kB shmem:18064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 833536kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 277.850294] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 277.894897] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 06:17:01 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x0, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 278.045188] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 278.051020] Node 0 DMA32 free:324236kB min:36272kB low:45340kB high:54408kB active_anon:875460kB inactive_anon:17296kB active_file:28828kB inactive_file:90704kB unevictable:0kB writepending:1080kB present:3129332kB managed:2621192kB mlocked:0kB kernel_stack:10304kB pagetables:12128kB bounce:0kB free_pcp:796kB local_pcp:388kB free_cma:0kB [ 278.099651] lowmem_reserve[]: 0 0 0 0 0 [ 278.103866] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 278.130709] lowmem_reserve[]: 0 0 0 0 0 [ 278.135836] Node 1 Normal free:3779992kB min:53612kB low:67012kB high:80412kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:960kB local_pcp:224kB free_cma:0kB [ 278.164775] lowmem_reserve[]: 0 0 0 0 0 [ 278.170115] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15908kB [ 278.186408] Node 0 DMA32: 281*4kB (UME) 1191*8kB (UME) 897*16kB (UME) 699*32kB (UME) 329*64kB (UME) 153*128kB (UM) 95*256kB (UM) 51*512kB (UM) 9*1024kB (U) 8*2048kB (UME) 40*4096kB (UM) = 327884kB [ 278.204372] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 278.216362] Node 1 Normal: 78*4kB (UME) 394*8kB (UME) 287*16kB (UM) 69*32kB (UM) 30*64kB (UME) 16*128kB (U) 10*256kB (U) 4*512kB (U) 1*1024kB (M) 8*2048kB (UME) 914*4096kB (UM) = 3779992kB [ 278.234574] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 278.244183] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 278.253535] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 278.263968] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 278.273309] 22785 total pagecache pages [ 278.278061] 0 pages in swap cache [ 278.281666] Swap cache stats: add 0, delete 0, find 0/0 [ 278.289110] Free swap = 0kB [ 278.292221] Total swap = 0kB [ 278.296718] 1965979 pages RAM 06:17:01 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffff4}]}}}) 06:17:01 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='statm\x00') ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000000c0)={0x4, 0x1, 0x5}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000140)="deff148bde9bde772fec94280da7a8f9283a65deedde1c0456f24274b689996c6e7c93c3010e4fd143fe674e8a6e8ab0d5a84d70bd6359132454597e5232b445be7a1cbe31e8acbcfe73ef0f999633a4771a00a72720a2067f73125825dc9297b862a85f32846b17fd80122042a7419fc369a657475a3e1c7730b21a2cbbd8653df57273422e3f05659e310622cdb60279", 0x91, 0x564) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) fcntl$getflags(r1, 0x408) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:01 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=ANY=[@ANYBLOB="6c010000170001000000000000000000fe8000000000000000000000000000bb0000000000000000ac14140000000000000000000000000000000000000000000000000000000000ac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500ac141400000000040000000000000000000000003200000000000000fe88000000000000000000000000000100"/196], 0x16c}}, 0x0) 06:17:01 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x0, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 278.300133] 0 pages HighMem/MovableOnly [ 278.304237] 339073 pages reserved [ 278.309529] 0 pages cma reserved 06:17:01 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x0, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 278.370473] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 06:17:01 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r1, 0x202000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) keyctl$chown(0x4, r1, r3, 0xee01) keyctl$assume_authority(0x10, r1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) keyctl$chown(0x4, r1, r5, 0xee00) 06:17:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r3, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self\x00', 0xe8200, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x8cda565e792d4839, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008194}, 0x4000) 06:17:04 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x0, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:04 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r3, 0x4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r3, 0xee0, 0x10200}, &(0x7f00000000c0)=0xc) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x8, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6\xa7nlK\xa3') 06:17:04 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x6b, 0x3f, 0xe2e7, 0x60, @local, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x3f}}, 0x8000, 0x7808, 0xff, 0xe0ce}}) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x88, r1}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x80}}, 0x0, 0x0, 0x0, 0x70bd26}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xffff}]}]}, 0x16c}}, 0x0) 06:17:04 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) connect$ax25(0xffffffffffffffff, &(0x7f0000004300)={{0x3, @default, 0x4}, [@null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0xe429, 0x0, 0x0, 0x4}}, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000000)="9eda438838743bd4e9720bee57093515dc189a5ea685e9556c1c2c3cfc4df50d66d31a48aa312663b68d18c5826b5b55fb738208863dac0f10f423aee7a5d8ddc45ebdfeb7424bae859d7c37ecfc4b63914d5a56d91017dd22bc84f759a15969951aef9d5c88c96560896988fa18cd946cfcc3a0f1c993348377904eac32c980bdf7976ebca2b499cab63c4e841514277fc71d4620e29a92523402485de0e82896484c0ae497a4d686df23ca7b68c3fd5e624d3510d7f94838e54af877ca58a00c5a672bba11f5aa1ed1980dfef47b9973d0bf456ded5e72f1702b3dc5197fce39cba53a038d8dc0ec783ce70577107dc5e8b299e64a0b7f1191f0926bd25762370191710bab2f44e9069f55f8a3f87e4cb488a2fb3348c0bf3b3874291f83e4776b160ea73aafa3919c7c069c73c0052173a63158db8b65541d161f9c964926ad7f06bdd6cb6a32135b04e35701c2e13c49c1f75dc7a25d623378860692d172ec3f1e1f2d9dc77c015c13721efcb101c2390abb847e871132f472a37cc0163b39b1d575a5444e246a08a1afb1a696cabab29498a314429a3b9f44c43ba29f71fac1fbe0d01c3c16d22730932704bcfb0c1b7a432bc51dd3f5dd5afc3b342cbe6a6ff899039e28f9a51881b1d46fdcf31767cb6f5c5c69ab3c80615d77c4d1664fc4ec831b8cea2e752bbb7a9ce79df875b29f1e232751daf32a1a0c4ff8bd0688e2b8e2d668b8a77e20a9eb6ec2e2c23b94e507baeacbcfa31fb6e1ca3343668f43e3aa6d85e7c29bf0bb4dbdabddc92be7f4a6f5d21b19e6da17bfb6cc926e3847532fae29c7b62fb909130ec372d3c16cfe6aaf3ce2af0fe7610fde7aad61bc80d2f96b999c8ccf6d22cf903ca8ae8b879ec4a416f334982e9810c0140a18d4dc81b5edaae23e9f4abaf40ed71512aebbba5bb251545e188db789558a845a2877b14bdaeec3c738b7d730c0860531bf5517d4f0e8f95ed3571f8a35816d5116fcb8d7cbf42b7d5d5e65541508c898bb2e0fe96297d2ab7135662de39df099ebaed5871111f5346278cee5728cec512e6c0a0d65b51e3d627873195b84103341c2bc83b6c8fdd8ba17f5957413f61c69d618c9b9d0b1f08dc81921b6c662ee1da3bfa019b095e9a03c2db4d645ccb7364e895098cbf7d932c72d80663c7a1694d122f7348393079223c11d36c64a5856eae0397ab9a9d948204b74e56525a9d552dd0916de81cbb5af3c59b3d7f8f9154423ce2cb45a5bc808e24bef13212019a19545fe54ba84d01534358380192b8c7b0eda907810375bb66a578a58fec392b47991271c8367b91d710e8a176bc1a4e96f0e137d4c25fbb03eddc392f9f170dd744472b864fbbae7c93d86e682308b21b73c5652065d72cf02e1152b44024a90a3b52eb0bb3cb412e518d37a68aa4c7f46789c54ab30d3a73d0a8712fde612294cda2aa1ccf164930b9b1d17801d4fbb06e849d39bf2b5141330caa0d2618b616f1c67e1ca57080e79ed9092ba7a55e8121cfc825cd26a0199a479a7ab1b7b23d2a4dd82fa6d04ee41ca680435efc934f0451e865e8632ac2f1115f4cdd33b0fccb7a2326127faf20cba37c828613dba5a98f4e1ad25eb6b91078cf73d873df9ef91531476f64b83559ff7ccdc4c070d478b18196ea05fe8d4ea0216ee5273dfabbd04582f40f064c9781afd2cbf30901f28cd09cc934f1b2d50883778274177e3dba8af0a1b931d80ce1a6c4085780ea2195b65ecfd2953f78a5290fe560d0cd6a5e73890a5a82dc410b92a3ef2be05ec5607820fd4ca6b9c3aa258d59022fdcb21665f1ce4e8aad8fd918c43bd3c2afe3dc223ff9f48831d401c8b6996190793d1dd7551f8511b69283992398d8f9b4bd2b3398d3b8c6f3c5d8b802ca5282b70242df2b7be4b38e70c3065f8da888631375afcc05ce578089c4f783776b286b7a60d1b5e189e2742a3240c1036a953d886885422eef01413c38099b64505fd5a73488acb4e611820674c58ae74d6c64a885d4beda9bd7903bcdc71e3711e2a057c0eab2100c321050ab14c6e453c53182577ad3178603cd9afde40a701120e9a36074fd582428c74e02781318e6c65450f8f020bd22475696fe13b8c59260e53a06d16eabd135e887a0a6bbc8ad21be7661df76fec5b13844f68b8eed1a7379713738beac9f23c7a26520e19797a910cde9fb285179526889b908b7eb49bb06f70f6271fba8712c1a4269ebcf4b7d043e924e3d2c4c753fd7e547d95841e335179836f76424e728810d7f32b78256ea30c79d9238a6588426e1f2d4c0b03d5605bd826ed24f0f11326b4cf958632b86e017aa80e142db1580c44f76d9c98196f3f6852ab2bfc6a01a3553a130c2d171957f5a45c3550fbbc990ef8742a98a86b280a57b9f198ff436bc01161ada50e6f23026c3254adf2321bff7e20aa54080bbb57d8d52c6a6df6107706a2e5bc6da68f17b474c0edd39401d765086e885cf7992405f856557915603cbe8894676e996bbadbb649a5e7498b91f9bd2f697dd9ebbe4d386050258b9f4c94781e61c660651c3f1e3ae51f8c035eca365bf15d6db48ea9ce183515f4a208d010f7c23dcacbd6e225490d7e9c133525f5c9018d752b21b4897bf18b64b6a9936f538a0a8958fc934440aeeaad2b68ac844d76f0900a6c95bd0b353d85d4fb62eb88360112237fd8c636a80e3130b21d66ae8ec58a4b76cba0602f96da919f7e84fd37e3ec2379f58e389a39c78d2482e03c379e3c4649ad63a76e3707ecff07d2fcb0c9dfc524cab49e69a09c92e4f88714335cb57d3f6184d07bef9657280fb5c9fd2d8f940f7ac6c5407e3077aa2e4ba8e217e0ee19e302d6d90e3be05a86dade35d2e454e511afb5cf5936f1d11f2fa6be6ceaa817dbdc7a6aabf2fad8ff3efa8382a25099f0c5989d2ad56ae0f4968b2cfcfc67b4f1c161c75900b4848f59a3c0376dfcb7997bf28e9e85d6dd942a360516de38e1c1a038a796f9a77ff2b0c7e5e8f4932391a0e58e76dacc6f9764178a211dfde3e75d367d2911ff398126ffdf83cf2fbdf1ad5232bed9155f7a168638a572094a9e934d4969b358cf6e121d7fd2aeae2f499068b42c152f0e3403a230885d6f92f038ddaa23499f804ffb06abdbabb51f6c38c92fb1a6271a4b13d6d11125b8ec12efa5907dc65062797fb9cca15e2f254e76b182d3fcdb4e96ac4de36d6df7e7bba5c32f422286b1be3b79bffb6fd693761952d195a84ad9ceb07287a0fbefab9e0347b513c5f60233ccd4b52d90ec144a2f896d9dc7f279f8aa93038f3efa286e1c3006933a4d7183d952f8d28b141b28b2af355b5bd8198dfde1ffb8d09202aff0d16ca3fec194662892a49f829813970a4520f1228aa03d211a45bed3b2e05bf1f10b1a152761e7b6c6ddea863a3c02224256092c70ca70dc185c4c385dd98b09e2682661e1e66f71d9c4037048eb70e8a1cbe57de87ec43713abf5fdcf63b9c482f318e3bec37e878dadbae15a02d731e6c8574eb14c059d72f73be5174add786d06b585a28a06d349d8e434a491b34897b3c1ad786ec8280d7f57edd4fbc6aea5485d659b59d393e331cf91e6ed76f340fcf7cf460892fa7318fc42b883f61d888ad982a751accb613c66661fba5f3d6de751a6a9ef8a4700316aaad04e991aab7903f4ef012ec2a8c092234e74ef335daf360ae47bbd2bbc6ad8c1a4f81efe8bbd703cb55ef36b32b4e30cb5a3b165c02ba295d0e1c40ce6ff8f479a74f01275f113ebfa8ade37a59ce70e6ca2a6f48f1be085f61bf772e2c2da523a2cfe63e99c57bdb1ff23139d4fca49eff7547e9880eefd3f7511a677efa23b52098ba89037c48dfcda2e8c1cfb9f892161049e53f8cee55256279512aecab8c441600dae0fd957883273047cf5c66ba209f830aa2ce0cbe41ca08c0cef4aed7f4324009200661a7ce680e5a8df2d051c1d8b2f63d25d8d74d05c75c46c8f3f24d625539e63459650960498a54ec3b16225bbbf4d3930009df265839d72611f5332a904cdebada108236e4414a2909ad01ec44b9d7f75de4385ad7ca5152e890a0919b3639fd1bcbca3b737ebb8d9ae541b1271cf2166ba15830e66f3d3afd3b754a7f81ad4f0999704ae99c114907c5be4a4797f13b80564f234723a34dbe137dabfd7fa23562df679f54a6ab54def6d63deae9844f72fd73efd0413551f5c4b9ee826eb3b7faf92a59ea34a16723b4fea14d1c8815a4e2d39fc48d1dbce526a7c53f5a96d0ef6463a0cee73fd3505f5c764a264b83c4a21f80e8b61c82d24442d13da99d18dc1b2538e7a510f6093d9ef2bc5cc777d4f98411e93919eddfd69d6e20d227cb61c50f358ea227f4de941fb080c1cf6b1f6e25533768fe133dbfc3f9d29c603bed38aa3c5af5b81a706b0067b40b88f992610d04c7cc36b8f649697cd6a93fae51138161891ae75a7147780fc59af5a6e18c54f9d2a4fe7fa92314b399afba9a40d0cc24f70a2593acf8d179215e06b7a9a88224bafcb2cbf60caf5fe4ff38208a70793b5dc33cd572956260e1c86312d3ba9b3a4b2b44376f2e78c616a6c0880ac8dcbaa30b9f761d500fd03a8518dd0509157b184a2d95e0caf3ffc8ac2db6c54d80c71a1e5b9ea3bf51071e2118af204123daceeb04e4f6f31f32a4d3fbb76ee49440cabda2c121c1b99acab5b87cecc37c3f9066af34ab29d6598bbfd91047a2ac7ce3a8f3027ff5e6d743506f161087278896a98ed37122ba208b61cf54d3929555ab06b564cd5e4f46f4755a6cfa2ef2b30d29ea66f2749d4060d411fa9160c91b6f55cf071ac8222c6313df18759e2958cddfe3db4cbeb9cd39abcf5f0beaecae8437813995cb7ed0b87d42ca942ff7245ece204798d01361c5f008e0d82bdf76660515bc78f7f8f409ccf68614b2cb50f5af2615661326fd971bc57eeeade60ea906b8df1cb0dfafd318cd2c396309c329d0469ca192aa8f51d7c4227685440f073983255baf054b97b9d7be1d1470d7eabd5c09b2116b4e86b0567b7e97e088717a4fe3dbdd310a1c39136ea4d2c47492001f9885dba03bf97e7da376171d666441cdc2f999db137603d57df32b4260fa0165e82917bb1631ea314e7a7437e66fc68cef22cda8f456d6e583f6e3237e0bc79987a9103f7cf0918e26881f67ea582e1ff3a49177599d385bf6e42572a2547933aeddb826530e9adf30dd84c3a7fae5c4c26f6c6f3a9f0906decd314e2407825abef959c5416d18a92ff34e6c521a16e8a0a29937c77d4ee99b41d530a732acbe0bf5d274df9d496b47a9a624546bdcf9976cde12ec989cb2a70b33a7c8a3a77652023164695f9db30dfcf587f0cd4f73e385730bcbdd688f6dcb08ba0efbb9f579220afefa4acfea522e864fce9b1782ce9f14824d16e9d33a2609c23ba3c5a1af02549357a0dcc12e37819d778021762cf895abeac1125b744c8b8225a091e7be9ded9993cfa3ca9abb83e25c8f559009977a2ed9374a89619fae5ef6d164bb73d242004dc8428e44689b33ee3bbe88bb4962ab0a32a90e7aea044f08410752cb2d7aeaf3196648a3a99092665b478bb394b48f79b36db0efc7f50d6a5179c945f5298cfaac5e5dea715296f92abce7281d48a0c9c6b785a35ef5f1697c047ddb254fe9a8ab9f498b0c1ae09ffd01a3d8d427fee7e36c51e0e5c2fee2245fb8464626ab5c9857ebce91f7d22bf024d10c2d71021cd69268472de419e6cefd970cc3a8e4d1bbe6496799aa7f100411766e712aff08b731460f14f9d7356db12cf8e1c6121968dc68b1d81c086b325ca4ce6fe1f476707e08fa913144b757c6be17cf93150db29544d207f09a896f33b7335d9339215da751e7af2c6bdd19db6f521af2c8a5998dc607f97026d07111488741134c1c86eba123273d1fd5ee4b471e86f9ae9478a04c7482076ab34a1eca5c64f89e5106eed44bceec019c67c12fb4db4fdac153f4ac3b63ffeb6d30de58ec039e2dd3c181e254cd94d0a2b0b44490384cc5915b54ee1db2b6d059879bf8126c9ca976d0f7862da07ecd350930a081810a7afd72b2ad3f65b96ae9c7f91227a2b5513a559f36b90fe01be9ae5ad3ca65e2c26f358fc26b858a3633fda7ae49a5fb705220a5819b3cca41b1ccc21d7c40f5fa9c422288efa5394e4312675899d704a2aab62b8363f58fd4bc12a8bea6ffc45b4414237bf5f019321206dbba439acb5ef26641f30fdac20f964354bce94e4c9d73e137f9806deefaf6f4acaa0e76ad4fef9f6cb7fc01bbabda9612c05adbe46afcf94819e8a4b4b49ff764784fa432d47fb6d4230900043d1b4521cd6839fe8c5df4d1899fdfb13880e207cac73f0a29020bdd563bd9c2f6bcd1ec523b3e03ebf6164fc65af001830c51396f9df2d346f83a59cfc82201cf1150ea57259d579fc2ed199b3fbe42d5188c84e4354610743e5b23a265246313cc63913f17412fa00d98b379b80b96d936969572e11316bc8926cb23115186f3b2387b82c3898fa41bf16a308da62d5a3eb3609af1943fddde08a4036eb2a41b7292caad9eb082614b02a1fa255bc7abd4d0e3b4ec1801e131e68c7aa9da1a0ff10f9de87dec8fad1ad8bfa99caa49e203a7b9c33e044d4544a537471e7a452468b821959bc488c6b8cbf81e90081a26de273ad1203cc06adb6af242ab19f96c1c66b58c37e2c9309704fba63af99a8d9c5efc651afb631fe9f546b938cc3b8e526c4159e5c9f7afb29fd1d55fabf09367ce2a63a35e7a2062d1c772ed981fd77157a847f687a177cf9886ce41df8cc509302b46bc1e2ba896b1c1656a1bbfdf4cd9ac39cf8510d1c823075f16550fd044aacc8d42a56f03718f7b18475cdc3999faeb25ab3dd8a807ee04d8e5d831d08b4e309dff50330685138797e10c6362636f53f22bfc1f3d5090a5d369282d9de36bb4e2505411ccc6ea395afa1567b15a2fb4be2adeea7126b1a8e80034105e0d98bdd78e796ce1cdc06a4ae666fc0baec5c52614340ed997673e26ec47c88846c000bb7c9077337cd44f5c041fdcc64986e5e1c0f488148f0ee6f842c44c0b72e82109270341bba6e9080b70fcf930d0f10be5a36798e70111fed72727b72282ff164fc08319d74f1f57cde71b57cb397a9e753f87b97729bafba017a24cbfdee5dfe7fc296c112e93bb8fce560ca80a3afd8370baaa79ad783b51352b5440b144a47378c9ae22eda5794328e95bcca220fd07bb56915529b155c61858efe89ad36a79288e74c0e251addcfaf797432175a5562b46eff5e3aebeb74623e18beef85389383c604d8884431b07dc4bea0174aadc337ff41f558a63f16690feae47efa2a5d1318b7397e1e4ba398727d286791b71610e1d78d32800e7e113c12abf0f60b6ca4401ecd23b7aacd990633b2b017daf6bfef1b2361ece74b7dbcbb1a73d4bc1f9d2e5c9fb0b7980d25cc44d1b10c09ef5a6a05c84669294a5cadf0cd88ab449f9f0bcdd8c48590d416c5c1feaa494a2145949c2a3373df7c6014225f2745bbeb20ff294d22c0d96ca111e6926946207cab56a03162a49e68968e398f70690188ee3ca847ef421742d60b9a6ad029e8a3d607950b2bf8ad8ff297cb39acc94905635770436e134435e28205140331b5100d9f64469792fffac87bca0835cbc617446ff86a7b50418c305f32e658b32130e491e38709fd3697017ac8084cdf1ed81a28375aed092ab4e32ca88a933154dd3a9e99351acbada926b67b310c7070ac1a414a28c5abfe1f45476249a12f18ca2d981528d881ed3c5072e46a6eff3cdf37dcbc89c7f79c88a1f8d15d15beb66a0e4440c7b93e379c4e2bac1d5c8e85f1852887e2cfeb178fba1c67dc2adb0c87df8ca4444ca7f455509f492effb5001328b8cc696e2933207a2d78bbce8562ca34a248193c914406b161c8141479d891b0c6110ec1e25cad38299b489f2ec437017cadba67dcb58abd4933c95b3526f1d4747b8701a7d71e446e4b62e2941d4281faca0cf22914be5aad80f47100000000ceb24e82508fe55a92fb6db70d03d1c1ec09cfee31639341756a4630a0eaaecac7bfbddf9d30c42cbd45eb181d5bd341307ad26f496bb042e2b655c03ac3dcc587acbf50f79b5c239be9938b62d3251b199f8413b020605d5d0552cfd9c39c9132719d6d0a326b000e12fcb51bc274df79d11430060d05978cdd50583f1bca82c57dbee605e2d00fcb5414af13a596d35cb5ba62de6a28cbccc857d23547b1c7fd5ac8fbf6758d5b8451fa46d9acc00344dc2e565674b1dd3547eb8f8aa5fff99042f8d1d59e6ad2f53379211e6832fcb68f5777eb2db85b28f724f4e4ce6342cf55713ff7b0cb4f7f47dd12a6566b86709eaefae024373267ce72a89e7f3e42ab48edcccc96b5d0403fe93a927e5ccf470014f220b8257393226cd7b996f20e6a34f81206733a9fdce03b701943c1b560d3eab68c2c225cf7f7f2b56123be2bb173e9e5b37f4d3348f6b987764ad07c2acd44514ff264d7eda31e5e517a179414841ad4553d51c08f435e05f10aa82d74b97a9ba3a133e6c9175fdcd4f3dc9c16d3be1d5bbaf13240177081ac1d56681bfa988a93af09868afd608520c0bfd71d857a6661fdaf6f2e166987eb007449dd26334ae932c5003fefc0f983b9e49cbfcea325f2de16a9ae935caa46f5b3433957fb370971ed957f138f08a60fed5b84995e428e7ae7d5c22021ff016baef0e713a118344c016a99ad469313ba7f2452da0dd82e019f64aa229cf80a69b3e08ac5847f10d247179855546313232f23e055c2f74ecef14e0fdcc29a9bf0976fbb249bd5c7903183d2a53c70960a183630e7d4928daa7091a85ad987d2a4a5b8f6be6612fa72d9fbb33c67bb38eff19f2e784f94e0354cf6d35a5b2c62233c039de3734b38e97ec72bd673fef09fd56fec329818cc68cdf12cb52f7d37a8350c16e94208880bfcd3e895d7aa4489e3dd15db4a9026f0d2a46f1e89c35845dbd976a1992b87c15a0c7580e6424b8792a7bb7b933d7c5433d4133ba4dbbcf7995d6ed3feaa32f876a287feeb9cc6107778c1f83e0119d980b9e994c2a3ae3de24a103efb3cacb746b49d1ad85746b233ab4aaf0e988ec2a786bc93f32040d3bdc3008031634cdfded5ac95b2279e096243228296591e7ba53c4a127772cc4620e6b238ccad250629194533d0a669ff3366c52d64928693e0b0cbb0b8e2c6029089d4dfe2b4b6c5dcd85f1a02770611e65001e48a32a8b0431a3b9d77fa3a95be38a0436a704c05a8e0183f3214c25531a63796f679bf72885aa766468d42b2543542d7e82544efc5c5e81e6a91a0f5d4e68000cff687d63e45c9a11d4ef515050daa592c9a828ac7c0488e7cdb3d6fdaef5e9176ee68d981ea50d386d74df3b40660351736deb03bfceb721878cf9894b0302df15964242ab6b9f77f98ba1c7993735983d2b022600ab74a19e3636e1400d08ba45d3a5c2774cb06a1c358bbfc11d27efaf7ca53c2e7757c8c76da24707d91a4a5244262898d68083ff91c514d9b9b1ebaa0cb0b10254fda1b1e82b9a1a47f117b5b280ddbec1f6732d11117ef1a7a674699df87fe795d1243cb9c4527e364e2b711b6562a87fafc130ce0baf1701686639b05f0c8dc708f008b1e6ab89e8d623bb83f3d54b7bcdbdacd055ac4eccbd36bbe0af0f65a00e3d6dd985ae8851d176976cfb5816d1fc2a63d3546aecaa4e712ca6961d1f181315d553de6b53485faed0dcfcf819a1ba3badffe797377d3d1ddaed8e7a0acc0c3d277762262a139f94de49faca167b11bf04f2104a5ab9a73367a6461f7124c91a2c4229ef98e6ebde9aac283c7d029400d71293f488ba169b62c1e94689cf5b248ed4aea62b88d65bb764cfe27d5231a58486e7381df518f4ed81cb905108c54a5050a94ca0e94da20d3794bc5fab9127dc95b6404b1e27b4e28136fc27806f7be798444c33aca88ffd45b860eba0d5033839f5a092863954604f1952bd61dad23b11643fe14f3ade08116aa2c13eee701ccd13e506bd65a1060bf69579aea8c8143cd38c0891a3065f251eba0c20ab9c69ddf28e3bd6400cc203bac8de1882239ad4e1b97b0ae2f1abb7bac7c0d8ef82b97ebfb1f5577f06a3a1377b09ada4db87d342f20ab0eca4b9c206042471307511429cb57a578211f92d3647189861cad9145f5eb26ab696abe50a2a6c1b469df97da28aba4e79b586c348a430f5ea61c4be1032fa61d18581f05a07fb8707c8996e0fff1c3eda59b992687fa12483b9327e10224b20d42e8b3fc4670bf070ced602283273d6818acd1f6da567c44d3f5e1377065d43d87d889843ae48e7fa8ba1634815695b8c480ca271e6e833799c70da80fd79acc09b989667a2294de5da73f0363df9a33ad4dab8d27cf7bed0a06838672e3d07d52b6396e9b5576021d5e925abd533bf161c944795065fdd44e8462e3070c479f1c118276653488dd9b2f1a673f8cad3612ca1fab4388ec9c8f834a01a499adb7b3a9a977672f6d75b41bbdd7f91ceb7e7a88568d17bb432be9e4e96e115075bce197ef4754d2914c2c59e2d7f4c08f0dbe34d31f229428f211bf1d7e8f5c319ed4a8273cb6255eb318851ac4557b0278fac63107a54d407c42f300b843a12abd3b893b46c7efac2e388ab42b87aebe2543bd4c15f459bc50aad10ffe1c1196fb52c26e54bdaa7fbd52451f207ffb073ef4b3f71eedd7da40c89505019739e3fa733bcdc84ff4919e8fe2358129ef28291be1d6426b8bafe88463b1d3cd7273745381c7f65221898e6ad361e88b24c54ccc7ac9a830145b6dc096e2d71ef71ec4f03524cb870b724e08d223bdec2f6fdde6200217a13b5136004d455d66547f5a1793e0cad85677d49e5c558852107007c8136812cf021afaf6f7e8f59883371be46cda412dd9c6fcf187c31252ceb5758901d39cd5355ab386d9a7fe6ea46ebf277aaf809c3023211ea9aa189de4d422080ebb9fec50ffab6b95ba4ae5018accc497e79149ed6047ce561ccc10e9194cdccd5c9fb75175c8dbc9d0a916ad59288f010defbbb50d263041ab37aac0f93253bef6f898cd0825d99d27224f26181f9713b8979da64756c95e7505f25a2688960d6155c3613dcc31b6c337a6dbfc6b12cfde1db22b93bbd5e48534fb0bda8b212577a14dcf665c834b0bd24e5f624d2455fe048dbe930328d7cb632db3b0e244bb5d43390b420b15157a339487fc78976f867d3a361aafdd3f50a93c01882da7c220089a544381db22e2c86b228dc2be01820468460437588952a549d37498e529e62aa62bad1580546bcb1e9a6ed1870b7838d05d12f6e3a041e78b1bdb80894626f20889ccb3a468aa4fb24b9c87cbb28623ce59c6b3c6286db366d08004551a25fe4d8d194a2bb7c52e1c85a5fbe4cb15b171489da121bea1c469a6bb185d63213084e3a81ee54dc03a94dc5ecdda7bfaad1df68021aaf4627c9d529f13e5c81b5ee4dd228949ca16b9a61d186211d153294470907557e5e14ae665013f285fe4d3766e7b3d8ce5e2a14692072d4d8f79354bcc8db8a2a36c8bcd", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}}, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004400)='./file0/file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000002000)='./file0/file0\x00', 0x34) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0xcfa) 06:17:04 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000280)={0x5, 0x158c01cb, 0x3, {0x2, @pix_mp={0x1, 0xf541, 0x31435641, 0x3, 0x0, [{0x5, 0x3ff}, {0x0, 0x1ce}, {0x38, 0xa5}, {0x10000, 0x400}, {0x0, 0x2}, {0xb, 0x3}, {0xf14, 0xff}, {0x80, 0x101}], 0x8, 0x64, 0x2, 0x0, 0x2}}, 0x7}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x5bd, 0xb5315241, 0x5, 0x8, [{0x8c9, 0x3}, {0x81, 0x1}, {0x7fffffff, 0x1000}, {0xd39, 0x7}, {0x6, 0xbe86}, {0x5, 0x4}, {0x1f, 0x401}, {0xac0, 0x3}], 0x8, 0x4, 0x7, 0x0, 0x7}}}) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x1409, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x4000400) socket$inet6_udp(0xa, 0x2, 0x0) 06:17:04 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 281.041940] sctp: [Deprecated]: syz-executor.5 (pid 15358) Use of int in maxseg socket option. [ 281.041940] Use struct sctp_assoc_value instead [ 281.062527] QAT: Invalid ioctl 06:17:04 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="35732e2ba0a46808327fe278596c010000170001000000000000000000fe8000000000000000000000000000bb0000000000000000ac14140000000000000000000000000000000000000000000000000000000000ac1414bb00"/117, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000005000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500ac141400000000000000000000000000ffffffff3200000000000000fe88000000000000000000000000000100"/196], 0x16c}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) listen(0xffffffffffffffff, 0x9) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) [ 281.102515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15372 comm=syz-executor.1 06:17:04 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 281.146656] sctp: [Deprecated]: syz-executor.5 (pid 15358) Use of int in maxseg socket option. [ 281.146656] Use struct sctp_assoc_value instead [ 281.178884] QAT: Invalid ioctl 06:17:04 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x80800) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0x3, @raw_data="df757df3f66f96b4d9f839c5696936bbab1d1ac69809ad1cd2d6fb4417986365de7a2ed9cea7fc4e922a86402577dbec5e2c4bd3b3f68caf76e180f68e49d152e213e783b79c1ab501c1e52d02684d555f5656ab37a5f606734da58e57ae3f63aba8d4157697cd2b0cbcf740e6920d30685c21b03c3a17baa7000aa7efb2de82312251f89eb1d5dfc23b590e9913955c25fc844b1a4e8502b75028b217dd6bca8bd0ba8c160ffe07b142d3df172267477956fa43d76cbff9d51ff87ea94f87c9b374ef35cf4ba1f2"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffff4}]}}}) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) 06:17:04 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)="a71f2e7399dac8f172356e5e103c10de0ac5ab3121a10b8497760dcf7c7516f110ef6bc1abc7cf6e968f1740a0cb0506f122cd8400d7899298281cf9c8a6cc24641c603ff6a982ea6b8ba376c227c8f2c7a9af32df8dc7b0f403391d81f7812749df2a5927a3a50b0ffd536cfb60b5a32e299e5a0c", 0x75}, {&(0x7f0000000000)="e15d644dfcd42746bd5ebd761f3d01fb1f0497739652eae23f733092d79fdc54a4eaa7", 0x23}, {&(0x7f0000000140)="3530d98be553f44d5c4348b33e483add3a71cf7feed430a3742af6ba054952c95df3841e4c9c1dce7bb932308a56dd482c246171b56faae0ecd5fc68ec3d58a78141977ff2be89983e44919db53bfb061949f8ed98a54888ce9af826a371364a93479366d360411e6467a0cc2f537d4a9d18ec675dd5ac6bbba1", 0x7a}, {&(0x7f0000000280)="13a9404e7a9ea39518620085ba9f7733140246229bd8e12d85467b239b48b1c37e74168f7f1ff6ccbc9e84f4ee90368ca02fe0409e8cd4faba232eae744d3f8d8d17f4c8cf4f98a6d3f872ea2ff3a90880b549e7ac408a6030a068504b81f3cfc00c851017c685cbdf5dfad7667bac42f0b52de40cec9f5b7b18554c91b9191ff7729ef4f5613b46979ce3a9c210ed313c990768c82ab02679fad1d8adb711ee83cabbb5744238c8a8bf661f31c4c14132aea4a4eba6f1eface6328d5d2a6397c33a7fde520a4097ca19dec55e37db721d20fd939452d00ea64729ff8537b0c449a54e626746e1697cb5f36119b5717113adb8dc5ea7", 0xf6}, {&(0x7f00000001c0)="81121132b9babc5e", 0x8}, {&(0x7f0000000380)="c4f6fdc63a8e304514cf579fcca56fad20f043b7a3a90aa46670aeb084acb3c150cf1135dc619778d235a9986f736064f2dd3712a07c68134063d5c8c07e0e55e7beba489395ec1f21a9bb9d9ec928d2d295facac87403f682a5017884f6cb3af89bab4c0cf86f", 0x67}, {&(0x7f0000000400)="99346f8c118b013a9309cbb6e68c6f8f97a50a97815249294cdf51249b40b71c5d90e11e3b90bb9e106d252463949ec5490bb2341a2fb1a755094d1da0dce7ab0a7eeae47f5fe39de193d5248889008f280f3e07d6ea614963670feae72eac61c2d62e1524611ec53bd26e6af6326949df9d8597552e6d20382302f3a36d483976f9fe27e0c032e634b69a1f291e58d3babac4dd0aab607df30953d7fccc446344109aa76b27c836ab6d711b7b05417dbc94f87426b045a0e302403be74e350326e9ab8bc5fcb93d67b77d65303171f8d91acfba06a8f758b19854", 0xdb}, {&(0x7f0000000500)="b30c9229450b1b26424f1c90f5ff508d6837a0ce47de18a371762a132dc9fabe95f9d9157bca186612dac93193871b0b1f979e18a8851b90abf8064fa74fabd51ca61c37d5ebd820de1d2307027fd30f8df7aaeaa8d6e60ae05445e366970f928748cdcac0fc1cc76f3c0885a9b56deb5edb7bcb8a6ff497256868c0f1cffbee05add119c46cebe2d701a5de80643678e7c681b949cc0a19c3590bd26e5214b942577b1c378cff1d581d46b11ed4cb51255a27f9c3badd54026bafdd76003f5be21915ed696881f652526da0f08664", 0xcf}], 0x8}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000680)=""/79) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:04 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 281.296937] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) 06:17:04 executing program 1: write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x1, 0x0, 0x6}, 0x0) clone(0x20040103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xd6) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0, 0xff}, 0x8) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 281.337329] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 281.355220] CPU: 1 PID: 15389 Comm: syz-executor.3 Not tainted 4.14.194-syzkaller #0 [ 281.363146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.372518] Call Trace: [ 281.375117] dump_stack+0x1b2/0x283 [ 281.378847] warn_alloc.cold+0x96/0x1cc [ 281.382851] ? zone_watermark_ok_safe+0x220/0x220 06:17:04 executing program 2: getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r0], 0x38}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r3, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x20, 0x8000, 0x8, 0x5, {{0x15, 0x4, 0x0, 0x7, 0x54, 0x66, 0x0, 0x1f, 0x2f, 0x0, @loopback, @multicast1, {[@ssrr={0x89, 0x23, 0x90, [@empty, @broadcast, @rand_addr=0x64010101, @multicast2, @private=0xa010100, @multicast1, @remote, @remote]}, @timestamp_prespec={0x44, 0x1c, 0x28, 0x3, 0x3, [{@remote, 0x9}, {@multicast2, 0x1dd}, {@remote, 0x6}]}]}}}}}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r8, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r9, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) clock_gettime(0x0, &(0x7f0000007740)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)=""/192, 0xc0}, {&(0x7f0000000380)=""/165, 0xa5}, {&(0x7f0000000440)=""/241, 0xf1}, {&(0x7f0000000540)=""/153, 0x99}], 0x4}, 0x200}, {{&(0x7f00000006c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000740)=""/254, 0xfe}, {&(0x7f0000000840)=""/243, 0xf3}, {&(0x7f0000000940)=""/114, 0x72}, {&(0x7f00000009c0)=""/114, 0x72}, {&(0x7f0000000a40)=""/27, 0x1b}, {&(0x7f0000000a80)=""/139, 0x8b}, {&(0x7f0000000b40)=""/53, 0x35}, {&(0x7f0000000b80)=""/19, 0x13}], 0x8, &(0x7f0000000c40)=""/119, 0x77}, 0xae0d}, {{&(0x7f0000000cc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000d40)=""/207, 0xcf}, {&(0x7f0000000e40)=""/11, 0xb}, {&(0x7f0000000e80)=""/35, 0x23}, {&(0x7f0000000ec0)=""/223, 0xdf}, {&(0x7f0000000fc0)=""/156, 0x9c}], 0x5, &(0x7f0000001100)=""/132, 0x84}}, {{&(0x7f00000011c0)=@qipcrtr, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001240)=""/33, 0x21}, {&(0x7f0000001280)=""/214, 0xd6}, {&(0x7f0000001380)=""/198, 0xc6}, {&(0x7f0000001480)=""/223, 0xdf}, {&(0x7f0000001580)=""/129, 0x81}, {&(0x7f0000001640)=""/146, 0x92}, {&(0x7f0000001700)=""/19, 0x13}, {&(0x7f0000001740)=""/109, 0x6d}, {&(0x7f00000017c0)=""/224, 0xe0}], 0x9, &(0x7f0000001980)=""/42, 0x2a}, 0x9}, {{&(0x7f00000019c0)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000001a40)=""/194, 0xc2}, {&(0x7f0000001b40)=""/31, 0x1f}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/244, 0xf4}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/229, 0xe5}, {&(0x7f0000003d80)=""/184, 0xb8}], 0x7, &(0x7f0000003ec0)=""/196, 0xc4}}, {{&(0x7f0000003fc0)=@rc, 0x80, &(0x7f00000060c0)=[{&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000005040)=""/50, 0x32}, {&(0x7f0000005080)=""/49, 0x31}, {&(0x7f00000050c0)=""/4096, 0x1000}], 0x4, &(0x7f0000006100)=""/240, 0xf0}}, {{0x0, 0x0, &(0x7f0000007440)=[{&(0x7f0000006200)=""/108, 0x6c}, {&(0x7f0000006280)=""/4096, 0x1000}, {&(0x7f0000007280)=""/191, 0xbf}, {&(0x7f0000007340)=""/246, 0xf6}], 0x4, &(0x7f0000007480)=""/204, 0xcc}, 0x20}], 0x7, 0x40000042, &(0x7f0000007780)={r10, r11+10000000}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000007f80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000007f40)={&(0x7f00000077c0)={0x74c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_MSGMASK={0x320, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x78, 0x5, "b74f70e27de471df9059b16d3aefbc3370c51a31906a5092b1d2fad39d6d0ddac814bb88cf1c70d7823d3d6f742d56a9b50b2795b7c6f953475d249af6b89f1847ae5fb6eee7f03e1220e90cda32a0ee331dfb2b0a32ba4a1674ce0e7a9c997426eb8586a1d518228d0c61d3368125cf67f97f6a"}, @ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '][./\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&-\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '{],[()-[:\xd2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '-/%)@.^$[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x158, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '^:+.$$%\\\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x708}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$\xac*\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#}}{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '+]\n$\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^.Y\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe8a}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x304, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x180, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ab}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '/*)^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '&})$(\xfa/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '[]}/*}{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '.\\)[++]@\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '{.\\(}-+^([@[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}]}, {0x4}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-}!\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '@/%!.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@\x10@'}]}]}, @ETHTOOL_A_BITSET_MASK={0xaf, 0x5, "c244db9ed8d7cb2ce70df3d7a8d43a36024bbee9daa1218883ad7c7332c94be44578aa3a6fd683ca811601fe8e3ff5acf517f0501f72805d006418fc535beb98b999b7e3a53d8cd2c2ce5129c14d17c2763d577cc20df9433d03138e81b6ce9e1a48d8159abba6237d16a6703552e405b8b897336d0759b4cc0a5a19e6ac4853f94a7e82cca431595f34e63f768ea0c86a560e16fbb3fafc97752f3e6a36d679d6021168c0a4bf4078ab7d"}, @ETHTOOL_A_BITSET_VALUE={0xc4, 0x4, "2257c2cbb8666a406de00ef20bf80a98bb8f94d14919c3ad4b9804e3b48456446017437393bbde988f8dde7556e2978f9b24d095d7cdd338a78176d081f31a1903b1786ff3e0018d03bd49b50cf1dfec8c597bc479c2b09d4eaa4cf4273f7f11bfa45be6606665ae8a692fab838c7c50ba0bd6c4037ce9b9f1d1029dc31bc5dc6207eb34e0f0f09594c76e8da9fe28d083ccf6c9b528554a1940348507c6c6cb8b7710250211447e2622dca9839f84dc16374ce0376b1cad34a7ae5d5105b8b9"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x74c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4020) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c010000170001000000000000000000fe8000000000000000000000000000bb0000000000000000ac14140000000000000000000000000000000000000000000000000000000000ac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="351414000000000000000000000000000000000005000000000067910500814600000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500ac141400000000000000000000000000000000003200000000000000fe880000000000000000000000000001000000000000000000000000000000000000000020dd3e14c4a3e848ade6334dd5ec3c8e2410e78ed1e8e9443b65e063de4a9f"], 0x16c}}, 0x0) 06:17:04 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300030c000000000000000000000002000900080000006b00000000000000030006000017000002000000e000000100000000000000000200050000000000000000160000000003000000ac1e100100"/96], 0x60}}, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x3f, 0x100) r2 = signalfd(r1, &(0x7f0000000200)={[0xffffffffffffffff]}, 0x8) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000000c0)={0x54cd, {{0xa, 0x4e22, 0x80000000, @private2, 0x1}}}, 0x88) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000180)={r3, 0x0, 0x0, 0x4}) write$tun(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="ffff00c7020500004b56ffffffffffff00000000eb03ffffffffffff0401b99fdb1e0d586a8d913889c151c08c3614631a89157d198b53c6f80feb579bfbf6d2b8723477d75c6b7d9d53dcb146be340c24e0f6031ba4ed95445762d7845dc5b7d4c730f7d2e6b27f8c622e5052bbb1c5ae2693cfbeb1b3fd30d811de4319c0f2e4fe8401fe8a40ea0b2853f44053e240b6b99e8ad7b411bcb97f291d6f7ca4836ddb39b17cedd883a5fcdfc6976fb920137851410395901ecabb37e3354e"], 0xc7) getdents(r3, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:04 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 281.387717] ? perf_trace_lock_acquire+0x510/0x510 [ 281.392666] ? perf_trace_lock_acquire+0x510/0x510 [ 281.397610] ? fs_reclaim_release+0xd0/0x110 [ 281.402066] __vmalloc_node_range+0x10e/0x150 [ 281.406581] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 281.411962] vmalloc_user+0x47/0xa0 [ 281.415602] ? vb2_vmalloc_alloc+0xa6/0x280 [ 281.419940] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 281.425324] vb2_vmalloc_alloc+0xa6/0x280 [ 281.429490] __vb2_queue_alloc+0x47a/0xd90 [ 281.433758] vb2_core_create_bufs+0x279/0x5a0 [ 281.438274] ? __vb2_queue_free+0x7a0/0x7a0 [ 281.442621] ? __lock_acquire+0x5fc/0x3f20 [ 281.446905] vb2_create_bufs+0x2e1/0x5b0 [ 281.450990] ? vb2_thread_start.cold+0x24/0x24 [ 281.455619] ? check_preemption_disabled+0x35/0x240 [ 281.460657] ? perf_trace_lock+0xf7/0x490 [ 281.464832] vb2_ioctl_create_bufs+0x1f7/0x330 [ 281.469470] v4l_create_bufs+0xa4/0x150 [ 281.473464] __video_do_ioctl+0x65b/0x6a0 [ 281.477630] ? video_ioctl2+0x30/0x30 [ 281.481449] ? __might_fault+0x177/0x1b0 [ 281.485536] video_usercopy+0xf5/0xe90 [ 281.489441] ? video_ioctl2+0x30/0x30 [ 281.493448] ? v4l_g_ctrl+0x390/0x390 [ 281.497282] ? check_preemption_disabled+0x35/0x240 [ 281.502417] ? check_preemption_disabled+0x35/0x240 [ 281.507451] ? perf_trace_lock+0xf7/0x490 [ 281.511616] ? perf_trace_lock_acquire+0x510/0x510 [ 281.516587] v4l2_ioctl+0x1bb/0x2f0 [ 281.520224] ? v4l2_open+0x2f0/0x2f0 [ 281.523960] do_vfs_ioctl+0x75a/0xff0 [ 281.527776] ? selinux_inode_setxattr+0x730/0x730 [ 281.532669] ? ioctl_preallocate+0x1a0/0x1a0 [ 281.537093] ? lock_downgrade+0x740/0x740 [ 281.541267] ? __fget+0x225/0x360 [ 281.544738] ? security_file_ioctl+0x83/0xb0 [ 281.549161] SyS_ioctl+0x7f/0xb0 [ 281.552569] ? do_vfs_ioctl+0xff0/0xff0 [ 281.556585] do_syscall_64+0x1d5/0x640 [ 281.560533] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 281.565742] RIP: 0033:0x45d579 [ 281.568948] RSP: 002b:00007fa14ead2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.576672] RAX: ffffffffffffffda RBX: 000000000001f340 RCX: 000000000045d579 [ 281.583980] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 281.591291] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 281.598577] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 281.605861] R13: 00007ffc763ef02f R14: 00007fa14ead39c0 R15: 000000000118cf4c [ 281.643873] Mem-Info: [ 281.654874] active_anon:217818 inactive_anon:4323 isolated_anon:0 [ 281.654874] active_file:7256 inactive_file:22674 isolated_file:0 [ 281.654874] unevictable:0 dirty:278 writeback:0 unstable:0 [ 281.654874] slab_reclaimable:17316 slab_unreclaimable:121589 [ 281.654874] mapped:61423 shmem:4516 pagetables:3007 bounce:0 [ 281.654874] free:1030967 free_pcp:623 free_cma:0 [ 281.713953] Node 0 active_anon:873344kB inactive_anon:17292kB active_file:28888kB inactive_file:90696kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:245692kB dirty:1096kB writeback:0kB shmem:18064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 835584kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 281.743609] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 281.769759] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 281.797049] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 281.816698] Node 0 DMA32 free:328216kB min:36272kB low:45340kB high:54408kB active_anon:871136kB inactive_anon:17292kB active_file:28888kB inactive_file:90696kB unevictable:0kB writepending:1096kB present:3129332kB managed:2621192kB mlocked:0kB kernel_stack:10112kB pagetables:11880kB bounce:0kB free_pcp:1268kB local_pcp:656kB free_cma:0kB [ 281.852986] lowmem_reserve[]: 0 0 0 0 0 06:17:05 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) connect$ax25(0xffffffffffffffff, &(0x7f0000004300)={{0x3, @default, 0x4}, [@null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0xe429, 0x0, 0x0, 0x4}}, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}}, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004400)='./file0/file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000002000)='./file0/file0\x00', 0x34) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0xcfa) 06:17:05 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:05 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x161001, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="00fb1580028f280735888025d10e8c4925454ae3766d5eba93"], 0x15, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=@acquire={0x210, 0x17, 0x1, 0x20000, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfffffffe}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x1}]}, @address_filter={0x28, 0x1a, {@in=@loopback, @in=@loopback, 0x2, 0x6, 0x1f}}, @algo_auth={0x7a, 0x1, {{'sha1-ssse3\x00'}, 0x190, "979bed61882f4003c89d6a92d64cf87bfd75815fa32ea8697a3a005e9d4603a15be503d6209d76406edbf40b47e8cc33e8e0"}}]}, 0x210}}, 0x0) 06:17:05 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f00000000c0)) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r2, &(0x7f0000000040)=""/39, 0x27) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000000)=0x63523c2d) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:05 executing program 1: mount$fuseblk(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x101012, 0x0) r1 = memfd_create(&(0x7f00000000c0)=')\xb2\xb6W|\x99\xe1\xff\'\xa7I\x8a\x1c\x06p\xbb\x9d\x0e\x97\xcb\x06\x8b\xc6\f\x15P\x80\xe0\xd9\x93\xa2\xef\xf0\x88\x1bwH\xd2>#-\x0ePU\xba\x19G\x97\xd9\xa8\x9b\xcbc\xdb\\\xefTW\xed\xa7\x0f\x19\xc3\x8d\x16\xfa\x11w\xf8wV\xa4@\xaf6!-\x9dMN*\x90\x18H\xee\xbc-\xa8/\xd7%\xd7qA\f\xf0\xd0\xa9\xf9\xd4\xa4\xd2\xca\xde\a\x87\x1e\x16\x91\xd4\xb93L\xad\xbb\xc9\x9f\x9f\xc4\xdc\"*:~\b/\xcbl', 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="080806020003"], 0x6) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r2], 0x12) sendfile(r0, r1, &(0x7f0000000000), 0x7fffffffffffffff) [ 281.858205] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 281.894740] lowmem_reserve[]: 0 0 0 0 0 [ 281.899091] Node 1 Normal free:3778736kB min:53612kB low:67012kB high:80412kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:16kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:1412kB local_pcp:736kB free_cma:0kB [ 281.950104] lowmem_reserve[]: 0 0 0 0 0 [ 281.962194] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15908kB [ 282.068584] Node 0 DMA32: 44*4kB (UME) 1051*8kB (UME) 1488*16kB (UME) 869*32kB (UME) 419*64kB (UME) 178*128kB (UM) 125*256kB (UM) 78*512kB (UM) 22*1024kB (U) 14*2048kB (UME) 23*4096kB (UM) = 327144kB [ 282.110960] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 282.140164] Node 1 Normal: 76*4kB (UME) 397*8kB (UME) 293*16kB (UM) 72*32kB (UM) 33*64kB (UME) 21*128kB (UM) 12*256kB (U) 7*512kB (U) 3*1024kB (UM) 11*2048kB (UME) 911*4096kB (UM) = 3778984kB [ 282.164948] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 282.174810] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 282.211892] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 282.222430] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 282.239823] 22797 total pagecache pages [ 282.244007] 0 pages in swap cache [ 282.252083] Swap cache stats: add 0, delete 0, find 0/0 06:17:05 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x80000000) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000100)={0x8, 0xb, [], [@ra={0x5, 0x2, 0x9}, @jumbo, @calipso={0x7, 0x40, {0x2, 0xe, 0x2, 0x1, [0x258, 0x1, 0x30, 0x2, 0x10001, 0x800, 0x20]}}, @generic={0xff, 0xa, "6a268aae43979f0a2acc"}]}, 0x60) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffff4}]}}}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 06:17:05 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:05 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r3, 0x4) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={r3, 0x1, 0x1, [0x10be]}, 0xa) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x40, 0x0) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:05 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) sendmsg(r0, &(0x7f0000000580)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0x2, {0xa, 0x4e20, 0x7, @private0, 0x5}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)="cb4635e9f995670077805460dfa5521b76e3505637451532851e9e0e2f358d24284f50efc2d57cfa47e6c5841255ce63830d8b1520eedf6c9af1715e89e1de46d741f0540745b088400b6e75e9f6e9731bb970baae3be23f5a4e9f8621f9d839d400ce64de4b6ae4176ba6d8b73e22f4e481f70bd6a9a791177cea9f4bf4fa7d254e5a369dedc8799539f99eba388e27a31817cf905eb24d1828b97797cd838f709fdd1453a605bd5c485f04f5f8e4de1a847e662621520f7a74e4fcc0a7ee8c8a93533d66769a593bc8528e974db7a1761c5df57103993388837cfe3e4d916b607a92324ed7bb047fabb9", 0xeb}, {&(0x7f0000000180)="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", 0xfa}, {&(0x7f0000000280)="1991d038f6399103355f1feda45344dd79f9278396d48723c57af1edec99e891332ba4cb85839b5974e00bb44a3c00ecfd0a2335d5f883a87071b2bee131b05d27baa2bf29bd8c02da6eff75bee0c04a483baec6d47825274d5c7894371cce155170b9d4b49e1554b4a286702c911b7c7f8803497f928a381e8ad5d3f9", 0x7d}, {&(0x7f0000000300)="c58a1c35f438850391c337dfe079ef730f7ee7651275246ef1b512dfa5decb42b16ffb5ddb0b96ddabfaa3a838ca5b4108a0528ef45388a27c60ca6b2aecfd7e7e54ec8b3edb731bdc1dd37bb40863607684a20f480c69271fa2f51404b30cca85cae4afe0f32980f07bca90c9c2f537fdf36253dec8095573fd66312ad5a1003da8d5cb0361c8aea595bda98206b7eb15e61560a99616a657db65dd49edb248d272de059d1b53ee4ae6cd0167617ee452db19315518d6d9bfea7a64ef138f8f834ac2c5acf256781a730ae54765aeae9b744c0e20a44fbf51b12a03f5699a32f643", 0xe2}, {&(0x7f0000000400)="9f4c070abf7a821015ddc2282a9ea8d1985ee159facc311f96a76cc8efb1b5513a8e25f2a8eaebff46c0e67ec48e787a6afbd53e127a7aa5029380d8930f6487e941cd79", 0x44}, {&(0x7f0000000480)="477e24fcdea2e1a339b797d076fddb37eeb46057bc67539ee444787d104fe2c362acd2e24899d241c0ec35f13d89792ecc18e8adbab86ec7e3c73b48bd0400ee1ac25226f68022e2baa87d35442b1aa37aab40b4aa451075ea2d3d236f57e647c0336aff0455cbf8cf648fab9ee1ef776e5c", 0x72}], 0x6, &(0x7f0000000680)=[{0xc0, 0x0, 0x6b3, "443bbc3f0a8d6e4f37123425114998130cff137d4c279493e174efe677777f160c5095ffd527aa0b768b078d8377dde8e3bbe2c7406cad4247b1a7851f719ece563947142c1ec657a7ccc31182fcac661bf8a611edcdf5242b6df1d2c164af166e2083a576eb2587aed5e3ff97a567cc1db0a3e8a02184b835076dd5433d88385a654cdcbc865ae4dcad108f29f28ef38f1594756c987696414e0c4b73fd6e07c80a30e0dfbfb1d3316f7d9708"}], 0xc0}, 0x4000801) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x2000)=nil, 0x1000) 06:17:05 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) set_thread_area(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x4) pivot_root(0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f00000005c0)={@remote, @ipv4={[], [], @loopback}, @local}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) [ 282.260155] Free swap = 0kB [ 282.263465] Total swap = 0kB [ 282.271194] 1965979 pages RAM [ 282.274433] 0 pages HighMem/MovableOnly [ 282.282125] 339073 pages reserved [ 282.289324] 0 pages cma reserved 06:17:05 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, 0x0) [ 282.378693] sctp: [Deprecated]: syz-executor.5 (pid 15501) Use of int in maxseg socket option. [ 282.378693] Use struct sctp_assoc_value instead 06:17:05 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r4, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r5, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000100)={@remote, @multicast2}, 0x8) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e23, 0x2, @mcast2, 0x5}}, 0x0, 0x0, 0x20, 0x0, "beb2e954f0e00ad443806cc8715ca47fd2bdd2c757faa22d6494f60f279bcd6150054209ee3d4f43619324a1dcda61d502371070af7a735ceac963e3dea8a9ebae51d3a8abf3ad6c3f39ad22412160ef"}, 0xd8) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=ANY=[@ANYBLOB="6c010000170001000000000000000000fe8000000000000000000000000000bb0000000000000000ac14070000000000001000000000000000000000000000000000000000000000ac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000005000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500ac141400000000000000000000000000000000003200000000000000fe88000000000000000000000000000100"/196], 0x16c}}, 0x0) [ 282.468708] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 282.499289] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 282.517797] sctp: [Deprecated]: syz-executor.5 (pid 15519) Use of int in maxseg socket option. [ 282.517797] Use struct sctp_assoc_value instead [ 282.522703] CPU: 0 PID: 15505 Comm: syz-executor.3 Not tainted 4.14.194-syzkaller #0 [ 282.539011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.548410] Call Trace: [ 282.551040] dump_stack+0x1b2/0x283 [ 282.554703] warn_alloc.cold+0x96/0x1cc [ 282.558698] ? zone_watermark_ok_safe+0x220/0x220 [ 282.563557] ? perf_trace_lock_acquire+0x510/0x510 [ 282.568514] ? perf_trace_lock_acquire+0x510/0x510 [ 282.573481] ? fs_reclaim_release+0xd0/0x110 [ 282.577945] __vmalloc_node_range+0x10e/0x150 [ 282.582495] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 282.587879] vmalloc_user+0x47/0xa0 [ 282.591534] ? vb2_vmalloc_alloc+0xa6/0x280 [ 282.595877] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 282.601282] vb2_vmalloc_alloc+0xa6/0x280 [ 282.605478] __vb2_queue_alloc+0x47a/0xd90 [ 282.609758] vb2_core_create_bufs+0x279/0x5a0 [ 282.614292] ? __vb2_queue_free+0x7a0/0x7a0 [ 282.618668] ? __lock_acquire+0x5fc/0x3f20 [ 282.622938] vb2_create_bufs+0x2e1/0x5b0 [ 282.627026] ? vb2_thread_start.cold+0x24/0x24 [ 282.631632] ? check_preemption_disabled+0x35/0x240 [ 282.636669] ? perf_trace_lock+0xf7/0x490 [ 282.640843] vb2_ioctl_create_bufs+0x1f7/0x330 [ 282.645447] v4l_create_bufs+0xa4/0x150 [ 282.649445] __video_do_ioctl+0x65b/0x6a0 [ 282.653622] ? video_ioctl2+0x30/0x30 [ 282.657443] ? __might_fault+0x177/0x1b0 [ 282.661528] video_usercopy+0xf5/0xe90 [ 282.665428] ? video_ioctl2+0x30/0x30 [ 282.669241] ? v4l_g_ctrl+0x390/0x390 [ 282.673056] ? check_preemption_disabled+0x35/0x240 [ 282.678090] ? check_preemption_disabled+0x35/0x240 [ 282.683161] ? perf_trace_lock+0xf7/0x490 [ 282.687327] ? perf_trace_lock_acquire+0x510/0x510 [ 282.692278] v4l2_ioctl+0x1bb/0x2f0 [ 282.695917] ? v4l2_open+0x2f0/0x2f0 [ 282.699652] do_vfs_ioctl+0x75a/0xff0 [ 282.703477] ? selinux_inode_setxattr+0x730/0x730 [ 282.708351] ? ioctl_preallocate+0x1a0/0x1a0 [ 282.712811] ? lock_downgrade+0x740/0x740 [ 282.716984] ? __fget+0x225/0x360 [ 282.720456] ? security_file_ioctl+0x83/0xb0 [ 282.724890] SyS_ioctl+0x7f/0xb0 [ 282.728271] ? do_vfs_ioctl+0xff0/0xff0 [ 282.732263] do_syscall_64+0x1d5/0x640 [ 282.736194] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 282.741416] RIP: 0033:0x45d579 [ 282.744619] RSP: 002b:00007fa14ead2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.752343] RAX: ffffffffffffffda RBX: 000000000001f340 RCX: 000000000045d579 [ 282.759625] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 282.766908] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 282.774188] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 282.781501] R13: 00007ffc763ef02f R14: 00007fa14ead39c0 R15: 000000000118cf4c 06:17:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r1}, 0x8) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x334a9113f13b4c2c}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r5, 0x328, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004040}, 0x9) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r6, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/205, 0xcd}], 0x1, 0x68, 0x0) 06:17:06 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xe000) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000000c0)="db47d23de9b1a9f691fc9e63516191ed6b9daf60483d0f1eca5994d995f7cceffc07a6dc0c88f4d99b8b6ba7c12f1a90583fd3d9d11bafe91ae9885087336eb7faa1d2c1c619e2581fc734acb16fa1a3bb6e2a9fb49436f4112195c4290359c84d9b6fe2cb2c0820f68a5b9421889d0d32d693e27932d5556184d1772e6f8227bef3cb35d1ba339567629f2dbb733dacefdcdb611896d33ceca3419f0e3d62a85c0fc8f40ee4aa9a47daabeee9337bf592dd51a9a6a0e944bbf6fbf397199da3bcc77d1d3b207578d49592b482de0f") sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000200)={'icmp6\x00'}, &(0x7f0000000280)=0x1e) r4 = socket$inet_udplite(0x2, 0x2, 0x88) semget$private(0x0, 0x2, 0x2ac) r5 = dup(r4) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000002c0)={r4, 0x20, 0x10001, 0x3}) ioctl$NBD_SET_BLKSIZE(r6, 0xab01, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VT_OPENQRY(r5, 0x5600, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:06 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, 0x0) 06:17:06 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @local, 'erspan0\x00'}}, 0x1e) close(r0) 06:17:06 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, 0x0) [ 283.178211] Mem-Info: [ 283.180691] active_anon:217346 inactive_anon:4317 isolated_anon:0 [ 283.180691] active_file:7256 inactive_file:22688 isolated_file:0 [ 283.180691] unevictable:0 dirty:283 writeback:0 unstable:0 [ 283.180691] slab_reclaimable:17331 slab_unreclaimable:121615 [ 283.180691] mapped:61443 shmem:4505 pagetables:2971 bounce:0 [ 283.180691] free:1031754 free_pcp:386 free_cma:0 [ 283.226729] Node 0 active_anon:868784kB inactive_anon:17268kB active_file:28888kB inactive_file:90752kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:245672kB dirty:1116kB writeback:0kB shmem:18020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 837632kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 283.255525] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 283.282661] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.309020] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 283.314079] Node 0 DMA32 free:332088kB min:36272kB low:45340kB high:54408kB active_anon:868784kB inactive_anon:17268kB active_file:28888kB inactive_file:90752kB unevictable:0kB writepending:1116kB present:3129332kB managed:2621192kB mlocked:0kB kernel_stack:9952kB pagetables:11736kB bounce:0kB free_pcp:764kB local_pcp:680kB free_cma:0kB [ 283.344642] lowmem_reserve[]: 0 0 0 0 0 [ 283.348929] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.375124] lowmem_reserve[]: 0 0 0 0 0 [ 283.379382] Node 1 Normal free:3778984kB min:53612kB low:67012kB high:80412kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:16kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:1164kB local_pcp:612kB free_cma:0kB [ 283.408819] lowmem_reserve[]: 0 0 0 0 0 [ 283.412852] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15908kB [ 283.427681] Node 0 DMA32: 444*4kB (UM) 203*8kB (UME) 1614*16kB (UM) 967*32kB (UME) 438*64kB (UME) 181*128kB (UM) 125*256kB (UM) 78*512kB (UM) 22*1024kB (U) 12*2048kB (UME) 25*4096kB (UM) = 332808kB [ 283.446349] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 283.458063] Node 1 Normal: 76*4kB (UME) 397*8kB (UME) 293*16kB (UM) 72*32kB (UM) 33*64kB (UME) 21*128kB (UM) 12*256kB (U) 7*512kB (U) 3*1024kB (UM) 11*2048kB (UME) 911*4096kB (UM) = 3778984kB [ 283.477171] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.486847] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 283.496120] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.504982] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 283.514738] 22792 total pagecache pages [ 283.519386] 0 pages in swap cache [ 283.522891] Swap cache stats: add 0, delete 0, find 0/0 06:17:07 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000100)=[0x5, 0x10001]) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x30323953, 0x0, 0x0, [{0xfffffff4}, {}, {}, {}, {}, {}, {0x8000000}]}}}) 06:17:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c010000170001000000000000000000fe8000000000000000000000000000bb0000000000000000ac14140000000000000000000000000000000000000000000000000000000000ac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000011030000000000000000000000006109eaf961f3bc0000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500ac141400000000000000000000000000000000003200000000000000fe88000000000000000000000000000100"/196], 0x16c}}, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000180)={0x0, 0x0, 0x101, 0x4, {0x2, 0xfff, 0x3, 0x9}}) 06:17:07 executing program 0: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000001980)=[{&(0x7f00000002c0)="c69a6a5b2d38f00f5b14a841dfdc2cea7a1d1a91a5e8bd62b515bc378602ceec1f273772d5e50bedd1912f2be2488118a4fbabc6c33e681ce6bb8e0e90979e553ad15473a67763aeff01455c14aa8b81944c82c152e62ce197ee1006dadefc49a481fc218a232a8f9cc5c98a02a4dc1c13aabe51015b351957dae46141850f68c00c143a2636b5614456029302c6db8748ffe4c9941820e698dcf0ad21229fa5dbe627e2324d8c417e00519921d7e16aa2d41b11f7c22b8b3b142687da26d277d1a5dba864d60d6f41edf9b21671b18f9bea1f29935e1b2f5dc2dffbc1584cb6a840700d59e5dcbc3536205a008a16d8f8c9e524", 0xf4}, {&(0x7f00000003c0)="5b42b22aed1c68c045bd50a0372092dd63917aed915ffe40951d84ee83156f3cd9d2e0d807fac53bcd35622ce33297a98d8af38b02c6a89f90b54bf191e08b184499bb32371892bcc02deb26eef903e1", 0x50}, {&(0x7f00000004c0)="3aa11e6c3a23b0882f65cd4fa2b22fff47159130e9ed0e26e7259b203dd04d70cc5bb6ddb28fe348bb3431f55e55bf83b043e661dc5d5bcee8041feffe8c25409539f53e07f150a4f0e00d8a42dc33ae650b99f62e42e9a2deaeacea9ef91cda0b0dab14eb730ec23c8f7eeefe66f0130ef19b7682cd5dba4d471e1fb8eb98f8cee9a2306de020ca6410f2e8f8e34f5c6baf0b01b7a57f245bc1bc2ea7b061843613dcca54583144ed3f31500921cc93c5c0faa65fd2efcb23147c72863c36c9678d53", 0xc3}, {&(0x7f00000005c0)="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", 0xdf2}], 0x4, 0x8, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001400)=ANY=[@ANYBLOB="380000001000050f0002000000000000000000005505ed225bc0604c71acda3edcd00cdc65dfcc5b5de18c77691632f6eb923b658405cbbf10491c9ee4741c654608b3bc8a3e14e1df06cdc5cd4a", @ANYRES32=r4, @ANYBLOB="0900f01501000000180012000800"/28, @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000ff31cadd03ab3fb027dfc35a1fa34a05aada03529067790cf94741661cf6af9b1c1186d239f80c3450cd6a9031c013b0244575d0df06da09cd6e9e96436e3d082c6ddf069eaccf8ee3adc0c38977250476c1561e5ee1b60510632b5da93a0dbf79ccd1914cf47a9b", @ANYRES32=r5, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001b80)={'macvlan0\x00', r4}) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001480)='/dev/ubi_ctrl\x00', 0x40c840, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f0000001c40)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001c00)={&(0x7f00000014c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd7000ffdbdf251600000008000300", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB="2ba02c8e8fb387e38a4354f1a854d12ea27ff97de6a8f79c7d38f009bb272ca6a0409c8fba8dc8362b5d8af87b0b541769b20674723cedea17fe1341c6686c36d0ffbbeeee6a068be7d7a1ac2de9b18ad057a699844a75cbe4e591f46f35153ab38ca662767ae368"], 0x24}, 0x1, 0x0, 0x0, 0x428d3}, 0x800) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) r9 = getpid() sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) rt_sigqueueinfo(r9, 0x2f, &(0x7f0000000440)={0x15, 0x6}) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x3, @loopback, 0x6}}, 0xd53}, 0x90) 06:17:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffc, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x0) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x101000, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) iopl(0x0) 06:17:07 executing program 4 (fault-call:8 fault-nth:0): sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 283.529378] Free swap = 0kB [ 283.532498] Total swap = 0kB [ 283.536649] 1965979 pages RAM [ 283.539790] 0 pages HighMem/MovableOnly [ 283.543795] 339073 pages reserved [ 283.548726] 0 pages cma reserved [ 283.630425] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 283.633804] syz-executor.3: [ 283.643003] FAULT_INJECTION: forcing a failure. [ 283.643003] name failslab, interval 1, probability 0, space 0, times 0 [ 283.657228] vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 283.684089] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 283.704874] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 283.708619] CPU: 0 PID: 15572 Comm: syz-executor.4 Not tainted 4.14.194-syzkaller #0 [ 283.717922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.727280] Call Trace: [ 283.729876] dump_stack+0x1b2/0x283 [ 283.733517] should_fail.cold+0x10a/0x154 [ 283.737682] should_failslab+0xd6/0x130 [ 283.741665] kmem_cache_alloc_node_trace+0x25a/0x400 [ 283.746817] __kmalloc_node+0x38/0x70 [ 283.750636] kvmalloc_node+0x46/0xd0 [ 283.754360] alloc_netdev_mqs+0x76/0xb70 [ 283.758429] ? ip6_tnl_dev_init+0x5b0/0x5b0 [ 283.762763] ip6_tnl_locate+0x3a4/0x7d0 [ 283.766754] ? ip6_tnl_create2+0x2c0/0x2c0 [ 283.771182] ip6_tnl_ioctl+0x5e6/0xe32 [ 283.775093] ? ip6ip6_err+0x460/0x460 [ 283.778930] ? ip6ip6_err+0x460/0x460 06:17:07 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000006c0)="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", 0xefd) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) ioctl$TIOCEXCL(r0, 0x540c) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x400000, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000180)) ioctl$TCSETSF(r0, 0x5453, 0x0) [ 283.782747] dev_ifsioc+0x1d8/0x7d0 [ 283.786388] ? dev_ifname+0xf0/0xf0 [ 283.790030] dev_ioctl+0x43c/0xbe0 [ 283.793585] ? dev_ifsioc+0x7d0/0x7d0 [ 283.797415] ? perf_trace_lock+0xf7/0x490 [ 283.801573] ? proc_fail_nth_write+0x7b/0x180 [ 283.806083] ? check_preemption_disabled+0x35/0x240 [ 283.811123] sock_ioctl+0x164/0x4c0 [ 283.814761] ? sock_release+0x1e0/0x1e0 [ 283.818749] do_vfs_ioctl+0x75a/0xff0 [ 283.822560] ? selinux_inode_setxattr+0x730/0x730 [ 283.827437] ? ioctl_preallocate+0x1a0/0x1a0 06:17:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x25, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=ANY=[@ANYBLOB="6c010000170001000000000000000000fe8000000000000000000000000000bb0000000000000000ac14140000000000000000000000000000000000000000000000000000000000ac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a1141400000000beb31e3b00000000000000000005000000000000000000000100000000000000010000000000800000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500ac141400000000000000000000000000000000003200000000000000fe88000000000000000000000000000100"/196], 0x16c}}, 0x0) [ 283.831863] ? lock_downgrade+0x740/0x740 [ 283.836041] ? __fget+0x225/0x360 [ 283.839510] ? security_file_ioctl+0x83/0xb0 [ 283.843939] SyS_ioctl+0x7f/0xb0 [ 283.847319] ? do_vfs_ioctl+0xff0/0xff0 [ 283.851309] do_syscall_64+0x1d5/0x640 [ 283.855214] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 283.860435] RIP: 0033:0x45d579 [ 283.863626] RSP: 002b:00007f3a53935c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.871343] RAX: ffffffffffffffda RBX: 0000000000012dc0 RCX: 000000000045d579 [ 283.878625] RDX: 0000000020000080 RSI: 00000000000089f1 RDI: 0000000000000007 [ 283.885908] RBP: 00007f3a53935ca0 R08: 0000000000000000 R09: 0000000000000000 [ 283.893183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.900460] R13: 00007ffdcc2e731f R14: 00007f3a539369c0 R15: 000000000118cf4c [ 283.907757] CPU: 1 PID: 15573 Comm: syz-executor.3 Not tainted 4.14.194-syzkaller #0 [ 283.915679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.925041] Call Trace: [ 283.927643] dump_stack+0x1b2/0x283 [ 283.931289] warn_alloc.cold+0x96/0x1cc [ 283.935278] ? zone_watermark_ok_safe+0x220/0x220 [ 283.940138] ? perf_trace_lock_acquire+0x510/0x510 [ 283.945089] ? perf_trace_lock_acquire+0x510/0x510 [ 283.950042] ? fs_reclaim_release+0xd0/0x110 [ 283.954484] __vmalloc_node_range+0x10e/0x150 [ 283.958998] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 283.964383] vmalloc_user+0x47/0xa0 [ 283.968025] ? vb2_vmalloc_alloc+0xa6/0x280 [ 283.972357] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 283.977740] vb2_vmalloc_alloc+0xa6/0x280 [ 283.981908] __vb2_queue_alloc+0x47a/0xd90 [ 283.986173] vb2_core_create_bufs+0x279/0x5a0 [ 283.990693] ? __vb2_queue_free+0x7a0/0x7a0 [ 283.995038] ? __lock_acquire+0x5fc/0x3f20 [ 283.999292] vb2_create_bufs+0x2e1/0x5b0 [ 284.003374] ? vb2_thread_start.cold+0x24/0x24 [ 284.007978] ? check_preemption_disabled+0x35/0x240 [ 284.013039] ? perf_trace_lock+0xf7/0x490 [ 284.017219] vb2_ioctl_create_bufs+0x1f7/0x330 [ 284.021856] v4l_create_bufs+0xa4/0x150 [ 284.025886] __video_do_ioctl+0x65b/0x6a0 [ 284.030058] ? video_ioctl2+0x30/0x30 [ 284.033904] ? __might_fault+0x177/0x1b0 [ 284.037989] video_usercopy+0xf5/0xe90 [ 284.041897] ? video_ioctl2+0x30/0x30 [ 284.045727] ? v4l_g_ctrl+0x390/0x390 [ 284.049546] ? check_preemption_disabled+0x35/0x240 [ 284.054589] ? check_preemption_disabled+0x35/0x240 [ 284.059631] ? perf_trace_lock+0xf7/0x490 [ 284.063801] ? perf_trace_lock_acquire+0x510/0x510 [ 284.068753] v4l2_ioctl+0x1bb/0x2f0 [ 284.072403] ? v4l2_open+0x2f0/0x2f0 [ 284.076135] do_vfs_ioctl+0x75a/0xff0 [ 284.079980] ? selinux_inode_setxattr+0x730/0x730 [ 284.084867] ? ioctl_preallocate+0x1a0/0x1a0 [ 284.089285] ? lock_downgrade+0x740/0x740 [ 284.093461] ? __fget+0x225/0x360 [ 284.096936] ? security_file_ioctl+0x83/0xb0 [ 284.101404] SyS_ioctl+0x7f/0xb0 [ 284.104790] ? do_vfs_ioctl+0xff0/0xff0 [ 284.108781] do_syscall_64+0x1d5/0x640 [ 284.112724] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 284.117928] RIP: 0033:0x45d579 [ 284.121129] RSP: 002b:00007fa14ead2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.128886] RAX: ffffffffffffffda RBX: 000000000001f340 RCX: 000000000045d579 [ 284.136176] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 284.143484] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 284.150767] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 284.158076] R13: 00007ffc763ef02f R14: 00007fa14ead39c0 R15: 000000000118cf4c 06:17:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) 06:17:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000140)) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x497000, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000bc0)=ANY=[@ANYBLOB="040000000000000002004e24ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d38e491ed26a1f0e3545b5ca400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000002004e22ac1eed0a0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e216401010200000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1e01010000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000173659f738d33908755672d877e72c0000000000000000000000000000000002004e230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5fc9a310e21aa37d3cc92e7d600fffffff20000000000000000000000000000000000000000b30aa20000000000000000000000000000000000000000000000000000000000000002004e22ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac14143200"/935], 0x390) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) r2 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x3200, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976d153b4", 0x235}], 0x1}, 0x0) ioctl$USBDEVFS_RESET(r0, 0x5514) [ 284.363271] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 284.393501] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 06:17:07 executing program 4 (fault-call:8 fault-nth:1): sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:07 executing program 2: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=ANY=[@ANYBLOB="6c010000170001000000000000000000fe8000000000000000000000000000bb0000000000000000ac14140000000000000000000000000000000000000000000000000000000000ac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000005000000000000000000000100000000000000000200000000000002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500ac141400000000000000000000000000000000003200000000000000fe88000000000000000000000000000100"/196], 0x16c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'netpci0\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40090}, 0x810) [ 284.452586] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 284.480267] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 06:17:08 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$bfs(0x0, 0x0, 0x2, 0x1, &(0x7f0000001600)=[{0x0, 0x0, 0xa38}], 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='udf\x00', 0x0, 0x0) [ 284.513890] FAULT_INJECTION: forcing a failure. [ 284.513890] name failslab, interval 1, probability 0, space 0, times 0 [ 284.562829] CPU: 1 PID: 15606 Comm: syz-executor.4 Not tainted 4.14.194-syzkaller #0 [ 284.570764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.580130] Call Trace: [ 284.582732] dump_stack+0x1b2/0x283 [ 284.586380] should_fail.cold+0x10a/0x154 [ 284.590553] should_failslab+0xd6/0x130 [ 284.594553] kmem_cache_alloc_trace+0x47/0x3d0 [ 284.599162] __hw_addr_create_ex+0x5b/0x300 [ 284.603543] __hw_addr_add_ex+0x1c1/0x290 [ 284.607716] dev_addr_init+0xfb/0x1b0 [ 284.611536] ? dev_mc_flush+0x30/0x30 [ 284.615358] alloc_netdev_mqs+0x11d/0xb70 [ 284.619543] ? ip6_tnl_dev_init+0x5b0/0x5b0 [ 284.623890] ip6_tnl_locate+0x3a4/0x7d0 [ 284.627888] ? ip6_tnl_create2+0x2c0/0x2c0 [ 284.632147] ip6_tnl_ioctl+0x5e6/0xe32 [ 284.636054] ? ip6ip6_err+0x460/0x460 [ 284.639408] Mem-Info: [ 284.639876] ? ip6ip6_err+0x460/0x460 [ 284.642528] active_anon:218860 inactive_anon:4317 isolated_anon:0 [ 284.642528] active_file:7257 inactive_file:22697 isolated_file:0 [ 284.642528] unevictable:0 dirty:284 writeback:0 unstable:0 [ 284.642528] slab_reclaimable:17332 slab_unreclaimable:122564 [ 284.642528] mapped:61432 shmem:4505 pagetables:3022 bounce:0 [ 284.642528] free:1028969 free_pcp:504 free_cma:0 [ 284.646068] dev_ifsioc+0x1d8/0x7d0 [ 284.646080] ? dev_ifname+0xf0/0xf0 [ 284.646096] dev_ioctl+0x43c/0xbe0 [ 284.646108] ? dev_ifsioc+0x7d0/0x7d0 [ 284.646120] ? perf_trace_lock+0xf7/0x490 [ 284.646131] ? proc_fail_nth_write+0x7b/0x180 [ 284.646144] ? check_preemption_disabled+0x35/0x240 [ 284.646166] sock_ioctl+0x164/0x4c0 [ 284.646175] ? sock_release+0x1e0/0x1e0 [ 284.646209] do_vfs_ioctl+0x75a/0xff0 [ 284.695778] Node 0 active_anon:875440kB inactive_anon:17268kB active_file:28892kB inactive_file:90788kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:245728kB dirty:1120kB writeback:0kB shmem:18020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 839680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 284.699036] ? selinux_inode_setxattr+0x730/0x730 [ 284.699050] ? ioctl_preallocate+0x1a0/0x1a0 [ 284.699061] ? lock_downgrade+0x740/0x740 [ 284.699077] ? __fget+0x225/0x360 [ 284.699093] ? security_file_ioctl+0x83/0xb0 [ 284.699105] SyS_ioctl+0x7f/0xb0 [ 284.703826] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 284.708651] ? do_vfs_ioctl+0xff0/0xff0 [ 284.708666] do_syscall_64+0x1d5/0x640 [ 284.708685] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 284.708696] RIP: 0033:0x45d579 [ 284.708701] RSP: 002b:00007f3a53935c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.708712] RAX: ffffffffffffffda RBX: 0000000000012dc0 RCX: 000000000045d579 [ 284.708716] RDX: 0000000020000080 RSI: 00000000000089f1 RDI: 0000000000000007 [ 284.708722] RBP: 00007f3a53935ca0 R08: 0000000000000000 R09: 0000000000000000 [ 284.708727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.708733] R13: 00007ffdcc2e731f R14: 00007f3a539369c0 R15: 000000000118cf4c [ 284.870999] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 284.881538] UDF-fs: Scanning with blocksize 512 failed [ 284.889608] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 284.896819] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 284.923510] UDF-fs: Scanning with blocksize 1024 failed [ 284.930192] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 284.935579] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 284.942302] UDF-fs: Scanning with blocksize 2048 failed [ 284.949592] Node 0 DMA32 free:319548kB min:36272kB low:45340kB high:54408kB active_anon:877540kB inactive_anon:17268kB active_file:28892kB inactive_file:90788kB unevictable:0kB writepending:1120kB present:3129332kB managed:2621192kB mlocked:0kB kernel_stack:10304kB pagetables:12236kB bounce:0kB free_pcp:804kB local_pcp:628kB free_cma:0kB [ 284.982075] lowmem_reserve[]: 0 0 0 0 0 [ 284.986404] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 284.993081] UDF-fs: Scanning with blocksize 4096 failed [ 285.000974] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 285.028174] lowmem_reserve[]: 0 0 0 0 0 [ 285.032602] Node 1 Normal free:3779084kB min:53612kB low:67012kB high:80412kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:16kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:1040kB local_pcp:552kB free_cma:0kB [ 285.062965] lowmem_reserve[]: 0 0 0 0 0 [ 285.068236] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15908kB [ 285.083519] Node 0 DMA32: 145*4kB (UM) 154*8kB (UME) 1364*16kB (UM) 964*32kB (UME) 438*64kB (UME) 181*128kB (UM) 125*256kB (UM) 78*512kB (UM) 22*1024kB (U) 12*2048kB (UME) 23*4096kB (UM) = 318932kB [ 285.103273] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 285.116640] Node 1 Normal: 70*4kB (UME) 391*8kB (UME) 293*16kB (UM) 70*32kB (UM) 33*64kB (UME) 20*128kB (U) 12*256kB (UM) 6*512kB (U) 4*1024kB (UM) 11*2048kB (UME) 911*4096kB (UM) = 3779232kB [ 285.136616] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 285.146236] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 285.157103] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 285.166553] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 285.177097] 22810 total pagecache pages [ 285.225455] 0 pages in swap cache [ 285.249934] Swap cache stats: add 0, delete 0, find 0/0 [ 285.290025] Free swap = 0kB [ 285.315027] Total swap = 0kB [ 285.324118] 1965979 pages RAM [ 285.338753] 0 pages HighMem/MovableOnly [ 285.355652] 339073 pages reserved [ 285.370476] 0 pages cma reserved 06:17:08 executing program 3: accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x80000) r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x400, 0x0) getpeername$tipc(r3, &(0x7f00000001c0)=@name, &(0x7f0000000240)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffff4}]}}}) 06:17:08 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000000)={0x3, {0x5cb, 0x3, 0x4, 0xfff}, {0x200, 0x8001, 0x8, 0xfffffff7}, {0x0, 0x7}}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@getae={0x4c, 0x1f, 0x1, 0x0, 0x0, {{@in=@dev}, @in=@dev}, [@mark={0xc}]}, 0x4c}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x480, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000380), 0x4) sendmsg$nl_crypto(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x40c4}, 0x4000004) 06:17:08 executing program 4 (fault-call:8 fault-nth:2): sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:08 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6}, 0x4, r3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x10002, 0x8) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x190, 0x2, 0x2, 0x301, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASTER={0x70, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3ff}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0xd0, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, [], 0x2c}}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x2c}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}}}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000854}, 0x2000c805) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) 06:17:08 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xfffffffffffeffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000100)={[{@fat=@discard='discard'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x800000080004103) r4 = socket(0x10, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r7, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r8], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r8, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x0, 0x7, 0x2, 0x7f, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x1, 0x40, 0x3}}) 06:17:08 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800046e8248a9050000001fd33ff774512643fe74e0efe3743e19a3b2808cae02000000000000003ea82f1ce8ec3d370738422ba201796817c739110be65d00ace2089e9737260bbd0af1470502c826a14ad6f40c", @ANYRESOCT, @ANYRES64, @ANYRES16, @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x809}, 0x4004800) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="64000000d78729b32708fb58ff56494c966c9511090c850c829992751bbf08af61f07f721ec72b9880c2f0f05c785eb7", @ANYRES16=r3, @ANYBLOB="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"], 0x64}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4010) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="889f49c1", @ANYRES16=r3, @ANYBLOB="00012abd7000fedbdf25080000000500010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4003}, 0x4000891) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="03000000", @ANYRES16=r3, @ANYBLOB="00012abd7000ffdbdf250600000008000400e00000010800050000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040041}, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x58, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:modules_object_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0xd}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x44095) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg2\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x8040) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r3, @ANYBLOB="020029bd7000fedbdf250600000014000300fc00000000000000000000000000000114000300fc02000000000000000000000000a0000000000000007468305f746f5f7465616d00000005000100010000002b00070073797374656d5f753a6f626a6563745f723a7373685f6b657967656e5f657865635f743a7330000014000200fe8000000000000000000000000000bb050001000000000014000600626f6e645f736c6176655f3100000000c1000200000000ff0700"/194], 0xc8}, 0x1, 0x0, 0x0, 0x20000000}, 0x44800) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 285.519631] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 285.524063] FAULT_INJECTION: forcing a failure. [ 285.524063] name failslab, interval 1, probability 0, space 0, times 0 [ 285.556135] FAT-fs (loop1): mounting with "discard" option, but the device does not support discard 06:17:09 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) sendmmsg$alg(r1, &(0x7f0000001940)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)='\b', 0x1}], 0x1}], 0x1, 0x0) [ 285.563584] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 285.571261] CPU: 0 PID: 15642 Comm: syz-executor.3 Not tainted 4.14.194-syzkaller #0 [ 285.579162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.588563] Call Trace: [ 285.591164] dump_stack+0x1b2/0x283 [ 285.594821] warn_alloc.cold+0x96/0x1cc [ 285.598820] ? zone_watermark_ok_safe+0x220/0x220 [ 285.603685] ? perf_trace_lock_acquire+0x510/0x510 [ 285.608640] ? perf_trace_lock_acquire+0x510/0x510 [ 285.613583] ? fs_reclaim_release+0xd0/0x110 [ 285.618011] __vmalloc_node_range+0x10e/0x150 [ 285.622526] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 285.627908] vmalloc_user+0x47/0xa0 [ 285.631544] ? vb2_vmalloc_alloc+0xa6/0x280 [ 285.635870] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 285.642026] vb2_vmalloc_alloc+0xa6/0x280 [ 285.646185] __vb2_queue_alloc+0x47a/0xd90 [ 285.650441] vb2_core_create_bufs+0x279/0x5a0 [ 285.654960] ? __vb2_queue_free+0x7a0/0x7a0 [ 285.659305] ? __lock_acquire+0x5fc/0x3f20 [ 285.663558] vb2_create_bufs+0x2e1/0x5b0 [ 285.667636] ? vb2_thread_start.cold+0x24/0x24 [ 285.672231] ? check_preemption_disabled+0x35/0x240 06:17:09 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x80000000]}, 0x8, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0)={0x7fffffff, 0x7, 0x8000, 0x1, 0xffff}, 0x14) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000040)=""/52, 0x9ffff040}], 0x1) 06:17:09 executing program 4 (fault-call:8 fault-nth:3): sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 285.677274] ? perf_trace_lock+0xf7/0x490 [ 285.677291] vb2_ioctl_create_bufs+0x1f7/0x330 [ 285.677306] v4l_create_bufs+0xa4/0x150 06:17:09 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300030c000000000000000000000002000900080000006b000000000000005fc306000000000002000000e0000001000000000000000002000100000000000000001600000000030005000000000002000000ac1e00010000000000000000"], 0x60}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x2, 0x3, 0x0, 0x6, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_x_nat_t_type={0x1, 0x14, 0x81}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0xff, 0x0, 0x16}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @multicast2}}]}, 0x60}}, 0x0) fcntl$getflags(r2, 0x40a) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x800, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x800, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f00000002c0)=0x1) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x7fff, 0x101000) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r4, 0xc038943b, &(0x7f0000000200)={0x8, 0x38, [], 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) [ 285.677318] __video_do_ioctl+0x65b/0x6a0 06:17:09 executing program 4 (fault-call:8 fault-nth:4): sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:09 executing program 3: syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x397002, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000300)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000400)=0xe8) setuid(r5) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xa4, r6, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1b}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24004804}, 0x20000080) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffff4}]}}}) [ 285.677334] ? video_ioctl2+0x30/0x30 [ 285.677347] ? __might_fault+0x177/0x1b0 [ 285.677360] video_usercopy+0xf5/0xe90 [ 285.677372] ? video_ioctl2+0x30/0x30 [ 285.677382] ? v4l_g_ctrl+0x390/0x390 [ 285.677393] ? check_preemption_disabled+0x35/0x240 06:17:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@remote, 0x0, 0x0, 0x0, 0x3}, {{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x4, 0x0, 0x2}}, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0x16c}}, 0x0) 06:17:09 executing program 4 (fault-call:8 fault-nth:5): sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:09 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)="01c2d2cd25cb07e5987d658a7451d9124f7b414d2330bd5e863089fc9d606e4421bf41aa52486c05d22e8bb27115fd320efb5859f7af358446a9d930a27f2199b4a36cd1b207dfd82e53a89a0a01d0d6ca05a6cccb24137eac147d70b9dab3a6dfe2c55f802d2b490ef757982f0eb45afe44af19dad4d778b84b5979f4a39d692c", 0x81}, {&(0x7f0000000340)="eff0d86383837fb9f33bdb77a4108772570a3cd31883ce273e01a49bfec0c5c668b85bf7dbde4783d02a07409e", 0x2d}, {&(0x7f0000000480)="692aed545e6acffb841b5b21ff3c41c11974224192140c4d916e7bb39023ec5d0333aa345db28f0e0cf74ba5d6a4a9e138ab8d5d2c439f9263d2b1de67e195c12778f37c72d5d61711f8fa8c7ce87daadb7a9b21e75f1e7e75031de0fe41c1db93fc5f64e3c6894715b094b9910496200ae25d611b9c723d2e573cde24981b9c83c331a063", 0x85}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000000640)="e72b4878c454ddcdb52b77ad2940e9f960a4d85483a32f5dd98acf8edc4fbd6c8c94fb5a8ad9064ea33f248ea24d8e87bff1a892e950ec07a259b119d3bd340aa20d43b914396bee76e5e990a0fd9903e835652a9ed2f830bc8749af9a7ec05a0802ce072a096dd647429b5e3d9b0aae6fddbab2f12b419d3d35a2531b5c6cd4d03a6d41797508598ef889e08c16903896aebb219b4942e245eae0ebbe70b3611fe3ce5419698ceb4742b01bae7b76430b969cc3ae4ff607b0d1f967705864ec4d0f1ea99e16a68820e26e6c1cb2e019fe751e345071deae", 0xd8}], 0x5}, 0x40014) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r3, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0c000000ea66f40700000000000100000a000000", @ANYRES32=r4, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) recvfrom$netrom(r2, &(0x7f00000000c0)=""/218, 0xda, 0x20, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000018c0)={0x5, 0xf588, 0x4, 0x9, 0x800, 0x1000, 0x101, 0x1}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x7) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 285.677405] ? check_preemption_disabled+0x35/0x240 [ 285.677417] ? perf_trace_lock+0xf7/0x490 [ 285.677426] ? perf_trace_lock_acquire+0x510/0x510 [ 285.677440] v4l2_ioctl+0x1bb/0x2f0 [ 285.677448] ? v4l2_open+0x2f0/0x2f0 [ 285.677462] do_vfs_ioctl+0x75a/0xff0 [ 285.677473] ? selinux_inode_setxattr+0x730/0x730 [ 285.677483] ? ioctl_preallocate+0x1a0/0x1a0 [ 285.677492] ? lock_downgrade+0x740/0x740 [ 285.677515] ? __fget+0x225/0x360 [ 285.677531] ? security_file_ioctl+0x83/0xb0 [ 285.677543] SyS_ioctl+0x7f/0xb0 [ 285.677552] ? do_vfs_ioctl+0xff0/0xff0 [ 285.677564] do_syscall_64+0x1d5/0x640 [ 285.677582] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 285.677591] RIP: 0033:0x45d579 [ 285.677596] RSP: 002b:00007fa14ead2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.677607] RAX: ffffffffffffffda RBX: 000000000001f340 RCX: 000000000045d579 [ 285.677613] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 285.677618] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 285.677624] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 285.677629] R13: 00007ffc763ef02f R14: 00007fa14ead39c0 R15: 000000000118cf4c [ 285.709176] CPU: 1 PID: 15647 Comm: syz-executor.4 Not tainted 4.14.194-syzkaller #0 [ 285.709185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.709189] Call Trace: [ 285.709207] dump_stack+0x1b2/0x283 [ 285.709225] should_fail.cold+0x10a/0x154 [ 285.709242] should_failslab+0xd6/0x130 [ 285.709254] kmem_cache_alloc_node_trace+0x25a/0x400 [ 285.709268] __kmalloc_node+0x38/0x70 [ 285.709280] kvmalloc_node+0x46/0xd0 [ 285.709293] alloc_netdev_mqs+0x5e5/0xb70 [ 285.709310] ip6_tnl_locate+0x3a4/0x7d0 [ 285.709323] ? ip6_tnl_create2+0x2c0/0x2c0 [ 285.709338] ip6_tnl_ioctl+0x5e6/0xe32 [ 285.709353] ? ip6ip6_err+0x460/0x460 [ 285.709384] ? ip6ip6_err+0x460/0x460 [ 285.709395] dev_ifsioc+0x1d8/0x7d0 [ 285.709405] ? dev_ifname+0xf0/0xf0 [ 285.709420] dev_ioctl+0x43c/0xbe0 [ 285.709432] ? dev_ifsioc+0x7d0/0x7d0 [ 285.709445] ? perf_trace_lock+0xf7/0x490 [ 285.709457] ? proc_fail_nth_write+0x7b/0x180 [ 285.709472] ? check_preemption_disabled+0x35/0x240 [ 285.709497] sock_ioctl+0x164/0x4c0 [ 285.709516] ? sock_release+0x1e0/0x1e0 [ 285.709531] do_vfs_ioctl+0x75a/0xff0 [ 285.709543] ? selinux_inode_setxattr+0x730/0x730 [ 285.709555] ? ioctl_preallocate+0x1a0/0x1a0 [ 285.709565] ? lock_downgrade+0x740/0x740 [ 285.709582] ? __fget+0x225/0x360 [ 285.709599] ? security_file_ioctl+0x83/0xb0 [ 285.709612] SyS_ioctl+0x7f/0xb0 [ 285.709621] ? do_vfs_ioctl+0xff0/0xff0 [ 285.709635] do_syscall_64+0x1d5/0x640 [ 285.709654] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 285.709663] RIP: 0033:0x45d579 [ 285.709668] RSP: 002b:00007f3a53935c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.709679] RAX: ffffffffffffffda RBX: 0000000000012dc0 RCX: 000000000045d579 [ 285.709685] RDX: 0000000020000080 RSI: 00000000000089f1 RDI: 0000000000000007 [ 285.709691] RBP: 00007f3a53935ca0 R08: 0000000000000000 R09: 0000000000000000 [ 285.709697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 285.709703] R13: 00007ffdcc2e731f R14: 00007f3a539369c0 R15: 000000000118cf4c [ 285.750758] Mem-Info: [ 285.750783] active_anon:219183 inactive_anon:4517 isolated_anon:0 [ 285.750783] active_file:7258 inactive_file:22879 isolated_file:0 [ 285.750783] unevictable:0 dirty:285 writeback:0 unstable:0 [ 285.750783] slab_reclaimable:17332 slab_unreclaimable:122903 [ 285.750783] mapped:61466 shmem:4705 pagetables:3069 bounce:0 [ 285.750783] free:1027933 free_pcp:391 free_cma:0 [ 285.750802] Node 0 active_anon:876732kB inactive_anon:18068kB active_file:28896kB inactive_file:91516kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:245864kB dirty:1124kB writeback:0kB shmem:18820kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 843776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 285.750819] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 285.750824] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 285.750847] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 285.750872] Node 0 DMA32 free:316640kB min:36272kB low:45340kB high:54408kB active_anon:876732kB inactive_anon:18068kB active_file:28896kB inactive_file:91516kB unevictable:0kB writepending:1124kB present:3129332kB managed:2621192kB mlocked:0kB kernel_stack:10368kB pagetables:12276kB bounce:0kB free_pcp:648kB local_pcp:296kB free_cma:0kB [ 285.750894] lowmem_reserve[]: 0 0 0 0 0 [ 285.750916] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 285.750937] lowmem_reserve[]: 0 0 0 0 0 [ 285.750960] Node 1 Normal free:3779184kB min:53612kB low:67012kB high:80412kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:16kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:916kB local_pcp:428kB free_cma:0kB [ 285.750983] lowmem_reserve[]: 0 0 0 0 0 [ 285.751004] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15908kB [ 285.751084] Node 0 DMA32: 0*4kB 1*8kB (E) 1214*16kB (UME) 959*32kB (UME) 438*64kB (UME) 181*128kB (UM) 125*256kB (UM) 78*512kB (UM) 22*1024kB (U) 13*2048kB (UME) 23*4096kB (UM) = 316616kB [ 285.751175] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 285.751230] Node 1 Normal: 70*4kB (UME) 391*8kB (UME) 293*16kB (UM) 70*32kB (UM) 33*64kB (UME) 20*128kB (U) 12*256kB (UM) 6*512kB (U) 4*1024kB (UM) 11*2048kB (UME) 911*4096kB (UM) = 3779232kB [ 285.751328] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 285.751336] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 285.751343] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 285.751350] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 285.751354] 23195 total pagecache pages [ 285.751365] 0 pages in swap cache [ 285.751371] Swap cache stats: add 0, delete 0, find 0/0 [ 285.751375] Free swap = 0kB [ 285.751378] Total swap = 0kB [ 285.751385] 1965979 pages RAM [ 285.751389] 0 pages HighMem/MovableOnly [ 285.751393] 339073 pages reserved [ 285.751397] 0 pages cma reserved [ 285.904114] FAULT_INJECTION: forcing a failure. [ 285.904114] name failslab, interval 1, probability 0, space 0, times 0 [ 285.904127] CPU: 0 PID: 15673 Comm: syz-executor.4 Not tainted 4.14.194-syzkaller #0 [ 285.904133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.904137] Call Trace: [ 285.904154] dump_stack+0x1b2/0x283 [ 285.904171] should_fail.cold+0x10a/0x154 [ 285.904189] should_failslab+0xd6/0x130 [ 285.904202] kmem_cache_alloc_node_trace+0x25a/0x400 [ 285.904215] __kmalloc_node+0x38/0x70 [ 285.904228] kvmalloc_node+0x46/0xd0 [ 285.904240] alloc_netdev_mqs+0x75c/0xb70 [ 285.904257] ip6_tnl_locate+0x3a4/0x7d0 [ 285.904270] ? ip6_tnl_create2+0x2c0/0x2c0 [ 285.904286] ip6_tnl_ioctl+0x5e6/0xe32 [ 285.904299] ? ip6ip6_err+0x460/0x460 [ 285.904339] ? ip6ip6_err+0x460/0x460 [ 285.904351] dev_ifsioc+0x1d8/0x7d0 [ 285.904364] ? dev_ifname+0xf0/0xf0 [ 285.904384] dev_ioctl+0x43c/0xbe0 [ 285.904399] ? dev_ifsioc+0x7d0/0x7d0 [ 285.904415] ? perf_trace_lock+0xf7/0x490 [ 285.904430] ? proc_fail_nth_write+0x7b/0x180 [ 285.904445] ? check_preemption_disabled+0x35/0x240 [ 285.904469] sock_ioctl+0x164/0x4c0 [ 285.904481] ? sock_release+0x1e0/0x1e0 [ 285.904496] do_vfs_ioctl+0x75a/0xff0 [ 285.904522] ? selinux_inode_setxattr+0x730/0x730 [ 285.904538] ? ioctl_preallocate+0x1a0/0x1a0 [ 285.904550] ? lock_downgrade+0x740/0x740 [ 285.904569] ? __fget+0x225/0x360 [ 285.904587] ? security_file_ioctl+0x83/0xb0 [ 285.904603] SyS_ioctl+0x7f/0xb0 [ 285.904616] ? do_vfs_ioctl+0xff0/0xff0 [ 285.904634] do_syscall_64+0x1d5/0x640 [ 285.904663] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 285.904672] RIP: 0033:0x45d579 [ 285.904680] RSP: 002b:00007f3a53935c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.904693] RAX: ffffffffffffffda RBX: 0000000000012dc0 RCX: 000000000045d579 [ 285.904700] RDX: 0000000020000080 RSI: 00000000000089f1 RDI: 0000000000000007 [ 285.904706] RBP: 00007f3a53935ca0 R08: 0000000000000000 R09: 0000000000000000 [ 285.904712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 285.904719] R13: 00007ffdcc2e731f R14: 00007f3a539369c0 R15: 000000000118cf4c [ 286.067289] FAULT_INJECTION: forcing a failure. [ 286.067289] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 286.067304] CPU: 1 PID: 15690 Comm: syz-executor.4 Not tainted 4.14.194-syzkaller #0 [ 286.067311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.067315] Call Trace: [ 286.067331] dump_stack+0x1b2/0x283 [ 286.067349] should_fail.cold+0x10a/0x154 [ 286.067360] ? lock_downgrade+0x740/0x740 [ 286.067376] __alloc_pages_nodemask+0x22c/0x2720 [ 286.067390] ? kernel_text_address+0xbd/0xf0 [ 286.067400] ? __kernel_text_address+0x9/0x30 [ 286.067413] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 286.067423] ? __save_stack_trace+0xa0/0x160 [ 286.067436] ? depot_save_stack+0x10d/0x3e3 [ 286.067449] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 286.067468] ? kasan_kmalloc+0x139/0x160 [ 286.067485] ? alloc_netdev_mqs+0x75c/0xb70 [ 286.067498] ? ip6_tnl_locate+0x3a4/0x7d0 [ 286.067509] ? ip6_tnl_ioctl+0x5e6/0xe32 [ 286.067522] ? dev_ifsioc+0x1d8/0x7d0 [ 286.067532] ? dev_ioctl+0x43c/0xbe0 [ 286.067546] ? sock_ioctl+0x164/0x4c0 [ 286.067556] ? do_vfs_ioctl+0x75a/0xff0 [ 286.067568] ? SyS_ioctl+0x7f/0xb0 [ 286.067583] ? __lock_acquire+0x5fc/0x3f20 [ 286.067602] alloc_pages_current+0x155/0x260 [ 286.067612] ? perf_trace_lock_acquire+0x510/0x510 [ 286.067625] get_zeroed_page+0x19/0x50 [ 286.067634] __dev_alloc_name+0xe3/0x2b0 [ 286.067646] ? check_preemption_disabled+0x35/0x240 [ 286.067657] ? dev_get_nest_level+0x160/0x160 [ 286.067667] ? perf_trace_lock+0xf7/0x490 [ 286.067683] dev_get_valid_name+0xa0/0x1c0 [ 286.067694] ? dev_valid_name+0x1a0/0x1a0 [ 286.067703] ? __lockdep_init_map+0x100/0x560 [ 286.067714] ? __lockdep_init_map+0x100/0x560 [ 286.067726] register_netdevice+0x223/0xe40 [ 286.067739] ? lock_acquire+0x170/0x3f0 [ 286.067749] ? netdev_change_features+0xa0/0xa0 [ 286.067765] ip6_tnl_create2+0x16c/0x2c0 [ 286.067775] ip6_tnl_locate+0x53e/0x7d0 [ 286.067787] ? ip6_tnl_create2+0x2c0/0x2c0 [ 286.067812] ip6_tnl_ioctl+0x5e6/0xe32 [ 286.067830] ? ip6ip6_err+0x460/0x460 [ 286.067863] ? ip6ip6_err+0x460/0x460 [ 286.067873] dev_ifsioc+0x1d8/0x7d0 [ 286.067882] ? dev_ifname+0xf0/0xf0 [ 286.067898] dev_ioctl+0x43c/0xbe0 [ 286.067910] ? dev_ifsioc+0x7d0/0x7d0 [ 286.067920] ? perf_trace_lock+0xf7/0x490 [ 286.067931] ? proc_fail_nth_write+0x7b/0x180 [ 286.067943] ? check_preemption_disabled+0x35/0x240 [ 286.067966] sock_ioctl+0x164/0x4c0 [ 286.067977] ? sock_release+0x1e0/0x1e0 [ 286.067989] do_vfs_ioctl+0x75a/0xff0 [ 286.068000] ? selinux_inode_setxattr+0x730/0x730 [ 286.068020] ? ioctl_preallocate+0x1a0/0x1a0 [ 286.068031] ? lock_downgrade+0x740/0x740 [ 286.068049] ? __fget+0x225/0x360 [ 286.068067] ? security_file_ioctl+0x83/0xb0 [ 286.068082] SyS_ioctl+0x7f/0xb0 [ 286.068093] ? do_vfs_ioctl+0xff0/0xff0 [ 286.068106] do_syscall_64+0x1d5/0x640 [ 286.068123] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 286.068132] RIP: 0033:0x45d579 [ 286.068138] RSP: 002b:00007f3a53935c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.068150] RAX: ffffffffffffffda RBX: 0000000000012dc0 RCX: 000000000045d579 [ 286.068156] RDX: 0000000020000080 RSI: 00000000000089f1 RDI: 0000000000000007 [ 286.068162] RBP: 00007f3a53935ca0 R08: 0000000000000000 R09: 0000000000000000 [ 286.068168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 286.068174] R13: 00007ffdcc2e731f R14: 00007f3a539369c0 R15: 000000000118cf4c [ 286.101203] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 286.218361] FAULT_INJECTION: forcing a failure. [ 286.218361] name failslab, interval 1, probability 0, space 0, times 0 [ 286.218375] CPU: 1 PID: 15699 Comm: syz-executor.4 Not tainted 4.14.194-syzkaller #0 [ 286.218381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.218385] Call Trace: [ 286.218403] dump_stack+0x1b2/0x283 [ 286.218423] should_fail.cold+0x10a/0x154 [ 286.218441] should_failslab+0xd6/0x130 [ 286.218452] __kmalloc_track_caller+0x2bc/0x400 [ 286.218468] ? kstrdup_const+0x35/0x60 [ 286.218481] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 286.218496] kstrdup+0x36/0x70 [ 286.218508] kstrdup_const+0x35/0x60 [ 286.218519] kvasprintf_const+0xf1/0x180 [ 286.218532] kobject_set_name_vargs+0x56/0x150 [ 286.218545] dev_set_name+0xa4/0xc0 [ 286.218558] ? device_initialize+0x420/0x420 [ 286.218573] ? __lockdep_init_map+0x100/0x560 [ 286.218592] netdev_register_kobject+0xbd/0x3a0 [ 286.218607] register_netdevice+0x955/0xe40 [ 286.218621] ? netdev_change_features+0xa0/0xa0 [ 286.218638] ip6_tnl_create2+0x16c/0x2c0 [ 286.218648] ip6_tnl_locate+0x53e/0x7d0 [ 286.218661] ? ip6_tnl_create2+0x2c0/0x2c0 [ 286.218676] ip6_tnl_ioctl+0x5e6/0xe32 [ 286.218690] ? ip6ip6_err+0x460/0x460 [ 286.218721] ? ip6ip6_err+0x460/0x460 [ 286.218731] dev_ifsioc+0x1d8/0x7d0 [ 286.218740] ? dev_ifname+0xf0/0xf0 [ 286.218756] dev_ioctl+0x43c/0xbe0 [ 286.218768] ? dev_ifsioc+0x7d0/0x7d0 [ 286.218779] ? perf_trace_lock+0xf7/0x490 [ 286.218792] ? proc_fail_nth_write+0x7b/0x180 [ 286.218805] ? check_preemption_disabled+0x35/0x240 [ 286.218829] sock_ioctl+0x164/0x4c0 [ 286.218839] ? sock_release+0x1e0/0x1e0 [ 286.218852] do_vfs_ioctl+0x75a/0xff0 [ 286.218866] ? selinux_inode_setxattr+0x730/0x730 [ 286.218879] ? ioctl_preallocate+0x1a0/0x1a0 [ 286.218889] ? lock_downgrade+0x740/0x740 [ 286.218906] ? __fget+0x225/0x360 [ 286.218930] ? security_file_ioctl+0x83/0xb0 [ 286.218953] SyS_ioctl+0x7f/0xb0 [ 286.218964] ? do_vfs_ioctl+0xff0/0xff0 [ 286.218980] do_syscall_64+0x1d5/0x640 [ 286.218998] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 286.219008] RIP: 0033:0x45d579 [ 286.219014] RSP: 002b:00007f3a53935c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.219027] RAX: ffffffffffffffda RBX: 0000000000012dc0 RCX: 000000000045d579 [ 286.219034] RDX: 0000000020000080 RSI: 00000000000089f1 RDI: 0000000000000007 [ 286.219042] RBP: 00007f3a53935ca0 R08: 0000000000000000 R09: 0000000000000000 [ 286.219048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 286.219057] R13: 00007ffdcc2e731f R14: 00007f3a539369c0 R15: 000000000118cf4c 06:17:11 executing program 4 (fault-call:8 fault-nth:6): sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:11 executing program 2: newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c010000170001000000000000000000fe8000000000000000000000000000bb0000000000000000ac14140000000000000000000000000000000000000000000000000000000000ac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000005000000000000000000000100000088c2c9e5481ae3d800eecf6cfd00e7ff00000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500ac141400000000000000000000000000000000003200000000000000fe88000000000000000000000000000100"/196], 0x16c}}, 0x0) 06:17:11 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xcd7, 0x201) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x40000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000140)=""/32, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) connect$caif(r1, &(0x7f0000000100)=@rfm={0x25, 0x4, "7565353c9ba3655b78df78c98d4decba"}, 0x18) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 288.151832] FAULT_INJECTION: forcing a failure. [ 288.151832] name failslab, interval 1, probability 0, space 0, times 0 [ 288.153243] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 288.163434] CPU: 0 PID: 15717 Comm: syz-executor.4 Not tainted 4.14.194-syzkaller #0 [ 288.179924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.184533] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 288.189314] Call Trace: [ 288.189339] dump_stack+0x1b2/0x283 [ 288.189354] should_fail.cold+0x10a/0x154 [ 288.189371] should_failslab+0xd6/0x130 [ 288.189382] kmem_cache_alloc_trace+0x29a/0x3d0 [ 288.189394] device_add+0xce1/0x1510 [ 288.189407] ? device_is_dependent+0x270/0x270 [ 288.189424] netdev_register_kobject+0x17d/0x3a0 [ 288.189439] register_netdevice+0x955/0xe40 [ 288.189452] ? netdev_change_features+0xa0/0xa0 [ 288.189474] ip6_tnl_create2+0x16c/0x2c0 [ 288.243333] ip6_tnl_locate+0x53e/0x7d0 [ 288.247333] ? ip6_tnl_create2+0x2c0/0x2c0 [ 288.251591] ip6_tnl_ioctl+0x5e6/0xe32 [ 288.255511] ? ip6ip6_err+0x460/0x460 [ 288.259355] ? ip6ip6_err+0x460/0x460 [ 288.263174] dev_ifsioc+0x1d8/0x7d0 [ 288.266818] ? dev_ifname+0xf0/0xf0 [ 288.270477] dev_ioctl+0x43c/0xbe0 [ 288.274032] ? dev_ifsioc+0x7d0/0x7d0 [ 288.277855] ? perf_trace_lock+0xf7/0x490 [ 288.282026] ? proc_fail_nth_write+0x7b/0x180 [ 288.286520] ? check_preemption_disabled+0x35/0x240 [ 288.291561] sock_ioctl+0x164/0x4c0 [ 288.295199] ? sock_release+0x1e0/0x1e0 [ 288.299177] do_vfs_ioctl+0x75a/0xff0 [ 288.302985] ? selinux_inode_setxattr+0x730/0x730 [ 288.307866] ? ioctl_preallocate+0x1a0/0x1a0 [ 288.312269] ? lock_downgrade+0x740/0x740 [ 288.316455] ? __fget+0x225/0x360 [ 288.319953] ? security_file_ioctl+0x83/0xb0 [ 288.324416] SyS_ioctl+0x7f/0xb0 [ 288.327773] ? do_vfs_ioctl+0xff0/0xff0 [ 288.331751] do_syscall_64+0x1d5/0x640 [ 288.335668] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 288.340858] RIP: 0033:0x45d579 [ 288.344043] RSP: 002b:00007f3a53935c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.351883] RAX: ffffffffffffffda RBX: 0000000000012dc0 RCX: 000000000045d579 [ 288.360335] RDX: 0000000020000080 RSI: 00000000000089f1 RDI: 0000000000000007 [ 288.367606] RBP: 00007f3a53935ca0 R08: 0000000000000000 R09: 0000000000000000 [ 288.374913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 288.382178] R13: 00007ffdcc2e731f R14: 00007f3a539369c0 R15: 000000000118cf4c 06:17:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000002) fallocate(r0, 0x0, 0x0, 0x110001) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getrandom(&(0x7f0000000240)=""/46, 0x2e, 0x2) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48005}, 0x4000004) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x3) 06:17:11 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xfffffe1e) write$P9_RSTATu(r0, 0x0, 0x0) lseek(r0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r5, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r6, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001a80)={0x20c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5938b5c2bc37792e}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0xc010}, 0x20000085) r7 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x5, 0x6, 0x5}, &(0x7f0000000080)=0x10) 06:17:11 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x400]}, 0x3f, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80184132, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = semget$private(0x0, 0x20000000102, 0x0) semop(r4, &(0x7f0000000040)=[{}, {0x4, 0xffff}, {0x4, 0x1}], 0x3) semget(0x0, 0x3, 0x401) r5 = semget$private(0x0, 0x0, 0x20) semop(r5, &(0x7f0000000080)=[{0x2, 0xc}], 0x1) semctl$IPC_RMID(r4, 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffff4}, {0x0, 0x7f}]}}}) r6 = getpid() ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000100)) sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x81, 0x6f, 0x0, 0x9, 0x0, 0x5, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200, 0x0, @perf_config_ext={0xffffffff, 0x8}, 0x400, 0x40, 0x8a81, 0x1, 0x7, 0x3, 0x8}, r6, 0x6, 0xffffffffffffffff, 0x8) 06:17:11 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="100026bd7000fddbdf25202dde466300990001000100000000000c0099000200000002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2000c090}, 0x40000) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000000)={0x2, 0x5}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000280)) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10008000}, 0x800) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:11 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, 0x2}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) 06:17:11 executing program 4 (fault-call:8 fault-nth:7): sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 288.566519] FAULT_INJECTION: forcing a failure. [ 288.566519] name failslab, interval 1, probability 0, space 0, times 0 [ 288.586819] CPU: 1 PID: 15740 Comm: syz-executor.4 Not tainted 4.14.194-syzkaller #0 [ 288.594760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.604131] Call Trace: [ 288.606735] dump_stack+0x1b2/0x283 [ 288.610386] should_fail.cold+0x10a/0x154 [ 288.614586] should_failslab+0xd6/0x130 [ 288.618575] __kmalloc_track_caller+0x2bc/0x400 [ 288.623295] ? kstrdup_const+0x35/0x60 [ 288.627204] kstrdup+0x36/0x70 [ 288.630410] kstrdup_const+0x35/0x60 [ 288.634138] __kernfs_new_node+0x2e/0x470 [ 288.638313] kernfs_create_dir_ns+0x8c/0x200 [ 288.642775] sysfs_create_dir_ns+0xb7/0x1d0 [ 288.647118] kobject_add_internal+0x279/0x810 [ 288.651640] kobject_add+0x11f/0x180 [ 288.655374] ? kset_create_and_add+0x190/0x190 [ 288.659988] device_add+0x32c/0x1510 [ 288.663728] ? device_is_dependent+0x270/0x270 [ 288.664196] syz-executor.3: [ 288.668336] netdev_register_kobject+0x17d/0x3a0 [ 288.668354] register_netdevice+0x955/0xe40 [ 288.668368] ? netdev_change_features+0xa0/0xa0 [ 288.668384] ip6_tnl_create2+0x16c/0x2c0 [ 288.668393] ip6_tnl_locate+0x53e/0x7d0 [ 288.668404] ? ip6_tnl_create2+0x2c0/0x2c0 [ 288.668417] ip6_tnl_ioctl+0x5e6/0xe32 [ 288.668429] ? ip6ip6_err+0x460/0x460 [ 288.671595] vmalloc: allocation failure: 0 bytes [ 288.676233] ? ip6ip6_err+0x460/0x460 06:17:12 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r3, @ANYBLOB="0900f01501ba50df00000006898da2c240810e210a0388ad00120081000000736974653c7fdbd3f9", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x140a, 0x10, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) [ 288.676246] dev_ifsioc+0x1d8/0x7d0 [ 288.676256] ? dev_ifname+0xf0/0xf0 [ 288.676268] dev_ioctl+0x43c/0xbe0 [ 288.676278] ? dev_ifsioc+0x7d0/0x7d0 [ 288.676291] ? perf_trace_lock+0xf7/0x490 [ 288.676301] ? proc_fail_nth_write+0x7b/0x180 [ 288.676314] ? check_preemption_disabled+0x35/0x240 [ 288.676335] sock_ioctl+0x164/0x4c0 [ 288.694293] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 288.697624] ? sock_release+0x1e0/0x1e0 [ 288.697638] do_vfs_ioctl+0x75a/0xff0 [ 288.697651] ? selinux_inode_setxattr+0x730/0x730 [ 288.697661] ? ioctl_preallocate+0x1a0/0x1a0 [ 288.697673] ? lock_downgrade+0x740/0x740 [ 288.697688] ? __fget+0x225/0x360 [ 288.697703] ? security_file_ioctl+0x83/0xb0 [ 288.710620] (null) [ 288.713970] SyS_ioctl+0x7f/0xb0 [ 288.713982] ? do_vfs_ioctl+0xff0/0xff0 [ 288.713995] do_syscall_64+0x1d5/0x640 [ 288.714014] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 288.733208] syz-executor.3 cpuset= [ 288.737203] RIP: 0033:0x45d579 [ 288.737209] RSP: 002b:00007f3a53935c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 06:17:12 executing program 4 (fault-call:8 fault-nth:8): sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 288.737220] RAX: ffffffffffffffda RBX: 0000000000012dc0 RCX: 000000000045d579 [ 288.737226] RDX: 0000000020000080 RSI: 00000000000089f1 RDI: 0000000000000007 [ 288.737232] RBP: 00007f3a53935ca0 R08: 0000000000000000 R09: 0000000000000000 [ 288.737237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 288.737243] R13: 00007ffdcc2e731f R14: 00007f3a539369c0 R15: 000000000118cf4c [ 288.748070] kobject_add_internal failed for ip6tnl12 (error: -12 parent: net) [ 288.802943] / mems_allowed=0-1 [ 288.871544] CPU: 0 PID: 15741 Comm: syz-executor.3 Not tainted 4.14.194-syzkaller #0 [ 288.874202] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 288.879440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.879446] Call Trace: [ 288.879468] dump_stack+0x1b2/0x283 [ 288.879487] warn_alloc.cold+0x96/0x1cc [ 288.879499] ? zone_watermark_ok_safe+0x220/0x220 [ 288.879511] ? perf_trace_lock_acquire+0x510/0x510 [ 288.879521] ? perf_trace_lock_acquire+0x510/0x510 [ 288.879532] ? fs_reclaim_release+0xd0/0x110 [ 288.879549] __vmalloc_node_range+0x10e/0x150 [ 288.879562] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 288.879570] vmalloc_user+0x47/0xa0 [ 288.879578] ? vb2_vmalloc_alloc+0xa6/0x280 [ 288.879585] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 288.879592] vb2_vmalloc_alloc+0xa6/0x280 [ 288.879606] __vb2_queue_alloc+0x47a/0xd90 [ 288.960450] vb2_core_create_bufs+0x279/0x5a0 [ 288.964986] ? __vb2_queue_free+0x7a0/0x7a0 [ 288.969331] ? __lock_acquire+0x5fc/0x3f20 [ 288.973622] vb2_create_bufs+0x2e1/0x5b0 [ 288.977705] ? vb2_thread_start.cold+0x24/0x24 [ 288.982306] ? check_preemption_disabled+0x35/0x240 [ 288.988473] ? perf_trace_lock+0xf7/0x490 [ 288.992657] vb2_ioctl_create_bufs+0x1f7/0x330 [ 288.997279] v4l_create_bufs+0xa4/0x150 [ 289.001288] __video_do_ioctl+0x65b/0x6a0 [ 289.005458] ? video_ioctl2+0x30/0x30 [ 289.009271] ? __might_fault+0x177/0x1b0 [ 289.013387] video_usercopy+0xf5/0xe90 06:17:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000440)={0x122, 0x29, 0x1, {0x8, [{{0x4, 0x3, 0x7}, 0xeec9, 0x9, 0x7, './file0'}, {{0x80, 0x0, 0x6}, 0x8000, 0x40, 0x7, './file0'}, {{0x4, 0x0, 0x5}, 0x40, 0x7d, 0x7, './file0'}, {{0x0, 0x1}, 0xf93, 0x8, 0x7, './file0'}, {{0x80, 0x1}, 0x8001, 0x7, 0x7, './file0'}, {{0x1, 0x0, 0x7}, 0x3ff, 0x37, 0x7, './file0'}, {{0x0, 0x3, 0x7}, 0x3, 0x80, 0x7, './file0'}, {{0x4, 0x1, 0x3}, 0x8000, 0x4, 0x7, './file0'}, {{0x8, 0x4, 0x6}, 0x6, 0x3, 0x7, './file0'}]}}, 0x122) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xfffffffffffffff2, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507040000000000000000000010", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x20, 0x3, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x7}}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x22040094) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000400)={'dummy0\x00', 0x4000}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001400)=ANY=[@ANYBLOB="380000002400070500ee30cf7c00000000a22300", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x48, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xffffffff}, [@IFLA_LINKINFO={0xfffffffffffffe79, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2}}}}}}]}, 0x48}}, 0x0) [ 289.017318] ? video_ioctl2+0x30/0x30 [ 289.019626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5130 sclass=netlink_route_socket pid=15760 comm=syz-executor.2 [ 289.021132] ? v4l_g_ctrl+0x390/0x390 [ 289.021146] ? check_preemption_disabled+0x35/0x240 [ 289.021159] ? check_preemption_disabled+0x35/0x240 [ 289.021174] ? perf_trace_lock+0xf7/0x490 [ 289.021184] ? perf_trace_lock_acquire+0x510/0x510 [ 289.021197] v4l2_ioctl+0x1bb/0x2f0 [ 289.059999] ? v4l2_open+0x2f0/0x2f0 [ 289.063768] do_vfs_ioctl+0x75a/0xff0 [ 289.067592] ? selinux_inode_setxattr+0x730/0x730 [ 289.072419] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 289.072454] ? ioctl_preallocate+0x1a0/0x1a0 [ 289.085449] ? lock_downgrade+0x740/0x740 [ 289.089647] ? __fget+0x225/0x360 [ 289.093127] ? security_file_ioctl+0x83/0xb0 [ 289.097561] SyS_ioctl+0x7f/0xb0 [ 289.100945] ? do_vfs_ioctl+0xff0/0xff0 [ 289.104236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5130 sclass=netlink_route_socket pid=15757 comm=syz-executor.2 [ 289.104949] do_syscall_64+0x1d5/0x640 [ 289.121212] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 289.126410] RIP: 0033:0x45d579 [ 289.129617] RSP: 002b:00007fa14ead2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.137361] RAX: ffffffffffffffda RBX: 000000000001f340 RCX: 000000000045d579 [ 289.144644] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 289.152627] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 289.159915] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c 06:17:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000300)) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000000)={{0xc0, 0x86}, {0x0, 0x4}, 0x4, 0x6, 0x3}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c010000170001000000000000000000fe8000000000000000000000000000bb0000000000000000ac14140000000000000000000000000000000000000000000000000000000000ac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000000500000000000000000100010000000000000000020000000000000049fe4c8f70e1b0ddca5936f4ee966fd515f9a57c64d3d2b0bd676b499f5e77c9985c53f50993a3e964ce613b5c5a198e37cc49056270caf3fcc2f8c7f28b5986008334c2b2e899a6f7b2c1fda3d9850e9c6ddbdeb45045404ff3a2d2fd2815202d824b8dbadd21b8ed8fadc197c881c7fda1a0b0a77e73c373b95b3a92e0acbf8360f8e6a461f781024d7481a13e67978644dcb9490231da3ee282eb306a36b1b4e0bf1677c55cf5d790c386323e8e17843743", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b0e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500ac141400000000000000000000000000000000003200000000000000fe88000000000000000000000000000100"/196], 0x16c}}, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000080)=""/11) 06:17:12 executing program 5: mq_open(&(0x7f0000000000)='/( }\'$\x00', 0x40, 0x110, &(0x7f00000000c0)={0x5, 0x4, 0xfffffffffffffff7, 0xfc}) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) utimensat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{0x77359400}, {0x0, 0xea60}}, 0x100) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r4, &(0x7f0000000040)=""/46, 0x2e) ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 289.167224] R13: 00007ffc763ef02f R14: 00007fa14ead39c0 R15: 000000000118cf4c [ 289.251943] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 289.301985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=15777 comm=syz-executor.0 [ 289.309818] FAULT_INJECTION: forcing a failure. [ 289.309818] name failslab, interval 1, probability 0, space 0, times 0 [ 289.327311] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 289.375260] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 289.392489] CPU: 1 PID: 15767 Comm: syz-executor.4 Not tainted 4.14.194-syzkaller #0 [ 289.400446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.409813] Call Trace: [ 289.412425] dump_stack+0x1b2/0x283 [ 289.416063] should_fail.cold+0x10a/0x154 [ 289.420229] should_failslab+0xd6/0x130 [ 289.424221] kmem_cache_alloc+0x28e/0x3c0 [ 289.428388] __kernfs_new_node+0x6f/0x470 [ 289.432591] kernfs_create_dir_ns+0x8c/0x200 [ 289.435817] Mem-Info: [ 289.437036] sysfs_create_dir_ns+0xb7/0x1d0 [ 289.437052] kobject_add_internal+0x279/0x810 [ 289.437069] kobject_add+0x11f/0x180 [ 289.437079] ? kset_create_and_add+0x190/0x190 [ 289.437100] device_add+0x32c/0x1510 [ 289.439781] active_anon:220020 inactive_anon:4318 isolated_anon:0 [ 289.439781] active_file:7259 inactive_file:22752 isolated_file:0 [ 289.439781] unevictable:0 dirty:311 writeback:0 unstable:0 [ 289.439781] slab_reclaimable:17477 slab_unreclaimable:125269 [ 289.439781] mapped:61508 shmem:4507 pagetables:3074 bounce:0 [ 289.439781] free:1024816 free_pcp:475 free_cma:0 [ 289.443835] ? device_is_dependent+0x270/0x270 [ 289.443854] netdev_register_kobject+0x17d/0x3a0 [ 289.443870] register_netdevice+0x955/0xe40 [ 289.443885] ? netdev_change_features+0xa0/0xa0 [ 289.443902] ip6_tnl_create2+0x16c/0x2c0 [ 289.443912] ip6_tnl_locate+0x53e/0x7d0 [ 289.443923] ? ip6_tnl_create2+0x2c0/0x2c0 [ 289.443937] ip6_tnl_ioctl+0x5e6/0xe32 [ 289.464235] Node 0 active_anon:880080kB inactive_anon:17272kB active_file:28900kB inactive_file:91008kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:246032kB dirty:1228kB writeback:0kB shmem:18028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 843776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 289.494572] ? ip6ip6_err+0x460/0x460 [ 289.494602] ? ip6ip6_err+0x460/0x460 [ 289.494614] dev_ifsioc+0x1d8/0x7d0 [ 289.494623] ? dev_ifname+0xf0/0xf0 [ 289.494638] dev_ioctl+0x43c/0xbe0 [ 289.494647] ? dev_ifsioc+0x7d0/0x7d0 [ 289.494658] ? perf_trace_lock+0xf7/0x490 [ 289.494670] ? proc_fail_nth_write+0x7b/0x180 [ 289.494683] ? check_preemption_disabled+0x35/0x240 [ 289.494708] sock_ioctl+0x164/0x4c0 [ 289.507884] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 289.508356] ? sock_release+0x1e0/0x1e0 [ 289.508371] do_vfs_ioctl+0x75a/0xff0 [ 289.508383] ? selinux_inode_setxattr+0x730/0x730 [ 289.508401] ? ioctl_preallocate+0x1a0/0x1a0 [ 289.508415] ? lock_downgrade+0x740/0x740 [ 289.513593] Node 0 [ 289.517187] ? __fget+0x225/0x360 [ 289.517204] ? security_file_ioctl+0x83/0xb0 [ 289.517218] SyS_ioctl+0x7f/0xb0 [ 289.517229] ? do_vfs_ioctl+0xff0/0xff0 [ 289.517243] do_syscall_64+0x1d5/0x640 [ 289.517260] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 289.517270] RIP: 0033:0x45d579 [ 289.517275] RSP: 002b:00007f3a53935c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.517285] RAX: ffffffffffffffda RBX: 0000000000012dc0 RCX: 000000000045d579 [ 289.517290] RDX: 0000000020000080 RSI: 00000000000089f1 RDI: 0000000000000007 [ 289.517295] RBP: 00007f3a53935ca0 R08: 0000000000000000 R09: 0000000000000000 [ 289.517299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 289.517304] R13: 00007ffdcc2e731f R14: 00007f3a539369c0 R15: 000000000118cf4c 06:17:13 executing program 4 (fault-call:8 fault-nth:9): sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:13 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x2f0, 0xa, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DESC={0x230, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0x1f4, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffbff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3f}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2321}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1cc861d8}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x136f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xccb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x925}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3127}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffc00}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x213}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_CONCAT={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2d6}]}]}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}, @NFTA_SET_EXPR={0x78, 0x11, 0x0, 0x1, @target={{0xb, 0x1, 'target\x00'}, @val={0x68, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_TARGET_INFO={0x1a, 0x3, "01eee5fef5b697c958f2fd6550f3a1ab37eceab806a4"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0x5, 0x1, '\x00'}, @NFTA_TARGET_NAME={0x5, 0x1, '\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x8000}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_TARGET_NAME={0x6, 0x1, ',\x00'}]}}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 06:17:13 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='\x02\xd0\xbb\xb7\x04\xe10\x00') [ 289.574708] kobject_add_internal failed for ip6tnl12 (error: -12 parent: net) [ 289.606791] DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 289.657037] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 289.672739] lowmem_reserve[]: [ 289.679454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=15777 comm=syz-executor.0 [ 289.696194] 0 [ 289.862871] FAULT_INJECTION: forcing a failure. [ 289.862871] name failslab, interval 1, probability 0, space 0, times 0 [ 289.911509] CPU: 1 PID: 15799 Comm: syz-executor.4 Not tainted 4.14.194-syzkaller #0 [ 289.919466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.928865] Call Trace: [ 289.931462] dump_stack+0x1b2/0x283 [ 289.935189] should_fail.cold+0x10a/0x154 [ 289.939472] should_failslab+0xd6/0x130 [ 289.943470] kmem_cache_alloc+0x28e/0x3c0 [ 289.947684] __kernfs_new_node+0x6f/0x470 [ 289.951858] kernfs_new_node+0x7b/0xe0 [ 289.955767] __kernfs_create_file+0x3d/0x320 [ 289.960222] sysfs_add_file_mode_ns+0x1e1/0x450 [ 289.964918] device_create_file+0xc8/0x100 [ 289.969186] ? acpi_platform_notify_remove+0x1f0/0x1f0 [ 289.974478] device_add+0x367/0x1510 [ 289.978215] ? device_is_dependent+0x270/0x270 [ 289.980491] 2557 [ 289.982849] netdev_register_kobject+0x17d/0x3a0 [ 289.982866] register_netdevice+0x955/0xe40 [ 289.982880] ? netdev_change_features+0xa0/0xa0 [ 289.989504] 2557 [ 289.989699] ip6_tnl_create2+0x16c/0x2c0 [ 290.000882] 2557 [ 290.004842] ip6_tnl_locate+0x53e/0x7d0 [ 290.004855] ? ip6_tnl_create2+0x2c0/0x2c0 [ 290.004869] ip6_tnl_ioctl+0x5e6/0xe32 [ 290.004881] ? ip6ip6_err+0x460/0x460 [ 290.022975] ? ip6ip6_err+0x460/0x460 [ 290.026795] dev_ifsioc+0x1d8/0x7d0 [ 290.030432] ? dev_ifname+0xf0/0xf0 [ 290.031381] 2557 [ 290.034074] dev_ioctl+0x43c/0xbe0 [ 290.034088] ? dev_ifsioc+0x7d0/0x7d0 [ 290.034105] ? perf_trace_lock+0xf7/0x490 [ 290.039729] ? proc_fail_nth_write+0x7b/0x180 [ 290.039743] ? check_preemption_disabled+0x35/0x240 [ 290.039768] sock_ioctl+0x164/0x4c0 [ 290.039780] ? sock_release+0x1e0/0x1e0 [ 290.043690] Node 0 [ 290.047730] do_vfs_ioctl+0x75a/0xff0 [ 290.047744] ? selinux_inode_setxattr+0x730/0x730 [ 290.047755] ? ioctl_preallocate+0x1a0/0x1a0 [ 290.047764] ? lock_downgrade+0x740/0x740 [ 290.047779] ? __fget+0x225/0x360 [ 290.047794] ? security_file_ioctl+0x83/0xb0 [ 290.047807] SyS_ioctl+0x7f/0xb0 [ 290.052440] DMA32 free:310792kB min:36272kB low:45340kB high:54408kB active_anon:873324kB inactive_anon:17272kB active_file:28900kB inactive_file:91008kB unevictable:0kB writepending:1116kB present:3129332kB managed:2621192kB mlocked:0kB kernel_stack:10112kB pagetables:11852kB bounce:0kB free_pcp:1232kB local_pcp:620kB free_cma:0kB [ 290.057340] ? do_vfs_ioctl+0xff0/0xff0 [ 290.057354] do_syscall_64+0x1d5/0x640 [ 290.057373] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 290.057382] RIP: 0033:0x45d579 [ 290.057386] RSP: 002b:00007f3a53935c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.057396] RAX: ffffffffffffffda RBX: 0000000000012dc0 RCX: 000000000045d579 [ 290.057402] RDX: 0000000020000080 RSI: 00000000000089f1 RDI: 0000000000000007 [ 290.057407] RBP: 00007f3a53935ca0 R08: 0000000000000000 R09: 0000000000000000 [ 290.057416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 290.061147] lowmem_reserve[]: [ 290.065013] R13: 00007ffdcc2e731f R14: 00007f3a539369c0 R15: 000000000118cf4c [ 290.197697] 0 0 0 0 0 [ 290.201084] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 290.237134] lowmem_reserve[]: 0 0 0 0 0 [ 290.261790] Node 1 Normal free:3779480kB min:53612kB low:67012kB high:80412kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:16kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:668kB local_pcp:304kB free_cma:0kB [ 290.301653] lowmem_reserve[]: 0 0 0 0 0 [ 290.305923] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15908kB [ 290.391038] Node 0 DMA32: 404*4kB (UME) 154*8kB (UM) 512*16kB (UME) 1001*32kB (UME) 456*64kB (UME) 180*128kB (UM) 125*256kB (UM) 81*512kB (UME) 23*1024kB (UE) 12*2048kB (UM) 24*4096kB (UM) = 315200kB [ 290.425264] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 290.439748] Node 1 Normal: 64*4kB (UE) 387*8kB (UE) 290*16kB (UM) 71*32kB (UM) 32*64kB (UME) 23*128kB (UM) 12*256kB (UM) 6*512kB (U) 4*1024kB (UM) 11*2048kB (UME) 911*4096kB (UM) = 3779480kB [ 290.458370] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 290.467843] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 290.476757] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 06:17:14 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x180000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x254, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x55d8}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1c000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ade}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}]}, @TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x92}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf96c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7d61}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x86c}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5409}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe11}]}, @TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "5df968655e46142b7ffdefe82dece6aea1fd59d128e3cec666b7e37e74ab0c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0x16, 0x3, "1480a71d17d34433eab806be890168482e88"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x40881}, 0x30000050) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffff4}]}}}) 06:17:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') ftruncate(r0, 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) r1 = gettid() r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x7, 0x8000) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x51) process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x4, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 06:17:14 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=ANY=[@ANYBLOB="6c010000170001000000000000000000fe8000000000000000000000000000bb0000000000000000ac14140000000000000000000000000000000000000000000000000000000000ac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000005000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000600000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500ac141400000000000000000000000000000000003200000000000000fe88000000000000000000000000000100"/181], 0x16c}}, 0x0) 06:17:14 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) read$FUSE(r0, &(0x7f0000000780)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x7f, 0x3f, 0xfe, 0x9, 0x0, 0xd8, 0x4500, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x400, 0x1, @perf_config_ext={0x1, 0x5}, 0x4061c, 0x7, 0x8, 0x8, 0x3f, 0x6, 0x100}, r1, 0x1, r3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000280)={0x1, @pix_mp={0x2, 0x0, 0x32315258, 0xb, 0x7, [{0x5, 0x800}, {0xfff, 0x2}, {0x5, 0xbe88}, {0x4639484e, 0x5a5}, {0x7, 0x80000000}, {0xfffffff9, 0x76f9}, {0xffffffff, 0xfffffff9}, {0x40, 0xff}], 0x1f, 0xfe, 0xf, 0x2, 0x5}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f00000000c0)={0x7ff, "69b57053af330ec399c89275dc17ca4c00ceec36ad839a1946156e6c5bb95d1f", 0x80, 0x3, 0x1ff, 0x0, 0x4}) 06:17:14 executing program 4 (fault-call:8 fault-nth:10): sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:14 executing program 1: r0 = perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x240, 0x240, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0\x00', 0x8000, 0x40) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000900)={0x10, 0x3, {0x7, @usage=0x4, 0x0, 0x7, 0x100000000, 0x800, 0x0, 0x4, 0x26, @struct={0xfffffffe, 0x80000001}, 0x2, 0x5a2, [0x8, 0x1000000000000, 0x3, 0x85, 0xea, 0x57f7]}, {0xffffffff, @usage=0x8, 0x0, 0x5, 0x2, 0x2, 0x1f, 0x8, 0x410, @usage=0x34, 0x401, 0x0, [0x4, 0x10000, 0xad, 0x3, 0x8, 0x2]}, {0x7, @struct={0x1, 0x3}, r6, 0xfffffffffffffffe, 0x0, 0x8, 0x7, 0xffff, 0x44, @struct={0x5}, 0xff, 0x1ff, [0xaf, 0x21f, 0x0, 0x28862979, 0xf564, 0xffff]}, {0xbb3a, 0x8001}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001880)={0x0, 0x9, 0x80000001}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001c80)={0x3, 0x0, {0x3f, @struct={0x9271, 0x80000000}, 0x0, 0x200, 0xffffffff, 0x2, 0x4bd, 0x1, 0x51, @usage=0x4, 0x1, 0x40, [0x1f, 0x10000, 0x0, 0x6, 0x7f00000000000, 0x5]}, {0xffff, @usage=0x7e67, r6, 0x80000001, 0x9, 0x2, 0x977, 0x8, 0x3a, @usage=0x6, 0x5, 0x6, [0x400, 0x8, 0x80, 0x6, 0x1, 0x10001]}, {0x1, @usage=0x8, r7, 0x940, 0xa6, 0x10f, 0x100000000, 0x8, 0x20, @usage=0x8001, 0x80, 0x3, [0x1, 0x1, 0x3, 0x1, 0x5a, 0x8]}, {0x8, 0xfffffffffffffffe, 0x1}}) r8 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_GET_XCRS(r8, 0x8188aea6, &(0x7f0000000000)={0x4, 0x1, [{0x2, 0x0, 0x4}, {0x5, 0x0, 0x9}, {0x0, 0x0, 0x25}, {0xffffaa60, 0x0, 0x9}]}) sendmsg$ETHTOOL_MSG_EEE_GET(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x8050) [ 290.485756] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 290.494339] 22857 total pagecache pages [ 290.498453] 0 pages in swap cache [ 290.501940] Swap cache stats: add 0, delete 0, find 0/0 [ 290.507436] Free swap = 0kB [ 290.510478] Total swap = 0kB [ 290.513505] 1965979 pages RAM [ 290.516764] 0 pages HighMem/MovableOnly [ 290.520739] 339073 pages reserved [ 290.524171] 0 pages cma reserved 06:17:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000007980)={'bond_slave_1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000100"/17, @ANYRES32, @ANYRES16], 0x24}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x101080, 0x0) r4 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r6, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000080)={0x200, 0x200, 0x7fff, 0x2, r6}, &(0x7f0000000100)=0x10) r7 = socket(0x10, 0x80002, 0x8000) sendmmsg$alg(r7, &(0x7f0000000200), 0x0, 0xc004) [ 290.572363] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 06:17:14 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) r1 = dup2(r0, r0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x9, [0x7, 0x6, 0xfff, 0x401, 0x9, 0x9, 0x1, 0x1ff, 0x1000]}, 0x16) [ 290.637636] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 290.654322] FAULT_INJECTION: forcing a failure. [ 290.654322] name failslab, interval 1, probability 0, space 0, times 0 06:17:14 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1e4, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x148, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c113a1d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1aae0236}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22ead54b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xdb00f4c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b3bc757}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x639539eb}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x567f776b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50731872}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1df704e6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54a7db16}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ab121bd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c50a746}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf6b14c1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1db28352}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x852a9c8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xec9d5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67ef156f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56a6c45e}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7187d4ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x479b4d3c}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x9}, {0x5, 0x3, 0x7}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x64, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8f46ecf}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54003a2b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9c00566}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23206ee1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x373219c5}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ce0b240}]}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x40880}, 0x4000) [ 290.694942] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 290.707108] CPU: 1 PID: 15826 Comm: syz-executor.4 Not tainted 4.14.194-syzkaller #0 [ 290.715023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 290.724401] Call Trace: [ 290.727002] dump_stack+0x1b2/0x283 [ 290.730651] should_fail.cold+0x10a/0x154 [ 290.734820] should_failslab+0xd6/0x130 [ 290.738807] kmem_cache_alloc+0x28e/0x3c0 [ 290.742974] __kernfs_new_node+0x6f/0x470 [ 290.747144] kernfs_new_node+0x7b/0xe0 [ 290.751045] __kernfs_create_file+0x3d/0x320 [ 290.755485] sysfs_add_file_mode_ns+0x1e1/0x450 [ 290.760175] device_create_file+0xc8/0x100 [ 290.764457] ? acpi_platform_notify_remove+0x1f0/0x1f0 [ 290.769765] device_add+0x367/0x1510 [ 290.773505] ? device_is_dependent+0x270/0x270 [ 290.778125] netdev_register_kobject+0x17d/0x3a0 [ 290.782909] register_netdevice+0x955/0xe40 [ 290.787252] ? netdev_change_features+0xa0/0xa0 [ 290.791945] ip6_tnl_create2+0x16c/0x2c0 [ 290.796021] ip6_tnl_locate+0x53e/0x7d0 [ 290.800033] ? ip6_tnl_create2+0x2c0/0x2c0 [ 290.804149] sctp: [Deprecated]: syz-executor.1 (pid 15849) Use of int in maxseg socket option. [ 290.804149] Use struct sctp_assoc_value instead [ 290.804275] ip6_tnl_ioctl+0x5e6/0xe32 [ 290.821513] ? ip6ip6_err+0x460/0x460 [ 290.825346] ? ip6ip6_err+0x460/0x460 [ 290.829159] dev_ifsioc+0x1d8/0x7d0 [ 290.832802] ? dev_ifname+0xf0/0xf0 [ 290.836484] dev_ioctl+0x43c/0xbe0 [ 290.840077] ? dev_ifsioc+0x7d0/0x7d0 [ 290.843905] ? perf_trace_lock+0xf7/0x490 [ 290.848080] ? proc_fail_nth_write+0x7b/0x180 [ 290.852622] ? check_preemption_disabled+0x35/0x240 [ 290.857684] sock_ioctl+0x164/0x4c0 [ 290.861325] ? sock_release+0x1e0/0x1e0 [ 290.865314] do_vfs_ioctl+0x75a/0xff0 [ 290.869131] ? selinux_inode_setxattr+0x730/0x730 [ 290.873995] ? ioctl_preallocate+0x1a0/0x1a0 [ 290.878423] ? lock_downgrade+0x740/0x740 [ 290.882592] ? __fget+0x225/0x360 [ 290.886082] ? security_file_ioctl+0x83/0xb0 [ 290.890508] SyS_ioctl+0x7f/0xb0 [ 290.893895] ? do_vfs_ioctl+0xff0/0xff0 [ 290.897894] do_syscall_64+0x1d5/0x640 [ 290.901805] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 290.907027] RIP: 0033:0x45d579 [ 290.910226] RSP: 002b:00007f3a53935c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.917944] RAX: ffffffffffffffda RBX: 0000000000012dc0 RCX: 000000000045d579 [ 290.925225] RDX: 0000000020000080 RSI: 00000000000089f1 RDI: 0000000000000007 [ 290.932501] RBP: 00007f3a53935ca0 R08: 0000000000000000 R09: 0000000000000000 [ 290.939772] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 290.947046] R13: 00007ffdcc2e731f R14: 00007f3a539369c0 R15: 000000000118cf4c [ 290.954344] CPU: 0 PID: 15827 Comm: syz-executor.3 Not tainted 4.14.194-syzkaller #0 [ 290.962254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 290.971614] Call Trace: [ 290.974209] dump_stack+0x1b2/0x283 [ 290.977847] warn_alloc.cold+0x96/0x1cc [ 290.981829] ? zone_watermark_ok_safe+0x220/0x220 [ 290.986683] ? perf_trace_lock_acquire+0x510/0x510 [ 290.991625] ? perf_trace_lock_acquire+0x510/0x510 [ 290.996591] ? fs_reclaim_release+0xd0/0x110 [ 291.001021] __vmalloc_node_range+0x10e/0x150 [ 291.005536] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 291.010912] vmalloc_user+0x47/0xa0 [ 291.014550] ? vb2_vmalloc_alloc+0xa6/0x280 [ 291.018880] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 291.024272] vb2_vmalloc_alloc+0xa6/0x280 [ 291.028432] __vb2_queue_alloc+0x47a/0xd90 [ 291.032698] vb2_core_create_bufs+0x279/0x5a0 [ 291.037238] ? __vb2_queue_free+0x7a0/0x7a0 [ 291.041578] ? __lock_acquire+0x5fc/0x3f20 [ 291.045832] vb2_create_bufs+0x2e1/0x5b0 [ 291.049906] ? vb2_thread_start.cold+0x24/0x24 [ 291.054523] ? check_preemption_disabled+0x35/0x240 [ 291.059555] ? perf_trace_lock+0xf7/0x490 [ 291.063722] vb2_ioctl_create_bufs+0x1f7/0x330 [ 291.068351] v4l_create_bufs+0xa4/0x150 [ 291.072339] __video_do_ioctl+0x65b/0x6a0 [ 291.076506] ? video_ioctl2+0x30/0x30 [ 291.080327] ? __might_fault+0x177/0x1b0 [ 291.084403] video_usercopy+0xf5/0xe90 [ 291.088303] ? video_ioctl2+0x30/0x30 [ 291.092118] ? v4l_g_ctrl+0x390/0x390 [ 291.095927] ? check_preemption_disabled+0x35/0x240 [ 291.100959] ? check_preemption_disabled+0x35/0x240 [ 291.106013] ? perf_trace_lock+0xf7/0x490 [ 291.110168] ? perf_trace_lock_acquire+0x510/0x510 [ 291.115115] v4l2_ioctl+0x1bb/0x2f0 [ 291.118756] ? v4l2_open+0x2f0/0x2f0 [ 291.122482] do_vfs_ioctl+0x75a/0xff0 [ 291.126292] ? selinux_inode_setxattr+0x730/0x730 [ 291.131149] ? ioctl_preallocate+0x1a0/0x1a0 [ 291.135568] ? lock_downgrade+0x740/0x740 [ 291.139734] ? __fget+0x225/0x360 [ 291.143202] ? security_file_ioctl+0x83/0xb0 [ 291.147622] SyS_ioctl+0x7f/0xb0 [ 291.150994] ? do_vfs_ioctl+0xff0/0xff0 [ 291.154980] do_syscall_64+0x1d5/0x640 [ 291.158974] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 291.164262] RIP: 0033:0x45d579 [ 291.167458] RSP: 002b:00007fa14ead2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.175176] RAX: ffffffffffffffda RBX: 000000000001f340 RCX: 000000000045d579 [ 291.182465] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 291.189742] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 291.197023] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 291.204304] R13: 00007ffc763ef02f R14: 00007fa14ead39c0 R15: 000000000118cf4c [ 291.224585] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=15850 comm=syz-executor.2 06:17:14 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) 06:17:14 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote, 0x0, 0x0, 0x3}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2000, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x82000) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)) [ 291.413399] Mem-Info: [ 291.418565] active_anon:219323 inactive_anon:6137 isolated_anon:0 [ 291.418565] active_file:7260 inactive_file:22751 isolated_file:0 [ 291.418565] unevictable:0 dirty:294 writeback:0 unstable:0 [ 291.418565] slab_reclaimable:17487 slab_unreclaimable:126023 [ 291.418565] mapped:63331 shmem:6308 pagetables:3065 bounce:0 [ 291.418565] free:1023238 free_pcp:281 free_cma:0 [ 291.464816] Node 0 active_anon:877292kB inactive_anon:25348kB active_file:28904kB inactive_file:91004kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:254224kB dirty:1160kB writeback:0kB shmem:26132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 845824kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 291.507451] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 291.552797] sctp: [Deprecated]: syz-executor.1 (pid 15851) Use of int in maxseg socket option. [ 291.552797] Use struct sctp_assoc_value instead [ 291.576850] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 06:17:15 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000001c0)={&(0x7f0000000000)="9a280082cedda592d7857dfcee0c8ca349077dc7473be464c31356cb2b592cb0d471901a3945c01f", &(0x7f0000000040), &(0x7f0000000080)="ac1fc6563063b5c57dc8d488759babb1cf625a8b95bf637b4b31bd80db561d4447f7f745a577cf0c3106efbd5764542ade49576905c6cb5d5ad24d70ca590310b39dc82987a44c69e516f14cf7be99101c242e4831762156a8a70fbd", &(0x7f0000000100)="da669100211f644e03bb7ac42ae9482acb46d948bac5a3e204c0dd7b5165e700fd14985dcda53db48177b853f1b0bd4feb23fb818bb28dd08491205a9a3e8ea5d80a414c27632ef2984bc476d6b4ed37e4fa5b367e018c916ea46f465f15e823d07498048a35ab675d83d17b50f9f995fcb01e67498f51c16a58a06ab9f367ae51fb0f4bca0f953280f10d315705f7d65945521072333d8ca193791b3cc99d60b880bc85a2cef41763db426265", 0x1, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000040)=0x8) [ 291.662372] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 291.675266] Node 0 DMA32 free:294588kB min:36272kB low:45340kB high:54408kB active_anon:875160kB inactive_anon:28748kB active_file:28904kB inactive_file:91004kB unevictable:0kB writepending:1160kB present:3129332kB managed:2621192kB mlocked:0kB kernel_stack:10208kB pagetables:12260kB bounce:0kB free_pcp:684kB local_pcp:216kB free_cma:0kB [ 291.781003] lowmem_reserve[]: 0 0 0 0 0 [ 291.791468] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 291.827427] lowmem_reserve[]: 0 0 0 0 0 [ 291.847462] Node 1 Normal free:3779704kB min:53612kB low:67012kB high:80412kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:16kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:420kB local_pcp:180kB free_cma:0kB [ 291.907362] lowmem_reserve[]: 0 0 0 0 0 [ 291.911588] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15908kB [ 291.951597] Node 0 DMA32: 215*4kB (UME) 6*8kB (UME) 266*16kB (UME) 960*32kB (UE) 418*64kB (UME) 159*128kB (U) 121*256kB (UM) 81*512kB (UME) 23*1024kB (UE) 12*2048kB (UM) 23*4096kB (UM) = 297772kB [ 291.995293] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 292.014790] Node 1 Normal: 66*4kB (UE) 389*8kB (UE) 288*16kB (UM) 71*32kB (UM) 32*64kB (UME) 21*128kB (UM) 14*256kB (UM) 6*512kB (U) 4*1024kB (UM) 11*2048kB (UME) 911*4096kB (UM) = 3779728kB [ 292.052969] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.069981] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 292.082135] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.101050] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 292.112502] 26356 total pagecache pages [ 292.121696] 0 pages in swap cache [ 292.130605] Swap cache stats: add 0, delete 0, find 0/0 [ 292.151089] Free swap = 0kB [ 292.163572] Total swap = 0kB [ 292.170935] 1965979 pages RAM [ 292.174398] 0 pages HighMem/MovableOnly [ 292.184272] 339073 pages reserved [ 292.192048] 0 pages cma reserved 06:17:15 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffff4}]}}}) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x4, 0x0, [], [{0x5, 0x1f, 0x2, 0x93, 0x9, 0x7}, {0x0, 0x8, 0x4, 0x9, 0x1000, 0xedc}], [[], [], [], []]}) [ 292.281192] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 292.301736] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 292.310521] CPU: 0 PID: 15882 Comm: syz-executor.3 Not tainted 4.14.194-syzkaller #0 [ 292.318442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.328766] Call Trace: [ 292.331376] dump_stack+0x1b2/0x283 [ 292.335016] warn_alloc.cold+0x96/0x1cc [ 292.339020] ? zone_watermark_ok_safe+0x220/0x220 [ 292.343868] ? perf_trace_lock_acquire+0x510/0x510 [ 292.348833] ? perf_trace_lock_acquire+0x510/0x510 [ 292.353790] ? fs_reclaim_release+0xd0/0x110 [ 292.358244] __vmalloc_node_range+0x10e/0x150 [ 292.362755] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 292.368153] vmalloc_user+0x47/0xa0 [ 292.371801] ? vb2_vmalloc_alloc+0xa6/0x280 [ 292.376125] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 292.381501] vb2_vmalloc_alloc+0xa6/0x280 [ 292.385661] __vb2_queue_alloc+0x47a/0xd90 [ 292.389917] vb2_core_create_bufs+0x279/0x5a0 [ 292.394422] ? __vb2_queue_free+0x7a0/0x7a0 [ 292.398756] ? __lock_acquire+0x5fc/0x3f20 [ 292.402997] vb2_create_bufs+0x2e1/0x5b0 [ 292.407105] ? vb2_thread_start.cold+0x24/0x24 [ 292.411698] ? check_preemption_disabled+0x35/0x240 [ 292.416727] ? perf_trace_lock+0xf7/0x490 [ 292.420886] vb2_ioctl_create_bufs+0x1f7/0x330 [ 292.425480] v4l_create_bufs+0xa4/0x150 [ 292.429481] __video_do_ioctl+0x65b/0x6a0 [ 292.433643] ? video_ioctl2+0x30/0x30 [ 292.437460] ? __might_fault+0x177/0x1b0 [ 292.441545] video_usercopy+0xf5/0xe90 [ 292.445457] ? video_ioctl2+0x30/0x30 [ 292.449291] ? v4l_g_ctrl+0x390/0x390 [ 292.453116] ? check_preemption_disabled+0x35/0x240 [ 292.458173] ? check_preemption_disabled+0x35/0x240 [ 292.463239] ? perf_trace_lock+0xf7/0x490 [ 292.467403] ? perf_trace_lock_acquire+0x510/0x510 [ 292.472361] v4l2_ioctl+0x1bb/0x2f0 [ 292.475996] ? v4l2_open+0x2f0/0x2f0 [ 292.479720] do_vfs_ioctl+0x75a/0xff0 [ 292.483532] ? selinux_inode_setxattr+0x730/0x730 [ 292.488384] ? ioctl_preallocate+0x1a0/0x1a0 [ 292.492837] ? lock_downgrade+0x740/0x740 [ 292.497265] ? __fget+0x225/0x360 [ 292.500730] ? security_file_ioctl+0x83/0xb0 [ 292.505168] SyS_ioctl+0x7f/0xb0 [ 292.508538] ? do_vfs_ioctl+0xff0/0xff0 [ 292.512521] do_syscall_64+0x1d5/0x640 [ 292.516453] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 292.521651] RIP: 0033:0x45d579 [ 292.524836] RSP: 002b:00007fa14ead2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.532575] RAX: ffffffffffffffda RBX: 000000000001f340 RCX: 000000000045d579 [ 292.539873] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 292.547173] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 292.554449] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 292.561727] R13: 00007ffc763ef02f R14: 00007fa14ead39c0 R15: 000000000118cf4c [ 292.622518] Mem-Info: [ 292.625172] active_anon:221061 inactive_anon:6973 isolated_anon:0 [ 292.625172] active_file:7260 inactive_file:22760 isolated_file:0 [ 292.625172] unevictable:0 dirty:95 writeback:0 unstable:0 [ 292.625172] slab_reclaimable:17476 slab_unreclaimable:126435 [ 292.625172] mapped:64155 shmem:10019 pagetables:2966 bounce:0 [ 292.625172] free:1020446 free_pcp:303 free_cma:0 [ 292.666756] Node 0 active_anon:884244kB inactive_anon:28592kB active_file:28904kB inactive_file:91040kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:257420kB dirty:364kB writeback:0kB shmem:40876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 837632kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 06:17:16 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x28040, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000180)=0xffff871c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000000c0)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58) sendmmsg$inet6(r1, &(0x7f0000008100)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @private2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000001480)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c, 0x0}}], 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2, 0x0) bind$isdn(r2, &(0x7f0000000080)={0x22, 0xfd, 0x3, 0x5, 0x7}, 0x6) 06:17:16 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x40000, 0x0) ioctl$sock_bt_hci(r2, 0x400448dd, &(0x7f00000000c0)="0df45cba7c5f16de8a43a5cc355e9a3c2bbc3b0f58968a0810f31d40623aafd691ab706f3fe8ffcafc20a7bd331bbdee2e99d93a16acf612c8ac089c7214602bfd72b335144221cfd6439e613486ead34ff3196793678b010f497b1832cf99952170eeef804279a76c5ec92cc4c210236582624630013aa167d00bc7cb23d3a47e7afffc341b2052960a5c71435e7a829294ec33598c072ddc22e3c8e0a825c76aeffe9dca7318c11ca9d4aade1c4c68f76aff9cf75d01b2d58a44f542070e6d08b39649473ca3c4fc4d52c382c4f78ca807") socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:16 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x11, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @rand_addr=0x64010102}, {0x2, 0x4e21, @empty}, {0x2, 0x4e20, @multicast2}, 0x60, 0x0, 0x0, 0x0, 0x874, &(0x7f0000000000)='vlan1\x00', 0x658f, 0xc0, 0x401}) 06:17:16 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x28002, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa7\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x4) pwritev(r1, &(0x7f0000000840)=[{0x0}, {0x0}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187bed43ec38a3d6e6e67b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dec77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d1", 0x9c}, {&(0x7f0000000680)="fac09272f3a678fe517814e72ecca0d3ea20f45f9fd721f21d538362ffb021f4887cf1478b80b7efe6d410747cfd94ec8c1af983ee4b5e219939d9085d362d87c019a372ab", 0x45}, {&(0x7f00000004c0)="313e7b0b91e5b3fe0bce15aed7c4c3f4a035aede609122379f9f01a1f2a7d4c70d460f4288e45a919ab55a22f09e4d4791", 0x31}, {0x0}, {0x0}], 0x7, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1e, 0xd, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) dup(0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r3, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRESOCT=r1], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0600000066e1af801f60eadcd3a846e58154001065daeb674144f4a6763b7815f61e6fe8d61d17073b61", @ANYRES32=r4, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) recvfrom$l2tp6(r2, &(0x7f00000003c0)=""/52, 0x34, 0x2020, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x44) 06:17:16 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c010000170001000000000000000000fe8000000000000000000000000000bb0000000000000000ac14140000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000000000000000000000002e5b5f090d948f7d74d1ead5cb0a17a1bf8499a7b86bc2631f8a82a0c992817a18bcd19307dd77479f7e621c393525ae7dbec17efabceb6b3b05cfdc47f0baba7c40bb9f551c9aee69c749c547d623df3e955f460c0139c927df6d547602", @ANYRES32=0x0, @ANYRESDEC=r1, @ANYBLOB="ac1414000000000000000000000000000000000005000000000000000000000100000000000000000200000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500ac141400000000000000000000000000000000003200000000000000fe88000000000000000000000000000100"/196], 0x16c}}, 0x0) [ 292.704666] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 292.742662] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 292.793191] lowmem_reserve[]: 0 2557 2557 2557 2557 06:17:16 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x5011, 0x200, 0x3, 0x2}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x5, 0xd16, [0x20000780, 0x0, 0x0, 0x200009dc, 0x20000b88], 0x0, &(0x7f00000002c0), &(0x7f0000000780)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x9, 0x4, 0x2, 'bond_slave_0\x00', 'tunl0\x00', 'bridge0\x00', 'syzkaller0\x00', @empty, [0x0, 0xff, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0xde, 0xde, 0x116, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'team_slave_1\x00', {}, 'vlan0\x00', {}, 0x8, 0x8}}}], [], @arpreply={'arpreply\x00', 0x10, {{@random="103767e49206", 0xfffffffffffffffd}}}}, {0x5, 0x7b, 0x809b, 'team0\x00', 'sit0\x00', 'geneve0\x00', 'geneve0\x00', @remote, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @remote, [0x0, 0x0, 0xff], 0x6e, 0xde, 0x116, [], [@arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x1b}, 0xfffffffffffffffd}}}, @snat={'snat\x00', 0x10, {{@multicast, 0xffffffffffffffff}}}], @arpreply={'arpreply\x00', 0x10, {{@random="8a2c242226c9", 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x9, 0x4, 0x6005, 'nr0\x00', 'veth1_vlan\x00', 'netpci0\x00', 'veth1\x00', @local, [0xff, 0xff, 0x0, 0xff], @broadcast, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x16}, 0xffffffffffffffff}}}}, {0x9, 0x8, 0x9, 'veth0_virt_wifi\x00', 'ip6_vti0\x00', 'bond_slave_0\x00', 'geneve1\x00', @empty, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @empty, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x9e, 0xd6, [], [@common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}], @snat={'snat\x00', 0x10, {{@random="047f0439eaa4", 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x1, [{0x9, 0x28, 0x88e7, 'bond_slave_0\x00', 'veth0_virt_wifi\x00', 'dummy0\x00', 'veth0_vlan\x00', @empty, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @dev={[], 0x3c}, [0xff, 0xff, 0xff, 0x0, 0xff], 0x8a6, 0x8a6, 0x8de, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x8, 0x3}, {0x53}, {0x9, 0x2}, {0x1000, 0x2}, {0xffff}, {0x800, 0x1}, {0x7}, {0x8, 0x3}, {0x1}, {0x6, 0x9383e52acc5f3c8b}, {0x7ff, 0x2}], [{0x8, 0x3}, {0xb5e, 0x60f9}, {0x0, 0x1}, {0x9, 0x8}, {0x8, 0x1}, {0x7f, 0x69}, {0x2, 0x9}, {0x4, 0x3}, {0x6, 0x207d}, {0x6, 0x3}, {0x1, 0x5fc}], 0x1, 0x4}, {[{0x7f, 0x2}, {0x4, 0x2}, {0x9}, {0x81, 0x2}, {0x2, 0x1}, {0x13}, {0xbf0b, 0x2}, {0x28, 0x3}, {0xfffffffc, 0x3}, {0x80000001, 0x3}, {0x2, 0x2}], [{0x6, 0x2be478d7}, {0x4, 0x9}, {0x10001, 0x401}, {0x7fffffff, 0x80}, {0x7, 0x1}, {0x1, 0x2}, {0x7fffffff, 0xcae68457}, {0x45e9, 0x80000001}, {0x100, 0x4}, {0xd5, 0x6}, {0x2, 0x5b98}], 0x8, 0x3}, {[{0x3ff}, {0x400, 0x1}, {0xb3, 0x2}, {0xe697}, {0x80000000, 0x2}, {0x0, 0x2}, {0x3, 0x3}, {0x3, 0x1}, {0x6}, {0xdb8d}, {0x1, 0x1}], [{0x9, 0x7ff}, {0x7fff, 0x7f}, {0x8000, 0x100}, {0x7, 0x1271}, {0x1f, 0x20}, {0x5, 0x7fffffff}, {0x55c, 0x3ff}, {0x0, 0x20}, {0x7, 0x9}, {0x0, 0x3}, {0xe51, 0xcf}], 0xb, 0x6}, {[{0x1, 0x1}, {0x3, 0x3}, {0x6}, {0x3ff, 0x2}, {0x1000}, {0x29, 0x2}, {0x6, 0x2}, {0x0, 0x3}, {0x6, 0x2}, {0x80000001, 0x2}, {0x4, 0x1}], [{0x4, 0xf}, {0x4, 0x101}, {}, {0x6, 0x4}, {0x100, 0x6}, {0x0, 0x10000}, {0x9, 0x2}, {0x9, 0x5}, {0x8, 0x54}, {0x3, 0xfff}, {0x9, 0x6}], 0x7, 0x7}, {[{0x1, 0x1}, {0xffffffff, 0x2}, {0x2, 0x3}, {0x3, 0x2}, {0x4, 0x2}, {0x3, 0x2}, {0x7, 0x3}, {0x200, 0x2}, {0x4}, {0x5}, {0x6, 0x3}], [{0x401, 0x9}, {0x60da429e, 0x6acc}, {0x8}, {0x7, 0x6fa1}, {0x9, 0x40}, {0xa0, 0x3}, {0x9}, {0x8, 0x8}, {0x0, 0xff}, {0xfff, 0xab5}, {0x3ff, 0x1}], 0x1, 0x9}, {[{0x3}, {0xfeb}, {0x8}, {0x9, 0x1}, {0x7ff, 0x3}, {0x6, 0x3}, {0x2, 0x1}, {0x80000000}, {0x8}, {0x2, 0x3}, {0x3, 0x6}], [{0x2, 0x429c}, {}, {0x1000, 0x8001}, {0x9, 0x9}, {0x3, 0x7fff}, {0x101, 0x5}, {0x8001, 0x7}, {0x1, 0xe9}, {0x6, 0x1f}, {0xea4, 0x44e3}, {0x81, 0x20}], 0x1, 0x7}, {[{0x3ff, 0x3}, {0x3, 0x3}, {0x0, 0x2}, {0x3, 0x3}, {0xe1, 0x2}, {0x100}, {}, {0x2, 0x2}, {0x3, 0x2}, {0x1ff, 0x1}, {0x6}], [{0xffffffe0, 0x4}, {0x6, 0x6}, {0x9, 0xffff}, {0x6beb, 0x1f}, {0x200, 0x80000000}, {0x0, 0x3f}, {0x7f, 0x10001}, {0x81, 0x7}, {0x6c0d8f1a, 0x590}, {0x6, 0x80000000}, {0x0, 0x1}], 0x8, 0x4}, {[{0x3f}, {0x7}, {0x0, 0x1}, {0x9, 0x1}, {0x69}, {0x7, 0x1}, {0x2, 0x3}, {0x8, 0x3}, {0x71b, 0x2}, {0xfffff578, 0x2}, {0x1}], [{0x5, 0x4}, {0x3, 0x400}, {0x0, 0xfffffff7}, {0x5, 0x2}, {0x42, 0x2}, {0x6, 0x4}, {0x2, 0x3}, {0x3, 0x8}, {0x5, 0x7}, {0x4, 0x3}, {0x6, 0x7}], 0x0, 0xa}, {[{0x0, 0x3}, {0x2}, {0x6, 0x2}, {0xc0000000, 0x3}, {0x3ff, 0x1}, {0x1, 0x1}, {0x8001, 0x1}, {0x6, 0x2}, {0x4, 0x3}, {0x2, 0x1}, {0x4}], [{0x1f, 0x6}, {}, {0x55865c08, 0x6c7}, {0x3, 0x8}, {0x1, 0x7b}, {0x2, 0x2}, {0xddf5, 0x3}, {0x0, 0x400}, {0x7, 0x24c}, {0x7, 0x4}, {0x6, 0x6}], 0xa, 0x3}, {[{0xbc4}, {0x40}, {0x80, 0x3}, {0x7, 0x2}, {0x9cd1, 0x1}, {0x5, 0x1}, {0x6, 0x2}, {0x4, 0x1}, {0xc3c}, {0x7fff, 0x2}, {0x8, 0x3}], [{0x8, 0x3}, {0x9, 0x3f}, {0x8, 0x7fffffff}, {0x2, 0x5}, {0xfffffff9, 0xe7b}, {0x9, 0x5}, {0x82, 0x3}, {0x1, 0x4}, {0xc8c}, {0x7}, {0x4, 0x6}], 0x4, 0x7}, {[{0x6, 0x1}, {0x100, 0x3}, {0x1, 0x3}, {0x7, 0x1}, {0x4, 0x1}, {0x7}, {0x1}, {0x9, 0x2}, {0x8f, 0x3}, {0x91fb, 0x3}, {0x5, 0x1}], [{0x8001, 0x7}, {0x8, 0x37ab}, {0x5, 0x1}, {0x10001, 0xffffffff}, {}, {0x521, 0xeded11b}, {0x101, 0x3}, {0xd0, 0x6}, {0x8, 0x2da3}, {0x7, 0x7fffffff}, {0x5, 0x80000001}], 0x5, 0x9}], 0x2}}}, @helper={{'helper\x00', 0x0, 0x28}, {{0x1, 'sane-20000\x00'}}}], [], @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xfffffffffffffffe}}}}]}]}, 0xd8e) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="110700000000000000000900000008000300", @ANYRES32=r5, @ANYBLOB="080006006e49fdcbab37538040acc2dfccf5a7ff041289dbeea289818e9086aac82bd1eda8291e232e509f3621c64a65b6b1388d9b11dcc66c274a8241f4492daac35673b291800de8ad1f10000000000000000000000000000000000000000000008ba1b1ec19cbe1f3158c256f8ce2d72ba10bf39a1e07a90b5f6976f4f68b4cdc9e6f31b3571fed1ffcd5c931161ba0a7fe", @ANYRES32=r8, @ANYBLOB], 0x24}}, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 292.823089] Node 0 DMA32 free:303832kB min:36272kB low:45340kB high:54408kB active_anon:877072kB inactive_anon:17364kB active_file:28904kB inactive_file:91052kB unevictable:0kB writepending:420kB present:3129332kB managed:2621192kB mlocked:0kB kernel_stack:10400kB pagetables:12268kB bounce:0kB free_pcp:648kB local_pcp:336kB free_cma:0kB 06:17:16 executing program 5: clone(0x20022204bfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) epoll_wait(r0, &(0x7f00000000c0)=[{}, {}], 0x2, 0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 292.882484] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 292.922075] Unknown ioctl 1074021792 06:17:16 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="ccf103c669b6660d1e7048f44e9b9401600a700af8d0e1d245dc212f38865792815a128cb92ff8a6309b5ec01e7dc6d1f72a25621810b9147910bfb50b29a84b5c8117833c3687206ff311a1167014c1c6e736b4e81331ae6b2666abfd52906b9bb21f02b67bedbda75654b5a4fb673b8f016048ed7016b7d4f6fd23869b4ebf1e9da67190eb16620d9c5d488d4cf56c06175e8c5cb3a8c80324b872521f5e2b4bffc10dda25738fc181697a3091fdf66478660463699b71df6d47ab4a7096503ea8472ea82332cd1e8f61efc2566b984b", 0xd1}, {&(0x7f0000000180)="dfe32eaee21833f1a4861e22805f846594ce2f5096b721a0c297592bc79c51710beaa9b412804dfcf39aff981464ac341977d96c14cd2082a8e1bd1de5c5aa403520a146d5bef656dde8467676394c725b82dd9c954f5ca902cb822e00e23618723bae562ff576724caa7893bfcb61191c1e4f31dee82bd9716d51f3eb1e8a8ae31fc909a749c443536c8416260c4a98d17c822f10ed049c41629bd4382f5ddd39160daabc974bd0727f52106494e817e8e87702b85ce286405ffaf51df5ddfcb6c9", 0xc2}, {&(0x7f0000000280)="05b78bad87e3108d193523d26f99cc2fe50a83cfd20f091204c5b5088991c0ad981ef0c01fc1ed9b3075cccf12872fd51a9d6865f92593bc56c6620ae466bcbaa4a2dd68e81f3bd750e934bea4e529fc73e74cb4312fdffcaa7a871689c72b80cc07e54f7f3a65c38091", 0x6a}, {&(0x7f0000000300)="d92707d184baea777b27e1e8a6a99da6f0e9e765296a60051d41babf67f6e9422844a333ab62b84c7730bc5d3a86638df61969234e086927605f4320af5b0d42a89b61c9c805abc7c8ac6ad7d43e58fda90ebdb672af47213e1de4efe4f340492de77aef3e13dfe76de52097174369b24ec70b311c3d2399f51c2f4bbc170d31bd3e451a58694d38504a3b8af70128a1fcf0137811edafe8ab567635781a333de98fc67ca7cefbc148a9f8c3ce1e36031e04f2959008d65f3eaabb32077b31f5473916014dc3ec275a51eefb78633ce5c95b26d23d2303b4b8433162c8574e2046745918ec2f295d54", 0xe9}, {&(0x7f0000000400)="dd46e7676de84eb4e5396c135d7bdfbeb754ad891888ade94737774c769edd2984f4266e5ab8944e7ccf2a80c8b9cf29174fcdcf740f", 0x36}, {&(0x7f0000000440)="ecc1cc9e684bcb8147da17f10b5cd72450e9d76ff89040c2ce5492de8dd08ac4119fc35228fb9491ba46b6f6ba1cafc5bc9faa5fdc11170beeb6326abedbde391a91053e24e38f301914e29002a670451bfb255ee4", 0x55}], 0x6, &(0x7f0000000680)=[{0x20, 0x113, 0x9, "a6c7f5ff66632f52bc"}, {0xb8, 0x105, 0x916, "142077d3dbd93e51835b00dc967501bf5b39fc4791d98bc0fb3a80d86fb5425ba09bb8332ef2f732d26b723477da191040923f9f03d061d2bf423f38bfe6d613614bb4e881b808587d83feaad6390f5f7e216df4b07910a39ab70d6ee13f8859afb680349dce5938b40c7b1c6f7fa473bfde3f4ac521ccda0757383911cf53f65406ad9e2fd331b7e2c85014840f968b2133348c2fb31a25bdd4e10775b9350040ecbf"}, {0x68, 0xad, 0x3, "64a41fddfe8ca169b0331ad240c4b8c1a995a61b512404489a20ae46f9e34a85195c3d26343551d3fd6873561a4159f36c00bc5fb807657144466a050b15afc17171fa57eab6fbc1386bdb7336e7eadbfc"}, {0xb0, 0x10e, 0x9, "1ec1865af500a567e4c280179e9fe2a866f806cd86c452e9803e5f0f35566c618e64c296301d724f7de51e28cb20f792897449ddd83c0348a5fbf9caf607662e55210bb22993bc0bfcba2d21de9e5c00b666a40da78fb3d48527335f620f144a26d8a18720a5b5267861c76e8fc72fb18a280d47b6333ad009c4021055ba96819446e7d8eed94279a8e547a04a4f1b290759ab977be7a859a88f"}, {0x48, 0xfd, 0xda7, "fbd4a16adc078e790ab6939979f10a66be1792c565925f304d48820c59a1bcd5d76be65b042848ffde4a2f42cb76110798"}, {0x88, 0x109, 0x7, "997bb860e2cab8854ef3d9922f7b88616fcc667f9ee3be0150b67409e335698a32c6339ac4408c85660f3f4c0aa2cd96a73a2e3efc33578eca25c682d9fa3cb1a0abccdee7c4a29f11edf1f8b3d7247e3a4b4d510742c5ca22cb0e638f049cd646ed1c181f356f6ca900ad4248e602781f6532ce"}, {0x68, 0x3a, 0x2, "2a49c39a2dd206687170ff20a901e72252c1cc5a8ed8b94158ce5546560f47362a22f5ea3b025c890a46e204463168dcf676e9db19890c094e143a9e1a3fb5ac35c53923a9661f9a19485935828825712eaba404"}, {0x10, 0x3a, 0x7fffffff}, {0x58, 0x12a, 0x678d932b, "0ef223dd8063be3da407b2de07eb2fae3c8ef10c0e2705664015032beb7bb50b7d3d0f9c6e384acdac66b866862ee4dca24cd5cfd04709699fdc06c49c0d1b5bcedf5a"}, {0x90, 0x197, 0x450, "31e4f2ac62e438ba5afb898aede903c23968b6ca28e5f2ec26044b2417ccb4ca74c61dede48cffc1852d75392fc5002cc825628754bc9e2f10ae839722ce3a01623a48718eba25658fdcba4ed75cad4a8c1d4b8bc262f5070e6264817ed9121b44f15744d489980213f0af548994fa05ee0329d54bea2ed332e1ef9c5a"}], 0x420}, 0x44081) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@rand_addr=0x64010102, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) [ 292.940419] Unknown ioctl 1074021792 06:17:16 executing program 0: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000200)=0x1c) ioctl$FIONCLEX(r0, 0x5450) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x1f) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_CACHEINFO={0x14}, @IFA_LOCAL={0x14, 0x2, @dev}]}, 0x40}}, 0x0) [ 292.990323] lowmem_reserve[]: 0 0 0 0 0 06:17:16 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x28002, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa7\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x4) pwritev(r1, &(0x7f0000000840)=[{0x0}, {0x0}, {&(0x7f0000000580)="f374f709e40b01f33018c9f2efed195927a1c55e2bd180187bed43ec38a3d6e6e67b18a1448a70b138788112443abadf137a5eadb24b1d8cf4633334042fa371448ecb1d9f225f1b9d5c92bd1b1370f3936e7d72c9b29a602983ef01d1885aee9b327786fc484dcd751bf072985b4840900d5b5efc9137235c0c3dec77c27a81a57af8d9136309e9d04cc9eb204e125826b802250527ba721a6c84d1", 0x9c}, {&(0x7f0000000680)="fac09272f3a678fe517814e72ecca0d3ea20f45f9fd721f21d538362ffb021f4887cf1478b80b7efe6d410747cfd94ec8c1af983ee4b5e219939d9085d362d87c019a372ab", 0x45}, {&(0x7f00000004c0)="313e7b0b91e5b3fe0bce15aed7c4c3f4a035aede609122379f9f01a1f2a7d4c70d460f4288e45a919ab55a22f09e4d4791", 0x31}, {0x0}, {0x0}], 0x7, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1e, 0xd, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) dup(0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r3, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRESOCT=r1], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0600000066e1af801f60eadcd3a846e58154001065daeb674144f4a6763b7815f61e6fe8d61d17073b61", @ANYRES32=r4, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) recvfrom$l2tp6(r2, &(0x7f00000003c0)=""/52, 0x34, 0x2020, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x44) 06:17:16 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8004) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 293.032244] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 293.158197] lowmem_reserve[]: 0 0 0 0 0 [ 293.163306] Node 1 Normal free:3779728kB min:53612kB low:67012kB high:80412kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:16kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:420kB local_pcp:180kB free_cma:0kB [ 293.210482] lowmem_reserve[]: 0 0 0 0 0 [ 293.215234] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15908kB [ 293.271584] Node 0 DMA32: 332*4kB (UME) 286*8kB (UME) 249*16kB (UME) 1037*32kB (UME) 472*64kB (UME) 190*128kB (UM) 131*256kB (UM) 78*512kB (UME) 24*1024kB (UME) 13*2048kB (UM) 22*4096kB (UM) = 310096kB [ 293.300520] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 293.313283] Node 1 Normal: 66*4kB (UE) 389*8kB (UE) 288*16kB (UM) 71*32kB (UM) 32*64kB (UME) 21*128kB (UM) 14*256kB (UM) 6*512kB (U) 4*1024kB (UM) 11*2048kB (UME) 911*4096kB (UM) = 3779728kB [ 293.332615] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 293.341681] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 293.350565] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 293.359770] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 293.368970] 22876 total pagecache pages [ 293.373054] 0 pages in swap cache 06:17:16 executing program 3: ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000100)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000240)=""/231, &(0x7f0000000140)=0xe7) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000380)={0x3, "39851861f5cc84ebaa398bb2d00ffdc808b04653bea4696287ba5cf2238a8f63", 0x1, 0x9, 0x0, 0x10003, 0x2}) r2 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x8, 0x214002) getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f00000001c0), &(0x7f0000000340)=0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x2, 0x3447504d, 0x0, 0x0, [{0xfffffff4}, {}, {}, {}, {}, {}, {}, {0x317c}]}}}) 06:17:16 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000280)={0x4, 0x5, 0x0, 0x7, 0x8, [{0x400, 0x80000000, 0x4, [], 0x2204}, {0xe4, 0x5, 0x8, [], 0x400}, {0x3, 0xd110, 0x1, [], 0xd04}, {0x9, 0x4c7, 0x3, [], 0x800}, {0xffffffff, 0x7, 0xffff, [], 0x100}, {0x1000, 0x218d99e0, 0x80000000, [], 0x100}, {0x101, 0x4, 0x6, [], 0x2208}, {0x401, 0x7, 0x2, [], 0x100}]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:16 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c010000170001000000000000000000fe8000000000000000000000000000e06842bb0000000000000000ac14140000000000000000000000000000000000000000000000000000000000ac1414bb0000000000800000000041d8096ddedbaf9600"/107, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000005000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500ac141400000000000000000000000000000000003200000000000000fe88000000000000000000000000000100"/196], 0x16c}}, 0x0) 06:17:16 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x6500, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r3 = dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x4, 0x5}) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000100)) io_setup(0x40000000008, &(0x7f0000000240)) io_setup(0xa2, &(0x7f0000000000)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xff010000, 0x0, 0x0, 0x0, 0x0, r0}]) 06:17:16 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000200)) setrlimit(0x7, &(0x7f00000000c0)={0x2, 0x7}) 06:17:16 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) bind(0xffffffffffffffff, &(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) [ 293.377091] Swap cache stats: add 0, delete 0, find 0/0 [ 293.382551] Free swap = 0kB [ 293.386492] Total swap = 0kB [ 293.389655] 1965979 pages RAM [ 293.392853] 0 pages HighMem/MovableOnly [ 293.396979] 339073 pages reserved [ 293.400579] 0 pages cma reserved [ 293.470270] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 293.483144] audit: type=1804 audit(1598422636.945:113): pid=15957 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir009189962/syzkaller.SUS8a0/179/bus" dev="sda1" ino=16551 res=1 06:17:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=ANY=[@ANYBLOB="6c010000170001000000000000000000fe8000000000000000000000000000bb0000000000000000ac14140000000000000000000000000000000000000000000000000000000000ac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000005000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="05000000000000000000000000000000000000e2ffffffffffffff00000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500ac141400000000000000000000000000000000003200000000000000fe88000000000000000000000000000100"/196], 0x16c}}, 0x0) [ 293.511759] audit: type=1800 audit(1598422636.945:114): pid=15957 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16551 res=0 06:17:17 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x4000044) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="6653f5ff00053c27bc339daa36394049b4aed12f0020001500ae47a825d86800278dcff47d010000805acf4f8f36460214432479aed75d492b415bcee00a06983f79e651b7615607676f8f9fc0d8f8b0b16d6f095b957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad62ead037cd2157db6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4eaf57ebe1e01b5088000000", 0x99}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2b) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair(0x12, 0x4, 0x45, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$RTC_UIE_OFF(r3, 0x7004) [ 293.631126] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 293.663802] audit: type=1804 audit(1598422636.975:115): pid=15957 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir009189962/syzkaller.SUS8a0/179/bus" dev="sda1" ino=16551 res=1 06:17:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c010000170001000000000000000000fe8000000000000000000000000000bb0000000000000000ac14140000000000000000000000000000000000000000000000000000000000ac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500ac141400000000000000000000000000000000003200000000000000fe88000000000000000000000000000100"/196], 0x16c}}, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f0000000240)={0x1, 0x7, 0x0}) 06:17:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r2, @ANYBLOB="0900f0150100000018001200080001000300", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002a40)={'veth0_to_hsr\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000003040)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003000)={&(0x7f0000002a80)=ANY=[@ANYBLOB="74050000", @ANYRES16=0x0, @ANYBLOB="000227bd7000ffdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400536b961740000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001010000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="3801028038000100240001006e6f746966795f70656572735f636f756e740000d553b395139e95c3368eb1df937a8100000000000000000000000005000300030000000800040001000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400030000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=0x0, @ANYBLOB="f40102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000014000400010101800600000009000109440400003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="400002803c000100240001006c625f74785f6d6574686f6400000000000000000000000000000000000000000500030005000000090004006861736800000000"], 0x574}, 0x1, 0x0, 0x0, 0x4040000}, 0x40c01) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r5, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r5, &(0x7f0000000640)={&(0x7f00000000c0)=@isdn, 0x80, &(0x7f0000000580)=[{&(0x7f0000000000)=""/13, 0xd}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000280)=""/243, 0xf3}, {&(0x7f0000000180)=""/149, 0x95}, {&(0x7f0000000380)=""/253, 0xfd}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000480)=""/228, 0xe4}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x8, &(0x7f0000000600)=""/55, 0x37}, 0x40000001) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:17 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'lo\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000180)=""/133) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x5}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0xc080) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:17 executing program 2: ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)={0x10001, 0x5, 0x10a}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) 06:17:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c010000170001000000000000000000fe8000000000000000000000000000bb0000000000000000ac14140000000000000000000000000000000000000000000000000000000000ac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000005000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}}, 0x0) 06:17:17 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000000), 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0xff, 0x0) socket$inet6(0xa, 0x5, 0x0) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(r0, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 06:17:17 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x40, 0x0) connect$rds(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f00000001c0)={0x0, 0x0, 0x578, 0x0, 0x800000, 0xfffffffe, 0x4, 0x0, {}, {}, {}, {0x0, 0x0, 0x1}}) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000780)={{r2}, 0x0, 0x0, @unused=[0xffff, 0x101, 0x3, 0x2], @name="0a0577d01b9fc3299a18d24b9d39cb27cdf46f07b00beba868b46bcae7548e55da5878a85faaa75841f03c0874a07b34a19dab70ff67598ffe578b826a50891c5110eb3534dce27fc4787585f3ccbc63c784081e7d5c9677b1da899dae88f7b3e7ef7a8e3c107c02eb510f135ce79ca882a18a04daab3e2ff52a25055b5ff2c7623572f684a23272d8c3db9fddc78c2b33a096b12779cccf3cca51ff665772f100959a9fc261ee9fe1584bfbffd0d9787602f174341dbc03b0b544e14f9970f7fc5c65e98c642d9e7997b735ce75e9ec482456f6ef52c12b3a53c33cc73a1937763e1b878af98626ef120d0dd3e75690bcff6855fa2cbbedfe266581b2b8d55fe626903d17237e6eeccb80a2bf61ba22cf46c188c5f8a404bfbdf2ec7b5e76a49ef6f054986ae67debfbfe58efbcd50b21dbe8b5c15c47a39cedce19dd7cbc4d954fcba758b832cf92f5fd93ec59c7d5c19b8c124f00d2531dd203d35ddb2c0ee9c8052662e6f53a5e0db686932a4de5f4c176a005057003273bac784a2f9b9086802057ae68deb8d9702e53fe6f96963a01367b379f5983c3ce3fd6c3dff421f3c80331ff651957792f88d76bce6ceaa87b8ac96db21729371526522d62570f2781a3f3cdb49ed1fee6d2b81ad12fd741a160ac0f7baba28df2a51b180b2cd1aad19e41a0d2f5fc2cfe0efff6837c322eaecdee0ad35b7d563ab950c0f040aa47b71c47aa507f1bbf861fab4b7e12989f182bff9006140eecc5a2553c2e30cac309be8079cf7d3d04f4117283198376431791cd81a5884027add8e41e96c1fd0bc387a145ddf2054fcaccabef94a65770364b0436c5eb781538e60367f3fdd2db396ca8b1122a6d6cf01ea10c2902fa0359cfb5314d8e5defc9d79eda2280273d6c69d54bac5db2f463442019c6633d2e32f11fbf08f8dc0f65f299a4878ce8a726376a581a1f1efb395433a28042bca6fce6808d96dcca3202cc375f638254da2209c7dae9b4027b4628823aca0ad9b0b2867e9f0ce394fb24ec2e170d98910db498e54f42ed8365699283e3a4375f724082c6ba6da132c77efd745769747dc7c94d8f50f9733cd5a235b9209a69b6ac382c5065675330d003686e44bb750ff40401b764bda58ea5a3fa71ca251a78ef19ffadd23afbb790c730d9ad9c51f9b55f9f1bc608cc785335bbabcb74277dfd731982cd01caf12cb44c7e63c5f38c7d00736328b434d84396daa6652215cd189cc231a05616e92a5fdd99ff83cda0f0f3ad682017ca7a58ee22c75ab02da10226222b329250fa9fc27d219dd613f88cf9d949d8f1d88bd20cf8def26b5c4d833438866b2a6e3df0fe0db10ecf8e2c84ab22486782d03bd7e9886061ad48761650c30fcc4aecdc3e27bf72b1d65a915ad10935e67dc4bd042978ea9eaea4d393432fd084a9c5b151a53f5662d7c52a287571822bd4c51a6250566843c4531df85292ba426723aa51fbf5631b77aa90384f2cfa0404385217a3bb833f7393b7b055b011330f5f32804bbf127cf7f7c5498e5a9f80c83728b69fc7275c29ce80a8824daaef228523b20d857c9c0c1f6f3519bbc3d24d1c89774b5f97fc765d93a5a90003693cc3209ee6ec17d495ecd8d6d61c3b011d931ade3cd160b383f911b882c12f0ea858f22730d2405e1cae39658ac8670824979fc46b6e6cb6432d842fd8fe100ec469eec3b91060d1f03e3787efdcea989598da2e0e9f1adb11c9918554615396f6e0bf05af876382e1d486e380250ebc2afce1408248d838151389c34cf0c83dde5ad323f7c31c712a964bfacaae88eba4c7c1eaa6d8e2d6a4946c260ef6ff18089ef71d2e87b6cbc6182d3f021a6ca3f6699ff17a7e302d26515b42bfcdcb06e898347703d1d290d805a06b493aff542193c59c12cea3b7b4566905cc54150c21fbffa7b3141e90d1a69649f5129ea4625e5bc6e8c7a51605c2cba76169202b267dec8ce0b9a45272855298a76065c10ecb69c49857b63cef0edcf2d684ef76fdd524e20e157ffd047dae70579d8837db21ac27e3dc9eb4859aabac7e0d9569d315c35311ead132aad0ab84a23b27c5439cac849d5f7583e6be56d34a207d40af7fc2390ba89f9da9b2ba8533bc816b617039ae2776e213b083d7ad05ab58a00c249ba4bda4e6ae4c0ea0839c95c8b9156a2de01bd5b688ce78197f325119b259e2b7c0f857e7b164d1181749575d81e84376e0a58ee963143d2e7d0211e6b790d3a7c6b0ed2f0688b7ac2c4cf4b449caa69d5eefed708034ab98e39a19bfa819d2e56adb68317a7dde7fdf774e80e9d13c5e4ffd1c58e2e4ee9fe8dbaf5405c70cb057bb4be21dc195fb1bd35b6e24647994904763f817e62936a749b8947420414bb583aad4ad33b4586a4c7504b8ae258cc3aa3572a8cc842531be018daabdfed4baad5f78aad4f5cfc46842e0e2855c8d0fb3a8e648903d755485a6a56388633b9370b4340a70bf952df086229bd4ca5dff0b6c5b2296ba6b3c4663ca2ac45398698068d5fec1e9e862756db47c38abe807122a5a29dcd03d7881ada48d23032de6f07ba7a7c60500085c1ceaaf4b3310c55f1233f87bf6576c789dee5362a84926670811cb389a20afa311cd10b472132a0f89254419117af81d143293a39ec994210c5f9a167fa563922304646fdabd8b42be3fd60ee9058ed576668887c9598cd7b3e81efb112ea10348534b6f67fe2ad5eb79096e1cd8bae99f6256bd98f098611af3d11d86947fe2490cb508e6dd5e84266288049dba24be628226b4adcd3fd8c8c6434f63ce1a445ca5ef0819c4bc8152757e6d9f9c312e886d065f72e86dc857fb59cde2d61cb5ea67b42ef228d3ea27f124194cb16bb2dffc1f70f8ad6c158a6a609f452bc2dace9aa54b717b7b461f1d5a996d96676f0bd68792fcfff9f1e45c05fa8755e0b4a872e829cf88cb4665ff8e651dd94a28d95d992f0d6d1c6effb0dcab367c8a28fa094fc49b56719d4a1cc24f1048265bfcb2da345016d0cef5387252ba94178ee6ce48fdd07fe46ad7942d122fffd8b4acd65d46279bb6e3296fa3a727004ee533f74fccfea9ff1bc017fc5b2a8f31b3e9ffe41e162daf1804f201c01b4824af9ee82dfd5af6e085d19a277cb56a2f98a1f22688ed50b9c7b5a1df67837c31733e4b536312fcca5c30abaa32ef4ca9ca98616dfcb97080086470371468bb708d9cadd17ff40230d0c16fe182038a1fd5495f88f57aa7ac7ebfd525d971b6fde1b797ab45fcbc57a2873336e4c477e9c4687958a41f2b28dabfc9f14f6931fea950ed5ce41f0bb3a2d82ced4370dbda86590cfb4b6463f97f7b706f4dfb4bc9d04b7431648c0d7988c92147961673c3edf324cda35c05d7d97248deac3772bd940f78ea861d5728fb281e1442903316c43373f14b2ab76f60117f5b3212385cf59e5b219157edfac81622eb9afe9379ecd38759f8152411082d8c4f977cd9334281fab35632403c383d490b123b136639e1318bcbc6ef18ece46cb1a72218fc529d05610146789377068bb0c86d1152a7dac7d31dbd9ed47e444ea6bb61904ff21ee4d1d4fae4456c816dde53ec23a40feff36a696f8c634ac4928c6816836c68e2ff676ed3d92bd3e048d9c39395746063de4c58123c942068cb8399b2dfbb466957827168dcad7b503d3690ec9a608716564dcecd8dd30a9e31f9d0198d91c5ee0d3bed74384e20719f89bbfe66fea9cd6ae52a12f82203f229c08cc2d84e9288986f3f1fd84bf6f6cde24b439fe2c96a970ae78517490d582e199b9770e7bf361b9dc1d4f5fdd55f9fe4790c5d603553388a2fff735bf979f2ce211789bc73f5234bf54f87c15b24efdb5fe0a2342ff45b2f046d030f3270b09cc6a752a24c07292f5c4aab59f081127fe1a7fbcda828fa4c899cfc5bbce7aa33d8c9bcf7859f2993d1c6bcba949541aad04b924438f10303e702a9fc4a5e832dfa9c10d342f71cf0c460501235e5eb0e42d2451c0e5a088754be8da1e075c0b05d3fc508b3abb7415e55dc99c4cb12fd72e55ca954a8d7533be1e9e411eb87529f4c5d27fc34e8d642d0fd5d947a80b4fd5a3862da247603b69420b60df69778fb71fc47b64178afe2e6699ba937290e8503ab9db60be13d8e6a47b20bc0e71c4b7d414832b6c77b2af338ba22394571897772f740cc31670224ce757846ceeddfc5d62eacaa849d173c78fc251bc089e495da76af98c2c7a7fa276033a4029c13d29e3744a8dfe14d5b96fe375084f22cf9bd16d5bff8755a14ba0b6b6fdd45921903f06b04498ca37697c571dfd345316b43a8cb0cf922a9f6d8c5e721e4d926aa7fd5c533a55936283fe23a936a95680d0249b57483e8b7b4793cf7a19693315bcf98b914bc09cdcc5105a86c25891d6f926ce27a7fd4fffd295ade1371ce5f03344ec83879ab4e202755667fcada3ec3f06d17f09e5246cf3448212706e8ca81c7a044da8ce5d790c0f49756d05a0c90e65cab948dd1c11f7b8a0374bac3c164bef2060d8d52a66b18c30349f77809e5ddc95e89049548b7c643585433158a160838e54e071fdb3a72efe718d08aeb46c37ffb1690afaf105e7cef4fdc4c4bbde36cff480702e680461e5600864edfb2b567a2dbb2c66664a5a356666a208a9de07d4df15dba4a50118f6b0b545651ef7a3943a48f788b17d2913e64adf45cba28b79def58ee7230b733e9d7fc44b9c9deaec92062a9c739377153ea30303dbbb04e51dfa3e033620d69bd0921773b2c2878c0b46045a6ca280eec529ffd52d967180c0c0e519abcb7bef01fbd4219f1476d40cb3c60aef81c71b3e9adc4774f97336533e163b296e2692d0d3648ba109dd6fb4d62e1a46431a16958062d99d199990862d6eb269eb83f5515722ca91e0e139ade61c9348f4f2aae8b9b96c4670ddafe475f466546155bbdd8083070c379e35d5b52beb4fcf180e57e91cbfbe88e79c074c6739519ab08b3195e6150f75a9977e085966d2e3251de3e1dd1cb21fae71d6957ddb99f1fc8dc9cd7f397fd9421497f585fde18c68ad63af8331c271d26e4c841a6b50413f7acfeee928a3631d74f60b600e89991ead8ec740f1657002256a901af055d386fc2d7dd5d29fbd2860e4a55fef4ed6e79d99b4eb3913e1d947c0a4103bc3d8f9aeebf98d16996813225052fb74772819fdfd4f8e4ec98c60da0e6257289eddb57051d7f16d279994ca8e81b98182cd2d90bc3a167a48aa856eab7572fadf669d90d8fe1249d2c3e7c148836d5e84ff99653c7e4d230dd6dd64b1389b0e95be4b6a97965d95ab5d424ca9d99a515998e3782c4c1d2b23864bebde9412a4e74f089d7b5d89d5ce145390e4e45889211a3ae7c6edc1fc60fe961a705322b0185f1369ad5b626b7a8ea597122fea09480e3781c0fb1620aa0357970519f34995107ada2a6c4e47adfa7193d7477f1b713800346884b3a4f6da3302056629d802eb7e7ea5e3b53c2cbbea2fe096f6814ab018fd52cf867fa097820776b049f4e067dd9842df1a0a20b7861380c83cc1a8ececefe9cb4f48b914d1e227df4a1e8fea66b77dc19b2adcb47902d0390ecacc05e2e41354ebcd183c8ea2b4cc94efa259590e32c3bdc94cc02690b4bfdfdfad604562cac8d34fd05444b8922d9d1929f0ee9b61009fdc3774bada2887337a905cd989f563ddd29f1e83957ab004c3cf703"}) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) socket$nl_xfrm(0x10, 0x3, 0x6) [ 294.324430] binder: 16022:16025 ioctl 1 0 returned -22 06:17:17 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000180)) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000009800)="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", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair(0x3, 0xa, 0x3, &(0x7f0000000000)) 06:17:17 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) ioctl$KDMKTONE(r0, 0x4b30, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:17 executing program 3: ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r1, 0xf2b, 0x0, 0x0, {0xa, 0xe}}, 0x14}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x46005}, 0x4) r4 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffff4}]}}}) [ 294.371534] audit: type=1804 audit(1598422637.835:116): pid=15967 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir009189962/syzkaller.SUS8a0/179/bus" dev="sda1" ino=16551 res=1 [ 294.372258] audit: type=1800 audit(1598422637.835:117): pid=15967 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16551 res=0 [ 294.372322] audit: type=1804 audit(1598422637.835:118): pid=15972 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir009189962/syzkaller.SUS8a0/179/bus" dev="sda1" ino=16551 res=1 06:17:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x4e21, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x4, 0xffff0000, 0x6, 0xb0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) 06:17:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f0000000080)={0xef, 0x80, [0x3, 0x7fff, 0x7, 0xff, 0x2], 0x7}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1292a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:17:20 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:20 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000001c0)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffff4}]}}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000240)={r1, 0x1f, 0x6, 0x1}) connect$rxrpc(r2, &(0x7f00000002c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0x24) ioctl$SIOCX25SDTEFACILITIES(r5, 0x89eb, &(0x7f0000000280)={0x4df, 0x9, 0x1000, 0x7, 0x20, 0x28, 0x25, "2eec53fb19c16b1f604bb0da648a4daf65df7c41", "960a5af838646bfd3258c27b1b3f5d57fdae26f9"}) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000100)={0x0, 0x7f}, 0x2) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4) 06:17:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@filter={'filter\x00', 0xe, 0x4, 0x4c8, 0x108, 0x328, 0x0, 0x0, 0x0, 0x318, 0x3f8, 0x3f8, 0x3f8, 0x318, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], '\x00', 'netdevsim0\x00'}, 0x0, 0x200, 0x240, 0x0, {}, [@common=@inet=@policy={{0x158, 'policy\x00'}, {[{@ipv4=@multicast2, [], @ipv6=@mcast2}, {@ipv4=@empty, [], @ipv6=@dev}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast2}, {@ipv6=@rand_addr=' \x01\x00'}], 0x2}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7eedfcb331f3ae839a733f3041901a8d235bd39675399e5719d27a532748"}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x23}, 0x1c) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000dc0)=""/4096) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000840), 0x4) 06:17:20 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = signalfd(r1, &(0x7f0000000000)={[0xffffffffffffffe0]}, 0x8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000300), &(0x7f0000000340)=0x4) getdents(r2, &(0x7f0000000140)=""/83, 0x53) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000380)=""/182) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7fff, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x52, 0xc87b, 0x0, @empty, @ipv4={[], [], @loopback}, 0x700, 0x8000, 0x8, 0x2ca4}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', r8, 0x0, 0x1, 0x9, 0x9, 0x23, @mcast1, @dev={0xfe, 0x80, [], 0x3d}, 0x0, 0x8000, 0x100, 0x3}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r4, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000400)={0x2b75fa89216e0e20, &(0x7f00000003c0), 0x0, 0xffffffffffffffff, 0x2}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r5, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xe8f}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9f6}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xfff, 0x80000001, 0x0, 0x568d]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c804}, 0x4001) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000001c0)=0xe8, 0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c010000170001000000000000000000fe8000000000000000000000000000bb0000000000000000ac1414fe00000000000000000000000000000000000000000000000000000000ac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000005000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}}, 0x0) [ 296.674980] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 296.716290] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 296.754284] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 296.761461] CPU: 1 PID: 16075 Comm: syz-executor.3 Not tainted 4.14.194-syzkaller #0 [ 296.769379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.778759] Call Trace: [ 296.781359] dump_stack+0x1b2/0x283 [ 296.785012] warn_alloc.cold+0x96/0x1cc [ 296.789015] ? zone_watermark_ok_safe+0x220/0x220 [ 296.793879] ? perf_trace_lock_acquire+0x510/0x510 [ 296.798826] ? perf_trace_lock_acquire+0x510/0x510 [ 296.803795] ? fs_reclaim_release+0xd0/0x110 [ 296.808235] __vmalloc_node_range+0x10e/0x150 [ 296.812750] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 296.818118] vmalloc_user+0x47/0xa0 [ 296.821750] ? vb2_vmalloc_alloc+0xa6/0x280 [ 296.826067] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 296.831450] vb2_vmalloc_alloc+0xa6/0x280 [ 296.835604] __vb2_queue_alloc+0x47a/0xd90 [ 296.839887] vb2_core_create_bufs+0x279/0x5a0 [ 296.844396] ? __vb2_queue_free+0x7a0/0x7a0 [ 296.848756] ? __lock_acquire+0x5fc/0x3f20 [ 296.853027] vb2_create_bufs+0x2e1/0x5b0 [ 296.857120] ? vb2_thread_start.cold+0x24/0x24 [ 296.861726] ? check_preemption_disabled+0x35/0x240 [ 296.866767] ? perf_trace_lock+0xf7/0x490 [ 296.870942] vb2_ioctl_create_bufs+0x1f7/0x330 [ 296.875534] v4l_create_bufs+0xa4/0x150 [ 296.879518] __video_do_ioctl+0x65b/0x6a0 [ 296.883703] ? video_ioctl2+0x30/0x30 [ 296.887550] ? __might_fault+0x177/0x1b0 [ 296.891645] video_usercopy+0xf5/0xe90 [ 296.895553] ? video_ioctl2+0x30/0x30 [ 296.899365] ? v4l_g_ctrl+0x390/0x390 [ 296.903171] ? check_preemption_disabled+0x35/0x240 [ 296.908217] ? check_preemption_disabled+0x35/0x240 [ 296.913258] ? perf_trace_lock+0xf7/0x490 [ 296.917427] ? perf_trace_lock_acquire+0x510/0x510 [ 296.922382] v4l2_ioctl+0x1bb/0x2f0 [ 296.926011] ? v4l2_open+0x2f0/0x2f0 [ 296.929754] do_vfs_ioctl+0x75a/0xff0 [ 296.933578] ? selinux_inode_setxattr+0x730/0x730 [ 296.938454] ? ioctl_preallocate+0x1a0/0x1a0 [ 296.942870] ? lock_downgrade+0x740/0x740 [ 296.947046] ? __fget+0x225/0x360 [ 296.950530] ? security_file_ioctl+0x83/0xb0 [ 296.954953] SyS_ioctl+0x7f/0xb0 [ 296.958330] ? do_vfs_ioctl+0xff0/0xff0 [ 296.962314] do_syscall_64+0x1d5/0x640 [ 296.966223] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 296.971426] RIP: 0033:0x45d579 [ 296.974619] RSP: 002b:00007fa14ead2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.982351] RAX: ffffffffffffffda RBX: 000000000001f340 RCX: 000000000045d579 [ 296.989636] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 296.996922] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 297.004196] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c 06:17:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x0, 0x1cb, &(0x7f0000000300)='bdev!)-%+wlan\x00posi\x19Mx_dxl_accesszQ\tU\x97\x12=J\xd5\x8b;YE\xec\x8c;\xf7\xcc\xa7\x8b6\n\xbe\x01\x01\xae\xb6\f4\x87\xd9j\xd8\x0e\xc2\x10\xb1\x7f\x95\x01fE\xaea\x10\x8f\xac\xa9+V\x863Hhk{2\x00\x14I\xf7\xd6\xcd)\x05\x87q6\xed~\xd0\xb2\xf8\x8d\xaa\b\xe4\"\x1c\xbf\x8f_[\x17@\xe5\xec\x10\a\xb95w\x8by}/\x8cw\xe6\x99\xfe \x84]8\x940U\xb3E;\xff\xa1!\x9a\x87\x88\x02\xbf\xab\x97B\xd9\x06\xf2\n\xf7\x1f\xd8v\x7fD\xf2\x87\xf7}V\x89}\xf0\xb7\x8d\x85\xf6\x9b\xcc\xd3Lh.\r\xd3J\"\x1f\xdeW;F.\xdf$\xee\x18\x0e5\xa1\xfcN\x88`\xbbj,q[\x90/\x9b\xf0\xccr\xc1\xa8\x85E\x85p+\xd1\xbe\x10\rgx\xb8\x93k\x8c\x1dTi\xafq\xde\x06/ \x93O.\xe5<0\xfa\b\x82\xe4c&\x99\xd6psf\xa8\xacjh9\x8bk\x8f\n$\xf2\x06#\xc8\xd2\x00\x00w\x03,\xbb\xed\xf1o\xd8\x19\xd2k\xbb\xd3\x18E\x0e&\x83\xdfWL?P$\xb4a\f\x154\xdd\xacx\x91<\x97\x13\xab\xe2\xdd\n\x13\x19\xb9U\n\xb5\xb6\xffBQ\x80\xe6\xe6\xaf\xc8\x15_>\xe6\xfc\xb9R\x06\xcd/\x87\x11\xf1\xb9\xbe&,c\xfd3\xc4\xeaP\x9b\xdf5\xcc\xa4RDx\xad\xc0\x8f|\xe3u\xbe\x1e\xd5\xa6\xcc\xb8\x86\x8b0\'\xcc\x01\x9bQ/\xf9\xa7vfa\xdf!\x1axt\xd1\r\xd9&MC\xcc,2\xce\xd2kCJ\x10\x88\xc5#\x92\xa32)2\xd3\xa02q\xdb\xe4\xe3\x97\x9d\xbc\xc9\xf8G\xc6\xd5\x8cR\x1e\xaf\xdc\x9aGW\an\xe3\xb7\xc4\x10;\x06[\x91\xe9\xe3\xb4^\xc7\xc4\x03\x13\xbd\xc9\xc6~'}, 0x30) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x2, 0x2, 0x6, 0x200}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r2, 0x7c80, 0x0) 06:17:20 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x4000}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000050000000002000900080000006b00000000000000030006000000000300000000e00000010000000000000077494eb51009eb8cebf36363c8b45a0002000100000000000000001600000000030005000000000002000000ac1e00010000000000000000"], 0x60}}, 0x0) fcntl$getflags(r1, 0x40a) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000000)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 297.011492] R13: 00007ffc763ef02f R14: 00007fa14ead39c0 R15: 000000000118cf4c 06:17:20 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x8000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x4, 0xfffffc01, 0x15, @rand_addr=' \x01\x00', @empty, 0x7800, 0x80, 0x6b, 0x1}}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_WIPHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r2, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 297.081986] nla_parse: 4 callbacks suppressed [ 297.081996] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 06:17:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x400000000000}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x6000}]}]}, 0x16c}}, 0x0) [ 297.153385] Mem-Info: [ 297.159755] active_anon:219950 inactive_anon:4318 isolated_anon:0 [ 297.159755] active_file:7263 inactive_file:22770 isolated_file:0 [ 297.159755] unevictable:0 dirty:168 writeback:0 unstable:0 [ 297.159755] slab_reclaimable:17561 slab_unreclaimable:125820 [ 297.159755] mapped:61575 shmem:4506 pagetables:3124 bounce:0 [ 297.159755] free:1024549 free_pcp:202 free_cma:0 06:17:20 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000000c0)={0x0, @reserved}) [ 297.205937] Node 0 active_anon:877756kB inactive_anon:17272kB active_file:28916kB inactive_file:91080kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:246300kB dirty:656kB writeback:0kB shmem:18024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 845824kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 06:17:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=ANY=[@ANYBLOB="6c010000170001000000000000000000fe8000000000000000000000000000bb0000000000ac14140000000000000000000000000000000000000000000000000000000000ac1414bb00008000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14140000000000000000000000000000000000050000d9804b1700"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500ac141400000000000000000000000000000000003200000000000000fe88000000000000000000000000000100"/196], 0x16c}}, 0x0) [ 297.265772] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 297.317009] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 297.348465] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 297.353747] Node 0 DMA32 free:299764kB min:36272kB low:45340kB high:54408kB active_anon:881940kB inactive_anon:17272kB active_file:28916kB inactive_file:91080kB unevictable:0kB writepending:620kB present:3129332kB managed:2621192kB mlocked:0kB kernel_stack:10464kB pagetables:12496kB bounce:0kB free_pcp:836kB local_pcp:724kB free_cma:0kB [ 297.386764] lowmem_reserve[]: 0 0 0 0 0 [ 297.391476] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 297.420456] lowmem_reserve[]: 0 0 0 0 0 [ 297.424873] Node 1 Normal free:3780076kB min:53612kB low:67012kB high:80412kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:16kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 297.529539] lowmem_reserve[]: 0 0 0 0 0 [ 297.535089] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15908kB [ 297.563504] Node 0 DMA32: 199*4kB (UME) 186*8kB (UME) 134*16kB (ME) 925*32kB (UME) 502*64kB (UME) 208*128kB (UM) 130*256kB (UM) 77*512kB (UM) 24*1024kB (UE) 12*2048kB (UM) 21*4096kB (UM) = 300652kB [ 297.591499] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 297.604952] Node 1 Normal: 65*4kB (UE) 388*8kB (UE) 289*16kB (UM) 68*32kB (UM) 32*64kB (UME) 21*128kB (UM) 14*256kB (UM) 5*512kB (U) 3*1024kB (UM) 10*2048kB (UME) 912*4096kB (UM) = 3780148kB [ 297.629301] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 297.639168] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 297.652784] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 297.664977] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 297.679468] 22882 total pagecache pages [ 297.683482] 0 pages in swap cache [ 297.689788] Swap cache stats: add 0, delete 0, find 0/0 [ 297.695228] Free swap = 0kB [ 297.702734] Total swap = 0kB [ 297.707443] 1965979 pages RAM [ 297.710572] 0 pages HighMem/MovableOnly [ 297.719396] 339073 pages reserved [ 297.722888] 0 pages cma reserved 06:17:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) write$P9_RLOCK(r1, &(0x7f0000000000)={0x8, 0x35, 0x1}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000210001000000000000000000020010ff000000000100000008000200ac1414aa080006"], 0x4c}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 06:17:21 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044) 06:17:21 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x400000) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:21 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=ANY=[@ANYBLOB="6c010000170001000000000000000000fe8000000000000000000000000000bb0000000000000000ac14140000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000021", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000005000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500ac141400000000000000000000000000000000003200000000000000fe88000000000000000000000000000100"/196], 0x16c}}, 0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f00000000c0)) 06:17:21 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000001080)={0x0, 0x989680}, &(0x7f0000048000), 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440)='NLBL_UNLBL\x00') exit(0x0) 06:17:21 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffff4}]}}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x40000, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000240)={0x1, 0xd5d1, 0x4, {0x0, @sliced={0x7fff, [0x2, 0x81, 0x8, 0x1, 0x3, 0x7, 0x5, 0x7, 0x8001, 0x8, 0xffff, 0x800, 0x0, 0xffa, 0xbe, 0x0, 0x2, 0x200, 0xffff, 0x59, 0x6258, 0x4, 0x1, 0x8001, 0x6, 0x1ff, 0x800, 0xffff, 0x7, 0x8, 0x1f, 0x8, 0xf9, 0x3ff, 0x0, 0x6, 0x9, 0x3, 0x81, 0x6, 0x33c5, 0x1, 0x8, 0x1, 0x8, 0x6, 0xd49d], 0x80000000}}, 0x2}) 06:17:21 executing program 2: sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x800, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4011}, 0x40) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) [ 297.956180] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 297.970552] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 297.979575] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 297.989791] CPU: 0 PID: 16149 Comm: syz-executor.3 Not tainted 4.14.194-syzkaller #0 06:17:21 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') write$tun(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1007) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000000c0)={{0x75, 0x80}, {0x6, 0x3f}, 0x0, 0x2, 0xf9}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r1}, 0x8) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="880000000301010100000000002100000300000814001880080002400000001c08000340000000cb8266d0be845bda001c001880080001400000ae81080003400000000508000140000007ff18000480140003800800034000000040000000000800034000002000140005800f0001006e657462696f732d6e7300000000000000000000000000004cafecb12dd4cdb62ca2e8282520d85efb3c5ad3c59ef227fc7dd27e7461eb48a0ba5290f6e0b9f71d3178e6fffd32f4c9654750a04ce1ad0813e67f9fec9157068d4b4a3f1579c3209b146dde8aa2c46799019ad82a93d253a9142ccede7e7145da927e7c57073ce9cbab"], 0x88}, 0x1, 0x0, 0x0, 0x4000800}, 0x4088) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 297.997749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.007128] Call Trace: [ 298.009732] dump_stack+0x1b2/0x283 [ 298.013415] warn_alloc.cold+0x96/0x1cc [ 298.017420] ? zone_watermark_ok_safe+0x220/0x220 [ 298.022309] ? perf_trace_lock_acquire+0x510/0x510 [ 298.027270] ? perf_trace_lock_acquire+0x510/0x510 [ 298.032252] ? fs_reclaim_release+0xd0/0x110 [ 298.036696] __vmalloc_node_range+0x10e/0x150 [ 298.041226] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 298.046611] vmalloc_user+0x47/0xa0 [ 298.050251] ? vb2_vmalloc_alloc+0xa6/0x280 [ 298.054604] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 298.059983] vb2_vmalloc_alloc+0xa6/0x280 [ 298.064150] __vb2_queue_alloc+0x47a/0xd90 [ 298.068417] vb2_core_create_bufs+0x279/0x5a0 [ 298.072959] ? __vb2_queue_free+0x7a0/0x7a0 [ 298.077326] ? __lock_acquire+0x5fc/0x3f20 [ 298.081606] vb2_create_bufs+0x2e1/0x5b0 [ 298.085716] ? vb2_thread_start.cold+0x24/0x24 [ 298.090320] ? check_preemption_disabled+0x35/0x240 [ 298.095374] ? perf_trace_lock+0xf7/0x490 [ 298.099568] vb2_ioctl_create_bufs+0x1f7/0x330 [ 298.104203] v4l_create_bufs+0xa4/0x150 [ 298.108260] __video_do_ioctl+0x65b/0x6a0 [ 298.112429] ? video_ioctl2+0x30/0x30 [ 298.116353] ? __might_fault+0x177/0x1b0 [ 298.120448] video_usercopy+0xf5/0xe90 [ 298.124357] ? video_ioctl2+0x30/0x30 [ 298.128203] ? v4l_g_ctrl+0x390/0x390 [ 298.132019] ? check_preemption_disabled+0x35/0x240 [ 298.137053] ? check_preemption_disabled+0x35/0x240 [ 298.142963] ? perf_trace_lock+0xf7/0x490 [ 298.147219] ? perf_trace_lock_acquire+0x510/0x510 [ 298.152167] v4l2_ioctl+0x1bb/0x2f0 [ 298.155834] ? v4l2_open+0x2f0/0x2f0 [ 298.159570] do_vfs_ioctl+0x75a/0xff0 [ 298.163396] ? selinux_inode_setxattr+0x730/0x730 [ 298.168240] ? ioctl_preallocate+0x1a0/0x1a0 [ 298.172669] ? lock_downgrade+0x740/0x740 [ 298.176831] ? __fget+0x225/0x360 [ 298.180287] ? security_file_ioctl+0x83/0xb0 [ 298.184687] SyS_ioctl+0x7f/0xb0 [ 298.188046] ? do_vfs_ioctl+0xff0/0xff0 [ 298.192016] do_syscall_64+0x1d5/0x640 [ 298.195945] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 298.201135] RIP: 0033:0x45d579 [ 298.204324] RSP: 002b:00007fa14ead2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.212037] RAX: ffffffffffffffda RBX: 000000000001f340 RCX: 000000000045d579 [ 298.219324] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 298.226610] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 298.234076] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 298.241354] R13: 00007ffc763ef02f R14: 00007fa14ead39c0 R15: 000000000118cf4c 06:17:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) get_mempolicy(0x0, &(0x7f00000001c0), 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x2) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000003ec0)=""/242, 0xf2}, {&(0x7f0000003fc0)=""/86, 0x56}, {&(0x7f0000004200)=""/107, 0x6b}, {0x0}], 0x4}, 0xfffff64b}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/64, 0x40}}, {{0x0, 0x0, 0x0}, 0x7}], 0x4, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x6}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x7}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xa8, 0x0, 0x300, 0x70bd25, 0x4, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x65}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7fff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2000080}, 0x40) sendmmsg$inet(r5, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1b1, 0x0) socket$inet(0x2, 0x0, 0x9) 06:17:21 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0x12, 0x0, 0x0, 0x0, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e21, 0x6f1, @local, 0x4}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x6c, 0x20, 0x0, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x90}}, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x1c}, 0x48000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 298.255057] Mem-Info: [ 298.260045] active_anon:219322 inactive_anon:4318 isolated_anon:0 [ 298.260045] active_file:7265 inactive_file:22777 isolated_file:0 [ 298.260045] unevictable:0 dirty:182 writeback:0 unstable:0 [ 298.260045] slab_reclaimable:17566 slab_unreclaimable:125016 [ 298.260045] mapped:61551 shmem:4506 pagetables:3037 bounce:0 [ 298.260045] free:1026036 free_pcp:226 free_cma:0 [ 298.303185] Node 0 active_anon:877288kB inactive_anon:17272kB active_file:28924kB inactive_file:91108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:246204kB dirty:712kB writeback:0kB shmem:18024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 843776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 298.333300] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 06:17:21 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = dup2(r0, r0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="1f628c95584ecfaea027b526742d510b", 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=ANY=[@ANYBLOB="6c010000170001000000000000000000000000010000000000000000ac14140000000000000000000000000000000000000000000000000000000000ac1414bb00"/92, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000005000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000044000500ac141400000000000000000000000000000000003200000000000000fe88000000000000000000000000000100"/196], 0x16c}}, 0x0) [ 298.384751] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 06:17:21 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) unshare(0x10000) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bind$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, @fixed={[], 0x12}, 0x2c}, 0xa) [ 298.453994] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 298.459903] Node 0 DMA32 free:300136kB min:36272kB low:45340kB high:54408kB active_anon:883904kB inactive_anon:17272kB active_file:28924kB inactive_file:91108kB unevictable:0kB writepending:712kB present:3129332kB managed:2621192kB mlocked:0kB kernel_stack:10368kB pagetables:12592kB bounce:0kB free_pcp:704kB local_pcp:420kB free_cma:0kB 06:17:22 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300030c000000000000000000000002000905000000006b0000000000000003000600008000000000000000000001000000000000000002000100000000000000001600000000030005020000000002000000ac1e00010000000000000000"], 0x60}}, 0x0) r1 = socket$isdn(0x22, 0x3, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}}, 0x400c010) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x400, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x8000}, {r1, 0x88}, {r2, 0x8000}, {r3, 0x9400}, {r0, 0x200}, {r4, 0x4}], 0x6, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000005c0)="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"}, {&(0x7f0000000200)="deab0b1884cd5e30909d8d5cd0ba4004586dd6e05f8dc57be300"}, {&(0x7f0000000340)="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"}, {0xffffffffffffffff}, {&(0x7f0000000440)="c54ebf124e739a1332fcf35a0603892c5e3fdb014045963492fafdedbe9cccd27d184d8d884a93112116d60fb3766bbfcb818afb5afbbc260f93c8a879ed8d5d494ea4b92cf3158ac602b1a9e53a75aa9e7179b8cab6b860653e4c67458f72bf644263307eeddc1375621e87cb7b3406202b0be8b34d78dc0d666b2c1d3b877aec9ceaddb1d9"}], 0x17}, 0x804) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r6, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 298.516321] lowmem_reserve[]: 0 0 0 0 0 [ 298.606306] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 298.612641] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 06:17:22 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000507003fc1138eeb9b85781bb4ab16cd2b487f51da21affdff6de88fca90aef19d8a8ca86c7c553fd17e061d5b4074967b1b8d5e031887ce4798e9f3abc6384ea171777feec47213cb3bf266f8a9b97900d987ddc7d33c2bac42c3804f6a91572786e28b9c31df20bd780bb62fd6e39d6cf5c83a1247c5aeade71e17883f7cecc9048c19208a27b52473ef1761159df911b36dcbce4fec32af9114fbabe30e9de4560f8dda702298702c0482ead158c103f61708479e896fe73e1b91e538ea2d79b51b651eab29b00ed6ba81b8ca664c1468a2fa23296d027e7f07a023df18c2aa9d53d01408ab48c3", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 298.748995] lowmem_reserve[]: 0 0 0 0 0 [ 298.756993] Node 1 Normal free:3780148kB min:53612kB low:67012kB high:80412kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:16kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 06:17:22 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@multicast2}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x0, 0x0, 0x3}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) 06:17:22 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @local}], 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 298.834387] lowmem_reserve[]: 0 0 0 0 0 [ 298.840155] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15908kB [ 298.879424] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 06:17:22 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x101, 0x80200) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 298.926771] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 298.949108] Node 0 DMA32: 151*4kB (UME) 440*8kB (UME) 198*16kB (UME) 887*32kB (UME) 503*64kB (UME) 210*128kB (UME) 131*256kB (UM) 78*512kB (UM) 24*1024kB (UE) 10*2048kB (U) 18*4096kB (UM) = 287004kB [ 299.059865] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 299.084913] Node 1 Normal: 65*4kB (UE) 388*8kB (UE) 289*16kB (UM) 68*32kB (UM) 32*64kB (UME) 21*128kB (UM) 14*256kB (UM) 5*512kB (U) 3*1024kB (UM) 10*2048kB (UME) 912*4096kB (UM) = 3780148kB [ 299.135856] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 299.144739] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 299.206767] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 299.215788] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 299.224383] 22899 total pagecache pages [ 299.233459] 0 pages in swap cache [ 299.237465] Swap cache stats: add 0, delete 0, find 0/0 [ 299.243139] Free swap = 0kB [ 299.246634] Total swap = 0kB [ 299.249907] 1965979 pages RAM 06:17:22 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000140)={0x0, 0x96, 0xe3}, 0x0, &(0x7f0000001240)="bde92a291271d1b6d1becc99afb998e5d48e9733590ee85c38a5419a71f4f33d95489fca8d98345659ba29c40e128586edc194a2ec3c4c5a9746f9a3f2847d99849a8fca6e53a4b108dcb0a678c51d1eca2afccf98bb8b60e4b398563c6d97fd1bd9727806f0426832ea73e73f4a5e13e114446c521c3bdc9436dca131d1ed5eee36f3b5c7078a4e0c92db2384a857655a82b587d4bc", &(0x7f0000001300)=""/227) r3 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x4, 0x44001) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000240)={{r3}, "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"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x20493859, 0x0, 0x0, [{0xfffffff4}, {}, {}, {0x3}, {}, {0x0, 0xffffffff}]}}}) 06:17:22 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x6, 0x3, "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"}) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@remote, 0x20000000}, @in=@local, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x4e23, 0x1, 0x2}, {}, {0x3ff, 0x400}, 0x6}, 0x0, 0x0, 0x4000000}, [@tmpl={0x44, 0x5, [{{@in6=@local, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) 06:17:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) keyctl$revoke(0x3, 0x0) process_vm_writev(0x0, &(0x7f0000c22000), 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x8, 0x0, 0x0) getpeername$l2tp6(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) listen(r0, 0x10001) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="b23d921378e9a83f1254ccf05513", 0x1000e, 0x0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 06:17:22 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x5, 0x9, 0xf22, 0x6, 0x1, 0x2, 0x1f}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f00000000c0)='ip6tnl0\x00^\x89\x19\xebpP($\xa2\xd80(\x1d\x8c\x02t_r\xcbJe\x97\x93\x87sPG*\xba\xb9`\x8a\xd0\xe4\x9c\x89L\xcd\xa2\x89t\x93\xbaMX\xbb<\x9e%\x7f\t%l\xbds\x90\x0e^>D\xad\x8c\x16\xfe#z\xa5\xbd\xfa\xac\xf4\xebH\x90W\f\xd7\x03\xd0\xa7\t\tg\x9a.\x8fg\xde\xe3\xe8\x91\x00\x00\x00\x00\x8e\'\xcfZ%\xed\x04K\xf3`\x97\xbe\x9c\xb0\xde\xcf\x87le?\xbcZ\xda\x89\r\xd9aQ\'\x87\t\xee\x13\xf4v\x80\f\xad.\xc6\xbdp\xec\x06;\x93\xe0\x05\xc0\xb0-!N+\xb2+!~/\xab`y\xc3p\t\x89j\xf2C\xba\xee`\xdb\xec\x9d\x88\xa3\xa2\x8d') 06:17:22 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r1, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r2], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c002}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x21}) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r3, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x200, 0x1, 0x4}) sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 299.253513] 0 pages HighMem/MovableOnly [ 299.257992] 339073 pages reserved [ 299.261696] 0 pages cma reserved [ 299.348029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=16238 comm=syz-executor.5 [ 299.372578] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 299.409652] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 299.431496] CPU: 1 PID: 16244 Comm: syz-executor.3 Not tainted 4.14.194-syzkaller #0 [ 299.439608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.449007] Call Trace: [ 299.451616] dump_stack+0x1b2/0x283 [ 299.455266] warn_alloc.cold+0x96/0x1cc [ 299.459266] ? zone_watermark_ok_safe+0x220/0x220 [ 299.464136] ? perf_trace_lock_acquire+0x510/0x510 [ 299.469091] ? perf_trace_lock_acquire+0x510/0x510 [ 299.474081] ? fs_reclaim_release+0xd0/0x110 [ 299.478517] __vmalloc_node_range+0x10e/0x150 [ 299.483024] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 299.488401] vmalloc_user+0x47/0xa0 [ 299.492041] ? vb2_vmalloc_alloc+0xa6/0x280 [ 299.496411] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 299.501827] vb2_vmalloc_alloc+0xa6/0x280 [ 299.506005] __vb2_queue_alloc+0x47a/0xd90 [ 299.510269] vb2_core_create_bufs+0x279/0x5a0 [ 299.514784] ? __vb2_queue_free+0x7a0/0x7a0 [ 299.519160] ? __lock_acquire+0x5fc/0x3f20 [ 299.523444] vb2_create_bufs+0x2e1/0x5b0 [ 299.527527] ? vb2_thread_start.cold+0x24/0x24 [ 299.532130] ? check_preemption_disabled+0x35/0x240 [ 299.537170] ? perf_trace_lock+0xf7/0x490 [ 299.541369] vb2_ioctl_create_bufs+0x1f7/0x330 [ 299.545971] v4l_create_bufs+0xa4/0x150 [ 299.549966] __video_do_ioctl+0x65b/0x6a0 [ 299.554138] ? video_ioctl2+0x30/0x30 [ 299.557958] ? __might_fault+0x177/0x1b0 [ 299.562039] video_usercopy+0xf5/0xe90 [ 299.565939] ? video_ioctl2+0x30/0x30 [ 299.569881] ? v4l_g_ctrl+0x390/0x390 [ 299.573698] ? check_preemption_disabled+0x35/0x240 [ 299.578736] ? check_preemption_disabled+0x35/0x240 [ 299.583774] ? perf_trace_lock+0xf7/0x490 [ 299.587960] ? perf_trace_lock_acquire+0x510/0x510 [ 299.592930] v4l2_ioctl+0x1bb/0x2f0 [ 299.596587] ? v4l2_open+0x2f0/0x2f0 [ 299.600317] do_vfs_ioctl+0x75a/0xff0 [ 299.604139] ? selinux_inode_setxattr+0x730/0x730 [ 299.609034] ? ioctl_preallocate+0x1a0/0x1a0 [ 299.613496] ? lock_downgrade+0x740/0x740 [ 299.617673] ? __fget+0x225/0x360 [ 299.621171] ? security_file_ioctl+0x83/0xb0 [ 299.625601] SyS_ioctl+0x7f/0xb0 [ 299.628979] ? do_vfs_ioctl+0xff0/0xff0 [ 299.632967] do_syscall_64+0x1d5/0x640 [ 299.636883] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 299.642089] RIP: 0033:0x45d579 [ 299.645287] RSP: 002b:00007fa14ead2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.653008] RAX: ffffffffffffffda RBX: 000000000001f340 RCX: 000000000045d579 [ 299.660289] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 299.667569] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 299.674858] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c 06:17:22 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="7bd3e9b5752686bad8ef4650ea22ad0cd39bfd014bfff912d6c952a2daa21cc072c8eb450a4d84665381ec40289f1dd235bd", 0x32}, {&(0x7f0000000040)="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", 0xfc}, {&(0x7f0000000140)="42068d2086202b0f02ed6188dd08ea970ab50117cc47f764e62b9f886868c3438655e6c7ad3f11fb30f7b774697a9685e5d351e9d22d0e2f72b3e11561d77e34a9c2a6fcc4e8b78ed7711fce871b0c739a73f1d02dd327f687f80e646bb1af821201fdcc465675d1104143d7f421dd642d1666918e9c143ee0ac3136a2d521", 0x7f}, {&(0x7f00000001c0)="f866b4986b027482de5368f0d6a26506496173732972aaef9515a1be0efe8a9261904891beba43c7d2b530dd1b0bd55ff77c08638b81bff720a4d14f9d69ba44ea9ecb01776adcfd36fe89fdedb7c26ab1b6f40162eee0b5627d4a8b15b120d0ea5904ddc4712e82904909ca8825ac0daa090c0d48f8ec5146fa5f3a8699ca402187f468a3d8e768b9b37a", 0x8b}, {&(0x7f0000000280)="a74acc2a981fe92664bd149cec0010dd57c6bed89c76afc65fea5d1b5b511d38690d0fbeb7f490fb1ede038b0f677be185dfe527b225d0e9d28f7353de4d1c88822d28fa7eb128df2df444548b904c092ad07a49f5b1b48dd26b38ec574391aec5a62e22d03a8fe716ad5137e309851db905c1b1f70b8325bfe842d2b9da48011a1ba63878c56ebf8215fa49c97f20cc1380494786bbd8b35c094796b795a44ac36e3c288a86f66227bd43955be7a5ba4ab6827c995eaf49cc611062deecfba7375965182bb4386edfd2ed4a8525159f882cf8211fadaa03962511531033375783c203e1a35a1af567057b", 0xeb}], 0x5, &(0x7f0000000400)=[@assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40004000}], 0x1, 0x40841) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in6=@private2, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x7}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, 0xf, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044005}, 0x20040000) unshare(0x40000000) 06:17:22 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300030c000000000000000000000002000900080000006b00000000000000030006000000000002000000e0000001000000000000000002000100000000000000001600000000030005000000000002000000ac1e00010000020000000000"], 0x60}}, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x4082) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x400}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4048080}, 0x20000004) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f00000000c0)=@generic={0x1, 0x6, 0x4}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r6, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1b0, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x10}, 0x493d3f63d6f072d0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:23 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f00000000c0)='\x03E\x93\xf4\xd0@\x02|\x14\x00\x00\x00\x00\x00\x00\x00\xde\xbc\xb3V\xfb^P\x86K\xb7H\xff\x96/\xc4[\xea%+\x1d_\x8b\x86Be\xe3\xb8\xab\xb8g>E\xd8\xa1\xea\x9c8f\xac\x9aw\x02\x89e\xb1\xef\xef\x7fZ\x95_a') [ 299.682144] R13: 00007ffc763ef02f R14: 00007fa14ead39c0 R15: 000000000118cf4c [ 299.703681] IPVS: ftp: loaded support on port[0] = 21 06:17:23 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='./file1\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = dup(r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r2, @ANYRES64=r2, @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x24, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x500, r5, 0x21, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe61}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd7e2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xce1}]}, @TIPC_NLA_NODE={0x168, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "588022c62c8118290e745c95ebc4315e7cfeaf51e084807e1cb5ec2dc70015ea60cd29dd"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "3778e98c9d117fdf7df1702940cedef3b0d76673243366e9d0c6f22cd066c8e7319895"}}, @TIPC_NLA_NODE_ID={0x24, 0x3, "0272ef122fc0e1290aa3b86dfd761817e1b5db2d46f30f6d87e7c6cc68855948"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "ed90f4a7efbe8aeead65c8b762874af415ad901c7adafda4493f"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x4c, 0x3, "95659644f2ef895ae6506c3e5581130fb66b4b67f7609577a639ed8a3fcad884b96733e413eebeaec989c925ff011c0ca586d2718894393db2e1bbe8854ae8c186a9f681faeadcac"}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x93}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x1ff, @dev={0xac, 0x14, 0x14, 0x2d}}}}}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8080000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x87}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffeff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa394}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_NODE_ID={0xcc, 0x3, "7c693436d8fa3b44b699197f28ce85ac657724837635f4d32e5cc253586e72844f45258c1c0ee040842e22e059d2eb3bd222bae290d19cacfa43a49dc051732f828e1cd1a14eb0b28503af47efb84e332f625565924c9b93a2b0f1a97bdf1f8133eb18adc4cfb49fc1ac5ba36824c4d52625779cee7404d9711f6f34ff3d6ebf5f084156cdda8d9c8d570008111e50e7a62b1e067f5559aba4c60327c10687e44483d2f6fe0e93e63dc0e8ca125bf609cb1d9e8796a3ff7697430ecbe482db2b8d09c3e28b22957a"}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc4fd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x712f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1517}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8f63}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff9}]}]}, 0x500}, 0x1, 0x0, 0x0, 0x44095}, 0x40400c4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file1\x00', 0x0) 06:17:23 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') prctl$PR_SVE_SET_VL(0x32, 0x3a238) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x200000, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r5, 0x4010ae94, &(0x7f00000000c0)={0x9, 0x1f, 0x7}) getsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000000100)={@empty, @remote, @multicast1}, &(0x7f0000000140)=0xc) 06:17:23 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000080), 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000140)={0x10000, {{0x2, 0x4e22, @rand_addr=0x64010102}}, {{0x2, 0x4e23, @multicast1}}}, 0x108) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x40) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0xb0, 0x1, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_NAT_DST={0x78, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xda4}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x401}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4004044}, 0x44084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000600)={{r6, 0x9, 0x1, 0x5, 0x4, 0x0, 0x6, 0x8a, 0x26d0, 0x3, 0x6, 0x8, 0x7fffffff, 0x1e8, 0x3}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000300)={{r6, 0xffff, 0x1, 0x1ff, 0x5, 0xabb8, 0x101, 0x80000000, 0x389f, 0x5, 0x1, 0x7fff, 0xc7, 0xffffffff, 0x1}, 0x18, [0x0, 0x0, 0x0]}) 06:17:23 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) fcntl$lock(r0, 0x6, &(0x7f0000000100)={0x0, 0x1, 0x62e, 0x42}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) getresgid(&(0x7f00000003c0), &(0x7f00000004c0), &(0x7f0000000880)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xa, &(0x7f0000000780)=[{&(0x7f0000000280)="7fdaff40affc7cdf11c04e2ace129b9d65f6663551e986783d6f1d77c29fc3b5fa85e65632eca30fc69bbdaaf54f37593d855cab59fc6581bb239d0096f330cdc40de2621de23b5e68e9bd1b37cf521242a858004fa76f2d6d71195c89f00e868d9e1a06f707dac03c7e3857a194f6511090f48d2a55487615f987aa3d185573ac6ea16b3326a266b54c36f5f91a77fb6ed049ebef1645f9d1fb66b1beaab3f3c0dcfae5ce67db2635f4caa3dc883e26fe4576176960a6e9d84c91be054bb0", 0xbf, 0x81}, {&(0x7f00000001c0)="6fac1dbebc20d704618dc98760e19ac7b599481cb8cf5898d3604e7eecd50c39e0d5e44ed134ad34c49e3015dac436348d1f12aedda06050221f54ec", 0x3c, 0x100000001}, {&(0x7f0000000200)="dbc84436272f8b5c6ff359429796246b005dfbb05c2168714bde", 0x1a, 0x2e5}, {&(0x7f0000000340)="3c24df6b424bd28e642d4991c5f791866509aa1df503a66dad14d44e6de5316ac06a97d5298a8ec02c84777f572abfa4c4c0edad603937beb528b7573b875711fb08ece330e941186eba418287a0474dac0d2587b3265a53ba6671264e3eb3695a58cbb463699c4195c43cbf806bdc8db83381871d", 0x75, 0x10000}, {&(0x7f00000003c0), 0x0, 0x3ff}, {&(0x7f0000000400)="9b54acc3ece47acaf9fdffa25413359bf5b3cf16b7b87e4b5821a9f35f7fe5268a16701e2db5e2fd46f11e49ebd277324b8d28b3ca59a895c484cb737965e8b3b8460fcbb9c6102e78f361b3780f3687058a172e5fef3c85f5df14c78d964b0cfcf7f0f9968efc6020f87ce5028d05fc98ecbe69fe0c18460592a7f8bee54675d121b27cd5d9e0a8af443df6a85ad2d63c353fa7c533da104eebe49a89c7b8", 0x9f, 0x7fffffff}, {&(0x7f00000004c0), 0x0, 0x101}, {&(0x7f0000000500)="0f57528a1af48fb50afa12d633d977a6db2dea561bf082dcf8513ad9863fafdcd619b091bae0ddcca9586722ed35e17ef1bbfc64571b03c14bbd75aef0c1d186ffb0fb0c1293ad85e5b98329f64b7c", 0x4f, 0x8}, {&(0x7f0000000580)="8ec47a3c543028b8991dd3ac4d57e3368a5bee8a29f89c894b947c5e0d2f0c2c2abafa8cdd1a02e69b73c10b6a39a5b051ce8fdc0d6031cc492e", 0x3a, 0xb26}, {&(0x7f00000005c0)="db548c1ea782eaeb53f7ed0e74ee0acb141ff80ed397481d790fbbc6e7d3ce7b5906d3bbb81ab6ac196d925deee97fdcc69d55bb95e108773857a5eca7531193cdca1f264ab57084b1830ea446e05a17bbde8f5ff54fe31c482584fd30a3d739a718470c128888c6b06a47638c3bf65d8986aa4b34e633c253e716a5ecd7726b5db533bd60b8172f0a891566be01d7bd7c2559cd13091fab7689", 0x9a, 0x2}], 0x9020b2, &(0x7f0000000680)={[{@data_ordered='data=ordered'}, {@balloc_border='block-allocator=border'}, {@nolargeio='nolargeio'}, {@balloc_no_unhash_reloc='block-allocator=no_unhashed_relocation'}, {@data_journal='data=journal'}, {@balloc_border='block-allocator=border'}, {@hash_tea='hash=tea'}, {@tails_off='tails=off'}], [{@measure='measure'}]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f00000000c0)='ip6tnl0\x00') [ 299.896443] Mem-Info: [ 299.899131] active_anon:225170 inactive_anon:4318 isolated_anon:0 [ 299.899131] active_file:7267 inactive_file:22784 isolated_file:0 [ 299.899131] unevictable:0 dirty:212 writeback:0 unstable:0 [ 299.899131] slab_reclaimable:17567 slab_unreclaimable:125385 [ 299.899131] mapped:61591 shmem:4506 pagetables:3237 bounce:0 [ 299.899131] free:1019664 free_pcp:171 free_cma:0 [ 300.015333] Node 0 active_anon:900556kB inactive_anon:17272kB active_file:28932kB inactive_file:91136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:246364kB dirty:832kB writeback:0kB shmem:18024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 300.049920] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 300.092550] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 300.130737] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 300.136578] Node 0 DMA32 free:282032kB min:36272kB low:45340kB high:54408kB active_anon:900768kB inactive_anon:17272kB active_file:28968kB inactive_file:91152kB unevictable:0kB writepending:932kB present:3129332kB managed:2621192kB mlocked:0kB kernel_stack:10528kB pagetables:12808kB bounce:0kB free_pcp:836kB local_pcp:580kB free_cma:0kB [ 300.190947] IPVS: ftp: loaded support on port[0] = 21 [ 300.276300] lowmem_reserve[]: 0 0 0 0 0 [ 300.280977] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 300.314783] lowmem_reserve[]: 0 0 0 0 0 [ 300.333955] Node 1 Normal free:3780024kB min:53612kB low:67012kB high:80412kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:16kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 300.380652] lowmem_reserve[]: 0 0 0 0 0 [ 300.384717] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15908kB [ 300.400630] Node 0 DMA32: 134*4kB (UME) 205*8kB (UME) 315*16kB (UM) 910*32kB (UME) 497*64kB (UME) 208*128kB (UME) 133*256kB (UM) 78*512kB (UM) 24*1024kB (UE) 14*2048kB (UM) 16*4096kB (U) = 287536kB [ 300.419763] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 300.432409] Node 1 Normal: 34*4kB (UE) 388*8kB (UE) 289*16kB (UM) 68*32kB (UM) 32*64kB (UME) 21*128kB (UM) 14*256kB (UM) 5*512kB (U) 3*1024kB (UM) 10*2048kB (UME) 912*4096kB (UM) = 3780024kB [ 300.450765] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 300.466953] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 300.480607] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 300.489856] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 300.503561] 22913 total pagecache pages [ 300.508720] 0 pages in swap cache [ 300.512657] Swap cache stats: add 0, delete 0, find 0/0 [ 300.520126] Free swap = 0kB [ 300.523309] Total swap = 0kB [ 300.527209] 1965979 pages RAM [ 300.530466] 0 pages HighMem/MovableOnly 06:17:24 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x3, 0x20001) getsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000000)) 06:17:24 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xab, 0x2, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="04ecde62b9b3b3eaf6f0d0df1b04"], 0x5, 0x2) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001000090468fe07002b0000fe0100ee0020000000450001070307001404001800120003000e040000000351f8000000000000000000", 0x39}], 0x1) 06:17:24 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r5, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r6, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000000)=""/107, &(0x7f0000000080)=0x6b) 06:17:24 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:24 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000000)={0x200, [0x400, 0x100, 0x8], [{0x5, 0x100, 0x1, 0x1, 0x0, 0x1}, {0x83, 0x800, 0x1, 0x1}, {0x4, 0x36a, 0x1, 0x1}, {0x1, 0x7, 0x1, 0x1, 0x0, 0x1}, {0xdc0c, 0x4, 0x0, 0x0, 0x1}, {0x8e00810, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x5, 0x7, 0x1, 0x1, 0x1}, {0x8, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x94c1, 0x1, 0x0, 0x1, 0x1}, {0x20, 0x9, 0x1, 0x1, 0x0, 0x1}, {0x8000, 0x5a9e, 0x0, 0x0, 0x1}, {0x3, 0x8, 0x1, 0x0, 0x1, 0x1}], 0x1}) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x3}}, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x2d}}]}]}, 0x16c}}, 0x0) 06:17:24 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000180)=""/44, 0x2c}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/mice\x00', 0x20400) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x400) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000280), 0x10) r5 = dup(r3) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e21, @private=0xa010100}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x0, {0x35b2dfe041a26c34, @pix_mp={0x10001, 0x0, 0x0, 0x0, 0x8, [{0xfffffff4, 0x7ff8}, {}, {0xffffffff, 0x7}, {}, {0x0, 0x80}, {0x0, 0x3}, {}, {0x8d1d}], 0x0, 0x0, 0x6}}, 0x5}) [ 300.534529] 339073 pages reserved [ 300.538232] 0 pages cma reserved [ 300.600945] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 06:17:24 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ocfs2_control\x00', 0x10280, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@flushpolicy={0x48, 0x1d, 0x0, 0x70bd2d, 0x25dfdbff, "", [@etimer_thresh={0x8, 0xc, 0x73d0}, @replay_thresh={0x8, 0xb, 0x8}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd2c, 0x70bd2a, 0x70bd26, 0x70bd2b, 0xfff, [0x10000, 0x101, 0x3f]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x488c1}, 0x20000025) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r4, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r5, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f00000000c0)={0x6, @random="b4d8ffae2f8b"}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@newae={0x130, 0x1e, 0x100, 0x70bd2b, 0x25dfdbfe, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0xa, 0xff}, @in6=@private1, 0xfffffffb}, [@lastused={0xc, 0xf, 0x6}, @algo_auth={0xc2, 0x1, {{'md5\x00'}, 0x3d0, "809bf2769240c7c86ad15cdf4cda1bd8258230e303558e8148f97057ee8c1b687ed6941591430fa6858ec21d441d43f64e417cde6ef7440bdce33fefd1249284d1168dcdd3978eef809d99aa13d94d972c67de7523609500f2f5752b8c4b50f1ceb6f933d91cc0ac1df7553a9bfb05e638f3b563064a7b6af2a8"}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd29, 0x70bd26, 0x70bd2a, 0x4070bd28, 0x0, [0x0]}}]}, 0x130}, 0x1, 0x0, 0x0, 0x24044880}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f00000015c0)={0x0, 0x1000, "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"}, &(0x7f0000000000)=0x1008) 06:17:24 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') r1 = socket$isdn(0x22, 0x3, 0x22) fcntl$notify(r1, 0x402, 0x1a) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:24 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x4d5, 0x8, 0x20, 0xa0, 0x2, 0x60000000}, @sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010102, @in6=@dev={0xfe, 0x80, [], 0xa}, 0x6, 0x18}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfe, 0x16}, @sadb_address={0x3, 0x5, 0x0, 0xa0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x70}}, 0xc804) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000780)={{r2}, "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"}) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d1e, &(0x7f0000000200)) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$P9_RMKDIR(r0, &(0x7f00000000c0)={0x14, 0x49, 0x2, {0x80, 0x1, 0x2}}, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @local}], 0x10) [ 300.674744] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 06:17:24 executing program 1: r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x16d900, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x7ff, 0x4) bind$rose(r0, &(0x7f0000000400)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x2000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '/dev/ptmx\x00'}}, {@cache_loose='cache=loose'}, {@access_client='access=client'}, {@access_user='access=user'}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}]}}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xe) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffa, &(0x7f0000000240)='big_key\x00', &(0x7f0000000280)='/dev/ubi_ctrl\x00') dup2(r3, r4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000080)=0x2, 0x4) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x10000) 06:17:24 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffff4}]}}}) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000240)={'filter\x00', 0x0, 0x0, 0x0, [], 0x8, &(0x7f0000000100)=[{}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, 0xf8) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x1) [ 300.794729] audit: type=1804 audit(1598422644.255:119): pid=16378 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir009189962/syzkaller.SUS8a0/186/file0" dev="sda1" ino=16019 res=1 06:17:24 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r2 = add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@ll={0x11, 0x8, 0x0, 0x1, 0xff, 0x6, @random="5f3f14cb0fcb"}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="0c5682c6ee693855a2595340374d42882e52788d4cce7f8eab70ffbd557cb06421f06d97968b77fac3aa", 0x2a}, {&(0x7f0000000780)="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", 0x1000}], 0x2, &(0x7f0000000280)=[{0xf0, 0x1, 0x2, "aea3182dcf34ccd7d8b2d2da5f1b776abc13f0ff11e1bd2ecdf59696a967befb6ef0034d57e5d3ed57ba20950f11b5e313dfb6c92b015224a068db4df3761cd093f330f4166d20fced4f50759ff2009882a5abdab3423d935dbfdcdb1df7a593b10ee933d86d4bfb71f3b27732f59b0b6ddab307ef3f842052894cf2c12d7088701d0ef2a39787821c01bdc522b34958d9e2fdee662672aa72e7569862c9f15be79b146710088fe7ae2c47ba2c36c0d17b8938a3b87b70c2d7a8734955e06ff8c7f12f9ab4691de26f6f7a459747c80b81d0ad304e43e65a4160"}, {0x50, 0x10f, 0x9, "8fb58f9bd14e524c325127add2a2c34120107dca6c4008bc0f9193692f6f04bcb5a74d79fad4cb8489458c845fc98b6527ecddea2ffb16fb45"}, {0xb0, 0xff, 0xfff, "7a34bf00a639fc5af4d6d3302fa1372941bcf05d50ac4bcd1f10452789309770bd85852be0171554174bad253687c0cc2284bf92a68662134229c7a82a77753d4b7c5beda0ddefbce59b49cf700813413049e179866a49a386dd9aa4bd613d8b77a8883184769e5209d7bced2c3da4681939d136348e8e0c2c07177aab63971242b48fb94932ac5435c4e6bd462cb20ed0e7965aa750e1740c0bcf770ab73d70"}, {0x98, 0x105, 0x8, "9d0f138f2b1220383314c21967e8ebc9c8860ffeb8097609f3a9c2c59d02c54de5ab2cc3e59dd13dee3c370f88eb60ffd8610afd4c7461bd057e531c60f3709f0c02b0d0d5841b13f6f7b7405b7709b643ae72a5cc34ef7c804ccb46e0c45148638872fa5932a375a63bab7ca6e754f5c2f3b789ae0bcd7bb17daecfe801fb384919172c"}, {0xc8, 0x84, 0x2, "6c441be1f10d5f729ffce3da0a10427503413ba86559456ad3e126c2ac9b4be0bf33f32ea25d5fcd61c559f22e6a7e285a50099cf6e202a566c59bfe4e54099183feed2a0d292bf3b98fd9c436cd1133b707ba59b73fc057ef1dd1875fdce3bb3e699c5409429da5c0481a8bf5b2bdbb2714fa0ffc2b0ac6bdc78e0109abb6f5658f27359695ab2dcfe65ae65d1bf249e5da30eff8b9709f600f6bbd9b1ead39162d5dee3a137212e58c6925fd098a112403b853d2cdd4f4"}, {0x68, 0x112, 0xffffffff, "761f924044fe60aa3ec0c2c22b2439048794cce72dcca80f642f7d147bd18ad818170ecca785f0a7f863584e48aa9616d27181f6ee14898a421018ff5805b7edf0679026c95e0710b44d761a8e43d26c08bfdc"}, {0x10, 0x10a, 0x7}], 0x3c8}, 0x80) keyctl$revoke(0x3, r2) [ 300.835022] audit: type=1800 audit(1598422644.255:120): pid=16378 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16019 res=0 [ 300.858652] audit: type=1400 audit(1598422644.295:121): avc: denied { relabelto } for pid=16375 comm="syz-executor.1" name="file0" dev="sda1" ino=16019 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1 06:17:24 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') getsockopt$inet_dccp_int(r2, 0x21, 0x5, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 300.895922] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 300.937247] 9pnet: Insufficient options for proto=fd [ 300.948739] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 300.989436] CPU: 1 PID: 16392 Comm: syz-executor.3 Not tainted 4.14.194-syzkaller #0 [ 300.997483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.006853] Call Trace: [ 301.009470] dump_stack+0x1b2/0x283 [ 301.013129] warn_alloc.cold+0x96/0x1cc [ 301.017123] ? zone_watermark_ok_safe+0x220/0x220 [ 301.021984] ? perf_trace_lock_acquire+0x510/0x510 [ 301.026938] ? perf_trace_lock_acquire+0x510/0x510 [ 301.031911] ? fs_reclaim_release+0xd0/0x110 [ 301.036350] __vmalloc_node_range+0x10e/0x150 [ 301.040869] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 301.046286] vmalloc_user+0x47/0xa0 [ 301.049934] ? vb2_vmalloc_alloc+0xa6/0x280 [ 301.054275] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 301.059653] vb2_vmalloc_alloc+0xa6/0x280 [ 301.063858] __vb2_queue_alloc+0x47a/0xd90 [ 301.068128] vb2_core_create_bufs+0x279/0x5a0 [ 301.072671] ? __vb2_queue_free+0x7a0/0x7a0 [ 301.077020] ? __lock_acquire+0x5fc/0x3f20 [ 301.081276] vb2_create_bufs+0x2e1/0x5b0 [ 301.085385] ? vb2_thread_start.cold+0x24/0x24 [ 301.089984] ? check_preemption_disabled+0x35/0x240 [ 301.095060] ? perf_trace_lock+0xf7/0x490 [ 301.099234] vb2_ioctl_create_bufs+0x1f7/0x330 [ 301.103877] v4l_create_bufs+0xa4/0x150 [ 301.107876] __video_do_ioctl+0x65b/0x6a0 [ 301.112048] ? video_ioctl2+0x30/0x30 [ 301.115929] ? __might_fault+0x177/0x1b0 [ 301.120018] video_usercopy+0xf5/0xe90 [ 301.123918] ? video_ioctl2+0x30/0x30 [ 301.127748] ? v4l_g_ctrl+0x390/0x390 [ 301.131599] ? check_preemption_disabled+0x35/0x240 [ 301.132040] sctp: [Deprecated]: syz-executor.2 (pid 16403) Use of int in maxseg socket option. [ 301.132040] Use struct sctp_assoc_value instead [ 301.136644] ? check_preemption_disabled+0x35/0x240 [ 301.136659] ? perf_trace_lock+0xf7/0x490 [ 301.136670] ? perf_trace_lock_acquire+0x510/0x510 [ 301.136686] v4l2_ioctl+0x1bb/0x2f0 [ 301.136696] ? v4l2_open+0x2f0/0x2f0 [ 301.136711] do_vfs_ioctl+0x75a/0xff0 [ 301.136722] ? selinux_inode_setxattr+0x730/0x730 [ 301.136732] ? ioctl_preallocate+0x1a0/0x1a0 [ 301.136740] ? lock_downgrade+0x740/0x740 [ 301.136754] ? __fget+0x225/0x360 [ 301.136769] ? security_file_ioctl+0x83/0xb0 [ 301.136785] SyS_ioctl+0x7f/0xb0 [ 301.199922] ? do_vfs_ioctl+0xff0/0xff0 [ 301.203915] do_syscall_64+0x1d5/0x640 [ 301.207863] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 301.213094] RIP: 0033:0x45d579 [ 301.216321] RSP: 002b:00007fa14eab1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.224077] RAX: ffffffffffffffda RBX: 000000000001f340 RCX: 000000000045d579 [ 301.231361] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 06:17:24 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r2, @ANYBLOB="0900f0150100000018000c0008000100736974000c00020008000300f1a73b234a113919d71d7f4f578ba5014c0682f0d49029a15dd389ffe4733a4c609a00b4264323c1331efcffffff4b728cb50affffffff27c5b5f0b3ebd5317c0a0ad79d6b48aa4d8a50ce410a70a0e4a0c34734cbd7158210830e50f6bfae2c46d77cc289bfefb812841b99e829bed2904c6cee74e82ab793bcfef79b341c611f245aa9ad208b11acf9d0437ecc593a600cc6a68bd4a0d9a0411e46a5b887faa2e44ebf627c56cd9bef3c4227d152240183311c6dd59e0000000000", @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x2080}, 0x20000041) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r4 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r6, 0x4) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r6, 0x6}, &(0x7f00000000c0)=0x8) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r7, 0x5000940a, &(0x7f00000015c0)={{r8}, "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"}) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=ANY=[@ANYBLOB="6c010000170001000000000000000000fe8000000000000000000000000000bb0000000000000000ac14140000000000000000000000000000000000000000000000000000000000ac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000005000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500ac141400000000000000000000000000000000003200000000000000fe8800"/196], 0x16c}}, 0x0) 06:17:24 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x100000000, 0x27}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r3, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r4, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={r4, @loopback, @multicast2}, 0xc) [ 301.238671] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 301.245950] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 301.253233] R13: 00007ffc763ef02f R14: 00007fa14eab29c0 R15: 000000000118cfec [ 301.282823] audit: type=1400 audit(1598422644.395:122): avc: denied { mounton } for pid=16375 comm="syz-executor.1" path="/root/syzkaller-testdir009189962/syzkaller.SUS8a0/186/file0" dev="sda1" ino=16019 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1 [ 301.337312] sctp: [Deprecated]: syz-executor.2 (pid 16415) Use of int in maxseg socket option. [ 301.337312] Use struct sctp_assoc_value instead 06:17:24 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') dup(r0) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:24 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0xa, 0x5, 0x4, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:24 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000006c0)={0x0, 0xea60}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=ANY=[@ANYBLOB="6c010000170001000000000000000000fe8000080000000000000000000000bb7f00000000000000ac1485160200000041af140000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000001c000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000005000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500ac141400000000000000000000000000000000003200000000000000fe88000000000000000000000000000100"/196], 0x16c}}, 0x0) [ 301.574046] audit: type=1804 audit(1598422645.035:123): pid=16394 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir009189962/syzkaller.SUS8a0/186/file0" dev="sda1" ino=16019 res=1 06:17:25 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x432]}, 0x8, 0xc0000) r1 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x8, 0x40001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000380)=0x401, 0x4) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0xfffffff8, 0x2, 0x9, 0x20, 0x200, 0x4, 0x884, {0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x3, 0xe51, 0x1, 0xffe, 0x9}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000280)={r2, @in={{0x2, 0x4e23, @loopback}}, [0x1, 0x3, 0x7, 0x5, 0x3, 0x3f, 0x4ee, 0x9, 0x1, 0x3, 0x0, 0xffffffffffff0000, 0x8039, 0x1]}, &(0x7f00000001c0)=0x100) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r3, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:25 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in6=@loopback, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2000000}}, 0x0, 0x8}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0xff}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) [ 301.648239] 9pnet: Insufficient options for proto=fd 06:17:25 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x20}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:25 executing program 1: r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x16d900, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x7ff, 0x4) bind$rose(r0, &(0x7f0000000400)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x2000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '/dev/ptmx\x00'}}, {@cache_loose='cache=loose'}, {@access_client='access=client'}, {@access_user='access=user'}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}]}}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xe) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffa, &(0x7f0000000240)='big_key\x00', &(0x7f0000000280)='/dev/ubi_ctrl\x00') dup2(r3, r4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000080)=0x2, 0x4) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x10000) [ 301.763916] audit: type=1800 audit(1598422645.035:124): pid=16394 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16019 res=0 [ 301.910251] audit: type=1400 audit(1598422645.095:125): avc: denied { relabelfrom } for pid=16375 comm="syz-executor.1" name="file0" dev="sda1" ino=16019 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1 [ 301.932471] 9pnet: Insufficient options for proto=fd [ 302.023065] audit: type=1400 audit(1598422645.215:126): avc: denied { unlink } for pid=6379 comm="syz-executor.1" name="file0" dev="sda1" ino=16019 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1 [ 302.117153] audit: type=1804 audit(1598422645.315:127): pid=16463 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir009189962/syzkaller.SUS8a0/187/file0" dev="sda1" ino=15780 res=1 [ 302.198782] audit: type=1800 audit(1598422645.315:128): pid=16463 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=15780 res=0 [ 302.459122] Mem-Info: [ 302.468277] active_anon:225129 inactive_anon:4317 isolated_anon:0 [ 302.468277] active_file:7280 inactive_file:22793 isolated_file:0 [ 302.468277] unevictable:0 dirty:156 writeback:1 unstable:0 [ 302.468277] slab_reclaimable:17564 slab_unreclaimable:125017 [ 302.468277] mapped:61579 shmem:4506 pagetables:3205 bounce:0 [ 302.468277] free:1019965 free_pcp:364 free_cma:0 [ 302.590752] Node 0 active_anon:900516kB inactive_anon:17268kB active_file:28984kB inactive_file:91172kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:246316kB dirty:716kB writeback:4kB shmem:18024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 872448kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 302.716595] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 302.787160] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 302.845439] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 302.859047] Node 0 DMA32 free:287012kB min:36272kB low:45340kB high:54408kB active_anon:898312kB inactive_anon:17268kB active_file:28984kB inactive_file:91272kB unevictable:0kB writepending:668kB present:3129332kB managed:2621192kB mlocked:0kB kernel_stack:10208kB pagetables:12672kB bounce:0kB free_pcp:1096kB local_pcp:400kB free_cma:0kB [ 302.925633] lowmem_reserve[]: 0 0 0 0 0 [ 302.934202] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 302.989675] lowmem_reserve[]: 0 0 0 0 0 [ 302.999847] Node 1 Normal free:3780024kB min:53612kB low:67012kB high:80412kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 303.062244] lowmem_reserve[]: 0 0 0 0 0 [ 303.070907] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15908kB [ 303.102119] Node 0 DMA32: 276*4kB (UME) 461*8kB (UME) 296*16kB (UME) 916*32kB (UME) 498*64kB (UME) 208*128kB (UME) 133*256kB (UM) 78*512kB (UM) 24*1024kB (UE) 13*2048kB (UM) 16*4096kB (UM) = 288056kB [ 303.143262] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 303.170335] Node 1 Normal: 34*4kB (UE) 388*8kB (UE) 289*16kB (UM) 68*32kB (UM) 32*64kB (UME) 21*128kB (UM) 14*256kB (UM) 5*512kB (U) 3*1024kB (UM) 10*2048kB (UME) 912*4096kB (UM) = 3780024kB [ 303.207892] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 303.227674] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 303.250965] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 303.276583] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 303.298768] 22962 total pagecache pages [ 303.312084] 0 pages in swap cache [ 303.320227] Swap cache stats: add 0, delete 0, find 0/0 06:17:26 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x3, 0x0, [{0x4}]}}}) 06:17:26 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f00000001c0)) sendto$rose(r1, &(0x7f00000015c0)="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", 0x1000, 0x8805, &(0x7f0000000200)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) r2 = open(&(0x7f0000000080)='./file0\x00', 0x400800, 0x80) r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r5, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={r5, @in={{0x2, 0x4e20, @remote}}, 0x5, 0x5}, &(0x7f0000000180)=0x90) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev={0xac, 0x14, 0x14, 0x18}, {@in=@multicast2, @in=@remote, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x2}, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0}, {0x1000000}, {}, 0x0, 0x0, 0x2}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) rt_sigsuspend(&(0x7f0000000040)={[0x6]}, 0x8) 06:17:26 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x3f, 0x0, 0x5, 0x20, @private2={0xfc, 0x2, [], 0x1}, @loopback, 0x60, 0x40, 0x0, 0xe2}}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fedbdf25310000000c0099000700000003000000080001000300000008005200", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB="080c031031c2e095e4934d25e799dbeb2e324dc21c8f8fac6238696fa31b0e261bd95043aa98801c69fae027e550a81496df463515b144ab59a1329827e41793b49657c328d065b265e353b1ba9ff155a85ce3e90054", @ANYRES32=r3, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f00000000c0)=0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:26 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 06:17:26 executing program 1: r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x16d900, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x7ff, 0x4) bind$rose(r0, &(0x7f0000000400)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x2000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '/dev/ptmx\x00'}}, {@cache_loose='cache=loose'}, {@access_client='access=client'}, {@access_user='access=user'}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}]}}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xe) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffa, &(0x7f0000000240)='big_key\x00', &(0x7f0000000280)='/dev/ubi_ctrl\x00') dup2(r3, r4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000080)=0x2, 0x4) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x10000) 06:17:26 executing program 0: io_setup(0x100, &(0x7f0000000080)=0x0) r1 = socket$inet6(0xa, 0x6, 0x0) io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000001c0)="b0", 0x1}]) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x90100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001280)={&(0x7f0000000040)={0x38, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000280)={{}, r3, 0x0, @inherit={0x0, 0x0}, @subvolid=0x1b7a}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000200)={"c7dea6a4910fc6351662d3cb40bb666b", r3, 0x0, {0x8, 0x8}, {0x5, 0x9}, 0x6, [0x0, 0x4, 0x7, 0x7fff, 0x6, 0x1020000000000, 0x0, 0x8, 0x5, 0x8001, 0x66, 0x80, 0x7, 0x9, 0x2, 0x4]}) [ 303.341381] Free swap = 0kB [ 303.352520] Total swap = 0kB [ 303.360160] 1965979 pages RAM [ 303.365136] 0 pages HighMem/MovableOnly [ 303.373484] 339073 pages reserved [ 303.378037] 0 pages cma reserved [ 303.443636] sctp: [Deprecated]: syz-executor.2 (pid 16479) Use of int in maxseg socket option. [ 303.443636] Use struct sctp_assoc_value instead 06:17:26 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000200)='net/ip_vs\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040027bd7000fddbdf254500000008000100ffffffff0800fefffeffffff0c00990006000000030000000c00990009000000000000000c00990001000100040000000c00990000080000ffffffff08000300", @ANYRES32=0x0, @ANYBLOB="08000100ffffffff"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x80) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:27 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x4, 0x0, [{0xfffffff4}, {}, {}, {}, {}, {0x3, 0x5}]}}}) 06:17:27 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x0, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r1, r0, 0x0) 06:17:27 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x4e, 0x0, 0xe40, 0xffffffff, 0x0}, &(0x7f00000000c0)=0x10) read$FUSE(r1, &(0x7f0000000780)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f0000000140)={0x70, 0x0, r4, [{0x1, 0x3f, 0x5, 0x3, '$@\'.{'}, {0x2, 0x9, 0x1, 0x2, '@'}, {0x2, 0x3, 0x3, 0x4, 'ns\x00'}]}, 0x70) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={r3, 0x200, 0x4}, 0x8) [ 303.583344] 9pnet: Insufficient options for proto=fd 06:17:27 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000140)) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707165726469723d2e2f66696c6530b9b66bafe448d7eb9a5a1a7c76058a7b22816bed5bc98746f74804c19ce2c2ff9ba06423d812288fd438f0d52be21de095de92dea8e1363516da5401ee7159060a3c6c63789be51aeb7d62c5f4d7c800"/140]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="0b7f43f9097f25469248c45464c6789f5bce1f1408a3ae7896b7a63cf780e72cb2", 0x21, 0xbe3}, {&(0x7f0000000300)="4cc633747811e4aef010fb644b6d3c53f35a77656949ebe12ae6c038df89e518c8060e21287de3a7c6998e4e8c24e1d9c9b6e1800b39c954d173246ac582b9b55532c82a9d04c070b69a108c", 0x4c}], 0x210000, &(0x7f0000001580)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c646f733178666c6f70e41f864498f46afe448f9fa32cc070792c73686f72746e616d653d77696e39352c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d257b26255dd6a3b07065726d69745f646972ebb574696f2c004200"/52]) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000580)=""/4096, 0x1000) 06:17:27 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r4, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r5, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x44c, 0x3f3, 0x2, 0x70bd2c, 0x25dfdbff, {0x10, 0x0, 0x34, [0x41b1, 0x9, 0x401, 0xffffffe0, 0x1, 0x10000, 0x5, 0x8080000, 0x19d, 0x100, 0x1d5, 0x1, 0x9, 0x0, 0xff, 0xffffff00, 0x6, 0x10000, 0xc521, 0x9, 0x3, 0x1, 0x2, 0x9, 0x1, 0x7fe7, 0x2, 0x9, 0x2, 0x0, 0x101, 0x4cb0, 0x6, 0x7ff, 0x8f7f, 0x401, 0x5, 0xffffffff, 0x0, 0x8, 0x3, 0x8001, 0xffffffff, 0x940, 0x855f, 0x20, 0x13c0c49a, 0xfff, 0x100, 0x7c4c, 0x7, 0x80000001, 0x6, 0x9, 0x1, 0x1, 0x80, 0x1, 0x80000000, 0x6, 0x39c, 0x0, 0x6, 0x101], [0x80000000, 0x6, 0x6, 0x0, 0x1f, 0x4, 0x80, 0x5, 0x1, 0x4, 0x4, 0x4, 0x1, 0x213, 0x1ff, 0x7, 0x8000, 0x101, 0x9, 0x4, 0x0, 0x6, 0x4, 0x6, 0x200, 0x7, 0x200, 0x0, 0x2, 0x1b4ff4bf, 0x0, 0x0, 0x9, 0xfff, 0xb13, 0x4, 0x1, 0x8001, 0x7f, 0x3, 0x2, 0x5, 0x1c, 0x9, 0x93, 0x6, 0x10001, 0x5, 0x9, 0x0, 0x7b3e, 0x8000, 0x6, 0x1, 0x7, 0xb81e, 0x3, 0x2, 0x2, 0x3, 0x80000000, 0x6, 0x8, 0xfff], [0x1, 0x5c, 0x9, 0x6, 0x1ff, 0x7, 0xfffffffc, 0xfffffffc, 0x5, 0x7ff, 0x1f, 0xffffff75, 0x2, 0x80000000, 0x2b997318, 0x7fff, 0xe0, 0x5, 0x8, 0x2e72, 0x94, 0x3, 0xae09, 0x3f, 0x0, 0x5, 0x4, 0x3, 0x8001, 0x8, 0x5, 0x0, 0x2, 0x9, 0x2, 0x9f, 0x1, 0x7fffffff, 0x2, 0x2, 0x81, 0xf06e, 0x8000, 0x1, 0x8000, 0x9, 0x0, 0x1ff, 0xcc69d48, 0x8, 0x1ff, 0x9, 0x6, 0x20, 0xd7c, 0x1000, 0x6, 0xbf0f, 0x8, 0x8001, 0xfffffffd, 0x1000, 0x7], [0xe5, 0x3, 0x4, 0x80000000, 0xfffffff8, 0x7f, 0x5424, 0x1, 0x3e3, 0x10001, 0x3, 0x8, 0x324, 0x9, 0xfff, 0x1, 0xf9, 0xe2a, 0x2, 0xfffffffd, 0x6, 0x5, 0xcd5, 0x1, 0xd73a, 0x4, 0x10001, 0xce, 0x1, 0x8, 0x6, 0x5, 0x4, 0x8, 0x7, 0xd51, 0xff, 0x2, 0x1fe00000, 0x36, 0x3, 0x9, 0x4, 0x4, 0x20, 0x7ff, 0x3d6, 0x3f, 0x4, 0x200, 0x0, 0x2cbe, 0xffffffff, 0x6, 0x7, 0x1, 0xd, 0x6c2, 0xffffff9f, 0x4, 0x1, 0xffffff7f, 0x7fff], 0x29, [']^%\x00', '\'\x00', 'ip6tnl0\x00', 'ns\x00', 'ip6tnl0\x00', 'veth1_to_bridge\x00']}, [""]}, 0x44c}}, 0x2400c004) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/171) [ 303.664849] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) 06:17:27 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x4000}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) io_setup(0x0, &(0x7f0000000180)=0x0) io_cancel(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x8cf, r0, &(0x7f0000000280)="de3ad645d7c2cd1da1408559001738b227d024199b123195228448c0f2f2e8e079d94fc0014533c1bdd41e93cee4904a736ec0233c827b8397bf9260871fd94de188e31f749d5e976e25a585c837a9ec4f7edfe79165778b60e2c1365a09b1ddb48f4696df4ec96c07aa64a3898ead17b604e0b84478b27e01948730214c0adbd3650245", 0x84, 0x84a, 0x0, 0x2}, &(0x7f0000000200)) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f00000000c0)={0x7, 0xc0000000, {0x55, 0x8001, 0x1ff, {0x1, 0x43}, {0x7ff, 0x6}, @ramp={0x8, 0x7f, {0x0, 0x2, 0x5a, 0x3}}}, {0x52, 0x4, 0x0, {0x8001, 0xffc0}, {0xe31, 0x1ff}, @period={0x5b, 0x1, 0x3, 0x1, 0x6, {0x5, 0x81, 0x3c, 0x1f}, 0x2, &(0x7f0000000140)=[0x1, 0x8]}}}) [ 303.733136] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 303.777702] CPU: 1 PID: 16510 Comm: syz-executor.3 Not tainted 4.14.194-syzkaller #0 [ 303.785658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.795024] Call Trace: [ 303.797624] dump_stack+0x1b2/0x283 [ 303.801269] warn_alloc.cold+0x96/0x1cc [ 303.805267] ? zone_watermark_ok_safe+0x220/0x220 [ 303.810128] ? perf_trace_lock_acquire+0x510/0x510 [ 303.815078] ? perf_trace_lock_acquire+0x510/0x510 [ 303.820024] ? fs_reclaim_release+0xd0/0x110 [ 303.824485] __vmalloc_node_range+0x10e/0x150 [ 303.829000] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 303.830702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=16520 comm=syz-executor.5 [ 303.834399] vmalloc_user+0x47/0xa0 [ 303.834412] ? vb2_vmalloc_alloc+0xa6/0x280 [ 303.834420] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 303.834429] vb2_vmalloc_alloc+0xa6/0x280 [ 303.834442] __vb2_queue_alloc+0x47a/0xd90 [ 303.834467] vb2_core_create_bufs+0x279/0x5a0 [ 303.834478] ? __vb2_queue_free+0x7a0/0x7a0 [ 303.834494] ? __lock_acquire+0x5fc/0x3f20 [ 303.870750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=16520 comm=syz-executor.5 [ 303.873188] vb2_create_bufs+0x2e1/0x5b0 [ 303.873207] ? vb2_thread_start.cold+0x24/0x24 [ 303.873219] ? check_preemption_disabled+0x35/0x240 [ 303.873233] ? perf_trace_lock+0xf7/0x490 [ 303.873246] vb2_ioctl_create_bufs+0x1f7/0x330 [ 303.873261] v4l_create_bufs+0xa4/0x150 [ 303.920957] __video_do_ioctl+0x65b/0x6a0 [ 303.925128] ? video_ioctl2+0x30/0x30 [ 303.929032] ? __might_fault+0x177/0x1b0 [ 303.933109] video_usercopy+0xf5/0xe90 [ 303.937010] ? video_ioctl2+0x30/0x30 [ 303.940828] ? v4l_g_ctrl+0x390/0x390 [ 303.944643] ? check_preemption_disabled+0x35/0x240 [ 303.949677] ? check_preemption_disabled+0x35/0x240 [ 303.954715] ? perf_trace_lock+0xf7/0x490 [ 303.958886] ? perf_trace_lock_acquire+0x510/0x510 [ 303.963856] v4l2_ioctl+0x1bb/0x2f0 [ 303.967500] ? v4l2_open+0x2f0/0x2f0 [ 303.971230] do_vfs_ioctl+0x75a/0xff0 [ 303.975042] ? selinux_inode_setxattr+0x730/0x730 [ 303.979917] ? ioctl_preallocate+0x1a0/0x1a0 [ 303.984340] ? lock_downgrade+0x740/0x740 [ 303.988513] ? __fget+0x225/0x360 [ 303.991983] ? security_file_ioctl+0x83/0xb0 [ 303.996405] SyS_ioctl+0x7f/0xb0 [ 303.999784] ? do_vfs_ioctl+0xff0/0xff0 [ 304.003775] do_syscall_64+0x1d5/0x640 [ 304.007689] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 304.012894] RIP: 0033:0x45d579 [ 304.016093] RSP: 002b:00007fa14ead2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 304.023819] RAX: ffffffffffffffda RBX: 000000000001f340 RCX: 000000000045d579 [ 304.029551] overlayfs: unrecognized mount option "upqerdir=./file0¹¶k¯äH×ëšZ|vŠ{"kí[ɇF÷HÁœâÂÿ› d#Ø(Ô8ðÕ+âà•Þ’Þ¨á65ÚTîqY [ 304.029551] 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}]}, 0x1c}}, 0x4000800) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:27 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$llc(r4, &(0x7f0000000100)={0x1a, 0x104, 0x6, 0x9, 0x20, 0x81}, 0x10) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f00000000c0)) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:27 executing program 1: socket$inet6(0xa, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp1\x00', 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) setxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000500)=@v2={0x2000000, [{0x7f, 0xffffb47f}, {0xfffffffd, 0x1}]}, 0x14, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x138, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd1}]}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8001, @mcast2, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbc4e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80d9}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_team\x00'}}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8008}, 0x810) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)={0x430, 0x3f4, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x2, 0x16, [0x5, 0x81, 0x6, 0xe7, 0xfbad, 0x8, 0x1, 0x5, 0x7, 0xff, 0x1000, 0x1, 0x0, 0xacab, 0xfff, 0x6e, 0x51e3e851, 0x81, 0x8, 0x7, 0x8, 0x354, 0x0, 0x9, 0x0, 0x6, 0x200, 0x20, 0x80000000, 0x3, 0xd18c, 0x0, 0x8, 0x6, 0x8, 0x6, 0xfffffff8, 0x3, 0x8, 0x9, 0x7, 0x3, 0x80000000, 0x0, 0x0, 0xd7, 0x7, 0x2, 0xe73c, 0x5, 0x5, 0x1b, 0x0, 0x170d, 0x400, 0x3f, 0x1, 0x9, 0x80000000, 0xbf06, 0x1, 0x113, 0xfffffff8, 0x6], [0x0, 0x9, 0x7, 0x6fc027a6, 0x3ff, 0x7, 0x80000001, 0x7fffffff, 0x45b, 0xfff, 0x55, 0x4, 0xfffffffd, 0x2, 0x3, 0x7b9, 0x2, 0x80000000, 0xfffff60c, 0xef, 0x6, 0x5a, 0x8, 0x6a, 0x1, 0x0, 0x12, 0x29, 0x3, 0xff, 0x3, 0xffffffff, 0x8, 0x10001, 0x10000, 0x7, 0xffffffff, 0x200, 0x4, 0x1, 0x8, 0xfff, 0x3, 0x80000001, 0x3, 0x6, 0x9, 0x4, 0x0, 0x5, 0x9, 0xfb94, 0x7fffffff, 0x5, 0x0, 0xb4363e6, 0x2448, 0x5, 0x1fb, 0xb7, 0x0, 0x10001, 0x5a60, 0x2], [0x2, 0x6, 0x1000, 0x4, 0x9, 0xfffffe01, 0x2, 0x8, 0x9, 0x1, 0x6, 0xfffffffa, 0x7, 0x80, 0x4, 0xd, 0x1, 0x9, 0x6, 0x101, 0x7, 0x7a, 0x2, 0x7fff, 0x10000, 0x325, 0xbe, 0x7, 0x785d, 0x200, 0x8, 0x7fff, 0x0, 0xfff, 0x10000, 0x7, 0x1, 0x2, 0x2, 0x6, 0x7a75, 0x2e3, 0x1, 0x7fffffff, 0x6, 0x8001, 0x5, 0x3, 0x5bcf7453, 0xcbd, 0x2, 0x3, 0x0, 0x1ff, 0x5, 0x5, 0x4, 0x1, 0x7, 0xf3, 0x9, 0x2, 0x8fd, 0x200], [0x1, 0x7ce, 0x0, 0x4, 0x6d, 0x401, 0xffff, 0x1, 0x1, 0xe21, 0x7fffffff, 0x5, 0xffffffff, 0x6, 0x9, 0x81, 0xfffffffc, 0xd0, 0x100, 0x2, 0x7, 0x4, 0xffffffff, 0x0, 0x6, 0x1, 0xfffffffe, 0x83a, 0x3, 0x5, 0x0, 0x3, 0x7f, 0x486, 0x33d, 0x3f1e73a2, 0x4, 0x0, 0x7, 0x5, 0x3, 0xb401, 0x7fffffff, 0x0, 0x4, 0x3ff, 0x433, 0x6, 0x3, 0xfffff447, 0x1, 0x8, 0x10001, 0x10000, 0xffff, 0x80, 0x2, 0x4, 0xfbe, 0xa7a, 0x7f, 0x7f, 0x80000001, 0x2], 0xd, ['-;\x00', '/dev/dsp1\x00']}, ["", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[], 0x44}}, 0x0) 06:17:27 executing program 0: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0xfffffffffffffffe, 0x9, 0x6, 0xe0e0e0e0}) set_mempolicy(0x8002, &(0x7f0000000040)=0x20, 0x3f) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x630, [0x0, 0x20000580, 0x200006be, 0x200006ee], 0x0, &(0x7f0000000000), &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x6a8) [ 304.485019] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 06:17:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="bfd5583a9dbd0b808a2c37b8583352fe0bc1c0665a8a720e6cae5e24fb963577ce42d02c9c737ca2cafe16e9ead9560ef820a0efb1fdfb9259229edb39d41ed524b22cc21151d5f077094a2dd6d78501d50234d010d2560b75dfe4ac8468d8edacf82249dc0ec32bd707a02e441642a5109b0513ea793ff34b29547716fe7fd845", 0x81}, {&(0x7f00000001c0)="2911f9d98d41884b3d7ffc5464ff93a2ecd07a15076bb3a7feaa282de1cf0cd8a3e5d645f49cd84652045e98fba722ccc1b8f6719e40", 0xfffffe02}], 0x2}, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x15, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040140}, 0x41) getdents(r1, &(0x7f0000000040)=""/46, 0x2e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r5, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r6, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000780)={0x4bc, 0x1, 0x5, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0x4d}, 0x0, 0x5, 0x2, 0x8d, 0x21, 'syz1\x00', "10de01cbff5511baafa7ba66a876b803706b17c9718e5185ef51ddcc79751394", "8d47bbf946fd4b26a4bc30e7da923070234227985a26971945ff13527ad12063", [{0x40, 0xb522, {0x0, 0x8}}, {0x9, 0x1000, {0x0, 0x200}}, {0x101, 0x7, {0x1, 0x8}}, {0x8, 0xafe7, {0x1, 0x6}}, {0x7327, 0x0, {0x2, 0x2}}, {0x8, 0xfff, {0x0, 0x6}}, {0x8, 0x8, {0x1, 0x4}}, {0x2, 0x81, {0x0, 0x1}}, {0x1ff, 0x9, {0x3, 0x8}}, {0xaf, 0x8, {0x2, 0x401}}, {0x5, 0x8000, {0x2, 0x1}}, {0x100, 0x81, {0x3, 0x98}}, {0x88, 0x1, {0x1, 0x9205}}, {0x1, 0x0, {0x1, 0x401}}, {0x3, 0x4, {0x0, 0x10000}}, {0x0, 0x6c90, {0x2, 0x5}}, {0x4, 0x14, {0x1}}, {0xffff, 0x100, {0x2, 0x2}}, {0x7, 0xadf, {0x3, 0x6}}, {0x1ff, 0x1, {0x3, 0x4780}}, {0x2, 0x2, {0x0, 0x8}}, {0x0, 0x4, {0x2, 0x4}}, {0x8, 0x1ff, {0x3, 0xc2}}, {0x1, 0x8, {0x3, 0x1}}, {0x9, 0xc6a0, {0x2, 0xc9f}}, {0x2, 0x20, {0x1, 0xe6}}, {0xbb9b, 0xc77a, {0x3, 0x7}}, {0x0, 0x400, {0x2, 0x4}}, {0xff, 0xfff, {0x0, 0x2}}, {0x3, 0x40, {0x3, 0xec1}}, {0x6, 0xffff, {0x2}}, {0x7fff, 0xf30, {0x0, 0x3}}, {0xff, 0x4, {0x2, 0x2852}}, {0xbb2, 0x5, {0x0, 0xff}}, {0x8, 0xe8, {0x1, 0x7e8}}, {0x7ff, 0x5, {0x3, 0x3ff}}, {0x1, 0xdb, {0x2, 0x4}}, {0xb41, 0xf64, {0x1, 0x5}}, {0xfffe, 0xa8a, {0x0, 0x91d}}, {0x3, 0x3ff, {0x2, 0x3}}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0x0, 0x9, 0xc000, 0x1000, 0x6, 'syz1\x00', "38ef6e74fff2d25f9be7d40908a82d991c997ac08f4a9abfdb091c7983d5fae7", "aa0aa1202357e49a7e7cb6f8ad3f7e1723e80ec59a1e9dc56e6fc7515e53c927", [{0x7f, 0x6, {0x0, 0x2}}, {0x8000, 0x2, {0x2, 0x9}}, {0x8000, 0x400, {0x0, 0x6}}, {0x3347, 0x100, {0x1, 0xa4cd}}, {0x8bba, 0x5, {0x1, 0x7fff}}, {0x2ffd, 0x3f, {0x2, 0x4}}, {0x0, 0x8f, {0x1, 0x7}}, {0x1, 0x2, {0x1, 0x200}}, {0x8001, 0x40, {0x2, 0x8000}}, {0x0, 0x101, {0x2, 0x400}}, {0x318, 0x2, {0x2}}, {0xb8e, 0x80, {0x0, 0x7ff}}, {0x1, 0x5, {0x3, 0x4e}}, {0x5, 0xc31, {0x1, 0x8001}}, {0x3ff, 0x5, {0x1, 0xab}}, {0x5, 0x4, {0x1, 0x4}}, {0x6, 0xffc0, {0x0, 0x80000000}}, {0xbd, 0xfe5e, {0x3, 0x2}}, {0xc0, 0x0, {0x2, 0x80000000}}, {0xfff8, 0x2, {0x2, 0x80000001}}, {0x13b, 0x6, {0x0, 0x2}}, {0x3, 0x9, {0x0, 0xae}}, {0x7, 0x20, {0x1, 0x8}}, {0x1, 0x3, {0x1, 0x4}}, {0x5, 0x2, {0x3, 0x1f}}, {0x8000, 0x8, {0x2, 0x9}}, {0x1, 0x40, {0x3, 0xdb010000}}, {0xfff, 0x188, {0x1, 0x9}}, {0x66c, 0x2, {0x0, 0x9}}, {0x0, 0x7, {0x1, 0x2}}, {0x7fff, 0xe, {0x2, 0xfff}}, {0x9, 0x8, {0x1, 0x10000}}, {0x6, 0xfe01, {0x0, 0x1}}, {0x2, 0x8, {0x2, 0xc0}}, {0x0, 0x1, {0x2, 0x81}}, {0x3ff, 0x313, {0x2, 0x31f}}, {0x6, 0x4, {0x2, 0x3}}, {0x2, 0xfffb, {0x0, 0x2}}, {0x9, 0x3f, {0x0, 0x80000000}}, {0x1, 0xf0b, {0x3, 0x4}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x20000080}, 0x4010) [ 304.647180] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 304.665255] Node 0 DMA32 free:282428kB min:36272kB low:45340kB high:54408kB active_anon:898868kB inactive_anon:17272kB active_file:29036kB inactive_file:94596kB unevictable:0kB writepending:808kB present:3129332kB managed:2621192kB mlocked:0kB kernel_stack:10368kB pagetables:13132kB bounce:0kB free_pcp:1072kB local_pcp:540kB free_cma:0kB [ 304.710655] lowmem_reserve[]: 0 0 0 0 0 [ 304.731777] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 304.812566] lowmem_reserve[]: 0 0 0 0 0 [ 304.817071] Node 1 Normal free:3780124kB min:53612kB low:67012kB high:80412kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 304.845710] lowmem_reserve[]: 0 0 0 0 0 [ 304.850074] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15908kB [ 304.864594] Node 0 DMA32: 292*4kB (UME) 164*8kB (UME) 355*16kB (UME) 916*32kB (UME) 498*64kB (UM) 209*128kB (UME) 133*256kB (UM) 78*512kB (UM) 24*1024kB (UE) 13*2048kB (UM) 16*4096kB (UM) = 286816kB [ 304.895547] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 304.911493] Node 1 Normal: 64*4kB (UE) 388*8kB (UE) 289*16kB (UM) 68*32kB (UM) 32*64kB (UME) 21*128kB (UM) 14*256kB (UM) 5*512kB (U) 3*1024kB (UM) 10*2048kB (UME) 912*4096kB (UM) = 3780144kB [ 304.929848] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 304.938968] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 304.947840] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 06:17:28 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB='veth'], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f0000000180)=0x100) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f00000000c0)=@ng={0x4, 0x0, "6a8436f3"}, 0x6, 0x3) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:28 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x1, [{0xfffffff4}, {}, {}, {0x800}]}}}) 06:17:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300030c000000000000000000000002000900080000006b00000000000000030006002000000002000000e0000001000000000000000002000100000000000000001600000000030005000000000002000000ac1e00010000000000000000"], 0x60}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYRESHEX, @ANYBLOB="ac14140000000000000000000000000013000000050000000000000000000001000000002afc107cbc3093c3000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500ac141400000000000000000000000000000000003200000000000000fe880000000000000000000000410f28b3a5ad11ee00"/196], 0x16c}}, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000000)) 06:17:28 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x26, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r4 = socket(0x10, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r7, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r8], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r8, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) bind$nfc_llcp(r4, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x7, 0x2, 0x2, "a6de3863aebdfb554c68d2ccb70a35a5f6c8c1bedb7a04eccc762629e59f2c164c81106f4f024453b04f48550e4e5b3cfe736ce8f76795b92c731e4662f54c", 0x34}, 0x60) 06:17:28 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000000c0)={0x7, 0x2, 0x4}) inotify_init() tkill(0x0, 0x28) bind$can_raw(r0, &(0x7f0000000000), 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}]}, 0x1c}}, 0x4000800) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:28 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ftruncate(r2, 0x1) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r1, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r3) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0x400, 0x8, 0x6, 0x5, 0x1b, "cbd099c22087f4eeabd52bcc34188ee57a91b8"}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000440)={0x0, 0x3}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1519}], 0x1) [ 304.956830] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 304.965710] 22972 total pagecache pages [ 304.969772] 0 pages in swap cache [ 304.973226] Swap cache stats: add 0, delete 0, find 0/0 [ 304.978684] Free swap = 0kB [ 304.981712] Total swap = 0kB [ 304.984757] 1965979 pages RAM [ 304.988043] 0 pages HighMem/MovableOnly [ 304.992028] 339073 pages reserved [ 304.995501] 0 pages cma reserved 06:17:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x2513fa1e, 0x0) inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x6000040) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="4dddd81513b216a105dd60c12ed1cca6d4c68cb0cf3d64c05dc10f278fa9b730c1d9c252f7f7359b4fc398c8459febbb78502aebbb3cc8d0e851560dc13d8f6238fe9c0e9dfd911c56c61bc316b2bb31e4ba1f0b5091", @ANYRES16=0x0, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x24004850) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8) recvmmsg(r2, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000100)={@private, @initdev, @empty}, &(0x7f0000000140)=0xc) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @private2={0xfc, 0x2, [], 0x1}, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x40010}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 06:17:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=ANY=[@ANYBLOB="6c010000170001000000000000000000fe8000000000000000000000000000bb0000000000cd0a140d00000000000000000000000000000000000000000000000000000000000000ac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000005000000000000000000000100000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500ac141400000000000000000000000000000000003200000000000000fe88000000000000000000000000000100000000000000000000000000000000fcffffff"], 0x16c}}, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x400040, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffeff}, 0x1c) 06:17:28 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4040) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000000c0)) [ 305.087859] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 305.114904] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 305.196943] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 305.215020] CPU: 0 PID: 16593 Comm: syz-executor.3 Not tainted 4.14.194-syzkaller #0 [ 305.222988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.232366] Call Trace: [ 305.234978] dump_stack+0x1b2/0x283 [ 305.238657] warn_alloc.cold+0x96/0x1cc [ 305.242652] ? zone_watermark_ok_safe+0x220/0x220 [ 305.247520] ? perf_trace_lock_acquire+0x510/0x510 [ 305.252478] ? perf_trace_lock_acquire+0x510/0x510 [ 305.257436] ? fs_reclaim_release+0xd0/0x110 [ 305.261869] __vmalloc_node_range+0x10e/0x150 [ 305.266388] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 305.271779] vmalloc_user+0x47/0xa0 [ 305.276816] ? vb2_vmalloc_alloc+0xa6/0x280 [ 305.281150] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 305.286899] vb2_vmalloc_alloc+0xa6/0x280 [ 305.291076] __vb2_queue_alloc+0x47a/0xd90 [ 305.295347] vb2_core_create_bufs+0x279/0x5a0 [ 305.299861] ? __vb2_queue_free+0x7a0/0x7a0 [ 305.304201] ? __lock_acquire+0x5fc/0x3f20 [ 305.308463] vb2_create_bufs+0x2e1/0x5b0 [ 305.312577] ? vb2_thread_start.cold+0x24/0x24 [ 305.317198] ? check_preemption_disabled+0x35/0x240 [ 305.322248] ? perf_trace_lock+0xf7/0x490 [ 305.326426] vb2_ioctl_create_bufs+0x1f7/0x330 [ 305.331032] v4l_create_bufs+0xa4/0x150 [ 305.335025] __video_do_ioctl+0x65b/0x6a0 [ 305.339210] ? video_ioctl2+0x30/0x30 [ 305.343033] ? __might_fault+0x177/0x1b0 [ 305.347122] video_usercopy+0xf5/0xe90 [ 305.351030] ? video_ioctl2+0x30/0x30 [ 305.354840] ? v4l_g_ctrl+0x390/0x390 [ 305.358654] ? check_preemption_disabled+0x35/0x240 [ 305.363680] ? check_preemption_disabled+0x35/0x240 [ 305.368702] ? perf_trace_lock+0xf7/0x490 [ 305.372846] ? perf_trace_lock_acquire+0x510/0x510 [ 305.377788] v4l2_ioctl+0x1bb/0x2f0 [ 305.381427] ? v4l2_open+0x2f0/0x2f0 [ 305.385137] do_vfs_ioctl+0x75a/0xff0 [ 305.388976] ? selinux_inode_setxattr+0x730/0x730 [ 305.393827] ? ioctl_preallocate+0x1a0/0x1a0 [ 305.398353] ? lock_downgrade+0x740/0x740 [ 305.402529] ? __fget+0x225/0x360 [ 305.406179] ? security_file_ioctl+0x83/0xb0 [ 305.410610] SyS_ioctl+0x7f/0xb0 [ 305.413978] ? do_vfs_ioctl+0xff0/0xff0 [ 305.418274] do_syscall_64+0x1d5/0x640 [ 305.422231] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 305.427476] RIP: 0033:0x45d579 [ 305.430672] RSP: 002b:00007fa14ead2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 305.438474] RAX: ffffffffffffffda RBX: 000000000001f340 RCX: 000000000045d579 06:17:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x0, @broadcast, 0x4e24, 0x3, 'ovf\x00', 0x1, 0xf8, 0x70}, {@rand_addr=0x64010100, 0x4e24, 0x10000, 0xfff, 0xfffffffe, 0x40}}, 0x44) 06:17:28 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="c733970762fa46f5ff189960dceaab58fca7aa0c976d08baedda0a8f3b6c123a67d5fd5ccbd1a14eefaac8d60e5627ce14fa391b6e03d4c0c45ecd2bbe52fc327fa1d4d76b92c36def19264f2c8737baeb145d290cc1d9c67d9319934d6169b7a481fc708f74965dd178127303a6fe6dc4a11d4437a62fb5dfb6df54bf87a15052a5b0d3ea671366655dbab273088769822687cd394bad288aae59e00fdff10904bdd9a8ffed0b478659179548949a170323541d2dea", 0xb6}], 0x1}, 0x2810) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x9, 0x7, 0x2d0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 305.445755] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 305.453152] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 305.460510] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 305.467796] R13: 00007ffc763ef02f R14: 00007fa14ead39c0 R15: 000000000118cf4c 06:17:29 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000000)={0xa, {0x2, 0x1, 0xd7}}, 0xa) exit_group(0x0) keyctl$get_keyring_id(0x0, 0x0, 0x6) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x4, 0x5, 0xfffffffffffffc00}) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x24000005) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) sendmsg$nl_netfilter(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xc8, 0x8, 0x6, 0x301, 0x70bd29, 0x25dfdbfe, {0x3, 0x0, 0x8}, [@generic="16eea8a0be64a2639b0da5122f9019febe3643f209e3930d", @generic="50f88382661a96c6423b1958a07705b40d8005a3caa5cb3d802a97007dc95e0f502f3ba55a4283b8e77c284c6d134c927d5ffb54604ab60ff1dc36647a90b6d9f207d56a044ff0813ed5185f77ceac9ee537803b8495cc8ce2b4454d43e20eb5b8379fab9e536032eaa0902ba64bcb158716c4d58ca33bf3d2296ed4c730f5a7c1a99128607cf6422c0dfcfebfcc1674a08f839c59290420804a01"]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 305.531452] Mem-Info: [ 305.538534] active_anon:225157 inactive_anon:4318 isolated_anon:0 [ 305.538534] active_file:7306 inactive_file:22817 isolated_file:0 [ 305.538534] unevictable:0 dirty:213 writeback:0 unstable:0 [ 305.538534] slab_reclaimable:17579 slab_unreclaimable:124298 [ 305.538534] mapped:61592 shmem:4506 pagetables:3268 bounce:0 [ 305.538534] free:1020531 free_pcp:193 free_cma:0 [ 305.581009] Node 0 active_anon:900828kB inactive_anon:17272kB active_file:29088kB inactive_file:91268kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:246468kB dirty:844kB writeback:0kB shmem:18024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 868352kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 06:17:29 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 305.633895] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 305.695586] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 305.745333] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 305.757855] Node 0 DMA32 free:281500kB min:36272kB low:45340kB high:54408kB active_anon:904940kB inactive_anon:17272kB active_file:29088kB inactive_file:91268kB unevictable:0kB writepending:844kB present:3129332kB managed:2621192kB mlocked:0kB kernel_stack:10752kB pagetables:13220kB bounce:0kB free_pcp:1200kB local_pcp:624kB free_cma:0kB [ 305.819282] lowmem_reserve[]: 0 0 0 0 0 [ 305.828199] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 305.857409] lowmem_reserve[]: 0 0 0 0 0 [ 305.863691] Node 1 Normal free:3780144kB min:53612kB low:67012kB high:80412kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 305.904915] lowmem_reserve[]: 0 0 0 0 0 [ 305.910003] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15908kB [ 305.926132] Node 0 DMA32: 69*4kB (UME) 260*8kB (UME) 446*16kB (UME) 918*32kB (UME) 498*64kB (UM) 209*128kB (UME) 133*256kB (UM) 78*512kB (UM) 24*1024kB (UE) 11*2048kB (UM) 16*4096kB (UM) = 284116kB [ 305.946972] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 305.958571] Node 1 Normal: 64*4kB (UE) 388*8kB (UE) 289*16kB (UM) 68*32kB (UM) 32*64kB (UME) 21*128kB (UM) 14*256kB (UM) 5*512kB (U) 3*1024kB (UM) 10*2048kB (UME) 912*4096kB (UM) = 3780144kB [ 305.993161] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 306.036318] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 306.047546] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 306.058032] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 306.069390] 22979 total pagecache pages [ 306.073996] 0 pages in swap cache [ 306.083046] Swap cache stats: add 0, delete 0, find 0/0 [ 306.089827] Free swap = 0kB [ 306.094229] Total swap = 0kB [ 306.103603] 1965979 pages RAM [ 306.113106] 0 pages HighMem/MovableOnly [ 306.125154] 339073 pages reserved 06:17:29 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffff4}, {}, {}, {}, {0x0, 0x2}]}}}) r3 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000140)={0x2, 0x0, [], {0x0, @reserved}}) 06:17:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x4d4, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x184000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x1, 0x8, 0x801, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x24040001}, 0x20008810) 06:17:29 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000000)=""/30, &(0x7f00000000c0)=0x1e) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:29 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000, 0x0) r2 = gettid() fcntl$lock(r1, 0x5, &(0x7f00000000c0)={0x1, 0x1, 0x243c5eab, 0x8, r2}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000380)=0x9, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x50000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x42011}, 0x48000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="1eeef6044c4917b42e99a6865875fa2e2b83265d51a4359fcd59ae288881c3a99f259c2bccd11814ab1944ddf40021371ae4914aabba6df8b380b23264a61365"], 0x3c}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800000010000104fd0004000000000000000000", @ANYRESOCT=r1, @ANYRES32=r6, @ANYRES32], 0x28}}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000240)={0x0, 0x80000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000400)={r7, &(0x7f00000003c0)=""/35}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000f8ff020000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0014"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x5, 0x0, 0x0, r5}}, 0x20}}, 0x0) 06:17:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x33) r3 = inotify_init1(0x0) fcntl$setstatus(r3, 0x4, 0x43800) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r4 = gettid() rt_sigprocmask(0x0, &(0x7f0000000080)={[0xfffffffffffffffd]}, 0x0, 0x8) fcntl$setownex(r3, 0xf, &(0x7f0000000240)={0x0, r4}) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0xa400295c) fcntl$notify(r3, 0xa, 0x30) fsetxattr$security_capability(r2, &(0x7f0000000140)='security.capability\x00', 0x0, 0x0, 0x0) [ 306.136343] 0 pages cma reserved 06:17:29 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40000, 0x24) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000040)={0x6, 0x1}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) 06:17:29 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:29 executing program 0: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r2, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32, @ANYBLOB="e3e986140005000000be00000000fcb0813e61c85ab26b51d707bcd8322a52331855913d8f778a23077482011139958129798aa229e5345a4ef60b86f5c99202c370509db28e89c2397694a539992fdb87805860db2e85ba4ccb5b1779cb6a7a9230741c9bcf2e35bbc2baab820c894240838cf05853afb8134377b696ded0690d46a11b7bc0fa80ffd43caab1f8250b5831a5d400"/165], 0x2c}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x4030) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 06:17:29 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x4, &(0x7f0000000440)=[{&(0x7f0000000100)="5a57fe81ae20f60c06719fcd3cb46fd4212ee51a43cdf331b337f0ead30fd4de8cf3c376cd078f6271454a20b5d17bc36e6f9c841b960ee9fd3102d2d6a83b6aa351737bba04a11d2a73a5fc651a41aba04c24cd9a6d679c96e93148cc216e979f05d4087e52c14cf05f84fbf4bc30b515e3d27cdee68ae6a0a4b3f65dc8dc685cc27efd0878a4896ceabe3080e7eedddde18761a919c225", 0x98, 0x7}, {&(0x7f0000000280)="7d742c716c308cebf0017dc81769f90b12297c849af96b9d1e7574b612558a867969e1f9371bb2aa1486df98f85fe26aa1fde319110bbd447867945fc97a85d08a736c366d9d400ce18f1e5aa0d49b8b3694f1009fdc51f957e9ae730a10ae33affa616db861683a13d48895744590779ea6228b9589101b3d010589382d199f1a2c1ed68f27da3afbeba011fa790f7be718f3c8c0d299d931b161ef13f6c328a391836ad59f8999e3aac18fcffe94fb379d23f347532597658b1a8ccb4b91a178658b6082f7a72e4062137d4adc1982d84f4487d1790dc758a9c2d7966ef8632f22da84f0c0158dba9b7f5a924b1d4f7eb9af682ed0f3e0", 0xf8, 0x10001}, {&(0x7f00000001c0)="465f080f2fe365704e46459f690eb0e98779e94b142f79f73888d7e0acb28da52a2ca0d8b8275583393438d71084849a396c932573d152dec781bb891f7b016faf5aa0675e0a4ef51fc37be340e78aadf89b49120945ed7b5b4b4b55387adb0f5299313ec9dc800b18ae33e7518e2bed4abfec23829d", 0x76, 0x3f}, {&(0x7f0000000380)="ef87f5b4aae6b48556cd67bc48b37ff5395a0cb167944950f1d9972cdb2e6637a2c7f3a8ec49b89d6d869fd6d6452c36e8f15587b9ce4346997687116965d52d568f9ca4a1684a329dd62ae7c880bb65c3a74ba6a34fead8e27852fe515ab1f70fcb13ba54d80870399df3e28c67e9bbd19ebf5ea086cffe8aeb9e52313b8687f2cf2c2a223372100b2b95cead", 0x8d, 0x2}], 0x90018, &(0x7f0000000580)=ANY=[@ANYBLOB="757466382c73686f775ff379735f66696c65733d6e6f2c64697361626c655f7370617273653d7965722c796d61736b3d30303030303030303030303030303030303030303430302c646f6e745f6102707261697365ffda6a08799ef535ef2c00"]) getdents(r0, &(0x7f0000000040)=""/52, 0x34) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000500)=0xb9) setsockopt$inet_dccp_int(r2, 0x21, 0x4, &(0x7f00000004c0)=0x8, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 306.297304] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) 06:17:29 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0xece) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x200080, 0x0) fcntl$setsig(r1, 0xa, 0x12) ioctl$TCGETX(0xffffffffffffffff, 0x5432, &(0x7f0000000080)) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) recvmmsg(r2, &(0x7f0000004800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = dup2(r1, r2) mmap$snddsp_control(&(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x52a8c0a7a680b20d, 0x50, r3, 0x83000000) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x16) [ 306.358408] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 306.391310] CPU: 1 PID: 16681 Comm: syz-executor.3 Not tainted 4.14.194-syzkaller #0 [ 306.399241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.408645] Call Trace: [ 306.411250] dump_stack+0x1b2/0x283 [ 306.414899] warn_alloc.cold+0x96/0x1cc [ 306.418895] ? zone_watermark_ok_safe+0x220/0x220 [ 306.423761] ? perf_trace_lock_acquire+0x510/0x510 [ 306.428712] ? perf_trace_lock_acquire+0x510/0x510 [ 306.433667] ? fs_reclaim_release+0xd0/0x110 [ 306.438108] __vmalloc_node_range+0x10e/0x150 [ 306.442624] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 306.448008] vmalloc_user+0x47/0xa0 [ 306.451662] ? vb2_vmalloc_alloc+0xa6/0x280 [ 306.456007] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 306.461391] vb2_vmalloc_alloc+0xa6/0x280 [ 306.465559] __vb2_queue_alloc+0x47a/0xd90 [ 306.469846] vb2_core_create_bufs+0x279/0x5a0 [ 306.474367] ? __vb2_queue_free+0x7a0/0x7a0 [ 306.475193] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 306.478733] ? __lock_acquire+0x5fc/0x3f20 [ 306.478751] vb2_create_bufs+0x2e1/0x5b0 [ 306.478768] ? vb2_thread_start.cold+0x24/0x24 [ 306.478779] ? check_preemption_disabled+0x35/0x240 [ 306.478792] ? perf_trace_lock+0xf7/0x490 [ 306.478804] vb2_ioctl_create_bufs+0x1f7/0x330 [ 306.478826] v4l_create_bufs+0xa4/0x150 [ 306.478840] __video_do_ioctl+0x65b/0x6a0 [ 306.478855] ? video_ioctl2+0x30/0x30 [ 306.515411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16692 comm=syz-executor.0 [ 306.518166] ? __might_fault+0x177/0x1b0 [ 306.518183] video_usercopy+0xf5/0xe90 [ 306.518195] ? video_ioctl2+0x30/0x30 [ 306.518206] ? v4l_g_ctrl+0x390/0x390 [ 306.518218] ? check_preemption_disabled+0x35/0x240 [ 306.518231] ? check_preemption_disabled+0x35/0x240 [ 306.518245] ? perf_trace_lock+0xf7/0x490 [ 306.518256] ? perf_trace_lock_acquire+0x510/0x510 [ 306.518269] v4l2_ioctl+0x1bb/0x2f0 [ 306.518282] ? v4l2_open+0x2f0/0x2f0 [ 306.532003] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 306.538357] do_vfs_ioctl+0x75a/0xff0 [ 306.538371] ? selinux_inode_setxattr+0x730/0x730 [ 306.538382] ? ioctl_preallocate+0x1a0/0x1a0 [ 306.538392] ? lock_downgrade+0x740/0x740 [ 306.538409] ? __fget+0x225/0x360 [ 306.538424] ? security_file_ioctl+0x83/0xb0 [ 306.538436] SyS_ioctl+0x7f/0xb0 [ 306.538444] ? do_vfs_ioctl+0xff0/0xff0 [ 306.538455] do_syscall_64+0x1d5/0x640 [ 306.538473] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 306.538482] RIP: 0033:0x45d579 [ 306.538487] RSP: 002b:00007fa14ead2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.538497] RAX: ffffffffffffffda RBX: 000000000001f340 RCX: 000000000045d579 [ 306.538502] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 306.538507] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 306.538512] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 306.538517] R13: 00007ffc763ef02f R14: 00007fa14ead39c0 R15: 000000000118cf4c 06:17:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2}}}}, 0x128}}, 0x0) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x108052e0}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)={0x424, 0x3f3, 0x300, 0x70bd2a, 0x25dfdbfc, {0xd084edea73046e6f, 0x2, 0x40, [0x80000001, 0x6, 0x4, 0x0, 0x58, 0x5, 0x2, 0x18ab, 0x955a, 0xff, 0x3, 0x2, 0x360, 0x10000, 0x0, 0xfffff50a, 0x0, 0xffff, 0x80000001, 0x1, 0x20000, 0x1fab, 0x1, 0x7ff, 0xe53, 0x1, 0xfff, 0x3c, 0x3, 0xf7ffffff, 0x4, 0x8, 0xffff1ef4, 0x2, 0x6, 0x0, 0x101, 0x0, 0xe8c, 0x8, 0x2, 0x0, 0x2, 0x6, 0x80000001, 0x9, 0x2, 0xfffffffd, 0x8001, 0x2a, 0x0, 0x7fff, 0x800, 0xb2f, 0x60000, 0xfffffeff, 0x2, 0x5, 0x1, 0xf6, 0x7ff, 0xc01b, 0x46, 0xfffffff9], [0x8, 0x8, 0x30aa, 0x4, 0x6, 0xff, 0x101, 0x8, 0x90b1, 0x101, 0x3, 0x0, 0x9, 0x0, 0x5, 0x3, 0x3, 0xff, 0x1, 0xfffff3ab, 0x156c, 0x1, 0x8000, 0x1ff, 0x3, 0x7, 0x9, 0x9, 0x4, 0x6, 0x4, 0xf0dc, 0x0, 0x7, 0x7f, 0x10001, 0x52c2, 0x1118, 0x4ea3, 0xfffffffb, 0xc4ae, 0x6, 0x101, 0x0, 0x6, 0x9, 0x0, 0xffffffff, 0x6, 0x0, 0x5, 0x3f, 0x401, 0x2, 0x6938, 0x7331, 0x7, 0x8, 0x1ff, 0x2, 0x4, 0x4, 0x7, 0x2], [0x3, 0x81, 0x3, 0x5, 0x101, 0x2d, 0x7ff, 0x2, 0x1f, 0x5, 0xe7, 0x800, 0x7f, 0x80, 0x9, 0x7, 0x0, 0x7, 0x0, 0x1, 0x87, 0x7, 0x4, 0x7fffffff, 0x9, 0x4, 0x4, 0x1, 0x10000, 0xcb75, 0x7, 0x6, 0x5, 0x8, 0xc40, 0x100, 0x8, 0x1003, 0x8, 0x7, 0x921, 0x10000, 0x401, 0x3000000, 0x5, 0xfffffff9, 0x20, 0x7f, 0xff, 0x3a, 0x8, 0x8e40, 0xf48, 0x1, 0x8001, 0x1, 0x1000, 0x7, 0x1, 0x20, 0xffff, 0x200, 0x7f, 0x1], [0x1, 0x3, 0x3, 0x0, 0x7, 0x6, 0x0, 0x8, 0x8, 0x7, 0x8, 0x3, 0x400, 0x6e51, 0x9, 0xb0, 0x5, 0x80000000, 0xbaef, 0x0, 0x3, 0x4771, 0x6, 0xd31, 0x9, 0x0, 0x5, 0x1000, 0x4b30, 0xffffffff, 0x9, 0x0, 0xffffffff, 0x8049, 0xcb, 0x9, 0x4, 0x6, 0x200, 0xf241, 0x80000001, 0x4, 0x9, 0x20, 0x750, 0x1, 0xfffffffa, 0x3ff, 0x9, 0x8000, 0xfff, 0x1000, 0x2, 0x8, 0x76a, 0x0, 0x7, 0x2105, 0x6, 0x1, 0xc0000000, 0x4, 0x53eb, 0xffffffff], 0x3, ['\x00', '\x00', '\x00']}, [""]}, 0x424}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r1 = signalfd(r0, &(0x7f0000000000)={[0xf44a]}, 0x8) r2 = syz_mount_image$tmpfs(&(0x7f0000000300)='tmpfs\x00', &(0x7f0000000340)='./file0\x00', 0x8206, 0x1, &(0x7f0000000440)=[{&(0x7f0000000380)="4328139f6376d6327d5623d723b070b610ca8e6fa395eeddd1104be2fc04fcef70114e660fef60295f1222e5b22cb2b7fcc68bdc37a68e071a4b68fe89791dd6b2fb7fe6af6cce071ece2bcab14b0bbf38b5d9b70ab18199c5454ff433aa2f3ddc2e862c61ca0c0ba49c2b664f645e8d5d41bd801df068e85d4c8d644b0f7a8b7e56e05f6e02bf14a4e8b20c64f607377f4d0cd818927cb2d35348ade6639e6eb4172a91fb3beaa6384098834c4ed70894fc9a4c63179656181d0d03bcb8ea", 0xbf, 0x1}], 0x2040, &(0x7f0000000480)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@huge_advise={'huge=advise', 0x3d, '\x00'}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@size={'size', 0x3d, [0x65, 0x33, 0x36, 0x31, 0x65]}}, {@huge_advise={'huge=advise', 0x3d, '+'}}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x74]}}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@appraise='appraise'}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@permit_directio='permit_directio'}, {@smackfsdef={'smackfsdef', 0x3d, ':'}}]}) unlinkat(r2, &(0x7f0000000540)='./file0\x00', 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14010000230000082cbd7000ffdbdf250000000034001700060000002dbd70002bbd700027bd700026bd7000fdffffff07000000020000000800000008000000830d00000900000008001600b87ab75a14000e00fc010000000000000000000000000000940008009000080000088800a81389b05ccfb34f4bda240e01522dc13c7f6100b5efc530d236b79459076f962b1c9193876d9f203fa7d36fc4e6ff26aaa155ac495737c1d50e418f55a71e73482745317a2af5a95bf3343cf53225b7d8bec4d3533be988481327b689c159361cf6971cfd6895317b6fa05d01235df9889da745c6adeffb187025a158becc1b70f2640bda0927000200006014000d00ac14144100000000000000000000000008001600000200007a5e0d668cb5772afda91c1227a199efb02b6b42d1e165bc2e917080a3db56dfd1f31cd8de14c469ceca121ba8a8b048eedb8d650389d2b62d003b52286c14d14999043a3582f763d0660d2be4edc4b85bd673526231065456c023596196eec303d176626787899620908b43fc245fa054ce4ed5d581d35d064a7970ecf564b9db5cdc242ed868c8f3044adb9a3895e69d483a446bfc33d0604c2b88eaed2b2a36acf3118f347e02cb37a3fefa09d6d0ae"], 0x114}, 0x1, 0x0, 0x0, 0x840}, 0x24000891) r3 = socket(0x10, 0x803, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f00000015c0)=""/4096, 0x1000) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r6, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r7], 0x38}}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r7, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00'/20, @ANYRES32=r8, @ANYBLOB="14000200fe8000"/20], 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000b40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1080}, 0xc, &(0x7f00000005c0)={&(0x7f0000000ac0)={0xfe8c, 0x3, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_NAT_SRC={0x6c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_PROTO={0x0, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x0, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x0, 0x1, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4a24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20002001}, 0x80) [ 306.692883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16708 comm=syz-executor.0 [ 306.857663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16719 comm=syz-executor.2 [ 306.910963] Mem-Info: [ 306.917867] active_anon:226432 inactive_anon:4318 isolated_anon:0 [ 306.917867] active_file:7306 inactive_file:22824 isolated_file:0 [ 306.917867] unevictable:0 dirty:220 writeback:0 unstable:0 [ 306.917867] slab_reclaimable:17453 slab_unreclaimable:124432 [ 306.917867] mapped:61625 shmem:4506 pagetables:3323 bounce:0 [ 306.917867] free:1019041 free_pcp:280 free_cma:0 [ 306.968709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16729 comm=syz-executor.2 [ 306.993211] Node 0 active_anon:905728kB inactive_anon:17272kB active_file:29088kB inactive_file:91296kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:246500kB dirty:872kB writeback:0kB shmem:18024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 866304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 307.061895] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 307.127623] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 307.154178] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 307.159579] Node 0 DMA32 free:282232kB min:36272kB low:45340kB high:54408kB active_anon:902780kB inactive_anon:17268kB active_file:29092kB inactive_file:91320kB unevictable:0kB writepending:892kB present:3129332kB managed:2621192kB mlocked:0kB kernel_stack:10400kB pagetables:13016kB bounce:0kB free_pcp:1384kB local_pcp:648kB free_cma:0kB [ 307.191752] lowmem_reserve[]: 0 0 0 0 0 [ 307.200908] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 307.232258] lowmem_reserve[]: 0 0 0 0 0 [ 307.236667] Node 1 Normal free:3780144kB min:53612kB low:67012kB high:80412kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 307.273089] lowmem_reserve[]: 0 0 0 0 0 [ 307.277355] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15908kB [ 307.296497] Node 0 DMA32: 237*4kB (UM) 179*8kB (UME) 284*16kB (UME) 934*32kB (UME) 499*64kB (UME) 210*128kB (UME) 133*256kB (UM) 78*512kB (UM) 24*1024kB (UE) 13*2048kB (UM) 15*4096kB (U) = 282252kB [ 307.319987] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 307.331869] Node 1 Normal: 64*4kB (UE) 388*8kB (UE) 289*16kB (UM) 68*32kB (UM) 32*64kB (UME) 21*128kB (UM) 14*256kB (UM) 5*512kB (U) 3*1024kB (UM) 10*2048kB (UME) 912*4096kB (UM) = 3780144kB [ 307.354455] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 307.363755] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 307.378078] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 307.389829] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 307.401272] 22986 total pagecache pages [ 307.405421] 0 pages in swap cache [ 307.412252] Swap cache stats: add 0, delete 0, find 0/0 [ 307.420481] Free swap = 0kB [ 307.423640] Total swap = 0kB [ 307.429502] 1965979 pages RAM 06:17:30 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffff3}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}]}}}) 06:17:30 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x3ff]}, 0x8, 0x80000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:30 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x80c81, 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r2, &(0x7f0000000140)="8859ff42c62ba95065f4c7cc5bc505d61358d9e1cd57a191a2a77f6f241a98b6d5ea7f1e234327d621be28f763316663dcb93958d79b3cdee2b4aa091051d963df18372aa44acfb0837c3a7dbe706a54b9621ef76db79b76ecbff356d793609c8c5e7b42f5fdc61b0c49f9ccb9bcb6522b12e0532fc4641636f0004d842b675b0ccad8effe3a104ecb5c565280c0b2f5795768af6c0010fd9d94fb26580610fb95afe9ef6d865cb246546985873eaae21bb0b9748698b4523ac1eb443dad0ec71d62def612130529376286f962e0a541f91055de16f56bfd7383a11a097889cfc997090faa21d2e17999019962c6e90556e491797c6aa45b2d", 0xf9, 0x404c0c1, 0x0, 0x0) dup2(r0, r1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) 06:17:30 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/dev\x00') getdents(r1, &(0x7f0000000040)=""/18, 0x12) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000300)=""/149) syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x80000001, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="aae30671b83ebadfd86328bb9f421230983f58128a37f6e9e9b680afc44a2b0d31dfaf9c28c3dc0c8484124866ccedb5c567f36003da10c5aa7b35dbc0095fab7f03452491ba1f144b9fa0b98f55bdd62a5b51e7194c2b29c0ffa897624fd75cddbbc35385399de4c85f262646dcc0a0d674207cf299c528851fa5eb6eb386b0da0add8b", 0x84, 0x4}, {&(0x7f0000000200)="e6d7f06804e508516eb540c951ef34ad33f5b4c2b013b31115240f7c37844eaf", 0x20, 0x2}], 0x2082000, &(0x7f0000000280)=ANY=[@ANYBLOB="646f6e745f686173682c646f6e745f61707072616973652c726f6f74636f6e746578743d756e636f6e66696ea0245f752c6673636f6e746576743d756e636f6e66696e65645f752c657569643e", @ANYRESDEC=0xee01, @ANYBLOB=',rootcontext=user_u,\x00']) 06:17:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c010000170001000000000000000000fe8000000000000000000000000000bb0000000000000000ac14140000000000000000000000000000000000000000000000000000000000ac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14300000000000000000000000000000000000050000000000dfffffffff000000000008000000020000012d44215f45854982cde480e90000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500ac141400000000000000000000000000000000003200000000000000fe88000000000000000000000000000100"/196], 0x16c}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000000)={0x0, @reserved}) [ 307.432752] 0 pages HighMem/MovableOnly [ 307.439707] 339073 pages reserved [ 307.443362] 0 pages cma reserved 06:17:31 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x4000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 307.523451] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 307.553079] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 307.581271] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 307.596801] syz-executor.3 cpuset=/ mems_allowed=0-1 06:17:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r1], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000100)=0x1, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) r5 = creat(&(0x7f0000000380)='./file0\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) write(r4, &(0x7f0000000100), 0x2c9f9de1) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r7 = memfd_create(&(0x7f00000003c0)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xfbmZ\x84~\x9e\xf6\xb7\xc0\x8ac\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vn\xe0\x8d\x8a\xf2g\xeb\xa2q\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xab\xecoB\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4{\xdd~\xe5\xbf\xc0]l\xf7\x00'/151, 0x0) pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000007c0)="cdfdfd", 0x3}], 0x1, 0x48180a, 0x0) sendfile(r6, r7, 0x0, 0x20000102000003) [ 307.626024] CPU: 0 PID: 16752 Comm: syz-executor.3 Not tainted 4.14.194-syzkaller #0 [ 307.633962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.643339] Call Trace: [ 307.645939] dump_stack+0x1b2/0x283 [ 307.649583] warn_alloc.cold+0x96/0x1cc [ 307.653578] ? zone_watermark_ok_safe+0x220/0x220 [ 307.658442] ? perf_trace_lock_acquire+0x510/0x510 [ 307.663395] ? perf_trace_lock_acquire+0x510/0x510 [ 307.668402] ? fs_reclaim_release+0xd0/0x110 06:17:31 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8082000}, 0xc, &(0x7f0000000380)={&(0x7f0000000c80)={0x288, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x80, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x38, 0x3, "3e2b8092c7a081d7a6f0ab2e926f319a8e405556bf094cf319410d9486699c0db2a386a57766959864e214987543822757a6fc03"}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "0b398453cbad97ee43feb99a7103e961d931d55bc8b118c5f8401d"}}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff801}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0xd4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc6, 0x3, "3d2b3b575495e61dc7c6480eaef7226c11d28daac7c35e37936dda163117309c48d23a80c3010c8b0a69ae64d49fddc8ea84cfed7d8c9059c6b6de45cf5a1b2e1049bde64ababfa2f50b4065f5d4f1e89b1c4839b742d0f6f7ac7d30fac7a6ceb7badc41c396bd0a3ec4310d2d49f52a0398334ac24a9dcf335f6f77280db5d52b966d21c826861a425949715a30ac8cc55c85a421758969c600a5dfd14245d0e81c2f215c11656190e62f7006d04c62d30c09edf433ade2ed8d64c0c216399f6e64"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @mcast1, 0x7fffffff}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x10000, @loopback, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd8e1}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000580)={0x401, 0x20f4, 0x8, 0x0, 0x1}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x9, 0x800, 0xff0e) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="19aca0898203e1ebffdfe2c68e2fb3127f73b6dbafdc357b64aa6f305ff51321544d47befbd7d0f86bfe078234e7d5feea4d98b63f3275d6a2be890900000000000000ab84570b6c0d684179c98416ab8e10d8b5095754c699f0b0c45db4cef8f7d853d37d463468e63f58be370bd6c733b8cdfa9213e29dd16056ed2d430f24c481cd97759a9d40ffc117e38c1043", @ANYRES16=r3, @ANYBLOB="00032abd7000fbdbdf2512000000240009800800010006000000080002000000000008000100ffffffff080001000900000008000280040004008800018014000280080001001e00000008000300070000002c0002800800040006000000080402000700000008000300d7000000080003000700000008000200010001000c00028008000100170000000c000280080002005c0700002c0004001400010002004e21ffffffff00000000000000001400020002004e2400"/194], 0xc8}, 0x1, 0x0, 0x0, 0x800c003}, 0x4) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000000)) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r7, 0x80845663, &(0x7f0000000280)) [ 307.672841] __vmalloc_node_range+0x10e/0x150 [ 307.677372] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 307.682753] vmalloc_user+0x47/0xa0 [ 307.686395] ? vb2_vmalloc_alloc+0xa6/0x280 [ 307.690736] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 307.696118] vb2_vmalloc_alloc+0xa6/0x280 [ 307.700294] __vb2_queue_alloc+0x47a/0xd90 [ 307.704572] vb2_core_create_bufs+0x279/0x5a0 [ 307.709085] ? __vb2_queue_free+0x7a0/0x7a0 [ 307.713426] ? __lock_acquire+0x5fc/0x3f20 [ 307.717680] vb2_create_bufs+0x2e1/0x5b0 [ 307.721772] ? vb2_thread_start.cold+0x24/0x24 06:17:31 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/234, 0xea) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@local, @in6=@dev={0xfe, 0x80, [], 0x3c}, 0x4e21, 0x91, 0x4e21, 0xb6dd, 0x2, 0x0, 0x80, 0x8, 0x0, r1}, {0x2, 0x3, 0x0, 0x6, 0x80, 0x0, 0x2, 0x800}, {0x5, 0x10001, 0x7db6, 0x7}, 0x200, 0x0, 0x4, 0x0, 0x2, 0x2}, {{@in6=@local, 0x4d3, 0x33}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3504, 0x2, 0x2, 0x1, 0x200002, 0xddd6, 0x7fffefff}}, 0xe8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000100)) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) sendmsg$nl_xfrm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=ANY=[@ANYBLOB="6c010000170001000000000000000000fe8000000000000000000000000000bb0000000000000000ac14140000000000000000000000000000000000000000000000000000000000ac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14140000000000000000000000000000000000050000000000000000000000ffffffffffffe1000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000fdffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000044000500ac141400000000000000000000000000000000003200000000000000fe88000000000000000000000000000100"/196], 0x16c}}, 0x0) [ 307.726375] ? check_preemption_disabled+0x35/0x240 [ 307.731414] ? perf_trace_lock+0xf7/0x490 [ 307.735618] vb2_ioctl_create_bufs+0x1f7/0x330 [ 307.740225] v4l_create_bufs+0xa4/0x150 [ 307.744223] __video_do_ioctl+0x65b/0x6a0 [ 307.748396] ? video_ioctl2+0x30/0x30 [ 307.752218] ? __might_fault+0x177/0x1b0 [ 307.756304] video_usercopy+0xf5/0xe90 [ 307.760214] ? video_ioctl2+0x30/0x30 [ 307.764131] ? v4l_g_ctrl+0x390/0x390 [ 307.767942] ? check_preemption_disabled+0x35/0x240 [ 307.772982] ? check_preemption_disabled+0x35/0x240 [ 307.778024] ? perf_trace_lock+0xf7/0x490 [ 307.782195] ? perf_trace_lock_acquire+0x510/0x510 [ 307.787144] v4l2_ioctl+0x1bb/0x2f0 [ 307.790778] ? v4l2_open+0x2f0/0x2f0 [ 307.794514] do_vfs_ioctl+0x75a/0xff0 [ 307.798327] ? selinux_inode_setxattr+0x730/0x730 [ 307.803181] ? ioctl_preallocate+0x1a0/0x1a0 [ 307.807609] ? lock_downgrade+0x740/0x740 [ 307.811771] ? __fget+0x225/0x360 [ 307.815234] ? security_file_ioctl+0x83/0xb0 [ 307.819653] SyS_ioctl+0x7f/0xb0 [ 307.823034] ? do_vfs_ioctl+0xff0/0xff0 [ 307.827034] do_syscall_64+0x1d5/0x640 [ 307.830934] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 307.836135] RIP: 0033:0x45d579 [ 307.839414] RSP: 002b:00007fa14ead2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.847141] RAX: ffffffffffffffda RBX: 000000000001f340 RCX: 000000000045d579 [ 307.854403] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 307.861665] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 307.868927] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 307.876205] R13: 00007ffc763ef02f R14: 00007fa14ead39c0 R15: 000000000118cf4c 06:17:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000100), &(0x7f0000000140)='*\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='/}\\\x00'], &(0x7f00000004c0)=[&(0x7f00000002c0), &(0x7f0000000300)='${&\x00', &(0x7f0000000540)='\x83\x00\xa8.jSt\xd7\xec\xb0%\xff\xd7\xd0\xc7\xe9\x91\xddB]GK\xb47I\xfc_\x81\x87\x9aMF\x8e\xf8\x15\xc8~\xdd\x13K[\r\xbb\xaa\xea\xb3\xae\xa1r\xafc)\xbc\xb4%\r_z\xb5\f\xe2\xa4x\x9eQ\xf3{n\xae\xbf\x89TCr\x1ch\x85\x9a\xe9%U0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) close(r3) r4 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000400)=@dstopts, 0x8) splice(r2, 0x0, r3, 0x0, 0x7fffffff, 0x0) 06:17:32 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000240)={'nat\x00', 0xfd, "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"}, &(0x7f0000000100)=0x121) r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffff4}]}}}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r5, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) socketpair(0x26, 0x4, 0x4, &(0x7f0000000180)={0xffffffffffffffff}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@deltclass={0x114, 0x29, 0x8, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xf, 0x2}, {0xfff2, 0xb}, {0xd, 0x6}}, [@tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0x1c, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x8e54}, @TCA_QFQ_LMAX={0x8, 0x2, 0x7f}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4ea}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x70}}, @tclass_kind_options=@c_atm={{0x8, 0x1, 'atm\x00'}, {0x9c, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x9, 0xfff2}}, @TCA_ATM_HDR={0x3b, 0x3, "7d1809ac0757bc7c362c11abcd220637dee2ee9577b19e2fbd13ce4f1b5c611e702778da0ec4d46138c4ce00e0b728d46d74f7381fd0d1"}, @TCA_ATM_FD={0x8, 0x1, r7}, @TCA_ATM_FD={0x8, 0x1, r8}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_HDR={0x33, 0x3, "35c1ff29d1cfa6ec249b5c9da8249099e978fe56423de04c05b4789eaf38f54615cfc2c1dd49bd689da0064c3a6a55"}]}}, @tclass_kind_options=@c_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x7b}}}]}, 0x114}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000000) 06:17:32 executing program 2: sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0xc, 0x6, 0x401, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044055) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f00000002c0)) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x10400) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x80000001, 0x30000000}) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc10264}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x200, 0x70bd2d, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc000}, 0x24044082) 06:17:32 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) fcntl$setown(r0, 0x8, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:32 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xffffff53, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='net/dev_snmp6\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000200)) r3 = dup(r2) r4 = msgget(0x0, 0x8) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) msgsnd(r4, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r5], 0xf1, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000d3c4de1d34c0596ecc1c5acbd78541d8fb90413a3b08fcc959cdb3c8c76bcd11eb1571beea4f0f8b8a9ed5df3f2b87b743faa6", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x8000000, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ff000000000008001f00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x30, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r3}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x14d80000}, @IFLA_EXT_MASK={0x8, 0x1d, 0x1}]}, 0x30}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) [ 309.444990] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 309.474654] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 309.482105] syz-executor.3 cpuset=/ mems_allowed=0-1 06:17:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$nfc_llcp(r2, 0x118, 0x4, &(0x7f0000000140)=""/32, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000001", @ANYRES16=0x0, @ANYBLOB="68002cbd7000fbdbdf250000000008000700", @ANYRES32=r3, @ANYBLOB="080004000a01010106000600040000000800020001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x20040810) [ 309.494271] CPU: 1 PID: 16810 Comm: syz-executor.3 Not tainted 4.14.194-syzkaller #0 [ 309.502204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.511573] Call Trace: [ 309.514174] dump_stack+0x1b2/0x283 [ 309.517826] warn_alloc.cold+0x96/0x1cc [ 309.521824] ? zone_watermark_ok_safe+0x220/0x220 [ 309.526691] ? perf_trace_lock_acquire+0x510/0x510 [ 309.531645] ? perf_trace_lock_acquire+0x510/0x510 [ 309.536616] ? fs_reclaim_release+0xd0/0x110 [ 309.541097] __vmalloc_node_range+0x10e/0x150 [ 309.545613] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 309.550995] vmalloc_user+0x47/0xa0 [ 309.554651] ? vb2_vmalloc_alloc+0xa6/0x280 [ 309.559002] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 309.564398] vb2_vmalloc_alloc+0xa6/0x280 [ 309.568572] __vb2_queue_alloc+0x47a/0xd90 [ 309.572849] vb2_core_create_bufs+0x279/0x5a0 [ 309.577378] ? __vb2_queue_free+0x7a0/0x7a0 [ 309.581736] ? __lock_acquire+0x5fc/0x3f20 [ 309.585992] vb2_create_bufs+0x2e1/0x5b0 [ 309.590081] ? vb2_thread_start.cold+0x24/0x24 [ 309.594694] ? check_preemption_disabled+0x35/0x240 [ 309.599739] ? perf_trace_lock+0xf7/0x490 [ 309.603954] vb2_ioctl_create_bufs+0x1f7/0x330 [ 309.608553] v4l_create_bufs+0xa4/0x150 [ 309.612545] __video_do_ioctl+0x65b/0x6a0 [ 309.616741] ? video_ioctl2+0x30/0x30 [ 309.620568] ? __might_fault+0x177/0x1b0 [ 309.624644] video_usercopy+0xf5/0xe90 [ 309.628556] ? video_ioctl2+0x30/0x30 [ 309.632362] ? v4l_g_ctrl+0x390/0x390 [ 309.636159] ? check_preemption_disabled+0x35/0x240 [ 309.641177] ? check_preemption_disabled+0x35/0x240 [ 309.646192] ? perf_trace_lock+0xf7/0x490 [ 309.650370] ? perf_trace_lock_acquire+0x510/0x510 [ 309.655325] v4l2_ioctl+0x1bb/0x2f0 [ 309.658965] ? v4l2_open+0x2f0/0x2f0 [ 309.662689] do_vfs_ioctl+0x75a/0xff0 [ 309.666512] ? selinux_inode_setxattr+0x730/0x730 [ 309.671356] ? ioctl_preallocate+0x1a0/0x1a0 [ 309.675764] ? lock_downgrade+0x740/0x740 [ 309.679911] ? __fget+0x225/0x360 [ 309.683372] ? security_file_ioctl+0x83/0xb0 [ 309.687808] SyS_ioctl+0x7f/0xb0 [ 309.691182] ? do_vfs_ioctl+0xff0/0xff0 [ 309.695174] do_syscall_64+0x1d5/0x640 [ 309.699092] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 309.704298] RIP: 0033:0x45d579 [ 309.707496] RSP: 002b:00007fa14ead2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 309.715210] RAX: ffffffffffffffda RBX: 000000000001f340 RCX: 000000000045d579 [ 309.722475] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 309.729744] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 309.737012] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 309.744301] R13: 00007ffc763ef02f R14: 00007fa14ead39c0 R15: 000000000118cf4c [ 309.753700] warn_alloc_show_mem: 1 callbacks suppressed [ 309.753705] Mem-Info: [ 309.762384] active_anon:228353 inactive_anon:4318 isolated_anon:0 [ 309.762384] active_file:7307 inactive_file:22836 isolated_file:0 [ 309.762384] unevictable:0 dirty:225 writeback:0 unstable:0 [ 309.762384] slab_reclaimable:17599 slab_unreclaimable:124262 [ 309.762384] mapped:61639 shmem:4506 pagetables:3360 bounce:0 [ 309.762384] free:1017099 free_pcp:240 free_cma:0 [ 309.797140] Node 0 active_anon:913412kB inactive_anon:17272kB active_file:29092kB inactive_file:91344kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:246556kB dirty:892kB writeback:0kB shmem:18024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 866304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 309.827635] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 06:17:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)={0x15c, 0x1, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x5}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x91}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}]}, @NFQA_PAYLOAD={0xc8, 0xa, "c4561e590b8dedf7164d344ac92b1ddeabdaf00c0cd4f64bfe6ebd46ad79fe931c128866e2f78a7863083f6eecec452337f0279998905cc784cb8d39484dd24889719fe67ec00208940932cae8619520400680635cfe3290923548db75898ed1f077caaf1b1b52e4ac3cb98e9a3cf623a1f27d1ee1c9975e8ec9de560aa5ab012eac1ce8577b5c6214caf98a2e0ec86170f9251af1cee7ddad1b54f1424252bdcda93c94567d6315d675a852c18737567e6bd8e6e1c00e5afb21d697abcb367255a82fe6"}, @NFQA_VLAN={0x44, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xfff9}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3ff}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20008041}, 0x20000040) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001100250137b100000000000010000000", @ANYRES32=r11], 0x20}}, 0x0) [ 309.874791] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.903175] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 309.908894] Node 0 DMA32 free:277248kB min:36272kB low:45340kB high:54408kB active_anon:909160kB inactive_anon:17272kB active_file:29092kB inactive_file:91344kB unevictable:0kB writepending:892kB present:3129332kB managed:2621192kB mlocked:0kB kernel_stack:10752kB pagetables:13440kB bounce:0kB free_pcp:1088kB local_pcp:540kB free_cma:0kB [ 309.940615] lowmem_reserve[]: 0 0 0 0 0 06:17:33 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 309.944650] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.970649] lowmem_reserve[]: 0 0 0 0 0 [ 309.974678] Node 1 Normal free:3780144kB min:53612kB low:67012kB high:80412kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.984771] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 310.005571] lowmem_reserve[]: 0 0 0 0 0 [ 310.019226] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15908kB 06:17:33 executing program 2: sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x10, 0x70bd2b, 0x25dfdbfe, {0x0, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8891}, 0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) tkill(0x0, 0x3f) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000100)) [ 310.037331] Node 0 DMA32: 154*4kB (UM) 269*8kB (UM) 472*16kB (UM) 934*32kB (UM) 500*64kB (UME) 205*128kB (UM) 134*256kB (UM) 76*512kB (UM) 24*1024kB (UE) 11*2048kB (UM) 14*4096kB (UM) = 276112kB [ 310.060107] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 310.074303] Node 1 Normal: 64*4kB (UE) 388*8kB (UE) 289*16kB (UM) 68*32kB (UM) 32*64kB (UME) 21*128kB (UM) 14*256kB (UM) 5*512kB (U) 3*1024kB (UM) 10*2048kB (UME) 912*4096kB (UM) = 3780144kB 06:17:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=tcp,', {'port'}}) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000280)={'nat\x00', 0x0, 0x4, 0x17, [], 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000)=""/23}, &(0x7f0000000140)=0x78) [ 310.107487] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 310.122391] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 06:17:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {}], 0x9, 0x0) r1 = socket(0x10, 0x2, 0x8) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x80100, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000380)=0x1e) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0xb, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl(r0, 0x81, &(0x7f0000000240)="98bee55a4564fe3b179d2cd23367000ce97975857a5749945b321be8e06d3724430efe176d5d08cd5e30e2aeb58e09897eda54dc48420e70da52d9ba496acbadb4e82ca18ea27c202875d3b03bfc4b5f2c558e9e3c7caff482f9392f35a38136d23088c4c1322a27060e8f7c4c49b93f3d858a9bc861a3376409ae200ef0c71ee634f0ad1885471fe9f33050ad1f87f61562aec5f4978a9f53a96e3adda7db86f36e14f8b89f39ab34308e9f228cfd31f8de15533b358497f1177c1c85768987891a7cb920e11e8d98b760e8b0bcd8") recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) [ 310.161643] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 310.191266] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 310.237805] bond4: Enslaving bridge1 as a backup interface with an up link [ 310.252388] 22998 total pagecache pages [ 310.263973] 0 pages in swap cache [ 310.281535] bond4 (unregistering): Releasing backup interface bridge1 [ 310.284060] Swap cache stats: add 0, delete 0, find 0/0 [ 310.315128] Free swap = 0kB [ 310.331468] Total swap = 0kB 06:17:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000040)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x44}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="ff", 0x1, 0xfffffffffffffffb) keyctl$get_security(0x11, r2, 0x0, 0x0) [ 310.334627] 9pnet: p9_fd_create_tcp (16917): problem connecting socket to 127.0.0.1 [ 310.346397] 1965979 pages RAM [ 310.354388] 0 pages HighMem/MovableOnly [ 310.358509] bond4 (unregistering): Released all slaves [ 310.373966] 339073 pages reserved [ 310.378930] 0 pages cma reserved 06:17:33 executing program 1: sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="000000eeff000000070000000003"], 0x14}}, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000080)="eb3d90", 0xfffffff0}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000280)={0x0, 0x800, 0xfa, "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"}, 0x102) 06:17:33 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000100)={0x3, 0x43564548, 0x4, 0x2, 0x1, @stepwise={{0x80, 0x2}, {0x7fffffff}, {0x10001, 0x39f3}}}) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x7, 0x3ff, "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", 0x20, 0x5, 0x6, 0x20, 0x3f, 0x3f, 0x5}}}, 0x120) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffff4}]}}}) 06:17:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000008c0)={0x10000000}) r2 = socket$key(0xf, 0x3, 0x2) r3 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @null, @remote, @null]}, &(0x7f00000000c0)=0x40, 0x1800) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0xffff, 0x0, {0x1, 0x1, 0x6, 0x3, 0xfffffff9}, 0x5042}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', r4}) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c01f2ff160001000000000080000000fe80000000000000bb000000ac14140000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000fcffff00"/97, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ae141400000000000000000000000000b6e067e5ad0000000005e0ffffffffffffff000801000000000d0000ff5886fa94131030dfe8e85a64e42bc81618332362f302aab24e3ad0d08e532b2bda51cf3229afc68016a6524dca291474387d747d98ac723ce348011e0ebdc62c004f03715fb0d9b31829322ab0468888cb1f10b345b30d85236312d701ad1d5dfd909906f98fd017a9acfb0eaa4accf3832ec92d8296c891d57eb9e5c580674ae8461cbfd2fcc2ab4eae93f6cc8062b626a2a3f245642a38203fc18d6d92d66a21863a375b6aede1a270095e6c2d740ed9f2d5baeb593e876038a23f277a84136661f3c63cb4", @ANYRES32=0x0, @ANYRES64=r2, @ANYBLOB="000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000550a0545a800739ce01b97998d000000000000000000000044000500ac141400000000000000000000000000000000003200000000000000fe88000000000000000000000000000100"/209], 0x16c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r8, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r9, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x188, 0x1, 0x3, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_EXP={0x74, 0xf, 0x0, 0x1, [@CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x39}}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, @NFQA_PAYLOAD={0x8a, 0xa, "30ed70f57002d82946e3cbf6442e06a3d27317d2592baf11270aa430bcfc7713deedb6ee6a6616f2f92f5e0f29b89571641957f6fa11cf5ca563e136671ccef06691459170767ae4c33ccb50ca8aa351da364495862b57641dfe9845fd7600df1f1994eee75d35dd5e304763163506f5015737903a11058bc98e8eecba061c2b4037da74d31c"}, @NFQA_PAYLOAD={0x5f, 0xa, "a18d9b6b806f7ad2ac78f1f2bee32a0a83501ce7fd4b1324ef223cbd28a05fa0d1b93a3603cec9269470a4e96abf8007b8da2a033ab0a52090b854e5df32268a26bef740a7292bc80f2dfb1aa359b1d8cd0514c7f0e20d6f3806f8"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x4}}]}, 0x188}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) 06:17:34 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/57, 0x5f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='\x9b\xafJnb\xf7)\xbe') 06:17:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001ff) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001bc0)={0x170, 0x0, &(0x7f00000019c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001c00)=ANY=[@ANYBLOB="85616466000000000a0000000000000002000000000000003f00000000000000852a646600000000", @ANYRES32=r3, @ANYRES16], &(0x7f00000004c0)={0x0, 0x20, 0x38}}}, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)={@fda={0x66646185, 0x4, 0x0, 0x3a}, @flat=@binder={0x73622a85, 0x110a}, @flat=@binder={0x73622a85, 0xa}}, &(0x7f0000000580)={0x0, 0x20, 0x38}}, 0x40}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000640)={@flat=@weak_binder={0x77622a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x10a, 0x3}, @flat=@handle={0x73682a85, 0x0, 0x1}}, &(0x7f00000006c0)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001700)={@ptr={0x70742a85, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x2, 0xc}, @flat=@handle={0x73682a85, 0x1}, @flat=@weak_handle={0x77682a85, 0x100}}, &(0x7f0000001780)={0x0, 0x28, 0x40}}, 0x40}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001900)={@ptr={0x70742a85, 0x1, &(0x7f00000017c0)=""/111, 0x6f, 0x0, 0x16}, @ptr={0x70742a85, 0x0, &(0x7f0000001cc0)=""/174, 0xae, 0x0, 0x28}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000001980)={0x0, 0x28, 0x50}}}], 0x46, 0x0, &(0x7f0000001b40)="638f1e1b95c27fc39315b649c03207fa64a56b836f54a443ce02acf1e021891d82ff31962b1cddfb93727f75ab4957286cefb8a1fd3b53ec86a04e8a06fa1049e7a0a93370eb"}) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfd14) r5 = socket$key(0xf, 0x3, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000192258cde079205edb0010000500000000", @ANYRES32=r6, @ANYBLOB="0900f015010000001800128008000100736974000c00020008000300", @ANYRESHEX], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r7, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r8, @ANYBLOB="14000200fe00"/20], 0x2c}}, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f00000001c0)=0x7f, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300030b000000000000000000000002000900080000006b00000000000000030006000000000002000000e00000010000000000000000010015004e220000030005000000000002000000640101000000c72c75a79d9181e237722043000000000000"], 0x58}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000100)={0x3, 'wg1\x00', {0x101}, 0x6}) [ 310.691756] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 310.692667] bond4: Enslaving bridge2 as a backup interface with an up link [ 310.704085] FAT-fs (loop1): bogus number of reserved sectors [ 310.719316] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 310.721200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=17015 comm=syz-executor.2 [ 310.733664] syz-executor.3 cpuset= [ 310.740944] FAT-fs (loop1): Can't find a valid FAT filesystem [ 310.753321] / mems_allowed=0-1 [ 310.760722] CPU: 1 PID: 17014 Comm: syz-executor.3 Not tainted 4.14.194-syzkaller #0 [ 310.768645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.778014] Call Trace: [ 310.780626] dump_stack+0x1b2/0x283 [ 310.784288] warn_alloc.cold+0x96/0x1cc [ 310.788295] ? zone_watermark_ok_safe+0x220/0x220 [ 310.793164] ? perf_trace_lock_acquire+0x510/0x510 [ 310.798123] ? perf_trace_lock_acquire+0x510/0x510 [ 310.803079] ? fs_reclaim_release+0xd0/0x110 [ 310.807527] __vmalloc_node_range+0x10e/0x150 [ 310.812091] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 310.817489] vmalloc_user+0x47/0xa0 [ 310.821142] ? vb2_vmalloc_alloc+0xa6/0x280 [ 310.825484] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 310.830875] vb2_vmalloc_alloc+0xa6/0x280 [ 310.835053] __vb2_queue_alloc+0x47a/0xd90 [ 310.839358] vb2_core_create_bufs+0x279/0x5a0 [ 310.843887] ? __vb2_queue_free+0x7a0/0x7a0 [ 310.848252] ? __lock_acquire+0x5fc/0x3f20 [ 310.852519] vb2_create_bufs+0x2e1/0x5b0 [ 310.856624] ? vb2_thread_start.cold+0x24/0x24 [ 310.861231] ? check_preemption_disabled+0x35/0x240 [ 310.866277] ? perf_trace_lock+0xf7/0x490 [ 310.870483] vb2_ioctl_create_bufs+0x1f7/0x330 [ 310.875096] v4l_create_bufs+0xa4/0x150 [ 310.879105] __video_do_ioctl+0x65b/0x6a0 [ 310.883542] ? video_ioctl2+0x30/0x30 [ 310.887364] ? __might_fault+0x177/0x1b0 [ 310.891562] video_usercopy+0xf5/0xe90 [ 310.895476] ? video_ioctl2+0x30/0x30 [ 310.899292] ? v4l_g_ctrl+0x390/0x390 [ 310.903129] ? check_preemption_disabled+0x35/0x240 [ 310.908188] ? check_preemption_disabled+0x35/0x240 [ 310.913225] ? perf_trace_lock+0xf7/0x490 [ 310.918170] ? perf_trace_lock_acquire+0x510/0x510 [ 310.924175] v4l2_ioctl+0x1bb/0x2f0 [ 310.927810] ? v4l2_open+0x2f0/0x2f0 [ 310.932416] do_vfs_ioctl+0x75a/0xff0 [ 310.936237] ? selinux_inode_setxattr+0x730/0x730 [ 310.941192] ? ioctl_preallocate+0x1a0/0x1a0 [ 310.945701] ? lock_downgrade+0x740/0x740 [ 310.949883] ? __fget+0x225/0x360 [ 310.953547] ? security_file_ioctl+0x83/0xb0 [ 310.957973] SyS_ioctl+0x7f/0xb0 [ 310.961355] ? do_vfs_ioctl+0xff0/0xff0 [ 310.965385] do_syscall_64+0x1d5/0x640 [ 310.969294] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 310.974517] RIP: 0033:0x45d579 [ 310.977708] RSP: 002b:00007fa14ea90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.985446] RAX: ffffffffffffffda RBX: 000000000001f340 RCX: 000000000045d579 [ 310.992738] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 311.000020] RBP: 000000000118d0c0 R08: 0000000000000000 R09: 0000000000000000 [ 311.007314] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118d08c [ 311.014595] R13: 00007ffc763ef02f R14: 00007fa14ea919c0 R15: 000000000118d08c [ 311.031441] bond4 (unregistering): Releasing backup interface bridge2 [ 311.057852] bond4 (unregistering): Released all slaves [ 311.083126] Mem-Info: [ 311.090969] active_anon:227898 inactive_anon:7290 isolated_anon:0 [ 311.090969] active_file:7309 inactive_file:22869 isolated_file:0 [ 311.090969] unevictable:0 dirty:253 writeback:0 unstable:0 [ 311.090969] slab_reclaimable:17575 slab_unreclaimable:124610 [ 311.090969] mapped:61635 shmem:7502 pagetables:3386 bounce:0 [ 311.090969] free:1014149 free_pcp:317 free_cma:0 [ 311.136689] Node 0 active_anon:911768kB inactive_anon:24024kB active_file:29128kB inactive_file:91552kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:246608kB dirty:1008kB writeback:4kB shmem:24828kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 876544kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 311.177100] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 06:17:34 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$CHAR_RAW_FRASET(r0, 0x1264, &(0x7f0000000000)=0x3c6f) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001400010000000000000000000200001dc59e33d6a2de24b922e6c94b228c9915ac44ccce537671f46e178ad851c7d62c15326eb0b87ba71f977628108f558f11e7b4c52b7433ea2d6d9ace1ef2115943a6d3f1d74fbb181f015a351bf1f958ec2b2ad0d4e831e191dc4b6fa4eeedd24229f9b153e4e7467fdafaaaf95c86"], 0x14}}, 0x0) 06:17:34 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x2, 0x98, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x11200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r1, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) 06:17:34 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000038000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004de5d8e326d49616aaac00000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c47ebad0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca7dd01b03219e93176e002a7dba0723587ed3f9e708c8d580"], 0x538) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) socket(0x0, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r1, 0x0, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000feff0a00000010000400"/30], 0x24}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x10c, r5, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x336}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "60caad5d3776cf4de309e6e41efea24bb9114c8fd203934f161e8025bb709a01"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2f5e}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6a2c3b41}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004001) recvmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x3fffffffffffe7d, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 311.234776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=17004 comm=syz-executor.2 [ 311.253372] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 06:17:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 311.353074] lowmem_reserve[]: 0 2557 2557 2557 2557 06:17:34 executing program 5: perf_event_open(&(0x7f0000001040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000800)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e20, @private=0xa010102}, {0x2, 0x4e23, @remote}, 0xc0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='netpci0\x00', 0x5, 0x401, 0x1}) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000500)={0xe, 0x40, 0xf6d}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x10000, 0x0, 0xf000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000400)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x5, &(0x7f00000019c0)=[{0x0}, {&(0x7f00000004c0)="3fd8a86118f952", 0x7}, {&(0x7f00000006c0)}, {&(0x7f0000000800)}, {0x0, 0x0, 0x3f}], 0x102020, &(0x7f0000000780)=ANY=[@ANYBLOB='rodir,hash,obj_type=overlay\x00,\x00'/39]) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=..file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x2}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="34000000100001045393000000000000000000", @ANYRES32, @ANYBLOB], 0x34}}, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000280)={0x7, 0x7, 0x4}, &(0x7f0000000580)=0x28) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f00000005c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000640)={0x8, 0x2, 0x5, 0x81, 0x0, 0x80000001, 0x0, 0x5dc5}, &(0x7f0000000740)=0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x6100}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) 06:17:34 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="bc4e8398407153c1ac66186e5979e439f76b27a018b151e1f349d4f2906956f21d3f1bf0334fbca5efe5ebf6995c3fedc018bd20efd6a267546727651793efcf363093d1fdeb448f46bddad7ef3122546924d73bca33ba9a00000000007b678a5690555d52d2ed648a92c1ae1d5e000000000000000000"], 0x61) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 311.394707] Node 0 DMA32 free:279140kB min:36272kB low:45340kB high:54408kB active_anon:907320kB inactive_anon:17324kB active_file:29128kB inactive_file:91552kB unevictable:0kB writepending:1012kB present:3129332kB managed:2621192kB mlocked:0kB kernel_stack:10592kB pagetables:13492kB bounce:0kB free_pcp:960kB local_pcp:536kB free_cma:0kB 06:17:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x70bd27, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000400ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}]}}]}, 0x44}}, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x100, 0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000040)) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@gettfilter={0x3c, 0x2e, 0x300, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x1}, {0x8, 0xa}, {0xffff, 0xe}}, [{0x8, 0xb, 0x800}, {0x8, 0xb, 0x80}, {0x8, 0xb, 0x3f}]}, 0x3c}}, 0x804) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x24, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)={0x1bc, r8, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_NAME={0x0, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0xff07, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5aff88ca}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x4a, 0x3, "4c996bd893421e84972acf81828e738d8095581102abe4c241d379120122762585772521b302321adcbed4189635b3c4a7e46841a8d093159f2632deb1a12099a1e674b005af"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r6, 0x3) [ 311.551590] lowmem_reserve[]: 0 0 0 0 0 [ 311.571425] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 311.581917] overlayfs: failed to resolve '..file1': -2 [ 311.587485] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 311.642139] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 311.687479] lowmem_reserve[]: 0 0 0 0 0 [ 311.687874] overlayfs: failed to resolve '..file1': -2 [ 311.707775] Node 1 Normal free:3780144kB min:53612kB low:67012kB high:80412kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 311.778844] lowmem_reserve[]: 0 0 0 0 0 [ 311.793737] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15908kB [ 311.814311] Node 0 DMA32: 90*4kB (UME) 421*8kB (UME) 208*16kB (UME) 1042*32kB (UME) 502*64kB (UME) 202*128kB (UME) 131*256kB (UM) 77*512kB (UM) 26*1024kB (UME) 13*2048kB (UM) 14*4096kB (UM) = 281936kB [ 311.844177] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 311.855152] Node 1 Normal: 64*4kB (UE) 388*8kB (UE) 289*16kB (UM) 68*32kB (UM) 32*64kB (UME) 21*128kB (UM) 14*256kB (UM) 5*512kB (U) 3*1024kB (UM) 10*2048kB (UME) 912*4096kB (UM) = 3780144kB [ 311.878740] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 311.894697] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 311.918946] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 311.929015] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 311.939243] 23029 total pagecache pages [ 311.943348] 0 pages in swap cache [ 311.955811] Swap cache stats: add 0, delete 0, find 0/0 [ 311.968020] Free swap = 0kB [ 311.974493] Total swap = 0kB 06:17:35 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x4, 0x2) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r2) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffff4}, {}, {0x8}], 0x3}}}) 06:17:35 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @default}, [@netrom, @rose, @default, @rose, @bcast, @netrom, @remote, @netrom]}, &(0x7f0000000000)=0x48, 0x80000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000140)={0x7, 'geneve0\x00', {0xdd0}, 0x1000}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x4, 0x230140) openat(r4, &(0x7f00000001c0)='./file0\x00', 0x40, 0x101) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:35 executing program 0: ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x16f281, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={0xffffffffffffffff, 0x1de2, 0x101, 0x81}) r3 = syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0x9, 0x100) r4 = creat(&(0x7f0000000400)='./file0\x00', 0xa) r5 = socket$rxrpc(0x21, 0x2, 0xa) io_submit(0x0, 0x6, &(0x7f0000000580)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x9, r0, &(0x7f0000000000)="d966e839042457a4f2bc18b808affe558310ab895bd52d028477122be5fa29c676a7cb7bbcd62412a3f427b6350b8749ea08f13ee277cfefaff0e2d3b7eba9be129769dcba09e45f3aae3f2a2d2a716e0617d1aad2bc4b628ac1dc061e75655cdb631ed91d814425b028f7657d46af7d135bbf1ef9c9e442f02a9e4132f781945cc881a045dde404746538663f1d2240eaf7a0df88c9ee633337a8db443cb606ef81a84669c57d093f18d7fe4bbd18404b49820a76a13c66ab303d9806ecf52a1513d0faf84f1ab9cd63e297a6686f32f2470542d0b95a2ce5ed54ce7fc1e274f211", 0xe2, 0x1, 0x0, 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x98f, 0xffffffffffffffff, &(0x7f0000000140)="ad65976c3f55d0d0335c6f", 0xb, 0x3f, 0x0, 0x0, r1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x27e, r2, &(0x7f0000000240)="7a315934f29547cf916e191888bda88aa9f07c8c47fdcd0fba6b30c95bac35a591dc21f1c31baf453a900ea29ebd4e46e1743c40773bdfbc4ad1f255a9927b1c2966f77b2d0f87af3327ec215215c8f81f36748401f7fdee35ba50b93fdc86d0bb3ee5078f07a666c009b216e80138f0f5bab300c936febe8bf8c782bca177212754eaad26ad48b8b1757c68bfce91f70ee64e10006ab588336a7216603f21fade22333e75d01c60c235e8b63f556d472e46e491d36d45f0d7e90d", 0xbb, 0x0, 0x0, 0x7}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x401, r3, &(0x7f0000000380)="e9deab163b8bc931a2203c95b347d53b63c78387f5ed305805383cf748a324a0d2a8b17be8d2f45c36acbdf28d231c7319bfcc0e6e972bd522555d8565bd38130cc465188c46f98bd9c5a09950f067bb066ede3b028378c052c0b0a698a532d0cf2824b83e2f", 0x66, 0x3ff, 0x0, 0x0, r4}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0xa93b, r5, &(0x7f0000000480)="2fed6090afc03980ff1adb79195cef4d6715e5c5cc705f0b8b5434cad81b83592e9e7f4259db51257148b4", 0x2b, 0x821, 0x0, 0x4}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x20, 0xffffffffffffffff, &(0x7f0000000500)="07796950f5ce1a9d26", 0x9, 0x6d6}]) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4040085) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f00000006c0)={&(0x7f0000002000/0x2000)=nil, 0x0, 0x2, 0x48}) write$P9_RXATTRWALK(r2, &(0x7f0000000700)={0xf, 0x1f, 0x1, 0x3de}, 0xf) ioctl$NBD_SET_BLKSIZE(r4, 0xab01, 0x100) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000740)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00', r6}) r7 = socket$packet(0x11, 0x7, 0x300) setsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f00000007c0), 0x10) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000800)='/dev/cachefiles\x00', 0x8000, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000940)={0x0, @win={{0x4, 0x0, 0x9, 0x740}, 0x1, 0x6, &(0x7f00000008c0)={{0xc4, 0x0, 0x4, 0x4}, &(0x7f0000000880)={{0x1, 0x0, 0x8f, 0x8}, &(0x7f0000000840)={{0x9, 0x200000, 0xe64}}}}, 0x3, &(0x7f0000000900)="49defcc48f7a4644199ac2e45100982ad6bbe82927ade8f44630", 0x4}}) ioctl$BTRFS_IOC_FS_INFO(r4, 0x8400941f, &(0x7f0000000a40)) sendmsg$NFNL_MSG_ACCT_GET(r8, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xac, 0x1, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3ff}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x41bd}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x61f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x200}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7f}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}]}, 0xac}, 0x1, 0x0, 0x0, 0x854}, 0x0) 06:17:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0x8) openat$pfkey(0xffffffffffffff9c, 0x0, 0x200, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x8180, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}) syz_open_dev$tty1(0xc, 0x4, 0x1) open$dir(&(0x7f0000000040)='./file0\x00', 0x8027e, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r3, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r4, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10) 06:17:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'syzkaller1\x00', {0x2, 0x4e24, @rand_addr=0x64010101}}) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @bt={0x5, 0x0, 0x4, 0x1, 0x78, 0x2, 0x1}}) 06:17:35 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x500000000, 0x9}, 0x6024, 0x0, 0x0, 0x0, 0xfffffffffffff0ca}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000000)={0xffffffff, "2ce2dec21858382352edf7800ad4c2c22ca5c4d7d26e5e8fb30612fa5429450a", 0x2, 0x4, 0x7fffffff, 0x0, 0x8, 0x0, 0x5, 0xda4}) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f00000000c0)={'veth0_macvtap\x00', {0x2, 0x0, @dev}}) [ 311.987299] 1965979 pages RAM [ 311.987804] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 311.991341] 0 pages HighMem/MovableOnly [ 312.011745] 339073 pages reserved [ 312.022814] 0 pages cma reserved 06:17:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x25dfdbfe, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x16c}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000090}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000081) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000140)={0xfff00000, 0xcf, 0x0, 'queue0\x00', 0x1000}) 06:17:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0xa}, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x4040050) recvmmsg(r1, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000d00)}}], 0x1, 0x1, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x8}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x7b78983, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:17:35 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x3, 0x0) write$P9_RXATTRWALK(r3, &(0x7f00000002c0)={0xf, 0x1f, 0x1, 0x401}, 0xf) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffff4}]}}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000580)={&(0x7f0000000300), 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1e0, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "e0b895f66c4cab18e822a0dc35a7643c9a95555343437ed8"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a26282643c8b8afe5434395a74f9bd9dd728451edd3ea814252686d69df8bbe4b879ed"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}]}, 0x1e0}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r6, @ANYBLOB="090004826785ac9a9bd9262369fa04d44700080003000000000000e03e0000000000000091907d34dbceee946f8228807dce3773aa5c8bfc0b07d936eadd9746a40272ede6cfd956c53271d64d934de35ac78c81f4bbd968d75c7efd25d76cf86ad8ef", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_DOMAIN={0x10, 0x1, '/dev/video#\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 06:17:35 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="6a53519eeac132fecf11c00a3e24759c72c2a4612659148ac1c08e66678af474cbda6f861f93cf5ebc1b272432d64c374819962c1073163849d5742ac0394dd638fa6cef3f8f55c4abd076b082057fa9ba0c5318daabbb2ce376e752066746dca641bc5a3db042e5dc98ba6a766f26a6f3356ec444dd9c85c369c51722b6178448ef693a28cfa30636554bd54f52a4e8cd620c5fd943d89599cb12ee62919a54a7d0c9840a74e88c26fb2405bdd1620aec8d7922d98c54d25446b099f9988ee8311f02a829cd817962f8d9c01cd4430c9686", 0xd2}, {&(0x7f00000001c0)="b3192e8765e3156c6a50f971b9ed405f1ed5f74ea423a1a403097a3d147ceb1230be744bda646ba7c9c0b1603c885c9c3b09bb39aa6838c51ad8b57edeff88b4671331eb74c5d8656c326efff5c802f967ca684c6e26a7d5c1dbd66714af611789eac1", 0x63}, {&(0x7f0000000000)="17578292f2262d058dc66db2c24c9fd79bb61c1cf0c4f9e8e5dccd798fa56344727bdc159066dbfb2aba42ff2354498e7b41d69e20b3", 0x36}], 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:35 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000400)={0x0, 0x9, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x80000000, 0x0, "040000009c1c8b2900"}) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x120, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000580)={0x8, 0x10, [], 0x4bbd500292b76994, &(0x7f0000000200)=[0x0, 0x0]}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000380)=0x80) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="4fd40000", @ANYRES16=0x0, @ANYBLOB='\x00'/16, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x363) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x0, 0x700, 0x7, 0xd7, {{0x13, 0x4, 0x1, 0x6, 0x4c, 0x68, 0x0, 0x18, 0x4, 0x0, @multicast1, @loopback, {[@generic={0x94, 0x9, "74ae3235e1b1fb"}, @rr={0x7, 0x23, 0x5f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xb}, @local, @broadcast, @empty]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x1, [{@multicast2, 0x60cd05fa}]}]}}}}}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x29, 0x1, 0x8, 0xffff830b, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, [], 0x3b}, 0x40, 0x7800, 0x38}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 06:17:35 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010009f070000e04d219f0baf00ff0300", @ANYRES32=0x0, @ANYBLOB="1b00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b0002000000050017"], 0x70}}, 0x0) r0 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x9f}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3f}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008024}, 0x4000000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000240)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000280)={{r0}, r3, 0x8, @unused=[0x9, 0x81, 0x3, 0xc4], @name="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"}) 06:17:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c010000170001000000000000000000fe8000000000000000000000000000bb0000000000000000ac14140000000000000000000000000000000000000000000000000000000000ac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000005000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffe500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500ac141400000000000000000000000000000000003200000000000000fe8800000000000000000000000000010000000000000000000000000200000000000000df8b3c72bc9a89ebb9fce39f3538403d33a3cd27e708bee931ece6014535661d2d2ed0f3b20049bf350dce3c8386683d2c128fd0528af9aea264d142fd8514f8726fe1bf54556252e6eed3615a93d790d503ec44e251ad91c73483d7765e04f00e7abb237978b1fa64e1c91729f45ae5a2e6374a42807d7a6fd3d6de4de11c4ba252b3e99c6af8c56803fc00"/335], 0x16c}}, 0x0) 06:17:35 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x28, 0x80000, 0xffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 312.347061] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 312.367426] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 312.372803] CPU: 1 PID: 17155 Comm: syz-executor.3 Not tainted 4.14.194-syzkaller #0 [ 312.380710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.386895] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 312.390077] Call Trace: [ 312.390098] dump_stack+0x1b2/0x283 [ 312.390116] warn_alloc.cold+0x96/0x1cc [ 312.390128] ? zone_watermark_ok_safe+0x220/0x220 [ 312.390144] ? perf_trace_lock_acquire+0x510/0x510 [ 312.398854] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 312.401230] ? perf_trace_lock_acquire+0x510/0x510 [ 312.401245] ? fs_reclaim_release+0xd0/0x110 [ 312.401265] __vmalloc_node_range+0x10e/0x150 [ 312.401280] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 312.446469] vmalloc_user+0x47/0xa0 [ 312.450111] ? vb2_vmalloc_alloc+0xa6/0x280 [ 312.452911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17164 comm=syz-executor.1 [ 312.454441] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 312.454452] vb2_vmalloc_alloc+0xa6/0x280 [ 312.454466] __vb2_queue_alloc+0x47a/0xd90 [ 312.454488] vb2_core_create_bufs+0x279/0x5a0 [ 312.484778] ? __vb2_queue_free+0x7a0/0x7a0 [ 312.489117] ? __lock_acquire+0x5fc/0x3f20 [ 312.493371] vb2_create_bufs+0x2e1/0x5b0 [ 312.497451] ? vb2_thread_start.cold+0x24/0x24 [ 312.502047] ? check_preemption_disabled+0x35/0x240 [ 312.507082] ? perf_trace_lock+0xf7/0x490 [ 312.511254] vb2_ioctl_create_bufs+0x1f7/0x330 [ 312.515863] v4l_create_bufs+0xa4/0x150 [ 312.519859] __video_do_ioctl+0x65b/0x6a0 [ 312.524032] ? video_ioctl2+0x30/0x30 [ 312.527854] ? __might_fault+0x177/0x1b0 [ 312.531935] video_usercopy+0xf5/0xe90 [ 312.535855] ? video_ioctl2+0x30/0x30 [ 312.539688] ? v4l_g_ctrl+0x390/0x390 [ 312.543507] ? check_preemption_disabled+0x35/0x240 [ 312.548548] ? check_preemption_disabled+0x35/0x240 [ 312.553596] ? perf_trace_lock+0xf7/0x490 [ 312.557766] ? perf_trace_lock_acquire+0x510/0x510 [ 312.562721] v4l2_ioctl+0x1bb/0x2f0 [ 312.566362] ? v4l2_open+0x2f0/0x2f0 [ 312.570091] do_vfs_ioctl+0x75a/0xff0 [ 312.573929] ? selinux_inode_setxattr+0x730/0x730 [ 312.578805] ? ioctl_preallocate+0x1a0/0x1a0 [ 312.583242] ? lock_downgrade+0x740/0x740 [ 312.587419] ? __fget+0x225/0x360 [ 312.590900] ? security_file_ioctl+0x83/0xb0 [ 312.595336] SyS_ioctl+0x7f/0xb0 [ 312.598720] ? do_vfs_ioctl+0xff0/0xff0 [ 312.602713] do_syscall_64+0x1d5/0x640 [ 312.606621] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 312.611833] RIP: 0033:0x45d579 [ 312.615031] RSP: 002b:00007fa14ead2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.622754] RAX: ffffffffffffffda RBX: 000000000001f340 RCX: 000000000045d579 [ 312.630038] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 312.637323] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 312.644696] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 312.651983] R13: 00007ffc763ef02f R14: 00007fa14ead39c0 R15: 000000000118cf4c [ 312.690183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17172 comm=syz-executor.3 06:17:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x401}, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000180), 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x200, 0x0) r4 = dup3(r0, r1, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r4, 0xc0485630, &(0x7f0000000040)={0x9, "713322d25787ee070006ac91545b340acf461618cd8394d4fc3e1a7b3715d7a0", 0x1, 0x1, 0x5e, 0x1700}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x41, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000200)={0x1, 0xffff, 0x8}) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) ioctl$KDDELIO(r5, 0x4b35, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x12) [ 312.837402] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 06:17:36 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000400)={0x0, 0x9, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x80000000, 0x0, "040000009c1c8b2900"}) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x120, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000580)={0x8, 0x10, [], 0x4bbd500292b76994, &(0x7f0000000200)=[0x0, 0x0]}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000380)=0x80) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="4fd40000", @ANYRES16=0x0, @ANYBLOB='\x00'/16, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x363) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x0, 0x700, 0x7, 0xd7, {{0x13, 0x4, 0x1, 0x6, 0x4c, 0x68, 0x0, 0x18, 0x4, 0x0, @multicast1, @loopback, {[@generic={0x94, 0x9, "74ae3235e1b1fb"}, @rr={0x7, 0x23, 0x5f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xb}, @local, @broadcast, @empty]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x1, [{@multicast2, 0x60cd05fa}]}]}}}}}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x29, 0x1, 0x8, 0xffff830b, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, [], 0x3b}, 0x40, 0x7800, 0x38}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 06:17:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r1, 0x305}, 0x14}}, 0x0) [ 312.882062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17183 comm=syz-executor.3 [ 312.904385] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 312.924684] Mem-Info: 06:17:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev={0xac, 0x14, 0x14, 0x3}, {@in=@private, @in=@remote}, {{@in=@dev, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x0, @in6=@empty}]}]}, 0x16c}}, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x2, 0x400000) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @bt={0x101, 0x25d, 0x292, 0x6f, 0x7, 0x6, 0x9, 0x2}}) 06:17:36 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0xcc000) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f00000000c0)=0xd000) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 312.953256] active_anon:225756 inactive_anon:4319 isolated_anon:0 [ 312.953256] active_file:7308 inactive_file:22852 isolated_file:0 [ 312.953256] unevictable:0 dirty:258 writeback:0 unstable:0 [ 312.953256] slab_reclaimable:17514 slab_unreclaimable:123436 [ 312.953256] mapped:61644 shmem:4507 pagetables:3352 bounce:0 [ 312.953256] free:1020612 free_pcp:294 free_cma:0 [ 313.035130] QAT: Invalid ioctl 06:17:36 executing program 0: perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0044003, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x2000012, 0x1f4}, 0x6000000}], 0x1, 0x100, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000006c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ef922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecfa0b1a7511bf746bec66ba76b699d3a483904811c5709efa01fa13e4ddc813f76684d3d1529fea5d78b38267db0082270f62b41b50981b0313b668585ad32e8977c5f7c2dc112136b8f7392223205ad86f4a9de1cddbd119f26acc2f", 0xffffffcd, 0x11, 0x0, 0x170) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f00000002c0)={0x0, "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"}) sigaltstack(&(0x7f0000ffb000/0x4000)=nil, 0x0) [ 313.101016] QAT: Invalid ioctl [ 313.181900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17172 comm=syz-executor.3 [ 313.202293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17183 comm=syz-executor.3 [ 313.288170] Node 0 active_anon:915868kB inactive_anon:17280kB active_file:29100kB inactive_file:91428kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:246760kB dirty:1036kB writeback:0kB shmem:18032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 870400kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 313.376101] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 313.443633] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 313.496276] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 313.508714] Node 0 DMA32 free:270792kB min:36272kB low:45340kB high:54408kB active_anon:918356kB inactive_anon:17280kB active_file:29100kB inactive_file:91428kB unevictable:0kB writepending:1036kB present:3129332kB managed:2621192kB mlocked:0kB kernel_stack:10688kB pagetables:13672kB bounce:0kB free_pcp:684kB local_pcp:592kB free_cma:0kB [ 313.591711] lowmem_reserve[]: 0 0 0 0 0 [ 313.600572] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 313.679519] lowmem_reserve[]: 0 0 0 0 0 [ 313.694870] Node 1 Normal free:3780144kB min:53612kB low:67012kB high:80412kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 313.772445] lowmem_reserve[]: 0 0 0 0 0 [ 313.778105] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15908kB [ 313.848622] Node 0 DMA32: 214*4kB (UME) 415*8kB (UME) 231*16kB (UME) 1093*32kB (UME) 507*64kB (UME) 205*128kB (UME) 131*256kB (UM) 77*512kB (UM) 26*1024kB (UME) 11*2048kB (UM) 12*4096kB (U) = 272800kB [ 313.867501] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 313.879168] Node 1 Normal: 64*4kB (UE) 388*8kB (UE) 289*16kB (UM) 68*32kB (UM) 32*64kB (UME) 21*128kB (UM) 14*256kB (UM) 5*512kB (U) 3*1024kB (UM) 10*2048kB (UME) 912*4096kB (UM) = 3780144kB [ 313.897411] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 313.907567] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 313.918626] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 313.928673] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 313.939858] 23017 total pagecache pages [ 313.944375] 0 pages in swap cache [ 313.949900] Swap cache stats: add 0, delete 0, find 0/0 [ 313.956864] Free swap = 0kB [ 313.960664] Total swap = 0kB [ 313.964599] 1965979 pages RAM [ 313.973228] 0 pages HighMem/MovableOnly [ 313.993379] 339073 pages reserved [ 314.010801] 0 pages cma reserved 06:17:37 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0xffffff80, @loopback, 0x2}, @in6={0xa, 0x4e23, 0xfffffff8, @rand_addr=' \x01\x00'}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}, @in6={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfff}, @in6={0xa, 0x4e23, 0x7ff, @private0, 0x10000}, @in={0x2, 0x4e24, @rand_addr=0x64010100}, @in={0x2, 0x4e21, @rand_addr=0x64010101}], 0xa0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffff4}]}}}) 06:17:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c010000170001000000000000000000fe8000000000000000000000000000bb0000000000000000ac1440b142d7f0c8551400000000000000000000000000000000000075c4b9edc1290c7a093f03c865200000000000000000000000ac1414bb00000000003f00"/125, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000005000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500ac141400000000000000000000000000000000003200000000000000fe88000000000000000000000000000100"/196], 0x16c}}, 0x0) 06:17:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4004}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0x34, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}]}, 0x64}}, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x40, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000140)={0x1400000, 0x8}) 06:17:37 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000000c0)="5687e810c85fe35e660632f6637ad8786757cb95dce22998225f71c9205407ef4600dd21c4151b68e3b2d83cf5fdbf749959b60937da9ba97c140ed0335fa2a9e56f0bb9ece7ba73b3b1d6b2ab89341b45acb42e2649e4f3c9516b81fc5e11921edc250f9bd1652dae356a5adb56ff7d4ac9b2e627eb6c52d4aa485df87136157c2de4de0efb3ebe1236a39a5f19bd6c46915a962c8ee42a6b193a6acc45e0f3c02acd3b08818f691aa690ab25ff7b40d58123ad5966d7544c3b5dfbca35d42dd1ba7b71f1d52c59a7", {0x9, 0x7fff, 0x3831354f, 0x0, 0xd5, 0xffffffff, 0xb, 0x9}}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r2, &(0x7f0000000040)=""/46, 0x2e) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000000000}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vcs\x00', 0x200000, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x8, 0x70bd2d, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c880}, 0x40000) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044004) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ptrace$pokeuser(0x6, r5, 0x4, 0x3) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x1f0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28, 'hl\x00'}, {0x1}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28, 'hl\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @ipv4={[], [], @multicast2}, [], [0x0, 0xff], 'veth1_vlan\x00', 'netpci0\x00', {}, {}, 0x3c}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffffff], 0x4e22, 0x0, 0x4e23, 0x0, 0x5, 0x7, 0x0, 0x7}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 06:17:37 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000200)=""/62, 0x3e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x80, 0x0) fremovexattr(r4, &(0x7f00000001c0)=@known='trusted.overlay.origin\x00') r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2a2000, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x60, 0x80000) ioctl$KVM_GET_NESTED_STATE(r5, 0xc080aebe, &(0x7f0000000780)={{0x0, 0x0, 0x80}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) [ 314.167539] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 314.177517] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 314.189834] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) 06:17:37 executing program 1: perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) io_submit(0x0, 0x0, 0x0) clone(0x102aa100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) 06:17:37 executing program 0: sendto(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x4}, 0x0) clone(0x20040103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x59) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)=0x18c00) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000002580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002540)={&(0x7f0000003800)=ANY=[@ANYRESDEC], 0x10ec}, 0x1, 0x0, 0x0, 0x4000041}, 0x40040) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140)='NLBL_CIPSOv4\x00') openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/adsp1\x00', 0x105102, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000001400)=0x1008) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x200200, 0x0) 06:17:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000000c0)="0f20e06635000004000f22e06766c7442400007000006766c7442402050000006766c744240600000000670f0114240f01c8e38336f08301dc660f38816bad0f01d566b9ae0b000066b80000000066ba000000800f30d9ed260f01c9", 0x5c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000006a000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0xaaaac03, 0x1d, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x40000, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$USBDEVFS_GET_SPEED(r3, 0x551f) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3c3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4000000000, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f00000002c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x6, 0x8, 0xffffffff, 0x400, 0x4, r3, 0xff, [], 0x0, r4, 0x4, 0x5, 0x4}, 0x40) [ 314.283479] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 314.318093] CPU: 1 PID: 17241 Comm: syz-executor.3 Not tainted 4.14.194-syzkaller #0 [ 314.326453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.336087] Call Trace: [ 314.338832] dump_stack+0x1b2/0x283 [ 314.342509] warn_alloc.cold+0x96/0x1cc [ 314.346521] ? zone_watermark_ok_safe+0x220/0x220 [ 314.351636] ? perf_trace_lock_acquire+0x510/0x510 [ 314.356767] ? perf_trace_lock_acquire+0x510/0x510 [ 314.361746] ? fs_reclaim_release+0xd0/0x110 [ 314.366194] __vmalloc_node_range+0x10e/0x150 [ 314.370729] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 314.376995] vmalloc_user+0x47/0xa0 [ 314.380831] ? vb2_vmalloc_alloc+0xa6/0x280 [ 314.385184] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 314.390681] vb2_vmalloc_alloc+0xa6/0x280 [ 314.394957] __vb2_queue_alloc+0x47a/0xd90 [ 314.399376] vb2_core_create_bufs+0x279/0x5a0 [ 314.403915] ? __vb2_queue_free+0x7a0/0x7a0 [ 314.408645] ? __lock_acquire+0x5fc/0x3f20 [ 314.413104] vb2_create_bufs+0x2e1/0x5b0 06:17:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvtap0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40005}, 0x20084001) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=@acquire={0x130, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@private, @in=@remote, 0x0, 0x4, 0x4e20}, {{@in=@dev={0xac, 0x14, 0x14, 0x20}, @in6=@loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}}}, [@extra_flags={0x8, 0x18, 0x3c4d}]}, 0x130}}, 0x40) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000300)={0x1f, @none}, 0x8) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ocfs2_control\x00', 0x24200, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f00000002c0)=0x178) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0xb2) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x500, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x7, @bearer=@l2={'ib', 0x3a, 'bridge0\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x80) [ 314.417351] ? vb2_thread_start.cold+0x24/0x24 [ 314.422665] ? check_preemption_disabled+0x35/0x240 [ 314.427720] ? perf_trace_lock+0xf7/0x490 [ 314.432087] vb2_ioctl_create_bufs+0x1f7/0x330 [ 314.436980] v4l_create_bufs+0xa4/0x150 [ 314.441005] __video_do_ioctl+0x65b/0x6a0 [ 314.445307] ? video_ioctl2+0x30/0x30 06:17:37 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 314.445322] ? __might_fault+0x177/0x1b0 06:17:38 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CHAR_RAW_BSZSET(r1, 0x40081271, &(0x7f0000000000)=0x171f) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x80002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a543) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x810ee0f, 0x0) [ 314.445344] video_usercopy+0xf5/0xe90 06:17:38 executing program 3: getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}}, [0x5, 0x3ff, 0x9, 0x8, 0x1f, 0x0, 0x8, 0x4572, 0x3, 0x8, 0x4, 0x101, 0x6, 0x4, 0x1]}, &(0x7f0000000140)=0x100) r1 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000340)={r0, @in={{0x2, 0x4e20, @local}}, 0x1}, 0x90) r2 = socket$inet_udplite(0x2, 0x2, 0x88) connect$netlink(0xffffffffffffffff, &(0x7f0000000100)=@unspec, 0xc) r3 = dup(r2) prctl$PR_CAPBSET_DROP(0x18, 0x1f) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffff4}]}}}) 06:17:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x12240, 0x11) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000440)={0x117, 0x14, &(0x7f0000000040)}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ocfs2_control\x00', 0x2180, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000500)={&(0x7f00000004c0)=[0x1], 0x1, 0x4, 0x9, 0x81, 0x4, 0x89, 0x6, {0xd8, 0x3ff, 0x1000, 0x400, 0x101, 0x8, 0x7, 0x4, 0x9, 0x8, 0xcd9e, 0x9, 0x5a, 0x4, "4fe59410f8576e1dc3c8a788f51045eb8f2c60ba0859644e5f6d43c917e7b6af"}}) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000580)={0x13, 0x4, 0x1}) write$P9_RXATTRWALK(r0, &(0x7f00000005c0)={0xf, 0x1f, 0x2, 0x5}, 0xf) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000600)='/dev/dlm-monitor\x00', 0x10d480, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000640)) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000680)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f00000006c0)=0x8) syz_open_dev$sndpcmp(&(0x7f0000000700)='/dev/snd/pcmC#D#p\x00', 0x8, 0x40402) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000740)='/dev/mISDNtimer\x00', 0x2000, 0x0) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000780)=""/84) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000800)) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000840)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000880)={0x0, 0x7fff}, &(0x7f00000008c0)=0x8) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000900)={0x1, 0x0, 0x5, 0x8, 0x6, [{0x6, 0x2, 0x6, [], 0x200}, {0x1, 0xfffffffffffffffe, 0x7d04, [], 0x1001}, {0x68b7, 0x800, 0x332, [], 0x3c88}, {0x8000000000000, 0x7, 0x21e5, [], 0x1c00}, {0x58, 0x1, 0x100000001, [], 0x1106}, {0xfffffffffffffffb, 0x7fff, 0x800, [], 0x1089}]}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000ac0)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e21, @rand_addr=0x64010102}, 0x1a, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000a80)='netdevsim0\x00', 0x10000, 0xfcc4, 0x7}) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000b40)={@dev={0xac, 0x14, 0x14, 0x37}, @multicast2, @broadcast}, 0xc) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0xc, 0x0, 0x4}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) [ 314.445355] ? video_ioctl2+0x30/0x30 [ 314.445366] ? v4l_g_ctrl+0x390/0x390 [ 314.445379] ? check_preemption_disabled+0x35/0x240 [ 314.445391] ? check_preemption_disabled+0x35/0x240 06:17:38 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040)=0x32a5, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x41}, 0x4}}, 0x10) [ 314.445405] ? perf_trace_lock+0xf7/0x490 06:17:38 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) tkill(0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:17:38 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$MEDIA_REQUEST_IOC_QUEUE(r5, 0x7c80, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$USBDEVFS_CLEAR_HALT(r7, 0x80045515, &(0x7f0000000000)={0xb, 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 314.445415] ? perf_trace_lock_acquire+0x510/0x510 06:17:38 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x0, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffff4}, {0x6, 0x3}, {0x0, 0x8001}, {0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x9, 0x2}, {0x4}]}}}) r3 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0xc09a, 0x3001) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000480)={0x1, 0x1, 0x3}) r4 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r6, @ANYBLOB="00000000000000000000000002"], 0x2c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f00000004c0)={0x9, 0x4, 0x2}) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000240)={0x0, {{0xa, 0x4e24, 0xffffa4d6, @empty, 0x3}}, {{0xa, 0x4e22, 0x8001, @dev={0xfe, 0x80, [], 0x3f}, 0x81}}}, 0x108) [ 314.445430] v4l2_ioctl+0x1bb/0x2f0 [ 314.445438] ? v4l2_open+0x2f0/0x2f0 [ 314.445453] do_vfs_ioctl+0x75a/0xff0 [ 314.445465] ? selinux_inode_setxattr+0x730/0x730 [ 314.445476] ? ioctl_preallocate+0x1a0/0x1a0 [ 314.445485] ? lock_downgrade+0x740/0x740 06:17:38 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) dup2(r1, r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffff4}]}}}) [ 314.445502] ? __fget+0x225/0x360 [ 314.445518] ? security_file_ioctl+0x83/0xb0 [ 314.445531] SyS_ioctl+0x7f/0xb0 [ 314.445540] ? do_vfs_ioctl+0xff0/0xff0 [ 314.445554] do_syscall_64+0x1d5/0x640 06:17:38 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fcntl$setflags(r4, 0x2, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip)tnl0\b') [ 314.445575] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 314.445584] RIP: 0033:0x45d579 [ 314.445590] RSP: 002b:00007fa14ead2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.445601] RAX: ffffffffffffffda RBX: 000000000001f340 RCX: 000000000045d579 [ 314.445607] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 314.445613] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 314.445619] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 314.445625] R13: 00007ffc763ef02f R14: 00007fa14ead39c0 R15: 000000000118cf4c [ 314.529082] kauditd_printk_skb: 5 callbacks suppressed [ 314.529091] audit: type=1326 audit(1598422657.995:134): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17248 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x4603ba code=0x0 [ 314.552229] Mem-Info: [ 314.552255] active_anon:231076 inactive_anon:4319 isolated_anon:0 [ 314.552255] active_file:7309 inactive_file:22860 isolated_file:0 [ 314.552255] unevictable:0 dirty:264 writeback:0 unstable:0 [ 314.552255] slab_reclaimable:17514 slab_unreclaimable:123516 [ 314.552255] mapped:61671 shmem:4507 pagetables:3431 bounce:0 [ 314.552255] free:1015103 free_pcp:210 free_cma:0 [ 314.552280] Node 0 active_anon:924304kB inactive_anon:17276kB active_file:29100kB inactive_file:91440kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:246684kB dirty:1048kB writeback:0kB shmem:18028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 880640kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 314.554014] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 314.554069] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 314.554089] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 314.554112] Node 0 DMA32 free:264360kB min:36272kB low:45340kB high:54408kB active_anon:924304kB inactive_anon:17276kB active_file:29100kB inactive_file:91440kB unevictable:0kB writepending:1048kB present:3129332kB managed:2621192kB mlocked:0kB kernel_stack:10816kB pagetables:13724kB bounce:0kB free_pcp:836kB local_pcp:664kB free_cma:0kB [ 314.554133] lowmem_reserve[]: 0 0 0 0 0 [ 314.554155] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 314.554173] lowmem_reserve[]: 0 0 0 0 0 [ 314.554194] Node 1 Normal free:3780144kB min:53612kB low:67012kB high:80412kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 314.554216] lowmem_reserve[]: 0 0 0 0 0 [ 314.554236] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15908kB [ 314.554518] Node 0 DMA32: 44*4kB (UME) 216*8kB (UME) 237*16kB (UME) 1087*32kB (UME) 507*64kB (UME) 205*128kB (UME) 131*256kB (UM) 77*512kB (UM) 26*1024kB (UME) 12*2048kB (UM) 10*4096kB (U) = 264288kB [ 314.554612] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 314.554668] Node 1 Normal: 64*4kB (UE) 388*8kB (UE) 289*16kB (UM) 68*32kB (UM) 32*64kB (UME) 21*128kB (UM) 14*256kB (UM) 5*512kB (U) 3*1024kB (UM) 10*2048kB (UME) 912*4096kB (UM) = 3780144kB [ 314.554767] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 314.554774] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 314.554781] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 314.554788] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 314.554792] 23019 total pagecache pages [ 314.554803] 0 pages in swap cache [ 314.554810] Swap cache stats: add 0, delete 0, find 0/0 [ 314.554814] Free swap = 0kB [ 314.554817] Total swap = 0kB [ 314.554825] 1965979 pages RAM [ 314.554829] 0 pages HighMem/MovableOnly [ 314.554832] 339073 pages reserved [ 314.554836] 0 pages cma reserved [ 314.880216] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 314.880244] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 314.880270] CPU: 1 PID: 17288 Comm: syz-executor.3 Not tainted 4.14.194-syzkaller #0 [ 314.880276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.880280] Call Trace: [ 314.880297] dump_stack+0x1b2/0x283 [ 314.880316] warn_alloc.cold+0x96/0x1cc [ 314.880329] ? zone_watermark_ok_safe+0x220/0x220 [ 314.880342] ? perf_trace_lock_acquire+0x510/0x510 [ 314.880354] ? perf_trace_lock_acquire+0x510/0x510 [ 314.880375] ? fs_reclaim_release+0xd0/0x110 [ 314.880398] __vmalloc_node_range+0x10e/0x150 [ 314.880414] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 314.880424] vmalloc_user+0x47/0xa0 [ 314.880436] ? vb2_vmalloc_alloc+0xa6/0x280 [ 314.880446] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 314.880456] vb2_vmalloc_alloc+0xa6/0x280 [ 314.880469] __vb2_queue_alloc+0x47a/0xd90 [ 314.880497] vb2_core_create_bufs+0x279/0x5a0 [ 314.880511] ? __vb2_queue_free+0x7a0/0x7a0 [ 314.880532] ? __lock_acquire+0x5fc/0x3f20 [ 314.880548] vb2_create_bufs+0x2e1/0x5b0 [ 314.880566] ? vb2_thread_start.cold+0x24/0x24 [ 314.880581] ? check_preemption_disabled+0x35/0x240 [ 314.880596] ? perf_trace_lock+0xf7/0x490 [ 314.880613] vb2_ioctl_create_bufs+0x1f7/0x330 [ 314.880629] v4l_create_bufs+0xa4/0x150 [ 314.880645] __video_do_ioctl+0x65b/0x6a0 [ 314.880663] ? video_ioctl2+0x30/0x30 [ 314.880677] ? __might_fault+0x177/0x1b0 [ 314.880693] video_usercopy+0xf5/0xe90 [ 314.880706] ? video_ioctl2+0x30/0x30 [ 314.880719] ? v4l_g_ctrl+0x390/0x390 [ 314.880730] ? check_preemption_disabled+0x35/0x240 [ 314.880746] ? check_preemption_disabled+0x35/0x240 [ 314.880761] ? perf_trace_lock+0xf7/0x490 [ 314.880772] ? perf_trace_lock_acquire+0x510/0x510 [ 314.880788] v4l2_ioctl+0x1bb/0x2f0 [ 314.880798] ? v4l2_open+0x2f0/0x2f0 [ 314.880815] do_vfs_ioctl+0x75a/0xff0 [ 314.880828] ? selinux_inode_setxattr+0x730/0x730 [ 314.880843] ? ioctl_preallocate+0x1a0/0x1a0 [ 314.880853] ? lock_downgrade+0x740/0x740 [ 314.880870] ? __fget+0x225/0x360 [ 314.880885] ? security_file_ioctl+0x83/0xb0 [ 314.880900] SyS_ioctl+0x7f/0xb0 [ 314.880911] ? do_vfs_ioctl+0xff0/0xff0 [ 314.880927] do_syscall_64+0x1d5/0x640 [ 314.880948] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 314.880957] RIP: 0033:0x45d579 [ 314.880972] RSP: 002b:00007fa14ead2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.880985] RAX: ffffffffffffffda RBX: 000000000001f340 RCX: 000000000045d579 [ 314.880991] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 314.880998] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 06:17:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r1, 0x40044104, &(0x7f0000000000)=0x3ff) connect$unix(r1, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000002f40)={'syz', 0x2}, &(0x7f0000002f80)="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", 0x71a, 0xfffffffffffffffc) 06:17:39 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={@null=' \x00', 0x6, 'veth1_macvtap\x00'}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) 06:17:39 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffff4}]}}}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r5, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r6, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000140)=0x400, 0x4) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0xc) fcntl$notify(r7, 0x402, 0x80000008) 06:17:39 executing program 2: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x490840, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000000)={0xa4, 0x0, 0x4, &(0x7f00000001c0)="928cf3d494df71b6f6afa2f2e7a9728804"}) 06:17:39 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r5, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r6, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@mpls_newroute={0x5c, 0x18, 0x400, 0x70bd2d, 0x25dfdbfc, {0x1c, 0x0, 0x20, 0x4, 0xff, 0x2, 0xfd, 0x1}, [@RTA_OIF={0x8, 0x4, r6}, @RTA_MULTIPATH={0xc, 0x9, {0x1335, 0x2, 0x1}}, @RTA_VIA={0x14, 0x12, {0x11, "fda8c2f16475fedef8b3068291ff"}}, @RTA_OIF={0x8}, @RTA_DST={0x8, 0x1, {0x101, 0x0, 0x1}}, @RTA_DST={0x8, 0x1, {0x2}}]}, 0x5c}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x3) 06:17:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x3b0, 0xd0, 0x1c0, 0x0, 0x0, 0xd0, 0x2c0, 0x2e0, 0x2e0, 0x2e0, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x3, 0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'wg1\x00'}}}, {{@ipv6={@local, @dev, [], [], 'bridge_slave_1\x00', 'ipvlan0\x00', {}, {}, 0x11}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x14f, @loopback}, 0x1c) [ 314.881005] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 314.881012] R13: 00007ffc763ef02f R14: 00007fa14ead39c0 R15: 000000000118cf4c [ 315.113738] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 315.132699] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 316.423540] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 316.437724] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 316.492775] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 316.515450] CPU: 0 PID: 17357 Comm: syz-executor.3 Not tainted 4.14.194-syzkaller #0 [ 316.524812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.534552] Call Trace: [ 316.537178] dump_stack+0x1b2/0x283 [ 316.540938] warn_alloc.cold+0x96/0x1cc [ 316.544962] ? zone_watermark_ok_safe+0x220/0x220 [ 316.550011] ? perf_trace_lock_acquire+0x510/0x510 [ 316.555070] ? perf_trace_lock_acquire+0x510/0x510 [ 316.560366] ? fs_reclaim_release+0xd0/0x110 [ 316.564908] __vmalloc_node_range+0x10e/0x150 [ 316.569539] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 316.575136] vmalloc_user+0x47/0xa0 [ 316.578928] ? vb2_vmalloc_alloc+0xa6/0x280 [ 316.583385] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 316.588979] vb2_vmalloc_alloc+0xa6/0x280 [ 316.593444] __vb2_queue_alloc+0x47a/0xd90 [ 316.597724] vb2_core_create_bufs+0x279/0x5a0 [ 316.602679] ? __vb2_queue_free+0x7a0/0x7a0 [ 316.607235] ? __lock_acquire+0x5fc/0x3f20 [ 316.611515] vb2_create_bufs+0x2e1/0x5b0 [ 316.617477] ? vb2_thread_start.cold+0x24/0x24 [ 316.622099] ? check_preemption_disabled+0x35/0x240 [ 316.627361] ? perf_trace_lock+0xf7/0x490 [ 316.631589] vb2_ioctl_create_bufs+0x1f7/0x330 [ 316.636551] v4l_create_bufs+0xa4/0x150 [ 316.640607] __video_do_ioctl+0x65b/0x6a0 [ 316.644806] ? video_ioctl2+0x30/0x30 [ 316.648826] ? __might_fault+0x177/0x1b0 [ 316.653095] video_usercopy+0xf5/0xe90 [ 316.657049] ? video_ioctl2+0x30/0x30 [ 316.661320] ? v4l_g_ctrl+0x390/0x390 [ 316.665168] ? check_preemption_disabled+0x35/0x240 [ 316.670416] ? check_preemption_disabled+0x35/0x240 [ 316.675472] ? perf_trace_lock+0xf7/0x490 [ 316.679780] ? perf_trace_lock_acquire+0x510/0x510 [ 316.684756] v4l2_ioctl+0x1bb/0x2f0 [ 316.688420] ? v4l2_open+0x2f0/0x2f0 [ 316.692259] do_vfs_ioctl+0x75a/0xff0 [ 316.696446] ? selinux_inode_setxattr+0x730/0x730 [ 316.701508] ? ioctl_preallocate+0x1a0/0x1a0 [ 316.705958] ? lock_downgrade+0x740/0x740 [ 316.710153] ? __fget+0x225/0x360 [ 316.713642] ? security_file_ioctl+0x83/0xb0 [ 316.718232] SyS_ioctl+0x7f/0xb0 [ 316.721635] ? do_vfs_ioctl+0xff0/0xff0 [ 316.725731] do_syscall_64+0x1d5/0x640 [ 316.729657] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 316.735048] RIP: 0033:0x45d579 [ 316.738378] RSP: 002b:00007fa14ead2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.746115] RAX: ffffffffffffffda RBX: 000000000001f340 RCX: 000000000045d579 [ 316.753414] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 06:17:40 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x10, 0x0, &(0x7f0000000280)=[@clear_death={0x400c630f, 0x2}], 0xb5, 0x0, &(0x7f00000002c0)="e5a888a486a28a28ba798cb3ab6ff6b2c44fd8ac9bcabc9e5bbf3c1e6a84be15f22630777e3d33698474fc09424c515ecfcb597a7cd785082b8119251b16153b752448d1d8040509126791c79629a9f07d2c73efabcd52eed155a966e08cd07157d51351936e80035104e6f5b0606139153118803c7e38d9adc5991983eee3012b56539794f3441694c65960901576460e963ce34ce2df05d20966183f9a18e1d26a03615fdbfa92766a5d003aec306b78c511298b"}) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mode={'mode', 0x3d, 0xfc00000000000000}}]}) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xec, 0x3ed, 0x8, 0x70bd28, 0x25dfdbfe, "b58654a2e6caba361b2e2a3bd0b163ced0daf818c03dfd547fd6f65bff7ee3db3c0980312eadaf85ef668838ebafc409ffca100d70753e98c0e6812fb3cc5810ad2570df8f72404b931d88a5b7b78ed958ff8c91a05afa89a9b2188c4515cd1df481f6f48fffca2341375a6e461dedfc4db227c197b0ac0a211a2feae80ed3d9dcbe057a561ee3b44b0e7ab36a503ba741a57a9cd6509779c8e9351a9fb6543d3925ba6b10c2d7f18537cb731504136103bcfae98598a15fb8500b07935dde4b9bc51682e3db37267a0f9710affb1ba3a6c02990de14aab5fb", ["", "", "", ""]}, 0xec}, 0x1, 0x0, 0x0, 0x8840}, 0x1) 06:17:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r1, 0x40044104, &(0x7f0000000000)=0x3ff) connect$unix(r1, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000002f40)={'syz', 0x2}, &(0x7f0000002f80)="35c7a027188b3e2e5851fa92dba1dbee9bc691c619d6ca6a70cf6f898919e837d5d2566445b4f2f17c090f72feff8c51cfbd3b1b6ef46bac5df9b514721af00f91576af60b3ff0d6a106e2814f77b2164c6598a46bd5adf05fd22213d19c184334901bd90e3c56776dd9ef0fd183f640b242a033b92d42a7bcf4fabc55d5642fadc3419384d4366d66e865dff120bfb8bf8425d0e32d535942c02c4cdc3665ce929eec42f6cfe0a9e8cdbd983cc4df8aff149d1d3e9a7cffc472bbf928446fe0c58217a1427ccc4c020988e4be9ed9c3fda5228679ef19a3b3499056446009608913c723ef52e386816e2f76dfe0e6ed9e06141c3608fbeb376236fd08db6ab73dc4133862cf42ea1bae7aa2ca6f8958ab230b779b9e1b43ccc1a6ec8d1cdd706655dca023ff9930f40c2b92abcf9fbb9c3331d5e5e6798ed6c28231b55b2872d1bc34fced1bef7c9ec93cf0f5ac6ba30090aefb06d9842bb6b27c880f9b1ffa5f47b15b16e917016009e80291967aa89127a6295983f9e0360f11bc55b4959b1cbcb28cb74e5f2cd9c5bbc7d5039c0dcb81f0d2174d5759d233a1bd1aabfa162d19dc0f9f38fd9fbb58349afd83979614f48302e2c50ce8192250a34f87de02e0136f39cedf8f4d9c2661b17bb424045b4ae975d7a401eecf3afb1efabc20a7c5681bfd270005f86b12ab177ce4b993adcc00cf885708974420a9449b53b7950e71924f2c2657effedf80b88d1eeeb0823965d6417a3e03f0ad15b3280ac72eebcd774dcd30db8d675e75542dda133318b85c2d529ea75210f4ae91b9ae955dbc03a2376e7c4deed0d333a8d0ad315e067a2204f7598919592157a0dfaac3a06ba0b8c6864508dd7cb145582aeb8abbc0f00eca32e05388d1d093721c7ace4f7ae88cebde4c7576ea458110bbe205645958d8218023fabc258ed92de2c6122e643578fc110824f960b5b4f134cdc2467cc6bd47e54d295d71dd6c063716c7cb2730cd923f393c79c10932222746c791458147286710864c4297e3b786dfe3d2c89dde6d4a0d1168d6351aec3fba75df2cea39fe2b7b5a48b9985f884ee1b34c319a0ff79f6900f06402b9e6097bdeb6aaac8fd0eaa8261c61bad8a8fcfcffb3329adaa8530ec7400d7992d35201cdc5d30d54f03ce6d48ed7f8b5b9b4373a9d46dfdb4b80362529c1406b8d729f9c3363d11fd8406967855106d13b833a656e231ab284d43944a5c7d3c4221069026ec376175365a289d49e239dd274075cf1109d9131cacb114894fc623e42bc356a83acbd71d258da4c396c77376be354d7218d54c53d709f9985617fceda4d6912bf13317ed59633daabdc3ec38c53c8218e2d21d431fc4e896659e0fe9cb1bf58f3ce5a271639197389d3c587d6bce1e44df70dfe77c63c6011fd5fb8bb23ecae53b96ff5baa267e39b78f235983ad0a2f808fad937291a16a0ed325c0be578c740b59cf1bdab511a13b5a6086de87dbec91ae55eb079f6c243c36c535d20015bfd1b0fb14c55fc967b09988c9072a8922eef0b7cf141de3fa1820f319e6ecae86947af64a389ce6a496a8406e12935aaa5f5204bff98596664d1bf5e5a71eae8a788f1f4fe123d3552dd87ec2cd897ee3c3ac4e484402ff1331478cbac883a74a96ccbe4d0721e223c428d1bedd719f16e26e42cee2047ab1f6c1447e49d425b5143924b1fc68af8badd025e789dedd4b277dab7c3de73b08bf03468af170f89129cf754b484851f59faccfd786b0139407fba38748baf04b80ae3816adb203b3c25198e22718262efea2b417ecd5251e4ccb581fede9bc7994f6927025a814d68b650df2660868bf30df46a73d3b0a0f70e48db2af925122346d7cd4e3579c23f10434d6e36c6385a267bf23341f2caf8db895abf5ebdd3cb96f6d7460551d47d67ee37f74b8a98d8000a5e1351bafc82783f4ecda47a326c02518d82bfe0e05635c60af425b5bb203d7abc5b59241c8282304503c6534baee4b1d9edf99e6afb902b00cb58ce07e9e8cd2c02e725815485b84c1af69bdf62a8d000bb890b7cc28dfe249655a598b1f0a898824a0c657604c86685646b52cc7eff13c77b0bb14acacb3f5a4cb312d429c3a9700b091f27a3cec220c6cc1a1cbc380eb9aed585e6fef18d914fd7e87030414f65bfb242c991eb57fec10b07c46eb9058fe7e01164154b8b1731b947a4d713f67bcb7c0f7a8a8a81dc75eaede5d40b901b322ca46f51365e15446daee6e8cdad89301ac6ba4d0fba13ab97d735b9df371620f0468367d144fc2741594bbecb8e1117a84add7841256012612a850b5d16438c18fab21e69fcf91ebe8ee7120bbe75ff7eaafa3c937784eae7f87f8c91d8dd5cb4223892347d9a005cce554671424b968ccc59070c1d42aa986f89f91a6c9acdcf8ec903e95bd5e860e54ae6afb129f034b172e3d9fdbdf0bc0a69714f03096c32b4ed67f8c779c399be30536a2ceb5e6947ec0eaf4f7f8a3de6264cf57031ab7fb28cf2879e343ee8095daad825e6d29f43abca2bdfaed8faf755857826eca71b04855bdc0b1e89bac5e5c6", 0x71a, 0xfffffffffffffffc) 06:17:40 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x80) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x2a8) ioprio_set$uid(0x3, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001480)='/proc/mdstat\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm_plock\x00', 0x0, 0x0) sendmsg$nl_crypto(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=@del={0x100, 0x11, 0x20, 0x70bd2c, 0x25dfdbfd, {{'ecb(cast5)\x00'}, [], [], 0x2000}, [{0x8, 0x1, 0x2}, {0x8}, {0x8, 0x1, 0xa5f}, {0x8, 0x1, 0x8d0}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000180)) [ 316.760716] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 316.768029] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 316.775669] R13: 00007ffc763ef02f R14: 00007fa14ead39c0 R15: 000000000118cf4c 06:17:40 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0\x00', 0x10}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000100)=0x6, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000140)) getdents(r2, &(0x7f0000000040)=""/46, 0x2e) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f00000000c0)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KDSKBMODE(r6, 0x4b45, &(0x7f0000000000)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 316.881890] warn_alloc_show_mem: 1 callbacks suppressed [ 316.881894] Mem-Info: 06:17:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 06:17:40 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x8, 0x8000) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe8, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x48020) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f00000002c0)=0x8) [ 316.955498] active_anon:230534 inactive_anon:4321 isolated_anon:0 [ 316.955498] active_file:7310 inactive_file:22866 isolated_file:0 [ 316.955498] unevictable:0 dirty:267 writeback:2 unstable:0 [ 316.955498] slab_reclaimable:17622 slab_unreclaimable:123526 [ 316.955498] mapped:61676 shmem:4509 pagetables:3490 bounce:0 [ 316.955498] free:1015583 free_pcp:119 free_cma:0 06:17:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="090000000100001d14"], 0x0) 06:17:40 executing program 5: perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x83ce, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x380d, 0x6, 0x3}, 0x0, 0x5, 0xffffffffffffffff, 0x19) keyctl$setperm(0x5, 0x0, 0x0) semctl$GETVAL(0x0, 0x2, 0xc, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x3ffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af00031400000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r2, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) getsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000040), &(0x7f00000000c0)=0x4) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 317.079259] Node 0 active_anon:920268kB inactive_anon:17280kB active_file:29104kB inactive_file:91468kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:246704kB dirty:1060kB writeback:16kB shmem:18032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 882688kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 317.207965] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 317.244868] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 317.283064] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.366418] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 317.380578] Node 0 DMA32 free:264696kB min:36272kB low:45340kB high:54408kB active_anon:920736kB inactive_anon:17276kB active_file:29108kB inactive_file:91508kB unevictable:0kB writepending:1068kB present:3129332kB managed:2621192kB mlocked:0kB kernel_stack:10784kB pagetables:13860kB bounce:0kB free_pcp:1148kB local_pcp:540kB free_cma:0kB [ 317.404985] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 317.437739] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 317.458706] loop5: p2 < > [ 317.459620] lowmem_reserve[]: 0 0 0 0 0 [ 317.466635] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.494590] lowmem_reserve[]: 0 0 0 0 0 [ 317.498918] Node 1 Normal free:3780144kB min:53612kB low:67012kB high:80412kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.528595] lowmem_reserve[]: 0 0 0 0 0 [ 317.542832] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15908kB [ 317.581962] Node 0 DMA32: 17*4kB (UME) 370*8kB (UM) 440*16kB (UME) 1051*32kB (UME) 506*64kB (UM) 173*128kB (UM) 129*256kB (UM) 76*512kB (UM) 26*1024kB (UME) 12*2048kB (UM) 11*4096kB (UM) = 266420kB [ 317.613863] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 317.625173] Node 1 Normal: 64*4kB (UE) 388*8kB (UE) 289*16kB (UM) 68*32kB (UM) 32*64kB (UME) 21*128kB (UM) 14*256kB (UM) 5*512kB (U) 3*1024kB (UM) 10*2048kB (UME) 912*4096kB (UM) = 3780144kB [ 317.644455] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.654413] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 317.663898] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 06:17:41 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000100)={@multicast1, @initdev}, &(0x7f0000000140)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0xa, [{0xfffffff4}, {}, {}, {}, {}, {}, {0x80000001}]}}}) r5 = accept4(r1, &(0x7f0000000180)=@isdn, &(0x7f0000000240)=0x80, 0x100000) sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x200, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x70}, {0x8, 0x13, 0x9}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}, {0x6, 0x11, 0x40}, {0x8, 0x13, 0x1f}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xfff00000}, {0x6, 0x11, 0x7bb9}, {0x8, 0x13, 0xffffffff}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}, {0x6, 0x11, 0xb98c}, {0x8, 0x13, 0x80}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x101}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x7f}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x4}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0xff}, {0x8, 0x13, 0x9}, {0x5}}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c000) 06:17:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xd020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r2 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r2, 0x7, &(0x7f0000027000)={0x1}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000100)=ANY=[], 0x1c) sendfile(r4, r4, &(0x7f0000000240), 0x7fff) 06:17:41 executing program 1: socketpair$unix(0x1, 0x6ca2f08d1b8a6f07, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f00000001c0)=0x1e) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$inet6(r4, 0x0, &(0x7f00000003c0)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = accept4$unix(r3, &(0x7f00000002c0), &(0x7f0000000340)=0x6e, 0x800) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f0000000380)) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0x40a85323, &(0x7f0000000200)={{0x0, 0xf9}, 'port1\x00', 0x2, 0x10, 0x6, 0x8d2, 0x401, 0x5, 0x4}) getresgid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f00000000c0)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x709000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r8 = socket$inet(0x10, 0x80000, 0xfffffffd) sendmsg(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="24000000210007041dfffd946f610500020000e8fe0208010001080008000300fe7f0000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 06:17:41 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x1, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x10, 0x4d6, 0x4d4}, @sadb_x_nat_t_type={0x1}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, @sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}}, 0x4000000) ioctl$BLKROGET(r0, 0x125e, &(0x7f00000001c0)) fsetxattr(r4, &(0x7f0000000140)=@random={'system.', 'ip6tnl0\x00'}, &(0x7f0000000180)='ns\x00', 0x3, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x40, 0xff, 0x2, 0x40, 0x6, 0xabd5, 0x40, 0x2f}, 0x20) ioctl$VIDIOC_G_EDID(r3, 0xc0285628, &(0x7f00000000c0)={0x0, 0x4, 0x0, [], &(0x7f0000000000)=0x3}) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x8, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_tos={0x0, r4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r4, 0x1}}, 0x18) recvmmsg(r1, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) write(r6, &(0x7f0000000340), 0x41395527) ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f00000001c0)=0x400) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x7cd988b456cde53e, 0xffffffffffffffff, 0x0) [ 317.674613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 317.684278] 23041 total pagecache pages [ 317.689011] 0 pages in swap cache [ 317.692586] Swap cache stats: add 0, delete 0, find 0/0 [ 317.699507] Free swap = 0kB [ 317.702554] Total swap = 0kB [ 317.705762] 1965979 pages RAM [ 317.711396] 0 pages HighMem/MovableOnly [ 317.715416] 339073 pages reserved [ 317.720470] 0 pages cma reserved 06:17:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000000200)={0xac, 'syz1\x00'}) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000140)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f00000001c0)=r7) r8 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x101001) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x13, r9, 0x9) mount(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x20031, 0x0) 06:17:41 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10064}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xffffffff}]}}}]}, 0x3c}}, 0x0) [ 317.901443] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 317.923702] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 317.992627] syz-executor.3 cpuset=/ mems_allowed=0-1 06:17:41 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f00000000c0)={0x1, 0x7e9}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) gettid() r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000000)={0x7, 0x4, 0x4, 0x7fffffff, 0x3, 0x5, 0x5}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 318.087137] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 318.162939] CPU: 1 PID: 17448 Comm: syz-executor.3 Not tainted 4.14.194-syzkaller #0 [ 318.168694] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 318.171202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.171207] Call Trace: [ 318.171226] dump_stack+0x1b2/0x283 [ 318.171242] warn_alloc.cold+0x96/0x1cc [ 318.171254] ? zone_watermark_ok_safe+0x220/0x220 [ 318.171266] ? perf_trace_lock_acquire+0x510/0x510 [ 318.171279] ? perf_trace_lock_acquire+0x510/0x510 [ 318.187961] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 318.191628] ? fs_reclaim_release+0xd0/0x110 [ 318.191648] __vmalloc_node_range+0x10e/0x150 [ 318.191665] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 318.191674] vmalloc_user+0x47/0xa0 [ 318.191683] ? vb2_vmalloc_alloc+0xa6/0x280 [ 318.191691] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 318.191703] vb2_vmalloc_alloc+0xa6/0x280 [ 318.233603] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 318.236710] __vb2_queue_alloc+0x47a/0xd90 [ 318.236735] vb2_core_create_bufs+0x279/0x5a0 [ 318.236747] ? __vb2_queue_free+0x7a0/0x7a0 [ 318.236765] ? __lock_acquire+0x5fc/0x3f20 [ 318.236777] vb2_create_bufs+0x2e1/0x5b0 [ 318.236790] ? vb2_thread_start.cold+0x24/0x24 [ 318.236801] ? check_preemption_disabled+0x35/0x240 [ 318.236814] ? perf_trace_lock+0xf7/0x490 [ 318.236825] vb2_ioctl_create_bufs+0x1f7/0x330 06:17:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc801, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_ident={0x2, 0xa, 0x9, 0x0, 0x33}]}, 0x58}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='veth0_virt_wifi\x00') ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x4}}, 0x14) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000180)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) setxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L-', 0x8000}, 0x16, 0x2) r2 = inotify_init() inotify_add_watch(r2, 0x0, 0x400017e) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write(0xffffffffffffffff, &(0x7f0000000440), 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000000)) write$binfmt_elf64(r3, &(0x7f00000002c0)=ANY=[], 0x8) sendfile(r3, r3, &(0x7f00000001c0), 0xa198) open$dir(&(0x7f00000000c0)='./file0\x00', 0x121781, 0x82) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0xb216845648d46a9b) [ 318.236838] v4l_create_bufs+0xa4/0x150 [ 318.236850] __video_do_ioctl+0x65b/0x6a0 [ 318.236864] ? video_ioctl2+0x30/0x30 [ 318.236876] ? __might_fault+0x177/0x1b0 [ 318.236888] video_usercopy+0xf5/0xe90 [ 318.236898] ? video_ioctl2+0x30/0x30 [ 318.236908] ? v4l_g_ctrl+0x390/0x390 [ 318.236916] ? check_preemption_disabled+0x35/0x240 [ 318.236938] ? check_preemption_disabled+0x35/0x240 [ 318.236950] ? perf_trace_lock+0xf7/0x490 [ 318.236960] ? perf_trace_lock_acquire+0x510/0x510 [ 318.236973] v4l2_ioctl+0x1bb/0x2f0 [ 318.236985] ? v4l2_open+0x2f0/0x2f0 [ 318.268658] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 318.270508] do_vfs_ioctl+0x75a/0xff0 [ 318.270523] ? selinux_inode_setxattr+0x730/0x730 [ 318.270534] ? ioctl_preallocate+0x1a0/0x1a0 [ 318.270545] ? lock_downgrade+0x740/0x740 [ 318.270561] ? __fget+0x225/0x360 [ 318.270576] ? security_file_ioctl+0x83/0xb0 [ 318.403858] SyS_ioctl+0x7f/0xb0 [ 318.407258] ? do_vfs_ioctl+0xff0/0xff0 06:17:41 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000000)=0x3ff) [ 318.411366] do_syscall_64+0x1d5/0x640 [ 318.415646] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 318.421650] RIP: 0033:0x45d579 [ 318.424958] RSP: 002b:00007fa14ead2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 318.433596] RAX: ffffffffffffffda RBX: 000000000001f340 RCX: 000000000045d579 [ 318.442122] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 318.450505] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 318.458444] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 318.465755] R13: 00007ffc763ef02f R14: 00007fa14ead39c0 R15: 000000000118cf4c [ 318.498118] loop5: p2 < > [ 318.506764] Mem-Info: 06:17:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000000200)={0xac, 'syz1\x00'}) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000140)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f00000001c0)=r7) r8 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x101001) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x13, r9, 0x9) mount(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x20031, 0x0) [ 318.532039] active_anon:235139 inactive_anon:4320 isolated_anon:0 [ 318.532039] active_file:7314 inactive_file:22882 isolated_file:0 [ 318.532039] unevictable:0 dirty:272 writeback:1 unstable:0 [ 318.532039] slab_reclaimable:17628 slab_unreclaimable:124073 [ 318.532039] mapped:61667 shmem:4510 pagetables:3507 bounce:0 [ 318.532039] free:1010167 free_pcp:293 free_cma:0 06:17:42 executing program 2: socket$inet6(0xa, 0x3, 0x8) r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r3, @ANYBLOB="0900f015010000001800120008000100736974000c0002000800030013d92ccf3d5c6fda6a4d1039a2c527a071856af14d2c059883d83ae35dd840143607f9c12284d0d9a76f6cfce0dc7bb5e49dd65eb39928a53d3240925676483e1e537cb4a0ed295802c293753ac833ccd179ac6c3a54607f9671055e", @ANYRES32=r4], 0x38}, 0x1, 0x0, 0x0, 0x2c0000c5}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r4, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x140, 0x140, 0x140, 0x0, 0x140, 0x230, 0x258, 0x258, 0x230, 0x258, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x88, 0x0, 0x8}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x4}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', r4}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000a80)={0x8, {"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", 0x1000}}, 0x1006) creat(&(0x7f0000000040)='./file0\x00', 0x104) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001ac0)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/4\x00') setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r6, 0x111, 0x5, 0x2, 0x4) [ 318.695962] Node 0 active_anon:922196kB inactive_anon:17280kB active_file:29120kB inactive_file:91528kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:246668kB dirty:1080kB writeback:4kB shmem:18040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 892928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 318.766201] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 318.822326] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 318.851969] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 318.876001] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 318.876143] loop5: p2 < > [ 318.887320] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 318.896602] Node 0 DMA32 free:261164kB min:36272kB low:45340kB high:54408kB active_anon:922640kB inactive_anon:17280kB active_file:29120kB inactive_file:91528kB unevictable:0kB writepending:1084kB present:3129332kB managed:2621192kB mlocked:0kB kernel_stack:10784kB pagetables:13880kB bounce:0kB free_pcp:1020kB local_pcp:384kB free_cma:0kB [ 318.927585] lowmem_reserve[]: 0 0 0 0 0 [ 318.931852] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 318.959299] lowmem_reserve[]: 0 0 0 0 0 [ 318.963476] Node 1 Normal free:3780144kB min:53612kB low:67012kB high:80412kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 318.997649] lowmem_reserve[]: 0 0 0 0 0 [ 319.002924] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15908kB [ 319.051855] Node 0 DMA32: 85*4kB (UME) 142*8kB (M) 317*16kB (UM) 1050*32kB (UM) 509*64kB (UME) 175*128kB (UME) 130*256kB (UME) 77*512kB (UME) 25*1024kB (UM) 13*2048kB (UM) 10*4096kB (UM) = 261012kB [ 319.078209] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 319.094658] Node 1 Normal: 64*4kB (UE) 388*8kB (UE) 289*16kB (UM) 68*32kB (UM) 32*64kB (UME) 21*128kB (UM) 14*256kB (UM) 5*512kB (U) 3*1024kB (UM) 10*2048kB (UME) 912*4096kB (UM) = 3780144kB [ 319.113768] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 319.123619] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 319.133123] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 319.142970] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 319.152397] 23054 total pagecache pages [ 319.157499] 0 pages in swap cache [ 319.161090] Swap cache stats: add 0, delete 0, find 0/0 [ 319.175551] Free swap = 0kB [ 319.181990] Total swap = 0kB [ 319.185188] 1965979 pages RAM [ 319.192205] 0 pages HighMem/MovableOnly 06:17:42 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xffffffff, 0x0, 0x4, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010db1470592e00"/26, @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a0036459cdb26cd03ccb7"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000080)={0x8, {0x1, 0x6b2, 0x3, 0x6}, {0x0, 0x7, 0x7f, 0x7fff}, {0x3, 0x5}}) r0 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x9, 0x80000) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x228, 0x13, 0x100, 0x70bd2b, 0x25dfdbfd, {0x28, 0x0, 0x78, 0x89, {0x4e20, 0x4e20, [0x383a, 0x80, 0xfb1d, 0x6], [0x20, 0x5, 0x9b, 0x1ff], 0x0, [0x9, 0xffffff22]}, 0x7, 0xfffffffa}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x8e, 0x1, "8cf53ea7f735fe4f10765526e210ca7ac42983bb734bdd2f2f8f6c7809eb3d3c4bdd7db65fb86ce956016a06d64631b408672116c9c35b3f77b001dcc6285aa0464ea811a75d5915d8a16cc13acf53dec0b6458688a975f3b9e4eb76fbeac3550ffd3efa3da8fd055b57142c0b457b90a2ae87682bd3680bbd9d73462f005c69ed9f080e6e7999eabeec"}, @INET_DIAG_REQ_BYTECODE={0xb, 0x1, "d45fe687192e0b"}, @INET_DIAG_REQ_BYTECODE={0x8e, 0x1, "f5d851f2d61cc89686903d262c76fcdb72fd2fd18b2f4f63b09a4bb041247d9231d9912894c3d020a42c209901d26b8d0d81bccf6269aa3a89c7c35992014c45a1a34ee08b5f390bb47e3965d4e7fdd6dd36a1790926f2fed038350b1b3b29da1640204a250d7eff06c71345c7b9f167a48de9f1e5f5ada663271d70ce6a87b5ea309c7a448ee1604e24"}, @INET_DIAG_REQ_BYTECODE={0x8, 0x1, "17222337"}, @INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "dd4384da929a44f9bbc5b19a418a90619c6973d5fef4d8f23f6c60dbbd61acc6316e938c76518eb8b7372ec09569c9a7e931a633948e276476cc6e06034cb979274bd0a80ab6ff9b17d25afb8f5832555855a998979d25e75138fb62b6b0421f9243a75839246b093cba33292d6d599a2119ba0aeebbfc0dd750febf8a3f978f50a74214d37f8782"}, @INET_DIAG_REQ_BYTECODE={0x15, 0x1, "b25f762d581a3263369b80180555e0c296"}]}, 0x228}, 0x1, 0x0, 0x0, 0x8011}, 0x8801) openat$urandom(0xffffffffffffff9c, &(0x7f0000000500)='/dev/urandom\x00', 0x201, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x700000000000000) 06:17:42 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000000)=0x3f, &(0x7f00000000c0)=0x4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x40}}, 0x0) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0x1, 0x1}) [ 319.199623] 339073 pages reserved [ 319.203252] 0 pages cma reserved 06:17:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f00000000c0)=0x400, 0x1) connect$inet(r0, &(0x7f0000000b00)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007f80)=[{{0x0, 0xe000008, &(0x7f0000000180)=[{&(0x7f0000000000)="94eb98c5f97e2c2a4a02408ccb88a96a52bbf810f9b72aa17225a6c6bcb1f56bc51ce9668fee7066d816af4c6bf88f7adff4c49f3dc6e467603e98d004b63403d6570cf7d036784cb892eb7750", 0x4d}, {&(0x7f00000003c0)="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", 0x574}], 0x2}}], 0x400000000000398, 0x1c00) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 06:17:42 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="020300030c000000dfffffff0000010002000900080000006b00000000000002030006000000000004000000e000000100000000000000000200ff91ec49d97a9410e9b318cc414bcf0100000000000000001600000000030005000000000002000000ac1e0001"], 0x60}}, 0x0) ioctl$FITHAW(r3, 0xc0045878) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffff4}]}}}) [ 319.260109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56080 sclass=netlink_route_socket pid=17512 comm=syz-executor.0 06:17:42 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) read$rfkill(r0, &(0x7f0000000000), 0x8) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:42 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x80, 0x0, 0x0, @time={0x40}, {}, {}, @note={0x32, 0x5, 0x3f, 0x30, 0x1f}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 06:17:42 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="25bca2740a0000002734fa0095e0612680ecb86a5488dfa802000000020000000a00000079a782d225000000020608000000952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000000)={[{@dioread_lock='dioread_lock'}]}) execveat(r0, &(0x7f0000000100)='./file1/file0\x00', &(0x7f0000000200)=[&(0x7f0000000140)='dioread_lock', &(0x7f0000000180)=':]\x00'], &(0x7f0000000380)=[&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='ext3\x00', &(0x7f00000002c0)='ext3\x00', &(0x7f0000000300)='\x8c&', &(0x7f0000000340)='ext3\x00'], 0x100) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) [ 319.320310] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 319.381406] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 319.395998] CPU: 0 PID: 17521 Comm: syz-executor.3 Not tainted 4.14.194-syzkaller #0 [ 319.403936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.413302] Call Trace: [ 319.415928] dump_stack+0x1b2/0x283 [ 319.419569] warn_alloc.cold+0x96/0x1cc [ 319.423561] ? zone_watermark_ok_safe+0x220/0x220 [ 319.428424] ? perf_trace_lock_acquire+0x510/0x510 [ 319.433380] ? perf_trace_lock_acquire+0x510/0x510 [ 319.438714] ? fs_reclaim_release+0xd0/0x110 [ 319.443152] __vmalloc_node_range+0x10e/0x150 [ 319.447669] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 319.453054] vmalloc_user+0x47/0xa0 [ 319.456722] ? vb2_vmalloc_alloc+0xa6/0x280 [ 319.461061] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 319.466445] vb2_vmalloc_alloc+0xa6/0x280 [ 319.470613] __vb2_queue_alloc+0x47a/0xd90 [ 319.474879] vb2_core_create_bufs+0x279/0x5a0 [ 319.479393] ? __vb2_queue_free+0x7a0/0x7a0 [ 319.483732] ? __lock_acquire+0x5fc/0x3f20 [ 319.488006] vb2_create_bufs+0x2e1/0x5b0 [ 319.492084] ? vb2_thread_start.cold+0x24/0x24 [ 319.496681] ? check_preemption_disabled+0x35/0x240 [ 319.501711] ? perf_trace_lock+0xf7/0x490 [ 319.505885] vb2_ioctl_create_bufs+0x1f7/0x330 [ 319.510504] v4l_create_bufs+0xa4/0x150 [ 319.514503] __video_do_ioctl+0x65b/0x6a0 [ 319.518689] ? video_ioctl2+0x30/0x30 [ 319.522499] ? __might_fault+0x177/0x1b0 [ 319.526568] video_usercopy+0xf5/0xe90 [ 319.530459] ? video_ioctl2+0x30/0x30 [ 319.534268] ? v4l_g_ctrl+0x390/0x390 [ 319.538079] ? check_preemption_disabled+0x35/0x240 [ 319.543123] ? check_preemption_disabled+0x35/0x240 [ 319.548153] ? perf_trace_lock+0xf7/0x490 [ 319.552314] ? perf_trace_lock_acquire+0x510/0x510 [ 319.557280] v4l2_ioctl+0x1bb/0x2f0 [ 319.560915] ? v4l2_open+0x2f0/0x2f0 [ 319.564656] do_vfs_ioctl+0x75a/0xff0 [ 319.568482] ? selinux_inode_setxattr+0x730/0x730 [ 319.573355] ? ioctl_preallocate+0x1a0/0x1a0 [ 319.577810] ? lock_downgrade+0x740/0x740 [ 319.581973] ? __fget+0x225/0x360 [ 319.585438] ? security_file_ioctl+0x83/0xb0 [ 319.589876] SyS_ioctl+0x7f/0xb0 [ 319.593253] ? do_vfs_ioctl+0xff0/0xff0 [ 319.597253] do_syscall_64+0x1d5/0x640 [ 319.601148] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 319.606351] RIP: 0033:0x45d579 [ 319.609537] RSP: 002b:00007fa14ead2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.617246] RAX: ffffffffffffffda RBX: 000000000001f340 RCX: 000000000045d579 [ 319.624522] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 319.631815] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 319.639108] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 319.646379] R13: 00007ffc763ef02f R14: 00007fa14ead39c0 R15: 000000000118cf4c 06:17:43 executing program 5: accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80000) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000000)=0x9, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="dd6622a83a559a6342a27a17a10c0c45b4f8a174f831eebfb5806c7e", 0x1c) 06:17:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0xfffffee6, 0x0, 0x71, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1da}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x36, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) [ 319.700698] EXT4-fs (loop2): Mount option "dioread_lock" incompatible with ext3 [ 319.719046] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 06:17:43 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 319.749771] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 319.754259] Mem-Info: [ 319.771261] active_anon:231166 inactive_anon:4319 isolated_anon:0 [ 319.771261] active_file:7314 inactive_file:22888 isolated_file:0 [ 319.771261] unevictable:0 dirty:281 writeback:0 unstable:0 [ 319.771261] slab_reclaimable:17631 slab_unreclaimable:124607 [ 319.771261] mapped:61710 shmem:4509 pagetables:3512 bounce:0 06:17:43 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) write$input_event(r0, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) [ 319.771261] free:1013593 free_pcp:250 free_cma:0 [ 319.775319] loop5: p2 < > [ 319.811813] EXT4-fs (loop2): Mount option "dioread_lock" incompatible with ext3 [ 319.832037] Node 0 active_anon:924664kB inactive_anon:17276kB active_file:29120kB inactive_file:91552kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:246840kB dirty:1116kB writeback:0kB shmem:18036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 886784kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 06:17:43 executing program 2: ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2011815, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x51, 0x0, 0x1a18c30, &(0x7f0000000080)={[{@test_dummy_encryption='test_dummy_encryption'}], [{@subj_type={'subj_type', 0x3d, 'test_dummy_encryption'}}]}) [ 319.881122] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 319.907549] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 319.974761] input: syz1 as /devices/virtual/input/input10 [ 320.011064] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 320.020520] print_req_error: I/O error, dev loop2, sector 0 [ 320.025294] Node 0 DMA32 free:257704kB min:36272kB low:45340kB high:54408kB active_anon:924804kB inactive_anon:17276kB active_file:29120kB inactive_file:91552kB unevictable:0kB writepending:1116kB present:3129332kB managed:2621192kB mlocked:0kB kernel_stack:10816kB pagetables:14048kB bounce:0kB free_pcp:1256kB local_pcp:672kB free_cma:0kB 06:17:43 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1cb, &(0x7f0000000300)='bdev!)-%+wlan\x00posi\x19Mx_dxl_accesszQ\tU\x97\x12=J\xd5\x8b;YE\xec\x8c;\xf7\xcc\xa7\x8b6\n\xbe\x01\x01\xae\xb6\f4\x87\xd9j\xd8\x0e\xc2\x10\xb1\x7f\x95\x01fE\xaea\x10\x8f\xac\xa9+V\x863Hhk{2\x00\x14I\xf7\xd6\xcd)\x05\x87q6\xed~\xd0\xb2\xf8\x8d\xaa\b\xe4\"\x1c\xbf\x8f_[\x17@\xe5\xec\x10\a\xb95w\x8by}/\x8cw\xe6\x99\xfe \x84]8\x940U\xb3E;\xff\xa1!\x9a\x87\x88\x02\xbf\xab\x97B\xd9\x06\xf2\n\xf7\x1f\xd8v\x7fD\xf2\x87\xf7}V\x89}\xf0\xb7\x8d\x85\xf6\x9b\xcc\xd3Lh.\r\xd3J\"\x1f\xdeW;F.\xdf$\xee\x18\x0e5\xa1\xfcN\x88`\xbbj,q[\x90/\x9b\xf0\xccr\xc1\xa8\x85E\x85p+\xd1\xbe\x10\rgx\xb8\x93k\x8c\x1dTi\xafq\xde\x06/ \x93O.\xe5<0\xfa\b\x82\xe4c&\x99\xd6psf\xa8\xacjh9\x8bk\x8f\n$\xf2\x06#\xc8\xd2\x00\x00w\x03,\xbb\xed\xf1o\xd8\x19\xd2k\xbb\xd3\x18E\x0e&\x83\xdfWL?P$\xb4a\f\x154\xdd\xacx\x91<\x97\x13\xab\xe2\xdd\n\x13\x19\xb9U\n\xb5\xb6\xffBQ\x80\xe6\xe6\xaf\xc8\x15_>\xe6\xfc\xb9R\x06\xcd/\x87\x11\xf1\xb9\xbe&,c\xfd3\xc4\xeaP\x9b\xdf5\xcc\xa4RDx\xad\xc0\x8f|\xe3u\xbe\x1e\xd5\xa6\xcc\xb8\x86\x8b0\'\xcc\x01\x9bQ/\xf9\xa7vfa\xdf!\x1axt\xd1\r\xd9&MC\xcc,2\xce\xd2kCJ\x10\x88\xc5#\x92\xa32)2\xd3\xa02q\xdb\xe4\xe3\x97\x9d\xbc\xc9\xf8G\xc6\xd5\x8cR\x1e\xaf\xdc\x9aGW\an\xe3\xb7\xc4\x10;\x06[\x91\xe9\xe3\xb4^\xc7\xc4\x03\x13\xbd\xc9\xc6~'}, 0xffffff46) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) [ 320.077263] input: syz1 as /devices/virtual/input/input11 06:17:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$CHAR_RAW_FLSBUF(r8, 0x1261, &(0x7f0000000140)=0x56e4) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6, 0x14301}}, 0x20}}, 0x0) [ 320.203363] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 320.242123] lowmem_reserve[]: 0 0 0 0 0 [ 320.249033] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 320.265575] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 320.281546] loop5: p2 < > [ 320.302714] EXT4-fs (sda1): Test dummy encryption mount option ignored [ 320.347171] EXT4-fs (sda1): Unrecognized mount option "subj_type=test_dummy_encryption" or missing value [ 320.349666] lowmem_reserve[]: 0 0 0 0 0 [ 320.392213] Node 1 Normal free:3780144kB min:53612kB low:67012kB high:80412kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 320.462542] lowmem_reserve[]: 0 0 0 0 0 [ 320.482158] EXT4-fs (sda1): Test dummy encryption mount option ignored [ 320.492593] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15908kB [ 320.522298] EXT4-fs (sda1): Unrecognized mount option "subj_type=test_dummy_encryption" or missing value [ 320.555939] bond4: making interface veth3 the new active one [ 320.574054] Node 0 DMA32: 23*4kB (UME) 154*8kB (UME) 383*16kB (UME) 1052*32kB (UME) 511*64kB (UM) 175*128kB (UME) 130*256kB (UME) 77*512kB (UME) 25*1024kB (UM) 10*2048kB (U) 10*4096kB (UM) = 255964kB [ 320.609709] bond4: Enslaving veth3 as an active interface with an up link 06:17:44 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x9, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0xe, 0x5, 0x6b}, &(0x7f0000000100)=0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}}, 0x10) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f0000000080)={0x7, "ac7c8fca114db6c65791a30132bbccc3fc193a41a63f0963e77a9919406c277d", 0x3, 0x1}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x0, 0x3000000, [], [{0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x802000000000000}]}) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000380)={0x3d, 0x7, 0x6, 0x38000, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}]}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x3) [ 320.646027] device bond4 entered promiscuous mode [ 320.651181] device veth3 entered promiscuous mode [ 320.662287] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 320.668114] 8021q: adding VLAN 0 to HW filter on device bond4 [ 320.678607] Node 1 Normal: 64*4kB (UE) 388*8kB (UE) 289*16kB (UM) 68*32kB (UM) 32*64kB (UME) 21*128kB (UM) 14*256kB (UM) 5*512kB (U) 3*1024kB (UM) 10*2048kB (UME) 912*4096kB (UM) = 3780144kB [ 320.705423] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 320.716118] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 320.727023] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 320.736921] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 320.753570] 23061 total pagecache pages [ 320.760195] 0 pages in swap cache [ 320.764278] Swap cache stats: add 0, delete 0, find 0/0 [ 320.792815] Free swap = 0kB 06:17:44 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffff4}]}}}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r6, @ANYBLOB="0900f015010000001800020008000400000000000000bdd602003dcb", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r7, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x32, &(0x7f0000000100)=""/18, &(0x7f0000000140)=0x12) 06:17:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x14) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000240)="75cc11ec", 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)="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", 0x205}, {&(0x7f0000000080)="deb0dc8433da303df11fb73b207d9edbdf970e61dc24a78a810567c02b8e8129886d6558323383bd247b5bd82b665ae540707f33a1b7218d", 0x38}, {&(0x7f00000000c0)="4b9c415a2b68439980af42260fb1dcf5478946d316bc5b6933ba1ddeb13b84eb1d9abb1f9a8aedfab2dde368f4319674a36c039ac2e100028a3cb9becb39650839d7c9182db9e221f01f52efbd1c1d092f325cd2b95e3671e8ed", 0x5a}, {&(0x7f0000000140)="81562aa0313ea8bc1d", 0x9}, {&(0x7f0000000180)="e577a6cb8d3e42dfae2028d43378cfb59a7dff14e7d3168b4b80e51fde4750baf5c3750dd4b411a15f56172b43162a1d6df723b2e639808f758b3d1c52458dc0b65c837b1a52533c", 0x48}], 0x5}, 0x0) [ 320.802812] Total swap = 0kB [ 320.810519] 1965979 pages RAM [ 320.817198] 0 pages HighMem/MovableOnly [ 320.826887] 339073 pages reserved [ 320.838320] 0 pages cma reserved [ 320.950841] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 320.983595] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 320.994100] CPU: 1 PID: 17684 Comm: syz-executor.3 Not tainted 4.14.194-syzkaller #0 [ 321.002020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.011382] Call Trace: [ 321.013984] dump_stack+0x1b2/0x283 [ 321.017637] warn_alloc.cold+0x96/0x1cc [ 321.021631] ? zone_watermark_ok_safe+0x220/0x220 [ 321.026492] ? perf_trace_lock_acquire+0x510/0x510 [ 321.031448] ? perf_trace_lock_acquire+0x510/0x510 [ 321.036425] ? fs_reclaim_release+0xd0/0x110 [ 321.040863] __vmalloc_node_range+0x10e/0x150 [ 321.045386] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 321.050768] vmalloc_user+0x47/0xa0 [ 321.054406] ? vb2_vmalloc_alloc+0xa6/0x280 [ 321.058737] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 321.064114] vb2_vmalloc_alloc+0xa6/0x280 [ 321.068288] __vb2_queue_alloc+0x47a/0xd90 [ 321.072575] vb2_core_create_bufs+0x279/0x5a0 [ 321.077104] ? __vb2_queue_free+0x7a0/0x7a0 [ 321.081448] ? __lock_acquire+0x5fc/0x3f20 [ 321.085708] vb2_create_bufs+0x2e1/0x5b0 [ 321.089810] ? vb2_thread_start.cold+0x24/0x24 [ 321.094427] ? check_preemption_disabled+0x35/0x240 [ 321.099463] ? perf_trace_lock+0xf7/0x490 [ 321.103636] vb2_ioctl_create_bufs+0x1f7/0x330 [ 321.108238] v4l_create_bufs+0xa4/0x150 [ 321.112233] __video_do_ioctl+0x65b/0x6a0 [ 321.116394] ? video_ioctl2+0x30/0x30 [ 321.120206] ? __might_fault+0x177/0x1b0 [ 321.124346] video_usercopy+0xf5/0xe90 [ 321.128252] ? video_ioctl2+0x30/0x30 [ 321.132063] ? v4l_g_ctrl+0x390/0x390 [ 321.135979] ? check_preemption_disabled+0x35/0x240 [ 321.141202] ? check_preemption_disabled+0x35/0x240 [ 321.146241] ? perf_trace_lock+0xf7/0x490 [ 321.150401] ? perf_trace_lock_acquire+0x510/0x510 [ 321.155365] v4l2_ioctl+0x1bb/0x2f0 [ 321.159027] ? v4l2_open+0x2f0/0x2f0 [ 321.162758] do_vfs_ioctl+0x75a/0xff0 [ 321.166594] ? selinux_inode_setxattr+0x730/0x730 [ 321.171467] ? ioctl_preallocate+0x1a0/0x1a0 [ 321.175885] ? lock_downgrade+0x740/0x740 [ 321.180063] ? __fget+0x225/0x360 [ 321.183533] ? security_file_ioctl+0x83/0xb0 [ 321.187987] SyS_ioctl+0x7f/0xb0 [ 321.191359] ? do_vfs_ioctl+0xff0/0xff0 [ 321.195349] do_syscall_64+0x1d5/0x640 [ 321.199275] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 321.204490] RIP: 0033:0x45d579 [ 321.207683] RSP: 002b:00007fa14ead2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 321.215399] RAX: ffffffffffffffda RBX: 000000000001f340 RCX: 000000000045d579 [ 321.222705] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 321.230001] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 321.237277] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 321.244558] R13: 00007ffc763ef02f R14: 00007fa14ead39c0 R15: 000000000118cf4c [ 321.264380] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 321.277367] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 321.284659] loop5: p2 < > [ 321.292330] Mem-Info: [ 321.294797] active_anon:230475 inactive_anon:4320 isolated_anon:0 [ 321.294797] active_file:7315 inactive_file:22896 isolated_file:0 [ 321.294797] unevictable:0 dirty:288 writeback:0 unstable:0 [ 321.294797] slab_reclaimable:17625 slab_unreclaimable:124244 [ 321.294797] mapped:61693 shmem:4510 pagetables:3388 bounce:0 [ 321.294797] free:1014841 free_pcp:352 free_cma:0 [ 321.329517] Node 0 active_anon:921900kB inactive_anon:17280kB active_file:29124kB inactive_file:91584kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:246772kB dirty:1144kB writeback:0kB shmem:18040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 886784kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 321.359004] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 321.385201] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 321.411864] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 321.417801] Node 0 DMA32 free:263476kB min:36272kB low:45340kB high:54408kB active_anon:922300kB inactive_anon:17280kB active_file:29124kB inactive_file:91584kB unevictable:0kB writepending:1144kB present:3129332kB managed:2621192kB mlocked:0kB kernel_stack:10752kB pagetables:13700kB bounce:0kB free_pcp:1032kB local_pcp:740kB free_cma:0kB [ 321.448616] lowmem_reserve[]: 0 0 0 0 0 [ 321.452855] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 321.479369] lowmem_reserve[]: 0 0 0 0 0 [ 321.483406] Node 1 Normal free:3780144kB min:53612kB low:67012kB high:80412kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 321.511800] lowmem_reserve[]: 0 0 0 0 0 [ 321.517961] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15908kB [ 321.532061] Node 0 DMA32: 243*4kB (UME) 202*8kB (UME) 371*16kB (UME) 1067*32kB (UME) 510*64kB (UM) 174*128kB (UME) 131*256kB (UME) 77*512kB (UME) 25*1024kB (UM) 11*2048kB (UM) 11*4096kB (UM) = 263724kB [ 321.550504] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 321.561597] Node 1 Normal: 64*4kB (UE) 388*8kB (UE) 289*16kB (UM) 68*32kB (UM) 32*64kB (UME) 21*128kB (UM) 14*256kB (UM) 5*512kB (U) 3*1024kB (UM) 10*2048kB (UME) 912*4096kB (UM) = 3780144kB [ 321.579123] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 321.588260] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 321.597037] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 321.606188] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 321.614981] 23071 total pagecache pages [ 321.619170] 0 pages in swap cache [ 321.622626] Swap cache stats: add 0, delete 0, find 0/0 [ 321.628220] Free swap = 0kB [ 321.631331] Total swap = 0kB [ 321.637075] 1965979 pages RAM [ 321.640374] 0 pages HighMem/MovableOnly [ 321.644500] 339073 pages reserved [ 321.648179] 0 pages cma reserved 06:17:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004b00)=ANY=[@ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000020d7fef00008001b0000000000444ab87bab42e9e2e79641efbce94b16cf3bfc59807571d2dc1930fb9ffcbbbe54c38da77c1f69397b1de12ef6c0951524"], 0x28}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setregid(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x80d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:17:45 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) r2 = socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r5, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRESDEC, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) connect$packet(r2, &(0x7f0000000000)={0x11, 0xc, 0x0, 0x1, 0x4, 0x6, @local}, 0x14) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f000081e000)=ANY=[@ANYRES32=0x0, @ANYBLOB="02"], 0x2de) 06:17:45 executing program 5: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x9, 0x12) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f00000001c0)) 06:17:45 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x42040, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="080028bd7000fef001e6da0cf0069fb923ef4ede9edbdf250300000008000200020000000800010002000000080001000000006a"], 0x4c}, 0x1, 0x0, 0x0, 0x4040884}, 0x4040800) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r5, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:17:45 executing program 2: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000003c0)="585ccb01ed83b836c1a6474914dc34e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a1a0900000000000042e3308965210007c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99b2655043a2ce0d23f4d2f6b0bfb1a4ebb022b8753a1880100569f435fb3bae96efb74b50ec93c152f5e8e198a29e51ff5ff70e48884ca000018cea780dc555bd640b9b88a8d2725d8ef8b7df00baad70b5274ccdebeca9943d63800"/192, 0xc0, r1) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000640)="009c6761", 0x4, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r3, r2, r3}, 0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={'crc32\x00'}}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BLKREPORTZONE(r5, 0xc0101282, &(0x7f0000000240)={0x1, 0x2, 0x0, [{0x800, 0x8, 0x80, 0xff, 0x8, 0x4, 0x7}, {0x100000000, 0x1000000000049, 0x9, 0x20, 0x1, 0x4, 0x9}]}) open(&(0x7f0000000140)='./file0\x00', 0x88d225a28a2ab297, 0x14) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000480)=ANY=[@ANYBLOB="a30000000000000000002e6f0000000000000000000000003dc34041ccae0dae000000006f32a981ae0e9cb9786be8b0b2ecce0bc17ea3a699112b5f232657e0d6523a21f0c8e0f9eaa49720965abc1a08c559013ed4931c76bcbde7bf443f252a4f4f8ac769dc006b8b23cdaa7e324d784ce113b6b196358f6401e0"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xa732}) 06:17:45 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f00000025c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000002440)=[{{&(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000240)=""/161, 0xa1}, {&(0x7f0000000300)=""/250, 0xfa}, {&(0x7f0000000180)=""/53, 0x35}, {&(0x7f0000000400)=""/117, 0x75}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/218, 0xda}], 0x6, &(0x7f0000001600)=""/161, 0xa1}, 0x401}, {{&(0x7f00000016c0)=@rc={0x1f, @none}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001740)=""/249, 0xf9}], 0x1}, 0x33ed}, {{&(0x7f0000001840)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000001900)=[{&(0x7f00000018c0)=""/20, 0x14}], 0x1, &(0x7f0000001940)=""/215, 0xd7}, 0x7}, {{&(0x7f0000001a40)=@isdn, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001ac0)=""/26, 0x1a}], 0x1}, 0x3ff}, {{&(0x7f0000001b40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002140)=[{&(0x7f0000001bc0)=""/68, 0x44}, {&(0x7f0000001c40)=""/198, 0xc6}, {&(0x7f0000001d40)=""/36, 0x24}, {&(0x7f0000001d80)=""/201, 0xc9}, {&(0x7f0000001e80)=""/105, 0x69}, {&(0x7f0000001f00)=""/50, 0x32}, {&(0x7f0000001f40)=""/224, 0xe0}, {&(0x7f0000002040)=""/84, 0x54}, {&(0x7f00000020c0)=""/73, 0x49}], 0x9, &(0x7f0000002200)=""/246, 0xf6}, 0xee2}, {{&(0x7f0000002300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002380)=""/57, 0x39}], 0x1, &(0x7f0000002400)=""/33, 0x21}, 0x4}], 0x6, 0x1, &(0x7f0000002600)={r2, r3+60000000}) ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f0000002640)={@null=' \x00', 0x6, 'veth0_to_batadv\x00'}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffff4}]}}}) 06:17:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7f, 0x8281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x10, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000140)=0xb40) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x7c774aac) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x242142, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000180)={@empty, @loopback}, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) write$9p(r2, &(0x7f0000000400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb84", 0x39f) sendfile(r2, r3, 0x0, 0x1c500) [ 322.448827] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 322.489002] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 322.491961] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 322.503691] syz-executor.3 cpuset= [ 322.511910] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 322.515217] / mems_allowed=0-1 [ 322.549153] CPU: 1 PID: 17715 Comm: syz-executor.3 Not tainted 4.14.194-syzkaller #0 [ 322.553337] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 322.557086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 322.557092] Call Trace: [ 322.557111] dump_stack+0x1b2/0x283 [ 322.557129] warn_alloc.cold+0x96/0x1cc [ 322.557141] ? zone_watermark_ok_safe+0x220/0x220 [ 322.557153] ? perf_trace_lock_acquire+0x510/0x510 [ 322.557164] ? perf_trace_lock_acquire+0x510/0x510 [ 322.557176] ? fs_reclaim_release+0xd0/0x110 [ 322.557193] __vmalloc_node_range+0x10e/0x150 [ 322.557206] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 322.557214] vmalloc_user+0x47/0xa0 [ 322.557223] ? vb2_vmalloc_alloc+0xa6/0x280 [ 322.557230] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 322.557237] vb2_vmalloc_alloc+0xa6/0x280 [ 322.557249] __vb2_queue_alloc+0x47a/0xd90 [ 322.557274] vb2_core_create_bufs+0x279/0x5a0 [ 322.557285] ? __vb2_queue_free+0x7a0/0x7a0 [ 322.557300] ? __lock_acquire+0x5fc/0x3f20 [ 322.557314] vb2_create_bufs+0x2e1/0x5b0 [ 322.557341] ? vb2_thread_start.cold+0x24/0x24 [ 322.557351] ? check_preemption_disabled+0x35/0x240 [ 322.557362] ? perf_trace_lock+0xf7/0x490 [ 322.557374] vb2_ioctl_create_bufs+0x1f7/0x330 [ 322.557387] v4l_create_bufs+0xa4/0x150 [ 322.557399] __video_do_ioctl+0x65b/0x6a0 [ 322.557414] ? video_ioctl2+0x30/0x30 [ 322.557427] ? __might_fault+0x177/0x1b0 [ 322.557441] video_usercopy+0xf5/0xe90 [ 322.557451] ? video_ioctl2+0x30/0x30 [ 322.557461] ? v4l_g_ctrl+0x390/0x390 [ 322.557470] ? check_preemption_disabled+0x35/0x240 [ 322.557483] ? check_preemption_disabled+0x35/0x240 [ 322.557496] ? perf_trace_lock+0xf7/0x490 [ 322.557506] ? perf_trace_lock_acquire+0x510/0x510 [ 322.557521] v4l2_ioctl+0x1bb/0x2f0 [ 322.557530] ? v4l2_open+0x2f0/0x2f0 [ 322.557544] do_vfs_ioctl+0x75a/0xff0 [ 322.557556] ? selinux_inode_setxattr+0x730/0x730 [ 322.557567] ? ioctl_preallocate+0x1a0/0x1a0 [ 322.557576] ? lock_downgrade+0x740/0x740 [ 322.557593] ? __fget+0x225/0x360 [ 322.557610] ? security_file_ioctl+0x83/0xb0 [ 322.557622] SyS_ioctl+0x7f/0xb0 [ 322.557630] ? do_vfs_ioctl+0xff0/0xff0 [ 322.557644] do_syscall_64+0x1d5/0x640 [ 322.563962] loop5: p2 < > [ 322.572912] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 322.572923] RIP: 0033:0x45d579 [ 322.572928] RSP: 002b:00007fa14eab1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 322.572940] RAX: ffffffffffffffda RBX: 000000000001f340 RCX: 000000000045d579 [ 322.572947] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 322.572952] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 322.572958] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 322.572964] R13: 00007ffc763ef02f R14: 00007fa14eab29c0 R15: 000000000118cfec [ 322.646462] Mem-Info: [ 322.653167] active_anon:234188 inactive_anon:4321 isolated_anon:0 [ 322.653167] active_file:7315 inactive_file:22904 isolated_file:0 [ 322.653167] unevictable:0 dirty:288 writeback:0 unstable:0 [ 322.653167] slab_reclaimable:17498 slab_unreclaimable:124451 [ 322.653167] mapped:61725 shmem:4510 pagetables:3508 bounce:0 [ 322.653167] free:1010898 free_pcp:205 free_cma:0 [ 322.668490] Node 0 active_anon:936752kB inactive_anon:17284kB active_file:29124kB inactive_file:91616kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:246900kB dirty:1144kB writeback:0kB shmem:18040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 884736kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 322.672469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.675130] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 322.675136] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 322.675156] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 322.675177] Node 0 DMA32 free:247332kB min:36272kB low:45340kB high:54408kB active_anon:936752kB inactive_anon:17284kB active_file:29124kB inactive_file:91616kB unevictable:0kB writepending:1144kB present:3129332kB managed:2621192kB mlocked:0kB kernel_stack:11136kB pagetables:14032kB bounce:0kB free_pcp:820kB local_pcp:252kB free_cma:0kB [ 322.675198] lowmem_reserve[]: 0 0 0 0 0 06:17:46 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 322.675221] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 322.675240] lowmem_reserve[]: 0 0 [ 322.792762] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 322.921277] 0 [ 322.941893] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 322.965051] 0 [ 323.005610] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 323.025186] 0 [ 323.028608] loop5: p2 < > 06:17:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept4$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10, 0x800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x10182, 0x0) read$snapshot(r1, &(0x7f0000000500)=""/211, 0xd3) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mount$9p_xen(&(0x7f0000000440)='syz\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='9p\x00', 0x120c040, &(0x7f0000000600)=ANY=[@ANYBLOB="74725c6e733d78656e2c76657273696f6e3d3970323030305f61707072616973652c736d61636b6673666c6f6f723d2f64657603704733002c7063723d30303030303030303030303030303030303033372c636f6e746578743d757365725f752c6465666b6f6e746578743d75fc959e4a520f49b50f7feaff1dbf51f979a2b8da673dcb89e36e65645f752c6f626a5f757365723d21f096", @ANYRESDEC=r2, @ANYRES16=r4, @ANYRESDEC=0xee01, @ANYBLOB="2c7375626a5f726f6c4218d00945bffaff65742f74756e002c00"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000037000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000240)="66b9d60a000066b8da10000066ba000000000f300f01f20f01c2f2af66b99e0a00000f320ffffe2620a8000066b8005800000f23d80f21f86635c00000600f23f8f76c00660f3a40fa31", 0x4a}], 0x1, 0x40, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000002c0)={0x103fe, 0x3, 0x1000, 0x2000, &(0x7f0000045000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000030000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6f, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x7b084, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x334}, 0x44020, 0x0, 0x0, 0x4, 0x10000, 0x8e311}, 0x0, 0x0, 0xffffffffffffffff, 0x3b4b26472ceb430a) socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 323.059254] Node 1 Normal free:3780144kB min:53612kB low:67012kB high:80412kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 323.097562] lowmem_reserve[]: 0 0 0 0 0 [ 323.114661] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15908kB [ 323.133938] Node 0 DMA32: 117*4kB (UME) 136*8kB (UME) 301*16kB (UME) 1062*32kB (UME) 511*64kB (UM) 174*128kB (UME) 131*256kB (UME) 77*512kB (UME) 25*1024kB (UM) 11*2048kB (UM) 8*4096kB (UM) = 249188kB [ 323.155150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 323.163536] Node 0 [ 323.172099] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 323.176989] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 323.188903] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 06:17:46 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x2020882, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000200)='cpuset.mem_exclusive\x00', 0x2, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000280)='0', 0x1}, {0x0, 0x2}], 0x2) r4 = socket(0x10, 0x803, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r5, 0x4112, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r8, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r9, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) [ 323.201957] Node 1 Normal: 64*4kB (UE) 388*8kB (UE) 289*16kB (UM) 68*32kB (UM) 32*64kB (UME) 21*128kB (UM) 14*256kB (UM) 5*512kB (U) 3*1024kB (UM) 10*2048kB (UME) 912*4096kB (UM) = 3780144kB [ 323.214304] loop5: p2 < > 06:17:46 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_1\x00', 0x4000}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r5, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r6, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f00000000c0)={0x1f, {{0xa, 0x877e, 0xffffffff, @mcast2, 0x3f}}, {{0xa, 0x4e21, 0x0, @local, 0x1}}}, 0x108) r8 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 323.257821] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 323.275344] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 323.296060] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 06:17:46 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f0000000400)='hfs\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x400, 0x0) syz_read_part_table(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa0080, 0xc) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x20004000) pipe(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = syz_open_dev$vbi(&(0x7f00000002c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x4408c3, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000100)) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000300)={0x0, 0x0, 0x100, 0x1, {0x9, 0x2, 0x0, 0x1000}}) syz_open_procfs(0xffffffffffffffff, 0x0) [ 323.329958] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 323.355194] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 323.388293] 23079 total pagecache pages [ 323.411142] 0 pages in swap cache [ 323.426095] Swap cache stats: add 0, delete 0, find 0/0 [ 323.435821] Free swap = 0kB [ 323.448150] Total swap = 0kB [ 323.451560] 1965979 pages RAM [ 323.455217] 0 pages HighMem/MovableOnly 06:17:46 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f0000000100)={0x6bc276a4, 0x0, 0x8001, 0x100}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="090000000000e88fadd900008100040006000100ea28"], &(0x7f0000000180)=0x16) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffff4}]}}}) [ 323.473853] 339073 pages reserved [ 323.481805] 0 pages cma reserved 06:17:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x0, 0xb}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20040}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400200b17113680d7991ee2c9d7f18dfcd6c0000002bb882d59f24662e", @ANYRES16=0x0, @ANYBLOB="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"], 0x200}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000801) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6}, 0x0) clone(0x20040103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/adsp1\x00', 0x105102, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001400)=""/249}], 0x0, &(0x7f0000000100)=""/148, 0xfffffffffffffd61}}, {{&(0x7f0000000200)=@xdp, 0x0, &(0x7f0000001840)=[{&(0x7f0000001500)=""/226}, {&(0x7f0000001600)=""/145}, {&(0x7f0000001280)=""/18}, {&(0x7f00000016c0)=""/119}, {&(0x7f0000001740)=""/220}], 0x0, &(0x7f00000018c0)=""/216}, 0x8}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000019c0)=""/83}, {&(0x7f0000001a40)=""/61}], 0x0, &(0x7f0000001ac0)=""/120}}, {{&(0x7f0000001b40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x0, &(0x7f0000002d80)=[{&(0x7f0000001bc0)=""/182}, {&(0x7f0000001c80)=""/251}, {&(0x7f0000001d80)=""/4096}], 0x0, &(0x7f0000002dc0)=""/20}, 0x19}, {{&(0x7f0000002e00)=@sco={0x1f, @none}, 0x0, &(0x7f0000003180)=[{&(0x7f0000002e80)=""/178}, {&(0x7f0000002f40)=""/43}, {&(0x7f0000002f80)=""/151}, {&(0x7f0000003040)=""/142}, {&(0x7f0000003100)=""/88}], 0x0, &(0x7f0000003200)}, 0x2}, {{&(0x7f0000003240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x0, &(0x7f00000032c0), 0x0, &(0x7f0000003300)=""/226}, 0xfffffff7}, {{&(0x7f0000003400)=@in={0x2, 0x0, @multicast2}, 0x0, &(0x7f0000004a40)=[{&(0x7f0000003480)=""/255}, {&(0x7f0000003580)=""/207}, {&(0x7f0000003680)=""/168}, {&(0x7f0000003740)=""/87}, {&(0x7f00000037c0)=""/151}, {&(0x7f0000003880)=""/4096}, {&(0x7f0000004880)=""/106}, {&(0x7f0000004900)=""/40}, {&(0x7f0000004940)=""/231}]}, 0x5f4f}, {{&(0x7f0000004b00)=@nl=@proc, 0x0, &(0x7f0000005040)=[{&(0x7f0000004b80)=""/230}, {&(0x7f0000004c80)=""/249}, {&(0x7f0000004d80)=""/223}, {&(0x7f0000004e80)=""/62}, {&(0x7f0000004ec0)=""/180}, {&(0x7f0000004f80)=""/163}]}, 0x8}, {{&(0x7f00000050c0)=@un=@abs, 0x0, &(0x7f0000005140), 0x0, &(0x7f0000005180)=""/46}}, {{&(0x7f00000051c0)=@l2, 0x0, &(0x7f0000005280)=[{&(0x7f0000005240)=""/46}], 0x0, &(0x7f00000052c0)=""/147}, 0xfe}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) 06:17:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="03000000000020c3067d3100020000090400000000000000f6ffffff0000000001000000000000fffffffffffffff3100000f2ffff0700000a000000ebf5867103ecd66685885b8376"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f62, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) pwritev2(r5, &(0x7f0000001480)=[{&(0x7f00000000c0)="93938a9d0496941f8263b330f97e6c5bb515ddc8ec61f656d7c5d0c3bbfbefe9fb6e414c303c36e74b1ed6a405f3aeb397725fae421d0371705bba84f6725932abed1a28753f264022013afee4606f", 0x4f}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000000240)="33d19dd8263cdab6609ce008e066f7c2060b6b61dd70f7d9b342aa0f7788a40250", 0x21}, {&(0x7f0000001380)="001a433ecad9f6308405c88de4d9dd16172f246522e3d06ef4de2e7e0af3fdf0db798af3c98a60fbda9658d0b4ec1c", 0x2f}, {&(0x7f00000013c0)="d051a6915f4fedaf326600a04cab8dc4730a9b7aa32a567a1321c53e9d312fb680517d77ddecfa1e30786669ee6f4d1354bc923884a3280cbd980307e41f5d36975fe2418b37cbd8071e840a2151bb1676957f3c77ed40aa28e6d45f53809f7e77b66828dd30fe66f9b1b8bd7d513fe7c4fc91333397da979145f01c48164de5b3987db1fa063c1e3225cc77fb030b", 0x8f}], 0x5, 0x2, 0x7f, 0x3) r6 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 323.592352] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) 06:17:47 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/30, 0x1e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r5, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r6, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9364}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x83}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4c}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x48}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000800}, 0x4801) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ipItnl0\x00') [ 323.631621] audit: type=1326 audit(1598422667.095:135): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17777 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x4603ba code=0x0 [ 323.679779] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 323.710174] CPU: 1 PID: 17774 Comm: syz-executor.3 Not tainted 4.14.194-syzkaller #0 [ 323.718122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.727484] Call Trace: [ 323.730088] dump_stack+0x1b2/0x283 [ 323.733755] warn_alloc.cold+0x96/0x1cc [ 323.737876] ? zone_watermark_ok_safe+0x220/0x220 [ 323.742733] ? perf_trace_lock_acquire+0x510/0x510 [ 323.747706] ? perf_trace_lock_acquire+0x510/0x510 [ 323.752651] ? fs_reclaim_release+0xd0/0x110 [ 323.757076] __vmalloc_node_range+0x10e/0x150 [ 323.761602] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 323.766993] vmalloc_user+0x47/0xa0 [ 323.770627] ? vb2_vmalloc_alloc+0xa6/0x280 [ 323.774949] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 323.780327] vb2_vmalloc_alloc+0xa6/0x280 [ 323.784489] __vb2_queue_alloc+0x47a/0xd90 [ 323.788742] vb2_core_create_bufs+0x279/0x5a0 [ 323.793243] ? __vb2_queue_free+0x7a0/0x7a0 [ 323.797576] ? __lock_acquire+0x5fc/0x3f20 [ 323.801901] vb2_create_bufs+0x2e1/0x5b0 [ 323.805990] ? vb2_thread_start.cold+0x24/0x24 [ 323.810582] ? check_preemption_disabled+0x35/0x240 [ 323.815622] ? perf_trace_lock+0xf7/0x490 [ 323.819798] vb2_ioctl_create_bufs+0x1f7/0x330 [ 323.824394] v4l_create_bufs+0xa4/0x150 [ 323.828379] __video_do_ioctl+0x65b/0x6a0 [ 323.832540] ? video_ioctl2+0x30/0x30 [ 323.836377] ? __might_fault+0x177/0x1b0 [ 323.840451] video_usercopy+0xf5/0xe90 [ 323.844375] ? video_ioctl2+0x30/0x30 [ 323.848186] ? v4l_g_ctrl+0x390/0x390 [ 323.851991] ? check_preemption_disabled+0x35/0x240 [ 323.857021] ? check_preemption_disabled+0x35/0x240 [ 323.862054] ? perf_trace_lock+0xf7/0x490 [ 323.866209] ? perf_trace_lock_acquire+0x510/0x510 [ 323.871187] v4l2_ioctl+0x1bb/0x2f0 [ 323.874819] ? v4l2_open+0x2f0/0x2f0 [ 323.878548] do_vfs_ioctl+0x75a/0xff0 [ 323.882373] ? selinux_inode_setxattr+0x730/0x730 [ 323.887229] ? ioctl_preallocate+0x1a0/0x1a0 [ 323.891650] ? lock_downgrade+0x740/0x740 [ 323.895830] ? __fget+0x225/0x360 [ 323.899310] ? security_file_ioctl+0x83/0xb0 [ 323.903737] SyS_ioctl+0x7f/0xb0 [ 323.907118] ? do_vfs_ioctl+0xff0/0xff0 [ 323.911114] do_syscall_64+0x1d5/0x640 [ 323.915036] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 323.920249] RIP: 0033:0x45d579 [ 323.923443] RSP: 002b:00007fa14ead2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 323.931161] RAX: ffffffffffffffda RBX: 000000000001f340 RCX: 000000000045d579 [ 323.938467] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 323.945765] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 323.953051] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 323.960329] R13: 00007ffc763ef02f R14: 00007fa14ead39c0 R15: 000000000118cf4c 06:17:47 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800b4002c", @ANYRES32=r4, @ANYBLOB="0900f015010000001800120008000100736974000c8ef90008000300eb463c3dd2edc801f054f7cdcf40758f34bade4c28a8977d40a931370eecb15b8f28dd3f18e266a2d67b229104c4c498c007638738c7b18d7dd65ffa6039a966f75fba46ca13ce5469f67584e1c1c45d873f9e00c5bd8e5d0ad76d53324b40bf438471a682b8afeec1a27da7faa4366a442c4b35099d708175692ff4826a5ca0545a3232888be99b5f311bd16309dab0f4ec3379624cec9af350b4", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000000002101fbff01720000090000001f200000", @ANYRES32=r5, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000ed284dab798411abff2967d6071dbae7c1932712b14f9d2b2407ea18", @ANYRES32=r6, @ANYBLOB="14000200fe8000"/20], 0x2c}}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x245, 0x9, 0xfff, 0x4, 0x40}, &(0x7f0000000180)=0x14) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x4201, 0x0) setsockopt$inet6_int(r7, 0x29, 0x0, &(0x7f0000000000)=0x80000008, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfffffffffffffffa) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x3, @local, 0x8002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 06:17:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000001200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 324.258170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17811 comm=syz-executor.1 06:17:47 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x222203, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000080), 0x3b0d139ca3466e26}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x2}, 0x0, 0xe, r0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f00000002c0)=""/246) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x9, 0x121000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000440)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 324.331125] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 06:17:47 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x100}) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r4, &(0x7f0000000040)=""/46, 0x2e) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 324.390285] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 324.416719] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 06:17:47 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16, 0x395b}, {&(0x7f0000000080)="ed7d4c63e22936ec25e6ca0187491500e26c", 0x12, 0x6}], 0x0, &(0x7f0000000140)) 06:17:47 executing program 5: r0 = socket(0x10, 0x2, 0x100000) io_setup(0x8, &(0x7f0000000640)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000)={0x0, 0x1000}, &(0x7f00000000c0)={'enc=', 'raw', ' hash=', {'sha512-ssse3\x00'}}, &(0x7f00000010c0)="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", &(0x7f0000000040)) 06:17:48 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x402000, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000000fe5392be50612e7b6c96b90ea0b712a527277ef67cd93698f30ead4f63c452c3c96bd4a5c5db06dda6ae55267fc4db05d15ec637108a3a250995d0cea000d63ed5511d0889f30a33b7b7bbd5ac7dfa765fecb6b8624b11f21f88924e1346d87f7e9f450badf9", @ANYRES16=0x0, @ANYBLOB="000326bd7000fbdbdf2501000000000000000741000000140018000000437564703a73797a3200000000"], 0x30}, 0x1, 0x0, 0x0, 0x8901}, 0x4000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x93) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r1, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r2], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200000000000000000002"], 0x2c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000200)={0x200, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000100)={'erspan0\x00', @ifru_mtu=0x1}}) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') socket$pppoe(0x18, 0x1, 0x0) getdents(r3, &(0x7f0000000040)=""/46, 0x2e) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 324.627222] FAT-fs (loop1): invalid media value (0x00) [ 324.650183] FAT-fs (loop1): Can't find a valid FAT filesystem [ 324.754237] FAT-fs (loop1): invalid media value (0x00) [ 324.767878] FAT-fs (loop1): Can't find a valid FAT filesystem [ 324.833944] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 324.844563] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 324.853106] loop5: p2 < > [ 324.879976] Mem-Info: [ 324.882457] active_anon:234221 inactive_anon:4320 isolated_anon:0 [ 324.882457] active_file:7317 inactive_file:22917 isolated_file:0 [ 324.882457] unevictable:0 dirty:292 writeback:1 unstable:0 [ 324.882457] slab_reclaimable:17533 slab_unreclaimable:125190 [ 324.882457] mapped:61744 shmem:4510 pagetables:3549 bounce:0 [ 324.882457] free:1009912 free_pcp:340 free_cma:0 [ 324.971012] Node 0 active_anon:936884kB inactive_anon:17280kB active_file:29132kB inactive_file:91668kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:246976kB dirty:1160kB writeback:4kB shmem:18040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 897024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 325.040688] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 325.099898] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 325.163735] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 325.181461] Node 0 DMA32 free:241696kB min:36272kB low:45340kB high:54408kB active_anon:936860kB inactive_anon:17280kB active_file:29136kB inactive_file:91676kB unevictable:0kB writepending:1164kB present:3129332kB managed:2621192kB mlocked:0kB kernel_stack:11072kB pagetables:14228kB bounce:0kB free_pcp:1344kB local_pcp:736kB free_cma:0kB [ 325.217173] lowmem_reserve[]: 0 0 0 0 0 [ 325.221720] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 325.247393] lowmem_reserve[]: 0 0 0 0 0 [ 325.251447] Node 1 Normal free:3780144kB min:53612kB low:67012kB high:80412kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 325.279322] lowmem_reserve[]: 0 0 0 0 0 [ 325.283360] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15908kB [ 325.297231] Node 0 DMA32: 119*4kB (UME) 71*8kB (UME) 74*16kB (UME) 1045*32kB (UME) 517*64kB (UM) 148*128kB (UME) 131*256kB (UME) 77*512kB (UME) 25*1024kB (UM) 11*2048kB (UM) 8*4096kB (UM) = 241556kB [ 325.316254] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 325.327133] Node 1 Normal: 64*4kB (UE) 388*8kB (UE) 289*16kB (UM) 68*32kB (UM) 32*64kB (UME) 21*128kB (UM) 14*256kB (UM) 5*512kB (U) 3*1024kB (UM) 10*2048kB (UME) 912*4096kB (UM) = 3780144kB [ 325.344453] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 325.353469] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 325.362748] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 325.372280] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 325.381533] 23091 total pagecache pages [ 325.385537] 0 pages in swap cache [ 325.390004] Swap cache stats: add 0, delete 0, find 0/0 [ 325.395395] Free swap = 0kB [ 325.399524] Total swap = 0kB [ 325.402574] 1965979 pages RAM [ 325.405717] 0 pages HighMem/MovableOnly [ 325.415632] 339073 pages reserved [ 325.420002] 0 pages cma reserved [ 362.048740] NOHZ: local_softirq_pending 08 [ 381.247325] NOHZ: local_softirq_pending 08 [ 381.888786] NOHZ: local_softirq_pending 08 [ 422.208362] NOHZ: local_softirq_pending 08 [ 422.848446] NOHZ: local_softirq_pending 08 [ 423.487863] NOHZ: local_softirq_pending 08 [ 443.328408] NOHZ: local_softirq_pending 08 [ 463.807521] NOHZ: local_softirq_pending 08 [ 464.447660] NOHZ: local_softirq_pending 08 [ 524.606174] NOHZ: local_softirq_pending 08 [ 571.324925] INFO: task syz-executor.2:17761 blocked for more than 140 seconds. [ 571.332862] Not tainted 4.14.194-syzkaller #0 [ 571.339884] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 571.348774] syz-executor.2 D27856 17761 6376 0x80000004 [ 571.354424] Call Trace: [ 571.357906] __schedule+0x88b/0x1de0 [ 571.361648] ? io_schedule_timeout+0x140/0x140 [ 571.368722] ? lock_downgrade+0x740/0x740 [ 571.373017] schedule+0x8d/0x1b0 [ 571.377391] schedule_preempt_disabled+0xf/0x20 [ 571.382207] __mutex_lock+0x669/0x1310 [ 571.387097] ? perf_trace_lock_acquire+0x510/0x510 [ 571.392179] ? lo_ioctl+0x87/0x1cd0 [ 571.397282] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 571.402845] ? __bfs.part.0+0x174/0x470 [ 571.407723] lo_ioctl+0x87/0x1cd0 [ 571.411324] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 571.417326] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 571.422243] ? loop_set_status64+0xe0/0xe0 [ 571.427750] blkdev_ioctl+0x540/0x1830 [ 571.431849] ? blkpg_ioctl+0x8d0/0x8d0 [ 571.436848] ? set_blocksize+0x2a2/0x380 [ 571.441112] ? set_blocksize+0x115/0x380 [ 571.446395] ioctl_by_bdev+0xa0/0x110 [ 571.450356] hfs_mdb_get+0x192/0x1b3d [ 571.454285] ? __debug_object_init+0x3fc/0x7a0 [ 571.459772] ? hfs_mdb_put+0x370/0x370 [ 571.463730] ? __lockdep_init_map+0x100/0x560 [ 571.468449] ? __lockdep_init_map+0x100/0x560 [ 571.472969] hfs_fill_super+0xcdb/0x1250 [ 571.477110] ? set_precision+0x150/0x150 [ 571.481178] ? hfs_remount+0x1b0/0x1b0 [ 571.485258] ? reacquire_held_locks+0xb5/0x3f0 [ 571.489863] ? vsnprintf+0x260/0x1340 [ 571.493683] ? pointer+0x9e0/0x9e0 [ 571.497332] ? lock_downgrade+0x740/0x740 [ 571.501516] ? snprintf+0xa5/0xd0 [ 571.505262] ? vsprintf+0x30/0x30 [ 571.508730] ? ns_test_super+0x50/0x50 [ 571.512623] ? set_blocksize+0x125/0x380 [ 571.516764] mount_bdev+0x2b3/0x360 [ 571.520434] ? hfs_remount+0x1b0/0x1b0 [ 571.524326] mount_fs+0x92/0x2a0 [ 571.527833] vfs_kern_mount.part.0+0x5b/0x470 [ 571.532358] do_mount+0xe53/0x2a00 [ 571.535971] ? lock_acquire+0x170/0x3f0 [ 571.539953] ? lock_downgrade+0x740/0x740 [ 571.544168] ? copy_mount_string+0x40/0x40 [ 571.548543] ? __might_fault+0x177/0x1b0 [ 571.552615] ? _copy_from_user+0x96/0x100 [ 571.556867] ? copy_mount_options+0x1fa/0x2f0 [ 571.561366] ? copy_mnt_ns+0xa30/0xa30 [ 571.565404] SyS_mount+0xa8/0x120 [ 571.568869] ? copy_mnt_ns+0xa30/0xa30 [ 571.572754] do_syscall_64+0x1d5/0x640 [ 571.576702] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 571.581930] RIP: 0033:0x45d579 [ 571.585257] RSP: 002b:00007f7c10572c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 571.592994] RAX: ffffffffffffffda RBX: 0000000000021100 RCX: 000000000045d579 [ 571.600349] RDX: 0000000020000400 RSI: 0000000020000180 RDI: 0000000020000140 [ 571.607922] RBP: 000000000118cf90 R08: 0000000000000000 R09: 0000000000000000 [ 571.615263] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 571.622560] R13: 00007ffd48195bbf R14: 00007f7c105739c0 R15: 000000000118cf4c [ 571.630001] INFO: task syz-executor.2:17772 blocked for more than 140 seconds. [ 571.637509] Not tainted 4.14.194-syzkaller #0 [ 571.642526] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 571.650657] syz-executor.2 D28832 17772 6376 0x00000004 [ 571.656371] Call Trace: [ 571.658969] __schedule+0x88b/0x1de0 [ 571.662773] ? io_schedule_timeout+0x140/0x140 [ 571.667568] ? lock_downgrade+0x740/0x740 [ 571.671869] schedule+0x8d/0x1b0 [ 571.675305] schedule_preempt_disabled+0xf/0x20 [ 571.679989] __mutex_lock+0x669/0x1310 [ 571.683933] ? __blkdev_get+0x191/0x1090 [ 571.688173] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 571.693669] ? exact_match+0x9/0x20 [ 571.697399] ? disk_block_events+0x1d/0x120 [ 571.701735] __blkdev_get+0x191/0x1090 [ 571.705741] ? blkdev_get+0x422/0x890 [ 571.709610] ? lock_acquire+0x170/0x3f0 [ 571.713602] ? sb_min_blocksize+0x1d0/0x1d0 [ 571.718010] blkdev_get+0x441/0x890 [ 571.721651] ? __blkdev_get+0x1090/0x1090 [ 571.725941] ? mntput+0x5c/0x80 [ 571.729230] ? lookup_bdev+0x8c/0x1c0 [ 571.733112] ? bd_acquire+0x440/0x440 [ 571.736976] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 571.742451] blkdev_get_by_path+0x38/0xa0 [ 571.746751] mount_bdev+0x4c/0x360 [ 571.750293] ? hfs_remount+0x1b0/0x1b0 [ 571.754171] mount_fs+0x92/0x2a0 [ 571.757629] vfs_kern_mount.part.0+0x5b/0x470 [ 571.762133] do_mount+0xe53/0x2a00 [ 571.765795] ? lock_acquire+0x170/0x3f0 [ 571.769792] ? lock_downgrade+0x740/0x740 [ 571.773945] ? copy_mount_string+0x40/0x40 [ 571.779241] ? __might_fault+0x177/0x1b0 [ 571.783311] ? _copy_from_user+0x96/0x100 [ 571.787605] ? copy_mount_options+0x1fa/0x2f0 [ 571.792125] ? copy_mnt_ns+0xa30/0xa30 [ 571.796092] SyS_mount+0xa8/0x120 [ 571.799548] ? copy_mnt_ns+0xa30/0xa30 [ 571.803432] do_syscall_64+0x1d5/0x640 [ 571.807488] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 571.812715] RIP: 0033:0x45d579 [ 571.815982] RSP: 002b:00007f7c10551c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 571.823695] RAX: ffffffffffffffda RBX: 0000000000021100 RCX: 000000000045d579 [ 571.831125] RDX: 0000000020000400 RSI: 0000000020000180 RDI: 0000000020000140 [ 571.838486] RBP: 000000000118d030 R08: 0000000000000000 R09: 0000000000000000 [ 571.845876] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 571.853152] R13: 00007ffd48195bbf R14: 00007f7c105529c0 R15: 000000000118cfec [ 571.860570] INFO: task syz-executor.2:17806 blocked for more than 140 seconds. [ 571.868101] Not tainted 4.14.194-syzkaller #0 [ 571.873126] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 571.881176] syz-executor.2 D29040 17806 6376 0x00000004 [ 571.886973] Call Trace: [ 571.889566] __schedule+0x88b/0x1de0 [ 571.893287] ? io_schedule_timeout+0x140/0x140 [ 571.897960] ? lock_downgrade+0x740/0x740 [ 571.902126] schedule+0x8d/0x1b0 [ 571.906203] schedule_preempt_disabled+0xf/0x20 [ 571.910886] __mutex_lock+0x669/0x1310 [ 571.915774] ? __blkdev_get+0x191/0x1090 [ 571.919868] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 571.926079] ? exact_match+0x9/0x20 [ 571.929869] ? disk_block_events+0x1d/0x120 [ 571.934319] __blkdev_get+0x191/0x1090 [ 571.939512] ? check_preemption_disabled+0x35/0x240 [ 571.944550] ? sb_min_blocksize+0x1d0/0x1d0 [ 571.949069] blkdev_get+0x88/0x890 [ 571.952612] ? __blkdev_get+0x1090/0x1090 [ 571.956863] ? lock_downgrade+0x740/0x740 [ 571.961024] ? selinux_inode_getsecctx+0x80/0x80 [ 571.965928] ? do_raw_spin_unlock+0x164/0x220 [ 571.970432] ? _raw_spin_unlock+0x29/0x40 [ 571.974575] blkdev_open+0x1cc/0x250 [ 571.978387] ? security_file_open+0x82/0x190 [ 571.982805] do_dentry_open+0x44b/0xec0 [ 571.986899] ? blkdev_get_by_dev+0x70/0x70 [ 571.991156] vfs_open+0x105/0x220 [ 571.994790] path_openat+0x628/0x2970 [ 571.998613] ? path_lookupat+0x780/0x780 [ 572.002680] ? perf_trace_lock+0xf7/0x490 [ 572.006930] do_filp_open+0x179/0x3c0 [ 572.010746] ? may_open_dev+0xe0/0xe0 [ 572.014557] ? lock_downgrade+0x740/0x740 [ 572.018963] ? do_raw_spin_unlock+0x164/0x220 [ 572.023469] ? _raw_spin_unlock+0x29/0x40 [ 572.027708] ? __alloc_fd+0x1be/0x490 [ 572.031511] do_sys_open+0x296/0x410 [ 572.035297] ? filp_open+0x60/0x60 [ 572.038851] ? fput+0xb/0x140 [ 572.041968] ? do_syscall_64+0x4c/0x640 [ 572.046271] ? do_sys_open+0x410/0x410 [ 572.050216] do_syscall_64+0x1d5/0x640 [ 572.054132] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 572.059381] RIP: 0033:0x4170c1 [ 572.062571] RSP: 002b:00007f7c10530990 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 572.070444] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004170c1 [ 572.077906] RDX: 00007f7c10530bb0 RSI: 0000000000000002 RDI: 00007f7c10530bb0 [ 572.085271] RBP: 0000000000000000 R08: 00007f7c10530a28 R09: 0000000000000000 [ 572.092560] R10: 00007f7c10530a2c R11: 0000000000000293 R12: 0000000000000000 [ 572.099924] R13: 0000000000000005 R14: 0000000000000005 R15: 0000000000000010 [ 572.107331] INFO: task syz-executor.2:17765 blocked for more than 140 seconds. [ 572.114767] Not tainted 4.14.194-syzkaller #0 [ 572.119789] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 572.127843] syz-executor.2 D28960 17765 17761 0x00000004 [ 572.133539] Call Trace: [ 572.136205] __schedule+0x88b/0x1de0 [ 572.139938] ? io_schedule_timeout+0x140/0x140 [ 572.144540] ? mark_held_locks+0xa6/0xf0 [ 572.148761] ? _raw_spin_unlock_irq+0x24/0x80 [ 572.153275] ? rwsem_down_read_failed+0x1e6/0x350 [ 572.158229] schedule+0x8d/0x1b0 [ 572.161667] rwsem_down_read_failed+0x1e6/0x350 [ 572.166415] ? rt_mutex_futex_unlock+0xc0/0xc0 [ 572.171010] call_rwsem_down_read_failed+0x14/0x30 [ 572.176033] down_read+0x44/0x80 [ 572.179417] ? __get_super.part.0+0x271/0x390 [ 572.184043] __get_super.part.0+0x271/0x390 [ 572.188554] get_super+0x2b/0x50 [ 572.191931] fsync_bdev+0x14/0xc0 [ 572.195475] invalidate_partition+0x74/0xb0 [ 572.199814] drop_partitions.isra.0+0x83/0x150 [ 572.204427] ? delete_partition+0x180/0x180 [ 572.208880] ? check_nnp_nosuid.isra.0+0x270/0x270 [ 572.213828] ? blkdev_reread_part+0x1b/0x40 [ 572.218273] rescan_partitions+0xa9/0x800 [ 572.222488] __blkdev_reread_part+0x140/0x1d0 [ 572.227111] blkdev_reread_part+0x23/0x40 [ 572.231272] loop_set_status+0xeeb/0x12b0 [ 572.235550] loop_set_status64+0x92/0xe0 [ 572.239649] ? loop_set_status_old+0x200/0x200 [ 572.244245] ? __mutex_lock+0x360/0x1310 [ 572.248404] ? avc_ss_reset+0x100/0x100 [ 572.252406] ? set_blocksize+0x125/0x380 [ 572.256555] lo_ioctl+0x587/0x1cd0 [ 572.260107] ? loop_set_status64+0xe0/0xe0 [ 572.264342] blkdev_ioctl+0x540/0x1830 [ 572.268319] ? blkpg_ioctl+0x8d0/0x8d0 [ 572.272240] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 572.277424] block_ioctl+0xd9/0x120 [ 572.281322] ? blkdev_fallocate+0x3a0/0x3a0 [ 572.285731] do_vfs_ioctl+0x75a/0xff0 [ 572.289541] ? selinux_inode_setxattr+0x730/0x730 [ 572.294386] ? ioctl_preallocate+0x1a0/0x1a0 [ 572.298882] ? kmem_cache_free+0x23a/0x2b0 [ 572.303181] ? putname+0xcd/0x110 [ 572.306712] ? do_sys_open+0x208/0x410 [ 572.310606] ? security_file_ioctl+0x83/0xb0 [ 572.315090] SyS_ioctl+0x7f/0xb0 [ 572.318488] ? do_vfs_ioctl+0xff0/0xff0 [ 572.322470] do_syscall_64+0x1d5/0x640 [ 572.326455] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 572.331671] RIP: 0033:0x45d3e7 [ 572.334938] RSP: 002b:00007f7c105729f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 572.342653] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045d3e7 [ 572.350035] RDX: 00007f7c10572ac0 RSI: 0000000000004c04 RDI: 0000000000000006 [ 572.357413] RBP: 000000000118cf80 R08: 00007f7c10572a28 R09: 0000000000000000 [ 572.364786] R10: 00007f7c10572a2c R11: 0000000000000202 R12: 000000000118cf4c [ 572.372063] R13: 00007ffd48195bbf R14: 00007f7c105739c0 R15: 000000000118cf4c [ 572.379444] INFO: task systemd-udevd:17785 blocked for more than 140 seconds. [ 572.386811] Not tainted 4.14.194-syzkaller #0 [ 572.391829] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 572.399905] systemd-udevd D28912 17785 3661 0x00000104 [ 572.405663] Call Trace: [ 572.408258] __schedule+0x88b/0x1de0 [ 572.411964] ? io_schedule_timeout+0x140/0x140 [ 572.416639] ? lock_downgrade+0x740/0x740 [ 572.420806] schedule+0x8d/0x1b0 [ 572.424195] schedule_preempt_disabled+0xf/0x20 [ 572.428974] __mutex_lock+0x669/0x1310 [ 572.432879] ? __blkdev_get+0x191/0x1090 [ 572.437043] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 572.442512] ? exact_match+0x9/0x20 [ 572.446280] ? disk_block_events+0x1d/0x120 [ 572.451224] __blkdev_get+0x191/0x1090 [ 572.455192] ? check_preemption_disabled+0x35/0x240 [ 572.460224] ? sb_min_blocksize+0x1d0/0x1d0 [ 572.464554] blkdev_get+0x88/0x890 [ 572.468188] ? __blkdev_get+0x1090/0x1090 [ 572.472360] ? lock_downgrade+0x740/0x740 [ 572.476596] ? selinux_inode_getsecctx+0x80/0x80 [ 572.481369] ? do_raw_spin_unlock+0x164/0x220 [ 572.485971] ? _raw_spin_unlock+0x29/0x40 [ 572.490127] blkdev_open+0x1cc/0x250 [ 572.493834] ? security_file_open+0x82/0x190 [ 572.498342] do_dentry_open+0x44b/0xec0 [ 572.502324] ? blkdev_get_by_dev+0x70/0x70 [ 572.506639] vfs_open+0x105/0x220 [ 572.510106] path_openat+0x628/0x2970 [ 572.513931] ? path_lookupat+0x780/0x780 [ 572.518083] ? perf_trace_lock+0xf7/0x490 [ 572.522241] do_filp_open+0x179/0x3c0 [ 572.526364] ? may_open_dev+0xe0/0xe0 [ 572.530207] ? lock_downgrade+0x740/0x740 [ 572.534371] ? do_raw_spin_unlock+0x164/0x220 [ 572.538935] ? _raw_spin_unlock+0x29/0x40 [ 572.543117] ? __alloc_fd+0x1be/0x490 [ 572.547041] do_sys_open+0x296/0x410 [ 572.550883] ? filp_open+0x60/0x60 [ 572.554441] ? do_syscall_64+0x4c/0x640 [ 572.558554] ? do_sys_open+0x410/0x410 [ 572.562537] do_syscall_64+0x1d5/0x640 [ 572.566538] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 572.571904] RIP: 0033:0x7f38a2167840 [ 572.575709] RSP: 002b:00007ffdc260d078 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 572.583431] RAX: ffffffffffffffda RBX: 0000565295fc83b0 RCX: 00007f38a2167840 [ 572.590979] RDX: 0000565294f44fe3 RSI: 00000000000a0800 RDI: 0000565295fd2aa0 [ 572.598469] RBP: 00007ffdc260d1f0 R08: 0000565294f44670 R09: 0000000000000010 [ 572.606092] R10: 0000565294f44d0c R11: 0000000000000246 R12: 00007ffdc260d140 [ 572.613467] R13: 0000565295fcf130 R14: 0000000000000003 R15: 000000000000000e [ 572.620895] [ 572.620895] Showing all locks held in the system: [ 572.627417] 1 lock held by khungtaskd/1068: [ 572.632178] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7c/0x21a [ 572.641351] 2 locks held by agetty/6070: [ 572.645516] #0: (&tty->ldisc_sem){++++}, at: [] tty_ldisc_ref_wait+0x22/0x80 [ 572.654482] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e3/0x1680 [ 572.663960] 2 locks held by syz-executor.2/17761: [ 572.669116] #0: (&type->s_umount_key#83/1){+.+.}, at: [] sget_userns+0x556/0xc10 [ 572.678539] #1: (&lo->lo_ctl_mutex/1){+.+.}, at: [] lo_ioctl+0x87/0x1cd0 [ 572.687302] 1 lock held by syz-executor.2/17772: [ 572.692068] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x191/0x1090 [ 572.700895] 1 lock held by syz-executor.2/17806: [ 572.705762] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x191/0x1090 [ 572.714519] 3 locks held by syz-executor.2/17765: [ 572.719458] #0: (&lo->lo_ctl_mutex/1){+.+.}, at: [] lo_ioctl+0x87/0x1cd0 [ 572.728207] #1: (&bdev->bd_mutex){+.+.}, at: [] blkdev_reread_part+0x1b/0x40 [ 572.737363] #2: (&type->s_umount_key#84){.+.+}, at: [] __get_super.part.0+0x271/0x390 [ 572.747288] 1 lock held by systemd-udevd/17785: [ 572.751967] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x191/0x1090 [ 572.760761] [ 572.762392] ============================================= [ 572.762392] [ 572.769539] NMI backtrace for cpu 1 [ 572.773213] CPU: 1 PID: 1068 Comm: khungtaskd Not tainted 4.14.194-syzkaller #0 [ 572.780713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 572.790098] Call Trace: [ 572.792681] dump_stack+0x1b2/0x283 [ 572.796317] nmi_cpu_backtrace.cold+0x57/0x93 [ 572.800819] ? irq_force_complete_move.cold+0x7c/0x7c [ 572.806109] nmi_trigger_cpumask_backtrace+0x13a/0x17f [ 572.811400] watchdog+0x5b9/0xb40 [ 572.814940] ? hungtask_pm_notify+0x50/0x50 [ 572.819291] kthread+0x30d/0x420 [ 572.822643] ? kthread_create_on_node+0xd0/0xd0 [ 572.827306] ret_from_fork+0x24/0x30 [ 572.831158] Sending NMI from CPU 1 to CPUs 0: [ 572.836205] NMI backtrace for cpu 0 [ 572.836211] CPU: 0 PID: 3643 Comm: systemd-journal Not tainted 4.14.194-syzkaller #0 [ 572.836215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 572.836218] task: ffff88809452a100 task.stack: ffff888094598000 [ 572.836221] RIP: 0010:strlen+0x54/0x90 [ 572.836223] RSP: 0018:ffff88809459f7a0 EFLAGS: 00000006 [ 572.836229] RAX: ffffffff86ab654d RBX: dffffc0000000000 RCX: 0000000000000005 [ 572.836233] RDX: 0000000000000006 RSI: ffffffff87d84e60 RDI: ffffffff86ab6540 [ 572.836237] RBP: ffffffff86ab6540 R08: 0000000000000001 R09: ffffed10128b3f44 [ 572.836240] R10: 0000000000000000 R11: ffff88809452a100 R12: ffffffff87d6f180 [ 572.836244] R13: ffffffff87d84e60 R14: 0000000000000000 R15: ffff88809459f850 [ 572.836248] FS: 00007f91611318c0(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 572.836252] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 572.836255] CR2: 00007f915e973000 CR3: 00000000948c1000 CR4: 00000000001426f0 [ 572.836259] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 572.836263] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 572.836265] Call Trace: [ 572.836268] perf_trace_lock+0xc6/0x490 [ 572.836270] ? is_bpf_text_address+0xb8/0x150 [ 572.836273] ? perf_trace_lock_acquire+0x510/0x510 [ 572.836276] ? unwind_get_return_address+0x51/0x90 [ 572.836279] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 572.836282] ? __save_stack_trace+0xa0/0x160 [ 572.836285] ? kernel_text_address+0xbd/0xf0 [ 572.836288] ? avc_has_perm_noaudit+0x157/0x2a0 [ 572.836291] ? perf_trace_lock_acquire+0x510/0x510 [ 572.836293] lock_release+0x4df/0x870 [ 572.836296] ? lock_acquire+0x170/0x3f0 [ 572.836298] ? lock_downgrade+0x740/0x740 [ 572.836301] ? check_preemption_disabled+0x35/0x240 [ 572.836304] avc_has_perm_noaudit+0x17e/0x2a0 [ 572.836307] ? avc_has_extended_perms+0xbf0/0xbf0 [ 572.836310] ? lookup_fast+0x430/0xe30 [ 572.836313] selinux_inode_permission+0x380/0x580 [ 572.836316] ? selinux_bprm_set_creds+0xbe0/0xbe0 [ 572.836318] ? walk_component+0x3f1/0xbc0 [ 572.836321] ? lookup_fast+0xe30/0xe30 [ 572.836324] security_inode_permission+0xa8/0xf0 [ 572.836327] __inode_permission+0xc5/0x2f0 [ 572.836329] link_path_walk+0x16f/0x10a0 [ 572.836332] ? walk_component+0xbc0/0xbc0 [ 572.836335] path_openat+0x15e/0x2970 [ 572.836338] ? check_preemption_disabled+0x35/0x240 [ 572.836340] ? path_lookupat+0x780/0x780 [ 572.836343] ? perf_trace_lock+0xf7/0x490 [ 572.836345] do_filp_open+0x179/0x3c0 [ 572.836348] ? may_open_dev+0xe0/0xe0 [ 572.836351] ? lock_downgrade+0x740/0x740 [ 572.836353] ? do_raw_spin_unlock+0x164/0x220 [ 572.836356] ? _raw_spin_unlock+0x29/0x40 [ 572.836359] ? __alloc_fd+0x1be/0x490 [ 572.836361] do_sys_open+0x296/0x410 [ 572.836364] ? filp_open+0x60/0x60 [ 572.836366] ? do_syscall_64+0x4c/0x640 [ 572.836369] ? do_sys_open+0x410/0x410 [ 572.836371] do_syscall_64+0x1d5/0x640 [ 572.836374] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 572.836377] RIP: 0033:0x7f91606c1840 [ 572.836380] RSP: 002b:00007fff0a7f3a08 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 572.836386] RAX: ffffffffffffffda RBX: 00007fff0a7f3d10 RCX: 00007f91606c1840 [ 572.836390] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 0000559d52778320 [ 572.836394] RBP: 000000000000000d R08: 00000000000001e0 R09: 00000000ffffffff [ 572.836398] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 572.836401] R13: 0000559d52774060 R14: 00007fff0a7f3cd0 R15: 0000559d5277faa0 [ 572.836403] Code: c0 75 48 80 7d 00 00 74 39 48 bb 00 00 00 00 00 fc ff df 48 89 e8 48 83 c0 01 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a <38> ca 7f 04 84 d2 75 1f 80 38 00 75 de 48 83 c4 08 48 29 e8 5b [ 572.836731] Kernel panic - not syncing: hung_task: blocked tasks [ 573.193752] CPU: 1 PID: 1068 Comm: khungtaskd Not tainted 4.14.194-syzkaller #0 [ 573.201205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.210552] Call Trace: [ 573.213137] dump_stack+0x1b2/0x283 [ 573.216763] panic+0x1f9/0x42d [ 573.219975] ? add_taint.cold+0x16/0x16 [ 573.223950] watchdog+0x5ca/0xb40 [ 573.227408] ? hungtask_pm_notify+0x50/0x50 [ 573.231730] kthread+0x30d/0x420 [ 573.235096] ? kthread_create_on_node+0xd0/0xd0 [ 573.239781] ret_from_fork+0x24/0x30 [ 573.245031] Kernel Offset: disabled [ 573.248673] Rebooting in 86400 seconds..